Function at 0x10012d80
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x100b1bca
mov eax, dword fs:[0]
push eax
sub esp, 0x114
mov eax, dword [0x100e3f88]
xor eax, esp
mov dword [esp + 0x110], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x100e3f88]
xor eax, esp
push eax
lea eax, [esp + 0x128]
mov dword fs:[0], eax
lea eax, [esp + 0x50]
mov esi, ecx
push eax
mov dword [esp + 0x30], esi
call fcn.10013fc0
xor ebx, ebx
mov dword [esp + 0x130], ebx
mov edi, dword [esi + 0x10]
sub edi, dword [esi + 0xc]
push ebx
sar edi, 2
push 0x100c4c78
lea ecx, [esp + 0xf4]
mov dword [esp + 0x38], edi
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x10c], 0xf
mov dword [esp + 0x108], ebx
mov byte [esp + 0xf8], bl
call fcn.10003bb0
xor ebp, ebp
cmp edi, ebx
mov byte [esp + 0x130], 1
mov dword [esp + 0x18], ebp
jle 0x10013150
jmp 0x10012e34
mov esi, dword [esp + 0x2c]
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
sar ecx, 2
cmp ebp, ecx
jb 0x10012e46
call fcn.1008e79d
mov edx, dword [esi + 0xc]
mov esi, dword [edx + ebp*4]
mov dword [esp + 0x14], esi
cmp esi, ebx
je 0x1001313d
mov ecx, dword [esi + 0x18]
mov edi, 0x10
cmp ecx, ebx
jbe 0x10012e7e
cmp dword [esi + 0x1c], edi
jb 0x10012e6e
mov eax, dword [esi + 8]
jmp 0x10012e71
lea eax, [esi + 8]
push ecx
push eax
call sub.NETCA_CRYPTO.dll_NetcaPKICertNewCert
mov ebp, eax
cmp ebp, ebx
jne 0x10012ea7
mov eax, dword [esi + 0x34]
cmp eax, ebx
jbe 0x1001313d
cmp dword [esi + 0x38], edi
jb 0x10012e93
mov esi, dword [esi + 0x24]
jmp 0x10012e96
add esi, 0x24
push eax
push esi
call sub.NETCA_CRYPTO.dll_NetcaPKICertNewCert
mov ebp, eax
cmp ebp, ebx
je 0x1001313d
push ebp
lea esi, [esp + 0x38]
call fcn.100129c0
add esp, 4
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xf8]
mov byte [esp + 0x13c], 2
call fcn.10004010
mov byte [esp + 0x130], 1
cmp dword [esp + 0x4c], edi
jb 0x10012ee7
mov eax, dword [esp + 0x38]
push eax
call fcn.1007de55
add esp, 4
cmp dword [esp + 0x100], ebx
je 0x10012f2b
push 1
lea ecx, [esp + 0xf0]
push ecx
call fcn.10013ec0
push eax
push ebx
lea ecx, [esp + 0xf4]
call fcn.10003d70
push 0xffffffffffffffff
push 1
lea edi, [esp + 0xf4]
call fcn.10013f30
inc eax
push eax
mov ecx, edi
call fcn.10003d70
mov edi, 0x10
push 0xffffffffffffffff
lea edx, [esp + 0xf0]
push ebx
push edx
mov ecx, edx
call fcn.10004010
mov eax, dword [esp + 0xf0]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
cmp dword [esp + 0x104], edi
jae 0x10012f5c
lea eax, [esp + 0xf0]
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x104]
lea edx, [esp + 0x20]
push edx
push ecx
push eax
push 1
call sub.NETCA_CRYPTO.dll_NetcaPKICryptoHexEncode
cmp eax, 1
je 0x10012f86
push ebp
call sub.NETCA_CRYPTO.dll_NetcaPKICertFreeCert
jmp 0x1001313d
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
push edx
push eax
lea ecx, [esp + 0x110]
mov dword [esp + 0x128], 0xf
mov dword [esp + 0x124], ebx
mov byte [esp + 0x114], 0
call fcn.10003bb0
mov byte [esp + 0x130], 3
mov ecx, dword [esp + 0x1c]
push ecx
call sub.NETCA_CRYPTO.dll_NetcaPKICryptoFreeMemory
push ebp
call sub.NETCA_CRYPTO.dll_NetcaPKICertFreeCert
lea edx, [esp + 0x108]
push edx
lea eax, [esp + 0x74]
push eax
lea esi, [esp + 0x58]
call fcn.10013d80
mov esi, dword [eax]
mov edi, dword [eax + 4]
mov ebp, dword [esp + 0x68]
cmp esi, ebx
je 0x10012ff7
cmp esi, dword [esp + 0x50]
je 0x10012ffc
call fcn.1008e79d
cmp edi, ebp
je 0x1001302b
cmp esi, ebx
jne 0x10013027
call fcn.1008e79d
xor esi, esi
cmp edi, dword [esi + 0x18]
jne 0x10013015
call fcn.1008e79d
lea ecx, [esp + 0x14]
add edi, 0x28
push ecx
call fcn.10009930
jmp 0x1001311b
mov esi, dword [esi]
jmp 0x1001300b
lea edx, [esp + 0x34]
push edx
call fcn.1003cdd0
lea eax, [esp + 0x14]
push eax
lea edi, [esp + 0x38]
mov byte [esp + 0x134], 4
call fcn.10009930
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
