Function at 0x10071748
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x7c
mov eax, dword [0x100c5014]
xor eax, esp
mov dword [esp + 0x78], eax
push ebx
push esi
push edi
xor eax, eax
lea edi, [esp + 0x24]
stosd dword es:[edi], eax
mov esi, ecx
push 0x2c
push 0
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [esp + 0x3c]
push eax
mov dword [esp + 0x2c], 0x10
call fcn.100935b0
add esp, 0xc
mov dword [esp + 0x30], 0x30
mov dword [esp + 0x74], 0xaac56b
lea eax, [esi + 8]
mov dword [esp + 0x78], 0x11d0cd44
xor edi, edi
mov dword [esp + 0x7c], 0xc000c28c
mov dword [esp + 0x80], 0xee95c24f
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocStringLen
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
mov dword [esp + 0x10], ebx
cmp ebx, 0xffffffff
jne 0x10071808
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
inc edi
lea eax, [esi + 8]
cmp edi, 0x19
jl 0x100717b3
mov ebx, 0x80004005
push ebx
push ecx
mov ecx, dword [esi + 4]
push 0x100198b4
push 4
pop edx
call fcn.10031f7a
jmp 0x100719ba
lea ecx, [esi + 8]
call fcn.1006f3f3
mov dword [esp + 0x24], eax
xor eax, eax
inc eax
mov dword [esp + 0x28], ebx
cmp dword [ebp + 8], 0
mov dword [esp + 0x4c], eax
mov dword [esp + 0x44], eax
lea eax, [esp + 0x20]
mov dword [esp + 0x58], 0x40
mov dword [esp + 0x3c], 2
mov dword [esp + 0x48], eax
je 0x1007184e
and dword [esp + 0x40], 0
mov dword [esp + 0x58], 0x10
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x78]
push eax
push 0
call dword [sym.imp.WINTRUST.dll_WinVerifyTrust]
mov ebx, eax
test ebx, ebx
je 0x1007187d
push ebx
push ecx
push 0x100198cc
mov ecx, dword [esi + 4]
push 4
pop edx
call fcn.10031f7a
jmp 0x10071989
push dword [esp + 0x50]
call dword [sym.imp.WINTRUST.dll_WTHelperProvDataFromStateData]
test eax, eax
jne 0x1007189c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
push ebx
push ecx
push 0x100198f4
jmp 0x1007186d
xor ebx, ebx
push ebx
push ebx
push ebx
push eax
call dword [sym.imp.WINTRUST.dll_WTHelperGetProvSignerFromChain]
mov ecx, eax
mov dword [esp + 0xc], ecx
test ecx, ecx
jne 0x100718c3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
push ebx
push ecx
push 0x1001994c
jmp 0x1007186d
xor eax, eax
lea edi, [esp + 0x14]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [esp + 0x60]
mov dword [esp + 0x14], 0xc
stosd dword es:[edi], eax
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x64], 0x14
push eax
push dword [ecx + 0x28]
push 1
call dword [sym.imp.CRYPT32.dll_CertVerifyCertificateChainPolicy]
mov ebx, dword [esp + 0x64]
test eax, eax
jne 0x10071937
test ebx, ebx
je 0x1007191c
push ebx
push ecx
push 0x10019990
jmp 0x1007186d
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x10071930
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x10071910
push 0x100199e0
jmp 0x1007196e
test ebx, ebx
jne 0x10071910
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
cmp ecx, 2
jb 0x10071969
mov eax, dword [eax + 0x10]
mov eax, dword [eax + ecx*4 - 4]
cmp dword [eax + 4], ebx
je 0x10071969
push dword [eax + 4]
mov ecx, esi
call fcn.10076407
mov ebx, eax
jmp 0x10071989
push 0x10019aa8
mov edi, dword [esi + 4]
mov ebx, 0x800b010b
push 4
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x100cf608]
mov ecx, edi
call esi
lea eax, [esp + 0x30]
mov dword [esp + 0x4c], 2
push eax
lea eax, [esp + 0x78]
push eax
push 0
call dword [sym.imp.WINTRUST.dll_WinVerifyTrust]
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
jle 0x100719ba
movzx ebx, bx
or ebx, 0x80070000
mov ecx, dword [esp + 0x84]
mov eax, ebx
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.100906e8
mov esp, ebp
pop ebp
ret 4