Function at 0x140023e60
Capabilities:
Authenticate hmac
Get disk information
Read file on windows

Disassembly:
xchg rsp, r14
mov rax, r14
xchg rsp, r14
xchg r8, rbx
mov qword [rax + 0x10], r8
xchg rbx, r8
jmp 0x14002411b
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
jmp 0x1400240d6
xchg r15, r14
lea rdx, [rsp + 0x1a0]
mov ecx, 0x50431e7a
jmp 0x140023f11
mov dword [rsp - 0x34], ecx
movd xmm8, r15d
nop dword [rax]
nop word [rax + rax]
movd xmm2, ecx
jmp 0x140024416
xor byte [r8 - 1], al
mov rbp, rbp
cmp ecx, 0x11
jl 0x140024144
jmp 0x140023f68
mov rbp, rbp
sub rsp, 0x320
xchg r10, rax
jmp 0x1400241bf
mov dword [rsp - 0x10], 0x7033f9fe
movdqa xmm0, xmmword [str.2222222222222222]
lea rdx, [rsp + 0x24]
movdqa xmm5, xmmword [0x14010c2c0]
movdqa xmm4, xmmword [0x14010d420]
jmp 0x14002430a
xor ecx, 0x1b90b39d
add ecx, 0xebcc64e
sub ecx, 0xf74e124
add ecx, 0x2d78730b
jmp 0x14002436c
xchg r12, rax
movaps xmmword [rax - 0x48], xmm8
mov rax, qword [0x140248220]
jmp 0x140023fde
mov ebp, 0x53ad145c
xor ebp, 0x64a150bd
xor ebp, 0x7a2c1023
add ebp, 0xbd2fed6
jmp 0x1400242a4
jne 0x1400242c1
jmp 0x140024658
lea r8, [rsp + 0x190]
lea rdx, [rsp + 0x20]
mov rdx, rdx
lea rcx, [rsp + 0x1e0]
call fcn.14000e200
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1e0]
jmp 0x140024359
pmuldq xmm0, xmm4
mov dword [rsp - 0x44], 0x25a0e0b4
movd dword [rdx - 0xc], xmm2
jmp 0x1400243c4
lea rdx, [rdx + 8]
mov dword [rsp - 0x2c], 0x386a046c
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
jmp 0x140024282
xchg rdx, rdx
shr eax, 0xc
shr eax, 0xc
jmp 0x140024273
mov dword [rsp - 0x3c], edx
xor rax, rsp
xchg rbx, rax
mov qword [rsp + 0x2e0], rbx
xchg rbx, rax
xchg r15, r14
mov r15, rcx
jmp 0x140023e8b
imul ecx
sar edx, 3
sar edx, 1
mov eax, edx
jmp 0x140023fd0
inc rax
cmp byte [rbx + rax], 0
jne 0x14002400a
inc rbx
mov dword [rsp - 0x10], 0x43167602
add rbx, rax
cmp byte [rbx], 0
jmp 0x140023f5d
jne 0x14002445c
nop
movabs rax, 0xffffffff1b167ea6
xor rax, 0xf5a8bec
add rax, 0x2c7ccda8
sub rax, 0x1aae7f3c
add rax, 0x53f4d94d
jmp 0x14002412d
add rax, 0x7fffffff
add rax, 0x52cf7960
nop word [rax + rax]
xchg r13, r13
jmp 0x14002400a
xchg rdi, rax
cmp rax, 0xffffffffffffffff
mov dword [rsp - 0x2c], esp
jmp 0x14002402d
je 0x140024658
cmp byte [rsp + 0x1a0], 0
lea rbx, [rsp + 0x1a0]
jmp 0x140024427
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
pxor xmm2, xmm0
mov dword [rsp - 0x38], ebx
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
jmp 0x140023f97
mov qword [rax + 0x20], r10
xchg rsi, r10
nop
sub rsp, 8
mov qword [rsp], rdi
push r14
push r15
jmp 0x140023ed6
xchg r12, r12
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
pand xmm2, xmmword [0x14010c300]
jmp 0x140024230
add eax, 0x67367aaf
xor eax, 0x21aa45de
sub eax, 0x9df5294
lea r8, [r8 + 1]
xchg rsi, rsi
jmp 0x140023ffc
movzx eax, cl
inc ecx
mov rbx, rbx
sub al, dl
add al, 0x32
jmp 0x140023ec1
xchg r15, rbp
mov qword [rax + 0x18], r15
xchg rbp, r15
xchg r10, rsi
jmp 0x1400240bd
xor rax, 0x5850c28b
xor rax, 0x762f3372
sub rax, 0x273f665a
jmp 0x14002405b
mov eax, 0x11c27a9f
add eax, 0x1310b79f
sub eax, 0x6cef5bb
add eax, 0x3f9ffb5
sub eax, 0x2ca1069
xor eax, 0x13e88e69
jmp 0x1400240ef
xchg r10, r10
movzx eax, byte [rbx]
mov byte [rsp + 0x190], al
jmp 0x1400241a1
psubd xmm3, xmm0
mov dword [rsp - 0x1c], 0x6b87bec3
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
mov r12, r12
pshufd xmm2, xmm1, 0xd8
jmp 0x1400243f0
call qword [sym.imp.KERNEL32.dll_GetDriveTypeA]
xchg r15, r15
cmp eax, 5
jne 0x140024033
movups xmm0, xmmword [0x14010cd80]
jmp 0x14002443b
movaps xmmword [r10 - 0x28], xmm6
xchg r10, rax
xchg r12, rax
movaps xmmword [r12 - 0x38], xmm7
jmp 0x140023f2e
mov rdx, rdx
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
mov rsp, rsp
pmulld xmm0, xmm7
jmp 0x140023e78
mov dword [rsp + 0x190], 0x771b3a3c
sub dword [rsp + 0x190], 0x6fc6d3a3
add dword [rsp + 0x190], 0x718cc234
xor dword [rsp + 0x190], 0x1f3d1853
sub dword [rsp + 0x190], 0x5dd216ba
jmp 0x140024383
xchg rcx, rcx
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
mov r15, r15
jmp 0x14002409f
xchg rsi, rsp
cmp esi, 2
jl 0x1400242e3
jmp 0x140023ee7
neg ecx
add ecx, 0xfffffff8
neg ecx
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x1400241d3
shr eax, 3
shr eax, 3
shr eax, 1
add edx, eax
jmp 0x140024334
mov dword [rsp - 0x1c], esp
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
mov dword [rsp - 0x18], edi
pmuldq xmm0, xmm4
jmp 0x14002425e
sub ebp, 0x31f7107a
sub ebp, 0x23b45886
sub ebp, 0x347ea94
lea r15d, [rbp + 0x1b]
mov dword [rsp - 0x1c], ebx
nop dword [rax]
xor eax, eax
jmp 0x1400241f4
xor ecx, 0x5e0ab982
call qword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsA]
mov dword [rsp - 0x3c], edx
test eax, eax
jmp 0x140024084
mov dword [rsp - 0x24], esp
movsxd rax, ecx
lea r8, [rsp + 0x20]
add r8, rax
nop dword [rax]
mov dword [rsp - 0xc], 0x29889158
nop word [rax + rax]
jmp 0x140024144
mov dword [rsp - 0x44], 0x12c77f49
movdqa xmm7, xmmword [str.6666]
xchg r14, rsp
movdqa xmmword [r14 + 0x40], xmm0
xchg rsp, r14
mov r8d, dword [rsp + 0x40]
movd xmm6, ebp
jmp 0x140023ea0
mov dword [rsp - 0x20], edx
movsx eax, dl
imul edx, eax, 0x36
jmp 0x14002410a
xchg rdi, rdi
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
jmp 0x140024179
xchg r13, r13
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
xchg rdi, rax
mov rax, rdi
jmp 0x140024075
sub ecx, 0x31e357ac
sub ecx, 0x36e1292a
add ecx, 0x4e3b347c
jmp 0x1400242c8
add dword [rsp + 0x190], 0xefdee7a
add dword [rsp + 0x190], 0x121a102c
xor dword [rsp + 0x190], 0x129d3f43
sub dword [rsp + 0x190], 0x3962ed8a
mov word [rsp + 0x194], ax
lea rcx, [rsp + 0x190]
jmp 0x140024167
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
jmp 0x140024343
mov dword [rsp - 0x20], edx
cmp ecx, 0x10
jl 0x140023eb8
cmp ecx, 0x11
jge 0x140023f68
jmp 0x1400242df
pand xmm2, xmmword [0x14010c300]
packuswb xmm2, xmm2
xchg rbp, rbp
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
pxor xmm2, xmm0
movd dword [rdx - 8], xmm2
jmp 0x1400243d5
mov dword [rsp - 0x28], esi
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
jmp 0x140023fae
xchg rcx, rcx
je 0x140024658
mov esi, dword [0x140248200]
