Function at 0x140002b5d
Capabilities:
Link many functions at runtime

Disassembly:
jmp 0x140017ff0
sub rsp, 0x28
mov rax, qword [0x14009c0a0]
test rax, rax
jne 0x14001801e
xor edx, edx
lea rcx, str.crypt32.dll
call fcn.140013dc0
mov qword [0x14009c0a0], rax
test rax, rax
je 0x1400182a7
cmp qword [0x14009c180], 0
jne 0x14001804d
xor edx, edx
lea rcx, str.wintrust.dll
call fcn.140013dc0
mov qword [0x14009c180], rax
test rax, rax
je 0x1400182a7
mov rax, qword [0x14009c0a0]
cmp qword [0x14009c0d8], 0
jne 0x14001807e
lea rdx, str.CertGetNameStringA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14009c0d8], rax
test rax, rax
je 0x1400182a7
mov rax, qword [0x14009c0a0]
cmp qword [0x14009c0e0], 0
jne 0x1400180af
lea rdx, str.CryptDecodeObjectEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14009c0e0], rax
test rax, rax
je 0x1400182a7
mov rax, qword [0x14009c0a0]
cmp qword [0x14009c0b8], 0
jne 0x1400180e0
lea rdx, str.CertFreeCertificateContext
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14009c0b8], rax
test rax, rax
je 0x1400182a7
mov rax, qword [0x14009c0a0]
cmp qword [0x14009c0c0], 0
jne 0x140018111
lea rdx, str.CertFindCertificateInStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14009c0c0], rax
test rax, rax
je 0x1400182a7
mov rax, qword [0x14009c0a0]
cmp qword [0x14009c0e8], 0
jne 0x140018142
lea rdx, str.CertGetIssuerCertificateFromStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14009c0e8], rax
test rax, rax
je 0x1400182a7
mov rax, qword [0x14009c0a0]
cmp qword [0x14009c0c8], 0
jne 0x140018173
lea rdx, str.CryptMsgGetParam
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14009c0c8], rax
test rax, rax
je 0x1400182a7
mov rax, qword [0x14009c0a0]
cmp qword [0x14009c0d0], 0
jne 0x1400181a4
lea rdx, str.CryptQueryObject
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14009c0d0], rax
test rax, rax
je 0x1400182a7
mov rax, qword [0x14009c0a0]
cmp qword [0x14009c0a8], 0
jne 0x1400181d5
lea rdx, str.CryptMsgClose
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14009c0a8], rax
test rax, rax
je 0x1400182a7
mov rax, qword [0x14009c0a0]
cmp qword [0x14009c0b0], 0
jne 0x1400181ff
lea rdx, str.CertCloseStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14009c0b0], rax
test rax, rax
je 0x1400182a7
cmp qword [0x14009c188], 0
jne 0x140018229
mov rcx, qword [0x14009c180]
lea rdx, str.WinVerifyTrust
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14009c188], rax
test rax, rax
je 0x1400182a7
cmp qword [0x14009c190], 0
jne 0x140018253
mov rcx, qword [0x14009c180]
lea rdx, str.WTHelperProvDataFromStateData
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14009c190], rax
test rax, rax
je 0x1400182a7
cmp qword [0x14009c1a0], 0
jne 0x14001827d
mov rcx, qword [0x14009c180]
lea rdx, str.WTHelperGetProvCertFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14009c1a0], rax
test rax, rax
je 0x1400182a7
cmp qword [0x14009c198], 0
jne 0x1400182ae
mov rcx, qword [0x14009c180]
lea rdx, str.WTHelperGetProvSignerFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14009c198], rax
test rax, rax
jne 0x1400182ae
xor eax, eax
add rsp, 0x28
ret
mov eax, 1
add rsp, 0x28
ret