Function at 0x6800ff00
Capabilities:
Get geographical location
Get process heap flags

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x558
mov eax, dword [ecx]
mov edx, dword [ecx + 8]
mov esi, dword [ecx + 0xc]
mov dword [ebp - 0x540], eax
mov eax, dword [ecx + 4]
cmp eax, 0x110
je 0x6800ff58
cmp eax, 0x111
je 0x68010c48
cmp eax, 0x4e
je 0x68010bf0
lea esp, [ebp - 0x10]
xor eax, eax
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x10
mov eax, dword [esi]
mov edx, dword [ebp - 0x540]
mov dword [esp + 4], 0xbb9
mov edi, dword [sym.imp.user32.dll_GetDlgItem]
mov dword [esp], edx
mov dword [ebp - 0x538], eax
mov dword [ebp - 0x544], edi
call edi
mov ecx, dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 8
mov dword [ebp - 0x528], eax
mov dword [esp + 8], 0x28
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x53c], ecx
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ecx
sub esp, 0xc
mov ebx, eax
test eax, eax
je 0x6800ff43
add esi, 4
mov dword [eax], esi
mov eax, dword [ebp - 0x538]
mov edx, dword [eax + 0x10]
mov eax, 4
mov ecx, edx
and ecx, 1
sub eax, ecx
mov ecx, edx
shr ecx, 1
and ecx, 1
sub eax, ecx
mov ecx, edx
shr edx, 3
shr ecx, 2
and edx, 1
and ecx, 1
sub eax, ecx
sub eax, edx
mov dword [ebx + 4], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 2
mov dword [esp + 8], 5
mov dword [esp + 4], 0x10
mov dword [esp], 0x10
call dword [sym.imp.comctl32.dll_ImageList_Create]
mov dword [ebx + 8], eax
sub esp, 0x14
test eax, eax
je 0x680100c3
mov eax, dword [0x68024004]
mov dword [esp + 4], 0xc8
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadBitmapW]
sub esp, 8
mov esi, eax
mov dword [esp + 8], 0xff00ff
mov dword [esp + 4], eax
mov eax, dword [ebx + 8]
mov dword [esp], eax
call dword [sym.imp.comctl32.dll_ImageList_AddMasked]
sub esp, 0xc
mov dword [esp], esi
call dword [sym.imp.gdi32.dll_DeleteObject]
sub esp, 4
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebx + 8]
mov dword [esp], eax
call dword [sym.imp.comctl32.dll_ImageList_SetBkColor]
mov edx, dword [ebp - 0x540]
mov esi, dword [ebx + 8]
sub esp, 8
mov dword [esp], edx
mov dword [esp + 4], 0xbb9
call edi
sub esp, 8
mov dword [esp + 0xc], esi
mov dword [esp + 8], 1
mov dword [esp + 4], 0x1003
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
mov esi, dword [ebp - 0x538]
mov edi, dword [ebp - 0x540]
mov eax, dword [esi + 0xc]
mov dword [ebx + 0xc], eax
mov eax, dword [esi + 0x2c]
mov dword [ebx + 0x10], eax
mov eax, dword [esi + 0x30]
mov dword [ebx + 0x14], eax
mov eax, dword [esi + 0x34]
mov dword [ebx + 0x18], eax
mov eax, dword [esi + 0x38]
mov dword [ebx + 0x1c], eax
mov eax, dword [esi + 0x1c]
mov dword [ebx + 0x20], eax
mov eax, dword [esi + 0x20]
mov dword [ebx + 0x24], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], 8
mov dword [esp], edi
call dword [sym.imp.user32.dll_SetWindowLongW]
mov eax, dword [esi + 0xc]
sub esp, 0xc
test eax, eax
je 0x68010138
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc
mov dword [esp], edi
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
mov eax, dword [ebp - 0x538]
mov ebx, dword [eax + 0x14]
test ebx, ebx
je 0x68010181
mov eax, dword [ebp - 0x540]
mov dword [esp + 4], 0xbb8
mov dword [esp], eax
mov eax, dword [ebp - 0x544]
call eax
sub esp, 8
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
mov eax, dword [ebp - 0x538]
xor edi, edi
