Function at 0x68008700
Capabilities:
Access peb ldr_data
Get graphical window text
Get kernel32 base address
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea esi, [ebp - 0x218]
push ebx
mov ebx, eax
sub esp, 0x28c
mov dword [esp + 4], 8
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetWindowLongW]
mov edi, dword [sym.imp.user32.dll_GetDlgItem]
sub esp, 8
mov dword [ebp - 0x26c], eax
mov dword [esp + 4], 0x960
mov dword [esp], ebx
call edi
mov ecx, dword [sym.imp.user32.dll_SendMessageW]
sub esp, 8
mov dword [esp + 0xc], esi
mov dword [ebp - 0x270], ecx
mov dword [esp + 8], 0x100
mov dword [esp + 4], 0xd
mov dword [esp], eax
call ecx
mov eax, dword [ebp - 0x26c]
mov ecx, esi
mov edx, 0xb
sub esp, 0x10
mov eax, dword [eax]
call sym._set_cert_string_property
mov dword [esp + 4], 0x961
mov dword [esp], ebx
call edi
mov ecx, dword [ebp - 0x270]
sub esp, 8
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x100
mov dword [esp + 4], 0xd
mov dword [esp], eax
call ecx
mov eax, dword [ebp - 0x26c]
mov ecx, esi
mov edx, 0xd
sub esp, 0x10
mov eax, dword [eax]
call sym._set_cert_string_property
mov dword [esp], ebx
mov esi, dword [sym.imp.user32.dll_IsDlgButtonChecked]
mov dword [esp + 4], 0x962
call esi
sub esp, 8
test eax, eax
je 0x68008850
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x26c]
mov eax, dword [eax]
mov dword [esp], eax
call dword [sym.imp.crypt32.dll_CertSetEnhancedKeyUsage]
sub esp, 8
mov dword [esp], ebx
mov ebx, dword [sym.imp.user32.dll_GetParent]
call ebx
sub esp, 4
mov dword [esp], eax
call ebx
sub esp, 4
mov dword [esp + 8], 0
mov dword [esp + 4], sym._refresh_propsheet_pages_8
mov dword [esp], eax
call dword [sym.imp.user32.dll_EnumChildWindows]
mov eax, dword [ebp - 0x26c]
sub esp, 0xc
mov eax, dword [eax + 4]
test eax, eax
je 0x68008841
mov dword [eax], 1
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 4], 0x963
mov dword [esp], ebx
call esi
sub esp, 8
test eax, eax
je 0x68008890
mov dword [ebp - 0x254], 0
lea eax, [ebp - 0x254]
mov dword [ebp - 0x250], 0
mov dword [esp + 4], eax
jmp 0x680087e8
mov dword [esp + 4], 0x964
mov dword [esp], ebx
call esi
sub esp, 8
test eax, eax
je 0x680087fc
mov dword [esp + 4], 0x965
mov dword [esp], ebx
call edi
xor edi, edi
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x258], 0
sub esp, 8
mov esi, eax
mov dword [esp], eax
mov eax, dword [ebp - 0x270]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1004
call eax
mov dword [ebp - 0x254], 0xc
mov edx, dword fs:[0x18]
mov dword [ebp - 0x274], eax
sub esp, 0x10
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x244], 0xf000
mov dword [ebp - 0x27c], edx
test eax, eax
jle 0x68008a0e
mov dword [ebp - 0x278], ebx
mov ebx, dword [ebp - 0x270]
jmp 0x6800894d
inc edi
cmp dword [ebp - 0x274], edi
je 0x68008a08
lea eax, [ebp - 0x254]
mov dword [ebp - 0x250], edi
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x104b
mov dword [esp], esi
call ebx
sub esp, 0x10
test eax, eax
je 0x68008940
mov eax, dword [ebp - 0x248]
shr eax, 0xc
cmp eax, 2
jne 0x68008940
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x25c]
test eax, eax
je 0x68008a60
lea eax, [eax*4 + 4]
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x258]
mov edx, dword fs:[0x18]
mov dword [esp + 8], eax
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapReAlloc]
mov dword [ebp - 0x258], eax
sub esp, 0x10
test eax, eax
je 0x68008940
mov edx, dword [ebp - 0x25c]
lea ecx, [edx + 1]
mov dword [ebp - 0x25c], ecx
mov ecx, dword [ebp - 0x270]
mov ecx, dword [ecx + 4]
mov dword [eax + edx*4], ecx
jmp 0x68008940
mov ebx, dword [ebp - 0x278]
lea eax, [ebp - 0x25c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x26c]
mov eax, dword [eax]
mov dword [esp], eax
call dword [sym.imp.crypt32.dll_CertSetEnhancedKeyUsage]
mov edx, dword [ebp - 0x258]
sub esp, 8
mov dword [esp + 8], edx
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
jmp 0x680087fc
mov eax, dword [ebp - 0x27c]
mov dword [esp + 8], 4
mov dword [esp + 4], 0
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [ebp - 0x258], eax
sub esp, 0xc
jmp 0x680089dd