Function at 0x180067cd0
Capabilities:
Link many functions at runtime

Disassembly:
sub rsp, 0x28
mov rax, qword [0x18016a098]
test rax, rax
jne 0x180067cfe
xor edx, edx
lea rcx, str.crypt32.dll
call fcn.180067140
mov qword [0x18016a098], rax
test rax, rax
je 0x180067f87
cmp qword [0x18016a0e8], 0
jne 0x180067d2d
xor edx, edx
lea rcx, str.wintrust.dll
call fcn.180067140
mov qword [0x18016a0e8], rax
test rax, rax
je 0x180067f87
mov rax, qword [0x18016a098]
cmp qword [0x180169fe8], 0
jne 0x180067d5e
lea rdx, str.CertGetNameStringA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180169fe8], rax
test rax, rax
je 0x180067f87
mov rax, qword [0x18016a098]
cmp qword [0x180169ff0], 0
jne 0x180067d8f
lea rdx, str.CryptDecodeObjectEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180169ff0], rax
test rax, rax
je 0x180067f87
mov rax, qword [0x18016a098]
cmp qword [0x180169fc8], 0
jne 0x180067dc0
lea rdx, str.CertFreeCertificateContext
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180169fc8], rax
test rax, rax
je 0x180067f87
mov rax, qword [0x18016a098]
cmp qword [0x180169fd0], 0
jne 0x180067df1
lea rdx, str.CertFindCertificateInStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180169fd0], rax
test rax, rax
je 0x180067f87
mov rax, qword [0x18016a098]
cmp qword [0x180169ff8], 0
jne 0x180067e22
lea rdx, str.CertGetIssuerCertificateFromStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180169ff8], rax
test rax, rax
je 0x180067f87
mov rax, qword [0x18016a098]
cmp qword [0x180169fd8], 0
jne 0x180067e53
lea rdx, str.CryptMsgGetParam
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180169fd8], rax
test rax, rax
je 0x180067f87
mov rax, qword [0x18016a098]
cmp qword [0x180169fe0], 0
jne 0x180067e84
lea rdx, str.CryptQueryObject
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180169fe0], rax
test rax, rax
je 0x180067f87
mov rax, qword [0x18016a098]
cmp qword [0x180169fb8], 0
jne 0x180067eb5
lea rdx, str.CryptMsgClose
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180169fb8], rax
test rax, rax
je 0x180067f87
mov rax, qword [0x18016a098]
cmp qword [0x180169fc0], 0
jne 0x180067edf
lea rdx, str.CertCloseStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180169fc0], rax
test rax, rax
je 0x180067f87
cmp qword [0x18016a048], 0
jne 0x180067f09
mov rcx, qword [0x18016a0e8]
lea rdx, str.WinVerifyTrust
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18016a048], rax
test rax, rax
je 0x180067f87
cmp qword [0x18016a050], 0
jne 0x180067f33
mov rcx, qword [0x18016a0e8]
lea rdx, str.WTHelperProvDataFromStateData
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18016a050], rax
test rax, rax
je 0x180067f87
cmp qword [0x18016a060], 0
jne 0x180067f5d
mov rcx, qword [0x18016a0e8]
lea rdx, str.WTHelperGetProvCertFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18016a060], rax
test rax, rax
je 0x180067f87
cmp qword [0x18016a058], 0
jne 0x180067f8e
mov rcx, qword [0x18016a0e8]
lea rdx, str.WTHelperGetProvSignerFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18016a058], rax
test rax, rax
jne 0x180067f8e
xor eax, eax
add rsp, 0x28
ret
mov eax, 1
add rsp, 0x28
ret