Function at 0x104c85e
Capabilities:
Generate random numbers via winapi

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1a4
mov eax, dword [0x10d0620]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp + 0x14]
push ebx
xor ebx, ebx
mov dword [ebp - 0x198], eax
mov eax, dword [ebp + 0x1c]
push esi
push edi
mov dword [ebp - 0x130], eax
mov eax, dword [0x10d2294]
push 0x88
mov dword [ebp - 0x194], eax
lea eax, [ebp - 0x120]
push ebx
push eax
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x16c], ebx
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x170], ebx
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x168], ebx
call sub.msvcrt.dll_memset
xor eax, eax
lea edi, [ebp - 0x188]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0x14c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
stosd dword es:[edi], eax
mov dword [ebp - 0x174], ebx
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x190], ebx
xor esi, esi
lea edi, [ebp + esi*4 - 0x14c]
push edi
lea eax, [ebp + esi*4 - 0x188]
push eax
push esi
push dword [ebp - 0x19c]
call fcn.01048a3f
cmp eax, ebx
je 0x104c96f
push 0x80092004
push eax
push 0x1899013e
call fcn.0108c577
mov edi, dword [edi]
add dword [ebp - 0x128], edi
cmp edi, ebx
je 0x104c9e7
cmp esi, ebx
je 0x104c990
cmp esi, 2
je 0x104c990
push 0x100b6f8
push 0x990
jmp 0x104c99a
push 0x100b7d8
push 0x98f
call fcn.0104861f
mov dword [ebp - 0x12c], eax
cmp esi, ebx
je 0x104c9b8
mov dword [ebp - 0x15c], 3
cmp esi, 1
jne 0x104c9c2
mov dword [ebp - 0x15c], 1
push edi
push 0x98e
call fcn.0108bc14
push eax
push dword [ebp - 0x12c]
push dword [ebp - 0x15c]
push 0x100bc18
call fcn.0109c1a8
add esp, 0x14
inc esi
cmp esi, 4
jb 0x104c93f
cmp dword [ebp - 0x128], ebx
jne 0x104ca0e
mov esi, 0x80092004
push esi
push 0x18ab013e
call fcn.0108c55a
jmp 0x104d6df
mov dword [ebp - 0x12c], ebx
mov ecx, dword [ebp - 0x12c]
shl ecx, 2
mov eax, dword [ebp + ecx - 0x14c]
mov dword [ebp - 0x15c], eax
cmp eax, ebx
je 0x104cb3f
mov dword [ebp - 0x128], ebx
cmp eax, ebx
jbe 0x104cb3f
mov edi, dword [ebp + ecx - 0x188]
cmp dword [ebp - 0x138], ebx
je 0x104ca61
push dword [ebp - 0x138]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x138], ebx
cmp dword [ebp - 0x134], ebx
je 0x104ca7b
push dword [ebp - 0x134]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x134], ebx
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x138]
push eax
push dword [edi]
call fcn.01048c16
mov esi, eax
cmp esi, ebx
jne 0x104cb7a
mov esi, dword [ebp - 0x138]
cmp dword [0x10d2284], ebx
je 0x104cade
push esi
push dword [ebp - 0x128]
push dword [ebp - 0x12c]
push 0x100bbf4
call fcn.0109c1a8
push dword [ebp - 0x134]
push dword [ebp - 0x128]
push dword [ebp - 0x12c]
push 0x100bbd0
call fcn.0109c1a8
add esp, 0x20
cmp dword [ebp - 0x154], ebx
jne 0x104caf2
mov dword [ebp - 0x154], esi
mov dword [ebp - 0x138], ebx
cmp dword [ebp - 0x150], ebx
jne 0x104cb0e
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x134], ebx
jmp 0x104cb24
push dword [ebp - 0x134]
push dword [ebp - 0x150]
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x104cb85
inc dword [ebp - 0x128]
mov eax, dword [ebp - 0x128]
add edi, 4
cmp eax, dword [ebp - 0x15c]
jb 0x104ca47
inc dword [ebp - 0x12c]
cmp dword [ebp - 0x12c], 4
jb 0x104ca14
push 0xffffffffffffffff
push dword [ebp - 0x1a4]
lea eax, [ebp - 0x158]
push eax
call fcn.01092a50
test eax, eax
jne 0x104cbb1
mov esi, 0x8007000e
push esi
push 0x18e3013e
jmp 0x104ca04
push esi
push 0x18c3013e
jmp 0x104ca04
mov esi, 0x8007000d
push esi
push 0x18d9013e
push dword [ebp - 0x134]
call fcn.0108c595
push esi
push 0x18da013e
push dword [ebp - 0x150]
call fcn.0108c595
jmp 0x104d6df
push 0xf0000000
push 1
push 0x100afd8
push ebx
lea eax, [ebp - 0x164]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x104cbe1
call fcn.01091f43
mov esi, eax
push esi
push 0x18ee013e
jmp 0x104ca04
cmp dword [ebp - 0x130], ebx
je 0x104cc31
push ebx
push ebx
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x18c]
push eax
push 1
push ebx
push dword [ebp - 0x130]
call sub.certcli.dll_Ordinal_256
mov esi, eax
cmp esi, ebx
je 0x104cc18
push esi
push 0x18fb013e
jmp 0x104ca04
cmp dword [ebp - 0x190], 0x14
je 0x104cc88
mov esi, 0x80070057
push esi
push 0x1900013e
jmp 0x104ca04
lea eax, [ebp - 0x48]
push eax
push 0x14
push dword [ebp - 0x164]
call dword [sym.imp.ADVAPI32.dll_CryptGenRandom]
test eax, eax
jne 0x104cc59
call fcn.01091f43
mov esi, eax
push esi
push 0x1908013e
jmp 0x104ca04
lea eax, [ebp - 0x16c]
push eax
push 0x14
lea eax, [ebp - 0x48]
push eax
call fcn.01048cdf
mov esi, eax
cmp esi, ebx
je 0x104cc7c
push esi
push 0x190e013e
jmp 0x104ca04
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x148]
mov dword [ebp - 0x128], ebx
cmp eax, ebx
je 0x104ccaa
mov ecx, dword [ebp - 0x188]
mov eax, dword [ecx + eax*4 - 4]
jmp 0x104ccb8
cmp ecx, ebx
je 0x104ccce
mov eax, dword [ebp - 0x184]
mov eax, dword [eax + ecx*4 - 4]
mov dword [ebp - 0x128], eax
cmp eax, ebx
je 0x104ccce
cmp dword [ebp + 0x18], ebx
jne 0x104ccce
mov dword [ebp + 0x18], 2
lea eax, [ebp - 0x120]
push eax
mov eax, dword [ebp + 0x18]
push ebx
push dword [ebp - 0x130]
neg eax
push dword [ebp - 0x1a0]
sbb eax, eax
push dword [ebp - 0x164]
and eax, 0xfffffff0
add eax, 0x20
push eax
call fcn.01049d42
mov esi, eax
cmp esi, ebx
je 0x104cd0c
push esi
push 0x1928013e
jmp 0x104ca04
push 8
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.010469ee
mov esi, eax
cmp esi, ebx
je 0x104cd2f
push esi
push 0x192b013e
jmp 0x104ca04
mov esi, dword [sym.imp.msvcrt.dll_fopen]
cmp dword [0x10d2280], ebx
jne 0x104cd66
push 0x100b2e0
push dword [ebp - 0x158]
call esi
pop ecx
pop ecx
mov dword [ebp - 0x124], eax
cmp eax, ebx
je 0x104cd66
mov esi, 0x800700b7
push esi
push 0x1933013e
jmp 0x104ca04
push 0x100b2ac
push dword [ebp - 0x158]
call esi
mov esi, eax
pop ecx
pop ecx
mov dword [ebp - 0x124], esi
cmp esi, ebx
jne 0x104cd91
mov esi, 0x80010137
push esi
push 0x193a013e
jmp 0x104ca04
mov edi, dword [sym.imp.msvcrt.dll_fprintf]
push 0x100bbbc
push esi
call edi
mov eax, dword [ebp + 0x18]
neg eax
sbb eax, eax
and eax, 0xffffffc0
sub eax, 0xffffff80
push eax
push 0x100bbac
push esi
call edi
mov eax, dword [ebp + 0x18]
neg eax
sbb eax, eax
add eax, 3
push eax
push 0x100bb98
push esi
call edi
add esp, 0x20
cmp dword [ebp + 0x18], ebx
je 0x104cdda
push 0x100bb90
push esi
call edi
pop ecx
pop ecx
push 0x100bb88
push esi
call edi
pop ecx
pop ecx
mov dword [ebp - 0x12c], ebx
mov eax, dword [ebp - 0x12c]
movzx eax, byte [ebp + eax - 0xc]
push eax
push 0x100bb80
push esi
call edi
add esp, 0xc
inc dword [ebp - 0x12c]
cmp dword [ebp - 0x12c], 8
jb 0x104cdea
push 0x100b270
push esi
call edi
push dword [ebp - 0x130]
push 0x100bb70
push esi
call edi
push 0x100bb64
push esi
call edi
push 0x100bb50
push esi
call edi
push dword [ebp - 0x154]
push 0x100bb40
push esi
call edi
add esp, 0x30
call fcn.0104684c
cmp dword [0x10d2284], ebx
jne 0x104ce5e
mov dword [0x10d2294], 1
xor ebx, ebx
cmp dword [ebp + 0x18], ebx
je 0x104d358
cmp dword [ebp - 0x14c], ebx
jne 0x104cedb
cmp dword [ebp - 0x128], ebx
je 0x104cf81
push 4
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0x188], eax
test eax, eax
jne 0x104cea1
mov esi, 0x8007000e
push esi
push 0x1962013e
jmp 0x104ca04
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x170]
push eax
push dword [ebp - 0x188]
push dword [ebp - 0x128]
call fcn.0104852f
mov esi, eax
test esi, esi
je 0x104ced1
push esi
push 0x1969013e
jmp 0x104ca04
mov dword [ebp - 0x14c], 1
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x14c]
mov ebx, dword [eax + ecx*4 - 4]
push 0x100bb28
push dword [ebp - 0x124]
call edi
pop ecx
pop ecx
push dword [ebx + 8]
lea eax, [ebp - 0x120]
push dword [ebx + 4]
push eax
push 0x100b920
push 0x100b8fc
push dword [ebp - 0x124]
call fcn.0104c0c8
mov esi, eax
test esi, esi
je 0x104cf2d
push esi
push 0x1979013e
jmp 0x104ca04
push 0xffffffffffffffff
push dword [ebx + 8]
push dword [ebx + 4]
call fcn.01045bc4
mov esi, eax
test esi, esi
je 0x104cf4b
push esi
push 0x197c013e
jmp 0x104ca04
push 2
push dword [ebp - 0x170]
lea eax, [ebp - 0x120]
push ebx
push eax
push 0x100b868
push 0x100b8fc
push dword [ebp - 0x124]
call fcn.0104c588
mov esi, eax
test esi, esi
je 0x104cf81
push esi
push 0x1988013e
jmp 0x104ca04
cmp dword [ebp - 0x13c], 0
jne 0x104cfb3
lea eax, [ebp - 0x13c]
push eax
push 0
push 1
push 0
push dword [ebp - 0x128]
call fcn.01049a8e
mov esi, eax
test esi, esi
je 0x104cfb3
push esi
push 0x198e013e
jmp 0x104ca04
cmp dword [ebp - 0x148], 0
je 0x104d267
push 0x100bb14
push dword [ebp - 0x124]
call edi
xor eax, eax
pop ecx
pop ecx
cmp dword [ebp - 0x148], eax
jbe 0x104d033
mov ecx, dword [ebp - 0x184]
mov esi, dword [ecx + eax*4]
lea ebx, [eax + 1]
push ebx
push 0x100b70c
lea eax, [ebp - 0x98]
push 0x24
push eax
call fcn.01032ea3
add esp, 0x10
push 1
push 0
push esi
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x98]
push eax
push 0x100b7a8
push dword [ebp - 0x124]
call fcn.0104c588
mov esi, eax
test esi, esi
jne 0x104d207
mov eax, ebx
cmp eax, dword [ebp - 0x148]
jb 0x104cfd9
push dword [ebp - 0x148]
push 0x100bb04
push dword [ebp - 0x124]
call edi
push 0x100baec
push dword [ebp - 0x124]
call edi
xor eax, eax
add esp, 0x14
cmp dword [ebp - 0x148], eax
jbe 0x104d0aa
mov ecx, dword [ebp - 0x184]
mov esi, dword [ecx + eax*4]
lea ebx, [eax + 1]
push ebx
push 0x100b718
lea eax, [ebp - 0x34]
push 0x26
push eax
call fcn.01032ea3
add esp, 0x10
push esi
push dword [ebp - 0x13c]
