Function at 0x140139b9f
Capabilities:
Authenticate hmac
Get common file path

Disassembly:
push rax
pushf
mov eax, 0x2f8e9d0f
pushf
not eax
add eax, 0x4eb6822c
xor eax, 0x1f474c02
rol eax, 0x59
popf
pushf
not eax
add eax, 0x624a663b
xor eax, 0x2649a4e8
rol eax, 0x65
popf
cmp eax, 0xa
jne 0x140139bdc
popf
pop rax
jmp 0x14013a2aa
cmp eax, 0
jne 0x140139beb
popf
pop rax
jmp 0x140139c81
cmp eax, 4
jne 0x140139bfa
popf
pop rax
jmp 0x140139f80
cmp eax, 0xb
jne 0x140139c09
popf
pop rax
jmp 0x14013a2f8
cmp eax, 2
jne 0x140139c18
popf
pop rax
jmp 0x140139e7a
cmp eax, 6
jne 0x140139c27
popf
pop rax
jmp 0x14013a0fe
cmp eax, 7
jne 0x140139c36
popf
pop rax
jmp 0x14013a167
cmp eax, 3
jne 0x140139c45
popf
pop rax
jmp 0x140139f0e
cmp eax, 1
jne 0x140139c54
popf
pop rax
jmp 0x140139de5
cmp eax, 5
jne 0x140139c63
popf
pop rax
jmp 0x14013a04f
cmp eax, 9
jne 0x140139c72
popf
pop rax
jmp 0x14013a265
cmp eax, 8
jne 0x140139c81
popf
pop rax
jmp 0x14013a1d2
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x240
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rsp + 0x230], rax
xor edx, edx
lea rcx, [rsp + 0x20]
mov r8d, 0xf8da1ac2
pushf
not r8d
add r8d, 0x1ea73ae7
xor r8d, 0x2249ac23
rol r8d, 0x48
popf
pushf
not r8d
add r8d, 0x39507fe8
xor r8d, 0x13a7376
rol r8d, 0x80
popf
pushf
not r8d
add r8d, 0x4b5c5c1
xor r8d, 0xeb7ba6b
rol r8d, 3
popf
call fcn.14002a540
lea rdx, [rsp + 0x20]
mov ecx, 0xaa566e2c
pushf
not ecx
add ecx, 0x7959c5e
xor ecx, 0x19119492
rol ecx, 0xac
popf
pushf
not ecx
add ecx, 0x47a0e9da
xor ecx, 0x19f5c468
rol ecx, 0xc
popf
pushf
not ecx
add ecx, 0x37bf8f3f
xor ecx, 0x289f9b16
rol ecx, 0x25
popf
jmp 0x140139d4c
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
cmp eax, 0x104
ja 0x140139d9f
push rax
pushf
mov eax, 0x87761122
pushf
not eax
add eax, 0x7ea45d9b
xor eax, 0x3cbc4677
rol eax, 0x93
popf
pushf
not eax
add eax, 0x61c9981c
xor eax, 0x498efa0a
rol eax, 0x75
popf
pushf
not eax
add eax, 0x414bcfa7
xor eax, 0x5120b6ee
rol eax, 0xa2
popf
jmp 0x140139bcd
push rax
pushf
mov eax, 0x529ad0f7
pushf
not eax
add eax, 0x11934a4f
xor eax, 0x7c458abd
rol eax, 0x54
popf
pushf
not eax
add eax, 0x5b3371f
xor eax, 0xdb41643
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x61257bae
xor eax, 0x43a8b2fa
rol eax, 0xd9
popf
jmp 0x140139bcd
xor edi, edi
cmp word [rsp + 0x20], di
je 0x140139e21
push rax
pushf
mov eax, 0x84ade5c
pushf
not eax
add eax, 0x3336dd9
xor eax, 0x1ef59769
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x5be2be58
xor eax, 0x1a117cf9
rol eax, 0x73
popf
jmp 0x140139bcd
push rax
pushf
mov eax, 0x931bf75c
pushf
not eax
add eax, 0x2c55c13d
xor eax, 0x1a2be34e
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x61db69f
xor eax, 0x27e71ff1
rol eax, 0x64
popf
pushf
not eax
add eax, 0x914315a
xor eax, 0x1274ccc6
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x54132f55
xor eax, 0x7bbc28a9
rol eax, 0x1b
popf
jmp 0x140139bcd
cmp word [rsp + 0x22], 0x3a
jne 0x140139edb
push rax
pushf
mov eax, 0x52f77
pushf
not eax
add eax, 0x53c54981
xor eax, 0x2d1284fb
rol eax, 0x89
popf
pushf
not eax
add eax, 0x6cde52b8
xor eax, 0x44e3c261
rol eax, 0x12
popf
pushf
not eax
add eax, 0x73f8a0a9
xor eax, 0x29c9f2ce
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x5d2c3a87
xor eax, 0x35d76231
rol eax, 0x6e
popf
jmp 0x140139bcd
push rax
pushf
mov eax, 0xdf74ef67
pushf
not eax
add eax, 0x5836e8ab
xor eax, 0x38cac15c
rol eax, 0x36
popf
pushf
not eax
add eax, 0x583e9aaf
xor eax, 0x506ecfe0
rol eax, 0x35
popf
jmp 0x140139bcd
movzx ecx, word [rsp + 0x20]
lea eax, [rcx - 0x61]
cmp eax, 0x19
lea edi, [rcx - 0x20]
cmova edi, ecx
sub edi, 0x40
jmp 0x14013a2f8
lea esi, [rax + 1]
mov edx, 0x5b884add
pushf
not edx
add edx, 0x6a37fa8d
xor edx, 0xe23d17f
rol edx, 0xe5
popf
pushf
not edx
add edx, 0x731748fe
xor edx, 0x71876efd
rol edx, 0x45
popf
mov ecx, esi
call fcn.140136acd
xor edi, edi
mov rbx, rax
test rax, rax
je 0x14013a01c
push rax
pushf
mov eax, 0x9cbe24e3
pushf
not eax
add eax, 0x6a9b9a56
xor eax, 0x2033e26e
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x7fcb01f9
xor eax, 0x361fafaf
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x13436ea2
xor eax, 0x1856c0e2
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x5a4dbcec
xor eax, 0x69fb6846
rol eax, 0xa3
popf
jmp 0x140139bcd
push rax
pushf
mov eax, 0xfb52e1c4
pushf
not eax
add eax, 0x36ca350c
xor eax, 0x1473dd29
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x559d67af
xor eax, 0x4363ae92
rol eax, 0x5c
popf
jmp 0x140139bcd
mov rdx, rax
mov ecx, esi
jmp 0x14013a055
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
test eax, eax
jne 0x14013a0a5
push rax
pushf
mov eax, 0x7f7555cf
pushf
not eax
add eax, 0x7b885754
xor eax, 0x107144c3
rol eax, 0x44
popf
pushf
not eax
add eax, 0x3e541a61
xor eax, 0x7145dedc
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x1748efbd
xor eax, 0x3dded47e
rol eax, 0x85
popf
jmp 0x140139bcd
push rax
pushf
mov eax, 0x8181391
pushf
not eax
add eax, 0x51bee3ac
xor eax, 0x3ef753a0
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x2f7c06a2
xor eax, 0x4faf17a3
rol eax, 0x46
popf
pushf
not eax
add eax, 0x7d13e6fd
xor eax, 0x4ad9d4db
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x13f396fe
xor eax, 0x427c5299
rol eax, 0xf8
popf
jmp 0x140139bcd
call fcn.1400e5531
mov dword [rax], 0xc
jmp 0x14013a2aa
cmp word [rbx], di
je 0x14013a19f
push rax
pushf
mov eax, 0x26df0782
pushf
not eax
add eax, 0x69be2b01
xor eax, 0x5020e2c5
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x4eb8b7a
xor eax, 0x48cfda4a
rol eax, 0x45
popf
jmp 0x140139bcd
push rax
pushf
mov eax, 0x7c25f13d
pushf
not eax
add eax, 0x5d986e4b
xor eax, 0x2e3dfe3
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x5d654a7b
xor eax, 0x6f2c3064
rol eax, 0x3e
popf
jmp 0x140139bcd
cmp word [rbx + 2], 0x3a
jne 0x14013a20c
push rax
pushf
mov eax, 0x4cadd756
pushf
not eax
add eax, 0x3968fda0
xor eax, 0x7170743b
rol eax, 3
popf
pushf
not eax
add eax, 0x48f1dc18
xor eax, 0x5a974813
rol eax, 0x7c
popf
jmp 0x140139bcd
push rax
pushf
mov eax, 0x48ac384a
pushf
not eax
add eax, 0x4de6b7e
xor eax, 0x468bec17
rol eax, 0x11
popf
pushf
not eax
add eax, 0x4d806de9
xor eax, 0x1a9c416e
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x797b2585
xor eax, 0x116d65a9
rol eax, 0xb
popf
pushf
not eax
add eax, 0x2305f5fe
xor eax, 0x4471b6ae
rol eax, 0x1b
popf
jmp 0x140139bcd
movzx ecx, word [rbx]
lea eax, [rcx - 0x61]
cmp eax, 0x19
lea edi, [rcx - 0x20]
cmova edi, ecx
sub edi, 0x40
push rax
pushf
mov eax, 0x635f4069
pushf
not eax
add eax, 0x1116de5b
xor eax, 0x1d1dfacb
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x49b16cb8
xor eax, 0xf00c850
rol eax, 0x18
popf
jmp 0x140139bcd
mov rcx, rbx
call fcn.140117085
push rax
pushf
mov eax, 0x170267a
pushf
not eax
add eax, 0x2ee4cf1b
xor eax, 0x63e66760
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x4afa1e63
xor eax, 0x4d8d0efb
rol eax, 0x51
popf
pushf
not eax
add eax, 0x30beeb32
xor eax, 0x3cf9a208
rol eax, 0x36
popf
jmp 0x140139bcd
mov eax, edi
mov rcx, qword [rsp + 0x230]
xor rcx, rsp
call fcn.140098ae9
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret