Function at 0x40aaf0
Capabilities:
Generate random numbers via winapi
Query or enumerate registry value

Disassembly:
sub esp, 0xac
mov eax, dword [0x45cefc]
xor eax, esp
mov dword [esp + 0xa4], eax
cmp dword [0x463b14], 0xffffffff
push ebx
push ebp
push esi
push edi
jne 0x40ab98
lea eax, [esp + 0x1c]
push eax
push 0x20019
push 0
push str.SYSTEMCurrentControlSetControlProductOptions
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40ab98
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x98]
push edx
push eax
push eax
mov eax, dword [esp + 0x2c]
push str.ProductType
push eax
mov dword [esp + 0x2c], 0x20
mov dword [0x463b14], 1
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40ab8d
lea ecx, [esp + 0x94]
push str.WinNT
push ecx
call fcn.004313d4
add esp, 8
test eax, eax
je 0x40ab8d
mov dword [0x463b14], 0
mov edx, dword [esp + 0x1c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [0x471d38], 0
jne 0x40ac2d
push str.NETAPI32.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
mov dword [0x471d38], eax
je 0x40ac82
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.NetStatisticsGet
push eax
call esi
mov dword [0x471d3c], eax
mov eax, dword [0x471d38]
push str.NetApiBufferSize
push eax
call esi
mov ecx, dword [0x471d38]
push str.NetApiBufferFree
push ecx
mov dword [0x471d40], eax
call esi
cmp dword [0x471d3c], 0
mov dword [0x471d44], eax
je 0x40ac0b
cmp dword [0x471d40], 0
je 0x40ac0b
test eax, eax
jne 0x40ac24
mov edx, dword [0x471d38]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x471d38], 0
jmp 0x40ac82
cmp dword [0x471d38], 0
je 0x40ac82
cmp dword [0x463b14], 0
mov eax, str.LanmanWorkstation
jne 0x40ac40
mov eax, str.LanmanServer
lea ecx, [esp + 0x18]
push ecx
push 0
push 0
push eax
push 0
call dword [0x471d3c]
test eax, eax
jne 0x40ac82
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x14]
push edx
push eax
call dword [0x471d40]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x14]
push ecx
call fcn.0040a500
mov edx, dword [esp + 0x1c]
add esp, 4
push edx
call dword [0x471d44]
xor ebp, ebp
push ebp
lea eax, [esp + 0x80]
push str..PhysicalDrive_d
push eax
call fcn.00443f9c
mov ebx, dword [sym.imp.KERNEL32.dll_CreateFileA]
add esp, 0xc
push ebp
push ebp
push 3
push ebp
push 3
push ebp
lea ecx, [esp + 0x94]
push ecx
call ebx
mov esi, eax
cmp esi, 0xffffffff
je 0x40ad30
lea esp, [esp]
push 0
lea edx, [esp + 0x18]
push edx
push 0x58
lea eax, [esp + 0x2c]
push eax
push 0
push 0
push 0x70020
push esi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x40acf3
mov edi, dword [esp + 0x14]
lea ecx, [esp + 0x20]
push ecx
call fcn.0040a500
add esp, 4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
add ebp, 1
push ebp
lea edx, [esp + 0x80]
push str..PhysicalDrive_d
push edx
call fcn.00443f9c
add esp, 0xc
push 0
push 0
push 3
push 0
push 3
push 0
lea eax, [esp + 0x94]
push eax
call ebx
mov esi, eax
cmp esi, 0xffffffff
jne 0x40acc0
mov edi, dword [sym.imp.ADVAPI32.dll_CryptGenRandom]
mov ebp, 0x64
jmp 0x40ad40
mov eax, dword [0x4740f8]
test eax, eax
je 0x40adb2
push 0x474100
push 0x140
push eax
call edi
test eax, eax
je 0x40adb2
mov eax, dword [0x471d20]
mov ecx, dword [0x471d18]
xor esi, esi
cmp eax, 0x140
jne 0x40ad75
xor eax, eax
mov dword [0x471d20], eax
mov dl, byte [esi + 0x474100]
add byte [ecx + eax], dl
mov edx, eax
and edx, 0x80000007
jns 0x40ad8d
dec edx
or edx, 0xfffffff8
inc edx
jne 0x40ad9f
call fcn.0040a390
mov eax, dword [0x471d20]
mov ecx, dword [0x471d18]
add eax, 1
add esi, 1
cmp esi, 0x140
mov dword [0x471d20], eax
jl 0x40ad67
sub ebp, 1
jne 0x40ad40
mov edx, 0x474100
mov ecx, 0x140
mov esi, ecx
mov eax, edx
mov byte [eax], 0
add eax, 1
sub esi, 1
jne 0x40adc5
sub ecx, 1
mov byte [edx], 0
add edx, 1
test ecx, ecx
jne 0x40add0
call fcn.0040a390
mov ecx, dword [esp + 0xb4]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
mov eax, 1
call fcn.004231f4
add esp, 0xac
ret