Function at 0x140004b83
Capabilities:
Link many functions at runtime

Disassembly:
jmp 0x140026620
sub rsp, 0x28
mov rax, qword [0x140189320]
test rax, rax
jne 0x14002664e
xor edx, edx
lea rcx, str.crypt32.dll
call fcn.1400223e0
mov qword [0x140189320], rax
test rax, rax
je 0x1400268d7
cmp qword [0x140189400], 0
jne 0x14002667d
xor edx, edx
lea rcx, str.wintrust.dll
call fcn.1400223e0
mov qword [0x140189400], rax
test rax, rax
je 0x1400268d7
mov rax, qword [0x140189320]
cmp qword [0x140189358], 0
jne 0x1400266ae
lea rdx, str.CertGetNameStringA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140189358], rax
test rax, rax
je 0x1400268d7
mov rax, qword [0x140189320]
cmp qword [0x140189360], 0
jne 0x1400266df
lea rdx, str.CryptDecodeObjectEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140189360], rax
test rax, rax
je 0x1400268d7
mov rax, qword [0x140189320]
cmp qword [0x140189338], 0
jne 0x140026710
lea rdx, str.CertFreeCertificateContext
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140189338], rax
test rax, rax
je 0x1400268d7
mov rax, qword [0x140189320]
cmp qword [0x140189340], 0
jne 0x140026741
lea rdx, str.CertFindCertificateInStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140189340], rax
test rax, rax
je 0x1400268d7
mov rax, qword [0x140189320]
cmp qword [0x140189368], 0
jne 0x140026772
lea rdx, str.CertGetIssuerCertificateFromStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140189368], rax
test rax, rax
je 0x1400268d7
mov rax, qword [0x140189320]
cmp qword [0x140189348], 0
jne 0x1400267a3
lea rdx, str.CryptMsgGetParam
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140189348], rax
test rax, rax
je 0x1400268d7
mov rax, qword [0x140189320]
cmp qword [0x140189350], 0
jne 0x1400267d4
lea rdx, str.CryptQueryObject
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140189350], rax
test rax, rax
je 0x1400268d7
mov rax, qword [0x140189320]
cmp qword [0x140189328], 0
jne 0x140026805
lea rdx, str.CryptMsgClose
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140189328], rax
test rax, rax
je 0x1400268d7
mov rax, qword [0x140189320]
cmp qword [0x140189330], 0
jne 0x14002682f
lea rdx, str.CertCloseStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140189330], rax
test rax, rax
je 0x1400268d7
cmp qword [0x140189408], 0
jne 0x140026859
mov rcx, qword [0x140189400]
lea rdx, str.WinVerifyTrust
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140189408], rax
test rax, rax
je 0x1400268d7
cmp qword [0x140189410], 0
jne 0x140026883
mov rcx, qword [0x140189400]
lea rdx, str.WTHelperProvDataFromStateData
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140189410], rax
test rax, rax
je 0x1400268d7
cmp qword [0x140189420], 0
jne 0x1400268ad
mov rcx, qword [0x140189400]
lea rdx, str.WTHelperGetProvCertFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140189420], rax
test rax, rax
je 0x1400268d7
cmp qword [0x140189418], 0
jne 0x1400268de
mov rcx, qword [0x140189400]
lea rdx, str.WTHelperGetProvSignerFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140189418], rax
test rax, rax
jne 0x1400268de
xor eax, eax
add rsp, 0x28
ret
mov eax, 1
add rsp, 0x28
ret