mov esi, dword [eax + 0x10]
mov eax, dword [ebp - 0x528]
mov dword [esp + 0xc], 0x20
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1036
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
lea eax, [ebp - 0x418]
mov dword [ebp - 0x4b8], 6
mov dword [ebp - 0x4b0], 0x5a
sub esp, 0x10
mov dword [ebp - 0x4ac], eax
test esi, 1
je 0x68010e9f
test esi, 2
je 0x68010e42
test esi, 4
je 0x68010de5
test esi, 8
je 0x68010d88
test esi, 0x20
je 0x68010f52
and esi, 0x10
je 0x68010efa
mov eax, dword [ebp - 0x538]
mov eax, dword [eax + 0x24]
test eax, eax
je 0x68010745
mov dword [ebp - 0x534], 0
lea esi, [esi]
lea esi, [esi]
mov eax, dword [ebp - 0x538]
mov esi, dword [ebp - 0x534]
xor ebx, ebx
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x530], 0
mov ecx, dword [eax + 0x20]
mov edi, dword [eax + 0x10]
mov dword [ebp - 0x52c], ecx
mov ecx, dword [eax + 0x18]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x51c], ecx
mov eax, dword [eax + esi*4]
mov dword [ebp - 0x514], 0
mov dword [ebp - 0x524], eax
lea esi, [esi]
mov eax, dword [ebp - 0x524]
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.crypt32.dll_CertEnumCertificatesInStore]
sub esp, 8
mov ebx, eax
test eax, eax
je 0x68010700
mov eax, dword [ebp - 0x51c]
test eax, eax
je 0x680102e0
mov eax, dword [ebp - 0x52c]
mov dword [esp], ebx
mov dword [esp + 8], eax
lea eax, [ebp - 0x514]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x51c]
call eax
sub esp, 0xc
test eax, eax
je 0x68010290
mov eax, dword [ebp - 0x528]
mov dword [esp + 0xc], 0
mov dword [ebp - 0x4f4], 7
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1004
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
mov dword [ebp - 0x4ec], 0
sub esp, 0x10
mov dword [ebp - 0x4f0], eax
mov dword [ebp - 0x4d8], 0
mov dword [esp], ebx
call dword [sym.imp.crypt32.dll_CertDuplicateCertificateContext]
mov esi, dword [ebp - 0x4f0]
mov dword [ebp - 0x4d4], eax
sub esp, 4
test esi, esi
jne 0x68010365
or dword [ebp - 0x4f4], 8
mov dword [ebp - 0x4e8], 2
mov dword [ebp - 0x4e4], 0xffffffff
test edi, 1
je 0x68010620
test edi, 2
je 0x68010692
test edi, 4
je 0x68010588
test edi, 8
je 0x68010520
test edi, 0x20
je 0x68010440
test edi, 0x10
jne 0x68010290
mov eax, dword [section..bss]
lea edx, [eax + 1]
mov dword [section..bss], edx
test eax, eax
jne 0x680103cc
test byte [0x68015140], 1
jne 0x68010bc0
lea eax, [ebp - 0x418]
mov dword [esp + 0xc], 0x50
mov dword [esp + 8], eax
mov eax, dword [0x68024004]
mov dword [esp + 4], 0x578
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadStringW]
mov edx, dword [ebp - 0x4ec]
lea eax, [ebp - 0x4f4]
sub esp, 0x10
test edx, edx
mov dword [esp + 0xc], eax
jne 0x680107c0
mov eax, dword [ebp - 0x528]
mov dword [esp + 8], 0
mov dword [esp + 4], 0x104d
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x68010290
lea edx, [ebp - 0x4b8]
mov dword [esp + 0xc], 0x50
lea esi, [ebp - 0x504]
mov dword [esp + 8], edx
mov dword [esp + 4], 0x1f
mov dword [esp], 0x800
call dword [sym.imp.kernel32.dll_GetLocaleInfoW]
sub esp, 0x10
mov dword [esp + 4], esi
mov eax, dword [ebx + 0xc]
add eax, 0x28
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FileTimeToSystemTime]
lea eax, [ebp - 0x418]
lea edx, [ebp - 0x4b8]
sub esp, 8
mov dword [esp + 0x14], 0x50
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov dword [esp], 0x800
call dword [sym.imp.kernel32.dll_GetDateFormatW]
