Function at 0x10005dedc
Capabilities:
Generate random numbers via winapi

Disassembly:
mov r11, rsp
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x288
mov rax, qword [0x10010f190]
xor rax, rsp
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0x2f8]
xor r13d, r13d
mov rsi, rcx
mov qword [rsp + 0x118], rax
mov eax, dword [0x10011bd14]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x130], r8
mov qword [rsp + 0x120], rdx
lea rcx, [r11 - 0x188]
xor edx, edx
mov r8d, Ordinal_147
mov dword [rsp + 0xb0], eax
mov qword [rsp + 0x138], r9
mov qword [rsp + 0xa0], r13
mov qword [r11 - 0x240], r13
mov qword [r11 - 0x220], r13
mov qword [rsp + 0x98], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0xc8], r13
mov qword [rsp + 0x48], r13
mov qword [r11 - 0x208], r13
mov qword [rsp + 0x128], r13
mov qword [r11 - 0x238], r13
mov qword [r11 - 0x1c0], r13
mov qword [rsp + 0x68], r13
mov qword [r11 - 0x210], r13
call sub.msvcrt.dll_memset
lea r8d, [r13 + 0x20]
lea rcx, [rsp + 0xd0]
xor edx, edx
call sub.msvcrt.dll_memset
lea r8d, [r13 + 0x10]
lea rcx, [rsp + 0x78]
xor edx, edx
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x78]
mov qword [rsp + 0xf8], r13
mov qword [rsp + 0x40], rax
mov r15d, r13d
mov dword [rsp + 0x70], r13d
mov ebx, r13d
lea r14, [rsp + 0x78]
lea rbp, [rsp + 0xd0]
mov edi, 0x80092004
lea r12d, [r13 + 1]
mov r9, rax
mov r8, rbp
mov edx, ebx
mov rcx, rsi
call fcn.10005bfc4
cmp eax, r13d
je 0x10005e02e
mov r9d, edi
mov r8d, eax
mov edx, 0x1899013e
xor ecx, ecx
call fcn.1000b51b8
mov r13d, dword [r14]
add r15d, r13d
test r13d, r13d
je 0x10005e0ab
test ebx, ebx
je 0x10005e055
cmp ebx, 2
je 0x10005e055
mov ecx, 0x990
call fcn.1000ba420
lea rsi, [0x1000167f8]
jmp 0x10005e066
mov ecx, 0x98f
call fcn.1000ba420
lea rsi, [0x100016708]
test rax, rax
cmovne rsi, rax
test ebx, ebx
je 0x10005e07c
cmp ebx, r12d
je 0x10005e07c
mov r12d, 3
mov ecx, 0x98e
call fcn.1000ba420
lea rcx, [0x100016cb8]
mov r8, rsi
mov edx, r12d
mov r9, rax
mov dword [rsp + 0x20], r13d
call fcn.1000b99b0
mov rsi, qword [rsp + 0x60]
mov r12d, 1
mov rax, qword [rsp + 0x40]
add ebx, r12d
add rbp, 8
add rax, 4
add r14, 4
mov r13d, 0
mov qword [rsp + 0x40], rax
cmp ebx, 4
jb 0x10005e007
mov rbp, r13
test r15d, r15d
jne 0x10005e0f2
mov edx, 0x18ab013e
mov r8d, edi
xor r9d, r9d
xor ecx, ecx
call fcn.1000b51b8
jmp 0x10005f013
lea rax, [rsp + 0xd0]
xor r14d, r14d
lea r15, [rsp + 0x78]
mov qword [rsp + 0x60], rax
cmp dword [r15], ebp
je 0x10005e30e
xor r13d, r13d
cmp dword [r15], ebp
jbe 0x10005e30e
mov rdi, qword [rax]
mov rbx, qword [rsp + 0x50]
mov qword [rsp + reloc.certcli.dll_Ordinal_256], rdi
test rbx, rbx
je 0x10005e13a
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x10005e14d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov r12, qword [rdi]
and qword [rsp + 0x110], rbp
xor eax, eax
mov rdx, qword [r12 + 0x18]
xor ebx, ebx
mov qword [rsp + 0x50], rax
cmp dword [rdx], ebx
lea r8d, [rbx + 3]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x58], rax
mov eax, 0x2000003
