Function at 0x18013332f
Capabilities:
Resume thread

Disassembly:
push rax
pushf
mov eax, 0xfe0aea0e
pushf
not eax
add eax, 0x97035bc5
xor eax, 0xef23a378
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xde794b0e
xor eax, 0x99261c60
rol eax, 0x58
popf
pushf
not eax
add eax, 0xf241cad5
xor eax, 0xd67b0d6e
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xc24da150
xor eax, 0xedc1791f
rol eax, 0x81
popf
cmp eax, 4
jne 0x180133392
popf
pop rax
jmp 0x1801335f6
cmp eax, 0
jne 0x1801333a1
popf
pop rax
jmp 0x18013340a
cmp eax, 3
jne 0x1801333b0
popf
pop rax
jmp 0x18013354f
cmp eax, 1
jne 0x1801333bf
popf
pop rax
jmp 0x180133492
cmp eax, 5
jne 0x1801333ce
popf
pop rax
jmp 0x180133664
cmp eax, 7
jne 0x1801333dd
popf
pop rax
jmp 0x180133755
cmp eax, 6
jne 0x1801333ec
popf
pop rax
jmp 0x1801336f7
cmp eax, 2
jne 0x1801333fb
popf
pop rax
jmp 0x180133517
cmp eax, 8
jne 0x18013340a
popf
pop rax
jmp 0x1801337a0
push rdi
sub rsp, 0x20
cmp qword [rcx], 0
mov rdi, rcx
je 0x18013345f
push rax
pushf
mov eax, 0xacd39cf6
pushf
not eax
add eax, 0xdbb82eb2
xor eax, 0xc276986c
rol eax, 0x30
popf
pushf
not eax
add eax, 0xcb34c8ff
xor eax, 0xcacc731e
rol eax, 0x22
popf
pushf
not eax
add eax, 0xfed8f867
xor eax, 0xd0d63a9e
rol eax, 0x6a
popf
jmp 0x180133383
push rax
pushf
mov eax, 0x92afb442
pushf
not eax
add eax, 0xf1f2ee22
xor eax, 0x8b388164
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x8d1b68f1
xor eax, 0xfca45176
rol eax, 0x6b
popf
jmp 0x180133383
mov qword [rsp + 0x30], rbx
xor ebx, ebx
cmp dword [rcx + 0xc], ebx
jbe 0x1801334d1
push rax
pushf
mov eax, 0x2d0b0b
pushf
not eax
add eax, 0xa4d35f54
xor eax, 0xbb010947
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xd56c4a10
xor eax, 0xe371543f
rol eax, 0x72
popf
jmp 0x180133383
push rax
pushf
mov eax, 0x3fc6e287
pushf
not eax
add eax, 0xb74fd5c6
xor eax, 0xdd58a2ae
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x96aeac44
xor eax, 0x953483b7
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xa30bd930
xor eax, 0x87e1610e
rol eax, 0x15
popf
jmp 0x180133383
mov qword [rsp + 0x38], rsi
push rax
pushf
mov eax, 0x293e0f00
pushf
not eax
add eax, 0xba5796b7
xor eax, 0xf0125a66
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xe5212eb7
xor eax, 0xf69e2654
rol eax, 0xfe
popf
jmp 0x180133383
mov rax, qword [rdi]
xor edx, edx
mov r8d, dword [rax + rbx*4]
lea ecx, [rdx + 0x5a]
jmp 0x18013355c
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rsi, rax
test rax, rax
je 0x18013359d
push rax
pushf
mov eax, 0x2de18a5d
pushf
not eax
add eax, 0x8307626f
xor eax, 0x88c39f7d
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xa1ea112c
xor eax, 0xbba2a44a
rol eax, 0x40
popf
jmp 0x180133383
push rax
pushf
mov eax, 0x7c0baced
pushf
not eax
add eax, 0xef0abf0d
xor eax, 0x9422c8e0
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x8c6f5e33
xor eax, 0xe84c7461
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xcfba3350
xor eax, 0xa940875d
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xecc83723
xor eax, 0xacaa36ee
rol eax, 0xae
popf
jmp 0x180133383
mov rcx, rax
jmp 0x1801335fa
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rsi
jmp 0x180133604
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0x4187d1b8
pushf
not eax
add eax, 0xa6e3c3dc
xor eax, 0xe7d74695
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xbe5e7968
xor eax, 0xc7f6bd35
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xaa31e060
xor eax, 0x901661e5
rol eax, 0x73
popf
pushf
not eax
add eax, 0xd6329b79
xor eax, 0x8577f616
rol eax, 0xe4
popf
jmp 0x180133383
inc ebx
cmp ebx, dword [rdi + 0xc]
jb 0x1801336b1
push rax
pushf
mov eax, 0xc23eaa85
pushf
not eax
add eax, 0xfcf6cac7
xor eax, 0xf21a970c
rol eax, 0xf
popf
pushf
not eax
add eax, 0xdadd76dd
xor eax, 0xb4bf5221
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x9ed5dbfd
xor eax, 0xde2bd073
rol eax, 0x13
popf
jmp 0x180133383
push rax
pushf
mov eax, 0xd0afe40d
pushf
not eax
add eax, 0xc42cc1e0
xor eax, 0xe623c987
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xda97192e
xor eax, 0xec669812
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x892ce4e8
xor eax, 0xe698ef50
rol eax, 0x31
popf
jmp 0x180133383
mov rsi, qword [rsp + 0x38]
push rax
pushf
mov eax, 0x89dbf544
pushf
not eax
add eax, 0x90fb0984
xor eax, 0xaa8dbb1f
rol eax, 0x47
popf
pushf
not eax
add eax, 0xb83823e0
xor eax, 0xfd6b9a62
rol eax, 0xc
popf
pushf
not eax
add eax, 0x8196d485
xor eax, 0x84c4e651
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x80b38dfe
xor eax, 0xab6fddac
rol eax, 0x56
popf
jmp 0x180133383
mov r8, qword [rdi]
xor edx, edx
mov rcx, qword [0x180041538]
jmp 0x180133762
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [rsp + 0x30]
push rax
pushf
mov eax, 0x96d329e6
pushf
not eax
add eax, 0x93a80120
xor eax, 0x82bb9935
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x93cde95a
xor eax, 0xa05278f6
rol eax, 0xf3
popf
jmp 0x180133383
add rsp, 0x20
pop rdi
ret