mov edx, edi
push edx
push ecx
call fcn.1000a3d0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x164], 5
mov dword [esp + 0x58], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x144]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], 0
call fcn.10004010
lea esi, [esp + 0xec]
mov byte [esp + 0x164], 4
call fcn.10014a90
add esp, 0x34
lea ecx, [esp + 0x84]
push ecx
mov ecx, eax
mov byte [esp + 0x134], 6
call fcn.10014970
lea edx, [esp + 0x84]
push edx
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x58]
push ecx
mov byte [esp + 0x13c], 7
call fcn.10013c00
lea esi, [esp + 0x84]
call fcn.10013330
lea esi, [esp + 0xb8]
call fcn.10013330
mov eax, dword [esp + 0x40]
cmp eax, ebx
je 0x10013102
push eax
call fcn.1007de55
add esp, 4
mov edx, dword [esp + 0x34]
push edx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
call fcn.1007de55
add esp, 4
mov byte [esp + 0x130], 1
cmp dword [esp + 0x120], 0x10
jb 0x1001313d
mov eax, dword [esp + 0x10c]
push eax
call fcn.1007de55
add esp, 4
mov ebp, dword [esp + 0x18]
inc ebp
cmp ebp, dword [esp + 0x30]
mov dword [esp + 0x18], ebp
jl 0x10012e30
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx]
mov esi, dword [esp + 0x50]
mov ebp, eax
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], ebp
mov edi, dword [esp + 0x68]
cmp esi, ebx
je 0x10013172
cmp esi, dword [esp + 0x50]
je 0x10013177
call fcn.1008e79d
cmp ebp, edi
je 0x10013296
cmp esi, ebx
jne 0x100131bc
call fcn.1008e79d
xor esi, esi
cmp ebp, dword [esi + 0x18]
jne 0x10013194
call fcn.1008e79d
mov edi, dword [ebp + 0x38]
sub edi, dword [ebp + 0x34]
sar edi, 2
cmp edi, 1
mov dword [esp + 0x14], edi
jle 0x10013280
xor esi, esi
xor ebp, ebp
mov dword [esp + 0x18], esi
test edi, edi
jle 0x1001327e
jmp 0x100131c4
mov esi, dword [esi]
jmp 0x1001318a
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
mov edx, dword [eax + 0x38]
sub edx, dword [eax + 0x34]
sar edx, 2
cmp esi, edx
jb 0x100131de
call fcn.1008e79d
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 0x34]
mov esi, dword [eax + esi*4]
mov eax, dword [esi + 0x18]
test eax, eax
jbe 0x1001320a
cmp dword [esi + 0x1c], 0x10
jb 0x100131f6
mov ecx, dword [esi + 8]
jmp 0x100131f9
lea ecx, [esi + 8]
push eax
push ecx
call sub.NETCA_CRYPTO.dll_NetcaPKICertNewCert
mov edi, eax
test edi, edi
jne 0x1001322c
mov edi, dword [esp + 0x14]
mov ecx, dword [esi + 0x34]
test ecx, ecx
jbe 0x1001326d
cmp dword [esi + 0x38], 0x10
jb 0x1001321c
mov eax, dword [esi + 0x24]
jmp 0x1001321f
lea eax, [esi + 0x24]
push ecx
push eax
call sub.NETCA_CRYPTO.dll_NetcaPKICertNewCert
mov edi, eax
test edi, edi
je 0x10013269
test ebp, ebp
jne 0x1001323c
push edi
call sub.NETCA_CRYPTO.dll_NetcaPKICertDupCert
mov ebx, eax
mov ebp, esi
jmp 0x10013263
mov ecx, ebx
mov eax, edi
call fcn.10012cc0
test al, al
je 0x1001325f
mov byte [ebp + 0x60], 1
push ebx
mov ebp, esi
call sub.NETCA_CRYPTO.dll_NetcaPKICertFreeCert
push edi
call sub.NETCA_CRYPTO.dll_NetcaPKICertDupCert
mov ebx, eax
jmp 0x10013263
mov byte [esi + 0x60], 1
push edi
call sub.NETCA_CRYPTO.dll_NetcaPKICertFreeCert
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
inc eax
cmp eax, edi
mov dword [esp + 0x18], eax
jl 0x100131c0
xor ebx, ebx
lea esi, [esp + 0x24]
call fcn.10014520
mov esi, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
jmp 0x10013164
cmp dword [esp + 0x104], 0x10
jb 0x100132b0
mov ecx, dword [esp + 0xf0]
push ecx
call fcn.1007de55
add esp, 4
mov dword [esp + 0x104], 0xf
mov dword [esp + 0x100], ebx
mov byte [esp + 0xf0], 0
lea esi, [esp + 0x50]
mov dword [esp + 0x130], 8
call fcn.10014230
mov edx, dword [esp + 0x50]
push edx
call fcn.1007de55
add esp, 4
mov ecx, dword [esp + 0x128]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x110]
xor ecx, esp
call fcn.1008e4a2
add esp, 0x120
ret