Function at 0x140051ee0
Capabilities:
Hash data via bcrypt

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x130]
sub rsp, 0x230
mov rax, qword [0x1401c73e8]
xor rax, rsp
mov qword [rbp + 0x120], rax
movsxd rbx, edx
mov rdi, rcx
test rcx, rcx
je 0x140051f98
mov esi, 4
lea ecx, [rsi - 2]
cmp word [rbx + rdi - 3], 0x2d2d
jne 0x140051f38
cmp byte [rbx + rdi - 1], 0x3e
jne 0x140051f38
mov esi, 6
mov ecx, 3
sub ebx, ecx
sub ebx, esi
sub ebx, 0x80
js 0x140051f98
mov dword [r8], ebx
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SHA256
lea rcx, [rbp - 0x68]
call qword [sym.imp.bcrypt.dll_BCryptOpenAlgorithmProvider]
test eax, eax
js 0x140051f98
xor r14d, r14d
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.bcrypt.dll_BCryptCreateHash]
test eax, eax
jns 0x140051fb7
xor edx, edx
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
xor al, al
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.140122510
add rsp, 0x230
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
xor r9d, r9d
mov r8d, ebx
mov rdx, rdi
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.bcrypt.dll_BCryptHashData]
test eax, eax
jns 0x140051fe6
xor edx, edx
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.bcrypt.dll_BCryptDestroyHash]
jmp 0x140051f98
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
xor r9d, r9d
lea r8d, [r9 + 0x20]
lea rdx, [rbp + 0x70]
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.bcrypt.dll_BCryptFinishHash]
test eax, eax
js 0x140051fce
xor r9d, r9d
xor r8d, r8d
lea rdx, str.ECDSA_P256
lea rcx, [rbp - 0x58]
call qword [sym.imp.bcrypt.dll_BCryptOpenAlgorithmProvider]
test eax, eax
js 0x140051fce
mov dword [rsp + 0x40], 0x31534345
mov dword [rsp + 0x44], 0x20
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0xd0], rax
movaps xmm0, xmmword [0x140199cf0]
movups xmmword [rbp + 0xd8], xmm0
movaps xmm1, xmmword [0x140199d00]
movups xmmword [rbp + 0xe8], xmm1
movaps xmm0, xmmword [0x140199d10]
movups xmmword [rbp + 0xf8], xmm0
movaps xmm1, xmmword [0x140199d20]
movups xmmword [rbp + 0x108], xmm1
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], 0x48
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x50]
lea r8, str.ECCPUBLICBLOB
xor edx, edx
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.bcrypt.dll_BCryptImportKeyPair]
test eax, eax
jns 0x1400520d1
xor edx, edx
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.bcrypt.dll_BCryptDestroyHash]
xor edx, edx
mov rcx, qword [rbp - 0x58]
jmp 0x140051f92
xor eax, eax
mov byte [rbp + 0x60], al
lea eax, [rbx + rsi]
add rax, rdi
je 0x14005211f
movups xmm0, xmmword [rax]
movaps xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp - 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movaps xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x30]
movaps xmmword [rbp + 0x10], xmm1
movups xmm0, xmmword [rax + 0x40]
movaps xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x50]
movaps xmmword [rbp + 0x30], xmm1
movups xmm0, xmmword [rax + 0x60]
movaps xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x70]
movaps xmmword [rbp + 0x50], xmm1
jmp 0x140052152
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
call fcn.140129b90
mov dword [rax], reloc.OLEAUT32.dll_SafeArrayAccessData
call fcn.1401297a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], reloc.OLEAUT32.dll_SafeArrayDestroy
mov byte [rbp - 0x48], r14b
lea rax, [rbp - 0x20]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], r14b
jne 0x140052193
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x48]
call fcn.140028df0
nop
mov ebx, r14d
nop dword [rax]
movsxd rcx, ebx
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], reloc.OLEAUT32.dll_SafeArrayDestroy
mov rax, qword [rbp - 0x38]
cmp rax, rcx
jb 0x1400523db
sub rax, rcx
mov r8d, 2
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae rdx, qword [rbp - 0x48]
add rdx, rcx
lea rcx, [rsp + 0x58]
call fcn.140028df0
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rcx, qword [rsp + 0x58]
xor edx, edx
lea r8d, [rdx + 0x10]
call fcn.14012a930
mov ecx, ebx
test ebx, ebx
jns 0x140052223
lea ecx, [rbx + 1]
sar ecx, 1
movsxd rcx, ecx
mov byte [rbp + rcx + 0x90], al
lea rcx, [rsp + 0x58]
call fcn.140028ff0
add ebx, 2
cmp ebx, 0x80
jl 0x1400521b0
lea rcx, [rbp - 0x48]
call fcn.140028ff0
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], 0x40
lea rax, [rbp + 0x90]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
lea r8, [rbp + 0x70]
xor edx, edx
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.bcrypt.dll_BCryptVerifySignature]
test eax, eax
setns sil
test eax, eax
jns 0x1400523a6
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_AcquireSRWLockShared
mov rax, qword [0x1401dd1a8]
test rax, rax
je 0x1400522aa
lock inc dword [rax + 8]
movups xmm0, xmmword [0x1401dd1a0]
movups xmmword [rsp + 0x48], xmm0
movups xmmword [rsp + 0x78], xmm0
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_ReleaseSRWLockShared
nop
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea rdx, str.File_Signature_Verification_failed
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rsp + 0x48]
psrldq xmm0, 8
movq rcx, xmm0
test rcx, rcx
je 0x14005231d
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14005231d
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14005231d
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_AcquireSRWLockShared
mov rax, qword [0x1401dd1a8]
test rax, rax
je 0x140052339
lock inc dword [rax + 8]
movups xmm0, xmmword [0x1401dd1a0]
movups xmmword [rsp + 0x48], xmm0
movups xmmword [rbp - 0x78], xmm0
lea rcx, [0x1401dd1c0]
call sub.KERNEL32.dll_ReleaseSRWLockShared
nop
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea rdx, [rbp - 0x20]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
movups xmm0, xmmword [rsp + 0x48]
psrldq xmm0, 8
movq rcx, xmm0
test rcx, rcx
je 0x1400523a6
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400523a6
mov rbx, qword [rbp - 0x70]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x1400523a6
mov rcx, qword [rbp - 0x70]
mov rdx, qword [rcx]
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
xor edx, edx
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
xor edx, edx
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.bcrypt.dll_BCryptDestroyHash]
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.bcrypt.dll_BCryptDestroyKey]
movzx eax, sil
jmp 0x140051f9a
call fcn.140029940
int3