Function at 0x1400c02e8
Capabilities:
Contain obfuscated stackstrings
Generate random numbers via winapi

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xf0
mov rax, qword [0x140436b28]
xor rax, rsp
mov qword [rbp + 0x27], rax
xor r12d, r12d
mov dword [rbp - 0x49], 0x73006d
mov ebx, r12d
mov r15, rcx
mov qword [rbp - 0x71], rbx
mov dword [rbp - 0x45], 0x740066
mov dword [rbp - 0x41], 0x73003a
mov dword [rbp - 0x3d], 0x700070
mov dword [rbp - 0x39], 0x63002f
mov dword [rbp - 0x35], 0x630061
mov dword [rbp - 0x31], 0x650068
mov dword [rbp - 0x2d], 0x740073
mov dword [rbp - 0x29], 0x72006f
mov dword [rbp - 0x25], 0x2f0065
mov dword [rbp - 0x21], 0x730025
mov word [rbp - 0x1d], r12w
mov dword [rbp - 0x59], 0x6d0048
mov dword [rbp - 0x55], 0x630061
mov dword [rbp - 0x51], 0x65004b
mov dword [rbp - 0x4d], 0x79
mov qword [rbp - 0x79], r12
cmp dword [rcx + 0x88], r12d
jne 0x1400c0594
cmp dword [rcx + 0x78], r12d
je 0x1400c0594
cmp dword [0x1404405a8], 1
lea r13d, [r12 + 0x40]
mov r14d, r12d
je 0x1400c03c8
mov r14d, 0x8000ffff
jmp 0x1400c0403
mov rcx, qword [0x14043f390]
lea r8, [rbp - 0x19]
mov edx, r13d
call qword [sym.imp.ADVAPI32.dll_CryptGenRandom]
test eax, eax
jne 0x1400c040b
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1400c03f2
mov r14d, 0x80004005
jmp 0x1400c0403
movzx r14d, ax
or r14d, 0x80070000
test eax, eax
cmovle r14d, eax
mov ecx, r14d
call fcn.140079c40
mov ecx, r14d
call fcn.140079c60
test r14d, r14d
jns 0x1400c0420
mov ecx, r14d
jmp 0x1400c0599
lea r8, [rbp - 0x59]
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x71]
call fcn.140078d44
mov r14d, eax
test eax, eax
jns 0x1400c0448
mov ecx, eax
call fcn.140079c40
mov rbx, qword [rbp - 0x71]
jmp 0x1400c059e
mov rsi, qword [0x14043f540]
lea rax, str.__Global__
mov rbx, qword [rbp - 0x71]
mov qword [rbp - 0x69], rax
mov qword [rbp - 0x61], r12
mov rax, qword [rsi]
mov rdi, qword [rax + 0x20]
mov rax, qword [0x1403c1610]
mov rcx, rdi
call rax
mov dword [rsp + 0x30], 1
lea r9, [rbp - 0x19]
mov rax, rdi
mov dword [rsp + 0x28], r12d
mov r8, rbx
mov dword [rsp + 0x20], r13d
lea rdx, [rbp - 0x69]
mov rcx, rsi
call rax
mov r14d, eax
test eax, eax
jns 0x1400c04a8
mov ecx, eax
jmp 0x1400c0599
mov rsi, qword [0x14043f538]
mov rax, qword [rsi]
mov rdi, qword [rax + 0x18]
mov rax, qword [0x1403c1610]
mov rcx, rdi
call rax
mov rax, rdi
lea r8, [rbp - 0x79]
mov edx, r13d
mov rcx, rsi
call rax
mov r14d, eax
test eax, eax
js 0x1400c04a1
mov rdi, qword [rbp - 0x79]
mov rax, qword [rdi]
mov rsi, qword [rax + 0x20]
mov rax, qword [0x1403c1610]
mov rcx, rsi
call rax
mov rax, rsi
lea r8, [rbp - 0x19]
mov r9d, r13d
xor edx, edx
mov rcx, rdi
call rax
mov r14d, eax
test eax, eax
js 0x1400c04a1
mov rsi, qword [r15 + 0x70]
lea rdi, [rbp - 0x19]
xor eax, eax
mov rcx, r13
rep stosb byte [rdi], al
test rsi, rsi
je 0x1400c053d
mov rax, qword [rsi]
mov rdi, qword [rax + 0x10]
mov rax, qword [0x1403c1610]
mov rcx, rdi
call rax
mov rax, rdi
mov rcx, rsi
call rax
mov qword [r15 + 0x70], r12
mov rsi, r12
mov r14, qword [rbp - 0x79]
mov qword [rbp - 0x79], r12
test rsi, rsi
je 0x1400c0565
mov rax, qword [rsi]
mov rdi, qword [rax + 0x10]
mov rax, qword [0x1403c1610]
mov rcx, rdi
call rax
mov rax, rdi
mov rcx, rsi
call rax
test r14, r14
mov rax, r12
mov rcx, r15
cmovne rax, r14
mov qword [r15 + 0x70], rax
mov dword [r15 + 0x78], r12d
call fcn.1400c0bfc
mov r14d, eax
test eax, eax
js 0x1400c04a1
mov dword [r15 + 0x7c], 1
jmp 0x1400c059e
mov r14d, r12d
xor ecx, ecx
call fcn.140079c40
mov ecx, r14d
call fcn.140079c60
mov rdi, qword [rbp - 0x79]
test rdi, rdi
je 0x1400c05ce
mov rax, qword [rdi]
mov rsi, qword [rax + 0x10]
mov rax, qword [0x1403c1610]
mov rcx, rsi
call rax
mov rax, rsi
mov rcx, rdi
call rax
mov qword [rbp - 0x79], r12
test rbx, rbx
je 0x1400c05ef
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
lea r8, [rbx - 4]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor ecx, ecx
call fcn.140079c60
mov eax, r14d
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.14037a9a0
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret