Function at 0x403af0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x484
mov eax, dword [0x41e024]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
push edi
push esi
lea eax, [ebp - 0x404]
push str.Ensure_that_the_file:__s_has_a_valid_certificate
push eax
call fcn.004093d0
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
add esp, 0xc
lea ecx, [ebp - 0x404]
push ecx
call edi
push 0
push esi
call fcn.0040a72f
add esp, 8
test eax, eax
je 0x403b6a
lea edx, [ebp - 0x404]
push str.The_File_does_not_exist.
push edx
call fcn.004093d0
add esp, 8
lea eax, [ebp - 0x404]
push eax
call edi
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00409472
mov esp, ebp
pop ebp
ret
mov eax, esi
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403b70
sub eax, edx
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00409a19
mov edi, eax
mov eax, esi
add esp, 4
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403ba0
sub eax, ecx
lea eax, [eax + eax + 2]
push eax
push 0
push edi
call fcn.004094c0
mov eax, esi
add esp, 0xc
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403bc0
sub eax, edx
mov ecx, eax
mov eax, esi
lea edx, [eax + 1]
push ebx
mov bl, byte [eax]
inc eax
test bl, bl
jne 0x403bd1
inc ecx
push ecx
push edi
sub eax, edx
inc eax
push eax
push esi
xor ebx, ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor eax, eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
push 0x30
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
lea eax, [ebp - 0x484]
push ebx
push eax
mov dword [ebp - 0x414], 0xaac56b
mov dword [ebp - 0x410], 0x11d0cd44
mov dword [ebp - 0x40c], 0xc000c28c
mov dword [ebp - 0x408], 0xee95c24f
mov dword [ebp - 0x440], 0x10
mov dword [ebp - 0x43c], edi
call fcn.004094c0
add esp, 0xc
lea edx, [ebp - 0x484]
push edx
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x440]
push 0xffffffffffffffff
mov dword [ebp - 0x484], 0x30
mov dword [ebp - 0x478], 2
mov dword [ebp - 0x474], ebx
mov dword [ebp - 0x470], 1
mov dword [ebp - 0x46c], ecx
call sub.WINTRUST.dll_WinVerifyTrust
test eax, eax
je 0x403ccb
lea ecx, [ebp - 0x404]
push str.Could_not_verify_the_file_signature.
push ecx
call fcn.004093d0
add esp, 8
lea edx, [ebp - 0x404]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop ebx
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00409472
mov esp, ebp
pop ebp
ret
push ebx
push 0x10000080
push 3
push ebx
push 1
push 0x80000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x403ed1
push ebx
push ebx
lea eax, [ebp - 0x428]
push eax
push 0xff
push edi
call dword [sym.imp.imagehlp.dll_ImageEnumerateCertificates]
test eax, eax
jne 0x403d41
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x404]
push str.Could_not_enumerate_certificates.
push ecx
call fcn.004093d0
add esp, 8
lea edx, [ebp - 0x404]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop ebx
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00409472
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x428], 1
je 0x403d62
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x428]
push eax
push str.There_are__u_certificates_when_there_should_be_exactly_1.
jmp 0x403e13
lea ecx, [ebp - 0x420]
push ecx
push ebx
mov eax, 0x100
push edi
mov dword [ebp - 0x420], ebx
mov word [ebp - 0x41c], ax
call dword [sym.imp.imagehlp.dll_ImageGetCertificateHeader]
test eax, eax
jne 0x403dc2
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [ebp - 0x404]
push str.Could_not_get_certificate_header
push edx
call fcn.004093d0
add esp, 8
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop ebx
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00409472
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x42c], eax
add eax, 0xc
push eax
call fcn.00409a19
mov ecx, dword [ebp - 0x42c]
mov esi, eax
add esp, 4
lea eax, [ebp - 0x42c]
push eax
push esi
push ebx
mov edx, 0x100
push edi
mov dword [esi], ecx
mov word [esi + 4], dx
call dword [sym.imp.imagehlp.dll_ImageGetCertificateData]
push edi
test eax, eax
jne 0x403e42
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call fcn.0040a0ba
push str.Could_not_get_certificate_data.
lea ecx, [ebp - 0x404]
push ecx
call fcn.004093d0
add esp, 0xc
lea edx, [ebp - 0x404]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop ebx
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00409472
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov dword [ebp - 0x454], eax
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x430]
push ecx
push ebx
mov dword [ebp - 0x430], ebx
mov dword [ebp - 0x454], 0x14
mov dword [ebp - 0x450], 0x10001
mov edx, dword [esi]
push edx
lea eax, [esi + 8]
push eax
push ebx
lea ecx, [ebp - 0x454]
push ecx
call dword [sym.imp.CRYPT32.dll_CryptVerifyMessageSignature]
test eax, eax
jne 0x403ee4
push esi
call fcn.0040a0ba
lea edx, [ebp - 0x404]
push str.Could_not_verify_the_file_signature.
push edx
call fcn.004093d0
add esp, 0xc
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop ebx
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00409472
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x424]
push ebx
push ebx
push ebx
push ebx
push 4
push ecx
call dword [sym.imp.CRYPT32.dll_CertGetNameStringA]
mov ebx, eax
push ebx
call fcn.00409a19
mov edx, dword [ebp - 0x424]
add esp, 4
push ebx
mov edi, eax
push edi
push 0
push 0
push 4
push edx
call dword [sym.imp.CRYPT32.dll_CertGetNameStringA]
push edi
lea eax, [ebp - 0x404]
push 0x418314
push eax
call fcn.004093d0
add esp, 0xc
lea ecx, [ebp - 0x404]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push esi
call fcn.0040a0ba
mov edx, dword [ebp - 0x424]
add esp, 4
push edx
call dword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov ecx, dword [ebp - 4]
pop ebx
mov eax, edi
pop edi
xor ecx, ebp
pop esi
call fcn.00409472
mov esp, ebp
pop ebp
ret