Function at 0x1400916e0
Capabilities:
Encode data using xor
Terminate thread

Disassembly:
xchg rbx, r11
mov qword [rsp + 8], r11
xchg rbx, r11
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
nop
push 0x3a8409f5
mov qword [rsp], r14
push r15
sub rsp, 0x20
xchg r14, rcx
mov rdi, r14
xchg rcx, r14
mov byte [rcx + 0x5fc], 0x61
add byte [rcx + 0x5fc], 0x13
sub byte [rcx + 0x5fc], 0x6a
xor byte [rcx + 0x5fc], 0x4e
add byte [rcx + 0x5fc], 5
xor byte [rcx + 0x5fc], 0x14
sub byte [rcx + 0x5fc], 0x1c
xor byte [rcx + 0x5fc], 0x3f
sub byte [rcx + 0x5fc], 0x7d
xor r15d, r15d
cmp qword [rcx + 0x5c0], r15
je 0x1400917c2
mov rcx, qword [rcx + 0x5c8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, 0x5bf9c955
add edx, 0x1be196c4
sub edx, 0x44f83371
xor edx, 0x51b6a207
sub edx, 0xef2d75f
sub edx, 0x2166216b
sub edx, 0x32fc91fd
mov rcx, qword [rdi + 0x5c0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x1400917bb
xor edx, edx
mov rcx, qword [rdi + 0x5c0]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov qword [rdi + 0x5c0], r15
mov edx, 0x225c12fc
add edx, 0x2ed2d255
sub edx, 0x3fc237dc
add edx, 0x1d17f374
add edx, 0x359531e
sub edx, 0x139f39c4
add edx, 0x4d2b8e0e
sub edx, 0x6b6a4469
xchg r15, rcx
mov r15, qword [rdi + 0x5d0]
xchg rcx, r15
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140091824
xor edx, edx
xchg rcx, r13
mov r13, qword [rdi + 0x5d0]
xchg rcx, r13
call qword [sym.imp.KERNEL32.dll_TerminateThread]
nop
movabs rsi, 0xffffffff6461f08d
sub rsi, 0x4aa01872
add rsi, 0x2c70c6da
xor rsi, 0x505d6893
add rsi, 0x6177e2cc
sub rsi, 0x4599629e
add rsi, 0x3ece7a3d
xor rsi, 0x7aa94009
add rsi, 0x7fffffff
xor rsi, 0x744a4f28
xchg rsi, r12
mov qword [rdi + 0x5d0], r12
xchg r12, rsi
xchg rbp, r14
mov r14, qword [rdi + 0x2f8]
xchg rbp, r14
mov r14, qword [rdi + 0x2f0]
cmp r14, rbp
je 0x1400918fe
xchg r11, rbx
mov r11, qword [r14]
xchg r11, rbx
xchg rsi, rax
mov rsi, qword [rbx]
xchg rsi, rax
xchg rcx, r12
mov r12, rbx
xchg r12, rcx
call qword [rax + 0x18]
mov rcx, rax
call fcn.1401fc804
xchg r12, rax
mov r12, qword [rbx]
xchg r12, rax
mov edx, 0x7314300a
sub edx, 0x28ed8fe3
sub edx, 0x2576ec25
xor edx, 0xaa97719
xor edx, 0x7b621cad
sub edx, 0x5564dfb5
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call qword [rax]
add r14, 8
cmp r14, rbp
jne 0x140091898
xchg rcx, rbx
mov rbx, qword [rdi + 0x2b8]
xchg rbx, rcx
test rcx, rcx
je 0x140091919
call fcn.1401fc804
xchg r15, rcx
mov r15, qword [rdi + 0x2c0]
xchg r15, rcx
test rcx, rcx
je 0x140091934
call fcn.1401fc804
mov rcx, qword [rdi + 0x2c8]
test rcx, rcx
je 0x140091949
call fcn.1401fc804
xchg r13, rcx
mov r13, qword [rdi + 0x140]
xchg rcx, r13
test rcx, rcx
je 0x140091964
call fcn.1401fc804
mov rcx, qword [rdi + 0x2d0]
test rcx, rcx
je 0x140091979
call fcn.1401fc804
lea rcx, [rdi + 0x5d8]
call fcn.14007aef0
lea rcx, [rdi + 0x560]
call fcn.14007aef0
lea rcx, [rdi + 0x548]
call fcn.14007aef0
xchg r8, rbx
mov r8, qword [rdi + 0x320]
xchg rbx, r8
test rbx, rbx
je 0x1400919e8
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400919e8
xchg r9, rax
mov r9, qword [rbx]
xchg r9, rax
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400919e8
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
xchg rbx, r12
mov r12, qword [rdi + 0x310]
xchg rbx, r12
test rbx, rbx
je 0x140091a39
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091a39
xchg r9, rax
mov r9, qword [rbx]
xchg r9, rax
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091a39
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
xchg rcx, r14
mov r14, qword [rdi + 0x2f0]
xchg r14, rcx
test rcx, rcx
je 0x140091aac
mov rdx, qword [rdi + 0x300]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x140091a86
sub rdx, 0xffffffffffffffd9
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14009218c
mov rcx, r8
call fcn.1401fc804
mov qword [rdi + 0x2f0], r15
xchg r15, r9
mov qword [rdi + 0x2f8], r9
xchg r15, r9
xchg r8, r15
mov qword [rdi + 0x300], r8
xchg r15, r8
mov rbx, qword [rdi + 0x2e8]
test rbx, rbx
je 0x140091af9
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091af9
mov rax, qword [rbx]
xchg rsi, rbx
mov rcx, rsi
xchg rbx, rsi
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091af9
mov rax, qword [rbx]
xchg rcx, r13
mov r13, rbx
xchg r13, rcx
call qword [rax + 8]
mov rbx, qword [rdi + 0x2d8]
test rbx, rbx
je 0x140091b54
mov rcx, rbx
call fcn.14017cec0
mov edx, 0x60fd7e7f
add edx, 0x1017acb5
sub edx, 0x1a59a656
sub edx, 0x369c66ae
add edx, 0x1045d79d
xor edx, 0x1f2fcc64
xor edx, 0x5f25bf7e
sub edx, 0x40ca84d6
xor edx, 0x2fa402a1
xchg r9, rcx
mov r9, rbx
xchg rcx, r9
call fcn.1401fc804
xchg rbx, r13
mov r13, qword [rdi + 0x2b0]
xchg rbx, r13
test rbx, rbx
je 0x140091bbb
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.14017cec0
mov edx, 0x5a2fa720
sub edx, 0x3eb88de4
xor edx, 0xf457cea
xor edx, 0x7a1b1395
xor edx, 0x16a1d13e
sub edx, 0x3b894f6f
add edx, 0x32fda590
sub edx, 0xff10d6f
xor edx, 0x600bf08f
xchg rcx, r8
mov r8, rbx
xchg rcx, r8
call fcn.1401fc804
xchg rcx, rbx
mov rcx, qword [rdi + 0x2a8]
xchg rcx, rbx
test rbx, rbx
je 0x140091c16
mov rcx, rbx
call fcn.140179940
mov edx, 0x2bb288cb
add edx, 0x4713990b
sub edx, 0x5b857308
xor edx, 0x1782032b
add edx, 0x1644013b
add edx, 0x592793c2
sub edx, 0x15b19c3
xor edx, 0x6ed329bf
xchg rbx, r14
mov rcx, r14
xchg r14, rbx
call fcn.1401fc804
mov rbx, qword [rdi + 0x2a0]
test rbx, rbx
