Function at 0x4bf3f0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x514558
mov eax, dword fs:[0]
push eax
sub esp, 0xcc
push ebx
push esi
push edi
mov eax, dword [0x572bb0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x58], ebx
push str._csSigName
lea ecx, [ebp - 0x2c]
call fcn.00471bb0
push str.IN_csIssuerName
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0
call fcn.00471bb0
push str.CheckExeSignaure
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.00471bb0
mov byte [ebp - 4], 2
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4bf475
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x38], esi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 3
push eax
lea edx, [ebp - 0x38]
lea ecx, [ebp - 0x18]
call fcn.00472fc0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1c]
push dword [ebp + 0xc]
mov edx, eax
call fcn.00472fc0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
push ecx
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.00472fc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x28]
push dword [ebp + 0x10]
mov edx, eax
call fcn.00472fc0
add esp, 0x10
mov byte [ebp - 4], 7
cmp dword [ebx + 0xc], 0
je 0x4bf4e6
push 0
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebx + 8]
push eax
call fcn.00473100
mov byte [ebp - 4], 6
or edi, 0xffffffff
mov edx, dword [ebp - 0x28]
mov eax, edi
add edx, 0xfffffff0
lea ecx, [edx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x4bf509
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov ecx, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf529
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf549
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf569
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 2
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf586
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov ecx, edi
mov edx, dword [ebp - 0x34]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf5a6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov ecx, edi
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf5c6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf5e9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 8
push ecx
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], 0
push ecx
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x3c], 0
push ecx
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x30], 0
push ecx
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x34], 0
push ecx
xor al, al
push 0
mov byte [ebp - 0x11], al
mov eax, dword [ebp + 8]
push 2
push 0x400
push dword [eax]
push 1
call dword [sym.imp.CRYPT32.dll_CryptQueryObject]
test eax, eax
jne 0x4bf82d
push str.CheckExeSignaure_CryptQueryObject_
lea ecx, [ebp + 0xc]
call fcn.00471bb0
lea ecx, [ebp - 0x1c]
call fcn.00472bb0
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xa
push ecx
mov edx, eax
lea ecx, [ebp - 0x18]
call fcn.00472fc0
add esp, 4
mov dword [ebp + 0x10], eax
mov byte [ebp - 4], 0xb
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov edx, dword [ebp + 0x10]
lea ecx, [ebp + 8]
push eax
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp + 0x14]
push eax
call fcn.00473a30
mov byte [ebp - 4], 0xb
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf6ba
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xa
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf6da
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf6fa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, edi
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf71a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.error_CryptQueryObject
lea ecx, [ebp + 0x10]
call fcn.00471c70
push str.CheckExeSignaure
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xd
call fcn.00471bb0
lea ecx, [ebp - 0x24]
call fcn.00472bb0
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0xf
push ecx
mov edx, eax
lea ecx, [ebp - 0x1c]
call fcn.00472fc0
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x10
call esi
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x18]
push eax
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x11
cmp dword [ebx + 0xc], 0
je 0x4bf787
push 2
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebx + 8]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x10
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf7a7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xf
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf7c7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xe
mov ecx, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf7e7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xd
mov edx, dword [ebp + 0xc]
mov ecx, edi
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf807
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x4bf825
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov bl, byte [ebp - 0x11]
jmp 0x4bfdcb
mov esi, dword [sym.imp.CRYPT32.dll_CryptMsgGetParam]
lea eax, [ebp - 0x50]
push eax
push 0
push 0
push 6
push dword [ebp - 0x3c]
call esi
test eax, eax
jne 0x4bf9f5
push str.CheckExeSignaure_CryptMsgGetParam_size_
lea ecx, [ebp + 0xc]
call fcn.00471bb0
lea ecx, [ebp - 0x1c]
call fcn.00472bb0
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x13
push ecx
mov edx, eax
lea ecx, [ebp - 0x18]
call fcn.00472fc0
add esp, 4
mov dword [ebp + 0x10], eax
mov byte [ebp - 4], 0x14
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov edx, dword [ebp + 0x10]
lea ecx, [ebp + 8]
push eax
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp + 0x14]
push eax
call fcn.00473a30
mov byte [ebp - 4], 0x14
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf8bf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x13
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf8df
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x12
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf8ff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, edi
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf91f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.error_CryptMsgGetParam__size__error
lea ecx, [ebp + 0x10]
call fcn.00471c70
push str.CheckExeSignaure
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x16
call fcn.00471bb0
lea ecx, [ebp - 0x24]
call fcn.00472bb0
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x18
push ecx
mov edx, eax
lea ecx, [ebp - 0x1c]
call fcn.00472fc0
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x19
call esi
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x18]
push eax
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x1a
cmp dword [ebx + 0xc], 0
je 0x4bf98c
push 2
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebx + 8]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x19
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf9ac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x18
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf9cc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x17
mov ecx, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bf9ec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x16
jmp 0x4bf7eb
push dword [ebp - 0x50]
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0x34], eax
test eax, eax
jne 0x4bfbb6
push str.CheckExeSignaure_LocalAlloc_info_
lea ecx, [ebp + 0xc]
call fcn.00471bb0
lea ecx, [ebp - 0x1c]
call fcn.00472bb0
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x1c
push ecx
mov edx, eax
lea ecx, [ebp - 0x18]
call fcn.00472fc0
add esp, 4
mov dword [ebp + 0x10], eax
mov byte [ebp - 4], 0x1d
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov edx, dword [ebp + 0x10]
lea ecx, [ebp + 8]
push eax
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp + 0x14]
push eax
call fcn.00473a30
mov byte [ebp - 4], 0x1d
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfa80
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1c
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfaa0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1b
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfac0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, edi
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfae0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.error_LocalAlloc__info__error
lea ecx, [ebp + 0x10]
call fcn.00471c70
push str.CheckExeSignaure
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x1f
call fcn.00471bb0
lea ecx, [ebp - 0x24]
call fcn.00472bb0
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x21
push ecx
mov edx, eax
lea ecx, [ebp - 0x1c]
call fcn.00472fc0
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x22
call esi
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x18]
push eax
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x23
cmp dword [ebx + 0xc], 0
je 0x4bfb4d
push 2
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebx + 8]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x22
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfb6d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x21
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfb8d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x20
mov ecx, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfbad
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1f
jmp 0x4bf7eb
lea ecx, [ebp - 0x50]
push ecx
push eax
push 0
push 6
push dword [ebp - 0x3c]
call esi
test eax, eax
jne 0x4bfdff
push str.CheckExeSignaure_CryptMsgGetParam_info_
lea ecx, [ebp + 0xc]
call fcn.00471bb0
lea ecx, [ebp - 0x1c]
call fcn.00472bb0
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x25
push ecx
mov edx, eax
lea ecx, [ebp - 0x18]
call fcn.00472fc0
add esp, 4
mov dword [ebp + 0x10], eax
mov byte [ebp - 4], 0x26
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov edx, dword [ebp + 0x10]
lea ecx, [ebp + 8]
push eax
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp + 0x14]
push eax
call fcn.00473a30
mov byte [ebp - 4], 0x26
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfc41
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x25
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfc61
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x24
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfc81
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, edi
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfca1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.error_CryptMsgGetParam__info__error
lea ecx, [ebp + 0x10]
call fcn.00471c70
push str.CheckExeSignaure
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x28
call fcn.00471bb0
lea ecx, [ebp - 0x24]
call fcn.00472bb0
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x2a
push ecx
mov edx, eax
lea ecx, [ebp - 0x1c]
call fcn.00472fc0
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x2b
call esi
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x18]
push eax
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x2c
cmp dword [ebx + 0xc], 0
je 0x4bfd0e
push 2
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebx + 8]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x2b
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfd2e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2a
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfd4e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x29
mov ecx, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfd6e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x28
mov edx, dword [ebp + 0xc]
mov ecx, edi
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfd8e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x4bfdac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov bl, byte [ebp - 0x11]
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x4bfdbd
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x4bfdcb
push eax
call dword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x4bfddb
push 0
push eax
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x4bfde9
push ecx
call dword [sym.imp.CRYPT32.dll_CryptMsgClose]
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [ebp - 0x34]
push 0
mov eax, dword [ecx + 4]
