Function at 0x1400918e0
Capabilities:
Encode data using xor
Terminate thread

Disassembly:
mov qword [rsp + 8], rbx
xchg rbp, r12
mov qword [rsp + 0x10], r12
xchg rbp, r12
mov qword [rsp + 0x18], rsi
nop
push 0x43a9d7ac
mov qword [rsp], rdi
nop
sub rsp, 8
mov qword [rsp], r14
nop
push 0x582bc037
mov qword [rsp], r15
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
mov byte [rcx + 0x5fc], 0x40
add byte [rcx + 0x5fc], 0x27
xor byte [rcx + 0x5fc], 0x2a
xor byte [rcx + 0x5fc], 0x61
sub byte [rcx + 0x5fc], 0x19
xor byte [rcx + 0x5fc], 0x16
add byte [rcx + 0x5fc], 0x68
sub byte [rcx + 0x5fc], 0x6c
xor r15d, r15d
cmp qword [rcx + 0x5c0], r15
je 0x1400919e3
mov rcx, qword [rcx + 0x5c8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, 0x57ee2e16
add edx, 0x21dfe54f
sub edx, 0x3075c4bb
xor edx, 0x1cf453ab
sub edx, 0x51564478
add edx, 0x2e8ba34a
add edx, 0x2ef310ab
sub edx, 0x61d48896
xchg r11, rcx
mov r11, qword [rdi + 0x5c0]
xchg rcx, r11
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x1400919d6
xor edx, edx
xchg rcx, r8
mov r8, qword [rdi + 0x5c0]
xchg rcx, r8
call qword [sym.imp.KERNEL32.dll_TerminateThread]
xchg r12, r15
mov qword [rdi + 0x5c0], r12
xchg r15, r12
mov edx, 0xc399fba
add edx, 0x20855f7b
sub edx, 0x23f4585c
xor edx, 0x2afee3b1
sub edx, 0x95487d9
add edx, 0x552c4d01
sub edx, 0x4e1efd92
sub edx, 0x1fed0916
mov rcx, qword [rdi + 0x5d0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140091a3f
xor edx, edx
xchg r14, rcx
mov r14, qword [rdi + 0x5d0]
xchg rcx, r14
call qword [sym.imp.KERNEL32.dll_TerminateThread]
nop
movabs rsi, 0xffffffff53d6b705
sub rsi, 0x4058fcb3
sub rsi, 0x6bab7c5
add rsi, 0xc062078
xor rsi, 0x6a715d89
xor rsi, 0x32886e60
add rsi, 0x7fffffff
add rsi, 0x3fcfef14
mov qword [rdi + 0x5d0], rsi
mov rbp, qword [rdi + 0x2f8]
xchg rdx, r14
mov rdx, qword [rdi + 0x2f0]
xchg rdx, r14
cmp r14, rbp
je 0x140091b07
xchg r13, rbx
mov r13, qword [r14]
xchg r13, rbx
xchg rdi, rax
mov rdi, qword [rbx]
xchg rdi, rax
xchg r10, rbx
mov rcx, r10
xchg rbx, r10
call qword [rax + 0x18]
mov rcx, rax
call fcn.1401fcba8
mov rax, qword [rbx]
mov edx, 0x39f5a65f
add edx, 0x322d4236
xor edx, 0x7ee2c50c
add edx, 0x5235a680
xor edx, 0x7e1bd377
xor edx, 0x6bbb3821
sub edx, 0x71553f4e
xchg rbx, r11
mov rcx, r11
xchg r11, rbx
call qword [rax]
add r14, 8
cmp r14, rbp
jne 0x140091a9f
mov rcx, qword [rdi + 0x2b8]
test rcx, rcx
je 0x140091b1c
call fcn.1401fcba8
xchg rcx, r15
mov r15, qword [rdi + 0x2c0]
xchg rcx, r15
test rcx, rcx
je 0x140091b37
call fcn.1401fcba8
xchg rcx, rbx
mov rbx, qword [rdi + 0x2c8]
xchg rcx, rbx
test rcx, rcx
je 0x140091b52
call fcn.1401fcba8
mov rcx, qword [rdi + 0x140]
test rcx, rcx
je 0x140091b67
call fcn.1401fcba8
mov rcx, qword [rdi + 0x2d0]
test rcx, rcx
je 0x140091b7c
call fcn.1401fcba8
