Function at 0x7921cc80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x57c
test byte [0x7922a3f8], 8
jne 0x7921e7d2
xor eax, eax
mov dword [esp + 0x10], str.WVTAsn1SpcPeImageDataEncode
mov word [ebp - 0x540], ax
lea eax, [ebp - 0x558]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7922c28b
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x558], 0x490057
mov dword [ebp - 0x554], 0x54004e
mov dword [ebp - 0x550], 0x550052
mov dword [ebp - 0x54c], 0x540053
mov dword [ebp - 0x548], 0x44002e
mov dword [ebp - 0x544], 0x4c004c
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
xor eax, eax
mov dword [esp + 0x10], str.WVTAsn1SpcPeImageDataDecode
mov word [ebp - 0x526], ax
lea eax, [ebp - 0x53e]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7922c28b
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x53e], 0x490057
mov dword [ebp - 0x53a], 0x54004e
mov dword [ebp - 0x536], 0x550052
mov dword [ebp - 0x532], 0x540053
mov dword [ebp - 0x52e], 0x44002e
mov dword [ebp - 0x52a], 0x4c004c
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x524]
mov dword [esp + 0x10], str.WVTAsn1SpcPeImageDataEncode
xor edi, edi
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d4
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x524], 0x490057
mov dword [ebp - 0x520], 0x54004e
mov dword [ebp - 0x51c], 0x550052
mov dword [ebp - 0x518], 0x540053
mov dword [ebp - 0x514], 0x44002e
mov dword [ebp - 0x510], 0x4c004c
mov word [ebp - 0x50c], di
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x50a]
mov dword [esp + 0x10], str.WVTAsn1SpcPeImageDataDecode
xor esi, esi
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d4
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x50a], 0x490057
mov dword [ebp - 0x506], 0x54004e
mov dword [ebp - 0x502], 0x550052
mov dword [ebp - 0x4fe], 0x540053
mov dword [ebp - 0x4fa], 0x44002e
mov dword [ebp - 0x4f6], 0x4c004c
mov word [ebp - 0x4f2], si
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x4f0]
mov dword [esp + 0x10], str.WVTAsn1SpcLinkEncode
xor ebx, ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.25
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x4f0], 0x490057
mov dword [ebp - 0x4ec], 0x54004e
mov dword [ebp - 0x4e8], 0x550052
mov dword [ebp - 0x4e4], 0x540053
mov dword [ebp - 0x4e0], 0x44002e
mov dword [ebp - 0x4dc], 0x4c004c
mov word [ebp - 0x4d8], bx
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x4d6]
mov dword [esp + 0x10], str.WVTAsn1SpcLinkDecode
xor ecx, ecx
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.25
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x4d6], 0x490057
mov dword [ebp - 0x4d2], 0x54004e
mov dword [ebp - 0x4ce], 0x550052
mov dword [ebp - 0x4ca], 0x540053
mov dword [ebp - 0x4c6], 0x44002e
mov dword [ebp - 0x4c2], 0x4c004c
mov word [ebp - 0x4be], cx
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x4bc]
mov dword [esp + 0x10], str.WVTAsn1SpcLinkEncode
xor edx, edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d8
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x4bc], 0x490057
mov dword [ebp - 0x4b8], 0x54004e
mov dword [ebp - 0x4b4], 0x550052
mov dword [ebp - 0x4b0], 0x540053
mov dword [ebp - 0x4ac], 0x44002e
mov dword [ebp - 0x4a8], 0x4c004c
mov word [ebp - 0x4a4], dx
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
xor eax, eax
mov dword [esp + 0x10], str.WVTAsn1SpcLinkDecode
mov word [ebp - 0x48a], ax
lea eax, [ebp - 0x4a2]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d8
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x4a2], 0x490057
mov dword [ebp - 0x49e], 0x54004e
mov dword [ebp - 0x49a], 0x550052
mov dword [ebp - 0x496], 0x540053
mov dword [ebp - 0x492], 0x44002e
mov dword [ebp - 0x48e], 0x4c004c
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
xor eax, eax
mov dword [esp + 0x10], str.WVTAsn1SpcLinkEncode
mov word [ebp - 0x470], ax
lea eax, [ebp - 0x488]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.20
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x488], 0x490057
mov dword [ebp - 0x484], 0x54004e
mov dword [ebp - 0x480], 0x550052
mov dword [ebp - 0x47c], 0x540053
mov dword [ebp - 0x478], 0x44002e
mov dword [ebp - 0x474], 0x4c004c
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
xor eax, eax
mov dword [esp + 0x10], str.WVTAsn1SpcLinkDecode
mov word [ebp - 0x456], ax
lea eax, [ebp - 0x46e]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.20
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x46e], 0x490057
mov dword [ebp - 0x46a], 0x54004e
mov dword [ebp - 0x466], 0x550052
mov dword [ebp - 0x462], 0x540053
mov dword [ebp - 0x45e], 0x44002e
mov dword [ebp - 0x45a], 0x4c004c
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
xor eax, eax
mov dword [esp + 0x10], str.WVTAsn1SpcLinkEncode
mov word [ebp - 0x43c], ax
lea eax, [ebp - 0x454]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d9
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x454], 0x490057
mov dword [ebp - 0x450], 0x54004e
mov dword [ebp - 0x44c], 0x550052
mov dword [ebp - 0x448], 0x540053
mov dword [ebp - 0x444], 0x44002e
mov dword [ebp - 0x440], 0x4c004c
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
xor eax, eax
mov dword [esp + 0x10], str.WVTAsn1SpcLinkDecode
mov word [ebp - 0x422], ax
lea eax, [ebp - 0x43a]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d9
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x43a], 0x490057
mov dword [ebp - 0x436], 0x54004e
mov dword [ebp - 0x432], 0x550052
mov dword [ebp - 0x42e], 0x540053
mov dword [ebp - 0x42a], 0x44002e
mov dword [ebp - 0x426], 0x4c004c
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
xor eax, eax
mov dword [esp + 0x10], str.WVTAsn1SpcLinkEncode
mov word [ebp - 0x408], ax
lea eax, [ebp - 0x420]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.28
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x420], 0x490057
mov dword [ebp - 0x41c], 0x54004e
mov dword [ebp - 0x418], 0x550052
mov dword [ebp - 0x414], 0x540053
mov dword [ebp - 0x410], 0x44002e
mov dword [ebp - 0x40c], 0x4c004c
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x406]
mov dword [esp + 0x10], str.WVTAsn1SpcLinkDecode
xor edi, edi
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.28
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x406], 0x490057
mov dword [ebp - 0x402], 0x54004e
mov dword [ebp - 0x3fe], 0x550052
mov dword [ebp - 0x3fa], 0x540053
mov dword [ebp - 0x3f6], 0x44002e
mov dword [ebp - 0x3f2], 0x4c004c
mov word [ebp - 0x3ee], di
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x3ec]
mov dword [esp + 0x10], str.WVTAsn1SpcLinkEncode
xor esi, esi
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d5
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x3ec], 0x490057
mov dword [ebp - 0x3e8], 0x54004e
mov dword [ebp - 0x3e4], 0x550052
mov dword [ebp - 0x3e0], 0x540053
mov dword [ebp - 0x3dc], 0x44002e
mov dword [ebp - 0x3d8], 0x4c004c
mov word [ebp - 0x3d4], si
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x3d2]
mov dword [esp + 0x10], str.WVTAsn1SpcLinkDecode
xor ebx, ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d5
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x3d2], 0x490057
mov dword [ebp - 0x3ce], 0x54004e
mov dword [ebp - 0x3ca], 0x550052
mov dword [ebp - 0x3c6], 0x540053
mov dword [ebp - 0x3c2], 0x44002e
mov dword [ebp - 0x3be], 0x4c004c
mov word [ebp - 0x3ba], bx
