Function at 0x140005a9b
Capabilities:
Get file attributes
Read file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x1c8
lea rbp, [rsp + 0x80]
mov rax, qword [0x140017800]
xor rax, rbp
mov qword [rbp + 0x140], rax
mov qword [rbp - 0x38], rcx
test rcx, rcx
mov eax, 0x6c4cc742
mov ecx, 0x757f96b2
cmove ecx, eax
mov dword [rbp - 0x2c], ecx
mov eax, 0x784807c6
mov r10d, 0xe6cdf049
mov r11d, 0x229d0524
lea r12, [rbp + 0xe8]
lea r13, [rbp + 0x100]
mov r14d, 0x23d51e5c
mov r15d, 0x506604d3
cmp eax, 0x11f2078f
jg 0x140005b56
cmp eax, 0xdc7e4111
jle 0x140005bab
cmp eax, 0xa89c93f
jle 0x140005ce1
cmp eax, 0xed3b07c
jg 0x14000603b
cmp eax, 0xa89c940
je 0x140006098
cmp eax, 0xd531be4
jne 0x140005b09
cmp byte [rbp + 0x6a], 0
mov eax, 0xaff77a8b
mov ecx, 0xbd006a51
jmp 0x14000636a
cmp eax, 0x65421cea
jle 0x140005c0c
cmp eax, 0x760a4305
jg 0x140005d10
cmp eax, 0x6d813964
jle 0x140006078
cmp eax, 0x6d813965
je 0x1400060ae
cmp eax, 0x757f96b2
jne 0x140005b09
mov eax, 0x7302520
cmp eax, 0x3a271f16
je 0x1400060d5
cmp eax, 0x7302520
jne 0x140005b8e
mov qword [rbp + 0x58], r13
mov eax, 0x3a271f16
jmp 0x140005b8e
cmp eax, 0xb260ce91
jg 0x140005f6f
cmp eax, 0x8d2ff154
je 0x140006310
cmp eax, 0x8e3127d5
je 0x14000635c
cmp eax, 0xaff77a8b
jne 0x140005b09
mov rcx, qword [rbp + 0xe0]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_ZwClose]
mov r11d, 0x229d0524
mov r10d, 0xe6cdf049
add rsp, 0x20
mov rax, qword [rbp + 8]
mov eax, 0x6c4cc742
mov ecx, dword [rbp + 0x44]
mov dword [rbp + 0x48], ecx
jmp 0x140005b09
cmp eax, 0x47dbd63c
jg 0x140006006
cmp eax, 0x11f20790
je 0x140006378
cmp eax, 0x141cb9b9
je 0x1400063b5
cmp eax, 0x1524085e
jne 0x140005b09
xor ecx, ecx
mov qword [rbp + 0x98], rcx
mov dword [rbp + 0xa8], 0x240
lea rax, [rbp + 0xd0]
mov qword [rbp + 0xa0], rax
lea rax, [rbp + 0xb0]
mov qword [rax + 8], rcx
mov qword [rax], rcx
sub rsp, 0x60
mov qword [rsp + 0x48], rcx
mov eax, 1
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x20], rcx
mov dword [rsp + 0x50], 0
mov dword [rsp + 0x40], 0x20
mov dword [rsp + 0x28], 0x80
lea rcx, [rbp + 0xe0]
mov edx, 0x80000000
lea r8, [rbp + 0x90]
lea r9, [rbp + 0xc0]
call qword [sym.imp.ntoskrnl.exe_ZwCreateFile]
mov r11d, 0x229d0524
mov r10d, 0xe6cdf049
add rsp, 0x60
mov dword [rbp + 0x48], eax
test eax, eax
mov eax, 0x6c4cc742
mov ecx, 0xed3b07d
cmovns eax, ecx
jmp 0x140005b09
cmp eax, 0xdc7e4112
je 0x140006429
cmp eax, 0xde348482
