Function at 0x6e9223a0
Capabilities:
Inspect section memory permissions

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x98
mov eax, dword [ecx + 4]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0x20], 0
mov esi, dword [ecx]
mov ebx, dword [ecx + 8]
mov dword [ebp - 0x4c], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x2c], edx
mov edx, dword [ecx + 0x14]
mov dword [ebp - 0x70], eax
and eax, 0x10020000
mov dword [ebp - 0x48], edx
je 0x6e9223ef
test byte [0x6e928d60], 1
jne 0x6e9232ed
lea eax, [ebp - 0x20]
xor edi, edi
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x1c]
mov dword [esp + 0x18], eax
mov eax, 0x8000
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], eax
mov eax, dword [ebx]
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 4]
mov dword [esp], esi
mov dword [esp + 8], eax
mov eax, 7
mov dword [esp + 4], eax
call sym.crypt32.dll_CryptDecodeObjectEx
mov edx, dword [ebp - 0x48]
sub esp, 0x20
test edx, edx
setne byte [ebp - 0x66]
test eax, eax
je 0x6e92269a
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x70]
mov esi, dword [edx + 4]
and eax, 0x2000000
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x44], esi
je 0x6e922462
mov eax, dword [edx]
cmp eax, 1
jbe 0x6e922462
lea eax, [esi + eax*8 - 8]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x70]
mov ebx, 0x6e938710
mov dword [ebp - 0x84], ebx
test eax, 0x40000000
je 0x6e9226cc
mov eax, dword [ebp - 0x84]
add eax, 2
cmp word [eax], 0
jne 0x6e922481
mov ecx, dword [ebp - 0x84]
sub eax, ecx
mov ecx, 0x6e9386fe
mov dword [ebp - 0x88], eax
sar eax, 1
test dword [ebp - 0x70], 0x20000000
mov dword [ebp - 0x80], eax
mov eax, 0x6e938702
cmovne eax, ecx
mov dword [ebp - 0x74], eax
add eax, 2
cmp word [eax], 0
jne 0x6e9224b4
mov edi, dword [ebp - 0x74]
sub eax, edi
mov dword [ebp - 0x78], eax
sar eax, 1
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
sete byte [ebp - 0x65]
je 0x6e9224df
cmp byte [ebp - 0x66], 0
je 0x6e92334e
mov dword [ebp - 0x6c], 0
movzx eax, byte [ebp - 0x70]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x5c], eax
mov eax, dword [edx]
cmp eax, dword [ebp - 0x6c]
jbe 0x6e922686
mov ebx, dword [ebp - 0x30]
cmp dword [ebp - 0x48], ebx
ja 0x6e922511
cmp byte [ebp - 0x65], 0
je 0x6e922640
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x70]
and eax, 0x8000000
mov dword [ebp - 0x60], eax
lea esi, [esi]
lea edi, [edi]
mov eax, dword [ebp - 0x44]
mov esi, dword [ebp - 0x3c]
cmp dword [eax], esi
jbe 0x6e9230fa
mov eax, dword [ebp - 0x3c]
shl eax, 4
cmp dword [ebp - 0x5c], 2
mov dword [ebp - 0x40], eax
je 0x6e9227e8
cmp dword [ebp - 0x5c], 3
je 0x6e922e0d
mov ebx, dword [ebp - 0x60]
test ebx, ebx
jne 0x6e922b60
movzx ebx, byte [0x6e928d60]
and bl, 8
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x6e92290d
mov edx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x48]
lea eax, [eax + edx*2]
mov dword [ebp - 0x34], eax
sub esi, edx
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
mov edx, dword [esi + 4]
add eax, edx
test bl, bl
mov dword [ebp - 0x58], eax
mov edi, dword [eax + 4]
jne 0x6e922920
cmp edi, 0xa
ja 0x6e9226f0
cmp edi, 2
ja 0x6e9229d8
test edi, edi
mov ebx, 1
jne 0x6e9229b8
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x6e9225da
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x6e9225da
lea edx, [eax + edi*2]
mov word [edx], 0
test byte [0x6e928d60], 8
jne 0x6e922970
test ebx, ebx
je 0x6e9225f5
mov eax, dword [ebp - 0x30]
lea eax, [eax + ebx - 1]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
dec eax
cmp eax, dword [ebp - 0x3c]
jbe 0x6e922622
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x6e92261c
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x64]
dec eax
sub eax, edx
cmp eax, dword [ebp - 0x30]
ja 0x6e922f58
mov esi, dword [ebp - 0x64]
add dword [ebp - 0x30], esi
mov esi, dword [ebp - 0x48]
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x30], esi
jb 0x6e922530
cmp byte [ebp - 0x65], 0
jne 0x6e922530
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx]
dec eax
cmp dword [ebp - 0x6c], eax
jae 0x6e92265e
mov eax, dword [ebp - 0x48]
mov esi, dword [ebp - 0x80]
dec eax
sub eax, esi
cmp eax, dword [ebp - 0x30]
ja 0x6e923126
mov esi, dword [ebp - 0x80]
add dword [ebp - 0x30], esi
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x6e9230f1
sub dword [ebp - 0x44], 8
mov esi, dword [ebp - 0x48]
inc dword [ebp - 0x6c]
cmp dword [ebp - 0x30], esi
jb 0x6e9224f4
cmp byte [ebp - 0x65], 0
jne 0x6e9224f4
mov eax, dword [ebp - 0x30]
lea ebx, [eax + 1]
mov dword [esp], edx
call dword [sym.imp.kernel32.dll_LocalFree]
sub esp, 4
jmp 0x6e9226a6
mov dword [ebp - 0x30], 0
mov ebx, 1
mov esi, dword [ebp - 0x2c]
test esi, esi
je 0x6e9226be
cmp byte [ebp - 0x66], 0
je 0x6e9226be
mov eax, esi
mov esi, dword [ebp - 0x30]
mov word [eax + esi*2], 0
lea esp, [ebp - 0x10]
mov eax, ebx
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
test eax, 0x8000000
mov ecx, 0x6e93870a
mov eax, 0x6e938716
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x6e92247b
lea eax, [edi - 0xc]
cmp eax, 1
ja 0x6e9229b8
mov esi, dword [ebp - 0x58]
mov edi, dword [esi + 8]
mov eax, edi
shr eax, 1
test edi, edi
mov dword [ebp - 0x40], eax
je 0x6e922e85
mov edi, dword [esi + 0xc]
mov esi, dword [sym.imp.ucrtbase.dll_isspace]
mov dword [ebp - 0x54], edi
movzx eax, byte [edi]
mov dword [esp], eax
call esi
mov ebx, eax
mov eax, dword [ebp - 0x40]
movzx eax, byte [edi + eax - 1]
mov dword [esp], eax
call esi
test eax, eax
je 0x6e923081
mov edx, dword [ebp - 0x40]
mov eax, 1
test edx, edx
je 0x6e922b3f
mov edi, dword [ebp - 0x40]
xor ebx, ebx
mov edx, 1
mov dword [ebp - 0x50], edi
jmp 0x6e92278c
lea edi, [esi - 0x22]
cmp di, 0x1c
movzx ecx, di
ja 0x6e92277b
mov edi, edx
shl edi, cl
mov ecx, edi
and ecx, 0x1e000603
cmovne eax, edx
xor ecx, ecx
cmp esi, 0x22
sete cl
inc ebx
add dword [ebp - 0x50], ecx
cmp dword [ebp - 0x40], ebx
jbe 0x6e9227b0
mov esi, dword [ebp - 0x54]
movzx esi, word [esi + ebx*2]
cmp esi, 0xa
jne 0x6e922760
inc ebx
mov eax, 1
cmp dword [ebp - 0x40], ebx
ja 0x6e92278c
lea esi, [esi]
lea edi, [edi]
mov edi, dword [ebp - 0x50]
test eax, eax
jne 0x6e922eb0
cmp dword [ebp - 0x34], 0
je 0x6e922b50
cmp dword [ebp - 0x38], 0
je 0x6e922b50
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x6e922e9b
mov edx, dword [ebp - 0x34]
xor edi, edi
jmp 0x6e922eee
