Function at 0x140091630
Capabilities:
Encode data using xor
Terminate thread

Disassembly:
xchg rsi, rbx
mov qword [rsp + 8], rsi
xchg rbx, rsi
xchg rcx, rbp
mov qword [rsp + 0x10], rcx
xchg rcx, rbp
xchg r15, rsi
mov qword [rsp + 0x18], r15
xchg r15, rsi
nop
sub rsp, 8
mov qword [rsp], rdi
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
push 0x1fca4529
mov qword [rsp], r15
sub rsp, 0x20
mov rdi, rcx
mov byte [rcx + 0x5fc], 9
sub byte [rcx + 0x5fc], 5
add byte [rcx + 0x5fc], 0x6e
sub byte [rcx + 0x5fc], 0x30
sub byte [rcx + 0x5fc], 0x1a
add byte [rcx + 0x5fc], 0
xor byte [rcx + 0x5fc], 0x51
sub byte [rcx + 0x5fc], 0x4a
sub byte [rcx + 0x5fc], 0x2e
xor r15d, r15d
cmp qword [rcx + 0x5c0], r15
je 0x14009173a
mov rcx, qword [rcx + 0x5c8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, 0x68b9f67d
xor edx, 0x2265f650
xor edx, 0x46231f93
add edx, 0x50479f80
sub edx, 0x537e898a
add edx, 0x3113a888
xor edx, 0x63414a5f
sub edx, 0x599a907b
xchg rcx, r14
mov r14, qword [rdi + 0x5c0]
xchg rcx, r14
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140091733
xor edx, edx
xchg rbp, rcx
mov rbp, qword [rdi + 0x5c0]
xchg rbp, rcx
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov qword [rdi + 0x5c0], r15
mov edx, 0x49b84aa3
xor edx, 0x4cb5a82b
add edx, 0x2a6a3f30
add edx, 0x178ac0a9
sub edx, 0x399137e2
sub edx, 0xd71a697
xchg rcx, r13
mov r13, qword [rdi + 0x5d0]
xchg r13, rcx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x14009178a
xor edx, edx
mov rcx, qword [rdi + 0x5d0]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
nop
movabs rsi, 0xffffffff6be5ab1f
xor rsi, 0x42b35584
xor rsi, 0x7c4ab3a1
sub rsi, 0x12bda87a
add rsi, 0x1906de88
add rsi, 0x1a228a5b
xor rsi, 0x77a98dd6
add rsi, 0x7fffffff
xor rsi, 0x7dde7f8b
mov qword [rdi + 0x5d0], rsi
xchg rbp, rbx
mov rbx, qword [rdi + 0x2f8]
xchg rbx, rbp
mov r14, qword [rdi + 0x2f0]
cmp r14, rbp
je 0x140091863
mov rbx, qword [r14]
xchg r10, rax
mov r10, qword [rbx]
xchg r10, rax
xchg rbx, r8
mov rcx, r8
xchg r8, rbx
call qword [rax + 0x18]
xchg rdx, rax
mov rcx, rdx
xchg rdx, rax
call fcn.1401fcb88
mov rax, qword [rbx]
mov edx, 0x59fd865c
sub edx, 0x4d794524
sub edx, 0x3c63d1d
xor edx, 0x42bed212
sub edx, 0x2fa85fbe
xor edx, 0x42d672be
xor edx, 0x3608a8a7
sub edx, 0x6e86ac51
xchg rcx, rbp
mov rbp, rbx
xchg rcx, rbp
call qword [rax]
neg r14
add r14, 0xfffffffffffffff8
neg r14
cmp r14, rbp
jne 0x1400917f1
mov rcx, qword [rdi + 0x2b8]
test rcx, rcx
je 0x140091878
call fcn.1401fcb88
mov rcx, qword [rdi + 0x2c0]
test rcx, rcx
je 0x14009188d
call fcn.1401fcb88
mov rcx, qword [rdi + 0x2c8]
test rcx, rcx
je 0x1400918a2
call fcn.1401fcb88
xchg rcx, r15
mov r15, qword [rdi + 0x140]
xchg r15, rcx
test rcx, rcx
je 0x1400918bd
call fcn.1401fcb88
xchg rcx, r13
mov r13, qword [rdi + 0x2d0]
xchg r13, rcx
test rcx, rcx
je 0x1400918d8
call fcn.1401fcb88
lea rcx, [rdi + 0x5d8]
call fcn.14007ae50
lea rcx, [rdi + 0x560]
call fcn.14007ae50
lea rcx, [rdi + 0x548]
call fcn.14007ae50
xchg rbx, rbp
mov rbp, qword [rdi + 0x320]
xchg rbp, rbx
test rbx, rbx
je 0x140091953
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091953
mov rax, qword [rbx]
xchg rcx, r15
mov r15, rbx
xchg rcx, r15
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091953
xchg r13, rax
mov r13, qword [rbx]
xchg r13, rax
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call qword [rax + 8]
xchg rbx, r15
mov r15, qword [rdi + 0x310]
xchg rbx, r15
test rbx, rbx
je 0x1400919a6
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400919a6
mov rax, qword [rbx]
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400919a6
mov rax, qword [rbx]
xchg r15, rbx
mov rcx, r15
xchg rbx, r15
call qword [rax + 8]
xchg r8, rcx
mov r8, qword [rdi + 0x2f0]
xchg r8, rcx
test rcx, rcx
je 0x140091a1f
mov rdx, qword [rdi + 0x300]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x1400919ff
add rdx, 0x27
xchg r8, rdi
mov rdi, qword [rcx - 8]
xchg rdi, r8
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14009211d
xchg rcx, rdi
mov rdi, r8
xchg rdi, rcx
call fcn.1401fcb88
mov qword [rdi + 0x2f0], r15
mov qword [rdi + 0x2f8], r15
xchg r15, rsi
mov qword [rdi + 0x300], rsi
xchg rsi, r15
xchg rbx, r9
mov r9, qword [rdi + 0x2e8]
xchg rbx, r9
test rbx, rbx
je 0x140091a7a
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091a7a
xchg r8, rax
mov r8, qword [rbx]
xchg r8, rax
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091a7a
xchg rcx, rax
mov rcx, qword [rbx]
xchg rcx, rax
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call qword [rax + 8]
xchg r11, rbx
mov r11, qword [rdi + 0x2d8]
xchg r11, rbx
test rbx, rbx
je 0x140091acf
mov rcx, rbx
call fcn.14017d100
mov edx, 0x75e00afb
sub edx, 0x4f99e0e9
sub edx, 0x160944a6
xor edx, 0x737c9756
add edx, 0xc192173
xor edx, 0x4b32931e
sub edx, 0x246b0013
xchg r8, rcx
mov r8, rbx
xchg r8, rcx
call fcn.1401fcb88
mov rbx, qword [rdi + 0x2b0]
test rbx, rbx
je 0x140091b1e
xchg r14, rbx
mov rcx, r14
xchg rbx, r14
call fcn.14017d100
mov edx, 0x7e1e8088
sub edx, 0x3017a498
sub edx, 0x3bdb3357
xor edx, 0x110f901b
add edx, 0x6e603183
xor edx, 0x71846aa5
xchg r14, rbx
mov rcx, r14
xchg rbx, r14
call fcn.1401fcb88
xchg r9, rbx
mov r9, qword [rdi + 0x2a8]
xchg r9, rbx
test rbx, rbx
je 0x140091b73
mov rcx, rbx
call fcn.140179a90
mov edx, 0x6b494001
xor edx, 0x782dbf39
sub edx, 0x2e782dd
add edx, 0x6aba563f
xor edx, 0x5efeefa9
add edx, 0x14bb3940
sub edx, 0x25ce8268
sub edx, 0x14b5f36b
mov rcx, rbx
call fcn.1401fcb88
xchg r15, rbx
mov r15, qword [rdi + 0x2a0]
xchg rbx, r15
test rbx, rbx
je 0x140091bc2
xchg r15, rcx
mov r15, rbx
