Function at 0x427090
Capabilities:
Generate random numbers via rtlgenrandom

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x68
mov eax, dword [0x644040]
xor eax, ebp
mov dword [esp + 0x60], eax
lea ebx, [ebp + 0xc]
mov eax, dword [ebx - 4]
mov dword [esp + 0x24], eax
push 0x190
call fcn.00564ea5
add esp, 4
mov edi, eax
mov ecx, eax
push ebx
call fcn.00592da0
push 0x228
call fcn.00564ea5
add esp, 4
mov esi, eax
mov dword [esp + 0x20], esp
mov al, byte [ebx + 4]
mov byte [esp + 0x5c], al
mov eax, dword [ebx]
mov dword [esp + 0x58], eax
mov eax, dword [ebx + 8]
mov dword [esp], eax
mov dword [ebx + 8], 0
movzx ecx, word [ebx + 0xc]
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x10], eax
mov edx, dword [ebx + 0x10]
mov dword [esi], 0x622380
mov dword [esi + 4], 0x6223f0
mov dword [esi + 8], 0x622414
mov dword [esi + 0xc], 0x622420
mov ebx, dword [edi + 8]
mov dword [esi + 0x10], ebx
test ebx, ebx
je 0x42713a
xor eax, eax
inc eax
lock xadd dword [ebx], eax
cmp eax, 0x7fffffff
je 0x42772c
mov dword [esi + 0x1c], 0
mov dword [esi + 0x18], 2
mov dword [esi + 0x20], edi
mov eax, dword [esp + 0x58]
mov dword [esi + 0x24], eax
mov al, byte [esp + 0x5c]
mov byte [esi + 0x28], al
mov edi, dword [esp]
mov dword [esi + 0x2c], edi
mov word [esi + 0x30], cx
mov ecx, dword [esp + 0x10]
mov dword [esi + 0x38], ecx
mov dword [esi + 0x34], edx
xorps xmm0, xmm0
test al, al
jne 0x427613
movsd qword [esp], xmm0
call fcn.0040e130
movsd xmm0, qword [esp]
test al, al
jne 0x42718e
xorps xmm0, xmm0
movsd qword [esi + 0x40], xmm0
mov dword [esi + 0x48], 2
lea ebx, [esi + 0x4c]
mov dword [esi + 0x4c], 0
push 0xc
call fcn.00564ea5
add esp, 4
mov edi, eax
mov ecx, eax
push ebx
call fcn.0054c280
mov dword [esi + 0x50], edi
movzx eax, byte [esi + 0x30]
mov dword [esi + 0x54], eax
mov edx, dword [esi + 0x10]
xor ecx, ecx
mov eax, 0
test edx, edx
je 0x4271e5
xor eax, eax
inc eax
lock xadd dword [edx], eax
cmp eax, 0x7fffffff
je 0x42772f
mov eax, dword [esi + 0x10]
mov dword [esi + 0x58], edx
mov dword [esi + 0x5c], ecx
mov dword [esi + 0x60], ecx
mov ebx, dword [esi + 0x2c]
mov byte [esi + 0xd8], cl
xorps xmm0, xmm0
movups xmmword [esi + 0x68], xmm0
movups xmmword [esi + 0x78], xmm0
movups xmmword [esi + 0x88], xmm0
movups xmmword [esi + 0x98], xmm0
movups xmmword [esi + 0xa8], xmm0
movups xmmword [esi + 0xb8], xmm0
mov byte [esi + 0xc8], cl
test eax, eax
je 0x42723b
xor ecx, ecx
inc ecx
lock xadd dword [eax], ecx
cmp ecx, 0x7fffffff
je 0x427732
lea edx, [esi + 0x24]
lea ecx, [esi + 0xe0]
mov dword [esp], ecx
push edx
push eax
call fcn.0054c2d0
xor eax, eax
mov dword [esi + 0x128], eax
mov dword [esi + 0x12c], eax
mov dword [esi + 0x130], eax
lea ecx, [esi + 0x134]
mov dword [esi + 0x134], ecx
mov dword [esi + 0x138], ecx
lea ecx, [esi + 0x13c]
mov dword [esi + 0x13c], ecx
mov dword [esi + 0x140], ecx
lea ecx, [esi + 0x158]
xorps xmm0, xmm0
movups xmmword [esi + 0x144], xmm0
mov dword [esi + 0x154], eax
mov dword [esi + 0x158], ecx
mov dword [esi + 0x15c], ecx
lea ecx, [esi + 0x160]
mov dword [esi + 0x160], ecx
mov dword [esi + 0x164], ecx
mov dword [esi + 0x168], eax
mov dword [esi + 0x16c], eax
