Function at 0x103aa71
Capabilities:
Check if file exists

Disassembly:
push 0xa8
mov eax, 0x10a76c4
call fcn.01068401
xor esi, esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], esi
mov byte [ebp - 0x20], 5
mov byte [ebp - 0x1f], 0
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], esi
lea ecx, [ebp - 0x70]
call fcn.01029df8
mov dword [ebp - 4], esi
xor eax, eax
lea edi, [ebp - 0x38]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x54]
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 0xc]
cmp eax, esi
je 0x103aabc
mov dword [eax], esi
mov eax, dword [ebp + 0x10]
cmp eax, esi
je 0x103aac5
mov dword [eax], esi
push esi
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
push esi
mov eax, dword [0x10b75b0]
neg eax
sbb eax, eax
and eax, 0x40
or eax, 0x10000
push eax
mov ebx, dword [ebp + 8]
push ebx
call dword [sym.imp.CRYPT32.dll_CryptAcquireCertificatePrivateKey]
test eax, eax
jne 0x103ab6e
call fcn.010a4804
mov edi, eax
mov esi, 0x8009200b
cmp edi, esi
jne 0x103ab34
push 0
push esi
call sub.certcli.dll_Ordinal_207
mov edi, eax
test edi, edi
je 0x103ab21
push edi
push 0x1001ba4
call fcn.0108880b
pop ecx
pop ecx
push edi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push esi
push esi
push 0xf840134
xor edi, edi
call fcn.0107ae61
jmp 0x103b066
mov esi, 0x80090016
cmp edi, esi
jne 0x103ab63
push 0x269
call fcn.0107a681
push eax
call fcn.0108880b
mov dword [esp], 0x1003d24
call fcn.0108880b
pop ecx
push esi
push esi
push 0xf900134
jmp 0x103ab28
push edi
push 0xf920134
jmp 0x103b061
cmp dword [0x10b75ac], esi
jne 0x103ab7f
push esi
push dword [ebp - 0x18]
call fcn.01035de8
mov eax, dword [ebp - 0x14]
cmp eax, 0xffffffff
je 0x103aba8
cmp eax, 2
je 0x103ab9f
cmp eax, 0x5dc
je 0x103ab9f
cmp eax, 0x9c4
je 0x103ab9f
mov dword [ebp - 0x28], esi
jmp 0x103abf0
mov dword [ebp - 0x28], 1
jmp 0x103abf0
lea eax, [ebp + 8]
push eax
push dword [ebp - 0x18]
call fcn.010846ad
mov edi, eax
cmp edi, esi
je 0x103abc5
push edi
push 0xfa10134
jmp 0x103b061
test byte [ebp + 8], 4
jne 0x103abd8
test byte [ebp + 8], 2
je 0x103abd8
mov dword [ebp - 0x28], 1
cmp dword [0x10b75ac], esi
jne 0x103abf0
push dword [ebp + 8]
mov eax, 0x10092bc
push eax
push eax
push esi
call fcn.0104c905
mov eax, dword [ebp + 0xc]
cmp eax, esi
je 0x103abfc
mov ecx, dword [ebp - 0x28]
mov dword [eax], ecx
push dword [ebp - 0x18]
call fcn.01035f02
lea eax, [ebp - 0x70]
push eax
cmp dword [ebp - 0x14], 0xffffffff
je 0x103ac1f
push 1
push esi
push dword [ebp - 0x14]
push esi
push dword [ebp - 0x18]
call fcn.0106a6f2
jmp 0x103ac2a
push esi
push esi
push dword [ebp - 0x18]
push esi
call fcn.0106b59b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x60], esi
jge 0x103ac54
call fcn.010a4804
mov edi, eax
push edi
push 0xfce0134
call fcn.0107ae44
push edi
push 0x354
call fcn.0107a7c5
jmp 0x103b066
lea ecx, [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x34]
