Function at 0x4cf493
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x110
mov edi, edx
mov edx, dword [edx + 8]
mov dword [esp + 0x10], ecx
xor ecx, ecx
mov dword [esp + 0x20], 0
mov al, byte [edi + 0x28]
mov ebx, dword [edi + 0x24]
mov esi, dword [edi + 0x1c]
mov dword [esp + 0xc], edx
mov byte [esp + 7], al
test al, al
mov eax, edx
mov dword [esp + 0x44], ebx
cmove eax, ecx
test edx, edx
movzx ecx, byte [ebp + 0xc]
cmove eax, edx
mov edx, dword [ebp + 8]
mov dword [esp + 8], ecx
lea ecx, [esp + 0x58]
push ebx
mov dword [esp + 0x4c], esi
push esi
push eax
push dword [esp + 0x14]
call fcn.00480cf7
add esp, 0x10
lea eax, [esp + 0x58]
mov esi, dword [eax + 8]
cmp esi, 2
jne 0x4cf558
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov esi, dword [ebp + 0x10]
mov dword [edx + 8], 2
mov dword [edx + 0x10], ecx
mov dword [edx + 0xc], eax
mov dword [edx + 4], 0
mov dword [edx], 1
push esi
call fcn.004036f0
add esp, 4
add esi, 8
push esi
call fcn.004036f0
add esp, 4
mov ecx, dword [ebp + 8]
lock dec dword [ecx]
jne 0x4cf77e
call fcn.0052de48
jmp 0x4cf77e
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0x64]
cmp dword [edi], 0
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x40], eax
mov dword [esp + 8], edx
mov dword [esp + 0x28], ecx
je 0x4cf594
xor eax, eax
mov ebx, edi
inc eax
mov dword [esp + 0x20], eax
push dword [edi + 4]
call sub.crypt32.dll_CertDuplicateStore
mov dword [esp + 0x34], eax
jmp 0x4cf596
mov ebx, edi
mov eax, dword [esp + 0xc]
test eax, eax
je 0x4cf5cf
mov edi, ebx
mov ebx, dword [ebx + 0x10]
mov ecx, ebx
call fcn.0047299c
lea ecx, [ebx + ebx]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x30], ebx
push ecx
push dword [esp + 0x10]
mov dword [esp + 0x24], eax
push eax
call sub.msvcrt.dll_memcpy
mov ecx, edi
add esp, 0xc
mov edi, dword [esp + 0x10]
jmp 0x4cf5dd
mov edi, dword [esp + 0x10]
mov dword [esp + 0x1c], 0
mov ecx, ebx
mov al, byte [ecx + 0x29]
mov byte [esp + 0xc], al
mov eax, dword [ecx + 0x14]
test eax, eax
je 0x4cf5fd
lock inc dword [eax]
jle 0x4cf786
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x24], ecx
jmp 0x4cf5fd
test esi, esi
mov dword [esp + 0x38], eax
je 0x4cf63d
mov edi, dword [esp + 8]
mov ebx, dword [esp + 0x28]
mov esi, str.failed_to_write_whole_buffer
test edi, edi
mov ecx, edi
cmovne esi, ebx
call fcn.00475195
mov dword [esp + 0x14], edx
push edi
mov edi, dword [esp + 0x14]
push esi
mov dword [esp + 0x20], eax
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
push ebx
call sub.secur32.dll_FreeContextBuffer
jmp 0x4cf654
xor eax, eax
mov dword [esp + 0x14], 0
mov dword [esp + 8], 0
inc eax
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x48]
mov esi, dword [ebp + 0x10]
test edx, edx
je 0x4cf671
lea ecx, [esp + 0x4c]
push dword [esp + 0x44]
call fcn.00464c35
add esp, 4
jmp 0x4cf679
mov dword [esp + 0x4c], 0
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x58]
movsd xmm0, qword [esi]
movsd xmm1, qword [esi + 8]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov dword [edx + 0x8c], eax
mov eax, dword [esp + 0x2c]
mov dword [edx + 0x90], eax
mov eax, dword [esp + 0x30]
mov dword [edx + 0x94], eax
xor eax, eax
xor ecx, ecx
movsd qword [edx + 0x20], xmm0
movsd qword [edx + 0x28], xmm1
movsd xmm0, qword [esp + 0x4c]
inc ecx
mov dword [edx + 0x34], eax
mov dword [edx + 0x30], eax
mov dword [edx + 0x38], ecx
mov dword [edx + 0x3c], eax
mov dword [edx + 0x40], eax
mov dword [edx + 0x4c], eax
mov dword [edx + 0x48], eax
mov dword [edx + 0x50], ecx
mov dword [edx + 0x54], eax
mov dword [edx + 0x58], eax
mov dword [edx + 0x64], eax
mov dword [edx + 0x60], eax
mov dword [edx + 0x68], esi
mov esi, dword [esp + 8]
mov dword [edx + 0x6c], ebx
mov ebx, dword [ebp + 8]
mov dword [edx + 0x70], esi
mov esi, dword [esp + 0x54]
movsd qword [edx + 0xa0], xmm0
mov dword [edx + 0xa8], esi
mov esi, dword [esp + 0x20]
mov dword [edx], esi
mov esi, dword [esp + 0x34]
mov dword [edx + 4], esi
mov esi, dword [esp + 0x40]
mov dword [edx + 8], 0x10000
mov byte [edx + 0xc], 0
mov dword [edx + 0x78], esi
mov esi, dword [esp + 0x3c]
mov dword [edx + 0x7c], esi
mov esi, dword [esp + 0x38]
mov dword [edx + 0x80], esi
mov esi, dword [esp + 0x24]
mov dword [edx + 0x84], esi
mov dword [edx + 0x88], ebx
mov dword [edx + 0x98], ecx
mov dword [edx + 0x9c], eax
mov al, byte [esp + 7]
mov ah, byte [esp + 0xc]
mov cl, byte [ebp + 0xc]
mov byte [edx + 0xac], al
mov byte [edx + 0xad], ah
mov byte [edx + 0xae], cl
mov ecx, edi
mov byte [edx + 0xaf], 1
call fcn.004cf83b
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
ud2