Function at 0x14006661d
Capabilities:
Resume thread

Disassembly:
push rax
pushf
mov eax, 0x1a383db7
pushf
not eax
add eax, 0x9843bf88
xor eax, 0x91e6515c
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x990c5327
xor eax, 0xddd18f5d
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xab55f030
xor eax, 0xba04d7d5
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xe23ed2a1
xor eax, 0xf58ae54b
rol eax, 0x9d
popf
cmp eax, 4
jne 0x140066680
popf
pop rax
jmp 0x14006691d
cmp eax, 0
jne 0x14006668f
popf
pop rax
jmp 0x1400666f8
cmp eax, 3
jne 0x14006669e
popf
pop rax
jmp 0x140066889
cmp eax, 1
jne 0x1400666ad
popf
pop rax
jmp 0x140066793
cmp eax, 5
jne 0x1400666bc
popf
pop rax
jmp 0x140066978
cmp eax, 7
jne 0x1400666cb
popf
pop rax
jmp 0x140066a7c
cmp eax, 6
jne 0x1400666da
popf
pop rax
jmp 0x140066a1e
cmp eax, 2
jne 0x1400666e9
popf
pop rax
jmp 0x14006682b
cmp eax, 8
jne 0x1400666f8
popf
pop rax
jmp 0x140066ac7
push rdi
sub rsp, 0x20
cmp qword [rcx], 0
mov rdi, rcx
je 0x140066760
push rax
pushf
mov eax, 0x24bb0760
pushf
not eax
add eax, 0xdba6c209
xor eax, 0xbfaef006
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xe3e9f1e5
xor eax, 0xed0a92c8
rol eax, 0x63
popf
pushf
not eax
add eax, 0x8a0b71e2
xor eax, 0xa87116cd
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x8434746a
xor eax, 0xce5bb343
rol eax, 0x2d
popf
jmp 0x140066671
push rax
pushf
mov eax, 0x5a5ff550
pushf
not eax
add eax, 0xe4c2a0f1
xor eax, 0x817a8d3e
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xc96757e4
xor eax, 0xe8b5d55a
rol eax, 0xbe
popf
jmp 0x140066671
mov qword [rsp + 0x30], rbx
xor ebx, ebx
cmp dword [rcx + 0xc], ebx
jbe 0x1400667d2
push rax
pushf
mov eax, 0x39659dbf
pushf
not eax
add eax, 0xdc0a2584
xor eax, 0xe8a5c23d
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xc3b49f76
xor eax, 0x9af57637
rol eax, 0x60
popf
jmp 0x140066671
push rax
pushf
mov eax, 0x3cd243de
pushf
not eax
add eax, 0x938b4d54
xor eax, 0xbd1d70c2
rol eax, 0x38
popf
pushf
not eax
add eax, 0xa4e2a93d
xor eax, 0x905aea49
rol eax, 0xac
popf
pushf
not eax
add eax, 0xa740a00f
xor eax, 0x99db1a14
rol eax, 0xea
popf
pushf
not eax
add eax, 0xbc462f0d
xor eax, 0x88ccedc6
rol eax, 0x4c
popf
jmp 0x140066671
mov qword [rsp + 0x38], rsi
push rax
pushf
mov eax, 0xc7e32d35
pushf
not eax
add eax, 0xea376e2b
xor eax, 0xe33b4882
rol eax, 0x87
popf
pushf
not eax
add eax, 0xb527cca5
xor eax, 0xa7d5f783
rol eax, 0x55
popf
pushf
not eax
add eax, 0xa03cd9d6
xor eax, 0xeae8901d
rol eax, 0x42
popf
pushf
not eax
add eax, 0xc8bf5311
xor eax, 0xd1dae6be
rol eax, 0x81
popf
jmp 0x140066671
mov r8, qword [rdi]
xor edx, edx
mov r8d, dword [r8 + rbx*4]
lea ecx, [rdx + 0x5a]
jmp 0x140066896
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rsi, rax
test rax, rax
je 0x1400668d7
push rax
pushf
mov eax, 0x8d47a046
pushf
not eax
add eax, 0xdf831ae7
xor eax, 0xed633534
rol eax, 0x99
popf
pushf
not eax
add eax, 0xfdd9695e
xor eax, 0xd45a38be
rol eax, 0x73
popf
jmp 0x140066671
push rax
pushf
mov eax, 0x7c99d12c
pushf
not eax
add eax, 0xef4e3de9
xor eax, 0xe939410a
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xb43df109
xor eax, 0xc53fa3de
rol eax, 0x15
popf
pushf
not eax
add eax, 0xc91e547f
xor eax, 0x969a9a8d
rol eax, 0x48
popf
jmp 0x140066671
mov rcx, rax
jmp 0x140066921
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rsi
jmp 0x14006692b
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0x45c941c0
pushf
not eax
add eax, 0xe51ed3ff
xor eax, 0x9904386b
rol eax, 0xda
popf
pushf
not eax
add eax, 0xa2792457
xor eax, 0xa00bc614
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x9a6a4301
xor eax, 0xe2fbeee5
rol eax, 0xa9
popf
jmp 0x140066671
inc ebx
cmp ebx, dword [rdi + 0xc]
jb 0x1400669d8
push rax
pushf
mov eax, 0x94766131
pushf
not eax
add eax, 0x8df325f6
xor eax, 0xf7e9d5a3
rol eax, 0x24
popf
pushf
not eax
add eax, 0xff704b09
xor eax, 0xe0157a5c
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xa7698dc4
xor eax, 0xa2b82caf
rol eax, 0x88
popf
pushf
not eax
add eax, 0xbf6a4755
xor eax, 0x96222043
rol eax, 0x9c
popf
jmp 0x140066671
push rax
pushf
mov eax, 0xed74eecf
pushf
not eax
add eax, 0xe2b08b32
xor eax, 0xca7bf240
rol eax, 0x22
popf
pushf
not eax
add eax, 0xaf582ddd
xor eax, 0xbb1316e8
rol eax, 0x86
popf
pushf
not eax
add eax, 0xffd4ed0f
xor eax, 0xae7bf80c
rol eax, 0x57
popf
jmp 0x140066671
mov rsi, qword [rsp + 0x38]
push rax
pushf
mov eax, 0xf0df82c1
pushf
not eax
add eax, 0xfc9493eb
xor eax, 0xcbd7d708
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xd9e666c9
xor eax, 0xd416730a
rol eax, 0x21
popf
pushf
not eax
add eax, 0x9913fa78
xor eax, 0xc35324fd
rol eax, 0x95
popf
pushf
not eax
add eax, 0xc43a7f40
xor eax, 0x8c08635b
rol eax, 0xa2
popf
jmp 0x140066671
mov r8, qword [rdi]
xor edx, edx
mov rcx, qword [0x14000a348]
jmp 0x140066a89
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [rsp + 0x30]
push rax
pushf
mov eax, 0x82ff4eb1
pushf
not eax
add eax, 0x826502c1
xor eax, 0x8260d442
rol eax, 8
popf
pushf
not eax
add eax, 0xf50f85a6
xor eax, 0xef8f3828
rol eax, 0xce
popf
jmp 0x140066671
add rsp, 0x20
pop rdi
ret