lea r9, [rsp + 0x110]
cmove r8d, eax
lea ecx, [rbx + 1]
add rdx, 0x50
mov qword [rsp + 0x40], rbx
call fcn.1000c1f24
mov rsi, qword [rsp + 0x110]
mov edi, eax
test eax, eax
je 0x10005e1c0
xor r9d, r9d
mov r8d, eax
mov edx, 0x124d013e
xor ecx, ecx
call fcn.1000b51b8
mov r12, rbx
jmp 0x10005e243
lea rcx, [rsp + 0x40]
or r8d, 0xffffffff
mov rdx, rsi
call fcn.1000b9064
test eax, eax
jne 0x10005e1f8
mov eax, 0x8007000e
xor r9d, r9d
mov edx, 0x1252013e
mov r8d, eax
xor ecx, ecx
mov edi, eax
call fcn.1000b51b8
mov rbx, qword [rsp + 0x40]
mov r12, rbp
jmp 0x10005e243
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
call qword [sym.imp.msvcrt.dll__strlwr]
lea r8, [rsp + 0x58]
mov edx, 4
mov rcx, r12
call fcn.1000c1d48
mov edi, eax
test eax, eax
je 0x10005e232
xor r9d, r9d
mov r8d, eax
mov edx, 0x1257013e
xor ecx, ecx
call fcn.1000b51b8
jmp 0x10005e239
mov qword [rsp + 0x50], rbx
xor ebx, ebx
mov r12, qword [rsp + 0x58]
mov qword [rsp + 0x48], r12
test rsi, rsi
je 0x10005e251
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LocalFree]
test rbx, rbx
je 0x10005e25f
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LocalFree]
test edi, edi
jne 0x10005e384
mov rbx, qword [rsp + 0x50]
cmp dword [0x10011bd04], ebp
je 0x10005e29e
lea rcx, [0x100016ce0]
mov r9, rbx
mov r8d, r13d
mov edx, r14d
call fcn.1000b99b0
lea rcx, [0x100016d08]
mov r9, r12
mov r8d, r13d
mov edx, r14d
call fcn.1000b99b0
cmp qword [rsp + 0x98], rbp
jne 0x10005e2b7
mov qword [rsp + 0x98], rbx
xor ebx, ebx
mov qword [rsp + 0x50], rbx
mov rsi, qword [rsp + 0xc8]
test rsi, rsi
jne 0x10005e2d3
and qword [rsp + 0x48], rbp
mov qword [rsp + 0xc8], r12
jmp 0x10005e2e3
mov rdx, r12
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x10005e359
mov rdi, qword [rsp + reloc.certcli.dll_Ordinal_256]
mov r12d, 1
add rdi, 8
add r13d, r12d
mov qword [rsp + reloc.certcli.dll_Ordinal_256], rdi
cmp r13d, dword [r15]
jb 0x10005e12c
mov rax, qword [rsp + 0x60]
add rax, 8
add r14d, r12d
add r15, 4
mov qword [rsp + 0x60], rax
cmp r14d, 4
jb 0x10005e107
mov rdx, qword [rsp + 0x130]
lea rcx, [rsp + 0x88]
or r8d, 0xffffffff
call fcn.1000b9064
test eax, eax
jne 0x10005e38e
mov ebx, 0x8007000e
mov edx, 0x18e3013e
mov edi, ebx
mov r8d, ebx
jmp 0x10005e0e3
mov edi, 0x8007000d
xor r9d, r9d
mov edx, 0x18d9013e
mov r8d, edi
mov rcx, r12
call fcn.1000b51b8
xor r9d, r9d
mov r8d, edi
mov edx, 0x18da013e
mov rcx, rsi
jmp 0x10005e0e8
mov edx, 0x18c3013e
jmp 0x10005e0e0
lea r8, [0x100016300]
lea rcx, [rsp + 0x90]
mov r9d, r12d
xor edx, edx
mov dword [rsp + 0x20], 0xf0000000
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x10005e3cf
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
mov edx, 0x18ee013e
mov edi, eax
mov r8d, eax
jmp 0x10005e0e3
mov r14, qword [rsp + 0x118]
test r14, r14
je 0x10005e42e
and qword [rsp + 0x30], rbp
and qword [rsp + 0x28], rbp
lea rax, [rsp + 0x70]
lea r9, [rsp + 0x108]
mov r8d, r12d
xor edx, edx
mov rcx, r14
mov qword [rsp + 0x20], rax
call sub.certcli.dll_Ordinal_256
mov edi, eax
test eax, eax
je 0x10005e418
