Function at 0x45d050
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
mov eax, dword [0x538a60]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov esi, edx
mov ebx, ecx
xor edi, edi
mov edx, str.AMD64
mov eax, 0x560e08
mov cx, word [eax]
cmp cx, word [edx]
jne 0x45d099
test cx, cx
je 0x45d095
mov cx, word [eax + 2]
cmp cx, word [edx + 2]
jne 0x45d099
add eax, 4
add edx, 4
test cx, cx
jne 0x45d073
xor eax, eax
jmp 0x45d09e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x45d109
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0x14
jle 0x45d109
push 0x14
push str.C:windows_system32_
push ebx
call fcn.004bcca1
add esp, 0xc
test eax, eax
jne 0x45d109
push 0x2000
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, eax
test edi, edi
je 0x45d27a
mov ecx, 0x2000
mov byte [eax], 0
lea eax, [eax + 1]
dec ecx
jne 0x45d0e5
lea eax, [ebx + 0x28]
push eax
push str.C:windows_sysnative_s
push 0xffffffffffffffff
push 0x800
push edi
call fcn.004bb4ef
add esp, 0x14
mov ebx, edi
push 0x30
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0xaac56b
movdqu xmmword [ebp - 0x24], xmm0
lea eax, [ebp - 0x54]
mov dword [ebp - 0x24], 0x10
push 0
push eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x10], 0x11d0cd44
mov dword [ebp - 0xc], 0xc000c28c
mov dword [ebp - 8], 0xee95c24f
call fcn.004c13c0
mov ebx, dword [sym.imp.WINTRUST.dll_WinVerifyTrust]
lea eax, [ebp - 0x24]
add esp, 0xc
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x54]
mov dword [ebp - 0x54], 0x30
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
push eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x48], 2
push eax
push 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x28], 0
call ebx
cmp eax, 0x800b0100
jg 0x45d201
je 0x45d1d8
cmp eax, 0x80092026
je 0x45d1d1
cmp eax, 0x800b0004
jne 0x45d20c
push str.The_signature_is_present__but_not_trusted.
jmp 0x45d230
push str.CRYPT_E_SECURITY_SETTINGS___The_hash_representing_the_subject_or_the_publisher_wasnt_explicitly_trusted_by_the_admin_and_admin_policy_has_disabled_user_trust._No_signature__publisher_or_timestamp_errors.
jmp 0x45d230
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x800b0100
je 0x45d1fa
cmp eax, 0x800b0003
je 0x45d1fa
cmp eax, 0x800b0001
je 0x45d1fa
push str.An_unknown_error_occurred_trying_to_verify_the_signature_of_the_file.
jmp 0x45d230
push str.The_file_is_not_signed.
jmp 0x45d230
cmp eax, 0x800b0111
je 0x45d22b
test eax, eax
je 0x45d224
push eax
push str.Error_is:_0x_x.
push 0xffffffffffffffff
push 0x800
push esi
call fcn.004bb4ef
add esp, 0x14
jmp 0x45d240
push str.The_file_is_signed_and_the_signature_was_verified.
jmp 0x45d230
push str.The_signature_is_present__but_specifically_disallowed.
push 0xffffffffffffffff
push 0x800
push esi
call fcn.004bb4ef
add esp, 0x10
lea eax, [ebp - 0x54]
mov dword [ebp - 0x38], 2
push eax
lea eax, [ebp - 0x14]
push eax
push 0
call ebx
test edi, edi
je 0x45d267
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004bae74
mov esp, ebp
pop ebp
ret
push str.Failed_to_allocate_memory_on_process_heap_n
call fcn.004bc829
add esp, 4
push 1
call fcn.004bcc8d
int3