je 0x140006464
cmp eax, 0xf57655e9
jne 0x140005b09
mov rax, qword [rbp - 0x28]
mov eax, 0xb260ce92
jmp 0x140005b09
cmp eax, 0x760a4306
je 0x140006474
cmp eax, 0x784807c6
je 0x14000648a
cmp eax, 0x7ec317cb
jne 0x140005b09
mov eax, 0x81b4fbc0
cmp eax, 0x184a5ea7
je 0x1400064df
cmp eax, 0x81b4fbc0
jne 0x140005d36
mov eax, 0xe6b8b1d4
cmp eax, 0x23d51e5b
jg 0x140005d7c
cmp eax, 0xdaef8cc1
jg 0x140005eaf
cmp eax, 0xa56d3a8f
je 0x140005f08
cmp eax, 0xcec20894
jne 0x140005d4d
mov qword [rbp + 0x20], r12
mov eax, 0xa56d3a8f
jmp 0x140005d4d
cmp eax, 0x5bf8ca5b
jg 0x140005eef
cmp eax, 0x23d51e5c
je 0x140005f1a
cmp eax, 0x42d34329
jne 0x140005d4d
mov rax, qword [rbp + 0x28]
mov edx, 0x1902b13b
cmp edx, 0x1902b13a
jle 0x140005dcb
cmp edx, 0x4b12a265
jg 0x140005df0
cmp edx, 0x1902b13b
je 0x140005e43
cmp edx, 0x32749a75
jne 0x140005da2
jmp 0x140005f28
cmp edx, 0x9b6618a5
je 0x140005e4d
cmp edx, 0x9bfff2fd
je 0x140005e64
cmp edx, 0x16da700e
jne 0x140005da2
mov edx, 0x9b6618a5
xor ecx, ecx
jmp 0x140005da2
cmp edx, 0x4b12a266
je 0x140005e71
cmp edx, 0x506604d3
jne 0x140005da2
movsxd rdx, dword [rbp + 0x6c]
mov qword [rbp + 0x100], rdx
mov rdx, qword [rbp + 0x100]
movsx edx, byte [rax + rdx]
mov dword [rbp + 0x40], edx
movsxd rdx, dword [rbp + 0x6c]
imul rbx, rdx, 0x94f2095
mov rdi, rbx
shr rdi, 0x3f
sar rbx, 0x21
add ebx, edi
imul ebx, ebx, 0x37
sub edx, ebx
mov dword [rbp + 0x54], edx
mov edx, 0x4b12a266
jmp 0x140005da2
mov edx, 0x16da700e
jmp 0x140005da2
mov dword [rbp + 0x6c], ecx
mov edx, dword [rbp + 0x6c]
cmp edx, 0x11
mov edx, 0x32749a75
cmovl edx, r15d
jmp 0x140005da2
mov edx, 0x9b6618a5
mov ecx, dword [rbp + 0x50]
jmp 0x140005da2
mov edx, dword [rbp + 0x54]
mov ebx, 0xca
sub ebx, edx
add edx, 0x15
and ebx, 0xe4
and edx, 0x1b
or edx, ebx
xor edx, dword [rbp + 0x40]
xor dl, 0xe4
mov rbx, qword [rbp + 0x100]
mov byte [rbp + rbx + 0xe8], dl
mov edx, dword [rbp + 0x6c]
inc edx
mov dword [rbp + 0x50], edx
mov edx, 0x9bfff2fd
jmp 0x140005da2
cmp eax, 0xdaef8cc2
je 0x140005f32
cmp eax, 0xe6b8b1d4
jne 0x140005d4d
mov qword [rbp + 0x100], r12
mov eax, 0xfa1a668e
cmp eax, 0xfa5d2a79
je 0x140005f44
cmp eax, 0xfa1a668e
jne 0x140005ecd
mov rax, qword [rbp + 0x100]
mov al, byte [rax + 0x10]
mov byte [rbp + 0x6c], al
mov eax, 0xfa5d2a79
jmp 0x140005ecd
cmp eax, 0x7030b566
jne 0x140005f56
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x28], rax
mov eax, 0x42d34329