push ecx
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x28]
push eax
call fcn.0107f6bc
mov edi, eax
cmp edi, 0x8009000a
je 0x103ac9a
cmp edi, 0x8009000b
je 0x103ac9a
cmp edi, 0x80090010
je 0x103ac9a
cmp edi, 0x80090029
je 0x103ac9a
cmp edi, esi
je 0x103acb9
push edi
push 0xfde0134
jmp 0x103b061
push 0x2d6
call fcn.0107a681
push eax
call fcn.0108880b
mov esi, 0x1003d24
push esi
call fcn.0108880b
pop ecx
pop ecx
jmp 0x103acbe
mov esi, 0x1003d24
xor edi, edi
cmp dword [0x10b7598], edi
jne 0x103acda
cmp dword [ebp - 0x14], 2
je 0x103acda
cmp dword [ebp - 0x14], 1
je 0x103acda
cmp dword [ebp - 0x14], 0xffffffff
jne 0x103ad34
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x1c]
push eax
push 2
push dword [ebp - 0x14]
push dword [ebp - 0x18]
call fcn.010a4c00
test eax, eax
jne 0x103ad22
call fcn.010a4804
mov edi, eax
push edi
push 0xfec0134
call fcn.0107ae44
cmp dword [ebp - 0x14], 2
je 0x103ad17
cmp dword [ebp - 0x14], 1
je 0x103ad17
cmp dword [ebp - 0x14], 0xffffffff
jne 0x103ad32
push edi
push 0xfef0134
jmp 0x103b061
mov ecx, dword [ebp - 0x1c]
mov dword [ebp + 0xc], ecx
cmp ecx, edi
jne 0x103ae3f
jmp 0x103ad34
xor edi, edi
cmp dword [ebp - 0x34], edi
je 0x103ad96
push esi
call fcn.0108880b
mov dword [esp], 0x9bd
call fcn.0107a681
push eax
call fcn.0108880b
push esi
call fcn.0108880b
pop ecx
pop ecx
mov dword [ebp - 0x54], 0x10092a4
lea eax, [ebp - 0x20]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], 2
mov dword [ebp - 0x40], edi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x38]
push dword [ebp - 0x34]
call fcn.010523a9
cmp eax, edi
je 0x103ae28
push eax
push 0x10060134
call fcn.0107ae44
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x24]
mov eax, dword [ebx + 0xc]
add eax, 0x38
push eax
push 1
cmp dword [ebp - 0x28], edi
je 0x103af53
call fcn.0106cf10
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x98]
call fcn.0102a131
mov byte [ebp - 4], 1
mov ebx, dword [ebp - 0x88]
cmp ebx, edi
je 0x103af3a
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x94]
test eax, eax
jne 0x103ade8
mov eax, 0x1001ea0
push 0x7fffffff
push eax
lea ecx, [ebp - 0x2c]
call fcn.0102a0c2
mov byte [ebp - 4], 3
mov dword [ebp + 0xc], ebx
push 0x80090022
push ebx
push 0x10380134
push dword [ebp - 0x2c]
call fcn.0107adc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2c]
call fcn.01029f8c
mov dword [ebp - 4], 1
jmp 0x103af3a
lea eax, [ebp - 0x54]
mov dword [ebp + 0xc], eax
test eax, eax
je 0x103ad96
mov ecx, dword [ebp - 0x1c]
cmp ecx, edi
jne 0x103ae3f
mov ecx, eax
mov eax, dword [ebx + 0xc]
lea edx, [eax + 0x38]
push edx
push ecx
xor ecx, ecx
cmp dword [eax], edi
sete cl
push ecx
push 1
call fcn.010818cb
mov dword [ebp - 0x3c], eax
cmp eax, edi
je 0x103ae65
cmp dword [0x10b759c], edi
je 0x103aee4
push esi
call fcn.0108880b
mov dword [esp], 0x17e
call fcn.0107a681
push eax
call fcn.0108880b
push esi
