Function at 0x140091a40
Capabilities:
Encode data using xor
Terminate thread

Disassembly:
xchg r13, rbx
mov qword [rsp + 8], r13
xchg r13, rbx
xchg rbx, rbp
mov qword [rsp + 0x10], rbx
xchg rbp, rbx
mov qword [rsp + 0x18], rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r14
nop
mov qword [rsp - 8], r15
sub rsp, 8
sub rsp, 0x20
xchg rcx, r10
mov rdi, r10
xchg rcx, r10
mov byte [rcx + 0x5fc], 0xd
add byte [rcx + 0x5fc], 0
add byte [rcx + 0x5fc], 1
sub byte [rcx + 0x5fc], 0xd
add byte [rcx + 0x5fc], 0x41
xor byte [rcx + 0x5fc], 0x43
xor r15d, r15d
cmp qword [rcx + 0x5c0], r15
je 0x140091b29
mov rcx, qword [rcx + 0x5c8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, 0x39273f39
add edx, 0x199dca9b
xor edx, 0x6d2ff814
add edx, 0x32dbc7eb
sub edx, 0x6b7495b1
sub edx, 0x7522012
xchg r13, rcx
mov r13, qword [rdi + 0x5c0]
xchg rcx, r13
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140091b1c
xor edx, edx
mov rcx, qword [rdi + 0x5c0]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
xchg r15, rbx
mov qword [rdi + 0x5c0], rbx
xchg rbx, r15
mov edx, 0x3126a953
add edx, 0x39379cb7
sub edx, 0x11402e84
xor edx, 0x3ccded6a
sub edx, 0x1a6f5976
add edx, 0x150dcbda
sub edx, 0x60726968
mov rcx, qword [rdi + 0x5d0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140091b7f
xor edx, edx
xchg rcx, r13
mov r13, qword [rdi + 0x5d0]
xchg r13, rcx
call qword [sym.imp.KERNEL32.dll_TerminateThread]
nop
movabs rsi, 0xffffffff626571ef
xor rsi, 0x2ba47b21
add rsi, 0x1a9b8ea5
sub rsi, 0x14053705
sub rsi, 0xfb8e160
add rsi, 0x247d4588
add rsi, 0x7fffffff
xor rsi, 0x1ae4396a
xchg rbp, rsi
mov qword [rdi + 0x5d0], rbp
xchg rsi, rbp
mov rbp, qword [rdi + 0x2f8]
xchg r14, r15
mov r15, qword [rdi + 0x2f0]
xchg r14, r15
cmp r14, rbp
je 0x140091c51
xchg rsi, rbx
mov rsi, qword [r14]
xchg rsi, rbx
xchg rdx, rax
mov rdx, qword [rbx]
xchg rdx, rax
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call qword [rax + 0x18]
xchg rcx, rbx
mov rbx, rax
xchg rbx, rcx
call fcn.1401fc5cc
xchg rcx, rax
mov rcx, qword [rbx]
xchg rcx, rax
mov edx, 0x1f62dc2f
add edx, 0x9886487
sub edx, 0x19093a97
add edx, 0x4fe04b77
xor edx, 0x56a4c7c
sub edx, 0x5aa81de9
xchg rcx, r14
mov r14, rbx
xchg r14, rcx
call qword [rax]
add r14, 8
cmp r14, rbp
jne 0x140091be5
mov rcx, qword [rdi + 0x2b8]
test rcx, rcx
je 0x140091c66
call fcn.1401fc5cc
xchg rcx, rsi
mov rsi, qword [rdi + 0x2c0]
xchg rsi, rcx
test rcx, rcx
je 0x140091c81
call fcn.1401fc5cc
mov rcx, qword [rdi + 0x2c8]
test rcx, rcx
je 0x140091c96
call fcn.1401fc5cc
xchg r11, rcx
mov r11, qword [rdi + 0x140]
xchg rcx, r11
test rcx, rcx
je 0x140091cb1
call fcn.1401fc5cc
mov rcx, qword [rdi + 0x2d0]
test rcx, rcx
je 0x140091cc6
