Function at 0x14006ea71
Capabilities:
Access peb ldr_data
Get kernel32 base address
Resolve function by parsing pe exports

Disassembly:
push rax
pushf
mov eax, 0xfe162045
pushf
not eax
add eax, 0x506cf8a5
xor eax, 0x2c43ea92
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x5a875675
xor eax, 0x75a7e93
rol eax, 0x4d
popf
cmp eax, 0x10
jne 0x14006eaae
popf
pop rax
jmp 0x14006f403
cmp eax, 1
jne 0x14006eabd
popf
pop rax
jmp 0x14006ec6b
cmp eax, 3
jne 0x14006eacc
popf
pop rax
jmp 0x14006ed7c
cmp eax, 0xe
jne 0x14006eadb
popf
pop rax
jmp 0x14006f2e9
cmp eax, 4
jne 0x14006eaea
popf
pop rax
jmp 0x14006edd9
cmp eax, 0xb
jne 0x14006eaf9
popf
pop rax
jmp 0x14006f181
cmp eax, 2
jne 0x14006eb08
popf
pop rax
jmp 0x14006ecc2
cmp eax, 0xc
jne 0x14006eb17
popf
pop rax
jmp 0x14006f20a
cmp eax, 0xa
jne 0x14006eb26
popf
pop rax
jmp 0x14006f11c
cmp eax, 0xd
jne 0x14006eb35
popf
pop rax
jmp 0x14006f2b4
cmp eax, 6
jne 0x14006eb44
popf
pop rax
jmp 0x14006eef5
cmp eax, 7
jne 0x14006eb53
popf
pop rax
jmp 0x14006efa5
cmp eax, 8
jne 0x14006eb62
popf
pop rax
jmp 0x14006f04c
cmp eax, 0xf
jne 0x14006eb71
popf
pop rax
jmp 0x14006f349
cmp eax, 0
jne 0x14006eb80
popf
pop rax
jmp 0x14006ebad
cmp eax, 9
jne 0x14006eb8f
popf
pop rax
jmp 0x14006f0e4
cmp eax, 5
jne 0x14006eb9e
popf
pop rax
jmp 0x14006ee4e
cmp eax, 0x11
jne 0x14006ebad
popf
pop rax
jmp 0x14006f45f
or byte [rax], al
invalid
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x60
mov rax, qword [0x140043ff0]
test rax, rax
jne 0x14006ec25
push rax
pushf
mov eax, 0x46f78806
pushf
not eax
add eax, 0x723f2d8e
xor eax, 0x725d658b
rol eax, 3
popf
pushf
not eax
add eax, 0x20e315cc
xor eax, 0x76696582
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x24a3b6cc
xor eax, 0x712c9b71
rol eax, 0x48
popf
pushf
not eax
add eax, 0x10e479b9
xor eax, 0xe5f9113
rol eax, 0x3d
popf
jmp 0x14006ea9f
push rax
pushf
mov eax, 0x1ecb614b
pushf
not eax
add eax, 0x606a9585
xor eax, 0x54d9672f
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x6006b039
xor eax, 0x63e73568
rol eax, 0xda
popf
pushf
not eax
add eax, 0x1ee34bcb
xor eax, 0x163eae28
rol eax, 0xa3
popf
jmp 0x14006ea9f
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
mov rdi, qword [rcx]
mov qword [rsp + 0x30], rdi
mov rsi, rdi
mov qword [rsp + 0x38], rdi
mov rax, rdi
invalid
push rax
pushf
mov eax, 0x34c42230
pushf
not eax
add eax, 0x27b0f6be
xor eax, 0x1bd8c326
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x2c8e2a0f
xor eax, 0x56999083
rol eax, 0x1a
popf
jmp 0x14006ea9f
mov r9, qword [rax + 0x30]
mov qword [rsp + 0x40], r9
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov qword [rsp + 0x70], rcx
mov r11d, ecx
push r9
not r9
sub r11, r9
pop r9
sub r11, 1
mov qword [rsp + 0x48], r11
shr rcx, 0x20
mov dword [rsp + 0x50], ecx
cmp r11, r9
je 0x14006ed49
push rax
pushf
mov eax, 0xb57fb7ab
pushf
not eax
add eax, 0x3a82d0d5
xor eax, 0x79645446
rol eax, 0x35
popf
pushf
not eax
add eax, 0x34282d2
xor eax, 0x3010bbaf
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x5ce0f360
xor eax, 0x7636a997
rol eax, 0x67
popf
jmp 0x14006ea9f
push rax
pushf
mov eax, 0x9a9dc569
pushf
not eax
add eax, 0x31822d70
xor eax, 0x7fe2daf0
rol eax, 0x10
popf
pushf
not eax
add eax, 0x1b750044
xor eax, 0x687f773d
rol eax, 0x53
popf
jmp 0x14006ea9f
mov r10d, dword [r11 + 0x18]
mov dword [rsp + 0x20], r10d
nop dword [rax]
nop word [rax + rax]
push rax
pushf
mov eax, 0xb71bd0b4
pushf
not eax
add eax, 0x4d6328ff
xor eax, 0x21d1838a
rol eax, 0xac
popf
pushf
not eax
add eax, 0x439464fd
xor eax, 0x1da94db1
rol eax, 6
popf
pushf
not eax
add eax, 0x4bf8a5e1
xor eax, 0x2f93992e
rol eax, 0xd
popf
jmp 0x14006ea9f
mov eax, r10d
dec r10d
mov dword [rsp + 0x20], r10d
test eax, eax
je 0x14006ee1b
push rax
pushf
mov eax, 0xba3ca3a5
pushf
not eax
add eax, 0x289e7ca1
xor eax, 0x7a33d3c1
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x150c615e
xor eax, 0x23c740aa
rol eax, 0x84
popf
jmp 0x14006ea9f
push rax
pushf
mov eax, 0x5bd53bb2
pushf
not eax
add eax, 0x3a1e2608
xor eax, 0x6e2ae263
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x204138d1
xor eax, 0x481034b0
rol eax, 0xc1
popf
jmp 0x14006ea9f
mov eax, dword [r11 + 0x20]
push r9
not r9
sub rax, r9
pop r9
sub rax, 1
mov eax, dword [rax + r10*4]
push r9
not r9
sub rax, r9
pop r9
sub rax, 1
mov qword [rsp + 0x28], rax
mov ebx, 0x3323e64e
pushf
not ebx
add ebx, 0x4af5a567
xor ebx, 0x74f7587d
rol ebx, 0x72
popf
pushf
not ebx
add ebx, 0x39720568
xor ebx, 0x7c8bba5d
rol ebx, 0x82
popf
nop word [rax + rax]
push rax
pushf
mov eax, 0xfedbe79d
pushf
not eax
add eax, 0x6a4e0a12
xor eax, 0x6b9d7690
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xba3b61e
xor eax, 0x3bd36b02
rol eax, 0xee
popf
pushf
not eax
add eax, 0x2f9204bf
xor eax, 0x5c4bd75e
rol eax, 0x35
popf
jmp 0x14006ea9f
movsx r8d, byte [rax]
inc rax
mov qword [rsp + 0x28], rax
test r8b, r8b
jne 0x14006ef5f
push rax
pushf
mov eax, 0x3a5a0cc4
pushf
not eax
add eax, 0x243a979e
xor eax, 0x1530b846
rol eax, 4
popf
pushf
not eax
add eax, 0x1e945652
xor eax, 0x429bcb01
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x4b42fdef
xor eax, 0x581fc555
rol eax, 0x56
popf
pushf
not eax
add eax, 0x771a7246
xor eax, 0x7e9fc4d5
rol eax, 0x5d
popf
jmp 0x14006ea9f
push rax
pushf
mov eax, 0xf7371621
pushf
not eax
add eax, 0x7cd494c8
xor eax, 0x6737b8db
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x92ed653
xor eax, 0x60d516d6
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x435971fa
xor eax, 0x2bb51217
rol eax, 0x63
popf
jmp 0x14006ea9f
cmp ebx, 0x4b77675b
jne 0x14006f006
push rax
pushf
mov eax, 0xdf2a2f9b
pushf
not eax
add eax, 0x7952396a
xor eax, 0x16d1a03d
rol eax, 0x30
popf
pushf
not eax
add eax, 0xdca00ee
xor eax, 0x107d6496
rol eax, 0xd
popf
pushf
not eax
add eax, 0x4d00dafe
xor eax, 0x6c042f97
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x61b16a2c
xor eax, 0x48b519a6
rol eax, 0xf6
popf
jmp 0x14006ea9f
push rax
pushf
mov eax, 0xe73107c3
pushf
not eax
add eax, 0x55ee5b62
xor eax, 0x62813b1
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xc1675cf
xor eax, 0x754d12a6
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x73a28445
xor eax, 0x2fb03b62
rol eax, 0x38
popf
jmp 0x14006ea9f
mov edx, dword [r11 + 0x1c]
push r9
not r9
sub rdx, r9
pop r9
sub rdx, 1
mov ecx, dword [r11 + 0x24]
push r9
not r9
sub rcx, r9
pop r9
sub rcx, 1
movzx ecx, word [rcx + r10*2]
mov eax, dword [rdx + rcx*4]
push r9
not r9
sub rax, r9
pop r9
sub rax, 1
jmp 0x14006f2e9
jmp 0x14006edd9
mov ecx, r8d
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
push rdx
not dword [rsp]
and dword [rsp], ebx
push rbx
not ebx
and edx, ebx
pop rbx
or edx, dword [rsp]
add rsp, 8
imul ebx, edx, 0x1000193
jmp 0x14006eef5
mov rdi, qword [rdi]
mov rax, rdi
mov qword [rsp + 0x30], rdi
cmp rdi, rsi
je 0x14006f1c4
push rax
pushf
mov eax, 0xa9288e9d
pushf
not eax
add eax, 0x771cd3fe
xor eax, 0x61004e99
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x3e7cbfb6
xor eax, 0x387ff13b
rol eax, 0x57
popf
jmp 0x14006ea9f
push rax
pushf
mov eax, 0x8e509e7
pushf
not eax
add eax, 0xe327fd3
xor eax, 0x6b967184
rol eax, 0x71
popf
pushf
not eax
add eax, 0x40807fad
xor eax, 0x79d5a34b
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x217fd724
xor eax, 0xb955783
rol eax, 0xb6
popf
jmp 0x14006ea9f
cmp qword [rdi + 0x30], 0
jne 0x14006f25b
push rax
pushf
mov eax, 0xd72bdb82
pushf
not eax
add eax, 0x7b87e7fe
xor eax, 0x4eaea28
rol eax, 0x95
popf
pushf
not eax
add eax, 0x79dcdc24
xor eax, 0x29c131b6
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x1e29cd3f
xor eax, 0x7f8b9c68
rol eax, 0xc3
popf
jmp 0x14006ea9f
push rax
pushf
mov eax, 0xe2960a8e
pushf
not eax
add eax, 0x91d6071
xor eax, 0x681f5ece
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x254cc095
xor eax, 0x6ec829f2
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x15e5994a
xor eax, 0x7973a6b4
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x477a46dd
xor eax, 0x2525ed31
rol eax, 0xb5
popf
jmp 0x14006ea9f
xor eax, eax
push rax
pushf
mov eax, 0xd7e61750
pushf
not eax
add eax, 0xba5009
xor eax, 0x321bd74b
rol eax, 0x12
popf
pushf
not eax
add eax, 0x25cc39c4
xor eax, 0x79ffce84
rol eax, 0xc7
popf
jmp 0x14006ea9f
mov qword [0x140043ff0], rax
push rax
pushf
mov eax, 0x8d70f50f
pushf
not eax
add eax, 0x4c3719f3
xor eax, 0x37bf2929
rol eax, 0x94
popf
pushf
not eax
add eax, 0x35f7a089
xor eax, 0x42f2acd4
rol eax, 0x66
popf
pushf
not eax
add eax, 0x7331a7c6
xor eax, 0x138d9163
rol eax, 0x83
popf
pushf
not eax
add eax, 0x3b71585c
xor eax, 0x5948e976
rol eax, 0x83
popf
jmp 0x14006ea9f
mov ecx, 0x3bfeae44
pushf
not ecx
add ecx, 0x2fc7c7f2
xor ecx, 0xd0ea797
rol ecx, 0x6d
popf
pushf
not ecx
add ecx, 0x7c818c43
xor ecx, 0x20f50777
rol ecx, 0x42
popf
pushf
not ecx
add ecx, 0x77e40479
xor ecx, 0x746d03d4
rol ecx, 0x8d
popf
pushf
not ecx
add ecx, 0x452d523
xor ecx, 0x74044e05
rol ecx, 0xce
popf
jmp 0x14006f3a3
call rax
jmp 0x14006f45f
mov al, 0x61
pushf
not al
add al, 0x3d
xor al, 0x65
rol al, 0xe3
popf
pushf
not al
add al, 0x71
xor al, 0xa
rol al, 0x69
popf
pushf
not al
add al, 0x3d
xor al, 0x7a
rol al, 0x4b
popf
push rax
pushf
mov eax, 0xebd5d81e
pushf
not eax
add eax, 0x4ab17170
xor eax, 0x394f5f4
rol eax, 0x10
popf
pushf
not eax
add eax, 0x2e0d3418
xor eax, 0x4167d6c0
rol eax, 0x21
popf
jmp 0x14006ea9f
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x60
pop rdi
ret