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x3b8]
mov dword [esp + 0x10], 0x7922c77c
xor ecx, ecx
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.30
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x3b8], 0x490057
mov dword [ebp - 0x3b4], 0x54004e
mov dword [ebp - 0x3b0], 0x550052
mov dword [ebp - 0x3ac], 0x540053
mov dword [ebp - 0x3a8], 0x44002e
mov dword [ebp - 0x3a4], 0x4c004c
mov word [ebp - 0x3a0], cx
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x39e]
mov dword [esp + 0x10], 0x7922c764
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.30
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x39e], 0x490057
mov dword [ebp - 0x39a], 0x54004e
mov dword [ebp - 0x396], 0x550052
mov dword [ebp - 0x392], 0x540053
mov dword [ebp - 0x38e], 0x44002e
mov dword [ebp - 0x38a], 0x4c004c
mov word [ebp - 0x386], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x384]
mov dword [esp + 0x10], 0x7922c77c
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x852
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x384], 0x490057
mov dword [ebp - 0x380], 0x54004e
mov dword [ebp - 0x37c], 0x550052
mov dword [ebp - 0x378], 0x540053
mov dword [ebp - 0x374], 0x44002e
mov dword [ebp - 0x370], 0x4c004c
mov word [ebp - 0x36c], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x36a]
mov dword [esp + 0x10], 0x7922c764
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x852
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x36a], 0x490057
mov dword [ebp - 0x366], 0x54004e
mov dword [ebp - 0x362], 0x550052
mov dword [ebp - 0x35e], 0x540053
mov dword [ebp - 0x35a], 0x44002e
mov dword [ebp - 0x356], 0x4c004c
mov word [ebp - 0x352], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x350]
mov dword [esp + 0x10], str.WVTAsn1SpcIndirectDataContentEncode
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.4
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x350], 0x490057
mov dword [ebp - 0x34c], 0x54004e
mov dword [ebp - 0x348], 0x550052
mov dword [ebp - 0x344], 0x540053
mov dword [ebp - 0x340], 0x44002e
mov dword [ebp - 0x33c], 0x4c004c
mov word [ebp - 0x338], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x336]
mov dword [esp + 0x10], str.WVTAsn1SpcIndirectDataContentDecode
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.4
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x336], 0x490057
mov dword [ebp - 0x332], 0x54004e
mov dword [ebp - 0x32e], 0x550052
mov dword [ebp - 0x32a], 0x540053
mov dword [ebp - 0x326], 0x44002e
mov dword [ebp - 0x322], 0x4c004c
mov word [ebp - 0x31e], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x31c]
mov dword [esp + 0x10], str.WVTAsn1SpcIndirectDataContentEncode
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d3
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x31c], 0x490057
mov dword [ebp - 0x318], 0x54004e
mov dword [ebp - 0x314], 0x550052
mov dword [ebp - 0x310], 0x540053
mov dword [ebp - 0x30c], 0x44002e
mov dword [ebp - 0x308], 0x4c004c
mov word [ebp - 0x304], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x302]
mov dword [esp + 0x10], str.WVTAsn1SpcIndirectDataContentDecode
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d3
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x302], 0x490057
mov dword [ebp - 0x2fe], 0x54004e
mov dword [ebp - 0x2fa], 0x550052
mov dword [ebp - 0x2f6], 0x540053
mov dword [ebp - 0x2f2], 0x44002e
mov dword [ebp - 0x2ee], 0x4c004c
mov word [ebp - 0x2ea], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x2e8]
mov dword [esp + 0x10], 0x7922c6c4
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.10
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x2e8], 0x490057
mov dword [ebp - 0x2e4], 0x54004e
