Function at 0x140004a5c
Capabilities:
Link many functions at runtime

Disassembly:
jmp 0x140026140
sub rsp, 0x28
mov rax, qword [0x14017b320]
test rax, rax
jne 0x14002616e
xor edx, edx
lea rcx, str.crypt32.dll
call fcn.140021f10
mov qword [0x14017b320], rax
test rax, rax
je 0x1400263f7
cmp qword [0x14017b400], 0
jne 0x14002619d
xor edx, edx
lea rcx, str.wintrust.dll
call fcn.140021f10
mov qword [0x14017b400], rax
test rax, rax
je 0x1400263f7
mov rax, qword [0x14017b320]
cmp qword [0x14017b358], 0
jne 0x1400261ce
lea rdx, str.CertGetNameStringA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14017b358], rax
test rax, rax
je 0x1400263f7
mov rax, qword [0x14017b320]
cmp qword [0x14017b360], 0
jne 0x1400261ff
lea rdx, str.CryptDecodeObjectEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14017b360], rax
test rax, rax
je 0x1400263f7
mov rax, qword [0x14017b320]
cmp qword [0x14017b338], 0
jne 0x140026230
lea rdx, str.CertFreeCertificateContext
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14017b338], rax
test rax, rax
je 0x1400263f7
mov rax, qword [0x14017b320]
cmp qword [0x14017b340], 0
jne 0x140026261
lea rdx, str.CertFindCertificateInStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14017b340], rax
test rax, rax
je 0x1400263f7
mov rax, qword [0x14017b320]
cmp qword [0x14017b368], 0
jne 0x140026292
lea rdx, str.CertGetIssuerCertificateFromStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14017b368], rax
test rax, rax
je 0x1400263f7
mov rax, qword [0x14017b320]
cmp qword [0x14017b348], 0
jne 0x1400262c3
lea rdx, str.CryptMsgGetParam
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14017b348], rax
test rax, rax
je 0x1400263f7
mov rax, qword [0x14017b320]
cmp qword [0x14017b350], 0
jne 0x1400262f4
lea rdx, str.CryptQueryObject
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14017b350], rax
test rax, rax
je 0x1400263f7
mov rax, qword [0x14017b320]
cmp qword [0x14017b328], 0
jne 0x140026325
lea rdx, str.CryptMsgClose
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14017b328], rax
test rax, rax
je 0x1400263f7
mov rax, qword [0x14017b320]
cmp qword [0x14017b330], 0
jne 0x14002634f
lea rdx, str.CertCloseStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14017b330], rax
test rax, rax
je 0x1400263f7
cmp qword [0x14017b408], 0
jne 0x140026379
mov rcx, qword [0x14017b400]
lea rdx, str.WinVerifyTrust
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14017b408], rax
test rax, rax
je 0x1400263f7
cmp qword [0x14017b410], 0
jne 0x1400263a3
mov rcx, qword [0x14017b400]
lea rdx, str.WTHelperProvDataFromStateData
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14017b410], rax
test rax, rax
je 0x1400263f7
cmp qword [0x14017b420], 0
jne 0x1400263cd
mov rcx, qword [0x14017b400]
lea rdx, str.WTHelperGetProvCertFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14017b420], rax
test rax, rax
je 0x1400263f7
cmp qword [0x14017b418], 0
jne 0x1400263fe
mov rcx, qword [0x14017b400]
lea rdx, str.WTHelperGetProvSignerFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14017b418], rax
test rax, rax
jne 0x1400263fe
xor eax, eax
add rsp, 0x28
ret
mov eax, 1
add rsp, 0x28
ret