Function at 0x18001e078
Capabilities:
Resume thread

Disassembly:
push rax
pushf
mov eax, 0x65938198
pushf
not eax
add eax, 0x84e4d516
xor eax, 0xc1ee359b
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xd7a44ab5
xor eax, 0x84e38e3d
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x89badea5
xor eax, 0xa603c6ac
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xa2d32861
xor eax, 0xa092b59d
rol eax, 0x7e
popf
cmp eax, 4
jne 0x18001e0db
popf
pop rax
jmp 0x18001e402
cmp eax, 0
jne 0x18001e0ea
popf
pop rax
jmp 0x18001e207
cmp eax, 3
jne 0x18001e0f9
popf
pop rax
jmp 0x18001e37f
cmp eax, 1
jne 0x18001e108
popf
pop rax
jmp 0x18001e2af
cmp eax, 0xd
jne 0x18001e117
popf
pop rax
jmp 0x18001e91d
cmp eax, 7
jne 0x18001e126
popf
pop rax
jmp 0x18001e606
cmp eax, 0xe
jne 0x18001e135
popf
pop rax
jmp 0x18001e9c4
cmp eax, 0xb
jne 0x18001e144
popf
pop rax
jmp 0x18001e80a
cmp eax, 0xc
jne 0x18001e153
popf
pop rax
jmp 0x18001e889
cmp eax, 8
jne 0x18001e162
popf
pop rax
jmp 0x18001e63e
cmp eax, 0x10
jne 0x18001e171
popf
pop rax
jmp 0x18001ea3f
cmp eax, 2
jne 0x18001e180
popf
pop rax
jmp 0x18001e2ed
cmp eax, 9
jne 0x18001e18f
popf
pop rax
jmp 0x18001e6de
cmp eax, 0x12
jne 0x18001e19e
popf
pop rax
jmp 0x18001eb68
cmp eax, 6
jne 0x18001e1ad
popf
pop rax
jmp 0x18001e4ea
cmp eax, 0x11
jne 0x18001e1bc
popf
pop rax
jmp 0x18001eaac
cmp eax, 5
jne 0x18001e1cb
popf
pop rax
jmp 0x18001e455
cmp eax, 0x13
jne 0x18001e1da
popf
pop rax
jmp 0x18001ebb8
cmp eax, 0xa
jne 0x18001e1e9
popf
pop rax
jmp 0x18001e7bd
cmp eax, 0x14
jne 0x18001e1f8
popf
pop rax
jmp 0x18001ec00
cmp eax, 0xf
jne 0x18001e207
popf
pop rax
jmp 0x18001ea28
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x30
mov eax, dword [0x18000aa3c]
xor edi, edi
mov ebx, edi
test eax, eax
je 0x18001e269
push rax
pushf
mov eax, 0x6518d9c2
pushf
not eax
add eax, 0xac07814f
xor eax, 0xd40d4ee4
rol eax, 0xae
popf
pushf
not eax
add eax, 0x8abdbef3
xor eax, 0xd530ec8a
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x93458c37
xor eax, 0xe5343759
rol eax, 0xa7
popf
jmp 0x18001e0cc
push rax
pushf
mov eax, 0xdaab4756
pushf
not eax
add eax, 0xd8b69bb5
xor eax, 0x8f357dcb
rol eax, 0xd
popf
pushf
not eax
add eax, 0xe0ec5a67
xor eax, 0x999e9221
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xe9405239
xor eax, 0xef37b542
rol eax, 0x83
popf
jmp 0x18001e0cc
mov rcx, qword [0x18000aa30]
add rcx, 0x20
push rax
pushf
mov eax, 0xb3533361
pushf
not eax
add eax, 0x98a0d322
xor eax, 0x9777813d
rol eax, 0x51
popf
pushf
not eax
add eax, 0xe2ae108d
xor eax, 0x84b32c18
rol eax, 0x24
popf
jmp 0x18001e0cc
test byte [rcx], 2
je 0x18001e325
push rax
pushf
mov eax, 0xb691f45f
pushf
not eax
add eax, 0x968776c3
xor eax, 0xac01f017
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xd06bad77
xor eax, 0xff83c492
rol eax, 0x45
popf
jmp 0x18001e0cc
push rax
pushf
mov eax, 0xbf4e2d5c
pushf
not eax
add eax, 0xf80144e9
xor eax, 0xe994f495
rol eax, 0x26
popf
pushf
not eax
add eax, 0xfe4da1a8
xor eax, 0xc23de511
rol eax, 0x20
popf
pushf
not eax
add eax, 0xcb73e22d
xor eax, 0x87c0c8ab
rol eax, 0x89
popf
pushf
not eax
add eax, 0x8a1878d2
xor eax, 0xf47f352c
rol eax, 0x4a
popf
jmp 0x18001e0cc
inc ebx
add rcx, 0x38
cmp ebx, eax
jb 0x18001e3cf
push rax
pushf
mov eax, 0x3ca07a28
pushf
not eax
add eax, 0xa5ded2ba
xor eax, 0xbbdbe207
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xea55f92d
xor eax, 0xcd83f691
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x87dd0b0e
xor eax, 0xa270ee46
rol eax, 0xa1
popf
jmp 0x18001e0cc
push rax
pushf
mov eax, 0x81e537ce
pushf
not eax
add eax, 0xb4e6e84f
xor eax, 0xc1e600e7
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xac06e610
xor eax, 0xaf4cf976
rol eax, 0x5a
popf
jmp 0x18001e0cc
mov eax, edi
mov rbx, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
cmp ebx, 0xffffffff
je 0x18001e491
push rax
pushf
mov eax, 0x5475a90
pushf
not eax
add eax, 0xf1afc200
xor eax, 0xb66b9db0
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x83ec3814
xor eax, 0xcd95b715
rol eax, 0x2a
popf
jmp 0x18001e0cc
push rax
pushf
mov eax, 0x3da38a30
pushf
not eax
add eax, 0xb6c69ff8
xor eax, 0xd50a1358
rol eax, 0x47
popf
pushf
not eax
add eax, 0xcb8a1016
xor eax, 0xfb125344
rol eax, 0x93
popf
pushf
not eax
add eax, 0xe4ed6ccc
xor eax, 0x8775d1cd
rol eax, 0x24
popf
pushf
not eax
add eax, 0xaaf6110d
xor eax, 0xc48832c0
rol eax, 0x1d
popf
jmp 0x18001e0cc
mov edx, 0x3d497c34
pushf
not edx
add edx, 0x9304ec9a
xor edx, 0xac8aca11
rol edx, 0xd7
popf
pushf
not edx
add edx, 0xe18507ff
xor edx, 0xc730a031
rol edx, 0xb0
popf
pushf
not edx
add edx, 0xd4f3259f
xor edx, 0xfa1d3a99
rol edx, 0x8d
popf
lea rcx, [rsp + 0x20]
mov r8d, 0xbea462b9
pushf
not r8d
add r8d, 0x8e826add
xor r8d, 0xf4346b26
rol r8d, 0xdb
popf
pushf
not r8d
add r8d, 0xdca5f989
xor r8d, 0xb3c6a670
rol r8d, 0x48
popf
call fcn.18002d15c
mov edx, dword [0x18000aa3c]
cmp ebx, edx
jae 0x18001e5ad
push rax
pushf
mov eax, 0xd79d3ae0
pushf
not eax
add eax, 0xf2246d45
xor eax, 0xe355b1bd
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xa8934965
xor eax, 0xa03f55bf
rol eax, 0xb
popf
jmp 0x18001e0cc
push rax
pushf
mov eax, 0xa02ecec5
pushf
not eax
add eax, 0xc96ee4cf
xor eax, 0xbf100141
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xba58a392
xor eax, 0xbf824626
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xa4dec349
xor eax, 0xcfdf6446
rol eax, 0x15
popf
pushf
not eax
add eax, 0xacf3316e
xor eax, 0xb81c7ca3
rol eax, 0xbf
popf
jmp 0x18001e0cc
nop dword [rax + rax]
push rax
pushf
mov eax, 0x456606e1
pushf
not eax
add eax, 0xd855eb67
xor eax, 0xea91abed
rol eax, 0x77
popf
pushf
not eax
add eax, 0x8a916873
xor eax, 0xd655295b
rol eax, 0x3f
popf
jmp 0x18001e0cc
mov eax, ebx
imul rcx, rax, 0x38
mov rax, qword [0x18000aa30]
test byte [rcx + rax + 0x20], 2
jne 0x18001e698
push rax
pushf
mov eax, 0xa36ef34d
pushf
not eax
add eax, 0xa013d45a
xor eax, 0xf6b61506
rol eax, 0xef
popf
pushf
not eax
add eax, 0xc9c3ca0e
xor eax, 0xe9d6902c
