Function at 0x1006b386
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x1c0
mov eax, dword [0x1011b600]
xor eax, esp
mov dword [esp + 0x1bc], eax
push ebx
mov ebx, dword [esp + 0x1cc]
push ebp
push esi
push edi
mov edi, dword [esp + 0x1d4]
push edi
mov dword [esp + 0x20], ebx
mov esi, dword [edi + 8]
call fcn.10050270
mov ebp, eax
push ebx
push edi
mov dword [esp + 0x58], ebp
call fcn.10050250
xor ebx, ebx
mov dword [esp + 0x2c], 0
add esp, 0xc
mov dword [esp + 0x18], ebx
mov edx, eax
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x48], eax
cmp byte [ebp + 0x39], bl
je 0x1006b32f
mov cl, byte [eax + 0x48]
cmp byte [edx + 0x63], bl
je 0x1006b308
test cl, cl
mov eax, 0x1808
mov esi, 0x1820
cmove eax, esi
jmp 0x1006b334
cmp byte [edx + 0x65], bl
je 0x1006b31e
test cl, cl
mov eax, 0x1a08
mov esi, 0x1a20
cmove eax, esi
jmp 0x1006b334
test cl, cl
mov eax, 0x208
mov esi, 0x220
cmove eax, esi
jmp 0x1006b334
mov eax, 0x1808
mov cl, byte [edx + 0x67]
mov esi, eax
or esi, 4
mov edx, 0x100f30cc
cmp byte [ebp + 0x3a], bl
cmovne esi, eax
mov eax, esi
or eax, 0x10
test cl, cl
cmove esi, eax
mov eax, 0x100f3104
cmove eax, edx
mov dword [esp + 0x50], esi
mov esi, dword [esp + 0x1c]
push eax
push esi
call fcn.10056ac0
movzx eax, byte [ebp + 0x38]
add esp, 8
cmp eax, 7
ja case.default.0x1006b37f
movzx eax, byte [eax + 0x1006c268]
jmp dword [eax*4 + 0x1006c260]
push edi
call fcn.10050270
add esp, 4
mov edi, dword [eax + 0x34]
movzx esi, byte [eax + 0x38]
test edi, edi
je 0x1006b3a2
cmp edi, 0x10000
jne 0x1006b3c6
push 3
push 2
push 0x4f7c
push 0
push 0xa
call fcn.100897c0
add esp, 0x14
mov edi, 0x60000
test al, al
mov ecx, 0x70000
cmovne edi, ecx
sar edi, 0x10
cmp esi, edi
jg 0x1006b423
add esi, 0xfffffffc
cmp esi, 3
ja case.default.0x1006b3d5
jmp dword [esi*4 + 0x1006c270]
or dword [esp + 0x18], 0x80
jmp case.default.0x1006b3d5
or dword [esp + 0x18], 0x200
jmp case.default.0x1006b3d5
or dword [esp + 0x18], 0x800
jmp case.default.0x1006b3d5
push 3
push 2
push 0x4f7c
push 0
push 0xa
call fcn.100897c0
add esp, 0x14
test al, al
je 0x1006b483
or dword [esp + 0x18], 0x2000
inc esi
lea eax, [esi + 4]
cmp eax, edi
jle 0x1006b3d0
mov esi, dword [esp + 0x1c]
mov ecx, dword [esi + 0x3d0]
test ecx, ecx
jne 0x1006b43d
cmp dword [esi + 0x3e4], ebx
je 0x1006ba33
xor eax, eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x24], eax
xor edi, edi
mov dword [esp + 0x2c], eax
xor ebp, ebp
mov dword [esp + 0x30], eax
xor ebx, ebx
mov eax, dword [esi + 0x3e4]
xor esi, esi
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], eax
test eax, eax
je 0x1006b492
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x18], eax
jmp 0x1006b64e
mov ecx, dword [esp + 0x1c]
push 0x100f2fe0
push ecx
jmp 0x1006c23a
push ecx
call fcn.100cf8ab
mov esi, eax
add esp, 4
test esi, esi
je case.0x1006c1ee.2146893056
push 0x5c
push esi
call fcn.100b1b80
mov ebx, eax
add esp, 8
test ebx, ebx
jne 0x1006b4c3
