Function at 0x1007d69c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x51c
mov edi, dword [esp + 0x530]
mov eax, dword [0x100c51b8]
xor eax, esp
mov dword [esp + 0x518], eax
lea eax, [esp + 0xd4]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
mov eax, dword [esp + 4]
xor ebx, ebx
mov dword [eax + 0x30], ebx
xorps xmm0, xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax], xmm0
lea eax, [esp + 0xc4]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
movups xmmword [eax], xmm0
lea eax, [esp + 0x9c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
mov dword [eax + 0x24], ebx
mov dword [eax + 0x20], ebx
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax], xmm0
lea eax, [esp + 0x17c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
push 0x20c
push ebx
push dword [esp + 0x28]
call fcn.1008c000
add esp, 0xc
lea ecx, [esp + 0x98]
mov dword [esp + 0x60], ecx
mov eax, dword [esp + 0x60]
mov dword [ecx], ebx
mov eax, 0x4654c507
cmp eax, 0x104cbd84
jle 0x1007d7b9
cmp eax, 0x4151717e
jle 0x1007d86a
cmp eax, 0x59e3c0d8
jg 0x1007d93b
cmp eax, 0x58a46e7d
jg 0x1007dc34
cmp eax, 0x4151717f
je 0x1007ddbc
cmp eax, 0x4654c507
jne 0x1007d74e
cmp dword [esp + 0x538], 0
setne byte [esp + 3]
cmp byte [esp + 3], 0
mov eax, 0x58a46e7e
mov ecx, 0x34851b8b
cmovne eax, ecx
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
jmp 0x1007d74e
cmp eax, 0xdb2d48b7
jg 0x1007d8ea
cmp eax, 0xb352bc86
jle 0x1007db56
cmp eax, 0xc9a87706
jg 0x1007dc72
cmp eax, 0xb352bc87
je 0x1007ddc6
cmp eax, 0xbf236f8c
jne 0x1007d74e
lea ecx, [esp + 0x94]
mov dword [esp + 0x64], ecx
mov eax, dword [esp + 0x64]
mov dword [esp + 0x94], 0x64
lea edx, [esp + 0x118]
mov dword [esp + 0x68], edx
mov eax, dword [esp + 0x68]
mov dword [esp + 0x6c], edx
push 0
push dword [esp + 0x70]
push ecx
push dword [esp + 0x30]
call sub.WINTRUST.dll_CryptCATAdminCalcHashFromFileHandle
push dword [esp + 0x24]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x94]
add eax, eax
inc eax
add eax, eax
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.10087993
add esp, 4
mov dword [esp + 8], eax
mov dword [esp + 0x3c], 0
mov eax, 0xdb2d48b8
jmp 0x1007d74e
cmp eax, 0x274e29be
jle 0x1007db90
cmp eax, 0x34851b8a
jg 0x1007dc9a
cmp eax, 0x274e29bf
je 0x1007ddd8
cmp eax, 0x2adce129
jne 0x1007d74e
mov eax, dword [esp + 0xc]
movzx ecx, byte [esp + eax + 0x118]
shr ecx, 3
and ecx, 0x1e
movzx ecx, word [ecx + str.0123456789ABCDEF]
mov edx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov word [esi + edx*4], cx
movzx eax, byte [esp + eax + 0x118]
and eax, 0xf
movzx eax, word [eax + eax + str.0123456789ABCDEF]
mov ecx, dword [esp + 8]
mov word [ecx + edx*4 + 2], ax
mov eax, dword [esp + 0xc]
inc eax
mov dword [esp + 0x3c], eax
mov eax, 0xdb2d48b8
jmp 0x1007d74e
cmp eax, 0xef4564f3
jle 0x1007dc05
cmp eax, 0xf47c46f1
jg 0x1007dcdf
cmp eax, 0xef4564f4
je 0x1007de1d
cmp eax, 0xf095bc52
jne 0x1007d74e
push 0
push dword [esp + 0x9c]
call sub.WINTRUST.dll_CryptCATAdminReleaseContext
cmp dword [esp + 0x30], 0
mov eax, 0x4151717f
mov ecx, 0xaef7e69f
cmove eax, ecx
jmp 0x1007d74e
cmp eax, 0x75cc4a8b
jle 0x1007dd7e
cmp eax, 0x75cc4a8c
je 0x1007de34
cmp eax, 0x7e0ef794
jne 0x1007d74e
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x88], eax
test eax, eax
mov ecx, 0x27678115
mov eax, 0x375c3a7a
cmove ecx, eax
mov dword [esp + 0x84], ecx
mov eax, 0xde8196ad
cmp eax, 0x27678114
jg 0x1007d9e8
cmp eax, 0xe881d1c
jle 0x1007da1f
cmp eax, 0xe881d1d
je 0x1007da5f
cmp eax, 0x11dcfb38
je 0x1007da7a
cmp eax, 0x25f45126
jne 0x1007d982
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x90], ebx
push dword [esp + 0x7c]
push dword [esp + 0x8c]
call sub.WINTRUST.dll_WTHelperGetProvCertFromChain
mov dword [esp + 0x34], eax
cmp dword [esp + 0x34], 0
mov eax, 0x87586d3f
mov ecx, 0x41b3437b
cmove eax, ecx
jmp 0x1007d982
cmp eax, 0x41b3437a
jle 0x1007da3d
cmp eax, 0x41b3437b
je 0x1007da8b
cmp eax, 0x6d82f72e
jne 0x1007daf4
mov eax, dword [esp + 0x7c]
inc eax
mov dword [esp + 0x5c], eax
mov eax, 0x25f45126
mov ebx, dword [esp + 0x80]
jmp 0x1007d982
cmp eax, 0x87586d3f
je 0x1007daa1
cmp eax, 0xde8196ad
jne 0x1007d982
mov eax, dword [esp + 0x84]
jmp 0x1007d982
cmp eax, 0x27678115
je 0x1007dae0
cmp eax, 0x375c3a7a
jne 0x1007d982
xor ebp, ebp
mov eax, 0x4b9222fd
jmp 0x1007d982
mov dword [esp + 0x80], edi
test esi, esi
mov eax, 0x11dcfb38
mov ecx, 0x6d82f72e
cmove eax, ecx
jmp 0x1007d982
mov eax, 0x4b9222fd
mov ebp, dword [esp + 0x80]
jmp 0x1007d982
mov esi, 2
mov eax, 0xe881d1d
mov edi, dword [esp + 0x90]
jmp 0x1007d982
xor eax, eax
mov esi, 0x190
push esi
push eax
lea edi, [esp + 0x390]
push edi
call fcn.1008c000
add esp, 0xc
mov eax, dword [esp + 0x34]
push esi
xor esi, esi
push edi
push esi
push esi
push 4
push dword [eax + 4]
call dword [sym.imp.CRYPT32.dll_CertGetNameStringA]
mov eax, dword [esp + 0x34]
mov edi, dword [eax + 0xc]
mov eax, 0xe881d1d
jmp 0x1007d982
xor ebx, ebx
mov eax, 0x25f45126
mov dword [esp + 0x5c], 0
jmp 0x1007d982
cmp eax, 0x4b9222fd
jne 0x1007d982
push 0x190
xor ebx, ebx
push ebx
lea esi, [esp + 0x390]
push esi
call fcn.1008c000
add esp, 0xc
mov eax, dword [esp + 0x78]
push 0x18f
push esi
push ebx
push ebx
push 4
push dword [eax + 4]
call dword [sym.imp.CRYPT32.dll_CertGetNameStringA]
push esi
call fcn.1009ee80
add esp, 4
mov ecx, dword [esp + 0x534]
push eax
push esi
call fcn.10007b00
mov eax, 0xed320079
mov edi, dword [esp + 0x530]
jmp 0x1007d74e
cmp eax, 0x92277a0d
je 0x1007de50
cmp eax, 0x95130aa4
je 0x1007de8d
cmp eax, 0xaef7e69f
jne 0x1007d74e
mov eax, dword [esp + 0x28]
mov eax, 0x59e3c0d9
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x14], ecx
jmp 0x1007d74e
cmp eax, 0x104cbd85
je 0x1007deaf
cmp eax, 0x11d5868b
je 0x1007dec5
cmp eax, 0x205a2073
jne 0x1007d74e
mov dword [esp + 0xc4], 0x10
mov dword [esp + 0xc8], edi
mov dword [esp + 0xcc], ebx
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xd4], 0x34
mov dword [esp + 0xe8], 1
lea eax, [esp + 0xc4]
mov dword [esp + 0xec], eax
mov dword [esp + 0xe0], 2
jmp 0x1007dd5e
cmp eax, 0xdb2d48b8
je 0x1007df12
cmp eax, 0xea6d726f
je 0x1007df41
cmp eax, 0xed320079
jne 0x1007d74e
mov eax, 0xb352bc87
mov dword [esp + 0x54], ebp
jmp 0x1007d74e
cmp eax, 0x58a46e7e
je 0x1007df70
cmp eax, 0x58c304a3
jne 0x1007d74e
push 0
push dword [esp + 0x30]
call sub.WINTRUST.dll_WTHelperGetProvCertFromChain
mov dword [esp + 0x78], eax
cmp dword [esp + 0x78], 0
mov eax, 0x7e0ef794
mov ecx, 0xed320079
cmove eax, ecx
xor ebp, ebp
jmp 0x1007d74e
cmp eax, 0xc9a87707
je 0x1007df97
cmp eax, 0xda5a70af
jne 0x1007d74e
mov dword [esp + 0x14], 0
mov eax, 0x59e3c0d9
jmp 0x1007d74e
cmp eax, 0x34851b8b
je 0x1007dfe6
cmp eax, 0x3c78751c
jne 0x1007d74e
cmp dword [esp + 0x58], 0
mov eax, 0x59e3c0d9
mov ecx, 0x58a46e7e
cmove eax, ecx
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x4c], ecx
jmp 0x1007d74e
cmp eax, 0xf47c46f2
je 0x1007e009
cmp eax, 0xf4a6647a
jne 0x1007d74e
push ebx
lea eax, [esp + 0x180]
push eax
push dword [esp + 0x18]
call sub.WINTRUST.dll_CryptCATCatalogInfoFromContext
mov dword [esp + 0x9c], 0x28
lea eax, [esp + 0x180]
mov dword [esp + 0xa4], eax
mov dword [esp + 0xac], edi
mov eax, dword [esp + 0x30]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xd4], 0x34
mov ecx, 2
mov dword [esp + 0xe8], ecx
lea eax, [esp + 0x9c]
mov dword [esp + 0xec], eax
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xe4], ebx
movaps xmm0, xmmword [0x100b5820]
movups xmmword [esp + 0xf0], xmm0
mov eax, 0x274e29bf
jmp 0x1007d74e
cmp eax, 0x6dc9697c
jne 0x1007e038
xor esi, esi
push esi
push esi
push esi
push dword [esp + 0x80]
call sub.WINTRUST.dll_WTHelperGetProvSignerFromChain
mov dword [esp + 0x2c], eax
mov dword [esp + 0x54], 0
cmp dword [esp + 0x2c], esi
mov eax, 0x58c304a3
mov ecx, 0xb352bc87
cmove eax, ecx
jmp 0x1007d74e
mov eax, 0x104cbd85
jmp 0x1007d74e
mov eax, 0x11d5868b
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x48], ecx
jmp 0x1007d74e
lea ecx, [esp + 0x108]
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x28]
movups xmm0, xmmword [0x100b5800]
movups xmmword [eax], xmm0
push dword [esp + 4]
push ecx
push 0xffffffffffffffff
call sub.WINTRUST.dll_WinVerifyTrust
test eax, eax
mov eax, 0x95130aa4
mov ecx, 0xf47c46f2
cmovns eax, ecx
mov dword [esp + 0x38], 0
jmp 0x1007d74e
cmp byte [esp + 3], 0
mov eax, 0xaef7e69f
mov ecx, 0xf095bc52
cmovne eax, ecx
jmp 0x1007d74e
push 0
push dword [esp + 0x14]
push dword [esp + 0xa0]
call sub.WINTRUST.dll_CryptCATAdminReleaseCatalogContext
mov eax, 0xef4564f4
jmp 0x1007d74e
sub esp, 0x1c
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], ebx
movaps xmm0, xmmword [0x100b5830]
movups xmmword [esp + 4], xmm0
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
cmp eax, 0xffffffff
mov eax, 0xbf236f8c
mov ecx, 0xea6d726f
cmove eax, ecx
jmp 0x1007d74e
mov eax, dword [esp + 0x38]
mov dword [esp + 0x8c], eax
cmp dword [esp + 0x10], 0
mov eax, 0x75cc4a8c
mov ecx, 0xef4564f4
cmove eax, ecx
jmp 0x1007d74e
push dword [esp + 0x30]
call fcn.100879a5
add esp, 4
mov eax, 0xaef7e69f
jmp 0x1007d74e
mov dword [esp + 0xf0], 2
mov dword [esp + 0xec], ebx
mov dword [esp + 0xfc], ebx
movups xmm0, xmmword [0x100b5810]
movups xmmword [esp + 0x388], xmm0
push dword [esp + 4]
lea eax, [esp + 0x38c]
push eax
push 0xffffffffffffffff
call sub.WINTRUST.dll_WinVerifyTrust
mov eax, 0x95130aa4
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x38], ecx
jmp 0x1007d74e
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0xc]
cmp ecx, eax
mov eax, 0xc9a87707
mov ecx, 0x2adce129
cmovb eax, ecx
jmp 0x1007d74e
push 0
push dword [esp + 0x9c]
call sub.WINTRUST.dll_CryptCATAdminReleaseContext
mov dword [esp + 0x44], 0
mov eax, 0x3c78751c
xor ecx, ecx
inc ecx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x40], 0
jmp 0x1007d74e
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x30], eax
cmp dword [esp + 0x10], 0
mov eax, 0xf4a6647a
mov ecx, 0x205a2073
cmove eax, ecx
jmp 0x1007d74e
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 8]
mov word [ecx + eax*4], 0
xor eax, eax
push eax
mov dword [esp + 0x5c], 0
push eax
push dword [esp + 0x9c]
push dword [esp + 0x78]
push dword [esp + 0xa8]
call sub.WINTRUST.dll_CryptCATAdminEnumCatalogFromHash
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x68]
mov eax, dword [esp + 0x64]
mov eax, 0x3c78751c
mov ecx, dword [esp + 8]
mov dword [esp + 0x44], ecx
jmp 0x1007d74e
push ebx
push ebx
lea eax, [esp + 0xa0]
push eax
call sub.WINTRUST.dll_CryptCATAdminAcquireContext
test eax, eax
mov eax, 0x92277a0d
mov ecx, 0xda5a70af
cmove eax, ecx
jmp 0x1007d74e
push dword [esp + 0xf4]
call sub.WINTRUST.dll_WTHelperProvDataFromStateData
mov dword [esp + 0x74], eax
cmp dword [esp + 0x74], 0
mov eax, 0x6dc9697c
mov ecx, 0x11d5868b
cmove eax, ecx
mov dword [esp + 0x48], 0
jmp 0x1007d74e
cmp eax, 0x59e3c0d9
jne 0x1007d74e
mov eax, dword [esp + 0x60]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x518]
xor ecx, esp
call fcn.100879aa
mov eax, dword [esp + 0x14]
add esp, 0x51c
pop esi
pop edi
pop ebx
pop ebp
ret