mov ecx, dword [ebp - 0x4ec]
lea eax, [ebp - 0x418]
sub esp, 0x18
mov dword [ebp - 0x4e0], eax
lea eax, [ebp - 0x4f4]
test ecx, ecx
mov dword [esp + 0xc], eax
jne 0x68010ac8
mov eax, dword [ebp - 0x528]
mov dword [esp + 8], 0
mov dword [esp + 4], 0x104d
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
inc dword [ebp - 0x4ec]
mov dword [ebp - 0x4f4], 1
jmp 0x680103a1
lea eax, [ebp - 0x510]
mov dword [esp], ebx
mov esi, dword [sym.imp.crypt32.dll_CertGetCertificateContextProperty]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0xb
call esi
sub esp, 0x10
test eax, eax
je 0x68010b28
mov eax, dword [ebp - 0x510]
cmp eax, dword [ebp - 0x530]
ja 0x680107f0
mov eax, dword [ebp - 0x520]
test eax, eax
jne 0x68010869
inc dword [ebp - 0x4ec]
mov dword [ebp - 0x4f4], 1
jmp 0x68010395
mov eax, ebx
lea edx, [ebp - 0x508]
call sym._get_cert_usages
mov eax, dword [ebp - 0x508]
test eax, eax
je 0x68010609
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x4e0], eax
lea eax, [ebp - 0x4f4]
mov dword [esp + 0xc], eax
test edx, edx
jne 0x68010af8
mov eax, dword [ebp - 0x528]
mov dword [esp + 8], 0
mov dword [esp + 4], 0x104d
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
mov edx, dword [ebp - 0x508]
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov dword [esp + 8], edx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
inc dword [ebp - 0x4ec]
mov dword [ebp - 0x4f4], 1
jmp 0x68010389
mov dword [esp + 0x14], 0
mov esi, dword [sym.imp.crypt32.dll_CertGetNameStringW]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 4
mov dword [esp], ebx
call esi
mov dword [ebp - 0x510], eax
sub esp, 0x18
cmp eax, dword [ebp - 0x530]
ja 0x680108e8
mov ecx, dword [ebp - 0x520]
test ecx, ecx
jne 0x68010961
inc dword [ebp - 0x4ec]
mov dword [ebp - 0x4f4], 1
test edi, 2
jne 0x6801037d
mov dword [esp + 0x14], 0
mov esi, dword [sym.imp.crypt32.dll_CertGetNameStringW]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 4
mov dword [esp], ebx
call esi
mov dword [ebp - 0x510], eax
sub esp, 0x18
cmp eax, dword [ebp - 0x530]
ja 0x680109d0
mov edx, dword [ebp - 0x520]
test edx, edx
jne 0x68010a49
inc dword [ebp - 0x4ec]
mov dword [ebp - 0x4f4], 1
jmp 0x6801037d
mov ecx, dword [ebp - 0x520]
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov dword [esp + 8], ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
mov esi, dword [ebp - 0x538]
inc dword [ebp - 0x534]
sub esp, 0xc
mov eax, dword [ebp - 0x534]
cmp dword [esi + 0x24], eax
ja 0x68010240
mov esi, dword [ebp - 0x540]
mov edi, dword [ebp - 0x544]
mov dword [esp + 4], 0xbb9
mov dword [esp], esi
call edi
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1032
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
mov ebx, eax
mov dword [esp], esi
mov dword [esp + 4], 0xbba
call edi
xor edx, edx
sub esp, 8
cmp ebx, 1
sete dl
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.user32.dll_EnableWindow]
xor eax, eax
sub esp, 8
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x10
mov eax, dword [ebp - 0x4f0]
mov dword [esp + 4], 0x1074
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x528]
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x68010290
mov eax, dword [ebp - 0x520]
mov dword [esp + 4], 0
mov edx, dword fs:[0x18]
mov dword [esp + 8], eax
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x520], edx
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [ebp - 0x510]
mov edx, dword [ebp - 0x520]
sub esp, 0xc
add eax, eax
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x53c]
call eax
mov dword [ebp - 0x520], eax
sub esp, 0xc
test eax, eax
je 0x68010570
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x530], eax
lea eax, [ebp - 0x510]
mov dword [esp + 4], 0xb
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x520]
mov dword [esp], ebx
mov dword [esp + 8], eax
call esi
mov esi, dword [ebp - 0x4ec]
sub esp, 0x10
test eax, eax
mov eax, dword [ebp - 0x520]
cmove eax, dword [ebp - 0x50c]
test esi, esi
mov dword [ebp - 0x4e0], eax
lea eax, [ebp - 0x4f4]
mov dword [esp + 0xc], eax
jne 0x68010b90
mov eax, dword [ebp - 0x528]
mov dword [esp + 8], 0
mov dword [esp + 4], 0x104d
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x68010570
mov eax, dword [ebp - 0x520]
mov dword [esp + 4], 0
mov edx, dword fs:[0x18]
mov dword [esp + 8], eax
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x520], edx
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [ebp - 0x510]
mov edx, dword [ebp - 0x520]
sub esp, 0xc
add eax, eax
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x53c]
call eax
mov dword [ebp - 0x520], eax
sub esp, 0xc
test eax, eax
je 0x68010676
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x530], eax
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x520]
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 4
mov dword [esp], ebx
call esi
mov eax, dword [ebp - 0x520]
sub esp, 0x18
mov dword [ebp - 0x4e0], eax
lea eax, [ebp - 0x4f4]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x528]
mov dword [esp + 8], 0
mov dword [esp + 4], 0x104d
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x68010676
mov eax, dword [ebp - 0x520]
mov dword [esp + 4], 0
mov edx, dword fs:[0x18]
mov dword [esp + 8], eax
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x520], edx
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [ebp - 0x510]
mov edx, dword [ebp - 0x520]
sub esp, 0xc
add eax, eax
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x53c]
call eax
mov dword [ebp - 0x520], eax
sub esp, 0xc
test eax, eax
je 0x680106e8
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x530], eax
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x520]
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 4
mov dword [esp], ebx
call esi
mov eax, dword [ebp - 0x520]
mov ecx, dword [ebp - 0x4ec]
sub esp, 0x18
mov dword [ebp - 0x4e0], eax
test ecx, ecx
lea eax, [ebp - 0x4f4]
mov dword [esp + 0xc], eax
jne 0x68010b60
mov eax, dword [ebp - 0x528]
mov dword [esp + 8], 0
mov dword [esp + 4], 0x104d
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x680106e8
mov eax, dword [ebp - 0x4f0]
mov dword [esp + 4], 0x1074
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x528]
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x68010504
mov eax, dword [ebp - 0x4f0]
mov dword [esp + 4], 0x1074
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x528]
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x680105df
lea eax, [ebp - 0x50c]
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov eax, dword [0x68024004]
mov dword [esp + 4], 0x447
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadStringW]
mov dword [ebp - 0x510], eax
sub esp, 0x10
jmp 0x68010556
mov eax, dword [ebp - 0x4f0]
mov dword [esp + 4], 0x1074
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x528]
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x680106e8
mov eax, dword [ebp - 0x4f0]
mov dword [esp + 4], 0x1074
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x528]
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x68010570
mov dword [esp + 0xc], str.showing_location_is_not_implemented_n
mov dword [esp + 8], str.add_cert_to_list
mov dword [esp + 4], 0x68015140
mov dword [esp], 0
call sym._wine_dbg_log.constprop.0
jmp 0x680103cc
mov eax, dword [esi + 8]
cmp eax, 0xffffff94
je 0x68010d13
cmp eax, 0xfffffffd
jne 0x6800ff43
mov edx, dword [esi + 0xc]
mov esi, dword [ebp - 0x540]
mov eax, esi
call sym._select_cert_get_selected
mov dword [esp + 4], 8
mov dword [esp], esi
mov ebx, eax
call dword [sym.imp.user32.dll_GetWindowLongW]
sub esp, 8
mov ecx, eax
test ebx, ebx
je 0x6800ff43
mov edx, ebx
mov eax, esi
call sym._select_cert_view
jmp 0x6800ff43
cmp edx, 2
je 0x68010fe6
cmp edx, 0xbba
je 0x68010faf
cmp edx, 1
jne 0x6800ff43
mov edi, dword [ebp - 0x540]
mov edx, 0xffffffff
mov eax, edi
call sym._select_cert_get_selected
mov dword [esp + 4], 8
mov dword [esp], edi
mov esi, eax
call dword [sym.imp.user32.dll_GetWindowLongW]
sub esp, 8
mov ebx, eax
test esi, esi
je 0x68011067
mov edi, dword [eax]
mov dword [esp], esi
call dword [sym.imp.crypt32.dll_CertDuplicateCertificateContext]
mov esi, dword [ebp - 0x540]
sub esp, 4
mov dword [edi], eax
mov dword [esp + 4], 0xbb9
mov dword [esp], esi
call dword [sym.imp.user32.dll_GetDlgItem]
sub esp, 8
call sym._free_certs
mov eax, dword [ebx + 8]
mov dword [esp], eax
call dword [sym.imp.comctl32.dll_ImageList_Destroy]
sub esp, 4
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
mov dword [esp + 4], 1
mov dword [esp], esi
call dword [sym.imp.user32.dll_EndDialog]
sub esp, 8
jmp 0x6800ff43
mov edi, dword [ebp - 0x540]
mov dword [esp + 4], 0xbb9
mov dword [esp], edi
call dword [sym.imp.user32.dll_GetDlgItem]
sub esp, 8
mov ebx, eax
mov dword [esp + 4], 8
mov dword [esp], edi
call dword [sym.imp.user32.dll_GetWindowLongW]
mov edx, eax
sub esp, 8
mov eax, dword [esi + 0x10]
cmp eax, dword [edx + 4]
je 0x680110ce
mov dword [ebp - 0x414], eax
lea eax, [ebp - 0x418]
mov dword [ebp - 0x418], ebx
mov dword [esp + 0xc], sym._select_cert_sort_by_text_12
mov dword [esp + 8], eax
mov dword [esp + 4], 0x1051
mov dword [esp], ebx
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x6800ff43
lea eax, [ebp - 0x418]
mov dword [esp + 0xc], 0x200
lea ebx, [edi + 1]
mov dword [esp + 8], eax
mov eax, dword [0x68024004]
mov dword [esp + 4], 0x437
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadStringW]
lea eax, [ebp - 0x4b8]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x528]
mov dword [esp + 8], edi
mov edi, ebx
mov dword [esp + 4], 0x1061
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x68010206
lea eax, [ebp - 0x418]
mov dword [esp + 0xc], 0x200
lea ebx, [edi + 1]
mov dword [esp + 8], eax
mov eax, dword [0x68024004]
mov dword [esp + 4], 0x514
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadStringW]
lea eax, [ebp - 0x4b8]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x528]
mov dword [esp + 8], edi
mov edi, ebx
mov dword [esp + 4], 0x1061
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x680101fa
lea eax, [ebp - 0x418]
mov dword [esp + 0xc], 0x200
lea ebx, [edi + 1]
mov dword [esp + 8], eax
mov eax, dword [0x68024004]
mov dword [esp + 4], 0x435
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadStringW]
lea eax, [ebp - 0x4b8]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x528]
mov dword [esp + 8], edi
mov edi, ebx
mov dword [esp + 4], 0x1061
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x680101ee
mov dword [esp + 8], eax
mov eax, dword [0x68024004]
mov edi, 1
mov dword [esp + 0xc], 0x200
mov dword [esp + 4], 0x434
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadStringW]
lea eax, [ebp - 0x4b8]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x528]
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1061
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x680101e2
lea eax, [ebp - 0x418]
mov dword [esp + 0xc], 0x200
mov dword [esp + 8], eax
mov eax, dword [0x68024004]
mov dword [esp + 4], 0x515
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadStringW]
lea eax, [ebp - 0x4b8]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x528]
mov dword [esp + 8], edi
mov dword [esp + 4], 0x1061
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x6801021b
lea eax, [ebp - 0x418]
mov dword [esp + 0xc], 0x200
lea ebx, [edi + 1]
mov dword [esp + 8], eax
mov eax, dword [0x68024004]
mov dword [esp + 4], 0x436
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadStringW]
lea eax, [ebp - 0x4b8]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x528]
mov dword [esp + 8], edi
mov edi, ebx
mov dword [esp + 4], 0x1061
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x68010212
mov esi, dword [ebp - 0x540]
mov edx, 0xffffffff
mov eax, esi
call sym._select_cert_get_selected
mov dword [esp + 4], 8
mov dword [esp], esi
mov ebx, eax
call dword [sym.imp.user32.dll_GetWindowLongW]
sub esp, 8
test ebx, ebx
je 0x6800ff43
mov ecx, eax
jmp 0x68010c35
mov esi, dword [ebp - 0x540]
mov dword [esp + 4], 8
mov dword [esp], esi
call dword [sym.imp.user32.dll_GetWindowLongW]
sub esp, 8
mov ebx, eax
mov dword [esp + 4], 0xbb9
mov dword [esp], esi
call dword [sym.imp.user32.dll_GetDlgItem]
sub esp, 8
call sym._free_certs
mov eax, dword [ebx + 8]
mov dword [esp], eax
call dword [sym.imp.comctl32.dll_ImageList_Destroy]
sub esp, 4
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
mov dword [esp + 4], 2
mov dword [esp], esi
call dword [sym.imp.user32.dll_EndDialog]
sub esp, 8
jmp 0x6800ff43
mov edx, dword [sym.imp.user32.dll_LoadStringW]
mov eax, dword [0x68024004]
lea esi, [ebp - 0x4b8]
mov dword [esp + 0xc], 0x28
mov dword [esp + 8], esi
mov dword [ebp - 0x51c], edx
mov dword [esp + 4], 0x517
mov dword [esp], eax
call edx
mov eax, dword [ebx + 0xc]
mov edx, dword [ebp - 0x51c]
sub esp, 0x10
test eax, eax
je 0x680110f7
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x540]
mov dword [esp + 0xc], 0x30
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.user32.dll_MessageBoxW]
sub esp, 0x10
jmp 0x6800ff43
mov dword [esp + 0xc], sym._cert_mgr_sort_by_date_12
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1030
mov dword [esp], ebx
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x6800ff43
mov eax, dword [0x68024004]
lea edi, [ebp - 0x418]
mov dword [esp + 0xc], 0x28
mov dword [esp + 8], edi
mov dword [esp + 4], 0x516
mov dword [esp], eax
call edx
mov eax, dword [ebx + 0xc]
sub esp, 0x10
test eax, eax
cmove eax, edi
jmp 0x680110a7