Function at 0x104634b
Capabilities:
Create new key via cryptacquirecontext
Get file size
Read file on windows

Disassembly:
push 0x28
mov eax, 0x1060559
call fcn.0104f320
xor ebx, ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], ebx
push 0x1068adc
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.010309e3
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 3
call fcn.01046248
cmp eax, ebx
mov dword [ebp + 8], eax
jge 0x10463c6
push 0x1012420
push 0x1012410
push eax
call fcn.0104a504
add esp, 0xc
push ebx
mov byte [ebp - 4], 2
call sub.msvcrt.dll_void___cdecl_operator_delete___void__
pop ecx
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.010303ce
jmp 0x104662a
mov edi, dword [ebp - 0x18]
push ebx
push ebx
push 3
push ebx
push 1
push 0x80000000
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, ebx
je 0x10466f5
cmp esi, 0xffffffff
je 0x10466f5
lea eax, [ebp - 0x24]
push eax
push esi
mov dword [ebp - 0x14], esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x24], ebx
je 0x1046441
push edi
push 0x10123dc
push 0x10123cc
mov eax, 0x8000ffff
push eax
mov dword [ebp + 8], eax
call fcn.0104a504
add esp, 0x10
push ebx
mov byte [ebp - 4], 2
call sub.msvcrt.dll_void___cdecl_operator_delete___void__
pop ecx
lea ecx, [edi - 0x10]
call fcn.010303ce
lea ecx, [ebp - 0x14]
call fcn.010303b2
jmp 0x104662a
cmp eax, 0x100000
jbe 0x1046455
push edi
push 0x10123dc
push 0x10123bc
jmp 0x1046410
push eax
lea ecx, [ebp - 0x1c]
call fcn.01042fff
movzx eax, al
cmp eax, ebx
jne 0x1046485
push 0x1012348
mov eax, 0x8007000e
push 0x1012334
push eax
mov dword [ebp + 8], eax
call fcn.0104a504
add esp, 0xc
push dword [ebp - 0x1c]
jmp 0x1046422
push ebx
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x28]
push dword [ebp - 0x1c]
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, ebx
jne 0x10464da
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, ebx
jle 0x10464b1
and eax, 0xffff
or eax, 0x80070000
cmp eax, ebx
mov dword [ebp + 8], eax
jl 0x10464bf
mov dword [ebp + 8], 0x80004005
push edi
push dword [ebp - 0x28]
push 0x10122e0
push 0x10122d0
call esi
push eax
call fcn.0104a5f6
add esp, 0x14
jmp 0x1046480
mov esi, dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
push 0x40
push 1
mov edi, 0x1012278
push edi
push ebx
lea eax, [ebp - 0x20]
push eax
call esi
cmp eax, ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
jne 0x104656d
call ebx
cmp eax, 0x80090016
jne 0x1046515
push 0x48
push 1
push edi
push 0
lea eax, [ebp - 0x20]
push eax
call esi
test eax, eax
jne 0x104656d
call ebx
test eax, eax
jle 0x1046525
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp + 8], eax
test eax, eax
jl 0x1046533
mov dword [ebp + 8], 0x80004005
push 0x101223c
push 0x101222c
call ebx
push eax
call fcn.0104a5f6
add esp, 0xc
push dword [ebp - 0x1c]
mov byte [ebp - 4], 2
call sub.msvcrt.dll_void___cdecl_operator_delete___void__
pop ecx
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.010303ce
lea ecx, [ebp - 0x14]
call fcn.010303b2
jmp 0x1046628
push 0x1012220
push 0x24000
xor edi, edi
push edi
push edi
push 0xa
call dword [sym.imp.CRYPT32.dll_CertOpenStore]
mov esi, eax
mov dword [ebp - 0x30], esi
cmp esi, edi
je 0x104669d
cmp esi, 0xffffffff
je 0x104669d
push dword [ebp - 0x28]
mov edi, dword [ebp - 0x1c]
push edi
push 0x10001
call dword [sym.imp.CRYPT32.dll_CertCreateCertificateContext]
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x1046644
call ebx
test eax, eax
jle 0x10465c6
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp + 8], eax
test eax, eax
jl 0x10465d4
mov dword [ebp + 8], 0x80004005
mov esi, dword [ebp - 0x18]
push esi
push 0x10121b0
push 0x10121a0
call ebx
push eax
call fcn.0104a5f6
add esp, 0x10
push edi
mov byte [ebp - 4], 2
call sub.msvcrt.dll_void___cdecl_operator_delete___void__
pop ecx
lea ecx, [esi - 0x10]
call fcn.010303ce
lea ecx, [ebp - 0x14]
call fcn.010303b2
cmp dword [ebp - 0x2c], 0
je 0x1046617
push dword [ebp - 0x2c]
call dword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
cmp dword [ebp - 0x30], 0
je 0x1046628
push 1
push dword [ebp - 0x30]
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
xor ebx, ebx
cmp dword [ebp - 0x20], ebx
je 0x1046639
push ebx
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov eax, dword [ebp + 8]
call fcn.0104f3d4
ret 4
push 0
push 2
push eax
push esi
call dword [sym.imp.CRYPT32.dll_CertAddCertificateContextToStore]
test eax, eax
jne 0x1046687
call ebx
test eax, eax
jle 0x1046664
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp + 8], eax
test eax, eax
jl 0x1046672
mov dword [ebp + 8], 0x80004005
push 0x1012158
push 0x1012144
call ebx
push eax
call fcn.0104a5f6
add esp, 0xc
push edi
mov byte [ebp - 4], 2
call sub.msvcrt.dll_void___cdecl_operator_delete___void__
pop ecx
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
jmp 0x10465fb
call ebx
cmp eax, edi
jle 0x10466ad
and eax, 0xffff
or eax, 0x80070000
cmp eax, edi
mov dword [ebp + 8], eax
jl 0x10466bb
mov dword [ebp + 8], 0x80004005
push 0x1012110
push 0x1012100
call ebx
push eax
call fcn.0104a5f6
add esp, 0xc
push dword [ebp - 0x1c]
mov byte [ebp - 4], 2
call sub.msvcrt.dll_void___cdecl_operator_delete___void__
pop ecx
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.010303ce
lea ecx, [ebp - 0x14]
call fcn.010303b2
jmp 0x1046617
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, ebx
jle 0x104670b
and eax, 0xffff
or eax, 0x80070000
cmp eax, ebx
mov dword [ebp + 8], eax
jl 0x1046719
mov dword [ebp + 8], 0x80004005
push edi
push 0x10120c0
push 0x10120b0
call esi
push eax
call fcn.0104a5f6
add esp, 0x10
push ebx
mov byte [ebp - 4], 2
call sub.msvcrt.dll_void___cdecl_operator_delete___void__
pop ecx
lea ecx, [edi - 0x10]
jmp 0x10463bc