Function at 0x45d9a0
Capabilities:
Generate random numbers via rtlgenrandom
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x10
mov esi, dword [ebp + 8]
mov eax, dword [0x64a040]
xor eax, ebp
mov dword [esp + 8], eax
xorps xmm0, xmm0
movsd qword [esi], xmm0
mov dword [esi + 8], 0
xor edi, edi
dec edi
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e190
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e6f0
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e690
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45d9d0
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e1e0
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e707
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e693
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45da4b
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e230
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e71e
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e696
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45dac6
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e280
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e735
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e699
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45db41
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e2d0
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e74c
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e69c
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45dbbc
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e320
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e763
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e69f
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45dc37
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e370
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e77a
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e6a2
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45dcb2
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e3c0
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e791
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e6a5
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45dd2d
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e410
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e7a8
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e6a8
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45dda8
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e460
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e7bf
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e6ab
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45de23
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e4b0
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e7d6
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e6ae
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45de9e
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e500
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e7ed
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e6b1
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45df19
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e550
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e804
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e6b4
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45df94
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e5a0
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e81b
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e6b7
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45e00f
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e5f0
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e832
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e6ba
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45e08a
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x45e640
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x45e849
call dword [0x6445dc]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x45e6bd
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x45e105
push 0
push 0x1a
push ecx
push eax
call fcn.0059d6e0
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.00520dd0
mov ecx, dword [esp + 8]
xor ecx, ebp
call fcn.005810d5
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45d9f8
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6c0
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45d9f8
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45da73
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6c3
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45da73
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45daee
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6c6
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45daee
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45db69
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6c9
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45db69
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45dbe4
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6cc
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45dbe4
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45dc5f
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6cf
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45dc5f
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45dcda
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6d2
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45dcda
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45dd55
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6d5
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45dd55
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45ddd0
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6d8
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45ddd0
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45de4b
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6db
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45de4b
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45dec6
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6de
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45dec6
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45df41
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6e1
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45df41
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45dfbc
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6e4
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45dfbc
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45e037
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6e7
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45e037
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45e0b2
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6ea
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45e0b2
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x45e12d
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x45e6ed
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x45e12d
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45da1d
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45da98
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45db13
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45db8e
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45dc09
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45dc84
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45dcff
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45dd7a
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45ddf5
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45de70
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45deeb
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45df66
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45dfe1
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45e05c
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45e0d7
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x45e152
int3