Function at 0x477200
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x610e06
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x6a0f4c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x68], ecx
mov eax, dword [ebp - 0x68]
add eax, 0x10
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0xd]
push ecx
lea edx, [ebp - 0xe]
push edx
mov ecx, dword [ebp - 0x34]
call fcn.00479040
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x68]
add eax, 0x30
mov dword [ebp - 0x64], eax
lea ecx, [ebp - 0x35]
push ecx
lea edx, [ebp - 0x36]
push edx
mov ecx, dword [ebp - 0x64]
call fcn.00479d90
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x68]
mov dword [eax], 0
mov ecx, dword [ebp - 0x68]
mov dword [ecx + 8], 0
mov edx, dword [ebp - 0x68]
mov dword [edx + 4], 0
mov eax, dword [ebp - 0x68]
mov dword [eax + 0xc], 0
mov ecx, dword [str._____BEGIN_CERTIFICATE______nMIIChDCCAe2gAwIBAgIJAKkMGi7sxQDMA0GCSqGSIb3DQEBCwUAMFoxCzAJBgNV_nBAYTAkNOMQ4wDAYDVQQIDAVIdW5hbjERMA8GA1UEBwwIQ2hhbmdTaGExETAPBgNV_nBAoMCEFzaWFpbmZvMRUwEwYDVQQLDAxXYWRlIFJvb3QgQ0EwIBcNMTcwOTI2MTAw_nMjQ2WhgPMjExNzA5MDIxMDAyNDZaMFoxCzAJBgNVBAYTAkNOMQ4wDAYDVQQIDAVI_ndW5hbjERMA8GA1UEBwwIQ2hhbmdTaGExETAPBgNVBAoMCEFzaWFpbmZvMRUwEwYD_nVQQLDAxXYWRlIFJvb3QgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALH7_n3wzhtZjHg_BIkdc047xA3ZXL8rbd6EdtmJvoo0RQs0hXPVrYD79iOr8N2DKbar8L_nETFzUmWhvWORWb2UtC2TyaFbbgm4cr45D03NGXbJTBGejcXMIC1Nx122Red9tPj8_ndzGPeNThthlmiYhwx0jv0K5qMI5F_FNfFIuVDklAgMBAAGjUDBOMB0GA1UdDgQW_nBBSamvdPaPUvOY6yD2SLipAE6wVRzAfBgNVHSMEGDAWgBSamvdPaPUvOY6yD2S_nLipAE6wVRzAMBgNVHRMEBTADAQH_MA0GCSqGSIb3DQEBCwUAA4GBAKdaywFmoEed_n38d35BLOlCYRIhgXrmTyvS7akiVVFJKUYsB7oGOSNrzL_gtZe4us_JZ9vHsivzrF_nhlTvIDwuNaAIOhhC5CF0MPiLcFVbvbhAvMSHgHxRZ3jMR_pPe50kbwtsHsb8QHyo_n7NNWlLyQ0AfEyCQ4bkrauF04RKjLkuhz_n_____END_CERTIFICATE_____]
push ecx
mov ecx, dword [ebp - 0x68]
call fcn.00478760