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x124]
call fcn.0104963b
mov esi, eax
test esi, esi
jne 0x104d212
mov eax, ebx
cmp eax, dword [ebp - 0x148]
jb 0x104d060
push 0x100bacc
push dword [ebp - 0x124]
call edi
xor eax, eax
pop ecx
pop ecx
cmp dword [ebp - 0x148], eax
jbe 0x104d137
mov ecx, dword [ebp - 0x184]
mov ebx, dword [ecx + eax*4]
inc eax
push eax
push 0x100b718
mov dword [ebp - 0x130], eax
lea eax, [ebp - 0x34]
push 0x26
push eax
call fcn.01032ea3
add esp, 0x10
push dword [ebx + 8]
lea eax, [ebp - 0x120]
push dword [ebx + 4]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x100b750
push dword [ebp - 0x124]
call fcn.0104c0c8
mov esi, eax
test esi, esi
jne 0x104d21d
push 0xffffffffffffffff
push dword [ebx + 8]
push dword [ebx + 4]
call fcn.01045bc4
mov esi, eax
test esi, esi
jne 0x104d228
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x148]
jb 0x104d0c3
xor eax, eax
cmp dword [ebp - 0x140], eax
jbe 0x104d1b5
mov ecx, dword [ebp - 0x17c]
mov ebx, dword [ecx + eax*4]
inc eax
push eax
push 0x100b4e8
mov dword [ebp - 0x130], eax
lea eax, [ebp - 0x74]
push 0x2a
push eax
call fcn.01032ea3
add esp, 0x10
push dword [ebx + 8]
lea eax, [ebp - 0x120]
push dword [ebx + 4]
push eax
lea eax, [ebp - 0x74]
push eax
push 0x100b750
push dword [ebp - 0x124]
call fcn.0104c0c8
mov esi, eax
test esi, esi
jne 0x104d233
push 0xffffffffffffffff
push dword [ebx + 8]
push dword [ebx + 4]
call fcn.01045bc4
mov esi, eax
test esi, esi
jne 0x104d23e
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x140]
jb 0x104d141
push 0x100bab4
push dword [ebp - 0x124]
call edi
mov eax, dword [ebp - 0x184]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x148]
mov ebx, dword [eax + ecx*4 - 4]
push dword [ebx + 8]
lea eax, [ebp - 0x120]
push dword [ebx + 4]
push eax
push 0x100b920
push 0x100b784
push dword [ebp - 0x124]
call fcn.0104c0c8
mov esi, eax
test esi, esi
je 0x104d249
push esi
push 0x19e7013e
jmp 0x104ca04
push esi
push 0x19a5013e
jmp 0x104ca04
push esi
push 0x19b0013e
jmp 0x104ca04
push esi
push 0x19c3013e
jmp 0x104ca04
push esi
push 0x19c6013e
jmp 0x104ca04
push esi
push 0x19d7013e
jmp 0x104ca04
push esi
push 0x19da013e
jmp 0x104ca04
push 0xffffffffffffffff
push dword [ebx + 8]
push dword [ebx + 4]
call fcn.01045bc4
mov esi, eax
test esi, esi
je 0x104d267
push esi
push 0x19ea013e
jmp 0x104ca04
push 0x100baac
push dword [ebp - 0x124]
call edi
mov eax, dword [ebp - 0x13c]
pop ecx
pop ecx
test eax, eax
je 0x104d285
mov ecx, dword [eax + 8]
jmp 0x104d287
xor ecx, ecx
test eax, eax
je 0x104d290
mov eax, dword [eax + 4]
jmp 0x104d292
xor eax, eax
push ecx
push eax
lea eax, [ebp - 0x120]
push eax
push 0x100b920
push 0x1003ee8
push dword [ebp - 0x124]
call fcn.0104c0c8
mov esi, eax
test esi, esi
je 0x104d2c1
push esi
push 0x19f6013e
jmp 0x104ca04
push 0xffffffffffffffff
push dword [ebx + 8]
push dword [ebx + 4]
call fcn.01045bc4
mov esi, eax
test esi, esi
je 0x104d2df
push esi
push 0x19f9013e
jmp 0x104ca04
push 0x100ba94
push dword [ebp - 0x124]
call edi
pop ecx
pop ecx
push 0x100ba84
lea eax, [ebp - 0x120]
push eax
push 0x100b6cc
mov ebx, 0x100b6a4
push ebx
push dword [ebp - 0x124]
call fcn.0104c27f
mov esi, eax
test esi, esi
je 0x104d321
push esi
push 0x1a03013e
jmp 0x104ca04
mov eax, dword [ebp + 0x18]
dec eax
neg eax
sbb eax, eax
and eax, 0x1000000
push eax
lea eax, [ebp - 0x120]
push eax
push 0x100b690
push ebx
push dword [ebp - 0x124]
call fcn.0104c311
mov esi, eax
test esi, esi
je 0x104d358
push esi
push 0x1a0d013e
jmp 0x104ca04
xor esi, esi
cmp dword [ebp - 0x144], esi
jne 0x104d36e
cmp dword [ebp - 0x140], esi
je 0x104d5dc
push 0x100ba78
push dword [ebp - 0x124]
call edi
pop ecx
pop ecx
cmp dword [ebp - 0x144], esi
je 0x104d424
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x144]
mov ebx, dword [eax + ecx*4 - 4]
push dword [ebx + 8]
lea eax, [ebp - 0x120]
push dword [ebx + 4]
push eax
push 0x100b5e4
push 0x100b65c
push dword [ebp - 0x124]
call fcn.0104c0c8
mov esi, eax
test esi, esi
je 0x104d3cc
push esi
push 0x1a21013e
jmp 0x104ca04
push 0xffffffffffffffff
push dword [ebx + 8]
push dword [ebx + 4]
call fcn.01045bc4
mov esi, eax
test esi, esi
je 0x104d3ea
push esi
push 0x1a24013e
jmp 0x104ca04
push 0x9c4
push 2
push 0x2400
push ebx
lea eax, [ebp - 0x120]
push eax
push 0x100b554
push 0x100b65c
push dword [ebp - 0x124]
call fcn.0104c34b
mov esi, eax
test esi, esi
je 0x104d424
push esi
push 0x1a31013e
jmp 0x104ca04
cmp dword [ebp - 0x140], 0
je 0x104d46e
push dword [ebp - 0x17c]
lea eax, [ebp - 0x120]
push dword [ebp - 0x140]
push dword [ebp - 0x184]
push 0
push eax
push 0x100b7a8
push 0x100b65c
push dword [ebp - 0x124]
call fcn.0104c621
mov esi, eax
test esi, esi
je 0x104d46e
push esi
push 0x1a41013e
jmp 0x104ca04
push dword [ebp - 0x140]
push 0x100bb04
push dword [ebp - 0x124]
call edi
add esp, 0xc
push 0
push 0x201
push 0
xor ebx, ebx
inc ebx
push ebx
push 2
call dword [sym.imp.CRYPT32.dll_CertOpenStore]
mov dword [ebp - 0x160], eax
test eax, eax
jne 0x104d4b5
call fcn.01091f43
mov esi, eax
push esi
push 0x1a52013e
jmp 0x104d6c3
mov esi, dword [sym.imp.CRYPT32.dll_CertSaveStore]
jmp 0x104d4e2
cmp dword [ebp - 0x174], 0
push dword [ebp - 0x178]
jne 0x104d50d
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0x174], eax
test eax, eax
je 0x104d6b8
push 0
lea eax, [ebp - 0x178]
push eax
push 2
push ebx
push ebx
push dword [ebp - 0x160]
call esi
test eax, eax
jne 0x104d4bd
call fcn.01091f43
mov esi, eax
push esi
push 0x1a5f013e
jmp 0x104d6c3
push dword [ebp - 0x174]
lea eax, [ebp - 0x120]
push eax
push 0x100b3dc
mov ebx, 0x100b65c
push ebx
push dword [ebp - 0x124]
call fcn.0104c0c8
mov esi, eax
test esi, esi
je 0x104d541
push esi
push 0x1a73013e
jmp 0x104d6c3
mov ecx, dword [ebp - 0x144]
xor eax, eax
test ecx, ecx
je 0x104d555
mov eax, dword [ebp - 0x180]
jmp 0x104d565
mov ecx, dword [ebp - 0x140]
test ecx, ecx
je 0x104d569
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax + ecx*4 - 4]
lea ecx, [ebp - 0x168]
push ecx
push dword [ebp - 0x198]
push 0
push eax
push dword [ebp - 0x128]
call fcn.01049a8e
mov esi, eax
test esi, esi
je 0x104d595
push esi
push 0x1a81013e
jmp 0x104d6c3
mov eax, dword [ebp - 0x168]
test eax, eax
je 0x104d5a4
mov ecx, dword [eax + 8]
jmp 0x104d5a6
xor ecx, ecx
test eax, eax
je 0x104d5af
mov eax, dword [eax + 4]
jmp 0x104d5b1
xor eax, eax
push ecx
push eax
lea eax, [ebp - 0x120]
push eax
push 0x100b3ac
push ebx
push dword [ebp - 0x124]
call fcn.0104c0c8
mov esi, eax
test esi, esi
je 0x104d5dc
push esi
push 0x1a8a013e
jmp 0x104d6c3
cmp dword [ebp + 0x18], 0
jne 0x104d66b
push 0x100bacc
push dword [ebp - 0x124]
call edi
xor eax, eax
pop ecx
pop ecx
cmp dword [ebp - 0x140], eax
jbe 0x104d66b
mov ecx, dword [ebp - 0x17c]
mov ebx, dword [ecx + eax*4]
inc eax
push eax
push 0x100b4e8
mov dword [ebp - 0x130], eax
lea eax, [ebp - 0x74]
push 0x2a
push eax
call fcn.01032ea3
add esp, 0x10
push dword [ebx + 8]
lea eax, [ebp - 0x120]
push dword [ebx + 4]
push eax
lea eax, [ebp - 0x74]
push eax
push 0x100b750
push dword [ebp - 0x124]
call fcn.0104c0c8
mov esi, eax
test esi, esi
jne 0x104d6a4
push 0xffffffffffffffff
push dword [ebx + 8]
push dword [ebx + 4]
call fcn.01045bc4
mov esi, eax
test esi, esi
jne 0x104d6ac
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x140]
jb 0x104d5ff
push 0x100b270
push dword [ebp - 0x124]
call edi
push dword [ebp - 0x124]
call dword [sym.imp.msvcrt.dll_fflush]
push dword [ebp - 0x124]
call dword [sym.imp.msvcrt.dll_ferror]
add esp, 0x10
test eax, eax
je 0x104d6b4
mov esi, 0x80070070
push esi
push 0x1aad013e
jmp 0x104d6c3
push esi
push 0x1a9f013e
jmp 0x104d6c3
push esi
push 0x1aa5013e
jmp 0x104d6c3
xor esi, esi
jmp 0x104d6c8
mov esi, 0x8007000e
push esi
push 0x1a69013e
call fcn.0108c55a
cmp dword [ebp - 0x160], 0
je 0x104d6df
push 2
push dword [ebp - 0x160]
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
xor ebx, ebx
xor edi, edi
push dword [ebp + edi - 0x14c]
push dword [ebp + edi - 0x188]
call fcn.01048980
add edi, 4
cmp edi, 0x10
jb 0x104d6e3
mov edi, dword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
cmp dword [ebp - 0x13c], ebx
je 0x104d714
push dword [ebp - 0x13c]
call edi
cmp dword [ebp - 0x168], ebx
je 0x104d724
push dword [ebp - 0x168]
call edi
cmp dword [ebp - 0x124], ebx
je 0x104d739
push dword [ebp - 0x124]
call dword [sym.imp.msvcrt.dll_fclose]
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x138], ebx
je 0x104d74f
push dword [ebp - 0x138]
call edi
cmp dword [ebp - 0x154], ebx
je 0x104d75f
push dword [ebp - 0x154]
call edi
cmp dword [ebp - 0x134], ebx
je 0x104d76f
push dword [ebp - 0x134]
call edi
cmp dword [ebp - 0x150], ebx
je 0x104d77f
push dword [ebp - 0x150]
call edi
cmp dword [ebp - 0x18c], ebx
je 0x104d78f
push dword [ebp - 0x18c]
call edi
cmp dword [ebp - 0x16c], ebx
je 0x104d79f
push dword [ebp - 0x16c]
call edi
cmp dword [ebp - 0x158], ebx
je 0x104d7af
push dword [ebp - 0x158]
call edi
cmp dword [ebp - 0x174], ebx
je 0x104d7bf
push dword [ebp - 0x174]
call edi
cmp dword [ebp - 0x11c], ebx
je 0x104d7d3
push dword [ebp - 0x11c]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
mov edi, dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
cmp dword [ebp - 0x170], ebx
je 0x104d7ea
push ebx
push dword [ebp - 0x170]
call edi
cmp dword [ebp - 0x164], ebx
je 0x104d7fb
push ebx
push dword [ebp - 0x164]
call edi
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 4]
pop edi
mov dword [0x10d2294], eax
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.01077dc7
leave
ret 0x18