mov r8d, eax
mov edx, 0x18fb013e
jmp 0x10005e0e3
cmp dword [rsp + 0x70], 0x14
je 0x10005e49d
mov edi, 0x80070057
mov edx, 0x1900013e
jmp 0x10005e0e0
mov rcx, qword [rsp + 0x90]
lea r8, [rsp + 0x200]
mov edx, reloc.Cabinet.dll_FDICreate
call qword [sym.imp.ADVAPI32.dll_CryptGenRandom]
test eax, eax
jne 0x10005e468
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
mov edx, 0x1908013e
mov edi, eax
mov r8d, eax
jmp 0x10005e0e3
lea r8, [rsp + 0xa8]
lea rcx, [rsp + 0x200]
mov edx, reloc.Cabinet.dll_FDICreate
call fcn.10005c220
mov edi, eax
test eax, eax
je 0x10005e495
mov r8d, eax
mov edx, 0x190e013e
jmp 0x10005e0e3
mov r14, qword [rsp + 0xa8]
mov esi, dword [rsp + 0x78]
mov r12, qword [rsp + 0xd0]
mov r13d, dword [rsp + 0x7c]
xor eax, eax
mov qword [rsp + 0x40], rax
test esi, esi
je 0x10005e4c2
lea eax, [rsi - 1]
mov rax, qword [r12 + rax*8]
jmp 0x10005e4d7
test r13d, r13d
je 0x10005e4f7
mov rbx, qword [rsp + 0xd8]
lea eax, [r13 - 1]
mov rax, qword [rbx + rax*8]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x10005e4f7
mov r15d, dword [rsp + 0x2f0]
mov eax, 2
test r15d, r15d
cmove r15d, eax
jmp 0x10005e4ff
mov r15d, dword [rsp + 0x2f0]
mov r8, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x90]
mov eax, reloc.WLDAP32.dll_Ordinal_16
lea ecx, [rax + 0x10]
test r15d, r15d
mov r9, r14
cmove eax, ecx
lea rcx, [rsp + 0x140]
mov qword [rsp + 0x28], rcx
and dword [rsp + 0x20], ebp
mov ecx, eax
call fcn.100056400
mov edi, eax
test eax, eax
je 0x10005e54b
mov r8d, eax
mov edx, 0x1928013e
jmp 0x10005e0e3
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x140]
mov r8d, 8
call fcn.100056b28
mov edi, eax
test eax, eax
je 0x10005e579
mov r8d, eax
mov edx, 0x192b013e
jmp 0x10005e0e3
cmp dword [0x10011bd00], ebp
jne 0x10005e5b2
mov rcx, qword [rsp + 0x88]
lea rdx, [0x1000161dc]
call qword [sym.imp.msvcrt.dll_fopen]
mov qword [rsp + 0xa0], rax
test rax, rax
je 0x10005e5b2
mov edi, 0x800700b7
mov edx, 0x1933013e
jmp 0x10005e0e0
mov rcx, qword [rsp + 0x88]
lea rdx, [0x100016218]
call qword [sym.imp.msvcrt.dll_fopen]
mov rbp, rax
mov qword [rsp + 0xa0], rax
test rax, rax
jne 0x10005e5e6
mov edi, 0x80010137
mov edx, 0x193a013e
jmp 0x10005e0e0
lea rdx, [0x100016d30]
mov rcx, rax
call qword [sym.imp.msvcrt.dll_fprintf]
mov eax, 0x80
test r15d, r15d
lea r8d, [rax - 0x40]
lea rdx, [0x100016d48]
mov rcx, rbp
cmove r8d, eax
call qword [sym.imp.msvcrt.dll_fprintf]
xor edx, edx
mov rcx, rbp
sub edx, r15d
neg edx
lea rdx, [0x100016d58]
sbb r8d, r8d
add r8d, 3
call qword [sym.imp.msvcrt.dll_fprintf]
test r15d, r15d
je 0x10005e649
lea rdx, [0x100016d70]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
lea rdx, [0x100016d78]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
mov ebx, 8
lea rdi, [rsp + 0x1d0]
lea r13d, [rbx - 7]
movzx r8d, byte [rdi]
lea rdx, [0x100016d80]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
add rdi, r13
sub rbx, r13
jne 0x10005e66a
lea rdx, [0x100016258]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
lea rdx, [0x100016d88]
mov r8, r14