call fcn.1401fc5cc
lea rcx, [rdi + 0x5d8]
call fcn.14007b1a0
lea rcx, [rdi + 0x560]
call fcn.14007b1a0
lea rcx, [rdi + 0x548]
call fcn.14007b1a0
xchg r8, rbx
mov r8, qword [rdi + 0x320]
xchg r8, rbx
test rbx, rbx
je 0x140091d3b
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091d3b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091d3b
xchg r12, rax
mov r12, qword [rbx]
xchg r12, rax
xchg rbx, r10
mov rcx, r10
xchg rbx, r10
call qword [rax + 8]
xchg rbx, r8
mov r8, qword [rdi + 0x310]
xchg r8, rbx
test rbx, rbx
je 0x140091d8c
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091d8c
xchg r10, rax
mov r10, qword [rbx]
xchg r10, rax
xchg rbx, rdi
mov rcx, rdi
xchg rdi, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091d8c
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov rcx, qword [rdi + 0x2f0]
test rcx, rcx
je 0x140091e05
xchg rbx, rdx
mov rbx, qword [rdi + 0x300]
xchg rbx, rdx
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x140091dd9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400924f5
mov rcx, r8
call fcn.1401fc5cc
xchg r15, r14
mov qword [rdi + 0x2f0], r14
xchg r14, r15
xchg r15, rbp
mov qword [rdi + 0x2f8], rbp
xchg rbp, r15
xchg r15, rbx
mov qword [rdi + 0x300], rbx
xchg rbx, r15
mov rbx, qword [rdi + 0x2e8]
test rbx, rbx
je 0x140091e50
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091e50
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091e50
xchg r14, rax
mov r14, qword [rbx]
xchg r14, rax
xchg rbx, rbp
mov rcx, rbp
xchg rbp, rbx
call qword [rax + 8]
mov rbx, qword [rdi + 0x2d8]
test rbx, rbx
je 0x140091ea5
mov rcx, rbx
call fcn.14017ced0
mov edx, 0x66004fc3
sub edx, 0x36386f4f
add edx, 0x3f5a59b8
xor edx, 0x197796fc
sub edx, 0x2b3f342b
xor edx, 0x3b73e53b
sub edx, 0x41e2c6e1
sub edx, 0xe4c6cd8
sub edx, 0x20366945
mov rcx, rbx
call fcn.1401fc5cc
xchg r8, rbx
mov r8, qword [rdi + 0x2b0]
xchg r8, rbx
test rbx, rbx
je 0x140091ef4
mov rcx, rbx
call fcn.14017ced0
mov edx, 0x33b669b
add edx, 0x62463c28
sub edx, 0x486955e8
add edx, 0x37ee9bb0
add edx, 0x245455f3
xor edx, 0x795b3ede
xchg rcx, r14
mov r14, rbx
xchg r14, rcx
call fcn.1401fc5cc
mov rbx, qword [rdi + 0x2a8]
test rbx, rbx
je 0x140091f43
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.140179960
mov edx, 0x2ff64308
xor edx, 0x17bd8aac
sub edx, 0xf7c777b
add edx, 0x18d8710c
add edx, 0x18933d7c
xor edx, 0x5a3b0011
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call fcn.1401fc5cc
xchg rbx, r14
mov r14, qword [rdi + 0x2a0]
xchg rbx, r14
test rbx, rbx
je 0x140091fa4
xchg rcx, r9
mov r9, rbx
xchg rcx, r9
call fcn.14017a220
mov edx, 0x28f6992f
xor edx, 0x7bba6efa
add edx, 0x2bdde416
xor edx, 0x15525d63
sub edx, 0x26b2704e
sub edx, 0x3019cf35
