Function at 0x180026220
Capabilities:
Link many functions at runtime

Disassembly:
sub rsp, 0x28
mov rax, qword [0x1800e33d0]
test rax, rax
jne 0x18002624e
xor edx, edx
lea rcx, str.crypt32.dll
call fcn.180022920
mov qword [0x1800e33d0], rax
test rax, rax
je 0x1800264d7
cmp qword [0x1800e34b0], 0
jne 0x18002627d
xor edx, edx
lea rcx, str.wintrust.dll
call fcn.180022920
mov qword [0x1800e34b0], rax
test rax, rax
je 0x1800264d7
mov rax, qword [0x1800e33d0]
cmp qword [0x1800e3408], 0
jne 0x1800262ae
lea rdx, str.CertGetNameStringA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800e3408], rax
test rax, rax
je 0x1800264d7
mov rax, qword [0x1800e33d0]
cmp qword [0x1800e3410], 0
jne 0x1800262df
lea rdx, str.CryptDecodeObjectEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800e3410], rax
test rax, rax
je 0x1800264d7
mov rax, qword [0x1800e33d0]
cmp qword [0x1800e33e8], 0
jne 0x180026310
lea rdx, str.CertFreeCertificateContext
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800e33e8], rax
test rax, rax
je 0x1800264d7
mov rax, qword [0x1800e33d0]
cmp qword [0x1800e33f0], 0
jne 0x180026341
lea rdx, str.CertFindCertificateInStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800e33f0], rax
test rax, rax
je 0x1800264d7
mov rax, qword [0x1800e33d0]
cmp qword [0x1800e3418], 0
jne 0x180026372
lea rdx, str.CertGetIssuerCertificateFromStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800e3418], rax
test rax, rax
je 0x1800264d7
mov rax, qword [0x1800e33d0]
cmp qword [0x1800e33f8], 0
jne 0x1800263a3
lea rdx, str.CryptMsgGetParam
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800e33f8], rax
test rax, rax
je 0x1800264d7
mov rax, qword [0x1800e33d0]
cmp qword [0x1800e3400], 0
jne 0x1800263d4
lea rdx, str.CryptQueryObject
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800e3400], rax
test rax, rax
je 0x1800264d7
mov rax, qword [0x1800e33d0]
cmp qword [0x1800e33d8], 0
jne 0x180026405
lea rdx, str.CryptMsgClose
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800e33d8], rax
test rax, rax
je 0x1800264d7
mov rax, qword [0x1800e33d0]
cmp qword [0x1800e33e0], 0
jne 0x18002642f
lea rdx, str.CertCloseStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800e33e0], rax
test rax, rax
je 0x1800264d7
cmp qword [0x1800e34b8], 0
jne 0x180026459
mov rcx, qword [0x1800e34b0]
lea rdx, str.WinVerifyTrust
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800e34b8], rax
test rax, rax
je 0x1800264d7
cmp qword [0x1800e34c0], 0
jne 0x180026483
mov rcx, qword [0x1800e34b0]
lea rdx, str.WTHelperProvDataFromStateData
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800e34c0], rax
test rax, rax
je 0x1800264d7
cmp qword [0x1800e34d0], 0
jne 0x1800264ad
mov rcx, qword [0x1800e34b0]
lea rdx, str.WTHelperGetProvCertFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800e34d0], rax
test rax, rax
je 0x1800264d7
cmp qword [0x1800e34c8], 0
jne 0x1800264de
mov rcx, qword [0x1800e34b0]
lea rdx, str.WTHelperGetProvSignerFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800e34c8], rax
test rax, rax
jne 0x1800264de
xor eax, eax
add rsp, 0x28
ret
mov eax, 1
add rsp, 0x28
ret