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
lea rdx, [0x100016d98]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
lea rdx, [0x100016da8]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
mov r8, qword [rsp + 0x98]
lea rdx, [0x100016dc0]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
mov r13d, dword [rsp + 0x7c]
cmp dword [0x10011be54], ebx
jne 0x10005e714
mov eax, 0x8404
lea rdx, [rsp + 0x58]
lea rcx, [0x10011acf0]
mov word [rsp + 0x58], ax
call fcn.10003e374
lea ecx, [rbx + 1]
mov dword [0x10011be54], ecx
jmp 0x10005e719
mov ecx, 1
mov eax, dword [0x10011bd14]
cmp dword [0x10011bd04], 0
mov r14d, dword [rsp + 0x84]
cmove eax, ecx
xor ebx, ebx
mov dword [0x10011bd14], eax
test r15d, r15d
je 0x10005edea
test esi, esi
jne 0x10005e7ba
mov rdi, qword [rsp + 0x40]
test rdi, rdi
je 0x10005e89c
lea edx, [rbx + 8]
lea ecx, [rbx + 0x40]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov r12, rax
mov qword [rsp + 0xd0], rax
test rax, rax
jne 0x10005e784
mov eax, 0x8007000e
mov edx, 0x1962013e
mov edi, eax
mov r8d, eax
jmp 0x10005e0e3
lea r9, [rsp + 0x68]
lea r8, [rsp + 0xc0]
mov rdx, rax
mov rcx, rdi
call fcn.100059ce0
mov edi, eax
test eax, eax
je 0x10005e7af
mov r8d, eax
mov edx, 0x1969013e
jmp 0x10005e0e3
mov eax, 1
mov esi, eax
mov dword [rsp + 0x78], eax
lea eax, [rsi - 1]
lea rdx, [0x100016dd0]
mov rcx, rbp
mov rbx, qword [r12 + rax*8]
call qword [sym.imp.msvcrt.dll_fprintf]
mov eax, dword [rbx + 0x10]
mov dword [rsp + 0x28], eax
mov rax, qword [rbx + 8]
lea r9, [rsp + 0x140]
lea r8, [0x100016598]
lea rdx, [0x1000165b0]
mov rcx, rbp
mov qword [rsp + 0x20], rax
call fcn.10005c4cc
xor ecx, ecx
mov edi, eax
test eax, eax
je 0x10005e817
xor r9d, r9d
mov r8d, eax
mov edx, 0x1979013e
jmp 0x10005e0e8
mov r9d, dword [rbx + 0x10]
mov r8, qword [rbx + 8]
and dword [rsp + 0x28], 0
or dword [rsp + 0x20], 0xffffffff
xor edx, edx
call fcn.10004df1c
mov edi, eax
test eax, eax
je 0x10005e843
mov r8d, eax
mov edx, 0x197c013e
jmp 0x10005e0e3
mov eax, 2
lea r9, [rsp + 0x140]
lea r8, [0x100016678]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0xc0]
lea rdx, [0x1000165b0]
mov qword [rsp + 0x28], rax
mov rcx, rbp
mov qword [rsp + 0x20], rbx
call fcn.10005cc80
mov edi, eax
test eax, eax
je 0x10005e88f
mov r8d, eax
mov edx, 0x1988013e
jmp 0x10005e0e3
cmp qword [rsp + 0x68], 0
jne 0x10005e8ca
mov rdi, qword [rsp + 0x40]
xor r9d, r9d
lea rax, [rsp + 0x68]
xor edx, edx
lea r8d, [r9 + 1]
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.10005dae8
mov edi, eax
test eax, eax
je 0x10005e8ca
mov r8d, eax
mov edx, 0x198e013e
jmp 0x10005e0e3
test r13d, r13d
je 0x10005ec0c
lea rdx, [0x100016de8]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
mov r12, qword [rsp + 0xd8]
xor esi, esi
test r13d, r13d
je 0x10005e95c
mov rbx, r12
mov rdi, qword [rbx]
inc esi
lea r8, [0x1000167e8]
lea rcx, [rsp + 0x248]
mov r9d, esi
mov edx, reloc.WLDAP32.dll_Ordinal_36
call fcn.10003e304
mov eax, 1
lea r9, [rsp + 0x140]
mov dword [rsp + 0x30], eax
and qword [rsp + 0x28], 0
