Function at 0x42ce70
Capabilities:
Link many functions at runtime

Disassembly:
push ebx
push esi
push str.wintrust.dll
xor esi, esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ebx, eax
test ebx, ebx
jne 0x42ceb6
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42ceb1
test byte [eax + 0x3c], 1
je 0x42ceb1
cmp byte [eax + 0x39], 5
jb 0x42ceb1
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x446ce4
push 0xa
push ecx
push edx
call fcn.004170b0
mov eax, esi
pop esi
pop ebx
ret
push edi
push 0x68
call fcn.0042e047
mov edi, eax
add esp, 4
test edi, edi
je 0x42d4db
push 0x68
push 0
push edi
call fcn.0042d860
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
add esp, 0xc
push str.CryptCATAdminAcquireContext
push ebx
call esi
test eax, eax
mov dword [edi], eax
jne 0x42cf1c
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0xb
jmp 0x42d4bd
push str.CryptCATAdminReleaseContext
push ebx
call esi
test eax, eax
mov dword [edi + 4], eax
jne 0x42cf5b
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0xc
jmp 0x42d4bd
push str.CryptCATAdminReleaseCatalogContext
push ebx
call esi
test eax, eax
mov dword [edi + 8], eax
jne 0x42cf9a
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0xd
jmp 0x42d4bd
push str.CryptCATCatalogInfoFromContext
push ebx
call esi
test eax, eax
mov dword [edi + 0xc], eax
jne 0x42cfd9
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0xe
jmp 0x42d4bd
push str.CryptCATAdminEnumCatalogFromHash
push ebx
call esi
test eax, eax
mov dword [edi + 0x10], eax
jne 0x42d018
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0xf
jmp 0x42d4bd
push str.CryptCATAdminCalcHashFromFileHandle
push ebx
call esi
test eax, eax
mov dword [edi + 0x14], eax
jne 0x42d057
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x10
jmp 0x42d4bd
push str.WinVerifyTrust
push ebx
call esi
test eax, eax
mov dword [edi + 0x18], eax
jne 0x42d096
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x11
jmp 0x42d4bd
push str.WTHelperGetProvCertFromChain
push ebx
call esi
push str.WTHelperGetProvSignerFromChain
push ebx
mov dword [edi + 0x1c], eax
call esi
push str.WTHelperProvDataFromStateData
push ebx
mov dword [edi + 0x20], eax
call esi
test eax, eax
mov dword [edi + 0x24], eax
jne 0x42d0eb
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x14
jmp 0x42d4bd
push str.CryptCATAdminAddCatalog
push ebx
call esi
test eax, eax
mov dword [edi + 0x28], eax
jne 0x42d12a
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x15
jmp 0x42d4bd
push str.CryptCATOpen
push ebx
call esi
test eax, eax
mov dword [edi + 0x2c], eax
jne 0x42d169
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x16
jmp 0x42d4bd
push str.CryptCATEnumerateMember
push ebx
call esi
test eax, eax
mov dword [edi + 0x34], eax
jne 0x42d1a8
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x17
jmp 0x42d4bd
push str.CryptCATClose
push ebx
call esi
test eax, eax
mov dword [edi + 0x30], eax
jne 0x42d1e7
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x18
jmp 0x42d4bd
push str.CryptCATGetMemberInfo
push ebx
call esi
test eax, eax
mov dword [edi + 0x38], eax
jne 0x42d226
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x19
jmp 0x42d4bd
push str.CryptCATEnumerateCatAttr
push ebx
call esi
test eax, eax
mov dword [edi + 0x3c], eax
jne 0x42d265
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x1a
jmp 0x42d4bd
push str.CryptCATEnumerateAttr
push ebx
call esi
test eax, eax
mov dword [edi + 0x40], eax
jne 0x42d2a4
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x1b
jmp 0x42d4bd
push str.crypt32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ebx, eax
push 0x446db8
push ebx
call esi
test eax, eax
mov dword [edi + 0x44], eax
jne 0x42d2f0
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x1d
jmp 0x42d4bd
push 0x446da8
push ebx
call esi
test eax, eax
mov dword [edi + 0x48], eax
jne 0x42d32f
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x1e
jmp 0x42d4bd
push str.CertDeleteCertificateFromStore
push ebx
call esi
test eax, eax
mov dword [edi + 0x4c], eax
jne 0x42d36e
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x1f
jmp 0x42d4bd
push str.CertCompareCertificate
push ebx
call esi
test eax, eax
mov dword [edi + 0x50], eax
jne 0x42d3ad
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x20
jmp 0x42d4bd
push str.CertEnumCertificatesInStore
push ebx
call esi
test eax, eax
mov dword [edi + 0x54], eax
jne 0x42d3ec
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x21
jmp 0x42d4bd
push str.CertAddSerializedElementToStore
push ebx
call esi
test eax, eax
mov dword [edi + 0x58], eax
jne 0x42d42b
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x22
jmp 0x42d4bd
push str.CertNameToStrW
push ebx
call esi
test eax, eax
mov dword [edi + 0x5c], eax
jne 0x42d45f
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x23
jmp 0x42d4bd
push 0x446d10
push ebx
call esi
test eax, eax
mov dword [edi + 0x64], eax
jne 0x42d48f
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x24
jmp 0x42d4bd
push 0x446cf4
push ebx
call esi
test eax, eax
mov dword [edi + 0x60], eax
jne 0x42d4d9
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42d4ca
test byte [eax + 0x3c], 1
je 0x42d4ca
cmp byte [eax + 0x39], 5
jb 0x42d4ca
push 0x446ce4
push 0x25
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push ecx
push edx
call fcn.004170b0
push edi
call fcn.0042df6a
add esp, 4
pop edi
pop esi
xor eax, eax
pop ebx
ret
mov eax, edi
pop edi
pop esi
pop ebx
ret