Function at 0x14007ecc1
Capabilities:
Resume thread

Disassembly:
push rax
pushf
mov eax, 0xea96db28
pushf
not eax
add eax, 0xd7b02c80
xor eax, 0xe45aa57d
rol eax, 0x92
popf
pushf
not eax
add eax, 0x85508ee6
xor eax, 0xb4a869d6
rol eax, 0x7f
popf
cmp eax, 4
jne 0x14007ecfe
popf
pop rax
jmp 0x14007f022
cmp eax, 0
jne 0x14007ed0d
popf
pop rax
jmp 0x14007ee2a
cmp eax, 3
jne 0x14007ed1c
popf
pop rax
jmp 0x14007efb2
cmp eax, 1
jne 0x14007ed2b
popf
pop rax
jmp 0x14007eed9
cmp eax, 0xd
jne 0x14007ed3a
popf
pop rax
jmp 0x14007f483
cmp eax, 7
jne 0x14007ed49
popf
pop rax
jmp 0x14007f1ed
cmp eax, 0xe
jne 0x14007ed58
popf
pop rax
jmp 0x14007f517
cmp eax, 0xb
jne 0x14007ed67
popf
pop rax
jmp 0x14007f382
cmp eax, 0xc
jne 0x14007ed76
popf
pop rax
jmp 0x14007f3ef
cmp eax, 8
jne 0x14007ed85
popf
pop rax
jmp 0x14007f22b
cmp eax, 0x10
jne 0x14007ed94
popf
pop rax
jmp 0x14007f579
cmp eax, 2
jne 0x14007eda3
popf
pop rax
jmp 0x14007ef19
cmp eax, 9
jne 0x14007edb2
popf
pop rax
jmp 0x14007f2bf
cmp eax, 0x12
jne 0x14007edc1
popf
pop rax
jmp 0x14007f67c
cmp eax, 6
jne 0x14007edd0
popf
pop rax
jmp 0x14007f0d6
cmp eax, 0x11
jne 0x14007eddf
popf
pop rax
jmp 0x14007f5d3
cmp eax, 5
jne 0x14007edee
popf
pop rax
jmp 0x14007f067
cmp eax, 0x13
jne 0x14007edfd
popf
pop rax
jmp 0x14007f6da
cmp eax, 0xa
jne 0x14007ee0c
popf
pop rax
jmp 0x14007f334
cmp eax, 0x14
jne 0x14007ee1b
popf
pop rax
jmp 0x14007f748
cmp eax, 0xf
jne 0x14007ee2a
popf
pop rax
jmp 0x14007f562
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x30
xor edi, edi
mov esi, ecx
mov ecx, dword [0x140013bdc]
mov ebx, edi
test ecx, ecx
je 0x14007ee80
push rax
pushf
mov eax, 0x3f57237d
pushf
not eax
add eax, 0xf9e7d01b
xor eax, 0xdf4e57e3
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x8e22e78e
xor eax, 0x98f3efb2
rol eax, 0xa7
popf
jmp 0x14007ecef
push rax
pushf
mov eax, 0xa6d71801
pushf
not eax
add eax, 0x81606f2d
xor eax, 0xae0ccb3c
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xea3083f4
xor eax, 0xb4ec0756
rol eax, 0x26
popf
pushf
not eax
add eax, 0xe8d129cf
xor eax, 0x9f59c700
rol eax, 2
popf
pushf
not eax
add eax, 0xc2ddad23
xor eax, 0xa7483f67
rol eax, 0x2c
popf
jmp 0x14007ecef
mov rax, qword [0x140013bd0]
add rax, 0x20
nop
push rax
pushf
mov eax, 0x7864d591
pushf
not eax
add eax, 0x89fbbf0f
xor eax, 0xb98f57f5
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x9812afbc
xor eax, 0x86c27c2e
rol eax, 0xfd
popf
jmp 0x14007ecef
movzx edx, byte [rax]
shr edx, 1
and edx, 1
cmp edx, esi
jne 0x14007ef58
push rax
pushf
mov eax, 0x52ac6093
pushf
not eax
add eax, 0xe64a7942
xor eax, 0xd5a382a1
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xefdb9237
xor eax, 0xe8f87369
rol eax, 0x4a
popf
jmp 0x14007ecef
push rax
pushf
mov eax, 0xe6ce0303
