Function at 0x14006a586
Capabilities:
Access pe header

Disassembly:
push rax
pushf
mov eax, 0xf8bc979c
pushf
not eax
add eax, 0x4b6a9c47
xor eax, 0x4e92c455
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x785e67e5
xor eax, 0x17ded9c6
rol eax, 2
popf
cmp eax, 5
jne 0x14006a5c3
popf
pop rax
jmp 0x14006a8cb
cmp eax, 1
jne 0x14006a5d2
popf
pop rax
jmp 0x14006a6ac
cmp eax, 2
jne 0x14006a5e1
popf
pop rax
jmp 0x14006a778
cmp eax, 0
jne 0x14006a5f0
popf
pop rax
jmp 0x14006a60e
cmp eax, 4
jne 0x14006a5ff
popf
pop rax
jmp 0x14006a86f
cmp eax, 3
jne 0x14006a60e
popf
pop rax
jmp 0x14006a81d
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov edi, edx
xor esi, esi
mov r10, rcx
mov rdx, rcx
mov r8d, esi
lea r9d, [rdi + 1]
shr r9d, 1
je 0x14006a666
push rax
pushf
mov eax, 0x3201372c
pushf
not eax
add eax, 0x3f197651
xor eax, 0x3c9fc19b
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x6733aacd
xor eax, 0x67a3de6b
rol eax, 0xb
popf
jmp 0x14006a5b4
push rax
pushf
mov eax, 0x807a77d1
pushf
not eax
add eax, 0x20579b55
xor eax, 0x484af572
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x4f91ecb3
xor eax, 0x3b36633e
rol eax, 0xff
popf
pushf
not eax
add eax, 0x37160297
xor eax, 0xa9dd394
rol eax, 0x38
popf
jmp 0x14006a5b4
movzx eax, word [rdx]
lea rdx, [rdx + 2]
push rax
not eax
sub r8d, eax
pop rax
sub r8d, 1
mov ecx, r8d
movzx r8d, r8w
shr ecx, 0x10
push rcx
not ecx
sub r8d, ecx
pop rcx
sub r8d, 1
add r9d, 0xffffffff
jne 0x14006a732
push rax
pushf
mov eax, 0x70c7761b
pushf
not eax
add eax, 0x7026c39
xor eax, 0x3f350f67
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x5628879d
xor eax, 0x5f3be2de
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x41ab446e
xor eax, 0x1b12b0a6
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x790cc020
xor eax, 0x140a8a23
rol eax, 0x62
popf
jmp 0x14006a5b4
push rax
pushf
mov eax, 0xf70e22e1
pushf
not eax
add eax, 0x12a31c6
xor eax, 0x737d42f9
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x7dac311
xor eax, 0x273835af
rol eax, 0x2b
popf
pushf
not eax
add eax, 0x26de72ef
xor eax, 0x365e1b4
rol eax, 0x69
popf
jmp 0x14006a5b4
mov ebx, r8d
mov rcx, r10
shr ebx, 0x10
add bx, r8w
jmp 0x14006a786
call qword [sym.imp.ntdll.dll_RtlImageNtHeader]
test rax, rax
je 0x14006a7ea
push rax
pushf
mov eax, 0x77838f72
pushf
not eax
add eax, 0x2db4a611
xor eax, 0x6dbf7ec4
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x463d637b
xor eax, 0x759f4ce6
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x555e8352
xor eax, 0x4a5720df
rol eax, 0x77
popf
pushf
not eax
add eax, 0x27de200e
xor eax, 0x16d600df
rol eax, 0x49
popf
jmp 0x14006a5b4
push rax
pushf
mov eax, 0x7b567317
pushf
not eax
add eax, 0x33abb8df
xor eax, 0x115523b7
rol eax, 0x79
popf
pushf
not eax
add eax, 0x23eec0b
xor eax, 0x20fceb3e
rol eax, 0x6e
popf
jmp 0x14006a5b4
movzx ecx, word [rax + 0x58]
movzx eax, word [rax + 0x5a]
cmp bx, cx
adc cx, si
sub bx, cx
cmp bx, ax
adc ax, si
sub bx, ax
jmp 0x14006a8cb
movzx ebx, si
push rax
pushf
mov eax, 0x255b4311
pushf
not eax
add eax, 0x4d59a52b
xor eax, 0x7dc5208e
rol eax, 0x44
popf
pushf
not eax
add eax, 0x5aac12b
xor eax, 0x410aa6a7
rol eax, 0x38
popf
pushf
not eax
add eax, 0x61113b67
xor eax, 0x7e6319d5
rol eax, 0x37
popf
pushf
not eax
add eax, 0x3ac91051
xor eax, 0x4ab0c6bf
rol eax, 0xe1
popf
jmp 0x14006a5b4
mov rsi, qword [rsp + 0x38]
movzx eax, bx
mov rbx, qword [rsp + 0x30]
push rdi
not edi
sub eax, edi
pop rdi
sub eax, 1
add rsp, 0x20
pop rdi
ret