mov eax, dword [ebp - 0x44]
mov esi, dword [ebp - 0x40]
mov eax, dword [eax + 4]
mov eax, dword [eax + esi]
mov esi, dword [ebp - 0x60]
mov dword [ebp - 0x50], eax
test esi, esi
jne 0x6e922fb0
movzx ebx, byte [0x6e928d60]
and bl, 8
mov ecx, dword [ebp - 0x50]
test ecx, ecx
je 0x6e922570
mov esi, dword [ebp - 0x2c]
test esi, esi
je 0x6e923067
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x30]
dec eax
lea esi, [esi + edx*2]
sub eax, edx
test bl, bl
mov edi, eax
jne 0x6e92317c
mov eax, dword [ebp - 0x50]
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_strlen]
cmp edi, eax
cmovbe eax, edi
test eax, eax
je 0x6e9228ee
mov ebx, dword [ebp - 0x30]
mov edi, dword [ebp - 0x50]
lea edx, [eax + ebx]
mov ebx, dword [ebp - 0x2c]
lea edx, [ebx + edx*2]
lea ebx, [edi + eax]
cmp edi, edx
setae cl
cmp esi, ebx
setae dl
or cl, dl
je 0x6e9231db
lea edx, [eax - 1]
cmp edx, 0xe
jbe 0x6e9231db
mov ebx, eax
mov edx, esi
pxor xmm3, xmm3
shr ebx, 4
mov ecx, edi
shl ebx, 5
add ebx, esi
lea esi, [esi]
lea edi, [edi]
movdqu xmm0, xmmword [ecx]
add edx, 0x20
movdqu xmm2, xmm0
movdqu xmm1, xmm3
pcmpgtb xmm1, xmm0
punpcklbw xmm2, xmm1
punpckhbw xmm0, xmm1
movdqu xmmword [edx - 0x20], xmm2
movdqu xmmword [edx - 0x10], xmm0
add ecx, 0x10
cmp ebx, edx
jne 0x6e9228a0
mov edx, eax
and edx, 0xfffffff0
test al, 0xf
je 0x6e9228ee
mov ebx, dword [ebp - 0x50]
nop
lea esi, [esi]
movsx cx, byte [ebx + edx]
mov word [esi + edx*2], cx
inc edx
cmp eax, edx
ja 0x6e9228e0
mov word [esi + eax*2], 0x3d
inc eax
movzx ebx, byte [0x6e928d60]
and bl, 8
add dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x6e92257b
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
jmp 0x6e92258c
mov dword [esp + 0x10], edi
mov eax, dword [ebp - 0x38]
mov esi, str.__d___p___p___d__n
mov dword [esp + 0xc], esi
mov dword [esp], 3
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x34]
mov dword [esp + 0x18], eax
mov eax, dword [ebp - 0x58]
add eax, 8
mov dword [esp + 0x14], eax
mov eax, str.quote_rdn_value_to_str_w
mov dword [esp + 8], eax
mov eax, 0x6e928d60
mov dword [esp + 4], eax
call fcn.6e920240
jmp 0x6e9225a5
mov eax, dword [ebp - 0x34]
mov edx, 0xffffffff
mov esi, str.returning__d___s__n
mov edi, str.quote_rdn_value_to_str_w
call fcn.6e920500
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 8], edi
mov dword [esp], 3
mov dword [esp + 0x14], eax
mov eax, 0x6e928d60
mov dword [esp + 4], eax
call fcn.6e920240
jmp 0x6e9225e7
test byte [0x6e928d60], 1
jne 0x6e922fc7
mov ebx, 1
xor edi, edi
jmp 0x6e9225c4
mov esi, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x34]
mov ebx, dword [ebp - 0x38]
mov edi, dword [esi + 8]
test ecx, ecx
sete dl
test ebx, ebx
sete al
or dl, al
test edi, edi
mov byte [ebp - 0x54], dl
jne 0x6e922a14
cmp byte [ebp - 0x54], 0
mov ebx, 1
jne 0x6e9225c4
mov eax, dword [ebp - 0x34]
lea ebx, [edi + 1]
lea edx, [eax + edi*2]
jmp 0x6e9225d5
mov esi, dword [esi + 0xc]
mov ebx, dword [sym.imp.ucrtbase.dll_isspace]
movzx eax, byte [esi]
mov dword [esp], eax
call ebx
mov dword [ebp - 0x40], eax
movzx eax, byte [esi + edi - 1]
mov dword [esp], eax
call ebx
mov ebx, dword [ebp - 0x40]
lea edx, [esi + edi]
mov dword [ebp - 0x40], edx
