Function at 0x1400169d0
Capabilities:
Create thread
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
movaps xmmword [rsp + 0x70], xmm7
mov rax, qword [0x140036040]
xor rax, rsp
mov qword [rbp - 0x18], rax
mov r14, rcx
xor r15d, r15d
mov rax, qword [0x140036e48]
test rax, rax
jne 0x140016ffd
cmp word [0x140036e60], r15w
jne 0x140016ffd
cmp qword [0x140036e68], r15
jne 0x140016ffd
movsd xmm0, qword [0x140028de0]
movsd qword [rbp - 0x40], xmm0
mov ecx, dword [0x140028de8]
mov dword [rbp - 0x38], ecx
movzx eax, byte [0x140028dec]
mov byte [rbp - 0x34], al
mov r8d, r15d
movdqa xmm7, xmmword [0x140030d70]
mov ebx, dword [0x140036010]
cmp ebx, 2
jl 0x140016bb8
movdqa xmm4, xmmword [0x140030e00]
movdqa xmm5, xmmword [0x140030d40]
movdqa xmm2, xmmword [0x140030cd0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140030d90]
movd xmm0, dword [0x140028de0]
xorps xmm2, xmm0
movd dword [rbp - 0x40], xmm2
movdqa xmm2, xmmword [0x140030ce0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140030d90]
movd xmm0, dword [rbp - 0x3c]
xorps xmm2, xmm0
movd dword [rbp - 0x3c], xmm2
movdqa xmm3, xmmword [0x140030cf0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmmword [0x140030d90]
movd xmm0, ecx
xorps xmm3, xmm0
movd dword [rbp - 0x38], xmm3
mov r8d, 0xc
mov eax, r8d
lea r9, [rbp - 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140016bd0
mov r8b, 1
mov rdx, qword [str.NtShutdownSystem]
lea rcx, [rbp - 0x40]
call fcn.140014d10
mov dword [0x140036e5c], eax
mov ecx, 0xfff
and ax, cx
mov word [0x140036e60], ax
movsd xmm0, qword [0x140028de0]
movsd qword [rbp - 0x40], xmm0
mov ecx, dword [0x140028de8]
mov dword [rbp - 0x38], ecx
movzx eax, byte [0x140028dec]
mov byte [rbp - 0x34], al
mov r8d, r15d
cmp ebx, 2
jl 0x140016da4
movdqa xmm4, xmmword [0x140030e00]
movdqa xmm5, xmmword [0x140030d40]
movdqa xmm3, xmmword [0x140030cd0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
mov eax, dword [0x140030d90]
movd xmm0, eax
paddb xmm3, xmm0
movd xmm0, dword [0x140028de0]
xorps xmm3, xmm0
movd dword [rbp - 0x40], xmm3
movdqa xmm2, xmmword [0x140030ce0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x3c]
xorps xmm2, xmm1
movd dword [rbp - 0x3c], xmm2
movdqa xmm3, xmmword [0x140030cf0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, eax
paddb xmm3, xmm0
movd xmm1, ecx
xorps xmm3, xmm1
movd dword [rbp - 0x38], xmm3
mov r8d, 0xc
mov eax, r8d
lea r9, [rbp - 0x40]
add r9, rax
nop
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140016db0
xor edx, edx
mov r8d, 1
lea rcx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov qword [0x140036e68], rax
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov qword [rbp - 0x20], r15
mov rbx, qword [0x140036fd8]
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
jne 0x140016f23
lea r12, [0x140017f40]
mov rsi, qword [rbx + 0x20]
mov rdi, qword [rbx + 0x28]
mov ecx, 0x20
call fcn.140025c50
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], r12
mov qword [rbp - 0x40], rax
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140024390]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140016f13
mov rdx, qword [rbp - 0x28]
cmp rdx, qword [rbp - 0x20]
je 0x140016e9e
xorps xmm0, xmm0
movaps xmm1, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
movups xmmword [rdx], xmm1
mov rdi, qword [rbp - 0x28]
add rdi, 0x10
mov qword [rbp - 0x28], rdi
jmp 0x140016eaf
lea r8, [rbp - 0x50]
lea rcx, [rbp - 0x30]
call fcn.140023de0
mov rdi, qword [rbp - 0x28]
cmp dword [rbp - 0x48], 0
jne 0x140016f0c
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x140016ee8
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x140016ee3
nop dword [rax]
cmp rbx, qword [rax + 0x10]
jne 0x140016ee3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140016ed0
mov rbx, rax
jmp 0x140016f00
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
jne 0x140016f00
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x140016ef4
cmp byte [rbx + 0x19], 0
je 0x140016e23
jmp 0x140016f27
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov dword [rbp - 0x48], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov rdi, qword [rbp - 0x28]
mov rbx, qword [rbp - 0x30]
cmp rbx, rdi
je 0x140016f77
cmp dword [rbx + 8], 0
je 0x140016fe2
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbx + 8], eax
je 0x140016fd6
movups xmm0, xmmword [rbx]
movaps xmmword [rbp - 0x50], xmm0
xor edx, edx
lea rcx, [rbp - 0x50]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140016fca
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
add rbx, 0x10
cmp rbx, rdi
jne 0x140016f30
mov rdi, qword [rbp - 0x28]
mov rbx, qword [rbp - 0x30]
test rbx, rbx
je 0x140016ffd
mov rax, rbx
cmp rbx, rdi
je 0x140016f97
cmp dword [rax + 8], 0
jne 0x140016fee
add rax, 0x10
cmp rax, rdi
jne 0x140016f88
mov rdx, qword [rbp - 0x20]
sub rdx, rbx
and rdx, 0xfffffffffffffff0
mov rax, rbx
cmp rdx, 0x1000
jb 0x140016ff5
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016ff5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov rcx, rbx
call fcn.140025c94
mov rax, r14
mov rcx, qword [rbp - 0x18]
xor rcx, rsp
call fcn.140025c30
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm7, xmmword [rsp + 0x70]
mov rsp, r11
pop r15
pop r14
pop rbp
ret