Function at 0x105fbba
Capabilities:
Hash data using sha1
Hash data using sha1 via wincrypt
Hash data via wincrypt
Import public key
Initialize hashing via wincrypt

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [ebp + 0x10]
push ebx
push esi
push edi
xor edi, edi
push 0xf0000000
push 1
push edi
mov dword [eax], edi
push edi
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 4], edi
xor ebx, ebx
mov dword [ebp - 0x10], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x14], edi
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x105fc06
call fcn.0108edc3
mov esi, eax
push esi
push 0x1ed40139
jmp 0x105fded
lea eax, [ebp - 8]
push eax
push edi
push edi
push 0x8004
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
jne 0x105fc30
call fcn.0108edc3
mov esi, eax
push esi
push 0x1ed90139
jmp 0x105fded
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0x10], eax
cmp eax, edi
jbe 0x105fde0
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x1c]
push eax
push dword [ebp + 0x10]
mov dword [ebp + 0xc], edi
push dword [ebp + 8]
call fcn.0105e044
mov esi, eax
cmp esi, edi
jne 0x105fdf7
lea eax, [ebp - 0x1c]
push eax
call fcn.0105fb18
test eax, eax
je 0x105fdff
mov eax, dword [ebp - 0x1c]
dec eax
dec eax
je 0x105fd2f
dec eax
je 0x105fcbd
mov esi, dword [sym.imp.ADVAPI32.dll_CryptHashData]
push edi
push 8
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 8]
call esi
test eax, eax
je 0x105fe0c
push edi
push dword [ebp - 0x18]
push dword [ebp - 4]
push dword [ebp - 8]
call esi
test eax, eax
jne 0x105fdbc
call fcn.0108edc3
mov esi, eax
push esi
push 0x1f380139
jmp 0x105fded
cmp dword [ebp - 0xc], edi
jne 0x105fe1b
cmp ebx, edi
je 0x105fe23
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebx + 0xc]
add eax, 0x38
push eax
xor esi, esi
inc esi
push esi
push dword [ebp - 0x10]
call dword [sym.imp.CRYPT32.dll_CryptImportPublicKeyInfo]
test eax, eax
je 0x105fe30
push edi
push edi
push dword [ebp - 0xc]
push dword [ebp - 0x18]
push dword [ebp - 4]
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_CryptVerifySignatureW]
test eax, eax
je 0x105fe3f
push 0x981
mov dword [ebp + 0xc], esi
call fcn.01088aa0
push eax
call fcn.01099014
mov dword [esp], 0x1004208
call fcn.01099014
pop ecx
jmp 0x105fdbc
cmp dword [0x10cf1f4], edi
jne 0x105fd3f
cmp dword [0x10cf210], edi
je 0x105fd56
push 0xffffffffffffffff
push dword [ebp - 0x18]
push dword [ebp - 4]
call fcn.0105dfe1
mov esi, eax
cmp esi, edi
jne 0x105fe4e
cmp ebx, edi
jne 0x105fe56
push dword [ebp - 0x18]
push dword [ebp - 4]
push 1
call dword [sym.imp.CRYPT32.dll_CertCreateCertificateContext]
mov ebx, eax
cmp ebx, edi
je 0x105fe63
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebx + 0xc]
push 0x2000003
add eax, 0x30
push eax
push 1
call fcn.0109173c
cmp eax, edi
je 0x105fd9c
push eax
push 0x1f070139
call fcn.010893e6
push 0x8d3
call fcn.01088aa0
push eax
call fcn.01099014
push dword [ebp - 0x14]
push 0x10129dc
call fcn.01099014
add esp, 0xc
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_LocalFree]
push 0xfffffffffffffff8
pop eax
sub eax, dword [ebp - 0x18]
mov dword [ebp - 4], edi
add dword [ebp + 0x10], eax
jne 0x105fc3e
cmp dword [ebp + 0xc], edi
jne 0x105fe75
mov eax, 0x8007000d
push eax
push 0x1f440139
mov esi, eax
call fcn.010893e6
jmp 0x105fe77
push esi
push 0x1ee20139
jmp 0x105fded
mov eax, 0x8007000d
push eax
push 0x1ee70139
jmp 0x105fdeb
call fcn.0108edc3
mov esi, eax
push esi
push 0x1f330139
jmp 0x105fded
push edi
push 0x1f0f0139
jmp 0x105fded
mov esi, 0x80096002
push esi
push 0x1f140139
jmp 0x105fded
call fcn.0108edc3
mov esi, eax
push esi
push 0x1f1d0139
jmp 0x105fded
call fcn.0108edc3
mov esi, eax
push esi
push 0x1f280139
jmp 0x105fded
push esi
push 0x1ef10139
jmp 0x105fded
mov esi, 0x800700b7
push esi
push 0x1ef70139
jmp 0x105fded
call fcn.0108edc3
mov esi, eax
push esi
push 0x1f000139
jmp 0x105fded
xor esi, esi
cmp dword [ebp - 0x14], edi
je 0x105fe85
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 4], edi
je 0x105fe93
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0xc], edi
je 0x105fea1
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
cmp dword [ebp - 8], edi
je 0x105feaf
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
cmp dword [ebp - 0x10], edi
je 0x105febe
push edi
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0xc