Function at 0x14006a1d0
Capabilities:
Terminate process

Disassembly:
push rax
pushf
mov eax, 0xebf4f7a
pushf
not eax
add eax, 0x1bdf5363
xor eax, 0x6196fbac
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x540e1959
xor eax, 0x2f1e082f
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x7858e9c9
xor eax, 0xf5c6474
rol eax, 0xa0
popf
cmp eax, 1
jne 0x14006a220
popf
pop rax
jmp 0x14006a2ea
cmp eax, 2
jne 0x14006a22f
popf
pop rax
jmp 0x14006a3a4
cmp eax, 3
jne 0x14006a23e
popf
pop rax
jmp 0x14006a480
cmp eax, 5
jne 0x14006a24d
popf
pop rax
jmp 0x14006a579
cmp eax, 4
jne 0x14006a25c
popf
pop rax
jmp 0x14006a4e3
cmp eax, 0
jne 0x14006a26b
popf
pop rax
jmp 0x14006a26b
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
xor ebx, ebx
call fcn.14006a121
mov rdi, rax
test rax, rax
je 0x14006a2b7
push rax
pushf
mov eax, 0x6b369d03
pushf
not eax
add eax, 0x52c75ab
xor eax, 0xff9f657
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x13f6a091
xor eax, 0x83a7b09
rol eax, 0xfe
popf
jmp 0x14006a211
push rax
pushf
mov eax, 0x66ef4abd
pushf
not eax
add eax, 0x772eae93
xor eax, 0x5e53013
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x215f564a
xor eax, 0x307ecfa
rol eax, 0xc7
popf
jmp 0x14006a211
mov edx, dword [rsp + 0x50]
test edx, edx
je 0x14006a34b
push rax
pushf
mov eax, 0x93426bb9
pushf
not eax
add eax, 0x1d82372a
xor eax, 0x3ee2cefc
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x4960a9c0
xor eax, 0x72ed7c3d
rol eax, 0x88
popf
pushf
not eax
add eax, 0x211d8c3b
xor eax, 0x5d19baa8
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x5ab8c1e1
xor eax, 0x2b6a8a8
rol eax, 0x13
popf
jmp 0x14006a211
push rax
pushf
mov eax, 0x3dde5b56
pushf
not eax
add eax, 0x187068a9
xor eax, 0x62486ebe
rol eax, 6
popf
pushf
not eax
add eax, 0x4221a977
xor eax, 0x15189de1
rol eax, 0x81
popf
pushf
not eax
add eax, 0x44484dea
xor eax, 0x1255d30e
rol eax, 0xca
popf
pushf
not eax
add eax, 0x511e26b
xor eax, 0x3c3b7c15
rol eax, 0x39
popf
jmp 0x14006a211
mov rcx, rax
jmp 0x14006a3a8
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, 0x3541e25c
pushf
not edx
add edx, 0x31924703
xor edx, 0x31e43c63
rol edx, 0x91
popf
pushf
not edx
add edx, 0x42e60cda
xor edx, 0x115a7131
rol edx, 2
popf
cmp eax, edx
jne 0x14006a43a
push rax
pushf
mov eax, 0x60a5149c
pushf
not eax
add eax, 0x4b696e56
xor eax, 0x5ce163f0
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x565dfcda
xor eax, 0x3432f4ad
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x16ea0e5d
xor eax, 0x5a4fb2b6
rol eax, 0xae
popf
pushf
not eax
add eax, 0x3a5f49cb
xor eax, 0x56d957c0
rol eax, 0xfe
popf
jmp 0x14006a211
push rax
pushf
mov eax, 0x9eb7df7f
pushf
not eax
add eax, 0x528d615a
xor eax, 0x5c151b37
rol eax, 0x65
popf
pushf
not eax
add eax, 0x2fc743c0
xor eax, 0x405b6e9a
rol eax, 0x8e
popf
pushf
not eax
add eax, 0x41a8f5e6
xor eax, 0x1f82d7ea
rol eax, 0xa2
popf
jmp 0x14006a211
mov rcx, rdi
jmp 0x14006a484
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
push rax
pushf
mov eax, 0x2c8c1f99
pushf
not eax
add eax, 0x80b5b4
xor eax, 0x57b4ff85
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x59b5803d
xor eax, 0x328c9b26
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x37b9e846
xor eax, 0x37524258
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x1ff3d4fd
xor eax, 0x5e3a8802
rol eax, 0xdb
popf
jmp 0x14006a211
mov rcx, rdi
jmp 0x14006a4e7
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, 0x478b3b1
pushf
not ebx
add ebx, 0xa30b1
xor ebx, 0x2d6d82b5
rol ebx, 0x2f
popf
pushf
not ebx
add ebx, 0x3f03b92a
xor ebx, 0x2cb0fddd
rol ebx, 0x9a
popf
pushf
not ebx
add ebx, 0x34f9c94b
xor ebx, 0x5671dcf9
rol ebx, 0xbe
popf
pushf
not ebx
add ebx, 0x1f2a3b6f
xor ebx, 0x1bf2c4d2
rol ebx, 0x57
popf
push rax
pushf
mov eax, 0xb095811c
pushf
not eax
add eax, 0x13bf9d53
xor eax, 0x47d92530
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x68136636
xor eax, 0x5446821f
rol eax, 0xe1
popf
jmp 0x14006a211
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret