Function at 0x507240
Capabilities:
Hash data via bcrypt

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x140
mov eax, dword [0x61094c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x134], eax
test edi, edi
je 0x5072fc
mov ebx, 4
lea ecx, [ebx - 2]
cmp esi, 3
jle 0x5072a8
mov edx, dword [0x60c5e4]
movzx eax, word [esi + edi - 3]
cmp ax, word [edx]
jne 0x5072a2
movzx eax, byte [esi + edi - 1]
cmp al, byte [edx + 2]
mov eax, dword [ebp - 0x134]
jne 0x5072a8
lea ebx, [ecx + 4]
lea ecx, [ebx - 3]
jmp 0x5072a8
mov eax, dword [ebp - 0x134]
sub esi, ecx
sub esi, ebx
sub esi, 0x80
js 0x5072fc
push 0
push 0
mov dword [eax], esi
lea eax, [ebp - 0x138]
push str.SHA256
push eax
call sub.bcrypt.dll_BCryptOpenAlgorithmProvider
test eax, eax
js 0x5072fc
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x134]
push eax
push dword [ebp - 0x138]
call sub.bcrypt.dll_BCryptCreateHash
push 0
test eax, eax
jns 0x50730f
push dword [ebp - 0x138]
call sub.bcrypt.dll_BCryptCloseAlgorithmProvider
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00553cca
mov esp, ebp
pop ebp
ret
push esi
push edi
push dword [ebp - 0x134]
call sub.bcrypt.dll_BCryptHashData
push 0
test eax, eax
jns 0x50734b
push dword [ebp - 0x138]
call sub.bcrypt.dll_BCryptCloseAlgorithmProvider
push dword [ebp - 0x134]
call sub.bcrypt.dll_BCryptDestroyHash
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00553cca
mov esp, ebp
pop ebp
ret
push 0x20
lea eax, [ebp - 0x24]
xorps xmm0, xmm0
push eax
push dword [ebp - 0x134]
movups xmmword [ebp - 0x24], xmm0
movups xmmword [ebp - 0x14], xmm0
call sub.bcrypt.dll_BCryptFinishHash
push 0
test eax, eax
js 0x507322
push 0
push str.ECDSA_P256
lea eax, [ebp - 0x13c]
push eax
call sub.bcrypt.dll_BCryptOpenAlgorithmProvider
push 0
test eax, eax
js 0x507322
movups xmm0, xmmword [0x5a59e8]
push 0x48
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0x31534345
movups xmmword [ebp - 0x64], xmm0
push eax
movups xmm0, xmmword [0x5a59f8]
lea eax, [ebp - 0x140]
mov dword [ebp - 0x68], 0x20
push eax
movups xmmword [ebp - 0x54], xmm0
push str.ECCPUBLICBLOB
movups xmm0, xmmword [0x5a5a08]
push 0
push dword [ebp - 0x13c]
movups xmmword [ebp - 0x44], xmm0
movups xmm0, xmmword [0x5a5a18]
movups xmmword [ebp - 0x34], xmm0
call sub.bcrypt.dll_BCryptImportKeyPair
test eax, eax
jns 0x507408
push 0
push dword [ebp - 0x138]
call sub.bcrypt.dll_BCryptCloseAlgorithmProvider
push dword [ebp - 0x134]
call sub.bcrypt.dll_BCryptDestroyHash
push 0
push dword [ebp - 0x13c]
jmp 0x5072f7
add esi, edi
mov byte [ebp - 0xb0], 0
add esi, ebx
je 0x507424
mov ecx, 0x20
lea edi, [ebp - 0x130]
rep movsd dword es:[edi], dword [esi]
jmp 0x50744a
push 0x80
lea eax, [ebp - 0x130]
push 0
push eax
call fcn.00556180
add esp, 0xc
call fcn.0055ec15
mov dword [eax], 0x16
call fcn.0055eb17
push 0x40
lea eax, [ebp - 0xac]
push 0
push eax
call fcn.00556180
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x130]
push 0x80
push eax
call fcn.00507520
add esp, 0x18
test al, al
jne 0x507497
push str.Unable_to_convert_hex_string_into_binary
push 0xd1
push str.XMLUpdater::v2::NSignatureCheck::ForceVerifySignature
push str.E:BT71e4c9fa_1978_4386_a3da_49ea31fa22b7WebAdvisor_XmlUpdater_srcXmlUpdaterSignatureCheck.cpp
push 1
call fcn.00500de0
add esp, 0x14
push 0
push 0x40
lea eax, [ebp - 0xac]
push eax
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0
push dword [ebp - 0x140]
call sub.bcrypt.dll_BCryptVerifySignature
test eax, eax
setns bl
test eax, eax
jns 0x5074dc
push str.File_Signature_Verification_failed
push 0xd9
push str.XMLUpdater::v2::NSignatureCheck::ForceVerifySignature
push str.E:BT71e4c9fa_1978_4386_a3da_49ea31fa22b7WebAdvisor_XmlUpdater_srcXmlUpdaterSignatureCheck.cpp
push 1
call fcn.00500de0
add esp, 0x14
push 0
push dword [ebp - 0x138]
call sub.bcrypt.dll_BCryptCloseAlgorithmProvider
push 0
push dword [ebp - 0x13c]
call sub.bcrypt.dll_BCryptCloseAlgorithmProvider
push dword [ebp - 0x134]
call sub.bcrypt.dll_BCryptDestroyHash
push dword [ebp - 0x140]
call sub.bcrypt.dll_BCryptDestroyKey
mov ecx, dword [ebp - 4]
mov al, bl
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00553cca
mov esp, ebp
pop ebp
ret