Function at 0x14009aee0
Capabilities:
Hash data via bcrypt

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x160]
sub rsp, 0x260
mov rax, qword [0x1401c73e8]
xor rax, rsp
mov qword [rbp + 0x150], rax
movsxd rbx, edx
mov rdi, rcx
test rcx, rcx
je 0x14009afa1
mov esi, 4
lea ecx, [rsi - 2]
cmp ebx, 3
jle 0x14009af3d
cmp word [rbx + rdi - 3], 0x2d2d
jne 0x14009af3d
cmp byte [rbx + rdi - 1], 0x3e
jne 0x14009af3d
mov esi, 6
mov ecx, 3
sub ebx, ecx
sub ebx, esi
sub ebx, 0x80
js 0x14009afa1
mov dword [r8], ebx
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SHA256
lea rcx, [rsp + 0x60]
call qword [sym.imp.bcrypt.dll_BCryptOpenAlgorithmProvider]
test eax, eax
js 0x14009afa1
xor r14d, r14d
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.bcrypt.dll_BCryptCreateHash]
test eax, eax
jns 0x14009afc0
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
xor al, al
mov rcx, qword [rbp + 0x150]
xor rcx, rsp
call fcn.140122510
add rsp, 0x260
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
xor r9d, r9d
mov r8d, ebx
mov rdx, rdi
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.bcrypt.dll_BCryptHashData]
test eax, eax
jns 0x14009aff2
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.bcrypt.dll_BCryptDestroyHash]
jmp 0x14009afa1
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
xor r9d, r9d
lea r8d, [r9 + 0x20]
lea rdx, [rbp + 0xa0]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.bcrypt.dll_BCryptFinishHash]
test eax, eax
js 0x14009afd8
xor r9d, r9d
xor r8d, r8d
lea rdx, str.ECDSA_P256
lea rcx, [rsp + 0x70]
call qword [sym.imp.bcrypt.dll_BCryptOpenAlgorithmProvider]
test eax, eax
js 0x14009afd8
mov dword [rsp + 0x40], 0x31534345
mov dword [rsp + 0x44], 0x20
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x100], rax
movaps xmm0, xmmword [0x140199cf0]
movups xmmword [rbp + 0x108], xmm0
movaps xmm1, xmmword [0x140199d00]
movups xmmword [rbp + 0x118], xmm1
movaps xmm0, xmmword [0x140199d10]
movups xmmword [rbp + 0x128], xmm0
movaps xmm1, xmmword [0x140199d20]
movups xmmword [rbp + 0x138], xmm1
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], 0x48
lea rax, [rbp + 0x100]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x78]
lea r8, str.ECCPUBLICBLOB
xor edx, edx
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.bcrypt.dll_BCryptImportKeyPair]
test eax, eax
jns 0x14009b0ea
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.bcrypt.dll_BCryptDestroyHash]
xor edx, edx
mov rcx, qword [rsp + 0x70]
jmp 0x14009af9b
xor eax, eax
mov byte [rbp + 0x20], al
lea eax, [rbx + rsi]
add rax, rdi
je 0x14009b138
movups xmm0, xmmword [rax]
movaps xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp - 0x50], xmm1
movups xmm0, xmmword [rax + 0x20]
movaps xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x30]
movaps xmmword [rbp - 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movaps xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x50]
movaps xmmword [rbp - 0x10], xmm1
movups xmm0, xmmword [rax + 0x60]
movaps xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x70]
movaps xmmword [rbp + 0x10], xmm1
jmp 0x14009b16b
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
call fcn.140129b90
mov dword [rax], reloc.OLEAUT32.dll_SafeArrayAccessData
call fcn.1401297a0
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], reloc.OLEAUT32.dll_SafeArrayDestroy
mov byte [rbp - 0x80], r14b
lea rax, [rbp - 0x60]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], r14b
jne 0x14009b1b0
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x80]
call fcn.140028df0
nop
lea rdi, str.SignatureUtils.cpp
lea rsi, vtable.std::ios_base.0
mov rax, qword [rbp - 0x70]
cmp rax, 0x80
jae 0x14009b2a7
call fcn.1400595a0
mov r8d, 1
lea rdx, [rbp - 0x60]
mov rcx, rax
call fcn.140059480
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x48], 0x2b
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x60]
call fcn.140026620
lea rdx, str.Hex_string_length_less_than_required
lea rcx, [rbp - 0x60]
call fcn.140026650
lea rcx, [rbp + 0x38]
call fcn.14005be70
nop
mov qword [rbp + 0x38], rsi
lea rcx, [rbp + 0x38]
call fcn.1400fa82c
nop
lea rcx, [rbp - 0x80]
call fcn.140028ff0
call fcn.1400595a0
mov r8d, 1
lea rdx, [rbp - 0x60]
mov rcx, rax
call fcn.140059480
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x48], 0xcb
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x60]
call fcn.140026620
lea rdx, str.Unable_to_convert_hex_string_into_binary
lea rcx, [rbp - 0x60]
call fcn.140026650
lea rcx, [rbp + 0x38]
call fcn.14005be70
nop
mov qword [rbp + 0x38], rsi
lea rcx, [rbp + 0x38]
call fcn.1400fa82c
nop
jmp 0x14009b349
mov rbx, r14
nop word [rax + rax]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], reloc.OLEAUT32.dll_SafeArrayDestroy
cmp rax, rbx
jb 0x14009b417
sub rax, rbx
mov r8d, 2
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
add rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140028df0
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
xor edx, edx
lea r8d, [rdx + 0x10]
call fcn.14012a930
mov rcx, rbx
shr rcx, 1
mov byte [rbp + rcx + 0xc0], al
lea rcx, [rsp + 0x40]
call fcn.140028ff0
add rbx, 2
cmp rbx, 0x80
jae 0x14009b340
mov rax, qword [rbp - 0x70]
jmp 0x14009b2b0
lea rcx, [rbp - 0x80]
call fcn.140028ff0
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], 0x40
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
lea r8, [rbp + 0xa0]
xor edx, edx
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.bcrypt.dll_BCryptVerifySignature]
test eax, eax
setns bl
test eax, eax
jns 0x14009b3df
call fcn.1400595a0
mov r8d, 1
lea rdx, [rbp - 0x60]
mov rcx, rax
call fcn.140059480
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x48], 0xd3
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x60]
call fcn.140026620
lea rdx, str.File_Signature_Verification_failed
lea rcx, [rbp - 0x60]
call fcn.140026650
lea rcx, [rbp + 0x38]
call fcn.14005be70
nop
mov qword [rbp + 0x38], rsi
lea rcx, [rbp + 0x38]
call fcn.1400fa82c
nop
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
xor edx, edx
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.bcrypt.dll_BCryptDestroyHash]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.bcrypt.dll_BCryptDestroyKey]
movzx eax, bl
jmp 0x14009afa3
call fcn.140029940
int3