Function at 0x100e47f0
Capabilities:
Generate random numbers via rtlgenrandom

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x50
mov eax, dword [0x101b9014]
xor eax, ebp
mov dword [esp + 0x48], eax
mov eax, dword [ecx + 0x64]
movzx eax, byte [eax + 0x1f]
mov byte [esp + 7], al
cmp al, 1
je 0x100e4d50
mov esi, dword [ecx + 8]
mov eax, dword [esi + 4]
sub eax, dword [esi]
mov dword [esp + 0x28], esi
je 0x100e4893
sar eax, 3
push 0
mov dword [esp + 0x10], eax
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
call fcn.1016c7e0
mov edi, 0xfffffffe
sub edi, eax
mov ebx, 0xffffffff
sbb ebx, edx
lea esi, [esp + 0x38]
nop dword [eax]
mov dword [esp + 0x3c], 0xffffffff
mov dword [esp + 0x38], 0xffffffff
push 8
push esi
call sub.ADVAPI32.dll_SystemFunction036
test al, al
je 0x100e4d63
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
cmp edi, eax
mov edx, ebx
sbb edx, ecx
jb 0x100e4850
push 0
push dword [esp + 0x10]
push ecx
push eax
call fcn.1016c7e0
mov esi, dword [esp + 0x28]
jmp 0x100e4895
xor eax, eax
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
movzx ecx, byte [esi + 0xc]
test cl, 1
jne 0x100e4a42
mov edi, dword [esi]
lea eax, [edi + eax*8]
mov dword [esp + 0x34], eax
cmp eax, dword [esi + 4]
mov dword [esp + 0x24], eax
je 0x100e4a59
mov edi, eax
jmp 0x100e48fc
mov edi, dword [esp + 0x14]
mov byte [edi + 5], 1
mov esi, dword [esp + 0x28]
add edi, 8
mov dword [esp + 0x34], edi
cmp edi, dword [esi + 4]
je 0x100e4a53
movzx eax, byte [edi + 5]
test al, 1
jne 0x100e48ec
movzx eax, byte [edi + 4]
test al, 1
jne 0x100e4a30
mov byte [edi + 4], 1
mov dword [esp + 0x14], edi
mov eax, dword [edi]
mov ecx, dword [eax + 0x1000]
mov dword [esp + 0x18], ecx
and eax, 0xffe00000
mov dword [esp + 0x1c], eax
add eax, 0x4000
mov dword [esp + 0x10], eax
xor ecx, ecx
jmp 0x100e494d
mov ecx, dword [esp + 8]
inc ecx
cmp ecx, 0x4000
je 0x100e48e0
mov eax, dword [esp + 0x10]
mov dword [esp + 8], ecx
mov esi, dword [eax + ecx*4]
test esi, esi
je 0x100e4940
mov eax, dword [esp + 8]
mov ecx, eax
shl ecx, 7
mov dword [esp + 0xc], ecx
shr eax, 7
and eax, 0x7f
mov dword [esp + 0x20], eax
jmp 0x100e4986
not ebx
and esi, ebx
je 0x100e4940
tzcnt eax, esi
mov ecx, eax
and cl, 0x1e
mov ebx, 3
shl ebx, cl
mov edx, esi
shr edx, cl
and edx, 3
lea ecx, [edx - 1]
test edx, ecx
setne cl
test edx, edx
sete dl
or dl, cl
jne 0x100e4980
shl eax, 2
or eax, dword [esp + 0xc]
and eax, 0x7ffffff8
add eax, dword [esp + 0x1c]
mov ecx, eax
and ecx, 0xffe00000
mov edx, dword [esp + 0x20]
shl edx, 5
lea edi, [edx + ecx]
movzx ecx, byte [edx + ecx + 0x101e]
and ecx, 0x3f
shl ecx, 5
sub edi, ecx
test byte [edi + 0x100f], 8
lea ecx, [edi + 0x1000]
jne 0x100e4a19
mov ecx, dword [ecx + 8]
add ecx, 0xc
cmp byte [esp + 7], 0
jne 0x100e4980
mov ecx, dword [ecx]
mov edx, dword [esp + 0x18]
sub ecx, dword [edx + 0xc]
add eax, dword [edx + 0x10]
push ecx
push 0
push eax
call fcn.10149430
add esp, 0xc
jmp 0x100e4980
add ecx, 0x20
cmp byte [esp + 7], 0
jne 0x100e4980
jmp 0x100e49fc
lea ecx, [esp + 0x38]
lea edx, [esp + 0x34]
call fcn.100e8940
jmp 0x100e48ec
mov ecx, dword [esp + 0x38]
test ecx, ecx
jne 0x100e4d4b
jmp 0x100e4d50
mov edi, dword [esi]
mov eax, dword [esp + 0x24]
mov dword [esp + 0x34], edi
cmp edi, eax
je 0x100e4bd2
mov esi, eax
jmp 0x100e4a8b
mov edi, dword [esp + 0x14]
mov byte [edi + 5], 1
mov esi, dword [esp + 0x24]
add edi, 8
mov dword [esp + 0x34], edi
cmp edi, esi
je 0x100e4bd2
movzx eax, byte [edi + 5]
test al, 1
jne 0x100e4a7c
movzx eax, byte [edi + 4]
test al, 1
jne 0x100e4bc0
mov byte [edi + 4], 1
mov dword [esp + 0x14], edi
mov eax, dword [edi]
mov ecx, dword [eax + 0x1000]
mov dword [esp + 0x18], ecx
and eax, 0xffe00000
mov dword [esp + 0x1c], eax
add eax, 0x4000
mov dword [esp + 0x10], eax
xor ecx, ecx
jmp 0x100e4add
mov ecx, dword [esp + 8]
inc ecx
cmp ecx, 0x4000
je 0x100e4a70
mov eax, dword [esp + 0x10]
mov dword [esp + 8], ecx
mov esi, dword [eax + ecx*4]
test esi, esi
je 0x100e4ad0
mov eax, dword [esp + 8]
mov ecx, eax
shl ecx, 7
mov dword [esp + 0xc], ecx
shr eax, 7
and eax, 0x7f
mov dword [esp + 0x20], eax
jmp 0x100e4b16
not ebx
and esi, ebx
je 0x100e4ad0
tzcnt eax, esi
mov ecx, eax
and cl, 0x1e
mov ebx, 3
shl ebx, cl
mov edx, esi
shr edx, cl
and edx, 3
lea ecx, [edx - 1]
test edx, ecx
setne cl
test edx, edx
sete dl
or dl, cl
jne 0x100e4b10
shl eax, 2
or eax, dword [esp + 0xc]
and eax, 0x7ffffff8
add eax, dword [esp + 0x1c]
mov ecx, eax
and ecx, 0xffe00000
mov edx, dword [esp + 0x20]
shl edx, 5
lea edi, [edx + ecx]
movzx ecx, byte [edx + ecx + 0x101e]
and ecx, 0x3f
shl ecx, 5
sub edi, ecx
test byte [edi + 0x100f], 8
lea ecx, [edi + 0x1000]
jne 0x100e4ba9
mov ecx, dword [ecx + 8]
add ecx, 0xc
cmp byte [esp + 7], 0
jne 0x100e4b10
mov ecx, dword [ecx]
mov edx, dword [esp + 0x18]
sub ecx, dword [edx + 0xc]
add eax, dword [edx + 0x10]
push ecx
push 0
push eax
call fcn.10149430
add esp, 0xc
jmp 0x100e4b10
add ecx, 0x20
cmp byte [esp + 7], 0
jne 0x100e4b10
jmp 0x100e4b8c
lea ecx, [esp + 0x38]
lea edx, [esp + 0x34]
call fcn.100e8940
jmp 0x100e4a7c
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
cmp ecx, edx
je 0x100e4d3f
mov esi, ecx
nop word cs:[eax + eax]
mov edi, dword [esi]
movzx eax, byte [edi + 5]
test al, 1
je 0x100e4c06
add esi, 4
cmp esi, edx
jne 0x100e4bf0
jmp 0x100e4d3f
mov dword [esp + 0x30], edx
mov dword [esp + 0x24], ecx
mov byte [edi + 4], 1
mov dword [esp + 0x2c], edi
mov eax, dword [edi]
mov ecx, dword [eax + 0x1000]
mov dword [esp + 8], ecx
and eax, 0xffe00000
mov dword [esp + 0x18], eax
add eax, 0x4000
mov dword [esp + 0x14], eax
xor ecx, ecx
jmp 0x100e4c49
mov ecx, dword [esp + 0x10]
inc ecx
cmp ecx, 0x4000
je 0x100e4d2a
mov eax, dword [esp + 0x14]
mov dword [esp + 0x10], ecx
mov ebx, dword [eax + ecx*4]
test ebx, ebx
je 0x100e4c38
mov eax, dword [esp + 0x10]
mov ecx, eax
shl ecx, 7
mov dword [esp + 0x20], ecx
shr eax, 7
and eax, 0x7f
mov dword [esp + 0x1c], eax
jmp 0x100e4c86
not edi
and ebx, edi
je 0x100e4c38
tzcnt eax, ebx
mov ecx, eax
and cl, 0x1e
mov edi, 3
shl edi, cl
mov edx, ebx
shr edx, cl
and edx, 3
lea ecx, [edx - 1]
test edx, ecx
setne cl
test edx, edx
sete dl
or dl, cl
jne 0x100e4c80
mov dword [esp + 0xc], edi
shl eax, 2
or eax, dword [esp + 0x20]
and eax, 0x7ffffff8
add eax, dword [esp + 0x18]
mov ecx, eax
and ecx, 0xffe00000
mov edx, dword [esp + 0x1c]
shl edx, 5
lea edi, [edx + ecx]
movzx ecx, byte [edx + ecx + 0x101e]
and ecx, 0x3f
shl ecx, 5
sub edi, ecx
test byte [edi + 0x100f], 8
lea ecx, [edi + 0x1000]
jne 0x100e4d25
mov ecx, dword [ecx + 8]
add ecx, 0xc
cmp byte [esp + 7], 0
mov edi, dword [esp + 0xc]
jne 0x100e4c80
mov ecx, dword [ecx]
mov edx, dword [esp + 8]
sub ecx, dword [edx + 0xc]
add eax, dword [edx + 0x10]
push ecx
push 0
push eax
call fcn.10149430
add esp, 0xc
jmp 0x100e4c80
add ecx, 0x20
jmp 0x100e4cf9
mov eax, dword [esp + 0x2c]
mov byte [eax + 5], 1
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x30]
jmp 0x100e4bfa
mov eax, dword [esp + 0x28]
mov byte [eax + 0xc], 1
test ecx, ecx
je 0x100e4d50
call fcn.100e9130
mov ecx, dword [esp + 0x48]
xor ecx, ebp
call fcn.101465a3
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3