Function at 0x140091780
Capabilities:
Encode data using xor
Terminate thread

Disassembly:
mov qword [rsp + 8], rbx
xchg rbp, r12
mov qword [rsp + 0x10], r12
xchg rbp, r12
xchg rsi, rdx
mov qword [rsp + 0x18], rdx
xchg rdx, rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
push r14
nop
sub rsp, 8
mov qword [rsp], r15
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
mov byte [rcx + 0x5fc], 0x19
add byte [rcx + 0x5fc], 0x27
add byte [rcx + 0x5fc], 0xa
xor byte [rcx + 0x5fc], 0x2d
sub byte [rcx + 0x5fc], 0x23
add byte [rcx + 0x5fc], 0x2e
xor byte [rcx + 0x5fc], 0x12
add byte [rcx + 0x5fc], 0
xor byte [rcx + 0x5fc], 0x61
xor r15d, r15d
cmp qword [rcx + 0x5c0], r15
je 0x14009187c
mov rcx, qword [rcx + 0x5c8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, 0x335f5c5b
sub edx, 0x4e3511d
xor edx, 0x2ab78164
xor edx, 0x4eba4fe0
sub edx, 0x3a3b7359
add edx, 0x52c7c509
sub edx, 0x62fe1382
xchg rcx, r12
mov r12, qword [rdi + 0x5c0]
xchg rcx, r12
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x14009186f
xor edx, edx
mov rcx, qword [rdi + 0x5c0]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
xchg r8, r15
mov qword [rdi + 0x5c0], r8
xchg r15, r8
mov edx, 0x5c11fcb3
sub edx, 0x51949525
add edx, 0x528389a0
xor edx, 0x612333cd
xor edx, 0x6a0522fb
sub edx, 0x43d559a1
sub edx, 0x1251828f
mov rcx, qword [rdi + 0x5d0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x1400918cc
xor edx, edx
mov rcx, qword [rdi + 0x5d0]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
nop
movabs rsi, 0xffffffff668615ad
sub rsi, 0x1db351a0
sub rsi, 0x1eaa6345
xor rsi, 0xb58de0f
xor rsi, 0x5256a7b7
xor rsi, 0x18c68db9
xor rsi, 0x43b946d2
add rsi, 0x7fffffff
xor rsi, 0x57a62de5
mov qword [rdi + 0x5d0], rsi
xchg rdx, rbp
mov rdx, qword [rdi + 0x2f8]
xchg rdx, rbp
mov r14, qword [rdi + 0x2f0]
cmp r14, rbp
je 0x1400919a7
mov rbx, qword [r14]
xchg r11, rax
mov r11, qword [rbx]
xchg r11, rax
xchg rbx, r12
mov rcx, r12
xchg rbx, r12
call qword [rax + 0x18]
xchg rcx, r8
mov r8, rax
xchg r8, rcx
call fcn.1401fd08c
mov rax, qword [rbx]
mov edx, 0x55f9c7c8
sub edx, 0x2da7b338
add edx, 0x4286f9e1
add edx, 0x24e940f
sub edx, 0x476a9d91
add edx, 0x5131825b
sub edx, 0x1482f69e
xor edx, 0x626b90ad
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call qword [rax]
neg r14
add r14, 0xfffffffffffffff8
neg r14
cmp r14, rbp
jne 0x140091933
xchg rcx, r15
mov r15, qword [rdi + 0x2b8]
xchg r15, rcx
test rcx, rcx
je 0x1400919c2
call fcn.1401fd08c
xchg rcx, rbx
mov rbx, qword [rdi + 0x2c0]
xchg rbx, rcx
test rcx, rcx
je 0x1400919dd
call fcn.1401fd08c
xchg rcx, r12
mov r12, qword [rdi + 0x2c8]
xchg r12, rcx
test rcx, rcx
je 0x1400919f8
call fcn.1401fd08c
mov rcx, qword [rdi + 0x140]
test rcx, rcx
je 0x140091a0d
call fcn.1401fd08c
xchg rbp, rcx
mov rbp, qword [rdi + 0x2d0]
xchg rbp, rcx
test rcx, rcx
je 0x140091a28
call fcn.1401fd08c
lea rcx, [rdi + 0x5d8]
call fcn.14007ae40
lea rcx, [rdi + 0x560]
call fcn.14007ae40
lea rcx, [rdi + 0x548]
call fcn.14007ae40
xchg rbx, r11
mov r11, qword [rdi + 0x320]
xchg r11, rbx
test rbx, rbx
je 0x140091aa3
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091aa3
xchg r8, rax
mov r8, qword [rbx]
xchg r8, rax
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091aa3
mov rax, qword [rbx]
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call qword [rax + 8]
mov rbx, qword [rdi + 0x310]
test rbx, rbx
je 0x140091aea
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091aea
mov rax, qword [rbx]
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091aea
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
xchg r8, rcx
mov r8, qword [rdi + 0x2f0]
xchg r8, rcx
test rcx, rcx
je 0x140091b69
xchg rbp, rdx
mov rbp, qword [rdi + 0x300]
xchg rbp, rdx
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x140091b49
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
xchg rdi, r8
mov rdi, qword [rcx - 8]
xchg rdi, r8
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140092279
mov rcx, r8
call fcn.1401fd08c
xchg r15, r13
mov qword [rdi + 0x2f0], r13
xchg r13, r15
mov qword [rdi + 0x2f8], r15
mov qword [rdi + 0x300], r15
xchg rdx, rbx
mov rdx, qword [rdi + 0x2e8]
xchg rbx, rdx
test rbx, rbx
je 0x140091bc0
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091bc0
xchg rbp, rax
mov rbp, qword [rbx]
xchg rbp, rax
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091bc0
mov rax, qword [rbx]
xchg rbx, r15
mov rcx, r15
xchg r15, rbx
call qword [rax + 8]
mov rbx, qword [rdi + 0x2d8]
test rbx, rbx
je 0x140091c0f
xchg rdi, rbx
mov rcx, rdi
xchg rdi, rbx
call fcn.14017d610
mov edx, 0x24ac0b8c
add edx, 0x1d7925c6
add edx, 0x19ff4b70
sub edx, 0x3171eb5f
xor edx, 0x12875726
sub edx, 0x3835c5a5
xchg rbx, r10
mov rcx, r10
xchg r10, rbx
call fcn.1401fd08c
xchg r15, rbx
mov r15, qword [rdi + 0x2b0]
xchg r15, rbx
test rbx, rbx
je 0x140091c6a
xchg r13, rcx
mov r13, rbx
xchg r13, rcx
call fcn.14017d610
mov edx, 0x1b0731f0
add edx, 0x27949d18
xor edx, 0x7dbc01af
add edx, 0x104294f3
sub edx, 0x1593f65c
sub edx, 0x2bf39ad6
xor edx, 0xde2d2c8
xchg rdi, rcx
mov rdi, rbx
xchg rdi, rcx
call fcn.1401fd08c
mov rbx, qword [rdi + 0x2a8]
test rbx, rbx
je 0x140091cb9
xchg rcx, r9
mov r9, rbx
xchg r9, rcx
call fcn.14017a0f0
mov edx, 0x6e44f9ac
xor edx, 0x6f4469d8
add edx, 0x10c8c5c0
add edx, 0x47971f25
sub edx, 0x45c705a6
sub edx, 0x10f34d1b
sub edx, 0x2a621f8
mov rcx, rbx
call fcn.1401fd08c
xchg rbx, r9
mov r9, qword [rdi + 0x2a0]
xchg r9, rbx
test rbx, rbx
je 0x140091d0e
xchg r8, rcx
mov r8, rbx
xchg r8, rcx
call fcn.14017a970
mov edx, 0x50821d98
xor edx, 0x3704d562
sub edx, 0x2cacad33
sub edx, 0x2517eafc
add edx, 0x5ca20799
sub edx, 0x726437bc
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call fcn.1401fd08c
xchg r15, rbx
mov r15, qword [rdi + 0x298]
xchg r15, rbx
test rbx, rbx
je 0x140091d6f
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.14017a0f0
mov edx, 0x16ab85fe
xor edx, 0x3313b25e
add edx, 0x21626d5e
sub edx, 0x168779ac
xor edx, 0x6188f9ae
sub edx, 0x2ceab916
xor edx, 0x5e93335a
sub edx, 0x7aa22a1c
xchg rbx, rdi
mov rcx, rdi
xchg rbx, rdi
call fcn.1401fd08c
lea rcx, [rdi + 0x278]
call fcn.14002f8f0
lea rcx, [rdi + 0x258]
call fcn.14002f8f0
lea rcx, [rdi + 0x238]
call fcn.14002f8f0
lea rcx, [rdi + 0x218]
call fcn.14002f8f0
lea rcx, [rdi + 0x1f8]
call fcn.14002f8f0
lea rcx, [rdi + 0x1d8]
call fcn.14002f8f0
xchg rbx, r8
mov r8, qword [rdi + 0x1d0]
xchg r8, rbx
test rbx, rbx
je 0x140091e12
xchg r11, rcx
mov r11, rbx
xchg rcx, r11
call fcn.140184210
mov edx, 0x4fe2e68d
sub edx, 0x402bb5b4
xor edx, 0x2ff39582
xor edx, 0x5325206e
xor edx, 0x4a251f7b
xor edx, 0x18a7238c
xor edx, 0x21e3b8ea
xchg rbx, r10
mov rcx, r10
xchg r10, rbx
call fcn.1401fd08c
lea rcx, [rdi + 0x1b0]
call fcn.14002f8f0
xchg rsi, rbx
mov rsi, qword [rdi + 0x1a8]
xchg rsi, rbx
test rbx, rbx
je 0x140091e85
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.14017d610
mov edx, 0x17539204
add edx, 0x3a837750
add edx, 0x1596a58
xor edx, 0xf0dc259
add edx, 0xdf56bf1
sub edx, 0x2e47e2b8
xor edx, 0x3aece841
add edx, 0x4ec876fb
xor edx, 0x4fd04aca
xchg rbx, rdi
mov rcx, rdi
xchg rbx, rdi
call fcn.1401fd08c
mov rbx, qword [rdi + 0x1a0]
test rbx, rbx
je 0x140091ee6
xchg rbx, r15
mov rcx, r15
xchg rbx, r15
call fcn.140184210
mov edx, 0x42c3a3d0
sub edx, 0x26903cad
sub edx, 0x1e0e78f
add edx, 0x15fa3fd2
add edx, 0x17bda9e3
sub edx, 0x318bcefe
add edx, 0x3eafa4fa
xor edx, 0x63486234
sub edx, 0x36665c49
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call fcn.1401fd08c
xchg rbx, rsi
mov rsi, qword [rdi + 0x198]
xchg rsi, rbx
test rbx, rbx
je 0x140091f41
mov rcx, rbx
call fcn.14017d610
mov edx, 0x255ddad9
xor edx, 0x3d7dacea
add edx, 0x5b01074b
sub edx, 0x4b8d56
sub edx, 0x9fcadb3
add edx, 0x12ab0498
sub edx, 0x497654e8
add edx, 0x340e968f
xor edx, 0x661c8814
mov rcx, rbx
call fcn.1401fd08c
lea rcx, [rdi + 0x178]
call fcn.14002f8f0
xchg rbx, r8
mov r8, qword [rdi + 0x170]
xchg r8, rbx
test rbx, rbx
je 0x140091fae
xchg rcx, r11
mov r11, rbx
xchg r11, rcx
call fcn.1401870b0
mov edx, 0x231f0729
add edx, 0x5200155d
xor edx, 0x6e797440
xor edx, 0x5a78cd21
add edx, 0x3589b49b
sub edx, 0x4479825b
add edx, 0x352f2fa2
sub edx, 0x675e0709
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.1401fd08c
xchg r9, rbx
mov r9, qword [rdi + 0x168]
xchg r9, rbx
test rbx, rbx
je 0x140092003
xchg r15, rbx
mov rcx, r15
xchg r15, rbx
call fcn.140187650
mov edx, 0xc1ca2c3
add edx, 0x2243357b
add edx, 0x3c8ec009
sub edx, 0x4dfe3621
add edx, 0x45f95c62
xor edx, 0x62e9be20
xchg rbx, r10
mov rcx, r10
xchg r10, rbx
call fcn.1401fd08c
xchg rbx, r10
mov r10, qword [rdi + 0x160]
xchg rbx, r10
test rbx, rbx
je 0x14009206a
xchg r9, rcx
mov r9, rbx
xchg rcx, r9
call fcn.14017a0f0
mov edx, 0x415ac83
add edx, 0x6d811641
sub edx, 0xb6359c4
sub edx, 0x20ed9c8b
xor edx, 0x16505ada
xor edx, 0x404d97ef
add edx, 0x548d32e3
sub edx, 0x3b0c41d1
sub edx, 0x2cd8f1b2
xchg r10, rcx
mov r10, rbx
xchg r10, rcx
call fcn.1401fd08c
lea rcx, [rdi + 0x148]
call 0x140091310
lea rcx, [rdi + 0x110]
call fcn.14002f8f0
lea rcx, [rdi + 0xf0]
call fcn.14002f8f0
lea rcx, [rdi + 0xc8]
call fcn.14002f8f0
lea rcx, [rdi + 0xa8]
call fcn.14002f8f0
lea rcx, [rdi + 0x88]
call fcn.14002f8f0
mov r8, qword [rdi + 0x78]
mov r8, qword [r8 + 8]
lea rdx, [rdi + 0x78]
lea rcx, [rdi + 0x78]
call fcn.140080fc0
mov edx, 0x14bab684
add edx, 0x5080cc09
sub edx, 0x57317c3c
add edx, 0x4e20bd4d
sub edx, 0x570b1aff
xor edx, 0x3cbb9318
xor edx, 0x20f50174
sub edx, 0x19513a5b
mov rcx, qword [rdi + 0x78]
call fcn.1401fd08c
mov rbx, qword [rdi + 0x70]
test rbx, rbx
je 0x140092145
xchg rcx, r9
mov r9, rbx
xchg r9, rcx
call fcn.140188fd0
mov edx, 0x2c65db6c
add edx, 0x31f13d94
xor edx, 0x35cf1e1e
sub edx, 0x3d18ab8f
sub edx, 0x18191d51
sub edx, 0x16663d46
mov rcx, rbx
call fcn.1401fd08c
mov rbx, qword [rdi + 0x68]
test rbx, rbx
je 0x14009218b
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.1400740c0
mov edx, 0x6f5be031
xor edx, 0xf313ee5
xor edx, 0x3e79d3de
sub edx, 0x2c302516
sub edx, 0x11d06b5e
sub edx, 0x20127c26
mov rcx, rbx
call fcn.1401fd08c
mov rbx, qword [rdi + 0x60]
test rbx, rbx
je 0x1400921d7
xchg r11, rbx
mov rcx, r11
xchg r11, rbx
call fcn.1401ad470
mov edx, 0x1dfb43a8
xor edx, 0x72098836
xor edx, 0x1aa4fff5
sub edx, 0x3b86378f
add edx, 0x108bfd4c
xor edx, 0x4a5bfa70
xchg rbx, r12
mov rcx, r12
xchg rbx, r12
call fcn.1401fd08c
mov rbx, qword [rdi + 0x58]
test rbx, rbx
je 0x14009221d
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14009221d
xchg rbp, rax
mov rbp, qword [rbx]
xchg rbp, rax
xchg rbx, rbp
mov rcx, rbp
xchg rbx, rbp
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x14009221d
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lea rcx, [rdi + 0x30]
call fcn.1400913c0
lea rcx, [rdi + 0x18]
call fcn.1400913c0
mov rcx, rdi
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
xchg rsi, r14
mov r14, qword [rsp + 0x50]
xchg rsi, r14
add rsp, 0x20
push rcx
push rbx
push rax
push rdx
push rbx
push rcx
xchg qword [rsp + 0x30], r15
add rsp, 0x38
push rax
push rcx
push rax
xchg qword [rsp + 0x18], r14
pop rax
pop rcx
pop rax
add rsp, 8
push rcx
push rax
xchg qword [rsp + 0x10], rdi
add rsp, 0x18
jmp fcn.1400913c0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3