Function at 0x1400659f5
Capabilities:
Resume thread

Disassembly:
push rax
pushf
mov eax, 0xb416ae6b
pushf
not eax
add eax, 0x8f95d161
xor eax, 0xe0203404
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xe28c3b15
xor eax, 0xeae07b7c
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xaf746427
xor eax, 0xe8d5b860
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x9f90f19d
xor eax, 0xf1fdffd5
rol eax, 0xde
popf
cmp eax, 4
jne 0x140065a58
popf
pop rax
jmp 0x140065ce2
cmp eax, 0
jne 0x140065a67
popf
pop rax
jmp 0x140065ad0
cmp eax, 3
jne 0x140065a76
popf
pop rax
jmp 0x140065c4e
cmp eax, 1
jne 0x140065a85
popf
pop rax
jmp 0x140065b6b
cmp eax, 5
jne 0x140065a94
popf
pop rax
jmp 0x140065d2a
cmp eax, 7
jne 0x140065aa3
popf
pop rax
jmp 0x140065e1b
cmp eax, 6
jne 0x140065ab2
popf
pop rax
jmp 0x140065dbd
cmp eax, 2
jne 0x140065ac1
popf
pop rax
jmp 0x140065c16
cmp eax, 8
jne 0x140065ad0
popf
pop rax
jmp 0x140065e79
push rdi
sub rsp, 0x20
cmp qword [rcx], 0
mov rdi, rcx
je 0x140065b38
push rax
pushf
mov eax, 0xe9e12079
pushf
not eax
add eax, 0xd1db8126
xor eax, 0xc24078ff
rol eax, 0xb
popf
pushf
not eax
add eax, 0xeb19cf41
xor eax, 0xa2a949e5
rol eax, 0x18
popf
pushf
not eax
add eax, 0x853c29b8
xor eax, 0x81bc19fd
rol eax, 0xb
popf
pushf
not eax
add eax, 0xadc6db0e
xor eax, 0xb4303294
rol eax, 0xd1
popf
jmp 0x140065a49
push rax
pushf
mov eax, 0xbd9cf0de
pushf
not eax
add eax, 0xd31a335b
xor eax, 0x83046ce5
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x8e4f581e
xor eax, 0x9bf22cf1
rol eax, 0xb8
popf
jmp 0x140065a49
mov qword [rsp + 0x30], rbx
xor ebx, ebx
cmp dword [rcx + 0xc], ebx
jbe 0x140065bd0
push rax
pushf
mov eax, 0xedc4da2e
pushf
not eax
add eax, 0xaf8fc40f
xor eax, 0xddc69b66
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x80a0db43
xor eax, 0x8abafeec
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x898d52b3
xor eax, 0xa7616cdb
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xf78d675e
xor eax, 0xbf7d904c
rol eax, 0x8d
popf
jmp 0x140065a49
push rax
pushf
mov eax, 0xa96125ea
pushf
not eax
add eax, 0xb6266d60
xor eax, 0xc6c838dd
rol eax, 0x61
popf
pushf
not eax
add eax, 0xfd20b009
xor eax, 0xba447804
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x9329edc4
xor eax, 0xbfe82560
rol eax, 0xdc
popf
jmp 0x140065a49
mov qword [rsp + 0x38], rsi
push rax
pushf
mov eax, 0x3ab442a9
pushf
not eax
add eax, 0x89e4a083
xor eax, 0xe675eb1a
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xd9a32ba9
xor eax, 0xef51b1f8
rol eax, 0xb6
popf
jmp 0x140065a49
mov r8, qword [rdi]
xor edx, edx
mov r8d, dword [r8 + rbx*4]
lea ecx, [rdx + 0x5a]
jmp 0x140065c5b
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rsi, rax
test rax, rax
je 0x140065caf
push rax
pushf
mov eax, 0xcfaa5e19
pushf
not eax
add eax, 0x905a7a2c
xor eax, 0xe46ef511
rol eax, 0x91
popf
pushf
not eax
add eax, 0xbf3d6923
xor eax, 0xeec5bf08
rol eax, 0x74
popf
pushf
not eax
add eax, 0xd34fed94
xor eax, 0xcc7fae68
rol eax, 0x82
popf
jmp 0x140065a49
push rax
pushf
mov eax, 0x71f5f1d5
pushf
not eax
add eax, 0x903fca58
xor eax, 0xfe6ab844
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xaf82629b
xor eax, 0xd377f682
rol eax, 0x2f
popf
jmp 0x140065a49
mov rcx, rax
jmp 0x140065ce6
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rsi
jmp 0x140065cf0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0xef685263
pushf
not eax
add eax, 0xb379aa76
xor eax, 0x9b8980cc
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x8ef255c0
xor eax, 0x810c5c30
rol eax, 0x41
popf
jmp 0x140065a49
inc ebx
cmp ebx, dword [rdi + 0xc]
jb 0x140065d8a
push rax
pushf
mov eax, 0x9066584b
pushf
not eax
add eax, 0xdc65900e
xor eax, 0xab36602f
rol eax, 0xee
popf
pushf
not eax
add eax, 0x8063e305
xor eax, 0xb122f835
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xb9d44126
xor eax, 0xf1b118ad
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xc9c17750
xor eax, 0xc8d8c1b9
rol eax, 0xc3
popf
jmp 0x140065a49
push rax
pushf
mov eax, 0x40132c9d
pushf
not eax
add eax, 0x845505df
xor eax, 0xcfe57b2b
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xc9dcd4d8
xor eax, 0xe0b43a55
rol eax, 0x7b
popf
jmp 0x140065a49
mov rsi, qword [rsp + 0x38]
push rax
pushf
mov eax, 0xaf97037c
pushf
not eax
add eax, 0xb87cd6da
xor eax, 0xe5c221e5
rol eax, 0x69
popf
pushf
not eax
add eax, 0xd54f394e
xor eax, 0xe1b50976
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x95d9357e
xor eax, 0x9dc48cb9
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x8f4047e8
xor eax, 0xa192c07e
rol eax, 0x6a
popf
jmp 0x140065a49
mov r8, qword [rdi]
xor edx, edx
mov rcx, qword [0x14000a338]
jmp 0x140065e28
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [rsp + 0x30]
push rax
pushf
mov eax, 0x8630eeff
pushf
not eax
add eax, 0xb2e7c75a
xor eax, 0xce0c0b8b
rol eax, 0x13
popf
pushf
not eax
add eax, 0x9d4543cd
xor eax, 0xe55f9af4
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xf94e06e5
xor eax, 0xdd6c4fe2
rol eax, 0x10
popf
jmp 0x140065a49
add rsp, 0x20
pop rdi
ret