Function at 0x4b4400
Capabilities:
Hash data via bcrypt

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x140
mov eax, dword [0x6d3438]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x134], eax
test edi, edi
je 0x4b44bc
mov ebx, 4
lea ecx, [ebx - 2]
cmp esi, 3
jle 0x4b4468
mov edx, dword [0x6d15dc]
movzx eax, word [esi + edi - 3]
cmp ax, word [edx]
jne 0x4b4462
movzx eax, byte [esi + edi - 1]
cmp al, byte [edx + 2]
mov eax, dword [ebp - 0x134]
jne 0x4b4468
lea ebx, [ecx + 4]
lea ecx, [ebx - 3]
jmp 0x4b4468
mov eax, dword [ebp - 0x134]
sub esi, ecx
sub esi, ebx
sub esi, 0x80
js 0x4b44bc
push 0
push 0
mov dword [eax], esi
lea eax, [ebp - 0x138]
push str.SHA256
push eax
call sub.bcrypt.dll_BCryptOpenAlgorithmProvider
test eax, eax
js 0x4b44bc
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x134]
push eax
push dword [ebp - 0x138]
call sub.bcrypt.dll_BCryptCreateHash
push 0
test eax, eax
jns 0x4b44cf
push dword [ebp - 0x138]
call sub.bcrypt.dll_BCryptCloseAlgorithmProvider
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00608185
mov esp, ebp
pop ebp
ret
push esi
push edi
push dword [ebp - 0x134]
call sub.bcrypt.dll_BCryptHashData
push 0
test eax, eax
jns 0x4b450b
push dword [ebp - 0x138]
call sub.bcrypt.dll_BCryptCloseAlgorithmProvider
push dword [ebp - 0x134]
call sub.bcrypt.dll_BCryptDestroyHash
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00608185
mov esp, ebp
pop ebp
ret
push 0x20
lea eax, [ebp - 0x24]
xorps xmm0, xmm0
push eax
push dword [ebp - 0x134]
movups xmmword [ebp - 0x24], xmm0
movups xmmword [ebp - 0x14], xmm0
call sub.bcrypt.dll_BCryptFinishHash
push 0
test eax, eax
js 0x4b44e2
push 0
push 0x6a6970
lea eax, [ebp - 0x13c]
push eax
call sub.bcrypt.dll_BCryptOpenAlgorithmProvider
push 0
test eax, eax
js 0x4b44e2
movups xmm0, xmmword [0x6601e0]
push 0x48
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0x31534345
movups xmmword [ebp - 0x64], xmm0
push eax
movups xmm0, xmmword [0x6601f0]
lea eax, [ebp - 0x140]
mov dword [ebp - 0x68], 0x20
push eax
movups xmmword [ebp - 0x54], xmm0
push str.ECCPUBLICBLOB
movups xmm0, xmmword [0x660200]
push 0
push dword [ebp - 0x13c]
movups xmmword [ebp - 0x44], xmm0
movups xmm0, xmmword [0x660210]
movups xmmword [ebp - 0x34], xmm0
call sub.bcrypt.dll_BCryptImportKeyPair
test eax, eax
jns 0x4b45c8
push 0
push dword [ebp - 0x138]
call sub.bcrypt.dll_BCryptCloseAlgorithmProvider
push dword [ebp - 0x134]
call sub.bcrypt.dll_BCryptDestroyHash
push 0
push dword [ebp - 0x13c]
jmp 0x4b44b7
add esi, edi
mov byte [ebp - 0xb0], 0
add esi, ebx
je 0x4b45e4
mov ecx, 0x20
lea edi, [ebp - 0x130]
rep movsd dword es:[edi], dword [esi]
jmp 0x4b460a
push 0x80
lea eax, [ebp - 0x130]
push 0
push eax
call fcn.0060a8e0
add esp, 0xc
call fcn.0060e1be
mov dword [eax], 0x16
call fcn.0060e0c0
push 0x40
lea eax, [ebp - 0xac]
push 0
push eax
call fcn.0060a8e0
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x130]
push 0x80
push eax
call fcn.004b46e0
add esp, 0x18
test al, al
jne 0x4b4657
push str.Unable_to_convert_hex_string_into_binary
push 0xd1
push str.XMLUpdater::v2::NSignatureCheck::ForceVerifySignature
push str.E:BT3f715c85_ff0b_44ed_ac13_dd63d3f5c42aWebAdvisor_XmlUpdater_srcXmlUpdaterSignatureCheck.cpp
push 1
call fcn.004acee0
add esp, 0x14
push 0
push 0x40
lea eax, [ebp - 0xac]
push eax
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0
push dword [ebp - 0x140]
call sub.bcrypt.dll_BCryptVerifySignature
test eax, eax
setns bl
test eax, eax
jns 0x4b469c
push str.File_Signature_Verification_failed
push 0xd9
push str.XMLUpdater::v2::NSignatureCheck::ForceVerifySignature
push str.E:BT3f715c85_ff0b_44ed_ac13_dd63d3f5c42aWebAdvisor_XmlUpdater_srcXmlUpdaterSignatureCheck.cpp
push 1
call fcn.004acee0
add esp, 0x14
push 0
push dword [ebp - 0x138]
call sub.bcrypt.dll_BCryptCloseAlgorithmProvider
push 0
push dword [ebp - 0x13c]
call sub.bcrypt.dll_BCryptCloseAlgorithmProvider
push dword [ebp - 0x134]
call sub.bcrypt.dll_BCryptDestroyHash
push dword [ebp - 0x140]
call sub.bcrypt.dll_BCryptDestroyKey
mov ecx, dword [ebp - 4]
mov al, bl
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00608185
mov esp, ebp
pop ebp
ret