je 0x140091c6b
xchg rbx, r14
mov rcx, r14
xchg rbx, r14
call fcn.14017a1a0
mov edx, 0x3aa88200
add edx, 0x29cf6ddd
xor edx, 0x4f741eea
sub edx, 0xd5c7df6
add edx, 0x6dd0f1b
xor edx, 0x160ec6fc
sub edx, 0x328a43f8
xchg rcx, r9
mov r9, rbx
xchg rcx, r9
call fcn.1401fc804
mov rbx, qword [rdi + 0x298]
test rbx, rbx
je 0x140091cc6
mov rcx, rbx
call fcn.140179940
mov edx, 0x49969356
add edx, 0x1e4259e
sub edx, 0x411c6ba7
add edx, 0x5cf03525
sub edx, 0x50a9bd7e
add edx, 0x1aa6414a
add edx, 0x2c5221c8
xor edx, 0x4c4e1cf2
sub edx, 0x11d33454
xchg rdi, rcx
mov rdi, rbx
xchg rdi, rcx
call fcn.1401fc804
lea rcx, [rdi + 0x278]
call fcn.14002f8d0
lea rcx, [rdi + 0x258]
call fcn.14002f8d0
lea rcx, [rdi + 0x238]
call fcn.14002f8d0
lea rcx, [rdi + 0x218]
call fcn.14002f8d0
lea rcx, [rdi + 0x1f8]
call fcn.14002f8d0
lea rcx, [rdi + 0x1d8]
call fcn.14002f8d0
mov rbx, qword [rdi + 0x1d0]
test rbx, rbx
je 0x140091d63
mov rcx, rbx
call fcn.140183b70
mov edx, 0xda085f1
add edx, 0x7f2f5c7
sub edx, 0xa212672
add edx, 0x617e1056
add edx, 0x110e9246
sub edx, 0x466098d2
add edx, 0x34bb15c5
sub edx, 0x6c5973ad
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call fcn.1401fc804
lea rcx, [rdi + 0x1b0]
call fcn.14002f8d0
mov rbx, qword [rdi + 0x1a8]
test rbx, rbx
je 0x140091dc4
xchg rcx, r10
mov r10, rbx
xchg rcx, r10
call fcn.14017cec0
mov edx, 0x2e33c8b2
sub edx, 0x1551b191
add edx, 0x5077e057
add edx, 0x39aa27f
sub edx, 0x66109bce
add edx, 0x6359be15
xor edx, 0x6a3dbc9e
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call fcn.1401fc804
mov rbx, qword [rdi + 0x1a0]
test rbx, rbx
je 0x140091e19
xchg rbx, r10
mov rcx, r10
xchg rbx, r10
call fcn.140183b70
mov edx, 0x19267836
xor edx, 0x63e23922
sub edx, 0x40fe5885
add edx, 0x264e927d
sub edx, 0x59af4b53
add edx, 0x6465256
add edx, 0x48b52ab
sub edx, 0x1136d392
mov rcx, rbx
call fcn.1401fc804
xchg r10, rbx
mov r10, qword [rdi + 0x198]
xchg r10, rbx
test rbx, rbx
je 0x140091e7a
xchg rdx, rcx
mov rdx, rbx
xchg rdx, rcx
call fcn.14017cec0
mov edx, 0x7a816211
sub edx, 0x451408d7
xor edx, 0x1421e6de
add edx, 0x53cecc50
xor edx, 0x6f3066f9
add edx, 0x29e7f327
sub edx, 0x2ee62bd
sub edx, 0x41257a97
xchg rcx, r9
mov r9, rbx
xchg r9, rcx
call fcn.1401fc804
lea rcx, [rdi + 0x178]
call fcn.14002f8d0
mov rbx, qword [rdi + 0x170]
test rbx, rbx
je 0x140091ecf
mov rcx, rbx
call fcn.140186aa0
mov edx, 0x505c29b4
add edx, 0x2281d053
xor edx, 0x1725838
sub edx, 0x3875e473
sub edx, 0xc4d362
sub edx, 0x3a74e9aa
xchg r15, rcx
mov r15, rbx
xchg rcx, r15
call fcn.1401fc804
mov rbx, qword [rdi + 0x168]
test rbx, rbx
je 0x140091f18
mov rcx, rbx
call fcn.140187080
mov edx, 0x21a86a13
sub edx, 0x162ca5ef
xor edx, 0x28f5647f
xor edx, 0x2be77f21
sub edx, 0x6b37dd5
sub edx, 0x1b660fd
xchg rbx, rsi
mov rcx, rsi
xchg rsi, rbx
call fcn.1401fc804
mov rbx, qword [rdi + 0x160]
test rbx, rbx
je 0x140091f6d
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.140179940
mov edx, 0x19092a1b
add edx, 0x256543bb
sub edx, 0x196537f0
xor edx, 0x3ddd4421
add edx, 0x555da452
sub edx, 0xf6b5498
sub edx, 0x5ec6c0e1
xchg r8, rcx
mov r8, rbx
xchg rcx, r8
call fcn.1401fc804
lea rcx, [rdi + 0x148]
call fcn.140091250
lea rcx, [rdi + 0x110]
call fcn.14002f8d0
lea rcx, [rdi + 0xf0]
call fcn.14002f8d0
lea rcx, [rdi + 0xc8]
call fcn.14002f8d0
lea rcx, [rdi + 0xa8]
call fcn.14002f8d0
lea rcx, [rdi + 0x88]
call fcn.14002f8d0
xchg r8, rcx
mov rcx, qword [rdi + 0x78]
xchg r8, rcx
mov r8, qword [r8 + 8]
lea rdx, [rdi + 0x78]
lea rcx, [rdi + 0x78]
call fcn.140081040
mov edx, 0x56323c40
sub edx, 0x44c58654
xor edx, 0x411c4c1b
sub edx, 0x8e4f2ed
add edx, 0x26caf0f1
sub edx, 0x6e56f763
xchg r8, rcx
mov r8, qword [rdi + 0x78]
xchg r8, rcx
call fcn.1401fc804
mov rbx, qword [rdi + 0x70]
test rbx, rbx
je 0x140092048
mov rcx, rbx
call fcn.140188a00
mov edx, 0x27922cba
xor edx, 0x7c12cf83
sub edx, 0x18a63872
xor edx, 0x1558fd50
add edx, 0x24f176d2
xor edx, 0x7c73ce91
xchg rbx, rdi
mov rcx, rdi
xchg rbx, rdi
call fcn.1401fc804
mov rbx, qword [rdi + 0x68]
test rbx, rbx
je 0x140092094
mov rcx, rbx
call fcn.140074240
mov edx, 0x2d7a3e0a
xor edx, 0x79fd1690
xor edx, 0x567be7b1
xor edx, 0xc543864
add edx, 0x42d1d73
add edx, 0x327366d7
sub edx, 0x45497b29
xchg rcx, r11
mov r11, rbx
xchg r11, rcx
call fcn.1401fc804
mov rbx, qword [rdi + 0x60]
test rbx, rbx
je 0x1400920e0
xchg r13, rbx
mov rcx, r13
xchg r13, rbx
call fcn.1401acd60
mov edx, 0xb6d999a
add edx, 0x30700fd8
add edx, 0x237895a2
sub edx, 0x24e2a0fa
xor edx, 0x3bc69067
sub edx, 0x1b50e25
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call fcn.1401fc804
xchg rbx, rdx
mov rdx, qword [rdi + 0x58]
xchg rdx, rbx
test rbx, rbx
je 0x140092130
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140092130
xchg rcx, rax
mov rcx, qword [rbx]
xchg rcx, rax
xchg rdx, rbx
mov rcx, rdx
xchg rdx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x140092130
xchg rsi, rax
mov rsi, qword [rbx]
xchg rsi, rax
mov rcx, rbx
call qword [rax + 8]
lea rcx, [rdi + 0x30]
call fcn.140091300
lea rcx, [rdi + 0x18]
call fcn.140091300
xchg rbp, rcx
mov rbp, rdi
xchg rbp, rcx
xchg rdi, rbx
mov rdi, qword [rsp + 0x40]
xchg rdi, rbx
xchg rbp, r8
mov r8, qword [rsp + 0x48]
xchg rbp, r8
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], r15
nop
mov r14, qword [rsp]
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], rdi
jmp fcn.140091300
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3