mov edx, dword [str._____BEGIN_CERTIFICATE______nMIIChDCCAe2gAwIBAgIJAKkMGi7sxQDMA0GCSqGSIb3DQEBCwUAMFoxCzAJBgNV_nBAYTAkNOMQ4wDAYDVQQIDAVIdW5hbjERMA8GA1UEBwwIQ2hhbmdTaGExETAPBgNV_nBAoMCEFzaWFpbmZvMRUwEwYDVQQLDAxXYWRlIFJvb3QgQ0EwIBcNMTcwOTI2MTAw_nMjQ2WhgPMjExNzA5MDIxMDAyNDZaMFoxCzAJBgNVBAYTAkNOMQ4wDAYDVQQIDAVI_ndW5hbjERMA8GA1UEBwwIQ2hhbmdTaGExETAPBgNVBAoMCEFzaWFpbmZvMRUwEwYD_nVQQLDAxXYWRlIFJvb3QgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALH7_n3wzhtZjHg_BIkdc047xA3ZXL8rbd6EdtmJvoo0RQs0hXPVrYD79iOr8N2DKbar8L_nETFzUmWhvWORWb2UtC2TyaFbbgm4cr45D03NGXbJTBGejcXMIC1Nx122Red9tPj8_ndzGPeNThthlmiYhwx0jv0K5qMI5F_FNfFIuVDklAgMBAAGjUDBOMB0GA1UdDgQW_nBBSamvdPaPUvOY6yD2SLipAE6wVRzAfBgNVHSMEGDAWgBSamvdPaPUvOY6yD2S_nLipAE6wVRzAMBgNVHRMEBTADAQH_MA0GCSqGSIb3DQEBCwUAA4GBAKdaywFmoEed_n38d35BLOlCYRIhgXrmTyvS7akiVVFJKUYsB7oGOSNrzL_gtZe4us_JZ9vHsivzrF_nhlTvIDwuNaAIOhhC5CF0MPiLcFVbvbhAvMSHgHxRZ3jMR_pPe50kbwtsHsb8QHyo_n7NNWlLyQ0AfEyCQ4bkrauF04RKjLkuhz_n_____END_CERTIFICATE_____]
push edx
call sub.MSVCR90.dll_strlen
add esp, 4
push eax
mov eax, dword [str._____BEGIN_CERTIFICATE______nMIIChDCCAe2gAwIBAgIJAKkMGi7sxQDMA0GCSqGSIb3DQEBCwUAMFoxCzAJBgNV_nBAYTAkNOMQ4wDAYDVQQIDAVIdW5hbjERMA8GA1UEBwwIQ2hhbmdTaGExETAPBgNV_nBAoMCEFzaWFpbmZvMRUwEwYDVQQLDAxXYWRlIFJvb3QgQ0EwIBcNMTcwOTI2MTAw_nMjQ2WhgPMjExNzA5MDIxMDAyNDZaMFoxCzAJBgNVBAYTAkNOMQ4wDAYDVQQIDAVI_ndW5hbjERMA8GA1UEBwwIQ2hhbmdTaGExETAPBgNVBAoMCEFzaWFpbmZvMRUwEwYD_nVQQLDAxXYWRlIFJvb3QgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALH7_n3wzhtZjHg_BIkdc047xA3ZXL8rbd6EdtmJvoo0RQs0hXPVrYD79iOr8N2DKbar8L_nETFzUmWhvWORWb2UtC2TyaFbbgm4cr45D03NGXbJTBGejcXMIC1Nx122Red9tPj8_ndzGPeNThthlmiYhwx0jv0K5qMI5F_FNfFIuVDklAgMBAAGjUDBOMB0GA1UdDgQW_nBBSamvdPaPUvOY6yD2SLipAE6wVRzAfBgNVHSMEGDAWgBSamvdPaPUvOY6yD2S_nLipAE6wVRzAMBgNVHRMEBTADAQH_MA0GCSqGSIb3DQEBCwUAA4GBAKdaywFmoEed_n38d35BLOlCYRIhgXrmTyvS7akiVVFJKUYsB7oGOSNrzL_gtZe4us_JZ9vHsivzrF_nhlTvIDwuNaAIOhhC5CF0MPiLcFVbvbhAvMSHgHxRZ3jMR_pPe50kbwtsHsb8QHyo_n7NNWlLyQ0AfEyCQ4bkrauF04RKjLkuhz_n_____END_CERTIFICATE_____]
push eax
push 0
mov ecx, dword [ebp - 0x68]
add ecx, 4
push ecx
mov edx, dword [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x68]
call fcn.00478270
mov eax, dword [str._____BEGIN_RSA_PRIVATE_KEY______nMIICXAIBAAKBgQCx98M4bWYx4PwSJHXNOO8QN2Vy_K23ehHbZib6KNEULNIVz1a_n2A_Yjq_Ddgym2q_CxExc1Jlob1jkVm9lLQtk8mhW24JuHKOQ9NzRl2yUwRno3F_nzCAtTcddtkXnfbT4_Hcxj3jU4bYZZomIcMdI79CvuajCORfxTXxSLlQ5JQIDAQAB_nAoGAZ4tfjU_2ZOaVpIGjju7vGoMmJlKbZrWcv4lMAlAKQErHAfc4u_V4YKVKLc2_nMuLl7DTVEM7FfejllHpoGfncA7uYPVVpOOsJe_wvWLDisVYVQ6Dsbhe19mWAN617_nBmu9dNIlOnyskdGDcd9nITTnRrF1xLv_mcpSmwxRYKRZ79UCQQDXyWUKcWBo84Ib_niaCF_132Tjz1geAL9UE0dOMQwKy0uHHr7csLv8k8ib5bZqpb9ZZnd33vYcAFuHf_njI30xOI3AkEA0ycBStpcq60kG1noEUbXGufXz48swRrTf3Swawdi5bOJMwGbbGEc_nRYeAV8OVVhtPNdZHuXFrij7pLZHJCL_BgwJAc8OowER423Uf7NQV2S1Z5GWUbRP6_nrCt9FXvYCRxGxFXxKGq15_JPwAKrpBSfskvKkzxs_X2BVukfaexZzGWwJAQnYA_nfiMFEDRLLSC7XtTBWAKpdvdFyvI6p99t_F3O32rLZbP6OkYEPp5dyZkltm5sORl_nZwVAKB9tHZ7JfCt_KQJBAMWdAJfD7jJFiEyPlRCblwN7W1sRLMlynzNwZ5U6AA_nmUK7YhVY65BUj78ilwsvUS_IVwoRZlloidMy9aoDPI_n_____END_RSA_PRIVATE_KEY_____]
push eax
call sub.MSVCR90.dll_strlen
add esp, 4
push eax
mov ecx, dword [str._____BEGIN_RSA_PRIVATE_KEY______nMIICXAIBAAKBgQCx98M4bWYx4PwSJHXNOO8QN2Vy_K23ehHbZib6KNEULNIVz1a_n2A_Yjq_Ddgym2q_CxExc1Jlob1jkVm9lLQtk8mhW24JuHKOQ9NzRl2yUwRno3F_nzCAtTcddtkXnfbT4_Hcxj3jU4bYZZomIcMdI79CvuajCORfxTXxSLlQ5JQIDAQAB_nAoGAZ4tfjU_2ZOaVpIGjju7vGoMmJlKbZrWcv4lMAlAKQErHAfc4u_V4YKVKLc2_nMuLl7DTVEM7FfejllHpoGfncA7uYPVVpOOsJe_wvWLDisVYVQ6Dsbhe19mWAN617_nBmu9dNIlOnyskdGDcd9nITTnRrF1xLv_mcpSmwxRYKRZ79UCQQDXyWUKcWBo84Ib_niaCF_132Tjz1geAL9UE0dOMQwKy0uHHr7csLv8k8ib5bZqpb9ZZnd33vYcAFuHf_njI30xOI3AkEA0ycBStpcq60kG1noEUbXGufXz48swRrTf3Swawdi5bOJMwGbbGEc_nRYeAV8OVVhtPNdZHuXFrij7pLZHJCL_BgwJAc8OowER423Uf7NQV2S1Z5GWUbRP6_nrCt9FXvYCRxGxFXxKGq15_JPwAKrpBSfskvKkzxs_X2BVukfaexZzGWwJAQnYA_nfiMFEDRLLSC7XtTBWAKpdvdFyvI6p99t_F3O32rLZbP6OkYEPp5dyZkltm5sORl_nZwVAKB9tHZ7JfCt_KQJBAMWdAJfD7jJFiEyPlRCblwN7W1sRLMlynzNwZ5U6AA_nmUK7YhVY65BUj78ilwsvUS_IVwoRZlloidMy9aoDPI_n_____END_RSA_PRIVATE_KEY_____]
push ecx
push 0
push str.123456
mov edx, dword [ebp - 0x68]
add edx, 8
push edx
mov ecx, dword [ebp - 0x68]
call fcn.00478330
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret