Function at 0x14002e450
Capabilities:
Link many functions at runtime

Disassembly:
sub rsp, 0x28
mov rax, qword [0x140106490]
test rax, rax
jne 0x14002e47e
xor edx, edx
lea rcx, str.crypt32.dll
call fcn.14002ab30
mov qword [0x140106490], rax
test rax, rax
je 0x14002e707
cmp qword [0x140106570], 0
jne 0x14002e4ad
xor edx, edx
lea rcx, str.wintrust.dll
call fcn.14002ab30
mov qword [0x140106570], rax
test rax, rax
je 0x14002e707
mov rax, qword [0x140106490]
cmp qword [0x1401064c8], 0
jne 0x14002e4de
lea rdx, str.CertGetNameStringA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401064c8], rax
test rax, rax
je 0x14002e707
mov rax, qword [0x140106490]
cmp qword [0x1401064d0], 0
jne 0x14002e50f
lea rdx, str.CryptDecodeObjectEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401064d0], rax
test rax, rax
je 0x14002e707
mov rax, qword [0x140106490]
cmp qword [0x1401064a8], 0
jne 0x14002e540
lea rdx, str.CertFreeCertificateContext
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401064a8], rax
test rax, rax
je 0x14002e707
mov rax, qword [0x140106490]
cmp qword [0x1401064b0], 0
jne 0x14002e571
lea rdx, str.CertFindCertificateInStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401064b0], rax
test rax, rax
je 0x14002e707
mov rax, qword [0x140106490]
cmp qword [0x1401064d8], 0
jne 0x14002e5a2
lea rdx, str.CertGetIssuerCertificateFromStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401064d8], rax
test rax, rax
je 0x14002e707
mov rax, qword [0x140106490]
cmp qword [0x1401064b8], 0
jne 0x14002e5d3
lea rdx, str.CryptMsgGetParam
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401064b8], rax
test rax, rax
je 0x14002e707
mov rax, qword [0x140106490]
cmp qword [0x1401064c0], 0
jne 0x14002e604
lea rdx, str.CryptQueryObject
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401064c0], rax
test rax, rax
je 0x14002e707
mov rax, qword [0x140106490]
cmp qword [0x140106498], 0
jne 0x14002e635
lea rdx, str.CryptMsgClose
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140106498], rax
test rax, rax
je 0x14002e707
mov rax, qword [0x140106490]
cmp qword [0x1401064a0], 0
jne 0x14002e65f
lea rdx, str.CertCloseStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401064a0], rax
test rax, rax
je 0x14002e707
cmp qword [0x140106578], 0
jne 0x14002e689
mov rcx, qword [0x140106570]
lea rdx, str.WinVerifyTrust
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140106578], rax
test rax, rax
je 0x14002e707
cmp qword [0x140106580], 0
jne 0x14002e6b3
mov rcx, qword [0x140106570]
lea rdx, str.WTHelperProvDataFromStateData
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140106580], rax
test rax, rax
je 0x14002e707
cmp qword [0x140106590], 0
jne 0x14002e6dd
mov rcx, qword [0x140106570]
lea rdx, str.WTHelperGetProvCertFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140106590], rax
test rax, rax
je 0x14002e707
cmp qword [0x140106588], 0
jne 0x14002e70e
mov rcx, qword [0x140106570]
lea rdx, str.WTHelperGetProvSignerFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140106588], rax
test rax, rax
jne 0x14002e70e
xor eax, eax
add rsp, 0x28
ret
mov eax, 1
add rsp, 0x28
ret