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x18], ecx
jmp 0x1006b61a
mov edi, ebx
sub edi, esi
push edi
push 0x100f3044
push esi
call fcn.100c5d50
add esp, 0xc
test eax, eax
jne 0x1006b4e4
mov ebp, 0x10000
jmp 0x1006b59e
push edi
push 0x100f3050
push esi
call fcn.100c5d50
add esp, 0xc
test eax, eax
jne 0x1006b501
mov ebp, 0x20000
jmp 0x1006b59e
push edi
push 0x100f3060
push esi
call fcn.100c5d50
add esp, 0xc
test eax, eax
jne 0x1006b51e
mov ebp, 0x40000
jmp 0x1006b59e
push edi
push 0x100f3070
push esi
call fcn.100c5d50
add esp, 0xc
test eax, eax
jne 0x1006b538
mov ebp, 0x50000
jmp 0x1006b59e
push edi
push 0x100f307c
push esi
call fcn.100c5d50
add esp, 0xc
test eax, eax
jne 0x1006b552
mov ebp, 0x60000
jmp 0x1006b59e
push edi
push 0x100f3084
push esi
call fcn.100c5d50
add esp, 0xc
test eax, eax
jne 0x1006b56c
mov ebp, 0x70000
jmp 0x1006b59e
push edi
push 0x100f309c
push esi
call fcn.100c5d50
add esp, 0xc
test eax, eax
jne 0x1006b586
mov ebp, 0x80000
jmp 0x1006b59e
push edi
push 0x100f30b4
push esi
call fcn.100c5d50
add esp, 0xc
test eax, eax
jne 0x1006b612
mov ebp, 0x90000
inc ebx
push 0x5c
push ebx
call fcn.100b1b80
mov edi, eax
add esp, 8
test edi, edi
jne 0x1006b5ba
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x18], ecx
jmp 0x1006b61a
lea eax, [edi + 1]
mov ecx, eax
mov dword [esp + 0x34], eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006b5c6
sub ecx, edx
cmp ecx, 0x28
je 0x1006b5de
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x18], ecx
jmp 0x1006b61a
push ebx
mov byte [edi], 0
call dword [0x1011b0b8]
mov byte [edi], 0x5c
add esp, 4
mov edi, eax
mov dword [esp + 0x40], eax
test edi, edi
jne 0x1006b605
mov ecx, dword [esp + 0x18]
lea edi, [eax + 0x1b]
mov dword [esp + 0x18], ecx
jmp 0x1006b61f
mov eax, dword [esp + 0x18]
mov dword [esp + 0x18], eax
jmp 0x1006b6a8
mov eax, dword [esp + 0x18]
mov dword [esp + 0x18], eax
mov edi, 0x3a
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x3d0]
cmp byte [eax], 0
je 0x1006c200
push 0x100ef144
push eax
call fcn.10068bc0
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x1006c200
mov edi, dword [esp + 0x40]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x410]
test eax, eax
je 0x1006b694
push 0x100f31cc
push eax
call fcn.1005c590
mov ecx, dword [esp + 0x24]
add esp, 8
test eax, eax
jne 0x1006b694
cmp dword [esp + 0x3c], eax
mov eax, 0x100f31d0
jne 0x1006b683
mov eax, dword [ecx + 0x3d0]
push eax
push 0x100f31e0
push ecx
call fcn.100569f0
add esp, 0xc
jmp 0x1006b6e5
mov eax, dword [esp + 0x3c]
test ebx, ebx
jne 0x1006b7aa
test eax, eax
jne 0x1006b7aa
push edi
mov eax, ebp
or eax, 0x4000
push eax
push 0
push 0
push 9
call dword [sym.imp.CRYPT32.dll_CertOpenStore]
mov ebx, eax
test ebx, ebx
jne 0x1006b700
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esp + 0x1c]
push eax
push edi
push ebp
push 0x100f3308
push ecx
call fcn.100569f0
push edi
call dword [0x1011b0b0]
add esp, 0x18
test esi, esi
je 0x1006b9d9
push esi
call fcn.100c46b7
add esp, 4
mov eax, 0x3a
jmp 0x1006c247
push edi
call dword [0x1011b0b0]
add esp, 4
mov dword [esp + 0x54], 0x14
lea eax, [esp + 0x94]
mov dword [esp + 0x58], eax
lea eax, [esp + 0x54]
push 0
push 0
push eax
lea eax, [esp + 0xa0]
push eax
push 4
push 0x28
push dword [esp + 0x4c]
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
test eax, eax
jne 0x1006b760
test esi, esi
je 0x1006b797
push esi
call fcn.100c46b7
add esp, 4
push 0
push ebx
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
mov eax, 0x3a
jmp 0x1006c247
push 0
lea eax, [esp + 0x58]
push eax
push 0x10000
push 0
push 0x10001
push ebx
call dword [sym.imp.CRYPT32.dll_CertFindCertificateInStore]
mov dword [esp + 0x20], eax
test esi, esi
je 0x1006b78f
push esi
call fcn.100c46b7
mov eax, dword [esp + 0x24]
add esp, 4
test eax, eax
jne 0x1006ba2b
push 0
push ebx
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
mov eax, 0x3a
jmp 0x1006c247
xor edi, edi
mov ebp, 0x100f31d0
test eax, eax
jne 0x1006b7bb
mov ebp, dword [ecx + 0x3d0]
test esi, esi
je 0x1006b7c8
push esi
call fcn.100c46b7
add esp, 4
test ebx, ebx
je 0x1006b83f
push 2
xor esi, esi
push esi
push ebx
call fcn.100c5035
add esp, 0xc
mov dword [esp + 0x34], eax
test eax, eax
sete byte [esp + 0x14]
test eax, eax
jne 0x1006b8e4
push ebx
call fcn.100c7cd4
mov esi, eax
add esp, 4
test esi, esi
jns 0x1006b8e0
mov byte [esp + 0x14], 0
mov esi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
test esi, esi
je 0x1006b929
push ebx
push 1
push ecx
push esi
call fcn.100c4c58
add esp, 0x10
cmp eax, 1
jne 0x1006b929
push ebx
call fcn.100bfb69
add esp, 4
cmp byte [esp + 0x14], 0
je 0x1006b932
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x40], eax
mov eax, dword [ecx + 0x420]
mov dword [esp + 0x44], ebx
test eax, eax
je 0x1006b86b
mov edi, eax
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x1006b862
sub edi, ecx
lea eax, [edi*2 + 2]
push eax
call dword [0x1011b0ac]
mov esi, eax
add esp, 4
test esi, esi
je 0x1006b988
test edi, edi
je 0x1006b95b
mov eax, dword [esp + 0x1c]
lea ecx, [edi + 1]
push ecx
push esi
push edi
push dword [eax + 0x420]
push 8
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jns 0x1006b95d
xor eax, eax
mov word [esi], ax
push 3
push 2
push 0
push 0
push 6
call fcn.100897c0
add esp, 0x14
test al, al
lea eax, [esp + 0x40]
je 0x1006b970
push 0x8000
jmp 0x1006b972
mov eax, dword [esp + 0x34]
mov ecx, esi
mov dword [esp + 0x30], ecx
test eax, eax
jne 0x1006b920
push eax
push eax
push ebx
call fcn.100c5035
add esp, 0xc
test eax, eax
sete byte [esp + 0x14]
test eax, eax
jne 0x1006b805
lea eax, [esi + 1]
push eax
call dword [0x1011b0ac]
mov esi, eax
add esp, 4
mov dword [esp + 0x2c], esi
jmp 0x1006b809
mov esi, dword [esp + 0x2c]
jmp 0x1006b80d
push ebx
call fcn.100bfb69
add esp, 4
mov eax, dword [esp + 0x1c]
push dword [eax + 0x3d0]
push 0x100f321c
push eax
call fcn.100569f0
push esi
call dword [0x1011b0b0]