xor edx, 0x2394a209
sub edx, 0x3038e464
xchg rcx, r14
mov r14, rbx
xchg r14, rcx
call fcn.1401fc5cc
mov rbx, qword [rdi + 0x298]
test rbx, rbx
je 0x140091ff3
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.140179960
mov edx, 0x2953afbd
add edx, 0x2360d926
sub edx, 0x280f81f5
add edx, 0x19389a3e
xor edx, 0x414d48e2
xor edx, 0x206e4e65
xor edx, 0x5cfea70b
mov rcx, rbx
call fcn.1401fc5cc
lea rcx, [rdi + 0x278]
call fcn.14002f7f0
lea rcx, [rdi + 0x258]
call fcn.14002f7f0
lea rcx, [rdi + 0x238]
call fcn.14002f7f0
lea rcx, [rdi + 0x218]
call fcn.14002f7f0
lea rcx, [rdi + 0x1f8]
call fcn.14002f7f0
lea rcx, [rdi + 0x1d8]
call fcn.14002f7f0
mov rbx, qword [rdi + 0x1d0]
test rbx, rbx
je 0x140092096
xchg rbx, r8
mov rcx, r8
xchg r8, rbx
call fcn.140183b00
mov edx, 0x2e97294c
add edx, 0x1503b20f
xor edx, 0x33c7609f
xor edx, 0x6e435bd2
xor edx, 0x2cca3ef3
xor edx, 0x2987696f
add edx, 0x1c6f55f3
add edx, 0xa47316a
xor edx, 0x420a3fcf
mov rcx, rbx
call fcn.1401fc5cc
lea rcx, [rdi + 0x1b0]
call fcn.14002f7f0
xchg rbx, r9
mov r9, qword [rdi + 0x1a8]
xchg rbx, r9
test rbx, rbx
je 0x140092109
xchg rbx, r12
mov rcx, r12
xchg rbx, r12
call fcn.14017ced0
mov edx, 0x3aeb8818
add edx, 0x6b5b599
sub edx, 0x2a28cb14
xor edx, 0x75ed1679
xor edx, 0x73651cf8
add edx, 0x668e1a79
sub edx, 0x4b8fe546
add edx, 0x1b419c2
xor edx, 0x2ea2c7b1
xchg rbx, r12
mov rcx, r12
xchg r12, rbx
call fcn.1401fc5cc
xchg r11, rbx
mov r11, qword [rdi + 0x1a0]
xchg rbx, r11
test rbx, rbx
je 0x14009216a
xchg rbx, r8
mov rcx, r8
xchg r8, rbx
call fcn.140183b00
mov edx, 0x36bd6384
sub edx, 0xa0c24f0
add edx, 0x18acef65
xor edx, 0x4c85e7f4
xor edx, 0x428e01fa
add edx, 0xa08b3f2
sub edx, 0x322e2615
xor edx, 0x233058fc
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.1401fc5cc
xchg rbx, r12
mov r12, qword [rdi + 0x198]
xchg rbx, r12
test rbx, rbx
je 0x1400921bf
mov rcx, rbx
call fcn.14017ced0
mov edx, 0x150a7768
add edx, 0x39a8eedb
sub edx, 0x33794840
xor edx, 0x4d172260
xor edx, 0x5fe2a812
xor edx, 0x7bcf4eb0
xor edx, 0x7200da61
xchg r11, rbx
mov rcx, r11
xchg r11, rbx
call fcn.1401fc5cc
lea rcx, [rdi + 0x178]
call fcn.14002f7f0
mov rbx, qword [rdi + 0x170]
test rbx, rbx
je 0x140092220
xchg r15, rbx
mov rcx, r15
xchg rbx, r15
call fcn.140186a00
mov edx, 0x77b636fa
xor edx, 0x780326d0
xor edx, 0x75fd8d47
xor edx, 0xfe3360b
sub edx, 0x2c218dc7
add edx, 0x1b45a016
xor edx, 0x779428aa
sub edx, 0x135b945f
mov rcx, rbx
call fcn.1401fc5cc
mov rbx, qword [rdi + 0x168]
test rbx, rbx
je 0x14009226f
mov rcx, rbx
call fcn.140187020
mov edx, 0x1fe0a106
xor edx, 0x48b7d30f
sub edx, 0x4e508e36
add edx, 0x328d2997
add edx, 0x2ad4004
xor edx, 0x6fffbc20
sub edx, 0x51bef0a6
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call fcn.1401fc5cc
xchg r11, rbx
mov r11, qword [rdi + 0x160]
xchg r11, rbx
test rbx, rbx
je 0x1400922c4
xchg r8, rcx
mov r8, rbx
xchg r8, rcx
call fcn.140179960
mov edx, 0x185ac316
sub edx, 0x2f3982c
xor edx, 0x2284c19
sub edx, 0xfbf1503
xor edx, 0x1ceda042
add edx, 0x460a58c
xor edx, 0x1fde979e
mov rcx, rbx
call fcn.1401fc5cc
lea rcx, [rdi + 0x148]
call 0x140091590
lea rcx, [rdi + 0x110]
call fcn.14002f7f0
lea rcx, [rdi + 0xf0]
call fcn.14002f7f0
lea rcx, [rdi + 0xc8]
call fcn.14002f7f0
lea rcx, [rdi + 0xa8]
call fcn.14002f7f0
lea rcx, [rdi + 0x88]
call fcn.14002f7f0
xchg r8, r10
mov r10, qword [rdi + 0x78]
xchg r8, r10
mov r8, qword [r8 + 8]
lea rdx, [rdi + 0x78]
lea rcx, [rdi + 0x78]
call fcn.1400812d0
mov edx, 0x155ecba6
add edx, 0x10d3ee1e
add edx, 0x7e0acf9
add edx, 0x47c7af4
add edx, 0x250c3216
sub edx, 0xf51c86
sub edx, 0x12b9b902
sub edx, 0x43ed3da7
xchg rcx, r12
mov r12, qword [rdi + 0x78]
xchg r12, rcx
call fcn.1401fc5cc
xchg rsi, rbx
mov rsi, qword [rdi + 0x70]
xchg rbx, rsi
test rbx, rbx
je 0x1400923ab
mov rcx, rbx
call fcn.1401889e0
mov edx, 0x2b310da0
xor edx, 0x65468b70
sub edx, 0x10df73da
sub edx, 0xc5702cc
xor edx, 0x7f4291f9
sub edx, 0x4e0380db
mov rcx, rbx
call fcn.1401fc5cc
mov rbx, qword [rdi + 0x68]
test rbx, rbx
je 0x1400923f1
mov rcx, rbx
call fcn.140074490
mov edx, 0x12cacc54
sub edx, 0x6efc4a5
sub edx, 0x29e6701
add edx, 0x6f368933
sub edx, 0x2c99a8ee
xor edx, 0x4bd98083
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call fcn.1401fc5cc
mov rbx, qword [rdi + 0x60]
test rbx, rbx
je 0x14009244f
xchg r13, rbx
mov rcx, r13
xchg rbx, r13
call fcn.1401aca20
mov edx, 0x22a00e0
xor edx, 0x7adde9fe
xor edx, 0x22c61969
sub edx, 0x28b69c87
xor edx, 0x3078304d
add edx, 0x4bbddc14
add edx, 0x13f80901
add edx, 0x4eccbd7
sub edx, 0x65a61451
xchg rcx, rdi
mov rdi, rbx
xchg rdi, rcx
call fcn.1401fc5cc
xchg rbx, r9
mov r9, qword [rdi + 0x58]
xchg r9, rbx
test rbx, rbx
je 0x14009249f
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14009249f
xchg r12, rax
mov r12, qword [rbx]
xchg r12, rax
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x14009249f
xchg rdi, rax
mov rdi, qword [rbx]
xchg rdi, rax
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call qword [rax + 8]
lea rcx, [rdi + 0x30]
call fcn.140091660
lea rcx, [rdi + 0x18]
call fcn.140091660
xchg rcx, r12
mov r12, rdi
xchg r12, rcx
xchg rbx, r15
mov r15, qword [rsp + 0x40]
xchg r15, rbx
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
nop
xchg qword [rsp], r15
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], r14
nop
add rsp, 8
mov rdi, qword [rsp - 8]
jmp fcn.140091660
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3