lea r8, [rsp + 0x248]
lea rdx, [0x100016730]
mov rcx, rbp
mov qword [rsp + 0x20], rdi
call fcn.10005cc80
mov edi, eax
test eax, eax
jne 0x10005eb8c
add rbx, 8
cmp esi, r13d
jb 0x10005e8f5
lea rdx, [0x100016e00]
mov r8d, r13d
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
lea rdx, [0x100016e10]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
xor esi, esi
test r13d, r13d
je 0x10005e9d5
mov rbx, r12
mov rdi, qword [rbx]
inc esi
lea r8, [0x1000167d8]
lea rcx, [rsp + 0x1d8]
mov r9d, esi
mov edx, Ordinal_41
call fcn.10003e304
mov r8, qword [rsp + 0x68]
lea rdx, [rsp + 0x1d8]
mov r9, rdi
mov rcx, rbp
call fcn.10005c3d4
mov edi, eax
test eax, eax
jne 0x10005eb99
add rbx, 8
cmp esi, r13d
jb 0x10005e989
lea rdx, [0x100016e28]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
xor esi, esi
test r13d, r13d
je 0x10005ea83
mov rbx, r12
mov r12, qword [rbx]
inc esi
lea r8, [0x1000167d8]
lea rcx, [rsp + 0x1d8]
mov r9d, esi
mov edx, Ordinal_41
call fcn.10003e304
mov eax, dword [r12 + 0x10]
lea r9, [rsp + 0x140]
mov dword [rsp + 0x28], eax
mov rax, qword [r12 + 8]
lea r8, [rsp + 0x1d8]
lea rdx, [0x100016778]
mov rcx, rbp
mov qword [rsp + 0x20], rax
call fcn.10005c4cc
xor ecx, ecx
mov edi, eax
test eax, eax
jne 0x10005ebb3
and dword [rsp + 0x28], ecx
mov r9d, dword [r12 + 0x10]
mov r8, qword [r12 + 8]
or dword [rsp + 0x20], 0xffffffff
xor edx, edx
call fcn.10004df1c
mov edi, eax
test eax, eax
jne 0x10005eba6
add rbx, 8
cmp esi, r13d
jb 0x10005e9f3
xor esi, esi
test r14d, r14d
je 0x10005eb26
mov rbx, qword [rsp + 0xe8]
mov r12, qword [rbx]
inc esi
lea r8, [0x100016a28]
lea rcx, [rsp + 0x218]
mov r9d, esi
mov edx, 0x2a
call fcn.10003e304
mov eax, dword [r12 + 0x10]
lea r9, [rsp + 0x140]
mov dword [rsp + 0x28], eax
mov rax, qword [r12 + 8]
lea r8, [rsp + 0x218]
lea rdx, [0x100016778]
mov rcx, rbp
mov qword [rsp + 0x20], rax
call fcn.10005c4cc
xor ecx, ecx
mov edi, eax
test eax, eax
jne 0x10005ebd0
and dword [rsp + 0x28], ecx
mov r9d, dword [r12 + 0x10]
mov r8, qword [r12 + 8]
or dword [rsp + 0x20], 0xffffffff
xor edx, edx
call fcn.10004df1c
mov edi, eax
test eax, eax
jne 0x10005ebc3
add rbx, 8
cmp esi, r14d
jb 0x10005ea96
lea rdx, [0x100016e48]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
mov rbx, qword [rsp + 0xd8]
lea edx, [r13 - 1]
mov rbx, qword [rbx + rdx*8]
lea r9, [rsp + 0x140]
lea r8, [0x100016598]
mov eax, dword [rbx + 0x10]
lea rdx, [0x100016750]
mov rcx, rbp
mov dword [rsp + 0x28], eax
mov rax, qword [rbx + 8]
mov qword [rsp + 0x20], rax
call fcn.10005c4cc
xor ecx, ecx
mov edi, eax
test eax, eax
je 0x10005ebe0
xor r9d, r9d
mov r8d, eax
mov edx, 0x19e7013e
jmp 0x10005e0e8
mov r8d, eax
mov edx, 0x19a5013e
jmp 0x10005e0e3
mov r8d, eax
mov edx, 0x19b0013e
jmp 0x10005e0e3
mov r8d, eax
mov edx, 0x19c6013e
jmp 0x10005e0e3
xor r9d, r9d
mov r8d, eax
mov edx, 0x19c3013e
jmp 0x10005e0e8
mov r8d, eax
mov edx, 0x19da013e
jmp 0x10005e0e3
xor r9d, r9d
mov r8d, eax
mov edx, 0x19d7013e
jmp 0x10005e0e8
mov r9d, dword [rbx + 0x10]
mov r8, qword [rbx + 8]
and dword [rsp + 0x28], 0
or dword [rsp + 0x20], 0xffffffff
xor edx, edx
call fcn.10004df1c
mov edi, eax
test eax, eax
je 0x10005ec0c
mov r8d, eax
mov edx, 0x19ea013e
jmp 0x10005e0e3
lea rdx, [0x100016e60]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x10005ec2b
mov ecx, dword [rax + 0x10]
jmp 0x10005ec2d
xor ecx, ecx
test rax, rax
je 0x10005ec38
mov rax, qword [rax + 8]
jmp 0x10005ec3a
xor eax, eax
mov dword [rsp + 0x28], ecx
lea r9, [rsp + 0x140]
lea r8, [0x100016598]
lea rdx, [0x10000f06c]
mov rcx, rbp
mov qword [rsp + 0x20], rax
call fcn.10005c4cc
xor ecx, ecx
mov edi, eax
test eax, eax
je 0x10005ec79
xor r9d, r9d
mov r8d, eax
mov edx, 0x19f6013e
jmp 0x10005e0e8
mov r9d, dword [rbx + 0x10]
mov r8, qword [rbx + 8]
and dword [rsp + 0x28], 0
or dword [rsp + 0x20], 0xffffffff
xor edx, edx
call fcn.10004df1c
mov edi, eax
test eax, eax
je 0x10005eca5
mov r8d, eax
mov edx, 0x19f9013e
jmp 0x10005e0e3
lea rdx, [0x100016e68]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
and qword [rsp + 0x60], 0
or rdi, 0xffffffffffffffff
lea rdx, [0x100016e80]
lea rcx, [rsp + 0x60]
mov r8d, edi
call fcn.1000b9064
mov rbx, qword [rsp + 0x60]
test eax, eax
jne 0x10005ecfc
mov eax, 0x8007000e
xor r9d, r9d
mov edx, 0x135f013e
mov r8d, eax
xor ecx, ecx
mov edi, eax
call fcn.1000b51b8
mov esi, 1
jmp 0x10005ed66
xor eax, eax
mov rcx, rdi
mov rdi, rbx
repne scasb al, byte [rdi]
lea esi, [rax + 1]
not rcx
sub rcx, rsi
cmp rcx, 0xa0000
jb 0x10005ed27
mov edi, 0x80070216
mov edx, 0x1365013e
mov r8d, edi
jmp 0x10005ed5c
mov dword [rsp + 0x28], ecx
lea r9, [rsp + 0x140]
lea r8, [0x100016820]
lea rdx, [0x100016840]
mov rcx, rbp
mov qword [rsp + 0x20], rbx
call fcn.10005c4cc
mov edi, eax
test eax, eax
je 0x10005ed66
mov r8d, eax
mov edx, 0x136e013e
xor r9d, r9d
xor ecx, ecx
call fcn.1000b51b8
test rbx, rbx
je 0x10005ed74
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LocalFree]
test edi, edi
je 0x10005ed82
mov edx, 0x1a03013e
jmp 0x10005e0e0
mov eax, esi
lea r9, [rsp + 0x140]
lea r8, [0x100016868]
sub eax, r15d
lea rdx, [0x100016840]
mov rcx, rbp
neg eax
mov dword [rsp + 0x28], 4
sbb eax, eax
and eax, 0x1000000
mov dword [rsp + 0x58], eax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
call fcn.10005c4cc
mov edi, eax
test eax, eax
je 0x10005eddc
xor r9d, r9d
mov r8d, eax
mov edx, 0x138a013e
xor ecx, ecx
call fcn.1000b51b8
test edi, edi
je 0x10005edea
mov edx, 0x1a0d013e
jmp 0x10005e0e0
mov ebx, dword [rsp + 0x80]
test ebx, ebx
jne 0x10005edfe
test r14d, r14d
je 0x10005f280
lea rdx, [0x100016e90]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
mov r12, qword [rsp + 0xe0]
lea r13, [0x1000168a8]
test ebx, ebx
je 0x10005eee5
lea eax, [rbx - 1]
lea r9, [rsp + 0x140]
lea r8, [0x100016908]
mov rsi, qword [r12 + rax*8]
mov rdx, r13
mov rcx, rbp
mov eax, dword [rsi + 0x10]
mov dword [rsp + 0x28], eax
mov rax, qword [rsi + 8]
mov qword [rsp + 0x20], rax
call fcn.10005c4cc
xor ecx, ecx
mov edi, eax
test eax, eax
je 0x10005ee6e
xor r9d, r9d
mov r8d, eax
mov edx, 0x1a21013e
jmp 0x10005e0e8
mov r9d, dword [rsi + 0x10]
mov r8, qword [rsi + 8]
and dword [rsp + 0x28], 0
or dword [rsp + 0x20], 0xffffffff
xor edx, edx
call fcn.10004df1c
mov edi, eax
test eax, eax
je 0x10005ee9a
mov r8d, eax
mov edx, 0x1a24013e
jmp 0x10005e0e3
mov dword [rsp + 0x38], 0x9c4
mov eax, 2
lea r9, [rsp + 0x140]
mov dword [rsp + 0x30], eax
lea r8, [0x1000169b0]
mov rdx, r13
mov rcx, rbp
mov dword [rsp + 0x28], 0x2400
mov qword [rsp + 0x20], rsi
call fcn.10005c97c
mov edi, eax
test eax, eax
je 0x10005eee5
mov r8d, eax
mov edx, 0x1a31013e
jmp 0x10005e0e3
mov rsi, qword [rsp + 0xe8]
test r14d, r14d
je 0x10005ef3b
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], rax
and dword [rsp + 0x20], 0
lea r9, [rsp + 0x140]
lea r8, [0x100016730]
mov rdx, r13
mov rcx, rbp
call fcn.10005cd78
mov edi, eax
test eax, eax
je 0x10005ef3b
mov r8d, eax
mov edx, 0x1a41013e
jmp 0x10005e0e3
lea rdx, [0x100016e00]
mov r8d, r14d
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
and qword [rsp + 0x20], 0
xor r8d, r8d
lea edi, [r8 + 1]
mov r9d, 0x201
lea ecx, [rdi + 1]
mov edx, edi
call qword [sym.imp.CRYPT32.dll_CertOpenStore]
mov r13, rax
test rax, rax
jne 0x10005efb6
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
mov edx, 0x1a52013e
jmp 0x10005eff1
mov rcx, qword [rsp + 0xf8]
test rcx, rcx
jne 0x10005f19c
mov edx, dword [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov qword [rsp + 0xf8], rax
test rax, rax
je 0x10005f18d
and dword [rsp + 0x28], 0
lea rax, [rsp + 0xf0]
mov r9d, 2
mov r8d, edi
mov edx, edi
mov rcx, r13
mov qword [rsp + 0x20], rax
call qword [sym.imp.CRYPT32.dll_CertSaveStore]
test eax, eax
jne 0x10005ef87
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
mov edx, 0x1a5f013e
mov edi, eax
xor ecx, ecx
mov r8d, eax
xor r9d, r9d
call fcn.1000b51b8
test r13, r13
je 0x10005f013
mov edx, 2
mov rcx, r13
call qword [sym.imp.CRYPT32.dll_CertCloseStore]
mov ebp, 1
lea rbx, [rsp + 0xd0]
lea rsi, [rsp + 0x78]
lea r12d, [rbp + 3]
mov edx, dword [rsi]
mov rcx, qword [rbx]
call fcn.10005bec0
add rsi, 4
add rbx, 8
sub r12, rbp
jne 0x10005f029
mov rax, qword [rsp + 0x68]
mov rbp, qword [rsp + 0xa0]
test rax, rax
je 0x10005f05b
mov rcx, rax
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov rcx, qword [rsp + 0xb8]
test rcx, rcx
je 0x10005f06e
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
test rbp, rbp
je 0x10005f07c
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fclose]
mov rax, qword [rsp + 0x50]
test rax, rax
je 0x10005f08f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rax, qword [rsp + 0x98]
test rax, rax
je 0x10005f0a5
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x10005f0b8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rax, qword [rsp + 0xc8]
test rax, rax
je 0x10005f0ce
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [rsp + 0x108]
test rcx, rcx
je 0x10005f0e1
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x10005f0f4
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x10005f107
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [rsp + 0xf8]
test rcx, rcx
je 0x10005f11a
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [rsp + 0x148]
test rcx, rcx
je 0x10005f12d
call qword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
mov rax, qword [rsp + 0xc0]
test rax, rax
je 0x10005f145
xor edx, edx
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov rcx, qword [rsp + 0x90]
test rcx, rcx
je 0x10005f15a
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov eax, dword [rsp + 0xb0]
mov dword [0x10011bd14], eax
mov eax, edi
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.1000ef870
add rsp, 0x288
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov eax, 0x8007000e
mov edx, 0x1a69013e
jmp 0x10005eff1
mov eax, dword [rsp + 0xf0]
lea r9, [rsp + 0x140]
lea r8, [0x100016b20]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
lea rdx, [0x1000168a8]
mov rcx, rbp
call fcn.10005c4cc
mov edi, eax
test eax, eax
je 0x10005f1da
mov edx, 0x1a73013e
jmp 0x10005eff3
xor edx, edx
test ebx, ebx
je 0x10005f1e9
lea eax, [rbx - 1]
mov rdx, qword [r12 + rax*8]
jmp 0x10005f1f6
test r14d, r14d
je 0x10005f1f6
lea eax, [r14 - 1]
mov rdx, qword [rsi + rax*8]
mov r9, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x40]
lea rax, [rsp + 0xb8]
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.10005dae8
mov edi, eax
test eax, eax
je 0x10005f228
mov edx, 0x1a81013e
jmp 0x10005eff3
mov rax, qword [rsp + 0xb8]
test rax, rax
je 0x10005f23a
mov ecx, dword [rax + 0x10]
jmp 0x10005f23c
xor ecx, ecx
test rax, rax
je 0x10005f247
mov rax, qword [rax + 8]
jmp 0x10005f249
xor eax, eax
mov dword [rsp + 0x28], ecx
lea r9, [rsp + 0x140]
lea r8, [0x100016b50]
lea rdx, [0x1000168a8]
mov rcx, rbp
mov qword [rsp + 0x20], rax
call fcn.10005c4cc
mov edi, eax
test eax, eax
je 0x10005f288
mov edx, 0x1a8a013e
jmp 0x10005eff3
mov r13, qword [rsp + 0x128]
test r15d, r15d
jne 0x10005f334
lea rdx, [0x100016e28]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
xor ebx, ebx
test r14d, r14d
je 0x10005f334
mov r12, qword [rsp + 0xe8]
mov rsi, qword [r12]
inc ebx
lea r8, [0x100016a28]
lea rcx, [rsp + 0x218]
mov r9d, ebx
mov edx, 0x2a
call fcn.10003e304
mov eax, dword [rsi + 0x10]
lea r9, [rsp + 0x140]
mov dword [rsp + 0x28], eax
mov rax, qword [rsi + 8]
lea r8, [rsp + 0x218]
lea rdx, [0x100016778]
mov rcx, rbp
mov qword [rsp + 0x20], rax
call fcn.10005c4cc
xor ecx, ecx
mov edi, eax
test eax, eax
jne 0x10005f378
and dword [rsp + 0x28], ecx
mov r9d, dword [rsi + 0x10]
mov r8, qword [rsi + 8]
or dword [rsp + 0x20], 0xffffffff
xor edx, edx
call fcn.10004df1c
mov edi, eax
test eax, eax
jne 0x10005f36e
add r12, 8
cmp ebx, r14d
jb 0x10005f2b4
lea rdx, [0x100016258]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fprintf]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_fflush]
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_ferror]
test eax, eax
je 0x10005f382
mov edi, 0x80070070
mov edx, 0x1aad013e
xor ecx, ecx
mov r8d, edi
jmp 0x10005eff8
mov edx, 0x1aa5013e
jmp 0x10005eff3
mov edx, 0x1a9f013e
jmp 0x10005eff5
xor edi, edi
jmp 0x10005f000