Function at 0x916ba0
Capabilities:
Link many functions at runtime

Disassembly:
sub esp, 0x5e8
mov eax, dword [0xb196ec]
xor eax, esp
mov dword [esp + 0x5e4], eax
mov eax, dword [esp + 0x5ec]
push ebx
push ebp
mov ebp, dword [esp + 0x5f8]
push esi
xor ebx, ebx
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x600]
mov esi, edx
push edi
mov dword [esp + 0x40], esi
mov dword [esp + 0x28], ecx
mov dword [esp + 0x88], eax
mov dword [esp + 0x30], ebx
cmp ebp, ebx
je 0x916bef
mov byte [ebp], bl
cmp eax, ebx
je 0x916bf5
mov byte [eax], bl
cmp dword [0xbf864c], ebx
jne 0x916cf0
mov ecx, str.WINTRUST.DLL
call fcn.0094c620
mov dword [0xbf864c], eax
cmp eax, ebx
je 0x916f3a
cmp eax, 0xffffffff
je 0x916f3a
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.WinVerifyTrust
push eax
call edi
mov dword [0xbf8650], eax
cmp eax, ebx
jne 0x916c5b
cmp ebp, ebx
je 0x916c4a
push str.Unable_to_get_WinVerifyTrust___from_WINTRUST.DLL_
push ebp
call fcn.00a78f30
add esp, 8
cmp esi, ebx
je 0x916c54
mov dword [esi], 0x80004005
xor eax, eax
jmp 0x917927
mov edx, dword [0xbf864c]
push str.CryptCATAdminAcquireContext
push edx
call edi
mov dword [0xbf8654], eax
mov eax, dword [0xbf864c]
push str.CryptCATAdminAcquireContext2
push eax
call edi
mov ecx, dword [0xbf864c]
push str.CryptCATAdminCalcHashFromFileHandle
push ecx
mov dword [0xbf8658], eax
call edi
mov edx, dword [0xbf864c]
push str.CryptCATAdminCalcHashFromFileHandle2
push edx
mov dword [0xbf865c], eax
call edi
mov dword [0xbf8660], eax
mov eax, dword [0xbf864c]
push str.CryptCATAdminEnumCatalogFromHash
push eax
call edi
mov ecx, dword [0xbf864c]
push str.CryptCATAdminReleaseCatalogContext
push ecx
mov dword [0xbf8664], eax
call edi
mov edx, dword [0xbf864c]
push str.CryptCATAdminReleaseContext
push edx
mov dword [0xbf8668], eax
call edi
mov dword [0xbf866c], eax
mov eax, dword [0xbf864c]
push str.CryptCATCatalogInfoFromContext
push eax
call edi
mov dword [0xbf8670], eax
cmp dword [0xbf8650], ebx
je 0x916c38
mov edi, dword [esp + 0x44]
lea ebx, [esp + 0x30]
call fcn.009704b0
mov edi, dword [esp + 0x30]
xor ebx, ebx
cmp edi, ebx
je 0x916c4a
mov esi, 0x38ee
mov dl, 0x95
mov eax, 0xcd44
mov ecx, 0x11d0
mov word [esp + 0xc4], si
mov esi, 0x11d1
push 0x30
mov byte [esp + 0xc2], dl
mov byte [esp + 0xd2], dl
mov word [esp + 0xb8], ax
mov al, 0xc2
mov word [esp + 0xba], cx
mov cl, 0xee
lea edx, [esp + 0x5c]
mov word [esp + 0xca], si
push ebx
xor esi, esi
push edx
mov dword [esp + 0xbc], 0xaac56b
mov byte [esp + 0xc4], 0x8c
mov byte [esp + 0xc5], al
mov byte [esp + 0xc6], bl
mov byte [esp + 0xc7], 0xc0
mov byte [esp + 0xc8], 0x4f
mov byte [esp + 0xc9], al
mov byte [esp + 0xcb], cl
mov dword [esp + 0xcc], 0xf750e6c3
mov byte [esp + 0xd4], 0x85
mov byte [esp + 0xd5], 0xe5
mov byte [esp + 0xd6], bl
mov byte [esp + 0xd7], 0xc0
mov byte [esp + 0xd8], 0x4f
mov byte [esp + 0xd9], al
mov byte [esp + 0xdb], cl
mov dword [esp + 0x48], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0x24], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x40], esi
call fcn.00a7ffb0
add esp, 0xc
push 0x20c
lea eax, [esp + 0xd4]
push ebx
push eax
mov dword [esp + 0x64], 0x30
call fcn.00a7ffb0
xor eax, eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov eax, dword [0xbf8654]