jmp 0x140005d4d
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x58], rax
mov eax, 0x5bf8ca5c
jmp 0x140005d4d
mov qword [rbp + 0x30], r12
mov eax, 0x7030b566
jmp 0x140005d4d
mov eax, 0xcec20894
jmp 0x140005d4d
cmp byte [rbp + 0x67], 0
mov eax, 0xcec20894
cmovne eax, r14d
jmp 0x140005d4d
cmp byte [rbp + 0x6c], 0
setne byte [rbp + 0x67]
mov eax, 0xdaef8cc2
jmp 0x140005d4d
cmp eax, 0x5bf8ca5c
jne 0x140005d4d
mov rax, qword [rbp + 0x58]
mov eax, 0x184a5ea7
jmp 0x140005d36
cmp eax, 0xb260ce92
je 0x140006523
cmp eax, 0xbd006a51
je 0x140006533
cmp eax, 0xd9b11ced
jne 0x140005b09
xor ecx, ecx
mov qword [rbp + 0xe0], rcx
lea rax, [rbp + 0xd0]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov rax, qword [rbp - 0x10]
mov qword [rax + 8], rcx
mov qword [rax], rcx
lea rax, [rbp + 0xc0]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x18]
mov rax, qword [rbp - 0x18]
mov qword [rax + 8], rcx
mov qword [rax], rcx
lea rax, [rbp + 0x90]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x20]
mov rax, qword [rbp - 0x20]
mov qword [rax + 0x28], rcx
mov qword [rax + 0x20], rcx
mov qword [rax + 0x18], rcx
mov qword [rax + 0x10], rcx
mov qword [rax + 8], rcx
mov qword [rax], rcx
mov dword [rbp + 0x48], 0xc0000001
mov eax, dword [rbp - 0x2c]
jmp 0x140005b09
cmp eax, 0x47dbd63d
je 0x140006544
cmp eax, 0x4bd47556
je 0x140006560
cmp eax, 0x54bce7f9
jne 0x140005b09
mov rax, qword [rbp - 0x68]
mov dword [rax], 0x30
mov eax, 0x1524085e
jmp 0x140005b09
cmp eax, 0xed3b07d
je 0x140006594
cmp eax, 0x10e78ad3
jne 0x140005b09
mov rax, qword [rbp - 0x78]
mov qword [rbp], rax
mov rax, qword [rbp]
mov eax, dword [rax]
mov dword [rbp + 0x18], eax
mov eax, dword [rbp + 0x18]
cmp eax, 0x1000
seta byte [rbp + 0x6a]
mov eax, 0xd531be4
jmp 0x140005b09
cmp eax, 0x65421ceb
jne 0x1400068c6
lea rax, [rbp + 0x80]
mov qword [rbp - 0x78], rax
mov eax, 0x10e78ad3
jmp 0x140005b09
lea rax, [rbp + 0x70]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x28]
mov eax, 0x141cb9b9
jmp 0x140005b09
mov rcx, qword [rbp + 0x38]
sub rsp, 0x20
call fcn.1400032a9
mov r11d, 0x229d0524
mov r10d, 0xe6cdf049
add rsp, 0x20
mov eax, 0xf57655e9
jmp 0x140005b09
mov rcx, qword [rbp + 0x58]
sub rsp, 0x20
mov r8d, 0x3e
lea rdx, [0x14000a206]
call fcn.140009580
add rsp, 0x20
mov eax, 0xcdede82f
mov r8d, 0xacaeb601
mov r9d, 0xd9edd1d9
cmp eax, 0x23e667b1
je 0x1400065c6
cmp eax, 0xcdede82f
jne 0x140006104
mov eax, 0x9a54ac7c
