Function at 0x140088b34
Capabilities:
Resume thread

Disassembly:
push rax
pushf
mov eax, 0x2e61715f
pushf
not eax
add eax, 0xd80d5e00
xor eax, 0xe3ed390e
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x82aca201
xor eax, 0xd7500d73
rol eax, 0x86
popf
cmp eax, 4
jne 0x140088b71
popf
pop rax
jmp 0x140088dfb
cmp eax, 0
jne 0x140088b80
popf
pop rax
jmp 0x140088be9
cmp eax, 3
jne 0x140088b8f
popf
pop rax
jmp 0x140088d7a
cmp eax, 1
jne 0x140088b9e
popf
pop rax
jmp 0x140088caa
cmp eax, 5
jne 0x140088bad
popf
pop rax
jmp 0x140088e56
cmp eax, 7
jne 0x140088bbc
popf
pop rax
jmp 0x140088f34
cmp eax, 6
jne 0x140088bcb
popf
pop rax
jmp 0x140088efc
cmp eax, 2
jne 0x140088bda
popf
pop rax
jmp 0x140088d42
cmp eax, 8
jne 0x140088be9
popf
pop rax
jmp 0x140088f92
push rdi
sub rsp, 0x20
cmp qword [rcx], 0
mov rdi, rcx
je 0x140088c51
push rax
pushf
mov eax, 0x86c5ae3c
pushf
not eax
add eax, 0xc4edb9e8
xor eax, 0xb8c619dd
rol eax, 0xbd
popf
pushf
not eax
add eax, 0x8f91a298
xor eax, 0xc05470cd
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xa20b12e2
xor eax, 0x86156eb7
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xf505c359
xor eax, 0xade5b237
rol eax, 0x8e
popf
jmp 0x140088b62
push rax
pushf
mov eax, 0xfde294fe
pushf
not eax
add eax, 0xa31b2e43
xor eax, 0x81571650
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x9734aafe
xor eax, 0xef6db438
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xb15cc59a
xor eax, 0xe01bdd31
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xebc2efbb
xor eax, 0xf6c42c46
rol eax, 0x72
popf
jmp 0x140088b62
mov qword [rsp + 0x30], rbx
xor ebx, ebx
cmp dword [rcx + 0xc], ebx
jbe 0x140088d0f
push rax
pushf
mov eax, 0x4656c4cb
pushf
not eax
add eax, 0x91a4f7c0
xor eax, 0xd41fc6e0
rol eax, 0x47
popf
pushf
not eax
add eax, 0xc6ec520f
xor eax, 0xe10aaa49
rol eax, 0x62
popf
pushf
not eax
add eax, 0xdd11648f
xor eax, 0xf2399441
rol eax, 3
popf
pushf
not eax
add eax, 0xa99fe53f
xor eax, 0xd0fe1daa
rol eax, 0x7f
popf
jmp 0x140088b62
push rax
pushf
mov eax, 0x6d1103e9
pushf
not eax
add eax, 0xe8f9bac9
xor eax, 0xb1957dde
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xb721e9e2
xor eax, 0xd2630461
rol eax, 0x69
popf
jmp 0x140088b62
mov qword [rsp + 0x38], rsi
push rax
pushf
mov eax, 0x3c507ad9
pushf
not eax
add eax, 0xe2806a76
xor eax, 0xb342fea2
rol eax, 0xc
popf
pushf
not eax
add eax, 0x823c44b9
xor eax, 0xb1246362
rol eax, 0xe
popf
jmp 0x140088b62
mov r8, qword [rdi]
xor edx, edx
mov r8d, dword [r8 + rbx*4]
lea ecx, [rdx + 0x5a]
jmp 0x140088d87
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rsi, rax
test rax, rax
je 0x140088dc8
push rax
pushf
mov eax, 0x2201c2ea
pushf
not eax
add eax, 0xcfadb4d0
xor eax, 0xa528c691
rol eax, 0x29
popf
pushf
not eax
add eax, 0xd6c1bbde
xor eax, 0xd252d3cc
rol eax, 0xe9
popf
jmp 0x140088b62
push rax
pushf
mov eax, 0x1b006993
pushf
not eax
add eax, 0xbbbbffae
xor eax, 0xa1b5ea2c
rol eax, 0x13
popf
pushf
not eax
add eax, 0xb5271c32
xor eax, 0xd37743be
rol eax, 0x14
popf
jmp 0x140088b62
mov rcx, rax
jmp 0x140088dff
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rsi
jmp 0x140088e09
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0xce69868a
pushf
not eax
add eax, 0x828b3d72
xor eax, 0x9a56fe89
rol eax, 0x87
popf
pushf
not eax
add eax, 0xbf0f4a6f
xor eax, 0xac4b1321
rol eax, 0xba
popf
pushf
not eax
add eax, 0xb811ffbb
xor eax, 0xdf557f91
rol eax, 0x3d
popf
jmp 0x140088b62
inc ebx
cmp ebx, dword [rdi + 0xc]
jb 0x140088ea3
push rax
pushf
mov eax, 0x77dc2a9a
pushf
not eax
add eax, 0xb257793e
xor eax, 0xb4bb5a82
rol eax, 0x39
popf
pushf
not eax
add eax, 0xd7ef270f
xor eax, 0xe0d23a97
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xf51c54ae
xor eax, 0xbad53d6d
rol eax, 0xaa
popf
jmp 0x140088b62
push rax
pushf
mov eax, 0x566d4058
pushf
not eax
add eax, 0x8aeb990c
xor eax, 0x895965b4
rol eax, 0x85
popf
pushf
not eax
add eax, 0xc824df97
xor eax, 0x8b1c3c6e
rol eax, 0xac
popf
pushf
not eax
add eax, 0xf16435ff
xor eax, 0xf562bff9
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xfc0a3275
xor eax, 0xcac4b82c
rol eax, 0x23
popf
jmp 0x140088b62
mov rsi, qword [rsp + 0x38]
push rax
pushf
mov eax, 0xe3497196
pushf
not eax
add eax, 0x96953689
xor eax, 0x9e498cc1
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xcfcfa02d
xor eax, 0xbd8e0624
rol eax, 0xdb
popf
jmp 0x140088b62
mov r8, qword [rdi]
xor edx, edx
mov rcx, qword [0x140013388]
jmp 0x140088f41
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [rsp + 0x30]
push rax
pushf
mov eax, 0xc90dc4ea
pushf
not eax
add eax, 0xa02f7630
xor eax, 0x95a31ad4
rol eax, 0x96
popf
pushf
not eax
add eax, 0xfd4bfc6a
xor eax, 0xf247b842
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xd6dc3644
xor eax, 0xf9306804
rol eax, 0xcb
popf
jmp 0x140088b62
add rsp, 0x20
pop rdi
ret