xchg r15, rcx
call fcn.14017a360
mov edx, 0xc554d15
add edx, 0x19c2432a
xor edx, 0x3342caa7
sub edx, 0x2d3692d
add edx, 0x7c49247
xor edx, 0x1a46831a
mov rcx, rbx
call fcn.1401fcb88
xchg r12, rbx
mov r12, qword [rdi + 0x298]
xchg r12, rbx
test rbx, rbx
je 0x140091c23
xchg rbx, rsi
mov rcx, rsi
xchg rsi, rbx
call fcn.140179a90
mov edx, 0x762fab
add edx, 0x102df024
add edx, 0x2460dc8d
xor edx, 0x2e3d58ec
add edx, 0x2376de6c
xor edx, 0x37390417
add edx, 0x48263d47
xor edx, 0x6a1abf0
sub edx, 0x570e6f02
mov rcx, rbx
call fcn.1401fcb88
lea rcx, [rdi + 0x278]
call fcn.14002f780
lea rcx, [rdi + 0x258]
call fcn.14002f780
lea rcx, [rdi + 0x238]
call fcn.14002f780
lea rcx, [rdi + 0x218]
call fcn.14002f780
lea rcx, [rdi + 0x1f8]
call fcn.14002f780
lea rcx, [rdi + 0x1d8]
call fcn.14002f780
xchg r11, rbx
mov r11, qword [rdi + 0x1d0]
xchg rbx, r11
test rbx, rbx
je 0x140091cba
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.140183da0
mov edx, 0x5c8d4cdd
xor edx, 0x2a04a401
sub edx, 0xae53695
sub edx, 0x28a1fffc
add edx, 0x304c46f1
xor edx, 0x734ef814
mov rcx, rbx
call fcn.1401fcb88
lea rcx, [rdi + 0x1b0]
call fcn.14002f780
mov rbx, qword [rdi + 0x1a8]
test rbx, rbx
je 0x140091d1b
xchg rdi, rcx
mov rdi, rbx
xchg rcx, rdi
call fcn.14017d100
mov edx, 0x3b5a8c4a
sub edx, 0x36eff2b7
add edx, 0x6314e2cd
xor edx, 0xc39aa00
sub edx, 0x4a649f09
add edx, 0x1678edc
sub edx, 0x2249c593
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call fcn.1401fcb88
xchg r14, rbx
mov r14, qword [rdi + 0x1a0]
xchg r14, rbx
test rbx, rbx
je 0x140091d70
mov rcx, rbx
call fcn.140183da0
mov edx, 0x61948a17
xor edx, 0xa4550f6
xor edx, 0x54b1a7a2
sub edx, 0x23de5c0e
add edx, 0x2c11c5e7
xor edx, 0x37be898f
sub edx, 0x5f209283
sub edx, 0x110cdae8
mov rcx, rbx
call fcn.1401fcb88
xchg rcx, rbx
mov rcx, qword [rdi + 0x198]
xchg rbx, rcx
test rbx, rbx
je 0x140091dd1
xchg r9, rcx
mov r9, rbx
xchg r9, rcx
call fcn.14017d100
mov edx, 0x53273a76
sub edx, 0x45c18dc6
xor edx, 0x64225ec3
sub edx, 0x3a6440b4
add edx, 0x13f6633a
sub edx, 0x101fc40b
xor edx, 0x54f540f5
sub edx, 0x2dd53f49
sub edx, 0x3879d032
mov rcx, rbx
call fcn.1401fcb88
lea rcx, [rdi + 0x178]
call fcn.14002f780
mov rbx, qword [rdi + 0x170]
test rbx, rbx
je 0x140091e32
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.140186c30
mov edx, 0x60686193
xor edx, 0x21b15c3d
sub edx, 0x39f55b0e
sub edx, 0x5ddf033
add edx, 0x38e845c8
xor edx, 0x2d435d79
sub edx, 0x17ad648c
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.1401fcb88
mov rbx, qword [rdi + 0x168]
test rbx, rbx
je 0x140091e87
xchg rcx, r12
mov r12, rbx
xchg rcx, r12
call fcn.140187250
mov edx, 0x344b0de
add edx, 0x1f436c42
add edx, 0x4419272f
sub edx, 0x142ed7c1
xor edx, 0x433f6779
add edx, 0x4c609ffb
xor edx, 0x5dadab5a
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.1401fcb88
mov rbx, qword [rdi + 0x160]
test rbx, rbx
je 0x140091edc
mov rcx, rbx
call fcn.140179a90
mov edx, 0x36982537
add edx, 0x31356e4a
xor edx, 0x1caab5c6
xor edx, 0xe1d89fb
sub edx, 0x4dceb481
xor edx, 0x2b610459
sub edx, 0x9a6843
sub edx, 0xc30967f
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.1401fcb88
lea rcx, [rdi + 0x148]
call 0x140091150
lea rcx, [rdi + 0x110]
call fcn.14002f780
lea rcx, [rdi + 0xf0]
call fcn.14002f780
lea rcx, [rdi + 0xc8]
call fcn.14002f780
lea rcx, [rdi + 0xa8]
call fcn.14002f780
lea rcx, [rdi + 0x88]
call fcn.14002f780
xchg r8, r11
mov r11, qword [rdi + 0x78]
xchg r11, r8
mov r8, qword [r8 + 8]
lea rdx, [rdi + 0x78]
lea rcx, [rdi + 0x78]
call fcn.140080ed0
mov edx, 0x15b8debc
xor edx, 0x597e5f53
xor edx, 0x127c4330
xor edx, 0x7809110a
sub edx, 0x1e0c7626
sub edx, 0x8a75d17
mov rcx, qword [rdi + 0x78]
call fcn.1401fcb88
xchg rcx, rbx
mov rcx, qword [rdi + 0x70]
xchg rcx, rbx
test rbx, rbx
je 0x140091fcf
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call fcn.140188c00
mov edx, 0x28ce2f53
xor edx, 0x4111993e
add edx, 0x109c2db0
sub edx, 0x291ef94a
xor edx, 0x459dd251
sub edx, 0xff2c78
sub edx, 0x134453e8
add edx, 0x417446e8
sub edx, 0x41f1fe12
xchg rdi, rcx
mov rdi, rbx
xchg rcx, rdi
call fcn.1401fcb88
mov rbx, qword [rdi + 0x68]
test rbx, rbx
je 0x14009201b
xchg r8, rbx
mov rcx, r8
xchg rbx, r8
call fcn.1400741a0
mov edx, 0x291ae301
add edx, 0x2cd54fd7
add edx, 0x23ba9cf1
xor edx, 0x1ea1d274
sub edx, 0x230f0202
sub edx, 0x14ba4969
sub edx, 0x2f41d1e2
mov rcx, rbx
call fcn.1401fcb88
mov rbx, qword [rdi + 0x60]
test rbx, rbx
je 0x140092073
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.1401ad0a0
mov edx, 0x50cea1a0
sub edx, 0x2f20b8d5
xor edx, 0x7c1e5468
xor edx, 0x2ce061c0
sub edx, 0x35c915ca
xor edx, 0x6cd5cdb
add edx, 0x23991f47
xor edx, 0x60e0bad1
xchg rbx, rdx
mov rcx, rdx
xchg rdx, rbx
call fcn.1401fcb88
mov rbx, qword [rdi + 0x58]
test rbx, rbx
je 0x1400920b5
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400920b5
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x1400920b5
mov rax, qword [rbx]
xchg rbx, r11
mov rcx, r11
xchg rbx, r11
call qword [rax + 8]
lea rcx, [rdi + 0x30]
call fcn.140091210
lea rcx, [rdi + 0x18]
call fcn.140091210
xchg rdi, rbx
mov rcx, rbx
xchg rdi, rbx
xchg rbx, r9
mov r9, qword [rsp + 0x40]
xchg rbx, r9
xchg rbp, rdi
mov rdi, qword [rsp + 0x48]
xchg rbp, rdi
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
nop
mov r15, qword [rsp]
add rsp, 8
nop
xchg qword [rsp], r14
add rsp, 8
push rbx
push rcx
push rdx
push rax
push rbx
push rax
push rdx
xchg qword [rsp + 0x38], rdi
pop rdx
pop rax
pop rbx
pop rax
pop rdx
pop rcx
pop rbx
add rsp, 8
jmp fcn.140091210
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3