Function at 0x44d2c0
Capabilities:
Generate random numbers via rtlgenrandom
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x10
mov esi, dword [ebp + 8]
mov eax, dword [0x644040]
xor eax, ebp
mov dword [esp + 8], eax
xorps xmm0, xmm0
movsd qword [esi], xmm0
mov dword [esi + 8], 0
xor edi, edi
dec edi
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44dab0
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44dfb0
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e120
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44d2f0
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44db00
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44dfc7
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e123
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44d36b
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44db50
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44dfde
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e126
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44d3e6
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44dba0
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44dff5
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e129
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44d461
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44dbf0
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44e00c
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e12c
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44d4dc
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44dc40
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44e023
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e12f
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44d557
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44dc90
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44e03a
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e132
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44d5d2
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44dce0
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44e051
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e135
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44d64d
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44dd30
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44e068
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e138
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44d6c8
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44dd80
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44e07f
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e13b
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44d743
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44ddd0
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44e096
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e13e
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44d7be
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44de20
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44e0ad
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e141
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44d839
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44de70
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44e0c4
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e144
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44d8b4
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44dec0
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44e0db
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e147
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44d92f
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44df10
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44e0f2
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e14a
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44d9aa
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ebx, 0xffffffef
mov dword [esp + 4], edi
mov dword [esp], edi
mov eax, dword [0x6496dc]
mov ecx, dword [0x64783c]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44df60
mov ecx, dword [0x6496d8]
test ecx, ecx
je 0x44e109
call dword [0x63e64c]
push 8
lea eax, [esp + 4]
push eax
call ecx
test eax, eax
je 0x44e14d
mov eax, dword [esp]
mov ecx, dword [esp + 4]
cmp ebx, eax
mov edx, edi
sbb edx, ecx
jb 0x44da25
push 0
push 0x1a
push ecx
push eax
call fcn.00584940
add al, 0x41
movzx eax, al
mov ecx, esi
push eax
push 1
call fcn.0050b110
mov ecx, dword [esp + 8]
xor ecx, ebp
call fcn.00568175
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44d318
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e150
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44d318
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44d393
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e153
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44d393
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44d40e
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e156
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44d40e
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44d489
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e159
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44d489
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44d504
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e15c
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44d504
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44d57f
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e15f
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44d57f
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44d5fa
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e162
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44d5fa
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44d675
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e165
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44d675
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44d6f0
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e168
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44d6f0
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44d76b
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e16b
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44d76b
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44d7e6
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e16e
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44d7e6
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44d861
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e171
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44d861
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44d8dc
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e174
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44d8dc
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44d957
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e177
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44d957
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44d9d2
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e17a
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44d9d2
push 0x6496dc
call fcn.00564ee8
add esp, 4
cmp dword [0x6496dc], 0xffffffff
jne 0x44da4d
push str.bcryptprimitives.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x44e17d
push str.ProcessPrng
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6496d8], eax
push 0x6496dc
call fcn.00564f37
add esp, 4
jmp 0x44da4d
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44d33d
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44d3b8
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44d433
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44d4ae
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44d529
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44d5a4
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44d61f
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44d69a
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44d715
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44d790
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44d80b
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44d886
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44d901
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44d97c
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44d9f7
int3
push 8
lea eax, [esp + 4]
push eax
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x44da72
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3