Function at 0x43b200
Capabilities:
Link many functions at runtime

Disassembly:
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push esi
push str.wintrust.dll
xor esi, esi
call ebx
test eax, eax
mov dword [0x471c60], eax
jne 0x43b24b
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b246
test byte [eax + 0x3c], 1
je 0x43b246
cmp byte [eax + 0x39], 5
jb 0x43b246
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x45fde4
push 0xa
push ecx
push edx
call fcn.0041b140
mov eax, esi
pop esi
pop ebx
ret
push edi
push 0x68
call fcn.0043c073
mov edi, eax
add esp, 4
test edi, edi
je 0x43b8f7
push 0x68
push 0
push edi
call fcn.0043c140
mov eax, dword [0x471c60]
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
add esp, 0xc
push str.CryptCATAdminAcquireContext
push eax
call esi
test eax, eax
mov dword [edi], eax
jne 0x43b2b6
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0xb
jmp 0x43b8d9
mov eax, dword [0x471c60]
push str.CryptCATAdminReleaseContext
push eax
call esi
test eax, eax
mov dword [edi + 4], eax
jne 0x43b2fa
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0xc
jmp 0x43b8d9
mov eax, dword [0x471c60]
push str.CryptCATAdminReleaseCatalogContext
push eax
call esi
test eax, eax
mov dword [edi + 8], eax
jne 0x43b33e
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0xd
jmp 0x43b8d9
mov eax, dword [0x471c60]
push str.CryptCATCatalogInfoFromContext
push eax
call esi
test eax, eax
mov dword [edi + 0xc], eax
jne 0x43b382
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0xe
jmp 0x43b8d9
mov eax, dword [0x471c60]
push str.CryptCATAdminEnumCatalogFromHash
push eax
call esi
test eax, eax
mov dword [edi + 0x10], eax
jne 0x43b3c6
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0xf
jmp 0x43b8d9
mov eax, dword [0x471c60]
push str.CryptCATAdminCalcHashFromFileHandle
push eax
call esi
test eax, eax
mov dword [edi + 0x14], eax
jne 0x43b40a
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x10
jmp 0x43b8d9
mov eax, dword [0x471c60]
push str.WinVerifyTrust
push eax
call esi
test eax, eax
mov dword [edi + 0x18], eax
jne 0x43b44e
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x11
jmp 0x43b8d9
mov eax, dword [0x471c60]
push str.WTHelperGetProvCertFromChain
push eax
call esi
mov ecx, dword [0x471c60]
push str.WTHelperGetProvSignerFromChain
push ecx
mov dword [edi + 0x1c], eax
call esi
mov edx, dword [0x471c60]
push str.WTHelperProvDataFromStateData
push edx
mov dword [edi + 0x20], eax
call esi
test eax, eax
mov dword [edi + 0x24], eax
jne 0x43b4b4
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x14
jmp 0x43b8d9
mov eax, dword [0x471c60]
push str.CryptCATAdminAddCatalog
push eax
call esi
test eax, eax
mov dword [edi + 0x28], eax
jne 0x43b4f8
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x15
jmp 0x43b8d9
mov eax, dword [0x471c60]
push str.CryptCATOpen
push eax
call esi
test eax, eax
mov dword [edi + 0x2c], eax
jne 0x43b53c
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x16
jmp 0x43b8d9
mov eax, dword [0x471c60]
push str.CryptCATEnumerateMember
push eax
call esi
test eax, eax
mov dword [edi + 0x34], eax
jne 0x43b580
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x17
jmp 0x43b8d9
mov eax, dword [0x471c60]
push str.CryptCATClose
push eax
call esi
test eax, eax
mov dword [edi + 0x30], eax
jne 0x43b5c4
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x18
jmp 0x43b8d9
mov eax, dword [0x471c60]
push str.CryptCATGetMemberInfo
push eax
call esi
test eax, eax
mov dword [edi + 0x38], eax
jne 0x43b608
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x19
jmp 0x43b8d9
mov eax, dword [0x471c60]
push str.CryptCATEnumerateCatAttr
push eax
call esi
test eax, eax
mov dword [edi + 0x3c], eax
jne 0x43b64c
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x1a
jmp 0x43b8d9
mov eax, dword [0x471c60]
push str.CryptCATEnumerateAttr
push eax
call esi
test eax, eax
mov dword [edi + 0x40], eax
jne 0x43b690
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x1b
jmp 0x43b8d9
push str.crypt32.dll
call ebx
mov ebx, eax
test ebx, ebx
jne 0x43b6cd
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x1c
jmp 0x43b8d9
push 0x45feb8
push ebx
call esi
test eax, eax
mov dword [edi + 0x44], eax
jne 0x43b70c
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x1d
jmp 0x43b8d9
push 0x45fea8
push ebx
call esi
test eax, eax
mov dword [edi + 0x48], eax
jne 0x43b74b
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x1e
jmp 0x43b8d9
push str.CertDeleteCertificateFromStore
push ebx
call esi
test eax, eax
mov dword [edi + 0x4c], eax
jne 0x43b78a
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x1f
jmp 0x43b8d9
push str.CertCompareCertificate
push ebx
call esi
test eax, eax
mov dword [edi + 0x50], eax
jne 0x43b7c9
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x20
jmp 0x43b8d9
push str.CertEnumCertificatesInStore
push ebx
call esi
test eax, eax
mov dword [edi + 0x54], eax
jne 0x43b808
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x21
jmp 0x43b8d9
push str.CertAddSerializedElementToStore
push ebx
call esi
test eax, eax
mov dword [edi + 0x58], eax
jne 0x43b847
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x22
jmp 0x43b8d9
push str.CertNameToStrW
push ebx
call esi
test eax, eax
mov dword [edi + 0x5c], eax
jne 0x43b87b
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x23
jmp 0x43b8d9
push str.CertGetNameStringW
push ebx
call esi
test eax, eax
mov dword [edi + 0x64], eax
jne 0x43b8ab
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x24
jmp 0x43b8d9
push 0x45fdf4
push ebx
call esi
test eax, eax
mov dword [edi + 0x60], eax
jne 0x43b8f5
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x43b8e6
test byte [eax + 0x3c], 1
je 0x43b8e6
cmp byte [eax + 0x39], 5
jb 0x43b8e6
push 0x45fde4
push 0x25
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push ecx
push edx
call fcn.0041b140
push edi
call fcn.0043c1ba
add esp, 4
pop edi
pop esi
xor eax, eax
pop ebx
ret
mov eax, edi
pop edi
pop esi
pop ebx
ret