Function at 0x1400c8748
Capabilities:
Contain obfuscated stackstrings
Generate random numbers via winapi

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xf0
mov rax, qword [0x140448b38]
xor rax, rsp
mov qword [rbp + 0x27], rax
xor r12d, r12d
mov dword [rbp - 0x49], 0x73006d
mov ebx, r12d
mov r15, rcx
mov qword [rbp - 0x71], rbx
mov dword [rbp - 0x45], 0x740066
mov dword [rbp - 0x41], 0x73003a
mov dword [rbp - 0x3d], 0x700070
mov dword [rbp - 0x39], 0x63002f
mov dword [rbp - 0x35], 0x630061
mov dword [rbp - 0x31], 0x650068
mov dword [rbp - 0x2d], 0x740073
mov dword [rbp - 0x29], 0x72006f
mov dword [rbp - 0x25], 0x2f0065
mov dword [rbp - 0x21], 0x730025
mov word [rbp - 0x1d], r12w
mov dword [rbp - 0x59], 0x6d0048
mov dword [rbp - 0x55], 0x630061
mov dword [rbp - 0x51], 0x65004b
mov dword [rbp - 0x4d], 0x79
mov qword [rbp - 0x79], r12
cmp dword [rcx + 0x88], r12d
jne 0x1400c89c7
cmp dword [rcx + 0x78], r12d
je 0x1400c89c7
cmp dword [0x1404528d8], 1
lea r13d, [r12 + 0x40]
mov r14d, r12d
je 0x1400c8828
mov r14d, 0x8000ffff
jmp 0x1400c8863
mov rcx, qword [0x1404515e0]
lea r8, [rbp - 0x19]
mov edx, r13d
call qword [sym.imp.ADVAPI32.dll_CryptGenRandom]
test eax, eax
jne 0x1400c886b
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1400c8852
mov r14d, 0x80004005
jmp 0x1400c8863
movzx r14d, ax
or r14d, 0x80070000
test eax, eax
cmovle r14d, eax
mov ecx, r14d
call fcn.140082a8c
mov ecx, r14d
call fcn.140082b34
test r14d, r14d
jns 0x1400c8880
mov ecx, r14d
jmp 0x1400c89cc
lea r8, [rbp - 0x59]
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x71]
call fcn.140081d18
mov r14d, eax
test eax, eax
jns 0x1400c88a8
mov ecx, eax
call fcn.140082a8c
mov rbx, qword [rbp - 0x71]
jmp 0x1400c89d1
mov rsi, qword [0x140451790]
lea rax, str.__Global__
mov rbx, qword [rbp - 0x71]
mov qword [rbp - 0x69], rax
mov qword [rbp - 0x61], r12
mov rax, qword [rsi]
mov rdi, qword [rax + 0x20]
mov rax, qword [0x1403cf6d0]
mov rcx, rdi
call rax
mov dword [rsp + 0x30], 1
lea r9, [rbp - 0x19]
mov rax, rdi
mov dword [rsp + 0x28], r12d
mov r8, rbx
mov dword [rsp + 0x20], r13d
lea rdx, [rbp - 0x69]
mov rcx, rsi
call rax
mov r14d, eax
test eax, eax
jns 0x1400c8908
mov ecx, eax
jmp 0x1400c89cc
mov rsi, qword [0x140451788]
mov rax, qword [rsi]
mov rdi, qword [rax + 0x18]
mov rax, qword [0x1403cf6d0]
mov rcx, rdi
call rax
mov rax, rdi
lea r8, [rbp - 0x79]
mov edx, r13d
mov rcx, rsi
call rax
mov r14d, eax
test eax, eax
js 0x1400c8901
mov rdi, qword [rbp - 0x79]
mov rax, qword [rdi]
mov rsi, qword [rax + 0x20]
mov rax, qword [0x1403cf6d0]
mov rcx, rsi
call rax
mov rax, rsi
lea r8, [rbp - 0x19]
mov r9d, r13d
xor edx, edx
mov rcx, rdi
call rax
mov r14d, eax
test eax, eax
js 0x1400c8901
mov rsi, qword [r15 + 0x70]
lea rdi, [rbp - 0x19]
xor eax, eax
mov rcx, r13
rep stosb byte [rdi], al
test rsi, rsi
je 0x1400c899a
mov rax, qword [rsi]
mov rdi, qword [rax + 0x10]
mov rax, qword [0x1403cf6d0]
mov rcx, rdi
call rax
mov rax, rdi
mov rcx, rsi
call rax
mov qword [r15 + 0x70], r12
mov rax, qword [rbp - 0x79]
mov rcx, r15
mov qword [r15 + 0x70], rax
mov dword [r15 + 0x78], r12d
mov qword [rbp - 0x79], r12
call fcn.1400c9030
mov r14d, eax
test eax, eax
js 0x1400c8901
mov dword [r15 + 0x7c], 1
jmp 0x1400c89d1
mov r14d, r12d
xor ecx, ecx
call fcn.140082a8c
mov ecx, r14d
call fcn.140082b34
mov rdi, qword [rbp - 0x79]
test rdi, rdi
je 0x1400c8a01
mov rax, qword [rdi]
mov rsi, qword [rax + 0x10]
mov rax, qword [0x1403cf6d0]
mov rcx, rsi
call rax
mov rax, rsi
mov rcx, rdi
call rax
mov qword [rbp - 0x79], r12
test rbx, rbx
je 0x1400c8a22
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
lea r8, [rbx - 4]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor ecx, ecx
call fcn.140082b34
mov eax, r14d
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140389660
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret