Function at 0x419680
Capabilities:
Generate random numbers via rtlgenrandom

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x68
mov eax, dword [0x64a040]
xor eax, ebp
mov dword [esp + 0x60], eax
lea ebx, [ebp + 0xc]
mov eax, dword [ebx - 4]
mov dword [esp + 0x24], eax
push 0x190
call fcn.0057dc30
add esp, 4
mov edi, eax
mov ecx, eax
push ebx
call fcn.005abdb0
push 0x228
call fcn.0057dc30
add esp, 4
mov esi, eax
mov dword [esp + 0x20], esp
mov al, byte [ebx + 4]
mov byte [esp + 0x5c], al
mov eax, dword [ebx]
mov dword [esp + 0x58], eax
mov eax, dword [ebx + 8]
mov dword [esp], eax
mov dword [ebx + 8], 0
movzx ecx, word [ebx + 0xc]
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x10], eax
mov edx, dword [ebx + 0x10]
mov dword [esi], 0x628380
mov dword [esi + 4], 0x6283f0
mov dword [esi + 8], 0x628414
mov dword [esi + 0xc], 0x628420
mov ebx, dword [edi + 8]
mov dword [esi + 0x10], ebx
test ebx, ebx
je 0x41972a
xor eax, eax
inc eax
lock xadd dword [ebx], eax
cmp eax, 0x7fffffff
je 0x419d09
mov dword [esi + 0x1c], 0
mov dword [esi + 0x18], 2
mov dword [esi + 0x20], edi
mov eax, dword [esp + 0x58]
mov dword [esi + 0x24], eax
mov al, byte [esp + 0x5c]
mov byte [esi + 0x28], al
mov edi, dword [esp]
mov dword [esi + 0x2c], edi
mov word [esi + 0x30], cx
mov ecx, dword [esp + 0x10]
mov dword [esi + 0x38], ecx
mov dword [esi + 0x34], edx
xorps xmm0, xmm0
test al, al
jne 0x419c03
movsd qword [esp], xmm0
call fcn.004112e0
movsd xmm0, qword [esp]
test al, al
jne 0x41977e
xorps xmm0, xmm0
movsd qword [esi + 0x40], xmm0
mov dword [esi + 0x48], 2
lea ebx, [esi + 0x4c]
mov dword [esi + 0x4c], 0
push 0xc
call fcn.0057dc30
add esp, 4
mov edi, eax
mov ecx, eax
push ebx
call fcn.00557d40
mov dword [esi + 0x50], edi
movzx eax, byte [esi + 0x30]
mov dword [esi + 0x54], eax
mov edx, dword [esi + 0x10]
xor ecx, ecx
mov eax, 0
test edx, edx
je 0x4197d5
xor eax, eax
inc eax
lock xadd dword [edx], eax
cmp eax, 0x7fffffff
je 0x419d0c
mov eax, dword [esi + 0x10]
mov dword [esi + 0x58], edx
mov dword [esi + 0x5c], ecx
mov dword [esi + 0x60], ecx
mov ebx, dword [esi + 0x2c]
mov byte [esi + 0xd8], cl
xorps xmm0, xmm0
movups xmmword [esi + 0x68], xmm0
movups xmmword [esi + 0x78], xmm0
movups xmmword [esi + 0x88], xmm0
movups xmmword [esi + 0x98], xmm0
movups xmmword [esi + 0xa8], xmm0
movups xmmword [esi + 0xb8], xmm0
mov byte [esi + 0xc8], cl
test eax, eax
je 0x41982b
xor ecx, ecx
inc ecx
lock xadd dword [eax], ecx
cmp ecx, 0x7fffffff
je 0x419d0f
lea edx, [esi + 0x24]
lea ecx, [esi + 0xe0]
mov dword [esp], ecx
push edx
push eax
call fcn.00557d90
xor eax, eax
mov dword [esi + 0x128], eax
mov dword [esi + 0x12c], eax
mov dword [esi + 0x130], eax
lea ecx, [esi + 0x134]
mov dword [esi + 0x134], ecx
mov dword [esi + 0x138], ecx
lea ecx, [esi + 0x13c]
mov dword [esi + 0x13c], ecx
mov dword [esi + 0x140], ecx
lea ecx, [esi + 0x158]
xorps xmm0, xmm0
movups xmmword [esi + 0x144], xmm0
mov dword [esi + 0x154], eax
mov dword [esi + 0x158], ecx
mov dword [esi + 0x15c], ecx
lea ecx, [esi + 0x160]
mov dword [esi + 0x160], ecx
mov dword [esi + 0x164], ecx
mov dword [esi + 0x168], eax
mov dword [esi + 0x16c], eax
mov eax, ebx
shr eax, 0xe
mov ecx, ebx
shr ecx, 0x13
mov ecx, dword [ecx*4 + 0x6527ec]
bt ecx, eax
jb 0x419d1e
mov eax, ebx
shr eax, 0x15
mov byte [eax + 0x65a7ec], 1
mov dword [esi + 0x170], ebx
mov dword [esi + 0x174], 0
push 0x20
call fcn.0057dc30
add esp, 4
mov ebx, eax
mov eax, dword [esi + 0x10]
test eax, eax
je 0x419912
xor ecx, ecx
inc ecx
lock xadd dword [eax], ecx
cmp ecx, 0x7fffffff
je 0x419d12
mov ecx, ebx
push esi
push eax
call fcn.00419e80
mov dword [esi + 0x178], ebx
push 0x1c
call fcn.0057dc30
add esp, 4
mov ecx, dword [esi + 0x10]
test ecx, ecx
je 0x419945
xor edx, edx
inc edx
lock xadd dword [ecx], edx
cmp edx, 0x7fffffff
je 0x419d15
xorps xmm0, xmm0
movups xmmword [eax + 8], xmm0
mov dword [eax + 0x18], ecx
mov dword [eax], 0x6289d8
mov dword [esi + 0x17c], eax
xor ebx, ebx
mov byte [esi + 0x180], bl
mov dword [esi + 0x18c], ebx
mov dword [esi + 0x188], ebx
lea eax, [esi + 0x194]
mov dword [esi + 0x194], ebx
mov dword [esi + 0x198], ebx
mov dword [esi + 0x190], eax
lea eax, [esi + 0x1a0]
mov dword [esi + 0x1a0], ebx
mov dword [esi + 0x1a4], ebx
mov dword [esi + 0x19c], eax
mov word [esi + 0x1a8], 0
lea eax, [esi + 0x1d4]
movups xmmword [esi + 0x1ac], xmm0
movups xmmword [esi + 0x1bc], xmm0
xorps xmm0, xmm0
movsd qword [esi + 0x1cc], xmm0
mov dword [esi + 0x1d4], eax
mov dword [esi + 0x1d8], eax
lea eax, [esi + 0x1dc]
mov dword [esi + 0x1dc], eax
mov dword [esi + 0x1e0], eax
mov dword [esi + 0x1e4], ebx
mov dword [esi + 0x1e8], ebx
lea edi, [esi + 0x1ec]
mov dword [esi + 0x1ec], edi
mov dword [esi + 0x1f0], edi
mov dword [esi + 0x1f4], ebx
mov byte [esi + 0x1f8], bl
mov dword [esi + 0x1fc], ebx
push 8
call fcn.0057dc30
add esp, 4
mov dword [eax], ebx
mov byte [eax + 4], bl
mov dword [esi + 0x200], eax
test eax, eax
je 0x419a41
xor ecx, ecx
inc ecx
lock xadd dword [eax], ecx
cmp ecx, 0x7fffffff
je 0x419d18
mov dword [esi + 0x204], edi
lea eax, [esi + 0x208]
mov dword [esi + 0x208], eax
mov dword [esi + 0x20c], eax
mov dword [esi + 0x210], 0
cmp byte [esi + 0x28], 0
jne 0x419bd3
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x218], eax
push 8
call fcn.0057dc30
add esp, 4
mov dword [eax], 0
mov byte [eax + 4], 0
mov dword [esi + 0x21c], eax
test eax, eax
je 0x419aa7
xor ecx, ecx
inc ecx
lock xadd dword [eax], ecx
cmp ecx, 0x7fffffff
je 0x419d1b
lea ebx, [esi + 8]
mov dword [esi + 0x220], esi
mov dword [esp + 0x44], 0x122
mov al, byte [0x64f546]
test al, al
jne 0x419d3a
mov eax, esi
add eax, 4
mov dword [esp + 0x10], eax
mov ecx, dword [esp]
push ebx
call fcn.00419e10
mov eax, dword [esi + 0x218]
mov ecx, dword [fcn.0056d830]
cmp ecx, 0x56aca0
jne 0x419bb9
xor eax, eax
lea ebx, [esp + 0x48]
mov dword [ebx + 4], eax
mov dword [ebx], eax
push ebx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edi, dword [ebx]
mov ebx, dword [ebx + 4]
mov eax, 0x7bd05af6
cmp eax, edi
mov eax, 0x863
sbb eax, ebx
jl 0x419d6c
mov ecx, 0xf4240
mov eax, edi
mul ecx
imul ecx, ebx, 0xf4240
add ecx, edx
push dword [0x64f6a4]
push dword [0x64f6a0]
push ecx
push eax
call fcn.005a13d0
xor ecx, ecx
dec ecx
add eax, 0x1c9c380
adc edx, 0
mov edi, 0x7fffffff
cmovno edi, edx
cmovo eax, ecx
mov dword [esi + 0x18c], edi
mov dword [esi + 0x188], eax
mov edi, dword [esi + 0x20]
mov eax, dword [edi]
mov ebx, dword [eax + 0x14]
mov ecx, ebx
call dword [0x6445dc]
mov ecx, edi
push dword [esp + 0x10]
call ebx
mov esp, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
mov dword [eax], esi
lea esi, [ebp + 8]
mov eax, dword [esi + 0xc]
mov ecx, eax
shr ecx, 0xe
mov edx, eax
shr edx, 0x13
mov edx, dword [edx*4 + 0x6527ec]
bt edx, ecx
jb 0x419d2c
mov esi, dword [esi]
mov ecx, dword [esp + 0x60]
xor ecx, ebp
call fcn.005810d5
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call dword [0x6445dc]
lea edi, [esp + 0x48]
push edi
call ecx
add esp, 4
mov eax, dword [edi]
mov edx, dword [edi + 4]
jmp 0x419b3e
lea edi, [esi + 0xc8]
lea ecx, [esp + 0x48]
call fcn.0056b3c0
cmp byte [esi + 0xd8], 0
jne 0x419d5f
movups xmm0, xmmword [esp + 0x48]
movups xmmword [edi], xmm0
mov byte [esi + 0xd8], 1
jmp 0x419a6d
mov eax, dword [0x64f6c4]
mov ecx, dword [0x64d82c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x419cb9
xor eax, eax
dec eax
lea edi, [esp + 0x48]
mov dword [edi + 4], eax
mov dword [edi], eax
mov ecx, dword [0x64f6c0]
test ecx, ecx
je 0x419dfa
call dword [0x6445dc]
push 8
push edi
call ecx
test eax, eax
je 0x419d5c
mov eax, 0x1fffff
and eax, dword [esp + 0x4c]
movd xmm0, dword [esp + 0x48]
movd xmm1, eax
punpckldq xmm0, xmm1
movq qword [esp + 0x38], xmm0
fild qword [esp + 0x38]
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
sub esp, 0xc
movsd qword [esp], xmm0
mov dword [esp + 8], 0xffffffcb
call fcn.0059714b
add esp, 0xc
fstp qword [esp + 0x28]
movsd xmm0, qword [0x6388d8]
xor eax, eax
ucomisd xmm0, qword [esp + 0x28]
seta al
movsd xmm0, qword [eax*8 + 0x6388e0]
jmp 0x419768
push 0x64f6c4
call fcn.0057dc73
add esp, 4
cmp dword [0x64f6c4], 0xffffffff
jne 0x419c24
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x419e0d
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x64f6c0], eax
push 0x64f6c4
call fcn.0057dcc2
add esp, 4
jmp 0x419c24
int3
int3
int3
int3
int3
int3
int3
push ebx
call fcn.00506e00
add esp, 4
jmp 0x4198dc
push eax
call fcn.00507280
add esp, 4
jmp 0x419ba2
movzx ecx, al
lea eax, [esp + 0x48]
mov dword [eax], str.SequenceManager
lea edx, [esp + 0x44]
push esi
push 0x4e
push eax
call fcn.005e7170
add esp, 0xc
jmp 0x419ac5
int3
movups xmm0, xmmword [esp + 0x48]
movups xmmword [edi], xmm0
jmp 0x419a6d
mov eax, dword [0x64f6a0]
mov dword [esp], eax
mov ecx, dword [0x64f6a4]
mov dword [esp + 0x14], ecx
push ecx
push eax
push ebx
push edi
call fcn.005a13d0
mov dword [esp + 8], eax
mov dword [esp + 0x18], edx
mul dword [esp]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 8]
imul ecx, dword [esp + 0x14]
add edx, ecx
mov eax, dword [esp + 0x18]
imul ecx, eax, 0xf4240
mov dword [esp + 0xc], ecx
imul eax, dword [esp]
add eax, edx
sub edi, dword [esp + 0x1c]
sbb ebx, eax
mov ecx, 0xf4240
mov eax, dword [esp + 8]
mul ecx
mov dword [esp + 8], eax
add edx, dword [esp + 0xc]
mov dword [esp + 0xc], edx
mov eax, edi
mul ecx
imul ecx, ebx, 0xf4240
add edx, ecx
push dword [esp + 0x14]
push dword [esp + 4]
push edx
push eax
call fcn.005a13d0
add eax, dword [esp + 8]
adc edx, dword [esp + 0xc]
jmp 0x419b3e
push 8
push edi
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x419c51
int3
int3