cmp eax, 0x1b8177e3
jg 0x14000614a
cmp eax, 0xd8d97e03
jg 0x14000625d
cmp eax, 0x9a54ac7c
je 0x140006292
cmp eax, 0xacaeb601
jne 0x14000611b
mov qword [rbp + 0x30], r13
mov eax, 0x71c32ffc
jmp 0x14000611b
cmp eax, 0x5a639e45
jle 0x140006279
cmp eax, 0x5a639e46
je 0x1400062bd
cmp eax, 0x71c32ffc
jne 0x14000611b
mov rax, qword [rbp + 0x30]
mov edx, 0x4c593c56
cmp edx, 0x414cd83c
jle 0x140006197
cmp edx, 0x6dc9c9cf
jg 0x1400061c7
cmp edx, 0x414cd83d
je 0x1400061e4
cmp edx, 0x4c593c56
jne 0x140006170
mov edx, 0x752ed0a7
jmp 0x140006170
cmp edx, 0xd9edd1d9
je 0x1400061ee
cmp edx, 0x2a355a77
je 0x14000623b
cmp edx, 0x3c6f62a0
jne 0x140006170
mov dword [rbp + 0x6c], ecx
mov edx, dword [rbp + 0x6c]
cmp edx, 0x1f
mov edx, 0x6dc9c9d0
cmovl edx, r9d
jmp 0x140006170
cmp edx, 0x6dc9c9d0
je 0x1400062cf
cmp edx, 0x752ed0a7
jne 0x140006170
mov edx, 0x3c6f62a0
xor ecx, ecx
jmp 0x140006170
mov edx, 0x3c6f62a0
mov ecx, dword [rbp + 0x50]
jmp 0x140006170
movsxd rdx, dword [rbp + 0x6c]
mov qword [rbp + 0x58], rdx
mov rdx, qword [rbp + 0x58]
movzx edx, word [rax + rdx*2]
movsxd rdi, dword [rbp + 0x6c]
imul rsi, rdi, 0x94f2095
mov rbx, rsi
shr rbx, 0x3f
sar rsi, 0x21
add esi, ebx
imul ebx, esi, 0x37
sub edi, ebx
lea ebx, [rdi + 0x35]
mov esi, 0xffca
sub esi, edi
and esi, edx
not edx
and edx, ebx
or esi, edx
mov word [rbp + 0x54], si
mov edx, 0x2a355a77
jmp 0x140006170
mov rdx, qword [rbp + 0x58]
movzx ebx, word [rbp + 0x54]
mov word [rbp + rdx*2 + 0x100], bx
mov edx, dword [rbp + 0x6c]
inc edx
mov dword [rbp + 0x50], edx
mov edx, 0x414cd83d
jmp 0x140006170
cmp eax, 0xd8d97e04
je 0x1400062d9
cmp eax, 0x1a00a64d
jne 0x14000611b
mov eax, 0xd8d97e04
jmp 0x14000611b
cmp eax, 0x287b0cb4
jne 0x1400062f7
cmp byte [rbp + 0x40], 0
mov eax, 0xd8d97e04
cmovne eax, r8d
jmp 0x14000611b
mov qword [rbp + 0x58], r13
mov eax, 0xee04fc87
cmp eax, 0x4f51ea60
je 0x1400062e7
cmp eax, 0xee04fc87
jne 0x14000629b
mov rax, qword [rbp + 0x58]
cmp word [rax + 0x3c], 0
setne byte [rbp + 0x6c]
mov eax, 0x4f51ea60
jmp 0x14000629b
mov rax, qword [rbp + 0x28]
mov qword [rbp + 0x20], rax
mov eax, 0x1b8177e4
jmp 0x14000611b
mov eax, 0x1a00a64d
jmp 0x14000611b
mov qword [rbp + 0x28], r13
mov eax, 0x5a639e46
jmp 0x14000611b
mov al, byte [rbp + 0x6c]
mov byte [rbp + 0x40], al
mov eax, 0x287b0cb4
jmp 0x14000611b
cmp eax, 0x1b8177e4
jne 0x14000611b
mov rax, qword [rbp + 0x20]
mov eax, 0x23e667b1
jmp 0x140006104
