Function at 0x140028c90
Capabilities:
Link many functions at runtime

Disassembly:
sub rsp, 0x28
mov rax, qword [0x14010ccf0]
test rax, rax
jne 0x140028cbe
xor edx, edx
lea rcx, str.crypt32.dll
call fcn.140027000
mov qword [0x14010ccf0], rax
test rax, rax
je 0x140028f47
cmp qword [0x14010cd20], 0
jne 0x140028ced
xor edx, edx
lea rcx, str.wintrust.dll
call fcn.140027000
mov qword [0x14010cd20], rax
test rax, rax
je 0x140028f47
mov rax, qword [0x14010ccf0]
cmp qword [0x14010cda8], 0
jne 0x140028d1e
lea rdx, [0x1400ef3b0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010cda8], rax
test rax, rax
je 0x140028f47
mov rax, qword [0x14010ccf0]
cmp qword [0x14010cdf8], 0
jne 0x140028d4f
lea rdx, [0x1400ef3c8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010cdf8], rax
test rax, rax
je 0x140028f47
mov rax, qword [0x14010ccf0]
cmp qword [0x14010cd68], 0
jne 0x140028d80
lea rdx, [0x1400ef3e0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010cd68], rax
test rax, rax
je 0x140028f47
mov rax, qword [0x14010ccf0]
cmp qword [0x14010cce8], 0
jne 0x140028db1
lea rdx, [0x1400ef400]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010cce8], rax
test rax, rax
je 0x140028f47
mov rax, qword [0x14010ccf0]
cmp qword [0x14010cda0], 0
jne 0x140028de2
lea rdx, str.CertGetIssuerCertificateFromStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010cda0], rax
test rax, rax
je 0x140028f47
mov rax, qword [0x14010ccf0]
cmp qword [0x14010cdd8], 0
jne 0x140028e13
lea rdx, str.CryptMsgGetParam
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010cdd8], rax
test rax, rax
je 0x140028f47
mov rax, qword [0x14010ccf0]
cmp qword [0x14010ce08], 0
jne 0x140028e44
lea rdx, [0x1400ef460]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010ce08], rax
test rax, rax
je 0x140028f47
mov rax, qword [0x14010ccf0]
cmp qword [0x14010cf50], 0
jne 0x140028e75
lea rdx, str.CryptMsgClose
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010cf50], rax
test rax, rax
je 0x140028f47
mov rax, qword [0x14010ccf0]
cmp qword [0x14010ce28], 0
jne 0x140028e9f
lea rdx, [0x1400ef488]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010ce28], rax
test rax, rax
je 0x140028f47
cmp qword [0x14010ccf8], 0
jne 0x140028ec9
mov rcx, qword [0x14010cd20]
lea rdx, str.WinVerifyTrust
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010ccf8], rax
test rax, rax
je 0x140028f47
cmp qword [0x14010cd10], 0
jne 0x140028ef3
mov rcx, qword [0x14010cd20]
lea rdx, str.WTHelperProvDataFromStateData
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010cd10], rax
test rax, rax
je 0x140028f47
cmp qword [0x14010cdd0], 0
jne 0x140028f1d
mov rcx, qword [0x14010cd20]
lea rdx, str.WTHelperGetProvCertFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010cdd0], rax
test rax, rax
je 0x140028f47
cmp qword [0x14010cd88], 0
jne 0x140028f4e
mov rcx, qword [0x14010cd20]
lea rdx, str.WTHelperGetProvSignerFromChain
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010cd88], rax
test rax, rax
jne 0x140028f4e
xor eax, eax
add rsp, 0x28
ret
mov eax, 1
add rsp, 0x28
ret