Function at 0x1801336d8
Capabilities:
Resume thread

Disassembly:
push rax
pushf
mov eax, 0x578187ec
pushf
not eax
add eax, 0xecd029c5
xor eax, 0x8a832fd7
rol eax, 0x31
popf
pushf
not eax
add eax, 0xffdbb3f1
xor eax, 0xe3bd7455
rol eax, 0x9c
popf
cmp eax, 4
jne 0x180133715
popf
pop rax
jmp 0x180133953
cmp eax, 0
jne 0x180133724
popf
pop rax
jmp 0x18013378d
cmp eax, 3
jne 0x180133733
popf
pop rax
jmp 0x1801338d2
cmp eax, 1
jne 0x180133742
popf
pop rax
jmp 0x180133815
cmp eax, 5
jne 0x180133751
popf
pop rax
jmp 0x1801339ae
cmp eax, 7
jne 0x180133760
popf
pop rax
jmp 0x180133a9f
cmp eax, 6
jne 0x18013376f
popf
pop rax
jmp 0x180133a54
cmp eax, 2
jne 0x18013377e
popf
pop rax
jmp 0x18013389a
cmp eax, 8
jne 0x18013378d
popf
pop rax
jmp 0x180133afd
push rdi
sub rsp, 0x20
cmp qword [rcx], 0
mov rdi, rcx
je 0x1801337cf
push rax
pushf
mov eax, 0x32e7cd9f
pushf
not eax
add eax, 0x86a78e69
xor eax, 0xb0b73d99
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xa4259324
xor eax, 0x95f5014e
rol eax, 0xd7
popf
jmp 0x180133706
push rax
pushf
mov eax, 0xd189a478
pushf
not eax
add eax, 0x9363728d
xor eax, 0xeba72706
rol eax, 0x12
popf
pushf
not eax
add eax, 0xb7c08173
xor eax, 0x99a8ac43
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xb978af80
xor eax, 0xd8fd7af5
rol eax, 0xeb
popf
jmp 0x180133706
mov qword [rsp + 0x30], rbx
xor ebx, ebx
cmp dword [rcx + 0xc], ebx
jbe 0x180133867
push rax
pushf
mov eax, 0x7f1d60de
pushf
not eax
add eax, 0xc056b52f
xor eax, 0xf745b9a9
rol eax, 0x73
popf
pushf
not eax
add eax, 0xbca36929
xor eax, 0xb1154386
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xe4c410b5
xor eax, 0xe9422725
rol eax, 0x97
popf
jmp 0x180133706
push rax
pushf
mov eax, 0xb40868a2
pushf
not eax
add eax, 0xef31a700
xor eax, 0xf3c70460
rol eax, 0x42
popf
pushf
not eax
add eax, 0xa89da94f
xor eax, 0x8764c057
rol eax, 0xe9
popf
jmp 0x180133706
mov qword [rsp + 0x38], rsi
push rax
pushf
mov eax, 0x9369015a
pushf
not eax
add eax, 0xfa22ede2
xor eax, 0xd45a099b
rol eax, 0x52
popf
pushf
not eax
add eax, 0x8af86dbc
xor eax, 0xf585a22c
rol eax, 0x68
popf
jmp 0x180133706
mov rax, qword [rdi]
xor edx, edx
mov r8d, dword [rax + rbx*4]
lea ecx, [rdx + 0x5a]
jmp 0x1801338df
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rsi, rax
test rax, rax
je 0x180133920
push rax
pushf
mov eax, 0x658d57ad
pushf
not eax
add eax, 0xaf705f48
xor eax, 0x815a64ef
rol eax, 0x41
popf
pushf
not eax
add eax, 0xd182b5c0
xor eax, 0xc00feed4
rol eax, 0xc3
popf
jmp 0x180133706
push rax
pushf
mov eax, 0xd833815b
pushf
not eax
add eax, 0xbac4678e
xor eax, 0x9253a5e6
rol eax, 0x90
popf
pushf
not eax
add eax, 0xeb33bc38
xor eax, 0xa75f4b24
rol eax, 0x5c
popf
jmp 0x180133706
mov rcx, rax
jmp 0x180133957
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rsi
jmp 0x180133961
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0x6d98abd9
pushf
not eax
add eax, 0x86f08d56
xor eax, 0xc4e6fafc
rol eax, 0x32
popf
pushf
not eax
add eax, 0xc21ceda7
xor eax, 0xfa07ca78
rol eax, 0x24
popf
pushf
not eax
add eax, 0x9dbccb72
xor eax, 0xbbd101cd
rol eax, 0x3f
popf
jmp 0x180133706
inc ebx
cmp ebx, dword [rdi + 0xc]
jb 0x180133a0e
push rax
pushf
mov eax, 0x301d3491
pushf
not eax
add eax, 0xbd6ef2dd
xor eax, 0xda3165af
rol eax, 0xac
popf
pushf
not eax
add eax, 0xcb5080c9
xor eax, 0x989ba463
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x93d4e848
xor eax, 0xd92f0774
rol eax, 0xda
popf
pushf
not eax
add eax, 0xf4c79a39
xor eax, 0xe8445e8e
rol eax, 0x5c
popf
jmp 0x180133706
push rax
pushf
mov eax, 0xb2b6dfe
pushf
not eax
add eax, 0xcb7e17a1
xor eax, 0x8f82c06d
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xb77915b5
xor eax, 0xc0f1c5de
rol eax, 0x62
popf
pushf
not eax
add eax, 0xb5581c91
xor eax, 0xdc055160
rol eax, 0x41
popf
jmp 0x180133706
mov rsi, qword [rsp + 0x38]
push rax
pushf
mov eax, 0xba26b243
pushf
not eax
add eax, 0xae19cd3c
xor eax, 0xb0ca7bff
rol eax, 0x40
popf
pushf
not eax
add eax, 0xbff2b6f6
xor eax, 0xc570f186
rol eax, 0x69
popf
pushf
not eax
add eax, 0x88475afd
xor eax, 0x84fe8989
rol eax, 0x24
popf
jmp 0x180133706
mov r8, qword [rdi]
xor edx, edx
mov rcx, qword [0x180041560]
jmp 0x180133aac
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [rsp + 0x30]
push rax
pushf
mov eax, 0x9fdfa3cb
pushf
not eax
add eax, 0xf5f0e9a9
xor eax, 0xba754e4d
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xd247f1e7
xor eax, 0x985dcf70
rol eax, 0x59
popf
pushf
not eax
add eax, 0xbbc93091
xor eax, 0xde44a04a
rol eax, 0x71
popf
jmp 0x180133706
add rsp, 0x20
pop rdi
ret