mov edx, 1
mov dword [ebp - 0x50], edi
or ebx, eax
setne al
movzx eax, al
jmp 0x6e922a7a
mov cl, bl
sub cl, 0x22
cmp cl, 0x1c
ja 0x6e922a69
mov edi, edx
shl edi, cl
mov ecx, edi
and ecx, 0x1e000603
cmovne eax, edx
xor ecx, ecx
cmp bl, 0x22
sete cl
inc esi
add dword [ebp - 0x50], ecx
cmp esi, dword [ebp - 0x40]
je 0x6e922a90
movzx ebx, byte [esi]
cmp bl, 0xa
jne 0x6e922a50
inc esi
mov eax, 1
cmp esi, dword [ebp - 0x40]
jne 0x6e922a7a
lea esi, [esi]
test eax, eax
mov edi, dword [ebp - 0x50]
jne 0x6e922e70
cmp byte [ebp - 0x54], 0
jne 0x6e922b50
mov ecx, dword [ebp - 0x34]
xor edi, edi
mov dword [ebp - 0x50], eax
mov esi, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x58]
dec esi
mov dword [ebp - 0x40], esi
lea esi, [esi]
mov ebx, dword [eax + 0xc]
lea esi, [ecx + 2]
movzx ebx, byte [ebx + edx]
mov word [ecx], bx
mov ebx, dword [eax + 0xc]
cmp byte [ebx + edx], 0x22
je 0x6e922af8
mov ecx, esi
mov esi, dword [ebp - 0x34]
inc edx
mov edi, ecx
sub edi, esi
sar edi, 1
cmp edx, dword [eax + 8]
jae 0x6e922b15
cmp dword [ebp - 0x38], edi
ja 0x6e922ac0
jmp 0x6e922a06
cmp dword [ebp - 0x40], edi
jbe 0x6e922ad6
mov esi, dword [ebp - 0x34]
add ecx, 4
inc edx
mov word [ecx - 2], 0x22
mov edi, ecx
sub edi, esi
sar edi, 1
cmp edx, dword [eax + 8]
jb 0x6e922ae7
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x6e922a06
cmp edi, dword [ebp - 0x38]
jae 0x6e922a06
mov word [ecx], 0x22
mov ebx, dword [ebp - 0x34]
add ecx, 2
sub ecx, ebx
mov edi, ecx
sar edi, 1
jmp 0x6e922a06
mov ebx, dword [ebp - 0x38]
test ebx, ebx
jne 0x6e923298
mov edi, 2
nop
lea ebx, [edi + 1]
jmp 0x6e9225c4
mov dword [ebp - 0x34], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
test eax, eax
je 0x6e922566
mov esi, dword [ebp - 0x48]
xor eax, eax
dec esi
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x30]
lea esi, [esi]
lea edi, [edi]
mov edx, dword [ebp - 0x2c]
test edx, edx
je 0x6e922c80
mov ebx, str.
add ebx, 2
cmp word [ebx], 0
jne 0x6e922ba0
mov edx, dword [ebp - 0x38]
sub ebx, str.
sar ebx, 1
mov dword [ebp - 0x30], edx
mov ecx, edx
sub ecx, esi
cmp ebx, ecx
jb 0x6e922ce8
mov edx, dword [ebp - 0x2c]
add ecx, ecx
cmp ecx, 8
lea ebx, [edx + esi*2]
mov esi, str.
mov edi, ebx
jae 0x6e922cb0
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0x30]
inc eax
cmp dword [ebp - 0x4c], eax
ja 0x6e922b90
mov dword [ebp - 0x30], esi
movzx ebx, byte [0x6e928d60]
mov eax, dword [ebp - 0x34]
and bl, 8
test eax, eax
je 0x6e92280c
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x6e922d78
mov esi, dword [ebp - 0x48]
mov edx, dword [ebp - 0x30]
dec esi
lea edi, [eax + edx*2]
sub esi, edx
test bl, bl
jne 0x6e922db0
mov eax, dword [ebp - 0x34]
cmp word [eax], 0
je 0x6e922dfd
lea esi, [esi]
add eax, 2
cmp word [eax], 0
jne 0x6e922c30
mov edx, dword [ebp - 0x34]
sub eax, edx
sar eax, 1
cmp esi, eax
ja 0x6e922d10
lea ecx, [esi + esi]
inc esi
mov dword [ebp - 0x38], esi
lea eax, [edi + ecx]
cmp ecx, 8
mov esi, dword [ebp - 0x34]
mov edx, edi
jae 0x6e922d47
mov edi, edx
rep movsb byte es:[edi], byte [esi]
mov word [eax], 0x3d
movzx ebx, byte [0x6e928d60]
and bl, 8
mov esi, dword [ebp - 0x38]
add dword [ebp - 0x30], esi
jmp 0x6e922570
mov edx, str.
lea esi, [esi]
lea edi, [edi]
add edx, 2
cmp word [edx], 0
jne 0x6e922c90
sub edx, str.
sar edx, 1
add esi, edx
jmp 0x6e922be0
test bl, 1
jne 0x6e9230dc
test edi, 2
jne 0x6e9230c7
test edi, 4
je 0x6e922bdb
mov ebx, dword [esi]
add edi, 4
add esi, 4
sub ecx, 4
mov dword [edi - 4], ebx
jmp 0x6e922bdb
mov ecx, str.
lea esi, [esi]
add ecx, 2
cmp word [ecx], 0
jne 0x6e922cf0
sub ecx, str.
sar ecx, 1
lea edx, [ecx + esi]
mov dword [ebp - 0x30], edx
jmp 0x6e922bc3
mov ecx, dword [ebp - 0x34]
lea esi, [esi]
lea edi, [edi]
add ecx, 2
cmp word [ecx], 0
jne 0x6e922d20
mov eax, dword [ebp - 0x34]
mov edx, edi
sub ecx, eax
lea eax, [edi + ecx]
mov esi, ecx
sar esi, 1
inc esi
cmp ecx, 8
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x34]
jb 0x6e922c60
test dl, 1
jne 0x6e92328b
test dl, 2
jne 0x6e923276
test dl, 4
je 0x6e922c60
mov ebx, dword [esi]
add edx, 4
add esi, 4
sub ecx, 4
mov dword [edx - 4], ebx
jmp 0x6e922c60
test bl, bl
jne 0x6e922ffe
mov eax, dword [ebp - 0x34]
cmp word [eax], 0
mov esi, eax
je 0x6e92305b
nop
add esi, 2
cmp word [esi], 0
jne 0x6e922d90
mov edi, dword [ebp - 0x34]
sub esi, edi
sar esi, 1
lea eax, [esi + 1]
mov dword [ebp - 0x38], eax
jmp 0x6e922c73
mov eax, dword [ebp - 0x34]
mov edx, 0xffffffff
call fcn.6e920500
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], edi
mov dword [esp], 3
mov dword [esp + 0x10], eax
mov eax, str.__s___p___d__n
mov dword [esp + 0xc], eax
mov eax, str.CRYPT_AddPrefixW
mov dword [esp + 8], eax
mov eax, 0x6e928d60
mov dword [esp + 4], eax
call fcn.6e920240
mov eax, dword [ebp - 0x34]
cmp word [eax], 0
jne 0x6e922c30
mov dword [ebp - 0x38], 1
mov eax, edi
xor ecx, ecx
jmp 0x6e922c52
mov eax, dword [ebp - 0x44]
mov ecx, 5
mov dword [esp + 8], ecx
mov esi, dword [ebp - 0x40]
mov eax, dword [eax + 4]
mov eax, dword [eax + esi]
mov dword [esp], 1
mov dword [esp + 4], eax
call sym.crypt32.dll_CryptFindOIDInfo
mov dword [ebp - 0x34], eax
sub esp, 0xc
test eax, eax
je 0x6e9231bc
mov edx, dword [ebp - 0x60]
mov eax, dword [eax + 8]
test edx, edx
mov dword [ebp - 0x34], eax
jne 0x6e9231f5
movzx ebx, byte [0x6e928d60]
and bl, 8
test eax, eax
jne 0x6e922bfe
jmp 0x6e922570
cmp byte [ebp - 0x54], 0
je 0x6e92309a
lea ebx, [edi + 3]
add edi, 2
jmp 0x6e9225c4
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x6e922b50
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x6e922b50
mov edx, dword [ebp - 0x34]
mov ebx, 1
jmp 0x6e9225d5
mov esi, dword [ebp - 0x34]
add edi, 2
test esi, esi
je 0x6e922b50
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x6e922b50
mov ecx, dword [ebp - 0x40]
mov edi, 1
mov esi, dword [ebp - 0x34]
test ecx, ecx
mov word [esi], 0x22
lea edx, [esi + 2]
