Function at 0x4165d0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xd0
mov esi, esp
mov dword [esi + 0xb8], ebp
mov dword [esi + 0xbc], esp
mov dword [esi + 0xc8], 0xffffffff
mov dword [esi + 0xc4], 0x4185f0
lea eax, [esi + 0xc0]
mov ecx, dword fs:[0]
mov dword [esi + 0xc0], ecx
mov dword fs:[0], eax
mov dword [esi], 0x80000003
mov dword [esi + 0xc], 0x80000003
call fcn.004357f0
mov ecx, dword [eax]
or ecx, dword [eax + 4]
je 0x41663c
movdqu xmm0, xmmword [eax + 8]
mov edi, eax
jmp 0x416678
xorps xmm0, xmm0
mov dword [esi + 0x20], eax
mov dword [esi + 0xc8], 0
lea eax, [esi + 0x50]
movaps xmmword [esi + 0x50], xmm0
push 0x10
push eax
call dword [sym.imp.bcryptprimitives.dll_ProcessPrng]
mov eax, dword [esi + 0x20]
movdqa xmm0, xmmword [esi + 0x50]
mov edi, eax
mov dword [eax + 4], 0
mov dword [eax], 1
movdqu xmmword [eax + 8], xmm0
add edi, 8
movd edx, xmm0
pshufd xmm1, xmm0, 0x55
add edx, 1
movd ecx, xmm1
adc ecx, 0
mov dword [edi], edx
mov dword [edi + 4], ecx
mov dword [esi + 0x38], 0x80000003
mov dword [esi + 0x44], 0x80000003
movsd xmm1, qword [esi + 0x10]
movsd xmm3, qword [esi]
movsd xmm2, qword [esi + 8]
movsd qword [esi + 0x98], xmm1
movsd qword [esi + 0x90], xmm2
movsd qword [esi + 0x88], xmm3
mov word [esi + 0xac], 0
mov dword [esi + 0x50], 0
movdqu xmmword [esi + 0x58], xmm0
mov dword [esi + 0x68], 0
mov dword [esi + 0x6c], 8
mov dword [esi + 0x70], 0
mov dword [esi + 0x74], 0x461060
mov dword [esi + 0x78], 0
mov dword [esi + 0x7c], 0
mov dword [esi + 0x80], 0
mov dword [esi + 0xa0], 1
mov dword [esi + 0xa4], 0
mov dword [esi + 0xa8], 0
call fcn.004357f0
mov ecx, dword [eax]
or ecx, dword [eax + 4]
je 0x416743
movdqu xmm0, xmmword [eax + 8]
mov ebx, eax
jmp 0x41677e
pxor xmm0, xmm0
mov dword [esi + 0x20], eax
mov dword [esi + 0xc8], 2
mov eax, esi
movdqa xmmword [esi], xmm0
push 0x10
push eax
call dword [sym.imp.bcryptprimitives.dll_ProcessPrng]
mov eax, dword [esi + 0x20]
movdqa xmm0, xmmword [esi]
mov ebx, eax
mov dword [eax + 4], 0
mov dword [eax], 1
movdqu xmmword [eax + 8], xmm0
add ebx, 8
movdqa xmm1, xmm0
movdqa xmmword [esi + 0x20], xmm0
pshufd xmm0, xmm0, 0x55
mov edi, dword [ebp + 8]
movd edx, xmm1
movd ecx, xmm0
add edx, 1
adc ecx, 0
mov dword [ebx], edx
mov dword [ebx + 4], ecx
lea eax, [edi + 0x60]
lea ecx, [esi + 0x50]
movsd xmm0, qword [esi + 0x48]
movsd xmm2, qword [esi + 0x38]
movsd xmm1, qword [esi + 0x40]
movsd qword [esi + 0x14], xmm0
movsd qword [esi + 0xc], xmm1
movsd qword [esi + 4], xmm2
push 0x60
push ecx
push eax
call fcn.00457b70
add esp, 0xc
movaps xmm0, xmmword [esi + 0x20]
movsd xmm1, qword [esi + 8]
mov eax, dword [esi + 0x18]
mov dword [edi], 0
movsd xmm2, qword [esi]
movups xmmword [edi + 8], xmm0
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 8
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0x461060
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
movsd qword [edi + 0x3c], xmm1
movsd xmm1, qword [esi + 0x10]
mov dword [edi + 0x4c], eax
mov eax, dword [esi + 0xc0]
movsd qword [edi + 0x34], xmm2
movsd qword [edi + 0x44], xmm1
mov dword [edi + 0x50], 0
mov word [edi + 0x5c], 0
mov dword [edi + 0xc0], 0
mov dword [edi + 0xd8], 0
mov byte [edi + 0xdc], 0
mov dword [edi + 0xcc], 0
mov dword [edi + 0xd0], 4
mov dword [edi + 0xd4], 0
mov dword fs:[0], eax
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret