Function at 0x5b0cc70
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b1d5a0
mov eax, dword fs:[0]
push eax
sub esp, 0x1ec
mov eax, dword [0x5b920e8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor ebx, ebx
push ebx
mov esi, ecx
xor eax, eax
push 0x5b6b880
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x118], 1
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x3c], ebx
mov word [ebp - 0x4c], ax
call fcn.05a01370
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x1f8]
push edx
mov dword [ebp - 4], ebx
call fcn.05a061b0
mov edi, 8
cmp dword [ebp - 0x38], edi
jb 0x5b0ccf6
mov eax, dword [ebp - 0x4c]
push eax
call fcn.05ac7ecf
add esp, 4
xor eax, eax
mov byte [ebp - 4], 3
xor ecx, ecx
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x3c], ebx
mov word [ebp - 0x4c], cx
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x128], 0x10
cmp dword [esi + 0x14], edi
jb 0x5b0cd3d
mov edx, dword [esi]
mov dword [ebp - 0x124], edx
jmp 0x5b0cd43
mov dword [ebp - 0x124], esi
push 0x30
lea edx, [ebp - 0x158]
push ebx
push edx
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x24], 0xaac56b
mov dword [ebp - 0x20], 0x11d0cd44
mov dword [ebp - 0x1c], 0xc000c28c
mov dword [ebp - 0x18], 0xee95c24f
call fcn.05acaa80
add esp, 0xc
lea ecx, [ebp - 0x158]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x128]
push ebx
mov dword [ebp - 0x158], 0x30
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], 2
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x144], 1
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x140], eax
call dword [sym.imp.WINTRUST.dll_WinVerifyTrust]
mov edi, eax
cmp edi, 0x800b0100
jg 0x5b0d15b
je 0x5b0cfd7
cmp edi, 0x80092026
je 0x5b0ceb4
cmp edi, 0x800b0004
jne 0x5b0d16f
cmp dword [esi + 0x14], 8
jb 0x5b0ce17
mov esi, dword [esi]
lea eax, [ebp - 0x1f8]
push str.The_signature_is_present__but_not_trusted_for_file
push eax
call fcn.05a03950
add esp, 8
push esi
push eax
call fcn.05a03950
add esp, 8
mov esi, eax
push 0xa
mov ecx, esi
call fcn.05a08b50
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x5b0ce65
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x5b0ce65
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0x5b0ce84
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0x5b0ce7d
or eax, 4
push ebx
push eax
call fcn.05a04e40
lea ecx, [ebp - 0x110]
lea eax, [ebp - 0x1f8]
call fcn.05a062b0
cmp dword [eax + 0x14], 8
jb 0x5b0ce9d
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [ebp - 0x110]
call fcn.05a014b0
jmp 0x5b0cf4f
lea edx, [ebp - 0x1f8]
push str.CRYPT_E_SECURITY_SETTINGS___The_hash_representing_the_subject_or_the_publisher_wasnt_explicitly_trusted_by_the_admin_and_admin_policy_has_disabled_user_trust._No_signature__publisher_or_timestamp_errors.
push edx
call fcn.05a03950
add esp, 8
mov esi, eax
push 0xa
mov ecx, esi
call fcn.05a08b50
mov eax, dword [esi]
mov eax, dword [eax + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x5b0cef8
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x5b0cef8
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0x5b0cf17
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0x5b0cf10
or eax, 4
push ebx
push eax
call fcn.05a04e40
lea ecx, [ebp - 0x84]
lea eax, [ebp - 0x1f8]
call fcn.05a062b0
mov esi, 8
cmp dword [eax + 0x14], esi
jb 0x5b0cf34
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
cmp dword [ebp - 0x70], esi
jb 0x5b0cf4f
mov edx, dword [ebp - 0x84]
push edx
call fcn.05ac7ecf
add esp, 4
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x114], edx
mov dword [ebp + ecx - method.std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.virtual_0], vtable.std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 4], 7
call fcn.05a024a0
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1f8]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x1a8]
mov dword [ebp + eax - method.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.0
push ecx
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.05aeb5b1
mov eax, dword [ebp - 0x118]
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.05ac7ec0
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x800b0100
je 0x5b0d09d
cmp eax, 0x800b0003
je 0x5b0d09d
cmp eax, 0x800b0001
je 0x5b0d09d
cmp dword [esi + 0x14], 8
jb 0x5b0d006
mov esi, dword [esi]
lea eax, [ebp - 0x1f8]
push str.An_unknown_error_occurred_trying_to_verify_the_signature_of
push eax
call fcn.05a03950
add esp, 8
push esi
push eax
call fcn.05a03950
add esp, 8
mov esi, eax
push 0xa
mov ecx, esi
call fcn.05a08b50
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x5b0d054
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x5b0d054
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0x5b0d073
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0x5b0d06c
or eax, 4
push ebx
push eax
call fcn.05a04e40
lea ecx, [ebp - 0x68]
lea eax, [ebp - 0x1f8]
call fcn.05a062b0
cmp dword [eax + 0x14], 8
jb 0x5b0d089
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [ebp - 0x68]
call fcn.05a014b0
jmp 0x5b0cf4f
cmp dword [esi + 0x14], 8
jb 0x5b0d0a5
mov esi, dword [esi]
lea edx, [ebp - 0x1f8]
push str.The_file
push edx
call fcn.05a03950
add esp, 8
push esi
push eax
call fcn.05a03950
add esp, 8
push str._is_not_signed.
push eax
call fcn.05a03950
add esp, 8
mov esi, eax
push 0xa
mov ecx, esi
call fcn.05a08b50
mov eax, dword [esi]
mov eax, dword [eax + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x5b0d101
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x5b0d101
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0x5b0d120
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0x5b0d119
or eax, 4
push ebx
push eax
call fcn.05a04e40
lea ecx, [ebp - 0xd8]
lea eax, [ebp - 0x1f8]
call fcn.05a062b0
mov esi, 8
cmp dword [eax + 0x14], esi
jb 0x5b0d13d
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
cmp dword [ebp - 0xc4], esi
jb 0x5b0cf4f
mov edx, dword [ebp - 0xd8]
jmp 0x5b0cf46
cmp edi, 0x800b0111
je 0x5b0d2dd
cmp edi, ebx
je 0x5b0d214
lea eax, [ebp - 0x1f8]
push str.Error:
push eax
call fcn.05a03950
add esp, 8
push edi
push eax
call fcn.05a08980
mov esi, eax
push 0xa
mov ecx, esi
call fcn.05a08b50
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x5b0d1ba
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x5b0d1ba
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0x5b0d1d9
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0x5b0d1d2
or eax, 4
push ebx
push eax
call fcn.05a04e40
lea ecx, [ebp - 0xa0]
lea eax, [ebp - 0x1f8]
call fcn.05a062b0
mov esi, 8
cmp dword [eax + 0x14], esi
jb 0x5b0d1f6
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
cmp dword [ebp - 0x8c], esi
jb 0x5b0cf4f
mov edx, dword [ebp - 0xa0]
jmp 0x5b0cf46
cmp dword [esi + 0x14], 8
jb 0x5b0d21c
mov esi, dword [esi]
lea eax, [ebp - 0x1f8]
push str.The_file
push eax
call fcn.05a03950
add esp, 8
push esi
push eax
call fcn.05a03950
add esp, 8
push str._is_signed_and_the_signature_was_verified.
push eax
call fcn.05a03950
add esp, 8
mov esi, eax
push 0xa
mov ecx, esi
call fcn.05a08b50
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x5b0d278
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x5b0d278
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0x5b0d297
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0x5b0d290
or eax, 4
push ebx
push eax
call fcn.05a04e40
lea ecx, [ebp - 0xbc]
lea eax, [ebp - 0x1f8]
call fcn.05a062b0
mov esi, 8
cmp dword [eax + 0x14], esi
jb 0x5b0d2b4
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
cmp dword [ebp - 0xa8], esi
jb 0x5b0d2d2
mov edx, dword [ebp - 0xbc]
push edx
call fcn.05ac7ecf
add esp, 4
mov dword [ebp - 0x118], ebx
jmp 0x5b0cf4f
cmp dword [esi + 0x14], 8
jb 0x5b0d2e5
mov esi, dword [esi]
lea eax, [ebp - 0x1f8]
push str.The_signature_is_present__but_specifically_disallowed_for_file
push eax
call fcn.05a03950
add esp, 8
push esi
push eax
call fcn.05a03950
add esp, 8
mov esi, eax
push 0xa
mov ecx, esi
call fcn.05a08b50
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x5b0d333
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x5b0d333
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0x5b0d352
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0x5b0d34b
or eax, 4
push ebx
push eax
call fcn.05a04e40
lea ecx, [ebp - 0xf4]
lea eax, [ebp - 0x1f8]
call fcn.05a062b0
mov esi, 8
cmp dword [eax + 0x14], esi
jb 0x5b0d36f
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
cmp dword [ebp - 0xe0], esi
jb 0x5b0cf4f
mov edx, dword [ebp - 0xf4]
jmp 0x5b0cf46