je 0x6e92315a
cmp dword [ebp - 0x38], 1
je 0x6e922a06
mov dword [ebp - 0x54], eax
mov esi, dword [ebp - 0x38]
xor ecx, ecx
mov eax, dword [ebp - 0x58]
dec esi
mov dword [ebp - 0x50], esi
lea esi, [esi]
mov ebx, dword [eax + 0xc]
lea esi, [edx + 2]
movzx ebx, word [ebx + ecx*2]
mov word [edx], bx
mov ebx, dword [eax + 0xc]
cmp word [ebx + ecx*2], 0x22
je 0x6e922f48
mov edx, esi
mov esi, dword [ebp - 0x34]
mov ebx, edx
inc ecx
sub ebx, esi
sar ebx, 1
cmp dword [ebp - 0x40], ecx
mov edi, ebx
jbe 0x6e92314f
cmp dword [ebp - 0x38], ebx
ja 0x6e922f00
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x6e922a06
inc ebx
nop
jmp 0x6e9225d5
cmp dword [ebp - 0x50], edi
jbe 0x6e922f17
mov word [edx + 2], 0x22
add edx, 4
jmp 0x6e922f19
mov esi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x2c]
cmp ebx, 8
mov ecx, ebx
lea eax, [eax + esi*2]
mov esi, dword [ebp - 0x74]
mov edi, eax
jae 0x6e922f77
rep movsb byte es:[edi], byte [esi]
jmp 0x6e92261c
test al, 1
jne 0x6e92331d
test edi, 2
jne 0x6e923339
test edi, 4
je 0x6e922f70
mov eax, dword [esi]
add edi, 4
add esi, 4
sub ecx, 4
mov dword [edi - 4], eax
rep movsb byte es:[edi], byte [esi]
jmp 0x6e92261c
mov dword [ebp - 0x34], 0
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
jne 0x6e922b79
jmp 0x6e922802
mov ecx, str.string_type__d_unimplemented_n
mov ebx, str.quote_rdn_value_to_str_w
mov dword [esp + 0x10], edi
mov esi, 0x6e928d60
xor edi, edi
mov dword [esp + 8], ebx
mov ebx, 1
mov dword [esp + 0xc], ecx
mov dword [esp + 4], esi
mov dword [esp], 0
call fcn.6e920240
jmp 0x6e9225c4
mov eax, dword [ebp - 0x34]
mov edx, 0xffffffff
xor ebx, ebx
mov esi, str.__s___p___d__n
mov edi, str.CRYPT_AddPrefixW
call fcn.6e920500
xor ecx, ecx
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x18], ecx
mov dword [esp + 8], edi
mov dword [esp], 3
mov dword [esp + 0x10], eax
mov eax, 0x6e928d60
mov dword [esp + 4], eax
call fcn.6e920240
mov eax, dword [ebp - 0x34]
movzx ebx, byte [0x6e928d60]
mov esi, eax
and bl, 8
cmp word [eax], 0
jne 0x6e922d90
mov dword [ebp - 0x38], 1
jmp 0x6e922c73
test bl, bl
jne 0x6e923228
mov eax, dword [ebp - 0x50]
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_strlen]
inc eax
jmp 0x6e9228ff
mov edi, dword [ebp - 0x40]
xor eax, eax
test ebx, ebx
setne al
test edi, edi
jne 0x6e92274c
xor edi, edi
jmp 0x6e9227b3
mov esi, dword [ebp - 0x34]
mov edi, 1
mov word [esi], 0x22
lea ecx, [esi + 2]
mov esi, dword [ebp - 0x58]
mov edx, dword [esi + 8]
test edx, edx
je 0x6e922b20
cmp dword [ebp - 0x38], 1
ja 0x6e922aaa
jmp 0x6e922a06
movzx ebx, word [esi]
add edi, 2
add esi, 2
sub ecx, 2
mov word [edi - 2], bx
jmp 0x6e922cc5
movzx edx, byte [str.]
inc edi
mov esi, 0x6e9389dd
dec ecx
mov byte [ebx], dl
jmp 0x6e922cb9
add dword [ebp - 0x44], 8
jmp 0x6e92266d
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx]
dec eax
cmp eax, dword [ebp - 0x6c]
jbe 0x6e92265e
mov edi, dword [ebp - 0x2c]
test edi, edi
je 0x6e922658
mov eax, dword [ebp - 0x48]
mov esi, dword [ebp - 0x80]
dec eax
sub eax, esi
cmp eax, dword [ebp - 0x30]
jbe 0x6e922658
mov esi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x2c]
cmp ebx, 8
mov ecx, ebx
lea eax, [eax + esi*2]
mov esi, dword [ebp - 0x84]
mov edi, eax
jae 0x6e9232b8
rep movsb byte es:[edi], byte [esi]
jmp 0x6e922658
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x6e922f3e
cmp dword [ebp - 0x38], edi
jbe 0x6e922a06
mov word [edx], 0x22
mov edi, dword [ebp - 0x34]
lea eax, [edx + 2]
mov ebx, eax
mov edx, eax
sub ebx, edi
sar ebx, 1
inc ebx
jmp 0x6e9225d5
mov eax, dword [ebp - 0x50]
call fcn.6e920330
mov edx, 0x6e928d60
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], esi
mov dword [esp + 4], edx
mov dword [esp], 3
mov dword [esp + 0x10], eax
mov eax, str.__s___p___d__n
mov dword [esp + 0xc], eax
mov eax, str.CRYPT_AddPrefixAToW
mov dword [esp + 8], eax
call fcn.6e920240
jmp 0x6e922838
mov eax, dword [ebp - 0x44]
mov esi, dword [ebp - 0x40]
mov eax, dword [eax + 4]
mov eax, dword [eax + esi]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x6e922802
jmp 0x6e922fb7
mov edx, dword [ebp - 0x50]
mov ecx, esi
movsx di, byte [edx]
inc edx
add ecx, 2
mov word [ecx - 2], di
cmp ebx, edx
jne 0x6e9231e0
jmp 0x6e9228ee
mov dword [ebp - 0x50], 0
mov edi, dword [ebp - 0x4c]
test edi, edi
jne 0x6e922b79
movzx ebx, byte [0x6e928d60]
mov esi, dword [ebp - 0x34]
and bl, 8
test esi, esi
jne 0x6e922bfe
jmp 0x6e922570
mov eax, dword [ebp - 0x50]
xor esi, esi
xor edi, edi
call fcn.6e920330
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], edi
mov dword [esp], 3
mov dword [esp + 0x10], eax
mov eax, str.__s___p___d__n
mov dword [esp + 0xc], eax
mov eax, str.CRYPT_AddPrefixAToW
mov dword [esp + 8], eax
mov eax, 0x6e928d60
mov dword [esp + 4], eax
call fcn.6e920240
movzx ebx, byte [0x6e928d60]
and bl, 8
jmp 0x6e92306f
movzx ebx, word [esi]
add edx, 2
add esi, 2
sub ecx, 2
mov word [edx - 2], bx
jmp 0x6e922d59
movzx ebx, byte [esi]
inc edx
inc esi
dec ecx
mov byte [edi], bl
jmp 0x6e922d50
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x6e922b4a
mov eax, dword [ebp - 0x34]
mov edi, 1
mov word [eax], 0x22
lea edx, [eax + 2]
jmp 0x6e92315a
test al, 1
jne 0x6e923374
test edi, 2
jne 0x6e92335f
test edi, 4
je 0x6e923148
mov eax, dword [esi]
add edi, 4
add esi, 4
sub ecx, 4
mov dword [edi - 4], eax
rep movsb byte es:[edi], byte [esi]
jmp 0x6e922658
mov dword [esp + 0x10], eax
mov ecx, str.unsupported_flags:__08x_n
mov edi, str.cert_name_to_str_with_indent
mov dword [esp + 0xc], ecx
mov eax, 0x6e928d60
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], 0
call fcn.6e920240
jmp 0x6e9223ef
movzx ebx, byte [esi]
inc edi
inc esi
test edi, 2
mov byte [ebp - 0x34], bl
mov byte [eax], bl
mov eax, dword [ebp - 0x78]
lea ecx, [eax - 1]
je 0x6e922f8b
movzx eax, word [esi]
add edi, 2
add esi, 2
sub ecx, 2
mov word [edi - 2], ax
jmp 0x6e922f8b
mov dword [ebp - 0x30], 0
mov ebx, 1
jmp 0x6e92268c
movzx eax, word [esi]
add edi, 2
add esi, 2
sub ecx, 2
mov word [edi - 2], ax
jmp 0x6e9232cc
movzx ebx, byte [esi]
inc edi
inc esi
mov byte [ebp - 0x34], bl
mov byte [eax], bl
mov eax, dword [ebp - 0x88]
lea ecx, [eax - 1]
jmp 0x6e9232c0