Function at 0x4311e0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dfcf2
mov eax, dword fs:[0]
push eax
sub esp, 0x48
mov eax, dword [0x522638]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x54], ebx
push 0x13
xor eax, eax
mov edi, 7
push str.bDisableCryptBroker
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
call fcn.00405fe0
xor ecx, ecx
push 0x3b
mov word [ebp - 0x2c], cx
push 0x4eadd8
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
call fcn.00405fe0
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2c]
push ecx
push 0x80000002
mov dword [ebp - 4], 1
mov dword [ebp - 0x54], 3
call fcn.004236f0
add esp, 0x10
test al, al
je 0x43128f
mov byte [ebp - 0x49], 1
cmp dword [ebp - 0x50], ebx
jne 0x431293
mov byte [ebp - 0x49], 0
mov ebx, 8
cmp dword [ebp - 0x18], ebx
jb 0x4312a9
mov edx, dword [ebp - 0x2c]
push edx
call fcn.00406ca9
add esp, 4
xor eax, eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x34], ebx
jb 0x4312d1
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00406ca9
add esp, 4
push 0x29
push 0x4d3230
push 2
push 0x503970
xor edx, edx
push str.Crypt32.dll
mov ecx, esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], 0
mov word [ebp - 0x48], dx
call fcn.004308f0
test al, al
je 0x4319e7
push 0x2a
push 0x4d4890
push 2
push 0x503940
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x2b
push 0x4d4aa0
push 2
push 0x503928
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x2c
push 0x4d4cb0
push 2
push 0x503914
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x2d
push 0x4d4dd0
push 2
push 0x503904
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x2e
push 0x4d4fa0
push 2
push 0x5038f4
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x2f
push 0x4d50c0
push 2
push 0x5038e0
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x30
push 0x4d5200
push 2
push 0x5038cc
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x31
push 0x4d5380
push 2
push 0x5038bc
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
cmp byte [ebp - 0x49], 0
mov al, 1
jne 0x4319e9
push 0x35
push 0x4d5610
push 2
push 0x5038a4
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x36
push 0x4d7c00
push 2
push 0x503888
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x37
push 0x4d57a0
push 2
push 0x503868
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x38
push 0x4d58b0
push 2
push 0x503848
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x39
push 0x4d5a30
push 2
push 0x503824
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x3a
push 0x4d5bc0
push 2
push 0x503814
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x3b
push 0x4d5d40
push 2
push 0x5037f8
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x3c
push 0x4d5eb0
push 2
push 0x5037d4
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x3d
push 0x4d6030
push 2
push 0x5037b0
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x3e
push 0x4d6220
push 2
push 0x503794
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x3f
push 0x4d6410
push 2
push 0x50377c
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x40
push 0x4d65a0
push 2
push 0x503760
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x41
push 0x4d6710
push 2
push 0x503750
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x42
push 0x4d6d10
push 2
push 0x50373c
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x43
push 0x4d6830
push 2
push 0x503728
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x44
push 0x4d69b0
push 2
push 0x503714
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x45
push 0x4d6b20
push 2
push 0x503704
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x46
push 0x4d6e40
push 2
push 0x5036e0
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x47
push 0x4d70f0
push 2
push 0x5036c8
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x48
push 0x4d7270
push 2
push 0x5036b8
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x49
push 0x4d73d0
push 2
push 0x5036a4
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x4a
push 0x4d7530
push 2
push 0x50368c
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x4b
push 0x4d7670
push 2
push 0x503674
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x4c
push 0x4d7830
push 2
push 0x503664
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x4d
push 0x4d3d10
push 2
push 0x503650
push str.Crypt32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x32
push 0x4d5480
push 2
push 0x503640
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x33
push 0x4d7a90
push 2
push 0x503630
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x34
push 0x4d7970
push 2
push 0x50361c
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x4e
push 0x4d7e20
push 2
push 0x50360c
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x4f
push 0x4d7ff0
push 2
push 0x5035fc
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x50
push 0x4d8130
push 2
push 0x5035e8
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x51
push 0x4d8250
push 2
push 0x5035d8
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x52
push 0x4d83a0
push 2
push 0x5035c8
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x53
push 0x4d84f0
push 2
push 0x5035b4
push str.Advapi32.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x54
push 0x4d8650
push 2
push 0x503598
push str.Ncrypt.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x55
push 0x4d8770
push 2
push 0x50356c
push str.Ncrypt.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x56
push 0x4d88e0
push 2
push 0x503558
push str.Ncrypt.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x57
push 0x4d8a30
push 2
push 0x503548
push str.Ncrypt.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x58
push 0x4d8b70
push 2
push 0x503538
push str.Ncrypt.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x59
push 0x4d8d00
push 2
push 0x503528
push str.Ncrypt.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x5a
push 0x4d8f90
push 2
push 0x503510
push str.Ncrypt.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x5b
push 0x4d90e0
push 2
push 0x503500
push str.Ncrypt.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x5c
push 0x4d9270
push 2
push 0x5034f0
push str.Ncrypt.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
push 0x5d
push 0x4d9410
push 2
push 0x5034dc
push str.Ncrypt.dll
mov ecx, esi
call fcn.004308f0
test al, al
je 0x4319e7
mov al, 1
jmp 0x4319e9
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00401306
mov esp, ebp
pop ebp
ret