Function at 0x68007ce0
Capabilities:
Access peb ldr_data
Get graphical window text
Get kernel32 base address
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x218]
push ebx
mov ebx, eax
sub esp, 0x27c
mov dword [esp + 4], 8
mov dword [esp], eax
call sym._GetWindowLongW_8
sub esp, 8
mov esi, eax
mov dword [esp + 4], 0x960
mov dword [esp], ebx
call sym._GetDlgItem_8
sub esp, 8
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0x100
mov dword [esp + 4], 0xd
mov dword [esp], eax
call sym._SendMessageW_16
mov eax, dword [esi]
mov ecx, edi
mov edx, 0xb
sub esp, 0x10
call sym._set_cert_string_property
mov dword [esp + 4], 0x961
mov dword [esp], ebx
call sym._GetDlgItem_8
sub esp, 8
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0x100
mov dword [esp + 4], 0xd
mov dword [esp], eax
call sym._SendMessageW_16
mov eax, dword [esi]
mov ecx, edi
mov edx, 0xd
sub esp, 0x10
call sym._set_cert_string_property
mov dword [esp + 4], 0x962
mov dword [esp], ebx
call sym._IsDlgButtonChecked_8
sub esp, 8
test eax, eax
je 0x68007e00
mov dword [esp + 4], 0
mov eax, dword [esi]
mov dword [esp], eax
call sym._CertSetEnhancedKeyUsage_8
sub esp, 8
mov dword [esp], ebx
call sym._GetParent_4
sub esp, 4
mov dword [esp], eax
call sym._GetParent_4
sub esp, 4
mov dword [esp + 8], 0
mov dword [esp + 4], sym._refresh_propsheet_pages_8
mov dword [esp], eax
call sym._EnumChildWindows_12
mov eax, dword [esi + 4]
sub esp, 0xc
test eax, eax
je 0x68007df3
mov dword [eax], 1
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 4], 0x963
mov dword [esp], ebx
call sym._IsDlgButtonChecked_8
sub esp, 8
test eax, eax
je 0x68007e50
mov dword [ebp - 0x254], 0
lea eax, [ebp - 0x254]
mov dword [ebp - 0x250], 0
mov dword [esp + 4], eax
mov eax, dword [esi]
mov dword [esp], eax
call sym._CertSetEnhancedKeyUsage_8
sub esp, 8
jmp 0x68007db5
mov dword [esp + 4], 0x964
mov dword [esp], ebx
call sym._IsDlgButtonChecked_8
sub esp, 8
test eax, eax
je 0x68007db5
mov dword [esp + 4], 0x965
xor edi, edi
mov dword [esp], ebx
call sym._GetDlgItem_8
mov dword [ebp - 0x25c], 0
sub esp, 8
mov dword [ebp - 0x26c], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1004
mov dword [esp], eax
mov dword [ebp - 0x258], 0
call sym._SendMessageW_16
mov dword [ebp - 0x254], 0xc
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x24c], 0
sub esp, 0x10
mov dword [ebp - 0x244], 0xf000
mov dword [ebp - 0x278], ecx
test eax, eax
jle 0x68007fec
mov dword [ebp - 0x270], esi
mov esi, eax
mov dword [ebp - 0x274], ebx
mov ebx, dword [ebp - 0x26c]
jmp 0x68007f1b
add edi, 1
cmp esi, edi
je 0x68007fe0
lea eax, [ebp - 0x254]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0x104b
mov dword [esp], ebx
mov dword [ebp - 0x250], edi
call sym._SendMessageW_16
sub esp, 0x10
test eax, eax
je 0x68007f10
mov eax, dword [ebp - 0x248]
shr eax, 0xc
cmp eax, 2
jne 0x68007f10
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x25c]
test eax, eax
je 0x68008038
lea eax, [eax*4 + 4]
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x258]
mov edx, dword fs:[0x18]
mov dword [esp + 8], eax
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapReAlloc]
mov dword [ebp - 0x258], eax
sub esp, 0x10
test eax, eax
je 0x68007f10
mov edx, dword [ebp - 0x25c]
lea ecx, [edx + 1]
mov dword [ebp - 0x25c], ecx
mov ecx, dword [ebp - 0x26c]
mov ecx, dword [ecx + 4]
mov dword [eax + edx*4], ecx
jmp 0x68007f10
mov esi, dword [ebp - 0x270]
mov ebx, dword [ebp - 0x274]
lea eax, [ebp - 0x25c]
mov dword [esp + 4], eax
mov eax, dword [esi]
mov dword [esp], eax
call sym._CertSetEnhancedKeyUsage_8
mov edx, dword [ebp - 0x258]
sub esp, 8
mov dword [esp + 8], edx
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
jmp 0x68007db5
mov eax, dword [ebp - 0x278]
mov dword [esp + 8], 4
mov dword [esp + 4], 0
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [ebp - 0x258], eax
sub esp, 0xc
jmp 0x68007fae