call fcn.0108880b
pop ecx
pop ecx
mov eax, dword [ebx + 0xc]
mov eax, dword [eax]
inc eax
push eax
call fcn.01035fca
mov eax, dword [ebx + 0xc]
add eax, 0x38
push eax
call fcn.01039454
push edi
push edi
mov eax, dword [ebx + 0xc]
add eax, 0x38
push eax
call fcn.01039f5f
push esi
call fcn.0108880b
mov dword [esp], 0x17d
call fcn.0107a681
push eax
call fcn.0108880b
push esi
call fcn.0108880b
pop ecx
pop ecx
push dword [ebp + 0xc]
call fcn.01039454
push edi
push edi
push dword [ebp + 0xc]
call fcn.01039f5f
push esi
call fcn.0108880b
pop ecx
cmp dword [ebp - 0x3c], edi
jne 0x103ad96
push 0x17c
call fcn.0107a681
push eax
call fcn.0108880b
push esi
call fcn.0108880b
pop ecx
pop ecx
mov edi, 0x8007000d
push edi
push 0x102e0134
jmp 0x103b061
mov byte [ebp - 4], 0
mov dword [ebp - 0x98], 0x1002288
lea ecx, [ebp - 0x98]
jmp 0x103affe
call fcn.0106d43a
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0102a131
mov byte [ebp - 4], 5
mov ebx, dword [ebp - 0xa4]
cmp ebx, edi
je 0x103afea
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0xb0]
test eax, eax
jne 0x103af88
mov eax, 0x1001ea0
push 0x7fffffff
push eax
lea ecx, [ebp - 0x78]
call fcn.0102a0c2
mov byte [ebp - 4], 7
mov dword [ebp - 0x3c], ebx
push 0x80090022
push ebx
push 0x10410134
push dword [ebp - 0x78]
call fcn.0107adc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x78]
call fcn.01029f8c
mov dword [ebp - 4], 5
jmp 0x103afea
mov byte [ebp - 4], 0
mov dword [ebp - 0xb4], 0x1002288
lea ecx, [ebp - 0xb4]
call fcn.01028435
mov edi, dword [ebp - 0x60]
xor ebx, ebx
cmp edi, ebx
je 0x103b028
push 0x301
call fcn.0107a681
push eax
call fcn.0108880b
push esi
call fcn.0108880b
pop ecx
pop ecx
xor edi, edi
jmp 0x103b035
mov eax, dword [ebp + 0x10]
cmp eax, ebx
je 0x103b035
mov dword [eax], 1
cmp dword [0x10b75ac], ebx
jne 0x103b066
cmp dword [ebp - 0x34], ebx
je 0x103b086
push esi
call fcn.0108880b
pop ecx
push ebx
push dword [ebp - 0x38]
push dword [ebp - 0x34]
call fcn.01037c53
mov edi, eax
cmp edi, ebx
je 0x103b066
push edi
push 0x10550134
call fcn.0107ae44
mov eax, dword [ebp - 0x34]
xor ebx, ebx
cmp eax, ebx
je 0x103b086
mov ecx, dword [ebp - 0x38]
cmp ecx, ebx
je 0x103b07d
mov byte [eax], 0
inc eax
dec ecx
jne 0x103b076
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x44], ebx
je 0x103b094
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x1c], ebx
je 0x103b0a2
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ecx, dword [ebp - 0x24]
cmp ecx, ebx
je 0x103b0af
mov eax, dword [ecx]
push 1
call dword [eax]
cmp dword [ebp - 0x18], ebx
je 0x103b0ce
cmp dword [ebp - 0x14], 0xffffffff
je 0x103b0c6
push ebx
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
jmp 0x103b0ce
push dword [ebp - 0x18]
call fcn.01083ce8
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x70], 0x1002288
lea ecx, [ebp - 0x70]
call fcn.01028435
mov eax, edi
call fcn.010684b5
ret 0xc