add esp, 0xc
mov dword [esp + 0xd0], 0x20c
mov dword [esp + 0x8c], 0x24
mov dword [esp + 0x48], 0x10
cmp eax, ebx
je 0x917236
cmp dword [0xbf865c], ebx
je 0x917236
cmp dword [0xbf8664], ebx
je 0x917236
cmp dword [0xbf8668], ebx
je 0x917236
cmp dword [0xbf866c], ebx
je 0x917236
cmp dword [0xbf8670], ebx
je 0x917236
mov ecx, dword [0xbf8658]
cmp ecx, ebx
je 0x916f9d
cmp dword [0xbf8660], ebx
je 0x916f9d
push ebx
push ebx
push str.SHA256
lea edx, [esp + 0xcc]
push edx
lea eax, [esp + 0x24]
push eax
call ecx
test eax, eax
jne 0x916fcd
cmp ebp, ebx
je 0x917236
push ebx
push str.CryptCATAdminAcquireContext2_Fails__Error:__u
push ebp
call fcn.00a78f30
add esp, 0xc
jmp 0x917236
push 0x103
lea ecx, [esp + 0x2e5]
push ebx
push ecx
mov byte [esp + 0x2ec], bl
call fcn.00a7ffb0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x104
mov edi, eax
lea esi, [esp + 0x2e4]
call fcn.00960a40
add esp, 4
cmp ebp, ebx
je 0x916f88
mov edx, esi
push edx
push str.Unable_to_load_WINTRUST.DLL___s_.
push ebp
call fcn.00a78f30
add esp, 0xc
mov eax, dword [esp + 0x40]
cmp eax, ebx
je 0x916f96
mov dword [eax], 0x80004005
xor eax, eax
jmp 0x917927
push ebx
lea ecx, [esp + 0xc4]
push ecx
lea edx, [esp + 0x1c]
push edx
call eax
test eax, eax
jne 0x916fcd
cmp ebp, ebx
je 0x917236
push ebx
push str.CryptCATAdminAcquireContext_Fails__Error:__u
push ebp
call fcn.00a78f30
add esp, 0xc
jmp 0x917236
mov eax, dword [esp + 0x28]
call fcn.00964530
mov dword [esp + 0x24], eax
cmp eax, ebx
jne 0x917015
push ebx
push 3
push 1
push 0x80000000
mov ebx, edi
call fcn.0094dc00
mov edi, eax
add esp, 0x10
mov dword [esp + 0x1c], edi
cmp edi, 0xffffffff
jne 0x91703a
mov eax, dword [esp + 0x14]
push 0
push eax
call dword [0xbf866c]
mov dword [esp + 0x14], esi
xor ebx, ebx
jmp 0x917236
mov edi, dword [esp + 0x28]
push 1
push ebx
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push ebx
push ebx
push ebx
push edi
mov esi, eax
mov dword [esp + 0x44], eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [esp + 0x1c], edi
jmp 0x91703c
xor ebx, ebx
mov eax, dword [0xbf8660]
push ebx
push ebx
cmp eax, ebx
je 0x917056
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x20]
push ecx
push edi
push edx
call eax
jmp 0x917062
lea eax, [esp + 0x20]
push eax
push edi
call dword [0xbf865c]
mov eax, dword [esp + 0x18]
cmp eax, ebx
jne 0x9170a2
mov ecx, dword [esp + 0x14]
push ebx
push ecx
call dword [0xbf866c]
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x24], ebx
jne 0x91708f
lea edx, [esp + 0x1c]
push edx
call fcn.00985290
jmp 0x917236
mov eax, dword [esp + 0x28]
push ebx
push ebx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
jmp 0x917236
push 1
push eax
call fcn.00a7b9f8
mov esi, eax
add esp, 8
mov dword [esp + 0x2c], esi
push ebx
cmp esi, ebx
jne 0x9170f3
mov ecx, dword [esp + 0x18]
push ecx
call dword [0xbf866c]
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x24], ebx
jne 0x9170dc
lea edx, [esp + 0x1c]
push edx
call fcn.00985290
jmp 0x917236
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x28]
push ebx
push ebx
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
jmp 0x917236
mov eax, dword [0xbf8660]
push esi
lea edx, [esp + 0x20]
push edx
push edi
cmp eax, ebx
je 0x91710c
mov ecx, dword [esp + 0x24]
push ecx
call eax
jmp 0x917112
call dword [0xbf865c]
cmp eax, ebx
jne 0x91715f
mov eax, dword [esp + 0x14]
push ebx
push eax
call dword [0xbf866c]
push esi
mov dword [esp + 0x18], ebx
call fcn.00a78fec
add esp, 4
mov dword [esp + 0x2c], ebx
cmp dword [esp + 0x24], ebx
jne 0x917148
lea ecx, [esp + 0x1c]
push ecx
call fcn.00985290
jmp 0x917236
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x28]
push ebx
push ebx
push edx
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
jmp 0x917236
cmp dword [esp + 0x24], ebx
jne 0x917171
lea ecx, [esp + 0x1c]
push ecx
call fcn.00985290
jmp 0x917183
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x28]
push ebx
push ebx
push edx
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ecx, dword [esp + 0x18]
lea edx, [ecx + ecx + 1]
push 2
push edx
call fcn.00a7b9f8
add esp, 8
mov dword [esp + 0x38], eax
cmp eax, ebx
jne 0x9171bd
mov eax, dword [esp + 0x14]
push ebx
push eax
call dword [0xbf866c]
push esi
mov dword [esp + 0x18], ebx
call fcn.00a78fec
add esp, 4
mov dword [esp + 0x2c], ebx
jmp 0x917236
mov eax, dword [esp + 0x18]
xor edi, edi
cmp eax, ebx
jbe 0x9171f4
mov esi, dword [esp + 0x38]
jmp 0x9171d0
mov ecx, dword [esp + 0x2c]
movzx edx, byte [edi + ecx]
push edx
push str._02X
mov edx, esi
call fcn.00853e40
mov eax, dword [esp + 0x20]
inc edi
add esp, 8
add esi, 4
cmp edi, eax
jb 0x9171d0
mov ecx, dword [esp + 0x14]
push ebx
push ebx
push eax
mov eax, dword [esp + 0x38]
push eax
push ecx
call dword [0xbf8664]
mov dword [esp + 0x3c], eax
cmp eax, ebx
je 0x917236
push ebx
lea edx, [esp + 0xd4]
push edx
mov esi, eax
push esi
call dword [0xbf8670]
test eax, eax
jne 0x917277
mov eax, dword [esp + 0x14]
push ebx
push esi
push eax
call dword [0xbf8668]
mov dword [esp + 0x3c], ebx
mov ecx, dword [esp + 0x30]
lea edx, [esp + 0x48]
mov dword [esp + 0x48], 0x10
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x6c], 1
mov dword [esp + 0x70], edx
mov dword [esp + 0x64], 2
mov dword [esp + 0x74], ebx
mov dword [esp + 0x80], 0x1000
jmp 0x9172db
mov edx, dword [esp + 0x38]
mov eax, 2
mov dword [esp + 0x6c], eax
mov dword [esp + 0x64], eax
lea eax, [esp + 0x8c]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0xd4]
mov dword [esp + 0x74], 1
mov dword [esp + 0x80], ebx
mov dword [esp + 0x8c], 0x24
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ecx
mov dword [esp + 0x98], edx
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], ebx
lea ecx, [esp + 0x58]
push ecx
lea edx, [esp + 0xb4]
push edx
push ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x64], 0x30
call dword [0xbf8650]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
call esi
mov dword [esp + 0x24], eax
cmp dword [esp + 0x40], ebx
je 0x917332
mov eax, dword [esp + 0x40]
mov dword [eax], edi
cmp edi, ebx
setge byte [esp + 0x23]
cmp edi, 0x800b0100
jg 0x917530
je 0x917498
cmp edi, 0x80096001
jg 0x9173aa
je 0x917393
cmp edi, 0x80092012
je 0x91737c
cmp edi, 0x80092026
jne case.default.0x91754d
cmp ebp, ebx
je 0x9176a1
push edi
push str.PUBLISHER_UNTRUSTED__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push 0x80092012
push str.CERTIFICATE_REVOCATION_CHECK_FAILED__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push 0x80096001
push str.CERTIFICATE_SIGNATURE_VERIFY_FAILED__0x_x_
jmp 0x917698
cmp edi, 0x80096010
jg 0x91741a
je 0x917403
lea eax, [edi + 0x7ff69ffe]
cmp eax, 3
ja case.default.0x91754d
jmp dword [eax*4 + 0x917940]
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_SIGNATURE_VERIFY_FAILED__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_COUNTERSIGN_INVALID__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_CONSTRAINT_ERROR__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push 0x80096010
push str.BAD_DIGITAL_SIGNATURE__0x_x_
jmp 0x917698
cmp edi, 0x800b0001
jg 0x917479
je 0x917462
cmp edi, 0x80096019
je 0x91744b
cmp edi, 0x8009601e
jne case.default.0x91754d
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_FINANCIAL_EXTENSION_MISSING__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push 0x80096019
push str.CERTIFICATE_CONSTRAINT_ERROR__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push 0x800b0001
push str.CERTIFICATE_UNKNOWN_PROVIDER__0x_x_
jmp 0x917698
cmp edi, 0x800b0004
jne case.default.0x91754d
cmp ebp, ebx
je 0x9176a1
push edi
push str.SUBJECT_NOT_TRUSTED__0x_x_
jmp 0x917698
call esi
mov dword [esp + 0x24], eax
cmp eax, 0x800b0100
je 0x9174d4
cmp eax, 0x800b0003
je 0x9174e8
cmp eax, 0x800b0001
je 0x9174fc
cmp ebp, ebx
je 0x9176a1
push eax
push 0x800b0100
push str.CERTIFICATE_READSIGN_FAILED__0x_x_0x_x_
push ebp
call fcn.00a78f30
add esp, 0x10
jmp 0x9176a1
push 0x800b0100
push str.NOT_SIGNED__0x_x_
lea ecx, [esp + 0x2e8]
push ecx
jmp 0x91750e
push 0x800b0100
push str.UNKNOWN_SUBJECT_FORM__0x_x_
lea edx, [esp + 0x2e8]
push edx
jmp 0x91750e
push 0x800b0100
push str.UNKNOWN_PROVIDER__0x_x_
lea eax, [esp + 0x2e8]
push eax
call fcn.00a78f30
add esp, 0xc
cmp ebp, ebx
je 0x9176a1
lea ecx, [esp + 0x2e0]
push ecx
push 0xaa1544
jmp 0x917698
cmp edi, ebx
jg case.default.0x91754d
je 0x9176a1
lea eax, [edi + 0x7ff4feff]
cmp eax, 0x13
ja case.default.0x91754d
jmp dword [eax*4 + 0x917950]
cmp ebp, ebx
je 0x9176a1
push edi
push str.EXPLICIT_DISTRUST__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_EXPIRED__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_WITH_UNKNOWN_CRITICAL_EXTENSION__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_WITH_INVALID_NAME__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_WITH_INVALID_POLICY__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_NOT_ISSUED_BY_PARENT__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_MALFORMED__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_PATH_LENGTH_VIOLATION__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_CA_UNTRUSTED__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_VALIDITY_NESTING_ERROR__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_ROLE_FAILURE__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_PURPOSE_WRONG__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_UNTRUSTED_ROOT__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_CHAINING_ERROR__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_TRUST_FAILURE__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_REVOKED__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_UNTRUSTED_TESTROOT__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_REVOKE_PROCESS_FAIL__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_CN_MATCH_FAILURE__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_USAGE_INVALID__0x_x_