mov dword [ebp - 0xc0], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0xbc], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xd4], eax
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0xd8]
push eax
push 0xb0000
push 0
push 0x10001
push dword [ebp - 0x44]
call dword [sym.imp.CRYPT32.dll_CertFindCertificateInStore]
mov ecx, eax
mov dword [ebp - 0x30], ecx
test ecx, ecx
jne 0x4bfffc
push str.CheckExeSignaure_CertFindCertificateInStore_
lea ecx, [ebp + 0xc]
call fcn.00471bb0
lea ecx, [ebp - 0x1c]
call fcn.00472bb0
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x2e
push ecx
mov edx, eax
lea ecx, [ebp - 0x18]
call fcn.00472fc0
add esp, 4
mov dword [ebp + 0x10], eax
mov byte [ebp - 4], 0x2f
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov edx, dword [ebp + 0x10]
lea ecx, [ebp + 8]
push eax
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp + 0x14]
push eax
call fcn.00473a30
mov byte [ebp - 4], 0x2f
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfec6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2e
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfee6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2d
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bff06
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, edi
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bff26
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.error_CertFindCertificateInStore_error
lea ecx, [ebp + 0x10]
call fcn.00471c70
push str.CheckExeSignaure
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x31
call fcn.00471bb0
lea ecx, [ebp - 0x24]
call fcn.00472bb0
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x33
push ecx
mov edx, eax
lea ecx, [ebp - 0x1c]
call fcn.00472fc0
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x34
call esi
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x18]
push eax
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x35
cmp dword [ebx + 0xc], 0
je 0x4bff93
push 2
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebx + 8]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x34
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bffb3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x33
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bffd3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x32
mov ecx, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bfff3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x31
jmp 0x4bfd72
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x4c0851
push 0
push 0
push 0
push 1
push 4
push ecx
call dword [sym.imp.CRYPT32.dll_CertGetNameStringW]
mov esi, eax
test esi, esi
jne 0x4c01c0
push str.CheckExeSignaure_CertGetNameString_issuerName_size_
lea ecx, [ebp + 0xc]
call fcn.00471bb0
lea ecx, [ebp - 0x18]
call fcn.00472bb0
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x37
push ecx
mov edx, eax
lea ecx, [ebp + 8]
call fcn.00472fc0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x38
lea ecx, [ebp + 0x10]
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp + 0x14]
push eax
call fcn.00473a30
mov byte [ebp - 4], 0x38
mov ecx, edi
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c008f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x37
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c00af
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x36
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c00cf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, edi
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c00ef
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.error_CertGetNameString__issuerName_size__dwData
lea ecx, [ebp + 0x10]
call fcn.00471c70
push str.CheckExeSignaure
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x3a
call fcn.00471bb0
lea ecx, [ebp - 0x1c]
call fcn.00472bb0
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x3c
push ecx
mov edx, eax
lea ecx, [ebp - 0x18]
call fcn.00472fc0
add esp, 4
push 0
mov edx, eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp + 8]
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x3e
cmp dword [ebx + 0xc], 0
je 0x4c0157
push 2
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebx + 8]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x3d
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0177
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x3c
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0197
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x3b
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c01b7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x3a
jmp 0x4bfd72
lea eax, [esi + esi]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp + 8], eax
test eax, eax
jne 0x4c0382
push str.CheckExeSignaure_LocalAlloc_issuerName_
lea ecx, [ebp + 0xc]
call fcn.00471bb0
lea ecx, [ebp - 0x1c]
call fcn.00472bb0
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x40
push ecx
mov edx, eax
lea ecx, [ebp - 0x18]
call fcn.00472fc0
add esp, 4
mov dword [ebp + 0x10], eax
mov byte [ebp - 4], 0x41
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov edx, dword [ebp + 0x10]
lea ecx, [ebp + 8]
push eax
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp + 0x14]
push eax
call fcn.00473a30
mov byte [ebp - 4], 0x41
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c024c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x40
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c026c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x3f
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c028c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, edi
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c02ac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.error_LocalAlloc__issuerName__error
lea ecx, [ebp + 0x10]
call fcn.00471c70
push str.CheckExeSignaure
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x43
call fcn.00471bb0
lea ecx, [ebp - 0x24]
call fcn.00472bb0
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x45
push ecx
mov edx, eax
lea ecx, [ebp - 0x1c]
call fcn.00472fc0
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x46
call esi
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x18]
push eax
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x47
cmp dword [ebx + 0xc], 0
je 0x4c0319
push 2
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebx + 8]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x46
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0339
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x45
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0359
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x44
mov ecx, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0379
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x43
jmp 0x4bfd72
push esi
push eax
push 0
push 1
push 4
push dword [ebp - 0x30]
call dword [sym.imp.CRYPT32.dll_CertGetNameStringW]
test eax, eax
jne 0x4c0534
push str.CheckExeSignaure_CertGetNameString_issuerName_info_
lea ecx, [ebp + 0xc]
call fcn.00471bb0
lea ecx, [ebp - 0x18]
call fcn.00472bb0
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x49
push ecx
mov edx, eax
lea ecx, [ebp + 8]
call fcn.00472fc0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x4a
lea ecx, [ebp + 0x10]
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp + 0x14]
push eax
call fcn.00473a30
mov byte [ebp - 4], 0x4a
mov ecx, edi
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0404
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x49
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0424
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x48
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0444
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, edi
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0464
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.error_CertGetNameString__issuerName_info__dwData
lea ecx, [ebp + 0x10]
call fcn.00471c70
push str.CheckExeSignaure
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x4c
call fcn.00471bb0
lea ecx, [ebp - 0x1c]
call fcn.00472bb0
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x4e
push ecx
mov edx, eax
lea ecx, [ebp - 0x18]
call fcn.00472fc0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x4f
lea ecx, [ebp + 8]
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x50
cmp dword [ebx + 0xc], 0
je 0x4c04cb
push 2
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebx + 8]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x4f
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c04eb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x4e
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c050b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x4d
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c052b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x4c
jmp 0x4bfd72
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, esi
mov eax, dword [eax]
mov edi, edi
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x4c0566
test dx, dx
je 0x4c0562
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x4c0566
add ecx, 4
add eax, 4
test dx, dx
jne 0x4c0540
xor eax, eax
jmp 0x4c056b
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c0847
push 0x54c414
lea ecx, [ebp - 0x2c]
call fcn.00471bb0
push esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x51
call fcn.00471bb0
push str.CheckExeSignaure_issuerName_invalid_
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x52
call fcn.00471bb0
lea ecx, [ebp - 0x20]
call fcn.00472bb0
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x54
push ecx
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.00472fc0
add esp, 4
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x55
push ecx
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.00472fc0
add esp, 4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x56
push ecx
mov edx, eax
lea ecx, [ebp - 0x1c]
call fcn.00472fc0
add esp, 4
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x18]
push dword [ebp + 0xc]
mov edx, eax
call fcn.00472fc0
add esp, 4
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp + 0x14]
push eax
call fcn.00473a30
mov byte [ebp - 4], 0x57
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0626
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x56
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0646
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x55
mov ecx, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0666
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x54
mov ecx, edi
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0686
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x53
mov ecx, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c06a6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x52
mov ecx, edi
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c06c6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x51
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c06e6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0706
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
lea ecx, [ebp + 8]
call fcn.00471bb0
push str.invalid_issuer_name_szName
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x59
call fcn.00471c70
push str.CheckExeSignaure
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x5a
call fcn.00471bb0
lea ecx, [ebp - 0x1c]
call fcn.00472bb0
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x5c
push ecx
mov edx, eax
lea ecx, [ebp - 0x18]
call fcn.00472fc0
add esp, 4
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x5d
push ecx
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.00472fc0
add esp, 4
mov byte [ebp - 4], 0x5e
cmp dword [ebx + 0xc], 0
je 0x4c077d
push 1
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebx + 8]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x5d
mov ecx, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c079d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x5c
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c07bd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x5b
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c07dd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x5a
mov ecx, edi
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c07fd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x59
mov ecx, edi
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c081d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x4c083b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x4bfdac
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ecx, dword [ebp - 0x30]
push 0
push 0
push 0
push 0
push 4
push ecx
call dword [sym.imp.CRYPT32.dll_CertGetNameStringW]
mov esi, eax
test esi, esi
jne 0x4c0a06
push str.CheckExeSignaure_CertGetNameString_singName_size_
lea ecx, [ebp + 0xc]
call fcn.00471bb0
lea ecx, [ebp - 0x20]
call fcn.00472bb0
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x60
push ecx
mov edx, eax
lea ecx, [ebp + 8]
call fcn.00472fc0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x61
lea ecx, [ebp + 0x10]
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp + 0x14]
push eax
call fcn.00473a30
mov byte [ebp - 4], 0x61
mov ecx, edi
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c08d5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x60
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c08f5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x5f
mov ecx, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0915
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, edi
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0935
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.error_CertGetNameString__singName_size__dwData
lea ecx, [ebp + 0x10]
call fcn.00471c70
push str.CheckExeSignaure
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x63
call fcn.00471bb0
lea ecx, [ebp - 0x18]
call fcn.00472bb0
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x65
push ecx
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.00472fc0
add esp, 4
push 0
mov edx, eax
mov byte [ebp - 4], 0x66
lea ecx, [ebp + 8]
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x67
cmp dword [ebx + 0xc], 0
je 0x4c099d
push 2
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebx + 8]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x66
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c09bd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x65
mov ecx, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c09dd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x64
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c09fd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x63
jmp 0x4bfd72
lea eax, [esi + esi]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp + 8], eax
test eax, eax
jne 0x4c0bc8
push str.CheckExeSignaure_LocalAlloc_singName_
lea ecx, [ebp + 0xc]
call fcn.00471bb0
lea ecx, [ebp - 0x18]
call fcn.00472bb0
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x69
push ecx
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.00472fc0
add esp, 4
mov dword [ebp + 0x10], eax
mov byte [ebp - 4], 0x6a
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov edx, dword [ebp + 0x10]
lea ecx, [ebp + 8]
push eax
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x6b
mov ecx, dword [ebp + 0x14]
push eax
call fcn.00473a30
mov byte [ebp - 4], 0x6a
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0a92
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x69
mov ecx, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0ab2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x68
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0ad2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, edi
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0af2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.error_LocalAlloc__singName__error
lea ecx, [ebp + 0x10]
call fcn.00471c70
push str.CheckExeSignaure
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x6c
call fcn.00471bb0
lea ecx, [ebp - 0x1c]
call fcn.00472bb0
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x6e
push ecx
mov edx, eax
lea ecx, [ebp - 0x18]
call fcn.00472fc0
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x6f
call esi
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x20]
push eax
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x70
cmp dword [ebx + 0xc], 0
je 0x4c0b5f
push 2
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebx + 8]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x6f
mov ecx, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0b7f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x6e
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0b9f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x6d
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0bbf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x6c
jmp 0x4bfd72
push esi
push eax
push 0
push 0
push 4
push dword [ebp - 0x30]
call dword [sym.imp.CRYPT32.dll_CertGetNameStringW]
test eax, eax
jne 0x4c0d7a
push str.CheckExeSignaure_CertGetNameString_singName_info_
lea ecx, [ebp + 0xc]
call fcn.00471bb0
lea ecx, [ebp - 0x20]
call fcn.00472bb0
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x72
push ecx
mov edx, eax
lea ecx, [ebp + 8]
call fcn.00472fc0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x73
lea ecx, [ebp + 0x10]
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x74
mov ecx, dword [ebp + 0x14]
push eax
call fcn.00473a30
mov byte [ebp - 4], 0x73
mov ecx, edi
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0c4a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x72
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0c6a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x71
mov ecx, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0c8a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, edi
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0caa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.error_CertGetNameString__singName_info__dwData
lea ecx, [ebp + 0x10]
call fcn.00471c70
push str.CheckExeSignaure
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x75