pushf
not eax
add eax, 0xce166b25
xor eax, 0x9e0f558e
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xd7f86895
xor eax, 0xd502b262
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xf4def6dc
xor eax, 0xd9f6e556
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x8fef38e8
xor eax, 0xbab4ed3b
rol eax, 0x5e
popf
jmp 0x14007ecef
inc ebx
add rax, 0x38
cmp ebx, ecx
jb 0x14007efef
push rax
pushf
mov eax, 0x40494b99
pushf
not eax
add eax, 0xa2420854
xor eax, 0x87e08ccf
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xb7208abd
xor eax, 0xdb8829fb
rol eax, 0xc8
popf
jmp 0x14007ecef
push rax
pushf
mov eax, 0xf2534d8d
pushf
not eax
add eax, 0xc9544513
xor eax, 0xa205e479
rol eax, 0x71
popf
pushf
not eax
add eax, 0xe6df5b0f
xor eax, 0xbee6710c
rol eax, 0x7e
popf
jmp 0x14007ecef
mov eax, edi
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
cmp ebx, 0xffffffff
je 0x14007f0a3
push rax
pushf
mov eax, 0x98656ba7
pushf
not eax
add eax, 0xe462db42
xor eax, 0xdc2129b9
rol eax, 0x26
popf
pushf
not eax
add eax, 0xccaf0894
xor eax, 0xd59b7fae
rol eax, 0x50
popf
jmp 0x14007ecef
push rax
pushf
mov eax, 0xb9b80384
pushf
not eax
add eax, 0xe54c61e9
xor eax, 0xb0f513b4
rol eax, 0x86
popf
pushf
not eax
add eax, 0xc9b39b13
xor eax, 0xfb6026ec
rol eax, 0x89
popf
jmp 0x14007ecef
mov r8d, edi
lea rcx, [rsp + 0x20]
test esi, esi
mov edx, 0xe906043d
pushf
not edx
add edx, 0xf53225d5
xor edx, 0xefc60567
rol edx, 0x86
popf
pushf
not edx
add edx, 0xdd5f1de6
xor edx, 0xab175951
rol edx, 0xb2
popf
pushf
not edx
add edx, 0xcf203bef
xor edx, 0xc5ee0104
rol edx, 0x26
popf
pushf
not edx
add edx, 0xbe1a8a04
xor edx, 0xf22aee07
rol edx, 0x60
popf
setne r8b
call fcn.14009b033
mov r8d, dword [0x140013bdc]
cmp ebx, r8d
jae 0x14007f1a7
push rax
pushf
mov eax, 0x7592acb2
pushf
not eax
add eax, 0xcbfc532b
xor eax, 0xbe26fd9a
rol eax, 0x80
popf
pushf
not eax
add eax, 0x9ed9f817
xor eax, 0x9489c16d
rol eax, 4
popf
pushf
not eax
add eax, 0xfcb0cd1a
xor eax, 0xc3325f39
rol eax, 0x98
popf
pushf
not eax
add eax, 0xe116c83a
xor eax, 0xe2f77f90
rol eax, 0x22
popf
jmp 0x14007ecef
push rax
pushf
mov eax, 0xb7bdc701
pushf
not eax
add eax, 0xffa2cc68
xor eax, 0xa2cbe0ca
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xe83b38fa
xor eax, 0xc067cbe5
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xdac9e763
xor eax, 0x9d21cf76
rol eax, 0x9b
popf
jmp 0x14007ecef
nop word [rax + rax]
push rax
pushf
mov eax, 0x3e8dceaf
pushf
not eax
add eax, 0xecfa6082
xor eax, 0x8767aa74
rol eax, 0x40
popf
pushf
not eax
add eax, 0xec213d7f
xor eax, 0x831601d8
rol eax, 0x65
popf
jmp 0x14007ecef
mov eax, ebx
imul rcx, rax, 0x38
mov rax, qword [0x140013bd0]
movzx edx, byte [rcx + rax + 0x20]
shr edx, 1
and edx, 1
cmp edx, esi
je 0x14007f28c
push rax
pushf
mov eax, 0x6117f01f
pushf
not eax
add eax, 0x90af54fe
xor eax, 0xfd0d0454
rol eax, 0xae
popf
pushf
not eax
add eax, 0xb1a2296a
xor eax, 0x977bce2c
rol eax, 0xf
popf
pushf
not eax
add eax, 0xec722777
xor eax, 0xaafa6074
rol eax, 0x46
popf
jmp 0x14007ecef
push rax
pushf
mov eax, 0x6c0a42c7
pushf
not eax
add eax, 0xac97883f
xor eax, 0xf8063b7b
rol eax, 0x14
popf
pushf
not eax
add eax, 0xdf413bcd
xor eax, 0xf575b315
rol eax, 8
popf
jmp 0x14007ecef
mov edx, esi
mov ecx, ebx
call fcn.1400936c6
mov edi, eax
test eax, eax
jne 0x14007f301
push rax
pushf
mov eax, 0x8df903fa
pushf
not eax
add eax, 0xef6adb6b
xor eax, 0xc0829437
rol eax, 0xff
popf
pushf
not eax
add eax, 0xb3a49bd5
xor eax, 0xe2befa31
rol eax, 0xf
popf
jmp 0x14007ecef
push rax
pushf
mov eax, 0x698f951d
pushf
not eax
add eax, 0xde093859
xor eax, 0xbb9b5865
rol eax, 0x89
popf
pushf
not eax
add eax, 0x9c04f9bd
xor eax, 0xce0e3c1d
rol eax, 0x27
popf
jmp 0x14007ecef
mov r8d, dword [0x140013bdc]
push rax
pushf
mov eax, 0x7d8e2d46
pushf
not eax
add eax, 0xf2d497fd
xor eax, 0xb1e8f113
rol eax, 0x29
popf
pushf
not eax
add eax, 0xcaed0604
xor eax, 0xba887a91
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x9622f05b
xor eax, 0xaa818fe5
rol eax, 0x51
popf
jmp 0x14007ecef
inc ebx
cmp ebx, r8d
jb 0x14007f3bc
push rax
pushf
mov eax, 0x52b3d746
pushf
not eax
add eax, 0xaf68715c
xor eax, 0xee6fca9d
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xac87f3f1
xor eax, 0xf5e6228b
rol eax, 0x34
popf
jmp 0x14007ecef
push rax
pushf
mov eax, 0x37f7ad27
pushf
not eax
add eax, 0xa306c861
xor eax, 0x8c692656
rol eax, 0x60
popf
pushf
not eax
add eax, 0xd0eca4c8
xor eax, 0xeb866758
rol eax, 0x8a
popf
jmp 0x14007ecef
cmp qword [rsp + 0x20], 0
je 0x14007f450
push rax
pushf
mov eax, 0xacfdc6fc
pushf
not eax
add eax, 0xd5d97e36
xor eax, 0xc0c46b5f
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xaa5d4744
xor eax, 0xb9e296f8
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xff9a1fd3
xor eax, 0xa4fd8f80
rol eax, 0x77
popf
pushf
not eax
add eax, 0xee2d9493
xor eax, 0x9d919bbb
rol eax, 0x20
popf
jmp 0x14007ecef
push rax
pushf
mov eax, 0xb5a30355
pushf
not eax
add eax, 0x8bb3e6f8
xor eax, 0xc9df72cd
rol eax, 0x37
popf
pushf
not eax
add eax, 0xa312eb98
xor eax, 0xab8303ce
rol eax, 0x24
popf
jmp 0x14007ecef
mov eax, dword [rsp + 0x2c]
test eax, eax
je 0x14007f4e4
push rax
pushf
mov eax, 0xba12f53a
pushf
not eax
add eax, 0xe346c98b
xor eax, 0xaf34137b
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xc8d171bc
xor eax, 0x84d4b503
rol eax, 0x51
popf
pushf
not eax
add eax, 0xcc89effc
xor eax, 0x9c36174c
rol eax, 0xbd
popf
pushf
not eax
add eax, 0x9a90cae1
xor eax, 0xe82c2c96
rol eax, 0x31
popf
jmp 0x14007ecef
push rax
pushf
mov eax, 0x8dcd776f
pushf
not eax
add eax, 0xaa820436
xor eax, 0xd02b71cb
rol eax, 0xef
popf
pushf
not eax
add eax, 0x9f585be9
xor eax, 0xb3d17599
rol eax, 0xa8
popf
jmp 0x14007ecef
mov rbx, qword [rsp + 0x20]
mov qword [rsp + 0x40], rbp
mov ebp, eax
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0x3daff66
pushf
not eax
add eax, 0xfbbccc0a
xor eax, 0x93d16915
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xd1ddabe2
xor eax, 0xb994d0af
rol eax, 0x4f
popf
jmp 0x14007ecef
mov r8d, dword [rbx]
xor edx, edx
lea ecx, [rdx + 0x5a]
jmp 0x14007f56b
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rsi, rax
test rax, rax
je 0x14007f5d3
mov rcx, rax
jmp 0x14007f57d
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rsi
jmp 0x14007f587
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0x76b3a195
pushf
not eax
add eax, 0xb032ba5f
xor eax, 0xcaa5bb1c
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x8bf35d8c
xor eax, 0xdd157bf5
rol eax, 0xed
popf
pushf
not eax
add eax, 0xf0a49e46
xor eax, 0xd78d2055
rol eax, 0xde
popf
jmp 0x14007ecef
add rbx, 4
sub rbp, 1
jne 0x14007f636
push rax
pushf
mov eax, 0x24b85aa
pushf
not eax
add eax, 0xddc46fd9
xor eax, 0x9269839c
rol eax, 0x93
popf
pushf
not eax
add eax, 0xbc32138e
xor eax, 0xae9512bd
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x86a2973a
xor eax, 0xc4474c2d
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x8dfec596
xor eax, 0xe8a2ba53
rol eax, 0x24
popf
jmp 0x14007ecef
push rax
pushf
mov eax, 0x2d1a802d
pushf
not eax
add eax, 0xf9e06666
xor eax, 0xb81c8823
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x93c889a8
xor eax, 0xa9d3b6dc
rol eax, 0x63
popf
pushf
not eax
add eax, 0xfefa5082
xor eax, 0xc0dce845
rol eax, 0x9d
popf
jmp 0x14007ecef
mov rbp, qword [rsp + 0x40]
push rax
pushf
mov eax, 0x7c208a38
pushf
not eax
add eax, 0xd98810c7
xor eax, 0xfc3c545d
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xf7a74cd8
xor eax, 0xf059961a
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xda60dea6
xor eax, 0xecc13e14
rol eax, 0x19
popf
pushf
not eax
add eax, 0xe991878c
xor eax, 0x889f2491
rol eax, 4
popf
jmp 0x14007ecef
mov r8, qword [rsp + 0x20]
xor edx, edx
mov rcx, qword [0x140013388]
jmp 0x14007f6e9
call qword [sym.imp.KERNEL32.dll_HeapFree]
push rax
pushf
mov eax, 0xa901cff4
pushf
not eax
add eax, 0x8ba6b52d
xor eax, 0xfc876cab
rol eax, 0x53
popf
pushf
not eax
add eax, 0xa6f76be0
xor eax, 0xab37d540
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xc65b0da4
xor eax, 0xad40020e
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x96c239c8
xor eax, 0xa181abb3
rol eax, 0xe6
popf
jmp 0x14007ecef
mov rbx, qword [rsp + 0x48]
mov eax, edi
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret