Function at 0x1006810
Capabilities:
Print debug messages
Set current directory

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc54
mov eax, dword [0x1009004]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, 0x38ee
push ebx
mov word [ebp - 0x484], ax
mov eax, 0x11d1
push esi
mov esi, dword [ebp + 8]
mov word [ebp - 0x482], ax
xor ebx, ebx
lea eax, [ebp - 0x68]
push edi
mov dword [ebp - 0x488], 0xf750e6c3
mov byte [ebp - 0x480], 0x85
mov byte [ebp - 0x47f], 0xe5
mov byte [ebp - 0x47e], bl
mov byte [ebp - 0x47d], 0xc0
mov byte [ebp - 0x47c], 0x4f
mov byte [ebp - 0x47b], 0xc2
mov byte [ebp - 0x47a], 0x95
mov byte [ebp - 0x479], 0xee
mov dword [ebp - 0xbf4], 0x64
mov dword [ebp - 0xbfc], eax
mov edi, 0x1009040
cmp esi, dword [0x1009bcc]
jne 0x10068b5
push 0x208
push ebx
push edi
call sub.msvcrt.dll_memset
add esp, 0xc
push dword [esi + 4]
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x10068f1
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
test eax, eax
je 0x10068e2
push dword [esi + 4]
push 0x104
push edi
call fcn.0100170e
test eax, eax
jge 0x10068f1
mov dword [esi + 0x28], 0x10b
mov dword [esi + 0x1c], ebx
jmp 0x1006cf8
push ebx
push 0x80
push 3
push ebx
push 1
push 0x80000000
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x100691b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x28], eax
jmp 0x10068e9
push 0x64
lea eax, [ebp - 0x68]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
push ebx
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0xbf4]
push eax
push edi
call sub.WINTRUST.dll_CryptCATAdminCalcHashFromFileHandle
test eax, eax
jne 0x100695b
push ebx
push edi
call sub.WINTRUST.dll_IsCatalogFile
test eax, eax
je 0x1006a6c
mov dword [ebp - 0xbfc], ebx
mov dword [ebp - 0xbf4], ebx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x30
pop edi
push edi
lea eax, [ebp - 0xc54]
push ebx
push eax
call sub.msvcrt.dll_memset
push 2
pop eax
mov dword [ebp - 0xc54], edi
mov edi, 0x440
push edi
mov dword [ebp - 0xc48], eax
mov dword [ebp - 0xc40], eax
lea eax, [ebp - 0x9dc]
push ebx
push eax
mov dword [ebp - 0xc38], 3
mov dword [ebp - 0xc50], eax
mov dword [ebp - 0xc2c], 0x1080
call sub.msvcrt.dll_memset
add esp, 0x18
mov dword [ebp - 0x9dc], edi
cmp dword [esi + 0x24], ebx
jne 0x1006a02
lea eax, [ebp - 0x59c]
push eax
mov dword [ebp - 0x59c], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x1006a02
mov eax, dword [ebp - 0x598]
mov ecx, dword [ebp - 0x594]
mov dword [ebp - 0x5b4], eax
mov dword [ebp - 0x5b0], ecx
mov dword [ebp - 0x5ac], eax
mov dword [ebp - 0x5a8], ecx
mov edx, dword [ebp - 0xbfc]
lea eax, [ebp - 0xc24]
mov dword [ebp - 0xc3c], eax
xor eax, eax
push 9
pop ecx
lea edi, [ebp - 0xc24]
rep stosd dword es:[edi], eax
mov eax, dword [esi]
mov ecx, dword [ebp - 0xbf4]
mov dword [ebp - 0xc18], eax
mov eax, dword [0x1009bd4]
mov dword [ebp - 0xc24], 0x24
mov dword [ebp - 0xc0c], edx
mov dword [ebp - 0xc08], ecx
mov dword [ebp - 0xbf8], ebx
cmp eax, ebx
je 0x1006a78
lea edi, [ebp - 0xbf8]
push edi
push ebx
push ecx
push edx
push eax
call sub.WINTRUST.dll_CryptCATAdminEnumCatalogFromHash
mov dword [ebp - 0xbf0], eax
jmp 0x1006a7e
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10068e9
mov dword [ebp - 0xbf0], ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0xbec], ebx
jmp 0x1006bdd
cmp dword [ebp - 0xbec], ebx
jne 0x1006be9
push 0x20c
lea eax, [ebp - 0xbe8]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
push ebx
lea eax, [ebp - 0xbe8]
push eax
push dword [ebp - 0xbf0]
mov dword [ebp - 0xbe8], 0x20c
call sub.WINTRUST.dll_CryptCATCatalogInfoFromContext
test eax, eax
je 0x1006bac
lea eax, [ebp - 0xbe4]
mov dword [ebp - 0xc1c], eax
lea eax, [ebp - 0xc54]
push eax
lea eax, [ebp - 0x488]
push eax
push dword [0x10095a0]
call sub.WINTRUST.dll_WinVerifyTrust
test eax, eax
jne 0x1006b8a
lea eax, [ebp - 0xc00]
push eax
lea eax, [ebp - 0x478]
push eax
push 0x104
lea eax, [ebp - 0xbe4]
push eax
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
push dword [ebp - 0xc00]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax + eax + 2]
push eax
push 8
mov dword [ebp - 0xbec], eax
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [esi + 0xc], eax
cmp eax, ebx
je 0x1006b80
push dword [ebp - 0xc00]
push dword [ebp - 0xbec]
push eax
call fcn.010018de
cmp eax, ebx
jge 0x1006b80
cmp eax, 0x8007007a
je 0x1006b80
mov eax, dword [esi + 0xc]
cmp eax, ebx
je 0x1006b7d
push eax
push ebx
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [esi + 0xc], ebx
mov dword [esi + 0xc], ebx
mov dword [ebp - 0xbec], 1
cmp dword [ebp - 0x5b8], ebx
je 0x1006ba4
push dword [ebp - 0x5b8]
call dword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov dword [ebp - 0x5b8], ebx
cmp dword [ebp - 0xbec], ebx
jne 0x1006bdd
mov eax, dword [ebp - 0xbf0]
mov dword [ebp - 0xbf8], eax
lea eax, [ebp - 0xbf8]
push eax
push ebx
push dword [ebp - 0xbf4]
push dword [ebp - 0xbfc]
push dword [0x1009bd4]
call sub.WINTRUST.dll_CryptCATAdminEnumCatalogFromHash
mov dword [ebp - 0xbf0], eax
cmp dword [ebp - 0xbf0], ebx
jne 0x1006a8f
xor eax, eax
inc eax
mov dword [esi + 0x20], eax
cmp dword [ebp - 0xbf0], ebx
jne 0x1006c12
lea eax, [ebp - 0x9dc]
push eax
push dword [esi]
call fcn.01006296
test eax, eax
je 0x1006c27
mov dword [esi + 0x1c], 1
jmp 0x1006c27
push ebx
push dword [ebp - 0xbf0]
mov dword [esi + 0x1c], eax
push dword [0x1009bd4]
call sub.WINTRUST.dll_CryptCATAdminReleaseCatalogContext
cmp dword [esi + 0x1c], ebx
je 0x1006cf2
lea eax, [ebp - 0x9c8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax + eax + 2]
push eax
push 8
mov dword [ebp - 0xbec], eax
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [esi + 8], eax
cmp eax, ebx
je 0x1006c90
lea ecx, [ebp - 0x9c8]
push ecx
push dword [ebp - 0xbec]
push eax
call fcn.010018de
cmp eax, ebx
jge 0x1006c90
cmp eax, 0x8007007a
je 0x1006c90
mov eax, dword [esi + 8]
cmp eax, ebx
je 0x1006c8d
push eax
push ebx
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [esi + 8], ebx
mov dword [esi + 8], ebx
lea eax, [ebp - 0x7c0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax + eax + 2]
push eax
push 8
mov dword [ebp - 0xbec], eax
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [esi + 0x10], eax
cmp eax, ebx
je 0x1006cf8
lea ecx, [ebp - 0x7c0]
push ecx
push dword [ebp - 0xbec]
push eax
call fcn.010018de
cmp eax, ebx
jge 0x1006cf8
cmp eax, 0x8007007a
je 0x1006cf8
mov eax, dword [esi + 0x10]
cmp eax, ebx
je 0x1006ced
push eax
push ebx
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [esi + 0x10], ebx
mov dword [esi + 0x10], ebx
jmp 0x1006cf8
push esi
call fcn.0100652a
cmp dword [esi + 0x1c], ebx
jne 0x1006d2b
push dword [esi + 0x28]
lea eax, [ebp - 0x270]
push dword [esi]
push dword [esi + 4]
push 0x1001508
push 0x104
push eax
call fcn.01003257
add esp, 0x18
lea eax, [ebp - 0x270]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [esi + 0x1c]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01007194
leave
ret 4