jmp 0x140023f41
movzx eax, byte [0x14010cd90]
mov dword [rsp - 0x10], 0x4a7c07a6
xor ecx, ecx
mov byte [rsp + 0x30], al
xchg rsp, rsi
movups xmmword [rsi + 0x20], xmm0
jmp 0x14002424d
lea rdx, [0x14010cd94]
lea rcx, [rsp + 0x1e0]
mov dword [rsp - 0x2c], 0x4b16fbb1
call fcn.1400e903c
jmp 0x140024605
xor r8d, 0x227ac7e4
xor r8d, 0x3611af4e
sub r8d, 0x2a60cd77
jmp 0x1400244f6
mov rdi, rcx
xchg rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rdi, rdi
test rbp, rbp
je 0x140024658
lea rcx, [r14 + 0x50d]
jmp 0x1400244c9
mov r13, rsi
xchg rcx, r13
movsxd rbx, eax
jmp 0x14002459e
mov dword [rsp - 0x30], 0x6af97c9a
mov byte [r14 + 0x50c], 0
xor byte [r14 + 0x50c], 0x6f
xor byte [r14 + 0x50c], 0x21
add byte [r14 + 0x50c], 0x21
jmp 0x14002450f
mov rdx, rbp
call fcn.1400de9c0
mov dword [rsp - 0x3c], esi
mov rcx, rbp
call fcn.1400dc808
jmp 0x140024640
sub byte [r14 + 0x50c], 0x5c
add byte [r14 + 0x50c], 0x32
sub byte [r14 + 0x50c], 0x44
mov r8d, 0x67d6bba8
jmp 0x140024532
sub r8d, 0x43f21a24
add r8d, 0x4c45bd9f
sub r8d, 0x6a79c39e
add r8d, 0x385b1a58
jmp 0x14002447d
call fcn.1400dcc40
xchg r13, rsi
mov r9, r13
xchg rsi, r13
jmp 0x1400245dc
xchg rdx, rax
mov rcx, rdx
xchg rdx, rax
lea r8d, [rdx + 2]
call fcn.1400e9578
xchg rsi, rsi
xchg rsp, rcx
jmp 0x1400245ef
xchg rbp, r13
mov r13, rax
xchg rbp, r13
call fcn.1400e92a8
mov dword [rsp - 0x40], ebp
xchg rcx, rsi
mov rsi, rcx
jmp 0x14002462d
mov dword [rsp - 0x30], 0x72026daa
call fcn.1400e9a7c
xchg rcx, rsp
mov rsp, rbx
xchg rsp, rcx
jmp 0x140024553
add edx, 0x44e48552
xor edx, 0x73fcd8dc
add edx, 0x56c9b350
sub edx, 0x12bcc6ce
xor edx, 0x6cc148b5
jmp 0x14002461f
xchg rbx, r8
mov rbx, r8
xchg rbx, r8
mov edx, 0x1663ff9c
jmp 0x1400245b9
mov rsp, rsi
xchg rcx, rsp
call fcn.1400e9a74
xchg rdx, rdx
xchg rcx, r13
jmp 0x1400244bb
xchg rdx, rax
mov rsi, rdx
xchg rdx, rax
test rax, rax
je 0x140024645
xor edx, edx
xchg rsp, rsp
jmp 0x140024566
xchg rsi, rcx
mov rsi, rax
xchg rcx, rsi
jmp 0x140024581
xchg rsi, rcx
call fcn.1400e8f1c
xchg rdx, rdx
xchg rdi, rcx
jmp 0x140024497
jmp 0x1400246cb
xchg rdi, rcx
mov rdi, rcx
xchg rdi, rcx
call qword [sym.imp.KERNEL32.dll_FindClose]
mov dword [rsp - 0x14], ebx
mov byte [r14 + 0x50c], 0x2c
xor byte [r14 + 0x50c], 0x76
jmp 0x1400246db
lea r11, [rsp + 0x320]
xchg rbx, r10
mov r10, qword [r11 + 0x28]
xchg r10, rbx
xchg rdi, rbp
mov rdi, qword [r11 + 0x30]
xchg rbp, rdi
jmp 0x14002468e
xchg rsi, r8
mov r8, qword [r11 + 0x38]
xchg rsi, r8
movaps xmm6, xmmword [r11 - 0x10]
mov dword [rsp - 0x38], esi
movaps xmm7, xmmword [r11 - 0x20]
jmp 0x14002470b
xor byte [r14 + 0x50c], 0xc
sub byte [r14 + 0x50c], 0x22
xor byte [r14 + 0x50c], 0x45
sub byte [r14 + 0x50c], 0x46
xchg rcx, r13
mov r13, qword [rsp + 0x2e0]
jmp 0x140024725
sub byte [r14 + 0x50c], 0x43
add byte [r14 + 0x50c], 0x24
xor byte [r14 + 0x50c], 0x12
jmp 0x1400246ab
mov r14, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
xchg r12, r12
nop
mov r15, qword [rsp]
add rsp, 8
nop
jmp 0x1400246f8
xchg r13, rcx
xor rcx, rsp
call fcn.1400dc920
mov dword [rsp - 0xc], 0x7de1fb12
jmp 0x14002466d