call fcn.00471bb0
lea ecx, [ebp - 0x18]
call fcn.00472bb0
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x77
push ecx
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.00472fc0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x78
lea ecx, [ebp + 8]
call fcn.00472f20
add esp, 4
mov byte [ebp - 4], 0x79
cmp dword [ebx + 0xc], 0
je 0x4c0d11
push 2
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebx + 8]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x78
mov ecx, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0d31
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x77
mov ecx, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0d51
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x76
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0d71
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x75
jmp 0x4bfd72
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
mov ecx, esi
mov eax, dword [eax]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x4c0daa
test dx, dx
je 0x4c0da6
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x4c0daa
add ecx, 4
add eax, 4
test dx, dx
jne 0x4c0d84
xor eax, eax
jmp 0x4c0daf
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4c0dc3
push dword [ebp + 8]
mov bl, 1
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x4bfdaf
push 0x54c414
lea ecx, [ebp - 0x28]
call fcn.00471bb0
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x7a
call fcn.00471bb0
push str.CheckExeSignaure_singName_invalid_
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x7b
call fcn.00471bb0
mov byte [ebp - 4], 0x7c
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4c0e0e
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x20], esi
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x7d
push eax
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x4c]
call fcn.00472fc0
add esp, 4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x7e
push ecx
mov edx, eax
lea ecx, [ebp - 0x48]
call fcn.00472fc0
add esp, 4
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x7f
push ecx
mov edx, eax
lea ecx, [ebp - 0x40]
call fcn.00472fc0
add esp, 4
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x24]
push dword [ebp + 0x10]
mov edx, eax
call fcn.00472fc0
add esp, 4
mov byte [ebp - 4], 0x81
mov ecx, dword [ebp + 0x14]
mov edx, dword [eax]
mov ecx, dword [ecx]
lea eax, [edx - 0x10]
sub ecx, 0x10
mov dword [ebp + 0x10], eax
mov dword [ebp - 0x1c], ecx
cmp eax, ecx
je 0x4c0eda
cmp dword [ecx + 0xc], 0
lea eax, [ecx + 0xc]
mov dword [ebp - 0x18], eax
jl 0x4c0ece
mov eax, dword [edx - 0x10]
cmp eax, dword [ecx]
jne 0x4c0ece
mov ecx, dword [ebp + 0x10]
call fcn.00471fb0
mov dword [ebp + 0x10], eax
mov ecx, edi
mov eax, dword [ebp - 0x18]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0ec1
mov edx, dword [ebp - 0x1c]
push edx
mov ecx, dword [edx]
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x10]
add eax, 0x10
mov dword [ecx], eax
jmp 0x4c0eda
push dword [edx - 0xc]
mov ecx, dword [ebp + 0x14]
push edx
call fcn.004725a0
mov byte [ebp - 4], 0x80
mov ecx, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0efa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x7f
mov ecx, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0f1a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x7e
mov ecx, edi
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0f3a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x7d
mov ecx, edi
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0f5a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x7c
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0f77
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x7b
mov ecx, edi
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0f97
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x7a
mov ecx, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0fb7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, edi
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c0fd7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp + 8]
lea ecx, [ebp - 0x28]
call fcn.00471bb0
mov byte [ebp - 4], 0x82
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4c1002
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 0xc], eax
mov eax, str.invalid_sing_name_szName
mov byte [ebp - 4], 0x83
test eax, 0xffff0000
jne 0x4c1039
movzx esi, ax
mov ecx, esi
call fcn.00471400
test eax, eax
je 0x4c1046
push esi
push eax
lea ecx, [ebp + 0xc]
call fcn.004724d0
jmp 0x4c1046
push str.invalid_sing_name_szName
lea ecx, [ebp + 0xc]
call fcn.00471eb0
push str.CheckExeSignaure
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x84
call fcn.00471bb0
mov byte [ebp - 4], 0x85
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4c1077
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x4c], esi
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x86
push eax
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x40]
call fcn.00472fc0
add esp, 4
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x87
push ecx
mov edx, eax
lea ecx, [ebp - 0x48]
call fcn.00472fc0
add esp, 4
mov byte [ebp - 4], 0x88
cmp dword [ebx + 0xc], 0
je 0x4c10c9
push 1
push eax
lea eax, [ebp + 0x10]
push eax
lea eax, [ebx + 8]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x87
mov ecx, edi
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c10e9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x86
mov ecx, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c1109
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x85
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c1126
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x84
mov ecx, edi
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c1146
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x82
mov ecx, edi
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4c1166
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x4c1184
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp + 8]
mov bl, byte [ebp - 0x11]
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x4bfdaf