jmp 0x917698
cmp ebp, ebx
je 0x9176a1
push edi
push str.CERTIFICATE_UNKNOWN_ERROR__0x_x_
push ebp
call fcn.00a78f30
add esp, 0xc
mov eax, dword [esp + 0x3c]
cmp eax, ebx
je 0x9176b6
mov edx, dword [esp + 0x14]
push ebx
push eax
push edx
call dword [0xbf8668]
cmp byte [esp + 0x23], bl
je 0x9176db
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0xb4]
push ecx
push ebx
mov dword [esp + 0x80], 2
call dword [0xbf8650]
mov eax, dword [esp + 0x38]
cmp eax, ebx
je 0x9176ec
push eax
call fcn.00a78fec
add esp, 4
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x9176fd
push eax
call fcn.00a78fec
add esp, 4
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x917711
push ebx
push eax
call dword [0xbf866c]
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x91771e
cmp eax, 0xffffffff
jne 0x91772a
lea edx, [esp + 0x1c]
push edx
call fcn.00985290
jmp 0x917738
mov ecx, dword [esp + 0x34]
push ebx
push ebx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, dword [esp + 0x30]
push edx
call fcn.00a78fec
add esp, 4
cmp edi, 0x800b0100
je 0x917917
mov ebp, dword [esp + 0x44]
cmp ebp, ebx
je 0x917917
cmp byte [ebp], bl
je 0x917917
push 0x207
lea eax, [esp + 0x3ed]
push ebx
push eax
mov byte [esp + 0x3f4], bl
call fcn.00a7ffb0
add esp, 0xc
push 0x103
lea ecx, [esp + 0x2e5]
push ebx
push ecx
mov byte [esp + 0x2ec], bl
call fcn.00a7ffb0
add esp, 0xc
push ebp
lea edx, [esp + 0x2e4]
lea ecx, [esp + 0x3ec]
call fcn.00921220
add esp, 4
cmp byte [esp + 0x3e8], bl
je 0x917917
mov eax, dword [esp + 0x88]
cmp eax, ebx
je 0x9177ec
lea edx, [esp + 0x3e8]
push edx
push 0xaa1544
push 0xffffffffffffffff
push 0x103
push eax
call fcn.00a78fcb
add esp, 0x14
cmp edi, 0x80096003
jne 0x91781f
push ebx
lea eax, [esp + 0x3ec]
push str.MicroWorld_Technologies
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x917917
mov eax, dword [esp + 0x40]
cmp eax, ebx
je 0x917827
mov dword [eax], ebx
jmp 0x917827
cmp edi, ebx
jne 0x917917
push ebx
lea ecx, [esp + 0x3ec]
push str.Microsoft_Corp
push ecx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x91790b
push ebx
lea edx, [esp + 0x3ec]
push str.MicroWorld_Technologies
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x91790b
push ebx
lea eax, [esp + 0x3ec]
push str.Microsoft_Windows_Hardware_Compatibility
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x91790b
push ebx
lea ecx, [esp + 0x3ec]
push str.Bitdefender
push ecx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x91790b
push ebx
lea edx, [esp + 0x3ec]
push str.TeamViewer
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x91790b
push ebx
lea eax, [esp + 0x3ec]
push str.Callback_Technologies
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x91790b
push ebx
lea ecx, [esp + 0x3ec]
push str.Google_Inc
push ecx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x91790b
push ebx
lea edx, [esp + 0x3ec]
push str.Apple_Inc
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x917917
push 5
mov esi, ebp
call fcn.00959ce0
add esp, 4
mov eax, dword [esp + 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, 1
mov ecx, dword [esp + 0x5f4]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00a78f21
add esp, 0x5e8
ret