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xe3be18e3
xor eax, 0xb314d3af
rol eax, 0x27
popf
jmp 0x18001e0cc
push rax
pushf
mov eax, 0xd160290
pushf
not eax
add eax, 0x8f317535
xor eax, 0xda402078
rol eax, 0x48
popf
pushf
not eax
add eax, 0xf5baa631
xor eax, 0xafda635a
rol eax, 8
popf
pushf
not eax
add eax, 0xe2f89070
xor eax, 0xa54e0e3f
rol eax, 0x81
popf
jmp 0x18001e0cc
mov edx, 0x4ae156fc
pushf
not edx
add edx, 0x9a0d369f
xor edx, 0xa4f1d293
rol edx, 0xf2
popf
pushf
not edx
add edx, 0xde21c4f8
xor edx, 0xe9802692
rol edx, 0x68
popf
pushf
not edx
add edx, 0xdad092a1
xor edx, 0xcce50bff
rol edx, 0x9f
popf
pushf
not edx
add edx, 0xd8b010e2
xor edx, 0xe273d192
rol edx, 4
popf
mov ecx, ebx
call fcn.1800282fc
mov edi, eax
test eax, eax
jne 0x18001e78a
push rax
pushf
mov eax, 0xe9818337
pushf
not eax
add eax, 0xcfa8ad5c
xor eax, 0xfe724027
rol eax, 0x64
popf
pushf
not eax
add eax, 0x801b90f8
xor eax, 0xd2b27f09
rol eax, 0x85
popf
pushf
not eax
add eax, 0xb4c53d88
xor eax, 0xa5f313a2
rol eax, 0xf5
popf
jmp 0x18001e0cc
push rax
pushf
mov eax, 0x54a8ae9
pushf
not eax
add eax, 0xfd70b44d
xor eax, 0x98ae2299
rol eax, 3
popf
pushf
not eax
add eax, 0xd45c3a87
xor eax, 0xe01bdab3
rol eax, 0xe6
popf
jmp 0x18001e0cc
mov edx, dword [0x18000aa3c]
push rax
pushf
mov eax, 0x412c7a3c
pushf
not eax
add eax, 0x9d08e210
xor eax, 0xfb60594c
rol eax, 0x89
popf
pushf
not eax
add eax, 0xd2b6fa2f
xor eax, 0xef672d7f
rol eax, 8
popf
pushf
not eax
add eax, 0xe1b80c30
xor eax, 0xdb20797a
rol eax, 0x65
popf
jmp 0x18001e0cc
inc ebx
cmp ebx, edx
jb 0x18001e856
push rax
pushf
mov eax, 0xe5fcd66e
pushf
not eax
add eax, 0xc188c948
xor eax, 0x964013fd
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xd76dd073
xor eax, 0xc1883275
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x8b78b433
xor eax, 0xefe9809f
rol eax, 0xbd
popf
jmp 0x18001e0cc
push rax
pushf
mov eax, 0x150649f4
pushf
not eax
add eax, 0xfd40f8d3
xor eax, 0x924940b9
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x9a8ba050
xor eax, 0xb013f911
rol eax, 0x89
popf
jmp 0x18001e0cc
cmp qword [rsp + 0x20], 0
je 0x18001e8d7
push rax
pushf
mov eax, 0xc630e9b0
pushf
not eax
add eax, 0x9cdd32b6
xor eax, 0x889cb4ed
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x934c78c6
xor eax, 0xe83ca25f
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xe5ffbdf5
xor eax, 0xe72047fe
rol eax, 0xc4
popf
jmp 0x18001e0cc
push rax
pushf
mov eax, 0xc192717b
pushf
not eax
add eax, 0xa512ca6e
xor eax, 0xccb0655d
rol eax, 0x75
popf
pushf
not eax
add eax, 0x9eca4afb
xor eax, 0xcf2bbe73
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x8eabb958
xor eax, 0x8c2ebbbb
rol eax, 0x40
popf
jmp 0x18001e0cc
mov eax, dword [rsp + 0x2c]
test eax, eax
je 0x18001e97e
push rax
pushf
mov eax, 0xe9483f34
pushf
not eax
add eax, 0xfc5ec8ab
xor eax, 0x9226c430
rol eax, 0x32
popf
pushf
not eax
add eax, 0x91c77e4a
xor eax, 0xdd24b236
rol eax, 0x43
popf
pushf
not eax
add eax, 0xe1ac95a9
xor eax, 0xc0f98611