mov r8, qword [rbp + 8]
mov rcx, qword [rbp - 0x70]
sub rsp, 0x30
mov dword [rsp + 0x20], 5
lea rdx, [rbp + 0xc0]
mov r9d, 0x18
call qword [sym.imp.ntoskrnl.exe_ZwQueryInformationFile]
mov r11d, 0x229d0524
mov r10d, 0xe6cdf049
add rsp, 0x30
mov dword [rbp + 0x4c], eax
cmp dword [rbp + 0x4c], 0
setns byte [rbp + 0x6b]
mov eax, 0x8e3127d5
jmp 0x140005b09
cmp byte [rbp + 0x6b], 0
mov eax, 0xaff77a8b
mov ecx, 0x65421ceb
cmovne eax, ecx
mov ecx, dword [rbp + 0x4c]
mov dword [rbp + 0x44], ecx
jmp 0x140005b09
mov qword [rbp - 0x58], r12
mov rax, qword [rbp - 0x58]
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x60], rax
mov rax, qword [rbp - 0x60]
mov rax, qword [rbp - 0x40]
mov eax, 0x55eeec2c
cmp eax, 0x6ac34337
je 0x1400065ff
cmp eax, 0x55eeec2c
jne 0x140006395
mov qword [rbp + 0x100], r12
mov eax, 0x6ac34337
jmp 0x140006395
mov rax, qword [rbp - 0x28]
xor ebx, ebx
mov qword [rax], rbx
mov rax, qword [rbp]
mov eax, dword [rax]
mov rcx, qword [rbp + 0xe0]
mov rdx, qword [rbp + 0x38]
sub rsp, 0x50
mov qword [rsp + 0x40], rbx
lea rbx, [rbp + 0x70]
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rdx
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ntoskrnl.exe_ZwReadFile]
mov r11d, 0x229d0524
mov r10d, 0xe6cdf049
add rsp, 0x50
mov dword [rbp + 0x14], eax
cmp dword [rbp + 0x14], 0
setns byte [rbp + 0x68]
mov eax, 0x760a4306
jmp 0x140005b09
mov rax, qword [rbp - 0x58]
mov rax, qword [rbp - 8]
mov rax, qword [rbp - 0x48]
mov rax, qword [rbp - 8]
mov rcx, qword [rbp - 0x48]
mov ecx, 0x7f0b1e36
cmp ecx, 0x8f64929a
je 0x14000662e
cmp ecx, 0x7f0b1e36
jne 0x140006442
mov qword [rbp + 0x100], rax
mov ecx, 0x8f64929a
jmp 0x140006442
mov eax, 0xaff77a8b
mov ecx, dword [rbp + 0x1c]
mov dword [rbp + 0x44], ecx
jmp 0x140005b09
cmp byte [rbp + 0x68], 0
mov eax, 0x6d813965
mov ecx, 0x11f20790
cmovne eax, ecx
jmp 0x140005b09
mov eax, 0x10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x40], rax
mov eax, 0x20
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, rsp
mov qword [rbp - 8], rax
mov eax, 0x10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x48], rax
lea rax, [rbp + 0xe0]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x50]
mov eax, 0xd9b11ced
jmp 0x140005b09
mov rax, qword [rbp]
mov r8d, dword [rax]
mov rdx, qword [rbp + 0x38]
sub rsp, 0x20
mov rcx, qword [rbp - 0x38]
mov r9, r12
call fcn.1400049cf
mov r11d, 0x229d0524
mov r10d, 0xe6cdf049
add rsp, 0x20
mov rcx, qword [0x140017810]
mov qword [rcx + 0x60], rax
mov rax, qword [rbp - 0x60]
mov eax, 0xdc7e4112
jmp 0x140005b09
mov eax, 0xde348482
mov ecx, dword [rbp + 0x14]
mov dword [rbp + 0x1c], ecx
jmp 0x140005b09
mov eax, dword [rbp + 0x18]
mov qword [rbp - 0x80], rax
mov eax, 0x4bd47556
jmp 0x140005b09
cmp byte [rbp + 0x69], 0
mov eax, 0xde348482
mov ecx, 0xa89c940
cmovne eax, ecx
mov ecx, dword [rbp + 0x4c]
mov dword [rbp + 0x1c], ecx
jmp 0x140005b09
mov rcx, qword [rbp - 0x80]
sub rsp, 0x20
call fcn.140003213
mov r11d, 0x229d0524
mov r10d, 0xe6cdf049
add rsp, 0x20
mov qword [rbp + 0x38], rax
cmp qword [rbp + 0x38], 0
setne byte [rbp + 0x69]
mov eax, 0x47dbd63d
jmp 0x140005b09
lea rax, [rbp + 0x78]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov rax, qword [rbp + 8]
xor ecx, ecx
mov qword [rax + 0x10], rcx
mov qword [rax + 8], rcx
mov qword [rax], rcx
mov rax, qword [rbp + 0xe0]
mov qword [rbp - 0x70], rax
mov eax, 0x8d2ff154
jmp 0x140005b09
sub rsp, 0x20
lea rcx, [rbp + 0xd0]
mov rdx, r13
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
add rsp, 0x20
lea rax, [rbp + 0x90]
mov qword [rbp - 0x68], rax
mov eax, 0x54bce7f9
mov r10d, 0xe6cdf049
mov r11d, 0x229d0524
jmp 0x140005b09
mov rax, qword [rbp + 0x100]
mov cl, byte [0x14000a254]
mov byte [rax + 0x10], cl
mov rcx, qword [0x14000a24c]
mov qword [rax + 8], rcx
mov rcx, qword [0x14000a244]
mov qword [rax], rcx
mov eax, 0x7ec317cb
jmp 0x140005b09
mov rax, qword [rbp + 0x100]
mov rcx, qword [0x14000a264]
mov qword [rax + 0xf], rcx
mov rcx, qword [0x14000a25d]
mov qword [rax + 8], rcx
mov rcx, qword [0x14000a255]
mov qword [rax], rcx
mov r9, qword [rbp - 8]
mov ecx, 0x13f59e03
cmp ecx, 0x6677a39
jle 0x1400066ad
cmp ecx, 0x5761a7a9
jg 0x1400066cc
cmp ecx, 0x6677a3a
je 0x140006708
cmp ecx, 0x13f59e03
jne 0x14000665e
movsx ecx, byte [r9 + 0x16]
mov edx, 0xe7316ca6
cmp edx, 0xd7d3ce06
je 0x14000671a
cmp edx, 0xe7316ca6
jne 0x14000668c
mov dword [rbp + 0x100], ecx
mov edx, 0xd7d3ce06
jmp 0x14000668c
cmp ecx, 0xe6cdf048
jle 0x1400066ee
cmp ecx, 0xe6cdf049
je 0x14000672f
cmp ecx, 0xed73661b
jne 0x14000665e
mov ecx, 0xc13f10b4
jmp 0x14000665e
cmp ecx, 0x5761a7aa
je 0x14000673d
cmp ecx, 0x78f81492
jne 0x14000665e
mov rax, qword [rbp + 0x28]
mov qword [rbp + 0x20], rax
mov ecx, 0x84c74e2d
jmp 0x14000665e
cmp ecx, 0xc13f10b4
jne 0x14000684f
mov qword [rbp + 0x28], r9
mov ecx, 0x78f81492
jmp 0x14000665e
cmp byte [rbp + 0x54], 0
mov ecx, 0xc13f10b4
cmovne ecx, r10d
jmp 0x14000665e
cmp dword [rbp + 0x100], 0
setne byte [rbp + 0x54]
mov ecx, 0x6677a3a
jmp 0x14000665e
mov qword [rbp + 0x30], r9
mov ecx, 0x5761a7aa
jmp 0x14000665e
mov r8, qword [rbp + 0x30]
mov edi, 0x6fd878ec
cmp edi, 0x229d0523
jle 0x14000676b
cmp edi, 0x518f4fba
jg 0x140006794
cmp edi, 0x229d0524
je 0x1400067af
cmp edi, 0x25b44548
jne 0x140006746
jmp 0x140006845
cmp edi, 0xb7e6a5a6
je 0x140006804
cmp edi, 0xb945819f
je 0x14000681b
cmp edi, 0x6405dfd
jne 0x140006746
mov edi, 0xb7e6a5a6
xor edx, edx
jmp 0x140006746
cmp edi, 0x518f4fbb
je 0x140006836
cmp edi, 0x6fd878ec
jne 0x140006746
mov edi, 0x6405dfd
jmp 0x140006746
movsxd rbx, dword [rbp + 0x6c]
mov qword [rbp + 0x58], rbx
mov rbx, qword [rbp + 0x58]
movzx ebx, byte [r8 + rbx]
movsxd rdi, dword [rbp + 0x6c]
imul rsi, rdi, 0x94f2095
mov rcx, rsi
shr rcx, 0x3f
sar rsi, 0x21
add esi, ecx
imul ecx, esi, 0x37
sub edi, ecx
lea ecx, [rdi + 0x35]
mov esi, 0xca
sub esi, edi
and esi, ebx
not ebx
and ebx, ecx
or esi, ebx
mov byte [rbp + 0x50], sil
mov qword [rbp + 0x100], r9
mov edi, 0xb945819f
jmp 0x140006746
mov dword [rbp + 0x6c], edx
mov ebx, dword [rbp + 0x6c]
cmp ebx, 0x17
mov edi, 0x25b44548
cmovl edi, r11d
jmp 0x140006746
mov rcx, qword [rbp + 0x58]
mov rbx, qword [rbp + 0x100]
mov al, byte [rbp + 0x50]
mov byte [rbx + rcx], al
mov edi, 0x518f4fbb
jmp 0x140006746
mov edx, dword [rbp + 0x6c]
inc edx
mov edi, 0xb7e6a5a6
jmp 0x140006746
mov ecx, 0xed73661b
jmp 0x14000665e
cmp ecx, 0x84c74e2d
jne 0x14000665e
mov rax, qword [rbp + 0x20]
mov ecx, 0xe9c69e9c
cmp ecx, 0xa837656f
je 0x140006882
cmp ecx, 0xe9c69e9c
jne 0x140006864
mov qword [rbp + 0x100], r9
mov ecx, 0xa837656f
jmp 0x140006864
mov r9, qword [rbp + 0x100]
mov rax, qword [rbp]
mov r8d, dword [rax]
mov rdx, qword [rbp + 0x38]
sub rsp, 0x20
mov rcx, qword [rbp - 0x38]
call fcn.1400049cf
mov r11d, 0x229d0524
mov r10d, 0xe6cdf049
add rsp, 0x20
mov rcx, qword [0x140017810]
mov qword [rcx + 0x68], rax
mov eax, 0x6d813965
jmp 0x140005b09
cmp eax, 0x6c4cc742
jne 0x140005b09
mov rax, qword [rbp - 0x20]
mov rax, qword [rbp - 0x18]
mov rax, qword [rbp - 0x10]
mov rax, qword [rbp - 0x50]
mov rcx, qword [rbp + 0x140]
xor rcx, rbp
sub rsp, 0x20
call fcn.1400094e0
add rsp, 0x20
mov eax, dword [rbp + 0x48]
lea rsp, [rbp + 0x148]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret