Function at 0x14001c230
Capabilities:
Link many functions at runtime

Disassembly:
sub rsp, 0x28
mov rax, qword [0x140109260]
test rax, rax
jne 0x14001c25e
xor edx, edx
lea rcx, str.crypt32.dll
call fcn.140018930
mov qword [0x140109260], rax
test rax, rax
je 0x14001c4e7
cmp qword [0x140109340], 0
jne 0x14001c28d
xor edx, edx
lea rcx, str.wintrust.dll
call fcn.140018930
mov qword [0x140109340], rax
test rax, rax
je 0x14001c4e7
mov rax, qword [0x140109260]
cmp qword [0x140109298], 0
jne 0x14001c2be
lea rdx, str.CertGetNameStringA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140109298], rax
test rax, rax
je 0x14001c4e7
mov rax, qword [0x140109260]
cmp qword [0x1401092a0], 0
jne 0x14001c2ef
lea rdx, str.CryptDecodeObjectEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401092a0], rax
test rax, rax
je 0x14001c4e7
mov rax, qword [0x140109260]
cmp qword [0x140109278], 0
jne 0x14001c320
lea rdx, str.CertFreeCertificateContext
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140109278], rax
test rax, rax
je 0x14001c4e7
mov rax, qword [0x140109260]
cmp qword [0x140109280], 0
jne 0x14001c351
lea rdx, str.CertFindCertificateInStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140109280], rax
test rax, rax
je 0x14001c4e7
mov rax, qword [0x140109260]
cmp qword [0x1401092a8], 0
jne 0x14001c382
lea rdx, str.CertGetIssuerCertificateFromStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401092a8], rax
test rax, rax
je 0x14001c4e7
mov rax, qword [0x140109260]
cmp qword [0x140109288], 0
jne 0x14001c3b3
lea rdx, str.CryptMsgGetParam
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140109288], rax
test rax, rax
je 0x14001c4e7
mov rax, qword [0x140109260]
cmp qword [0x140109290], 0
jne 0x14001c3e4
lea rdx, str.CryptQueryObject
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140109290], rax
test rax, rax
je 0x14001c4e7
mov rax, qword [0x140109260]
cmp qword [0x140109268], 0
jne 0x14001c415
lea rdx, str.CryptMsgClose
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140109268], rax
test rax, rax
je 0x14001c4e7
mov rax, qword [0x140109260]
cmp qword [0x140109270], 0
jne 0x14001c43f
lea rdx, str.CertCloseStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140109270], rax
test rax, rax
je 0x14001c4e7
cmp qword [0x140109348], 0
jne 0x14001c469
mov rcx, qword [0x140109340]
lea rdx, str.WinVerifyTrust
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140109348], rax
test rax, rax
je 0x14001c4e7
cmp qword [0x140109350], 0
jne 0x14001c493
mov rcx, qword [0x140109340]
lea rdx, str.WTHelperProvDataFromStateData
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140109350], rax
test rax, rax
je 0x14001c4e7
cmp qword [0x140109360], 0
jne 0x14001c4bd
mov rcx, qword [0x140109340]
lea rdx, str.WTHelperGetProvCertFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140109360], rax
test rax, rax
je 0x14001c4e7
cmp qword [0x140109358], 0
jne 0x14001c4ee
mov rcx, qword [0x140109340]
lea rdx, str.WTHelperGetProvSignerFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140109358], rax
test rax, rax
jne 0x14001c4ee
xor eax, eax
add rsp, 0x28
ret
mov eax, 1
add rsp, 0x28
ret