add esp, 0x10
mov eax, 0x3a
jmp 0x1006c247
xor eax, eax
cmp eax, edi
jg 0x1006b8b3
xor ecx, ecx
mov word [esi + eax*2], cx
jmp 0x1006b8b8
push 0
push esi
push eax
call dword [sym.imp.CRYPT32.dll_PFXImportCertStore]
push esi
mov dword [esp + 0x28], eax
call dword [0x1011b0b0]
add esp, 4
cmp dword [esp + 0x3c], 0
jne 0x1006b999
push ebx
call dword [0x1011b0b0]
add esp, 4
mov ebx, dword [esp + 0x24]
test ebx, ebx
jne 0x1006b9e3
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x56
jne 0x1006b9c6
push ebp
push 0x100f3244
push dword [esp + 0x24]
call fcn.100569f0
add esp, 0xc
lea eax, [ebx + 0x3a]
jmp 0x1006c247
push eax
push ebp
push 0x100f3280
push dword [esp + 0x28]
call fcn.100569f0
add esp, 0x10
mov eax, 0x3a
jmp 0x1006c247
push 0
push 0
push 0
push 0
push 0x10001
push ebx
call dword [sym.imp.CRYPT32.dll_CertFindCertificateInStore]
mov dword [esp + 0x20], eax
test eax, eax
jne 0x1006ba2b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebp
push 0x100f32c0
push dword [esp + 0x28]
call fcn.100569f0
add esp, 0x10
push 0
push ebx
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
mov eax, 0x3a
jmp 0x1006c247
mov ebp, dword [esp + 0x4c]
mov esi, dword [esp + 0x1c]
push 0x20
push 1
call dword [0x1011b0bc]
mov ecx, dword [esp + 0x50]
add esp, 8
mov dword [ecx], eax
test eax, eax
jne 0x1006ba7e
push 0x100f3348
push esi
call fcn.100569f0
mov eax, dword [esp + 0x28]
add esp, 8
test eax, eax
je 0x1006ba67
push eax
call dword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
test ebx, ebx
je case.0x1006c1ee.2146893056
push 0
push ebx
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
mov eax, 0x1b
jmp 0x1006c247
mov dword [eax + 0x18], 1
mov eax, dword [ecx]
mov dword [eax + 0x14], ebx
cmp dword [ebp + 0x10], 0
jne 0x1006bfba
push 3
push 2
push 0x4563
push 0
push 0xa
call fcn.100897c0
add esp, 0x14
test al, al
je 0x1006bfba
push 0x2c
lea eax, [esp + 0x60]
push 0
push eax
call fcn.100b1380
xorps xmm0, xmm0
mov dword [esp + 0xd8], 0
push 0x54
lea eax, [esp + 0xf8]
movq qword [esp + 0xb4], xmm0
push 0
push eax
movups xmmword [esp + 0xac], xmm0
movups xmmword [esp + 0xe8], xmm0
movq qword [esp + 0xf8], xmm0
call fcn.100b1380
mov edi, dword [ebp + 0x14]
xor eax, eax
add esp, 0x18
mov word [esp + 0x34], ax
xor ebp, ebp
mov dword [esp + 0x36], eax
mov word [esp + 0x3a], ax
mov word [esp + 0x24], ax
mov dword [esp + 0x26], eax
mov word [esp + 0x2a], ax
test edi, edi
je 0x1006bf3f
xorps xmm0, xmm0
mov byte [esp + 0x13], 1
mov al, 1
mov byte [esp + 0x15], 1
movups xmmword [esp + 0xac], xmm0
mov byte [esp + 0x16], 1
movups xmmword [esp + 0xbc], xmm0
mov byte [esp + 0x17], 1
mov byte [esp + 0x14], al
nop dword [eax + eax]
cmp byte [edi], 0
je 0x1006bda5
cmp ebp, 5
jge 0x1006bda5
push 0x3a
push edi
call fcn.100b1b80
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x1006bb89
mov esi, ebx
sub esi, edi
jmp 0x1006bb99
mov esi, edi
lea ecx, [esi + 1]
nop
mov al, byte [esi]
inc esi
test al, al
jne 0x1006bb90
sub esi, ecx
cmp esi, 0x1f
ja 0x1006bd8d
push esi
lea eax, [esp + 0xb0]
push edi
push eax
call fcn.100c6da0
add esp, 0xc
mov byte [esp + esi + 0xac], 0
cmp byte [esp + 0x13], 0
je 0x1006bc08
lea ecx, [esp + 0xac]
mov eax, 0x100f3398
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006bbf0
test dl, dl
je 0x1006bbec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006bbf0
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006bbd0
xor eax, eax
jmp 0x1006bbf5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1006bc08
mov al, byte [esp + 0x14]
xor cl, cl
mov byte [esp + 0x13], cl
jmp 0x1006bd4a
cmp byte [esp + 0x15], 0
je 0x1006bc5c
lea ecx, [esp + 0xac]
mov eax, 0x100f33b0
nop dword [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006bc40
test dl, dl
je 0x1006bc3c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006bc40
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006bc20
xor eax, eax
jmp 0x1006bc45
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1006bc5c
mov al, byte [esp + 0x14]
xor ah, ah
mov cl, byte [esp + 0x13]
mov byte [esp + 0x15], ah
jmp 0x1006bd4e
cmp byte [esp + 0x16], 0
je 0x1006bcb0
lea ecx, [esp + 0xac]
mov eax, 0x100f33c8
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006bc90
test dl, dl
je 0x1006bc8c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006bc90
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006bc70
xor eax, eax
jmp 0x1006bc95
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1006bcb0
mov al, byte [esp + 0x14]
xor ch, ch
mov cl, byte [esp + 0x13]
mov ah, byte [esp + 0x15]
mov byte [esp + 0x16], ch
jmp 0x1006bd52
cmp byte [esp + 0x17], 0
je 0x1006bd04
lea ecx, [esp + 0xac]
mov eax, 0x100f33e8
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006bce3
test dl, dl
je 0x1006bcdf
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006bce3
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006bcc3
xor eax, eax
jmp 0x1006bce8
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1006bd04
mov al, byte [esp + 0x14]
xor dl, dl
mov cl, byte [esp + 0x13]
mov ah, byte [esp + 0x15]
mov ch, byte [esp + 0x16]
mov byte [esp + 0x17], dl
jmp 0x1006bd56
cmp byte [esp + 0x14], 0
je 0x1006bd6a
lea ecx, [esp + 0xac]
mov eax, 0x100f3404
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006bd37
test dl, dl
je 0x1006bd33
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006bd37
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006bd17
xor eax, eax
jmp 0x1006bd3c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1006bd6a
mov cl, byte [esp + 0x13]
xor al, al
mov byte [esp + 0x14], al
mov ah, byte [esp + 0x15]
mov ch, byte [esp + 0x16]
mov dl, byte [esp + 0x17]
mov edi, ebx
test ebx, ebx
je 0x1006bd5f
lea edi, [ebx + 1]
inc ebp
test edi, edi
jne 0x1006bb60
jmp 0x1006bdb5
lea eax, [esp + 0xac]
push eax
push 0x100f341c
push dword [esp + 0x24]
call fcn.100569f0
add esp, 0xc
mov eax, 0x3b
jmp 0x1006c247
push 0x100f336c
push dword [esp + 0x20]
call fcn.100569f0
mov eax, 0x3b
jmp 0x1006c244
mov ch, byte [esp + 0x16]
mov dl, byte [esp + 0x17]
mov ah, byte [esp + 0x15]
mov cl, byte [esp + 0x13]
test cl, cl
je 0x1006bde1
test ah, ah
je 0x1006bde1
test ch, ch
je 0x1006bde1
test dl, dl
je 0x1006bde5
test al, al
je 0x1006bde9
push 0x100f3444
push dword [esp + 0x20]
call fcn.100569f0
mov eax, 0x3b
jmp 0x1006c244
test dl, dl
jne 0x1006bde9
test al, al
je 0x1006be5c
mov dword [esp + 0x34], 0x200020
lea esi, [esp + 0x34]
mov dword [esp + 0x38], 0x100f347c
mov dword [esp + 0xcc], 2
mov dword [esp + 0xdc], esi
mov dword [esp + 0xd8], 1
mov dword [esp + 0xd0], 0x80008
mov dword [esp + 0xd4], 0x100f349c
cmp dl, al
je 0x1006be55
test dl, dl
je 0x1006be4a
mov dword [esp + 0xe0], 0x80
mov ebp, 1
jmp 0x1006be5e
mov dword [esp + 0xe4], 0x40
mov ebp, 1
jmp 0x1006be5e
xor ebp, ebp
mov al, ah
test cl, cl
jne 0x1006be84
mov byte [esp + 0x13], cl
mov byte [esp + 0x16], ch
mov ecx, dword [esp + 0x18]
mov byte [esp + 0x15], ah
mov dword [esp + 0x18], ecx
test al, al
je 0x1006bf0d
mov cl, byte [esp + 0x13]
lea edx, [ebp*8]
mov dword [esp + 0x24], 0x200020
sub edx, ebp
mov dword [esp + 0x28], 0x100f34a4
cmp cl, ah
je 0x1006beb2
test cl, cl
mov esi, 0x100f34c4
mov eax, 0x100f34d4
cmove esi, eax
jmp 0x1006beb7
mov esi, 0x100f349c
mov bl, byte [esp + 0x15]
xor eax, eax
cmp cl, bl
sete al
lea eax, [eax*4 + 4]
movzx ecx, ax
xor eax, eax
cmp byte [esp + 0x13], bl
setne al
add eax, 2
inc ebp
mov dword [esp + edx*4 + 0xcc], eax
lea eax, [esp + 0x24]
mov word [esp + edx*4 + 0xd0], cx
mov word [esp + edx*4 + 0xd2], cx
mov dword [esp + edx*4 + 0xd4], esi
mov dword [esp + edx*4 + 0xdc], eax
mov dword [esp + edx*4 + 0xd8], 1
cmp byte [esp + 0x16], 0
je 0x1006bf3f
lea eax, [ebp*8]
sub eax, ebp
inc ebp
mov dword [esp + eax*4 + 0xcc], 2
mov dword [esp + eax*4 + 0xd0], 0x240024
mov dword [esp + eax*4 + 0xd4], 0x100f34e4
mov ecx, dword [esp + 0x50]
lea eax, [esp + 0xcc]
mov dword [esp + 0xa4], eax
or ecx, 0x400000
cmp dword [esp + 0x20], 0
lea eax, [esp + 0x94]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x18]
not eax
mov dword [esp + 0xa0], ebp
mov dword [esp + 0x80], 1
mov dword [esp + 0x5c], 5
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x9c], eax
je 0x1006bfa7
lea eax, [esp + 0x20]
mov dword [esp + 0x64], 1
mov dword [esp + 0x68], eax
mov ebx, dword [esp + 0x48]
mov ecx, dword [ebx]
lea eax, [ecx + 8]
push eax
lea eax, [esp + 0x60]
jmp 0x1006c179
mov edi, dword [ebp + 0x10]
lea eax, [esp + 0x5c]
push 0x38
push 0
push eax
call fcn.100b1380
mov ecx, dword [esp + 0x5c]
add esp, 0xc
mov eax, dword [esp + 0x18]
mov dword [esp + 0x5c], 4
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x7c], eax
test edi, edi
je 0x1006c147
test eax, 0x2000
je 0x1006c006
push 0x100f3538
push esi
call fcn.10056ac0
add esp, 8
cmp dword [ebp + 0x14], 0
je 0x1006c021
push 0x100f35c8
push esi
call fcn.100569f0
mov eax, 0x3b
jmp 0x1006c244
xor ebx, ebx
mov dword [esp + 0x24], ebx
cmp byte [edi], 0
je 0x1006c11e
cmp ebx, 0x2f
jge 0x1006c11e
push 0
push 0
push edi
call fcn.100c3bf0
add esp, 0xc
test eax, eax
jne 0x1006c0f7
push 0x3a
push edi
call fcn.100b1b80
mov esi, eax
add esp, 8
test esi, esi
je 0x1006c063
sub esi, edi
jmp 0x1006c071
mov esi, edi
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x1006c068
sub esi, ecx
mov edx, dword [0x100f2b78]
xor ebx, ebx
test edx, edx
je 0x1006c0ba
nop dword [eax]
mov eax, edx
lea ebp, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006c085
sub eax, ebp
cmp esi, eax
jne 0x1006c0a1
push esi
push edi
push edx
call fcn.100c5d50
add esp, 0xc
test eax, eax
je 0x1006c0af
mov edx, dword [ebx*8 + 0x100f2b80]
inc ebx
test edx, edx
jne 0x1006c080
jmp 0x1006c0ba
mov eax, dword [ebx*8 + 0x100f2b7c]
test eax, eax
jne 0x1006c0f3
push 0x11
push 0x100f3018
push edi
call fcn.100c5d50
add esp, 0xc
test eax, eax
je 0x1006c0e2
push 0x15
push 0x100f302c
push edi
call fcn.100c5d50
add esp, 0xc
test eax, eax
jne 0x1006c12f
or dword [esp + 0x8c], 0x400000
mov ebx, dword [esp + 0x24]
jmp 0x1006c103
mov ebx, dword [esp + 0x24]
mov dword [esp + ebx*4 + 0xcc], eax
inc ebx
mov dword [esp + 0x24], ebx
push 0x3a
push edi
call fcn.100b1b80
add esp, 8
test eax, eax
lea edi, [eax + 1]
cmove edi, eax
test edi, edi
jne 0x1006c027
lea eax, [esp + 0xcc]
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], eax
jmp 0x1006c154
push 0x100f3648
push dword [esp + 0x20]
call fcn.100569f0
mov eax, 0x3b
jmp 0x1006c244
or ecx, 0x400000
mov dword [esp + 0x8c], ecx
cmp dword [esp + 0x20], 0
je 0x1006c16b
lea eax, [esp + 0x20]
mov dword [esp + 0x60], 1
mov dword [esp + 0x64], eax
mov ebx, dword [esp + 0x48]
mov ecx, dword [ebx]
lea eax, [ecx + 8]
push eax
lea eax, [esp + 0x60]
push ecx
push 0
push 0
push eax
mov eax, dword [0x101203e0]
push 0
push 2
push 0x100f3508
mov eax, dword [eax + 0xc]
push 0
call eax
mov esi, eax
mov eax, dword [esp + 0x20]
test eax, eax
je 0x1006c1a5
push eax
call dword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
test esi, esi
je 0x1006c1fc
push 0x100
lea eax, [esp + 0xd0]
push eax
push esi
call fcn.10042160
push eax
push 0x100f3678
push dword [esp + 0x30]
call fcn.100569f0
push dword [ebx]
call dword [0x1011b0b0]
add esi, 0x7ff6fd00
mov dword [ebx], 0
add esp, 0x1c
cmp esi, 0xe
ja case.0x1006c1ee.2146893055
movzx eax, byte [esi + 0x1006c28c]
jmp dword [eax*4 + 0x1006c280]
mov eax, 0x23
jmp 0x1006c247
xor eax, eax
jmp 0x1006c247
mov eax, dword [esp + 0x1c]
push dword [eax + 0x3d0]
push 0x100f3190
push eax
call fcn.100569f0
push esi
call fcn.100c46b7
add esp, 0x10
mov eax, edi
jmp 0x1006c247
push 0x100f313c
push esi
call fcn.100569f0
mov eax, 4
jmp 0x1006c244
push 0x100f3158
push esi
call fcn.100569f0
mov eax, 0x23
add esp, 8
mov ecx, dword [esp + 0x1cc]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.100af09a
add esp, 0x1c0
ret