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xed851f87
xor eax, 0xd332050b
rol eax, 0x53
popf
jmp 0x18001e0cc
push rax
pushf
mov eax, 0x6b88345
pushf
not eax
add eax, 0xc1cc7923
xor eax, 0x8d29d9e9
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xb05e65bb
xor eax, 0xfa6a2fbd
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xc3b7398a
xor eax, 0xe2735715
rol eax, 7
popf
jmp 0x18001e0cc
mov rbx, qword [rsp + 0x20]
mov qword [rsp + 0x40], rbp
mov ebp, eax
mov qword [rsp + 0x48], rsi
nop dword [rax]
nop word [rax + rax]
push rax
pushf
mov eax, 0xff169458
pushf
not eax
add eax, 0x98492baf
xor eax, 0x8686cde3
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xd2e39f37
xor eax, 0xc7bbc70c
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xc9a6f588
xor eax, 0x8ad8601a
rol eax, 0x24
popf
jmp 0x18001e0cc
mov r8d, dword [rbx]
xor edx, edx
lea ecx, [rdx + 0x5a]
jmp 0x18001ea31
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rsi, rax
test rax, rax
je 0x18001eaac
mov rcx, rax
jmp 0x18001ea43
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rsi
jmp 0x18001ea4d
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0x4373bd48
pushf
not eax
add eax, 0x82bcb3d5
xor eax, 0x88a519f5
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xe8836d48
xor eax, 0xa8a958c6
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xb9c3eaca
xor eax, 0x9ecc3117
rol eax, 0x94
popf
pushf
not eax
add eax, 0xc44888c4
xor eax, 0x984fdb18
rol eax, 0x24
popf
jmp 0x18001e0cc
add rbx, 4
sub rbp, 1
jne 0x18001eb0f
push rax
pushf
mov eax, 0x3d3a2645
pushf
not eax
add eax, 0xc8001a3b
xor eax, 0xd03041f6
rol eax, 0x64
popf
pushf
not eax
add eax, 0xe5a7bc03
xor eax, 0xf00f4548
rol eax, 0x33
popf
pushf
not eax
add eax, 0x8509ff0a
xor eax, 0xd3051d3f
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xd4432d98
xor eax, 0xffff4ee2
rol eax, 0x1f
popf
jmp 0x18001e0cc
push rax
pushf
mov eax, 0x740b67eb
pushf
not eax
add eax, 0xe9428c05
xor eax, 0x9e666f35
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x8622e8c0
xor eax, 0xfe049974
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xb6cc97d0
xor eax, 0xc1d84cbb
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xcfef7381
xor eax, 0xc633baa1
rol eax, 0x4f
popf
jmp 0x18001e0cc
mov rsi, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
push rax
pushf
mov eax, 0xdb563766
pushf
not eax
add eax, 0xd710c97a
xor eax, 0xbb9d9486
rol eax, 0x58
popf
pushf
not eax
add eax, 0xde171527
xor eax, 0xf2b21292
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xfe45f7b1
xor eax, 0xb7e8c532
rol eax, 0x48
popf
jmp 0x18001e0cc
mov r8, qword [rsp + 0x20]
xor edx, edx
mov rcx, qword [0x18000a9c8]
jmp 0x18001ebc7
call qword [sym.imp.KERNEL32.dll_HeapFree]
push rax
pushf
mov eax, 0x2b7f4878
pushf
not eax
add eax, 0xa150fdfa
xor eax, 0xaa7a11a8
rol eax, 0x91
popf
pushf
not eax
add eax, 0xe6209e36
xor eax, 0xb5ccdede
rol eax, 0x67
popf
jmp 0x18001e0cc
mov rbx, qword [rsp + 0x50]
mov eax, edi
add rsp, 0x30
pop rdi
ret