Function at 0x180003990
Capabilities:
Link many functions at runtime

Disassembly:
jmp 0x180016110
sub rsp, 0x28
mov rax, qword [0x180136bd0]
test rax, rax
jne 0x18001613e
xor edx, edx
lea rcx, str.crypt32.dll
call fcn.180011ee0
mov qword [0x180136bd0], rax
test rax, rax
je 0x1800163c7
cmp qword [0x180136cb0], 0
jne 0x18001616d
xor edx, edx
lea rcx, str.wintrust.dll
call fcn.180011ee0
mov qword [0x180136cb0], rax
test rax, rax
je 0x1800163c7
mov rax, qword [0x180136bd0]
cmp qword [0x180136c08], 0
jne 0x18001619e
lea rdx, str.CertGetNameStringA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180136c08], rax
test rax, rax
je 0x1800163c7
mov rax, qword [0x180136bd0]
cmp qword [0x180136c10], 0
jne 0x1800161cf
lea rdx, str.CryptDecodeObjectEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180136c10], rax
test rax, rax
je 0x1800163c7
mov rax, qword [0x180136bd0]
cmp qword [0x180136be8], 0
jne 0x180016200
lea rdx, str.CertFreeCertificateContext
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180136be8], rax
test rax, rax
je 0x1800163c7
mov rax, qword [0x180136bd0]
cmp qword [0x180136bf0], 0
jne 0x180016231
lea rdx, str.CertFindCertificateInStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180136bf0], rax
test rax, rax
je 0x1800163c7
mov rax, qword [0x180136bd0]
cmp qword [0x180136c18], 0
jne 0x180016262
lea rdx, str.CertGetIssuerCertificateFromStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180136c18], rax
test rax, rax
je 0x1800163c7
mov rax, qword [0x180136bd0]
cmp qword [0x180136bf8], 0
jne 0x180016293
lea rdx, str.CryptMsgGetParam
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180136bf8], rax
test rax, rax
je 0x1800163c7
mov rax, qword [0x180136bd0]
cmp qword [0x180136c00], 0
jne 0x1800162c4
lea rdx, str.CryptQueryObject
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180136c00], rax
test rax, rax
je 0x1800163c7
mov rax, qword [0x180136bd0]
cmp qword [0x180136bd8], 0
jne 0x1800162f5
lea rdx, str.CryptMsgClose
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180136bd8], rax
test rax, rax
je 0x1800163c7
mov rax, qword [0x180136bd0]
cmp qword [0x180136be0], 0
jne 0x18001631f
lea rdx, str.CertCloseStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180136be0], rax
test rax, rax
je 0x1800163c7
cmp qword [0x180136cb8], 0
jne 0x180016349
mov rcx, qword [0x180136cb0]
lea rdx, str.WinVerifyTrust
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180136cb8], rax
test rax, rax
je 0x1800163c7
cmp qword [0x180136cc0], 0
jne 0x180016373
mov rcx, qword [0x180136cb0]
lea rdx, str.WTHelperProvDataFromStateData
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180136cc0], rax
test rax, rax
je 0x1800163c7
cmp qword [0x180136cd0], 0
jne 0x18001639d
mov rcx, qword [0x180136cb0]
lea rdx, str.WTHelperGetProvCertFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180136cd0], rax
test rax, rax
je 0x1800163c7
cmp qword [0x180136cc8], 0
jne 0x1800163ce
mov rcx, qword [0x180136cb0]
lea rdx, str.WTHelperGetProvSignerFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180136cc8], rax
test rax, rax
jne 0x1800163ce
xor eax, eax
add rsp, 0x28
ret
mov eax, 1
add rsp, 0x28
ret