mov eax, ebx
shr eax, 0xe
mov ecx, ebx
shr ecx, 0x13
mov ecx, dword [ecx*4 + 0x64c804]
bt ecx, eax
jb 0x427741
mov eax, ebx
shr eax, 0x15
mov byte [eax + 0x654804], 1
mov dword [esi + 0x170], ebx
mov dword [esi + 0x174], 0
push 0x20
call fcn.00564ea5
add esp, 4
mov ebx, eax
mov eax, dword [esi + 0x10]
test eax, eax
je 0x427322
xor ecx, ecx
inc ecx
lock xadd dword [eax], ecx
cmp ecx, 0x7fffffff
je 0x427735
mov ecx, ebx
push esi
push eax
call fcn.00427890
mov dword [esi + 0x178], ebx
push 0x1c
call fcn.00564ea5
add esp, 4
mov ecx, dword [esi + 0x10]
test ecx, ecx
je 0x427355
xor edx, edx
inc edx
lock xadd dword [ecx], edx
cmp edx, 0x7fffffff
je 0x427738
xorps xmm0, xmm0
movups xmmword [eax + 8], xmm0
mov dword [eax + 0x18], ecx
mov dword [eax], 0x6229d8
mov dword [esi + 0x17c], eax
xor ebx, ebx
mov byte [esi + 0x180], bl
mov dword [esi + 0x18c], ebx
mov dword [esi + 0x188], ebx
lea eax, [esi + 0x194]
mov dword [esi + 0x194], ebx
mov dword [esi + 0x198], ebx
mov dword [esi + 0x190], eax
lea eax, [esi + 0x1a0]
mov dword [esi + 0x1a0], ebx
mov dword [esi + 0x1a4], ebx
mov dword [esi + 0x19c], eax
mov word [esi + 0x1a8], 0
lea eax, [esi + 0x1d4]
movups xmmword [esi + 0x1ac], xmm0
movups xmmword [esi + 0x1bc], xmm0
xorps xmm0, xmm0
movsd qword [esi + 0x1cc], xmm0
mov dword [esi + 0x1d4], eax
mov dword [esi + 0x1d8], eax
lea eax, [esi + 0x1dc]
mov dword [esi + 0x1dc], eax
mov dword [esi + 0x1e0], eax
mov dword [esi + 0x1e4], ebx
mov dword [esi + 0x1e8], ebx
lea edi, [esi + 0x1ec]
mov dword [esi + 0x1ec], edi
mov dword [esi + 0x1f0], edi
mov dword [esi + 0x1f4], ebx
mov byte [esi + 0x1f8], bl
mov dword [esi + 0x1fc], ebx
push 8
call fcn.00564ea5
add esp, 4
mov dword [eax], ebx
mov byte [eax + 4], bl
mov dword [esi + 0x200], eax
test eax, eax
je 0x427451
xor ecx, ecx
inc ecx
lock xadd dword [eax], ecx
cmp ecx, 0x7fffffff
je 0x42773b
mov dword [esi + 0x204], edi
lea eax, [esi + 0x208]
mov dword [esi + 0x208], eax
mov dword [esi + 0x20c], eax
mov dword [esi + 0x210], 0
cmp byte [esi + 0x28], 0
jne 0x4275e3
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x218], eax
push 8
call fcn.00564ea5
add esp, 4
mov dword [eax], 0
mov byte [eax + 4], 0
mov dword [esi + 0x21c], eax
test eax, eax
je 0x4274b7
xor ecx, ecx
inc ecx
lock xadd dword [eax], ecx
cmp ecx, 0x7fffffff
je 0x42773e
lea ebx, [esi + 8]
mov dword [esi + 0x220], esi
mov dword [esp + 0x44], 0x122
mov al, byte [0x64955e]
test al, al
jne 0x42775d
mov eax, esi
add eax, 4
mov dword [esp + 0x10], eax
mov ecx, dword [esp]
push ebx
call fcn.00427820
mov eax, dword [esi + 0x218]
mov ecx, dword [fcn.005515a0]
cmp ecx, 0x522100
jne 0x4275c9
xor eax, eax
lea ebx, [esp + 0x48]
mov dword [ebx + 4], eax
mov dword [ebx], eax
push ebx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edi, dword [ebx]
mov ebx, dword [ebx + 4]
mov eax, 0x7bd05af6
cmp eax, edi
mov eax, 0x863
sbb eax, ebx
jl 0x42778f
mov ecx, 0xf4240
mov eax, edi
mul ecx
imul ecx, ebx, 0xf4240
add ecx, edx
push dword [0x6496bc]
push dword [0x6496b8]
push ecx
push eax
call fcn.00588630
xor ecx, ecx
dec ecx
add eax, 0x1c9c380
adc edx, 0
mov edi, 0x7fffffff
cmovno edi, edx
cmovo eax, ecx
mov dword [esi + 0x18c], edi
mov dword [esi + 0x188], eax
mov edi, dword [esi + 0x20]
mov eax, dword [edi]
mov ebx, dword [eax + 0x14]
mov ecx, ebx
call dword [0x63e63c]
mov ecx, edi
push dword [esp + 0x10]
call ebx
mov esp, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
mov dword [eax], esi
lea esi, [ebp + 8]
mov eax, dword [esi + 0xc]
mov ecx, eax
shr ecx, 0xe
mov edx, eax
shr edx, 0x13
mov edx, dword [edx*4 + 0x64c804]
bt edx, ecx
jb 0x42774f
mov esi, dword [esi]
mov ecx, dword [esp + 0x60]
xor ecx, ebp
call fcn.00568175
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call dword [0x63e63c]
lea edi, [esp + 0x48]
push edi
call ecx
add esp, 4
mov eax, dword [edi]
mov edx, dword [edi + 4]
jmp 0x42754e
lea edi, [esi + 0xc8]
lea ecx, [esp + 0x48]
call fcn.0054ec90
cmp byte [esi + 0xd8], 0
jne 0x427782
movups xmm0, xmmword [esp + 0x48]
movups xmmword [edi], xmm0
mov byte [esi + 0xd8], 1
jmp 0x42747d
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x4276c9
xor eax, eax
dec eax
lea edi, [esp + 0x48]
mov dword [edi + 4], eax
mov dword [edi], eax
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x427719
call dword [0x63e63c]
push 8
push edi
call ecx
test eax, eax
je 0x42777f
mov eax, 0x1fffff
and eax, dword [esp + 0x4c]
movd xmm0, dword [esp + 0x48]
movd xmm1, eax
punpckldq xmm0, xmm1
movq qword [esp + 0x38], xmm0
fild qword [esp + 0x38]
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
sub esp, 0xc
movsd qword [esp], xmm0
mov dword [esp + 8], 0xffffffcb
call fcn.0057e24b
add esp, 0xc
fstp qword [esp + 0x28]
movsd xmm0, qword [0x632ae8]
xor eax, eax
ucomisd xmm0, qword [esp + 0x28]
seta al
movsd xmm0, qword [eax*8 + 0x632af0]
jmp 0x427178
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x427634
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x42781d
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x427634
push 8
push edi
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x427661
int3
int3
int3
int3
int3
int3
int3
int3
push ebx
call fcn.004f0de0
add esp, 4
jmp 0x4272ec
push eax
call fcn.004f1260
add esp, 4
jmp 0x4275b2
movzx ecx, al
lea eax, [esp + 0x48]
mov dword [eax], str.SequenceManager
lea edx, [esp + 0x44]
push esi
push 0x4e
push eax
call fcn.005c5aa0
add esp, 0xc
jmp 0x4274d5
int3
movups xmm0, xmmword [esp + 0x48]
movups xmmword [edi], xmm0
jmp 0x42747d
mov eax, dword [0x6496b8]
mov dword [esp], eax
mov ecx, dword [0x6496bc]
mov dword [esp + 0x14], ecx
push ecx
push eax
push ebx
push edi
call fcn.00588630
mov dword [esp + 8], eax
mov dword [esp + 0x18], edx
mul dword [esp]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 8]
imul ecx, dword [esp + 0x14]
add edx, ecx
mov eax, dword [esp + 0x18]
imul ecx, eax, 0xf4240
mov dword [esp + 0xc], ecx
imul eax, dword [esp]
add eax, edx
sub edi, dword [esp + 0x1c]
sbb ebx, eax
mov ecx, 0xf4240
mov eax, dword [esp + 8]
mul ecx
mov dword [esp + 8], eax
add edx, dword [esp + 0xc]
mov dword [esp + 0xc], edx
mov eax, edi
mul ecx
imul ecx, ebx, 0xf4240
add edx, ecx
push dword [esp + 0x14]
push dword [esp + 4]
push edx
push eax
call fcn.00588630
add eax, dword [esp + 8]
adc edx, dword [esp + 0xc]
jmp 0x42754e
int3