mov dword [ebp - 0x2e0], 0x550052
mov dword [ebp - 0x2dc], 0x540053
mov dword [ebp - 0x2d8], 0x44002e
mov dword [ebp - 0x2d4], 0x4c004c
mov word [ebp - 0x2d0], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x2ce]
mov dword [esp + 0x10], 0x7922c6a4
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.10
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x2ce], 0x490057
mov dword [ebp - 0x2ca], 0x54004e
mov dword [ebp - 0x2c6], 0x550052
mov dword [ebp - 0x2c2], 0x540053
mov dword [ebp - 0x2be], 0x44002e
mov dword [ebp - 0x2ba], 0x4c004c
mov word [ebp - 0x2b6], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x2b4]
mov dword [esp + 0x10], 0x7922c6c4
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d0
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x2b4], 0x490057
mov dword [ebp - 0x2b0], 0x54004e
mov dword [ebp - 0x2ac], 0x550052
mov dword [ebp - 0x2a8], 0x540053
mov dword [ebp - 0x2a4], 0x44002e
mov dword [ebp - 0x2a0], 0x4c004c
mov word [ebp - 0x29c], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x29a]
mov dword [esp + 0x10], 0x7922c6a4
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d0
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x29a], 0x490057
mov dword [ebp - 0x296], 0x54004e
mov dword [ebp - 0x292], 0x550052
mov dword [ebp - 0x28e], 0x540053
mov dword [ebp - 0x28a], 0x44002e
mov dword [ebp - 0x286], 0x4c004c
mov word [ebp - 0x282], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x280]
mov dword [esp + 0x10], 0x7922c680
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.26
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x280], 0x490057
mov dword [ebp - 0x27c], 0x54004e
mov dword [ebp - 0x278], 0x550052
mov dword [ebp - 0x274], 0x540053
mov dword [ebp - 0x270], 0x44002e
mov dword [ebp - 0x26c], 0x4c004c
mov word [ebp - 0x268], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x266]
mov dword [esp + 0x10], 0x7922c640
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.26
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x266], 0x490057
mov dword [ebp - 0x262], 0x54004e
mov dword [ebp - 0x25e], 0x550052
mov dword [ebp - 0x25a], 0x540053
mov dword [ebp - 0x256], 0x44002e
mov dword [ebp - 0x252], 0x4c004c
mov word [ebp - 0x24e], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x24c]
mov dword [esp + 0x10], 0x7922c680
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d1
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x24c], 0x490057
mov dword [ebp - 0x248], 0x54004e
mov dword [ebp - 0x244], 0x550052
mov dword [ebp - 0x240], 0x540053
mov dword [ebp - 0x23c], 0x44002e
mov dword [ebp - 0x238], 0x4c004c
mov word [ebp - 0x234], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x232]
mov dword [esp + 0x10], 0x7922c640
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d1
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x232], 0x490057
mov dword [ebp - 0x22e], 0x54004e
mov dword [ebp - 0x22a], 0x550052
mov dword [ebp - 0x226], 0x540053
mov dword [ebp - 0x222], 0x44002e
mov dword [ebp - 0x21e], 0x4c004c
mov word [ebp - 0x21a], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x218]
mov dword [esp + 0x10], str.WVTAsn1SpcFinancialCriteriaInfoEncode
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.27
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x218], 0x490057
mov dword [ebp - 0x214], 0x54004e
mov dword [ebp - 0x210], 0x550052
mov dword [ebp - 0x20c], 0x540053
mov dword [ebp - 0x208], 0x44002e
mov dword [ebp - 0x204], 0x4c004c
mov word [ebp - 0x200], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x1fe]
mov dword [esp + 0x10], str.WVTAsn1SpcFinancialCriteriaInfoDecode
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.27
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x1fe], 0x490057
mov dword [ebp - 0x1fa], 0x54004e
mov dword [ebp - 0x1f6], 0x550052
mov dword [ebp - 0x1f2], 0x540053
mov dword [ebp - 0x1ee], 0x44002e
mov dword [ebp - 0x1ea], 0x4c004c
mov word [ebp - 0x1e6], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x1e4]
mov dword [esp + 0x10], str.WVTAsn1SpcFinancialCriteriaInfoEncode
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d2
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x1e4], 0x490057
mov dword [ebp - 0x1e0], 0x54004e
mov dword [ebp - 0x1dc], 0x550052
mov dword [ebp - 0x1d8], 0x540053
mov dword [ebp - 0x1d4], 0x44002e
mov dword [ebp - 0x1d0], 0x4c004c
mov word [ebp - 0x1cc], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x1ca]
mov dword [esp + 0x10], str.WVTAsn1SpcFinancialCriteriaInfoDecode
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d2
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x1ca], 0x490057
mov dword [ebp - 0x1c6], 0x54004e
mov dword [ebp - 0x1c2], 0x550052
mov dword [ebp - 0x1be], 0x540053
mov dword [ebp - 0x1ba], 0x44002e
mov dword [ebp - 0x1b6], 0x4c004c
mov word [ebp - 0x1b2], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x1b0]
mov dword [esp + 0x10], 0x7922c598
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.11
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x1b0], 0x490057
mov dword [ebp - 0x1ac], 0x54004e
mov dword [ebp - 0x1a8], 0x550052
mov dword [ebp - 0x1a4], 0x540053
mov dword [ebp - 0x1a0], 0x44002e
mov dword [ebp - 0x19c], 0x4c004c
mov word [ebp - 0x198], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x196]
mov dword [esp + 0x10], 0x7922c578
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.11
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x196], 0x490057
mov dword [ebp - 0x192], 0x54004e
mov dword [ebp - 0x18e], 0x550052
mov dword [ebp - 0x18a], 0x540053
mov dword [ebp - 0x186], 0x44002e
mov dword [ebp - 0x182], 0x4c004c
mov word [ebp - 0x17e], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x17c]
mov dword [esp + 0x10], 0x7922c598
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d6
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x17c], 0x490057
mov dword [ebp - 0x178], 0x54004e
mov dword [ebp - 0x174], 0x550052
mov dword [ebp - 0x170], 0x540053
mov dword [ebp - 0x16c], 0x44002e
mov dword [ebp - 0x168], 0x4c004c
mov word [ebp - 0x164], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x162]
mov dword [esp + 0x10], 0x7922c578
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d6
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x162], 0x490057
mov dword [ebp - 0x15e], 0x54004e
mov dword [ebp - 0x15a], 0x550052
mov dword [ebp - 0x156], 0x540053
mov dword [ebp - 0x152], 0x44002e
mov dword [ebp - 0x14e], 0x4c004c
mov word [ebp - 0x14a], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x148]
mov dword [esp + 0x10], str.WVTAsn1CatNameValueEncode
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.12.2.1
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x148], 0x490057
mov dword [ebp - 0x144], 0x54004e
mov dword [ebp - 0x140], 0x550052
mov dword [ebp - 0x13c], 0x540053
mov dword [ebp - 0x138], 0x44002e
mov dword [ebp - 0x134], 0x4c004c
mov word [ebp - 0x130], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x12e]
mov dword [esp + 0x10], str.WVTAsn1CatNameValueDecode
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.12.2.1
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x12e], 0x490057
mov dword [ebp - 0x12a], 0x54004e
mov dword [ebp - 0x126], 0x550052
mov dword [ebp - 0x122], 0x540053
mov dword [ebp - 0x11e], 0x44002e
mov dword [ebp - 0x11a], 0x4c004c
mov word [ebp - 0x116], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x114]
mov dword [esp + 0x10], str.WVTAsn1CatNameValueEncode
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x8ad
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x114], 0x490057
mov dword [ebp - 0x110], 0x54004e
mov dword [ebp - 0x10c], 0x550052
mov dword [ebp - 0x108], 0x540053
mov dword [ebp - 0x104], 0x44002e
mov dword [ebp - 0x100], 0x4c004c
mov word [ebp - 0xfc], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0xfa]
mov dword [esp + 0x10], str.WVTAsn1CatNameValueDecode
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x8ad
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0xfa], 0x490057
mov dword [ebp - 0xf6], 0x54004e
mov dword [ebp - 0xf2], 0x550052
mov dword [ebp - 0xee], 0x540053
mov dword [ebp - 0xea], 0x44002e
mov dword [ebp - 0xe6], 0x4c004c
mov word [ebp - 0xe2], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0xe0]
mov dword [esp + 0x10], str.WVTAsn1CatMemberInfoEncode
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.12.2.2
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0xe0], 0x490057
mov dword [ebp - 0xdc], 0x54004e
mov dword [ebp - 0xd8], 0x550052
mov dword [ebp - 0xd4], 0x540053
mov dword [ebp - 0xd0], 0x44002e
mov dword [ebp - 0xcc], 0x4c004c
mov word [ebp - 0xc8], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0xc6]
mov dword [esp + 0x10], str.WVTAsn1CatMemberInfoDecode
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.12.2.2
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0xc6], 0x490057
mov dword [ebp - 0xc2], 0x54004e
mov dword [ebp - 0xbe], 0x550052
mov dword [ebp - 0xba], 0x540053
mov dword [ebp - 0xb6], 0x44002e
mov dword [ebp - 0xb2], 0x4c004c
mov word [ebp - 0xae], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0xac]
mov dword [esp + 0x10], str.WVTAsn1CatMemberInfoEncode
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x8ae
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0xac], 0x490057
mov dword [ebp - 0xa8], 0x54004e
mov dword [ebp - 0xa4], 0x550052
mov dword [ebp - 0xa0], 0x540053
mov dword [ebp - 0x9c], 0x44002e
mov dword [ebp - 0x98], 0x4c004c
mov word [ebp - 0x94], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x92]
mov dword [esp + 0x10], str.WVTAsn1CatMemberInfoDecode
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x8ae
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x92], 0x490057
mov dword [ebp - 0x8e], 0x54004e
mov dword [ebp - 0x8a], 0x550052
mov dword [ebp - 0x86], 0x540053
mov dword [ebp - 0x82], 0x44002e
mov dword [ebp - 0x7e], 0x4c004c
mov word [ebp - 0x7a], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x78]
mov dword [esp + 0x10], str.WVTAsn1SpcSpOpusInfoEncode
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.12
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x78], 0x490057
mov dword [ebp - 0x74], 0x54004e
mov dword [ebp - 0x70], 0x550052
mov dword [ebp - 0x6c], 0x540053
mov dword [ebp - 0x68], 0x44002e
mov dword [ebp - 0x64], 0x4c004c
mov word [ebp - 0x60], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x5e]
mov dword [esp + 0x10], str.WVTAsn1SpcSpOpusInfoDecode
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1.3.6.1.4.1.311.2.1.12
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x5e], 0x490057
mov dword [ebp - 0x5a], 0x54004e
mov dword [ebp - 0x56], 0x550052
mov dword [ebp - 0x52], 0x540053
mov dword [ebp - 0x4e], 0x44002e
mov dword [ebp - 0x4a], 0x4c004c
mov word [ebp - 0x46], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x44]
mov dword [esp + 0x10], str.WVTAsn1SpcSpOpusInfoEncode
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d7
mov dword [esp + 4], str.CryptDllEncodeObject
mov dword [esp], 1
mov dword [ebp - 0x44], 0x490057
mov dword [ebp - 0x40], 0x54004e
mov dword [ebp - 0x3c], 0x550052
mov dword [ebp - 0x38], 0x540053
mov dword [ebp - 0x34], 0x44002e
mov dword [ebp - 0x30], 0x4c004c
mov word [ebp - 0x2c], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea eax, [ebp - 0x2a]
mov dword [esp + 0x10], str.WVTAsn1SpcSpOpusInfoDecode
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x7d7
mov dword [esp + 4], str.CryptDllDecodeObject
mov dword [esp], 1
mov dword [ebp - 0x2a], 0x490057
mov dword [ebp - 0x26], 0x54004e
mov dword [ebp - 0x22], 0x550052
mov dword [ebp - 0x1e], 0x540053
mov dword [ebp - 0x1a], 0x44002e
mov dword [ebp - 0x16], 0x4c004c
mov word [ebp - 0x12], 0
call sym._CryptRegisterOIDFunction_20
sub esp, 0x14
test eax, eax
je 0x7921e740
lea esi, [esi]
nop
xor esi, esi
call sym._WINTRUST_InitRegStructs
mov ebx, 1
call sym._WINTRUST_RegisterGenVerifyV2
mov edi, eax
call sym._WINTRUST_RegisterPublishedSoftware
test eax, eax
je 0x7921e5f3
xor ebx, ebx
test edi, edi
sete bl
call sym._WINTRUST_RegisterPublishedSoftwareNoBadUi
test eax, eax
jne 0x7921e601
mov ebx, 1
call sym._WINTRUST_RegisterGenCertVerify
test eax, eax
jne 0x7921e60f
mov ebx, 1
call sym._WINTRUST_RegisterTrustProviderTest
test eax, eax
jne 0x7921e61d
mov ebx, 1
call sym._WINTRUST_RegisterHttpsProv
test eax, eax
jne 0x7921e62b
mov ebx, 1
call sym._WINTRUST_RegisterOfficeSignVerify
test eax, eax
jne 0x7921e639
mov ebx, 1
call sym._WINTRUST_RegisterDriverVerify
test eax, eax
jne 0x7921e647
mov ebx, 1
call sym._WINTRUST_RegisterGenChainVerify
test eax, eax
jne 0x7921e655
mov ebx, 1
call sym._WINTRUST_FreeRegStructs
xor edx, edx
mov eax, 0x7922a3e8
mov edi, 1
call sym._WINTRUST_SIPPAddProvider
mov edx, str.MSCF
mov dword [ebp - 0x564], eax
mov eax, 0x7922a3d8
call sym._WINTRUST_SIPPAddProvider
test eax, eax
jne 0x7921e770
mov edx, str.0x00004550
mov eax, 0x7922a3bc
call sym._WINTRUST_SIPPAddProvider
test eax, eax
jne 0x7921e6a0
mov edi, 1
mov edx, str.0xcafebabe
mov eax, 0x7922a394
call sym._WINTRUST_SIPPAddProvider
test eax, eax
jne 0x7921e6b8
mov edi, 1
mov edx, str.0xcafebabe
mov eax, 0x7922a36c
call sym._WINTRUST_SIPPAddProvider
test eax, eax
jne 0x7921e6d0
mov edi, 1
mov edx, str.0xcafebabe
mov eax, 0x7922a35c
call sym._WINTRUST_SIPPAddProvider
test eax, eax
je 0x7921e760
lea eax, [ebp - 0x55c]
mov dword [esp + 0x10], 0xf0000000
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_CryptAcquireContextW]
sub esp, 0x14
test eax, eax
jne 0x7921e810
test byte [0x7922a3f8], 2
jne 0x7921e790
test esi, esi
jne 0x7921e730
mov esi, ebx
test edi, edi
jne 0x7921e784
lea esp, [ebp - 0xc]
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret
call sym._GetLastError_0
test eax, eax
je 0x7921e5d0
call sym._GetLastError_0
movzx esi, ax
or esi, 0x80070000
jmp 0x7921e5d2
mov edi, 1
jmp 0x7921e6e3
mov edx, dword [ebp - 0x564]
xor eax, eax
test edx, edx
sete al
mov edi, eax
jmp 0x7921e688
lea esp, [ebp - 0xc]
mov esi, edi
pop ebx
mov eax, esi
pop esi
pop edi
pop ebp
ret
call sym._GetLastError_0
mov dword [esp + 0x14], str.Failed_to_acquire_cryptographic_context:__u_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0x43d
mov dword [esp + 0xc], str.DllRegisterServer
mov dword [esp + 8], 0x7922c1f9
mov dword [esp + 4], 0x7922a3f8
mov dword [esp], 1
call sym._ros_dbg_log
jmp 0x7921e726
mov dword [esp + 0x14], 0x7922c289
mov dword [esp + 0x10], 0x3c6
mov dword [esp + 0xc], str.DllRegisterServer
mov dword [esp + 8], 0x7922c1f9
mov dword [esp + 4], 0x7922a3f8
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x7921cc99
mov eax, dword [ebp - 0x55c]
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_CryptReleaseContext]
sub esp, 8
jmp 0x7921e726