lea rcx, [rdi + 0x5d8]
call fcn.14007b070
lea rcx, [rdi + 0x560]
call fcn.14007b070
lea rcx, [rdi + 0x548]
call fcn.14007b070
xchg rbp, rbx
mov rbp, qword [rdi + 0x320]
xchg rbp, rbx
test rbx, rbx
je 0x140091bf1
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091bf1
mov rax, qword [rbx]
xchg r13, rbx
mov rcx, r13
xchg r13, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091bf1
xchg r10, rax
mov r10, qword [rbx]
xchg r10, rax
mov rcx, rbx
call qword [rax + 8]
mov rbx, qword [rdi + 0x310]
test rbx, rbx
je 0x140091c42
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091c42
mov rax, qword [rbx]
xchg rcx, r10
mov r10, rbx
xchg r10, rcx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091c42
xchg r13, rax
mov r13, qword [rbx]
xchg r13, rax
xchg rcx, r10
mov r10, rbx
xchg rcx, r10
call qword [rax + 8]
xchg r13, rcx
mov r13, qword [rdi + 0x2f0]
xchg rcx, r13
test rcx, rcx
je 0x140091cc6
xchg r15, rdx
mov r15, qword [rdi + 0x300]
xchg r15, rdx
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x140091ca0
nop
sub rdx, 0x413ad875
add rdx, 0x413ad89c
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400923dd
mov rcx, r8
call fcn.1401fcba8
xchg r15, rcx
mov qword [rdi + 0x2f0], rcx
xchg rcx, r15
xchg r15, r11
mov qword [rdi + 0x2f8], r11
xchg r11, r15
mov qword [rdi + 0x300], r15
mov rbx, qword [rdi + 0x2e8]
test rbx, rbx
je 0x140091d17
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091d17
xchg rdi, rax
mov rdi, qword [rbx]
xchg rdi, rax
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091d17
mov rax, qword [rbx]
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call qword [rax + 8]
mov rbx, qword [rdi + 0x2d8]
test rbx, rbx
je 0x140091d72
xchg rdx, rcx
mov rdx, rbx
xchg rdx, rcx
call fcn.14017d840
mov edx, 0x5e96b6ef
sub edx, 0x168a3d3d
sub edx, 0x1963fb66
xor edx, 0x308ec6da
add edx, 0xdd10259
xor edx, 0x87b9c94
xor edx, 0x12e25396
sub edx, 0x316e754d
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.1401fcba8
xchg rbx, r10
mov r10, qword [rdi + 0x2b0]
xchg r10, rbx
test rbx, rbx
je 0x140091dcd
xchg r10, rbx
mov rcx, r10
xchg r10, rbx
call fcn.14017d840
mov edx, 0x7e840f51
sub edx, 0x3a0c73e0
xor edx, 0x1c8f6739
add edx, 0x4dcfcd4
sub edx, 0x2028357b
sub edx, 0x102a11ce
xor edx, 0x2d83b173
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.1401fcba8
mov rbx, qword [rdi + 0x2a8]
test rbx, rbx
je 0x140091e1c
xchg rbx, r8
mov rcx, r8
xchg rbx, r8
call fcn.14017a240
mov edx, 0x10a8330
add edx, 0x19c5ec69
xor edx, 0x6636b9ac
sub edx, 0x6483168c
sub edx, 0x14777bc5
xor edx, 0x3ec4344
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.1401fcba8
xchg rbx, r13
mov r13, qword [rdi + 0x2a0]
xchg rbx, r13
test rbx, rbx
je 0x140091e71
mov rcx, rbx
call fcn.14017ab00
mov edx, 0x553cd7ab
sub edx, 0x38248985
add edx, 0x6fa6e59
sub edx, 0xcfb28b5
xor edx, 0x485ac2d2
sub edx, 0x1ef7946a
xor edx, 0x4055bc06
xchg rcx, r15
mov r15, rbx
xchg rcx, r15
call fcn.1401fcba8
mov rbx, qword [rdi + 0x298]
test rbx, rbx
je 0x140091eba
mov rcx, rbx
call fcn.14017a240
mov edx, 0x68784e51
xor edx, 0x5607d323
xor edx, 0x61e88b35
sub edx, 0x2862d870
add edx, 0x3c8aaae8
sub edx, 0x73bee81f
xchg rbx, rdi
mov rcx, rdi
xchg rbx, rdi
call fcn.1401fcba8
lea rcx, [rdi + 0x278]
call fcn.14002f810
lea rcx, [rdi + 0x258]
call fcn.14002f810
lea rcx, [rdi + 0x238]
call fcn.14002f810
lea rcx, [rdi + 0x218]
call fcn.14002f810
lea rcx, [rdi + 0x1f8]
call fcn.14002f810
lea rcx, [rdi + 0x1d8]
call fcn.14002f810
xchg rbx, r15
mov r15, qword [rdi + 0x1d0]
xchg r15, rbx
test rbx, rbx
je 0x140091f5d
xchg rbp, rbx
mov rcx, rbp
xchg rbp, rbx
call fcn.1401843a0
mov edx, 0xd28d064
add edx, 0x242255f
add edx, 0x6b9b7e6a
xor edx, 0x1dfc45d4
sub edx, 0x193d10ad
sub edx, 0x800ef6d
xor edx, 0x45bc30f7
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.1401fcba8
lea rcx, [rdi + 0x1b0]
call fcn.14002f810
mov rbx, qword [rdi + 0x1a8]
test rbx, rbx
je 0x140091fbe
xchg rbx, r14
mov rcx, r14
xchg r14, rbx
call fcn.14017d840
mov edx, 0x11b7d6fe
add edx, 0x51e92717
xor edx, 0x56fb9ae4
xor edx, 0x4bc9f1e8
sub edx, 0x328895ba
xor edx, 0x7c920211
add edx, 0x1309b989
sub edx, 0x43a5b637
mov rcx, rbx
call fcn.1401fcba8
mov rbx, qword [rdi + 0x1a0]
test rbx, rbx
je 0x14009201f
xchg rdx, rbx
mov rcx, rdx
xchg rdx, rbx
call fcn.1401843a0
mov edx, 0x16d4c302
xor edx, 0x1d3ea93f
xor edx, 0x2877d6bc
xor edx, 0x5ad1df91
sub edx, 0x1dbd62d
xor edx, 0x1436f168
sub edx, 0x262ff6f1
sub edx, 0x389480f4
sub edx, 0x482047e
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call fcn.1401fcba8
xchg rbx, r12
mov r12, qword [rdi + 0x198]
xchg rbx, r12
test rbx, rbx
je 0x140092074
mov rcx, rbx
call fcn.14017d840
mov edx, 0x14fb1bb1
add edx, 0x73a4a44
xor edx, 0x734108f0
sub edx, 0x2ca9ee2c
add edx, 0x10ae5fba
add edx, 0xdc9cf1e
sub edx, 0x6142ad11
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.1401fcba8
lea rcx, [rdi + 0x178]
call fcn.14002f810
mov rbx, qword [rdi + 0x170]
test rbx, rbx
je 0x1400920cf
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call fcn.140187250
mov edx, 0x6b2ce848
xor edx, 0x687e7f36
xor edx, 0x219a1ea7
add edx, 0x2b4abb6b
xor edx, 0x3552af9
sub edx, 0x15d93b9e
sub edx, 0x376d335f
mov rcx, rbx
call fcn.1401fcba8
mov rbx, qword [rdi + 0x168]
test rbx, rbx
je 0x14009212a
xchg r13, rbx
mov rcx, r13
xchg rbx, r13
call fcn.140187860
mov edx, 0x71467220
xor edx, 0x51be0c24
add edx, 0x3d850d79
add edx, 0x1759ecd5
sub edx, 0x22231841
xor edx, 0x38bb824e
sub edx, 0x1f41de5f
sub edx, 0x4bce0358
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.1401fcba8
xchg rbx, rsi
mov rsi, qword [rdi + 0x160]
xchg rbx, rsi
test rbx, rbx
je 0x14009218b
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.14017a240
mov edx, 0x1bfaa1b8
add edx, 0x1f261e0c
add edx, 0x27da44e0
sub edx, 0x27c28aca
sub edx, 0x14f80a37
add edx, 0x6d16048
sub edx, 0x564dc8c
xor edx, 0x27acf3ff
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.1401fcba8
lea rcx, [rdi + 0x148]
call fcn.140091430
lea rcx, [rdi + 0x110]
call fcn.14002f810
lea rcx, [rdi + 0xf0]
call fcn.14002f810
lea rcx, [rdi + 0xc8]
call fcn.14002f810
lea rcx, [rdi + 0xa8]
call fcn.14002f810
lea rcx, [rdi + 0x88]
call fcn.14002f810
mov r8, qword [rdi + 0x78]
mov r8, qword [r8 + 8]
lea rdx, [rdi + 0x78]
lea rcx, [rdi + 0x78]
call fcn.1400812a0
mov edx, 0x75ff1ab9
xor edx, 0x5d58eb78
add edx, 0x3d07310
add edx, 0x2d863e11
xor edx, 0x3fe189f3
xor edx, 0x36ecf6ca
add edx, 0x124bf55d
sub edx, 0x4554f58d
xor edx, 0x1deadd33
mov rcx, qword [rdi + 0x78]
call fcn.1401fcba8
mov rbx, qword [rdi + 0x70]
test rbx, rbx
je 0x14009227e
xchg r8, rcx
mov r8, rbx
xchg rcx, r8
call fcn.140189200
mov edx, 0x6d526f7a
add edx, 0x126a99dc
sub edx, 0x122585b1
sub edx, 0x66f42638
sub edx, 0x562342a
add edx, 0x6bb5248f
xor edx, 0x69f400cb
sub edx, 0x5024c21
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.1401fcba8
xchg rbx, r10
mov r10, qword [rdi + 0x68]
xchg r10, rbx
test rbx, rbx
je 0x1400922e2
xchg rcx, r9
mov r9, rbx
xchg rcx, r9
call fcn.140074460
mov edx, 0xe7142fe
xor edx, 0x2ac98ab6
xor edx, 0x52f3e50c
sub edx, 0x3b83f6bd
add edx, 0x186de9bc
xor edx, 0xc8b4870
sub edx, 0x2681b9aa
add edx, 0x3c2a3e4d
sub edx, 0x7566ec66
xchg rcx, rdx
mov rdx, rbx
xchg rdx, rcx
call fcn.1401fcba8
mov rbx, qword [rdi + 0x60]
test rbx, rbx
je 0x14009233a
mov rcx, rbx
call fcn.1401ad310
mov edx, 0x60c5163b
xor edx, 0x3ab9e9c3
sub edx, 0x22681fb
add edx, 0x5d88124
xor edx, 0x4752e667
xor edx, 0xe1d483d
add edx, 0x12611191
add edx, 0x2c7885b4
sub edx, 0x563ae868
xchg rbx, rdx
mov rcx, rdx
xchg rdx, rbx
call fcn.1401fcba8
xchg rbx, r10
mov r10, qword [rdi + 0x58]
xchg r10, rbx
test rbx, rbx
je 0x140092388
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140092388
mov rax, qword [rbx]
xchg rbp, rbx
mov rcx, rbp
xchg rbp, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x140092388
mov rax, qword [rbx]
xchg rcx, r15
mov r15, rbx
xchg rcx, r15
call qword [rax + 8]
lea rcx, [rdi + 0x30]
call fcn.1400914f0
lea rcx, [rdi + 0x18]
call fcn.1400914f0
xchg rdi, rcx
mov rdi, rcx
xchg rcx, rdi
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
xchg rsi, r13
mov r13, qword [rsp + 0x50]
xchg r13, rsi
add rsp, 0x20
nop
add rsp, 8
mov r15, qword [rsp - 8]
nop
xchg qword [rsp], r14
add rsp, 8
nop
mov rdi, qword [rsp]
add rsp, 8
jmp fcn.1400914f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3