Function at 0x1400919b0
Capabilities:
Encode data using xor
Terminate thread

Disassembly:
mov qword [rsp + 8], rbx
xchg rbp, r14
mov qword [rsp + 0x10], r14
xchg rbp, r14
xchg r8, rsi
mov qword [rsp + 0x18], r8
xchg r8, rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r14
nop
push 0x108dd4d4
mov qword [rsp], r15
sub rsp, 0x20
xchg rsi, rcx
mov rdi, rsi
xchg rcx, rsi
mov byte [rcx + 0x5fc], 0x2f
sub byte [rcx + 0x5fc], 1
sub byte [rcx + 0x5fc], 4
sub byte [rcx + 0x5fc], 0x22
sub byte [rcx + 0x5fc], 2
add byte [rcx + 0x5fc], 0x16
xor byte [rcx + 0x5fc], 0x2e
add byte [rcx + 0x5fc], 0x38
xor byte [rcx + 0x5fc], 0x6b
xor r15d, r15d
cmp qword [rcx + 0x5c0], r15
je 0x140091aae
mov rcx, qword [rcx + 0x5c8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, 0x6467ffec
sub edx, 0x51660171
add edx, 0x34c0d89b
add edx, 0x313c458
xor edx, 0x1b13ee70
sub edx, 0x43278d0e
xor edx, 0xe9debf8
xchg rbx, rcx
mov rbx, qword [rdi + 0x5c0]
xchg rbx, rcx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140091aa7
xor edx, edx
mov rcx, qword [rdi + 0x5c0]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov qword [rdi + 0x5c0], r15
mov edx, 0x679ba235
xor edx, 0x70105559
sub edx, 0xeddefa8
xor edx, 0x6aada7ab
add edx, 0x9262c2b
sub edx, 0x60f2031f
sub edx, 0xa37c593
mov rcx, qword [rdi + 0x5d0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140091b04
xor edx, edx
xchg r9, rcx
mov r9, qword [rdi + 0x5d0]
xchg r9, rcx
call qword [sym.imp.KERNEL32.dll_TerminateThread]
nop
movabs rsi, 0xffffffff443c2f8b
add rsi, 0x2b64ef49
add rsi, 0x1f1680b
sub rsi, 0x4333b056
sub rsi, 0x29774c4d
add rsi, 0x7fffffff
xor rsi, 0x7b1875c4
xchg rsi, rbx
mov qword [rdi + 0x5d0], rbx
xchg rsi, rbx
xchg rbp, r10
mov r10, qword [rdi + 0x2f8]
xchg rbp, r10
xchg rcx, r14
mov rcx, qword [rdi + 0x2f0]
xchg r14, rcx
cmp r14, rbp
je 0x140091bd7
mov rbx, qword [r14]
mov rax, qword [rbx]
xchg r14, rcx
mov r14, rbx
xchg r14, rcx
call qword [rax + 0x18]
xchg r12, rax
mov rcx, r12
xchg r12, rax
call fcn.1401fd468
mov rax, qword [rbx]
mov edx, 0x2e548c2a
xor edx, 0x4d3f9474
sub edx, 0x4be4f351
xor edx, 0x7d83efa4
sub edx, 0x32b86ea1
sub edx, 0xe793cc
sub edx, 0x3021f1ef
sub edx, 0x643d64c
xchg r12, rcx
mov r12, rbx
xchg rcx, r12
call qword [rax]
neg r14
add r14, 0xfffffffffffffff8
neg r14
cmp r14, rbp
jne 0x140091b69
mov rcx, qword [rdi + 0x2b8]
test rcx, rcx
je 0x140091bec
call fcn.1401fd468
xchg rcx, r13
mov r13, qword [rdi + 0x2c0]
xchg r13, rcx
test rcx, rcx
je 0x140091c07
call fcn.1401fd468
mov rcx, qword [rdi + 0x2c8]
test rcx, rcx
je 0x140091c1c
call fcn.1401fd468
mov rcx, qword [rdi + 0x140]
test rcx, rcx
je 0x140091c31
call fcn.1401fd468
xchg rcx, r9
mov r9, qword [rdi + 0x2d0]
xchg rcx, r9
test rcx, rcx
je 0x140091c4c
call fcn.1401fd468
lea rcx, [rdi + 0x5d8]
call fcn.14007b1b0
lea rcx, [rdi + 0x560]
call fcn.14007b1b0
lea rcx, [rdi + 0x548]
call fcn.14007b1b0
xchg r11, rbx
mov r11, qword [rdi + 0x320]
xchg r11, rbx
test rbx, rbx
je 0x140091cc1
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091cc1
xchg r11, rax
mov r11, qword [rbx]
xchg r11, rax
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091cc1
mov rax, qword [rbx]
xchg rbx, rsi
mov rcx, rsi
xchg rsi, rbx
call qword [rax + 8]
xchg rbx, r8
mov r8, qword [rdi + 0x310]
xchg r8, rbx
test rbx, rbx
je 0x140091d18
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091d18
xchg r15, rax
mov r15, qword [rbx]
xchg r15, rax
xchg rbx, r11
mov rcx, r11
xchg rbx, r11
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091d18
mov rax, qword [rbx]
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call qword [rax + 8]
mov rcx, qword [rdi + 0x2f0]
test rcx, rcx
je 0x140091d8a
xchg rdx, r8
mov r8, qword [rdi + 0x300]
xchg rdx, r8
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x140091d70
nop
add rdx, 0x29c0372a
sub rdx, 0x29c03703
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400924b0
mov rcx, r8
call fcn.1401fd468
mov qword [rdi + 0x2f0], r15
mov qword [rdi + 0x2f8], r15
mov qword [rdi + 0x300], r15
xchg rbx, r8
mov r8, qword [rdi + 0x2e8]
xchg rbx, r8
test rbx, rbx
je 0x140091de5
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091de5
xchg rbp, rax
mov rbp, qword [rbx]
xchg rbp, rax
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091de5
xchg r15, rax
mov r15, qword [rbx]
xchg r15, rax
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call qword [rax + 8]
xchg rbx, rsi
mov rsi, qword [rdi + 0x2d8]
xchg rsi, rbx
test rbx, rbx
je 0x140091e3a
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.14017dd50
mov edx, 0x3b28ab4f
sub edx, 0x3101b284
add edx, 0x63138e68
sub edx, 0x250097b
sub edx, 0x2d7ce24
sub edx, 0x6812aef4
xchg rbx, r10
mov rcx, r10
xchg rbx, r10
call fcn.1401fd468
xchg r15, rbx
mov r15, qword [rdi + 0x2b0]
xchg r15, rbx
test rbx, rbx
je 0x140091e8f
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call fcn.14017dd50
mov edx, 0xdb4478d
add edx, 0x2975b4
add edx, 0x2175322f
add edx, 0x392a9901
sub edx, 0x29ab717a
add edx, 0x350f8b00
sub edx, 0x73e1a157
mov rcx, rbx
call fcn.1401fd468
mov rbx, qword [rdi + 0x2a8]
test rbx, rbx
je 0x140091eea
mov rcx, rbx
call fcn.14017a7b0
mov edx, 0x3773cd66
xor edx, 0x57f9b7f7
xor edx, 0x4244052b
sub edx, 0x292f50d
xor edx, 0x2d1f750c
add edx, 0x532e859f
sub edx, 0x2452c4ad
add edx, 0x376c5ee5
sub edx, 0x736d1ed8
xchg rsi, rcx
mov rsi, rbx
xchg rcx, rsi
call fcn.1401fd468
mov rbx, qword [rdi + 0x2a0]
test rbx, rbx
je 0x140091f39
xchg r15, rbx
mov rcx, r15
xchg rbx, r15
call fcn.14017b040
mov edx, 0x31579994
xor edx, 0x377acde9
xor edx, 0x4dd990c5
add edx, 0xc9f3a02
xor edx, 0x3620ae17
xor edx, 0x4d96a69
sub edx, 0x6a6a3a1c
mov rcx, rbx
call fcn.1401fd468
mov rbx, qword [rdi + 0x298]
test rbx, rbx
je 0x140091f8e
xchg rbx, r8
mov rcx, r8
xchg r8, rbx
call fcn.14017a7b0
mov edx, 0x4da78960
sub edx, 0x48a7294f
add edx, 0x30af886e
sub edx, 0x3384fb7e
add edx, 0x6e87af21
xor edx, 0x59723ab8
sub edx, 0x1c4bbf55
sub edx, 0xd74e6a5
mov rcx, rbx
call fcn.1401fd468
lea rcx, [rdi + 0x278]
call fcn.14002f8b0
lea rcx, [rdi + 0x258]
call fcn.14002f8b0
lea rcx, [rdi + 0x238]
call fcn.14002f8b0
lea rcx, [rdi + 0x218]
call fcn.14002f8b0
lea rcx, [rdi + 0x1f8]
call fcn.14002f8b0
lea rcx, [rdi + 0x1d8]
call fcn.14002f8b0
xchg rbx, r12
mov r12, qword [rdi + 0x1d0]
xchg r12, rbx
test rbx, rbx
je 0x14009203d
xchg rbx, r11
mov rcx, r11
xchg rbx, r11
call fcn.140184870
mov edx, 0x5b367142
xor edx, 0x5bc382b8
xor edx, 0x78381113
sub edx, 0x715c2b41
add edx, 0x1a98e9ad
add edx, 0x3c72a241
add edx, 0x131cd3e2
sub edx, 0x709409c5
xor edx, 0x1060c9b
xchg r9, rbx
mov rcx, r9
xchg rbx, r9
call fcn.1401fd468
lea rcx, [rdi + 0x1b0]
call fcn.14002f8b0
mov rbx, qword [rdi + 0x1a8]
test rbx, rbx
je 0x14009209e
xchg rbx, r14
mov rcx, r14
xchg rbx, r14
call fcn.14017dd50
mov edx, 0x7cf81a5a
xor edx, 0x42363752
add edx, 0x37211981
sub edx, 0x642f297f
add edx, 0x170ad46b
add edx, 0x18ef6c8e
sub edx, 0x41ba5d63
xchg rbx, r9
mov rcx, r9
xchg rbx, r9
call fcn.1401fd468
mov rbx, qword [rdi + 0x1a0]
test rbx, rbx
je 0x1400920ed
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.140184870
mov edx, 0x43771413
xor edx, 0x6a044d28
add edx, 0x2a361a8b
add edx, 0x99f6fb4
sub edx, 0xed115b6
sub edx, 0x4e77cc9c
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call fcn.1401fd468
xchg rbx, r9
mov r9, qword [rdi + 0x198]
xchg r9, rbx
test rbx, rbx
je 0x140092142
mov rcx, rbx
call fcn.14017dd50
mov edx, 0x738ee47d
sub edx, 0x343441d8
add edx, 0x25311bd4
xor edx, 0x769d39a9
sub edx, 0xb4a173a
add edx, 0x41ed770b
xor edx, 0x48b9e701
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.1401fd468
lea rcx, [rdi + 0x178]
call fcn.14002f8b0
xchg r12, rbx
mov r12, qword [rdi + 0x170]
xchg rbx, r12
test rbx, rbx
je 0x1400921a3
mov rcx, rbx
call fcn.140187740
mov edx, 0x2ef50f40
add edx, 0x298a7634
add edx, 0xdf5a70b
add edx, 0x1586b5ff
sub edx, 0x2e9ada6f
xor edx, 0x6426fa9c
sub edx, 0xcbef072
sub edx, 0x1c890161
mov rcx, rbx
call fcn.1401fd468
mov rbx, qword [rdi + 0x168]
test rbx, rbx
je 0x1400921f8
mov rcx, rbx
call fcn.140187d40
mov edx, 0x616166de
xor edx, 0x7187f1c5
xor edx, 0x4f122348
sub edx, 0x1f11b47e
sub edx, 0x2657aa13
add edx, 0x11ab7160
add edx, 0x27c93aef
sub edx, 0x8421371
sub edx, 0x4bbdedf8
mov rcx, rbx
call fcn.1401fd468
xchg r13, rbx
mov r13, qword [rdi + 0x160]
xchg rbx, r13
test rbx, rbx
je 0x140092259
xchg rbx, rdx
mov rcx, rdx
xchg rdx, rbx
call fcn.14017a7b0
mov edx, 0x6f3b3d96
xor edx, 0x4f362113
xor edx, 0x5fe229e3
sub edx, 0x49011fe0
xor edx, 0xa604976
sub edx, 0x374ce123
xor edx, 0x3b9e7b43
add edx, 0xcb4cb02
sub edx, 0x4b93caf0
mov rcx, rbx
call fcn.1401fd468
lea rcx, [rdi + 0x148]
call fcn.140091510
lea rcx, [rdi + 0x110]
call fcn.14002f8b0
lea rcx, [rdi + 0xf0]
call fcn.14002f8b0
lea rcx, [rdi + 0xc8]
call fcn.14002f8b0
lea rcx, [rdi + 0xa8]
call fcn.14002f8b0
lea rcx, [rdi + 0x88]
call fcn.14002f8b0
xchg r14, r8
mov r14, qword [rdi + 0x78]
xchg r8, r14
mov r8, qword [r8 + 8]
lea rdx, [rdi + 0x78]
lea rcx, [rdi + 0x78]
call fcn.1400811f0
mov edx, 0x1c119255
xor edx, 0xa1190fb
add edx, 0x48c99c3
sub edx, 0xa998718
xor edx, 0x105e5fbf
sub edx, 0x1fad4a4e
xchg rdx, rcx
mov rdx, qword [rdi + 0x78]
xchg rcx, rdx
call fcn.1401fd468
xchg r10, rbx
mov r10, qword [rdi + 0x70]
xchg r10, rbx
test rbx, rbx
je 0x140092346
xchg r13, rbx
mov rcx, r13
xchg rbx, r13
call fcn.140189720
mov edx, 0x223b12b0
sub edx, 0xa22a787
add edx, 0x11c9fae8
sub edx, 0xe9236de
sub edx, 0x11a68e4b
xor edx, 0x73682bae
sub edx, 0x7ac18a4e
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call fcn.1401fd468
xchg rbx, rbp
mov rbp, qword [rdi + 0x68]
xchg rbx, rbp
test rbx, rbx
je 0x1400923a4
mov rcx, rbx
call fcn.1400744a0
mov edx, 0x1f801aaf
xor edx, 0x1de2d9b0
xor edx, 0x6bfde677
xor edx, 0x4dd29c5
sub edx, 0xc5a3f9d
sub edx, 0x35002bfa
xor edx, 0x5291ea7e
sub edx, 0x3eca0655
sub edx, 0x3aac44a3
xchg r10, rcx
mov r10, rbx
xchg rcx, r10
call fcn.1401fd468
mov rbx, qword [rdi + 0x60]
test rbx, rbx
je 0x1400923f0
xchg rbx, r14
mov rcx, r14
xchg r14, rbx
call fcn.1401ada00
mov edx, 0x3b56b9d6
sub edx, 0x1f402d8c
add edx, 0x43fa8902
xor edx, 0x52b62c55
xor edx, 0x76efface
sub edx, 0x42a6afe8
sub edx, 0x1a21397
mov rcx, rbx
call fcn.1401fd468
mov rbx, qword [rdi + 0x58]
test rbx, rbx
je 0x140092440
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140092440
xchg rbp, rax
mov rbp, qword [rbx]
xchg rbp, rax
xchg rdx, rcx
mov rdx, rbx
xchg rcx, rdx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x140092440
xchg r15, rax
mov r15, qword [rbx]
xchg r15, rax
xchg rcx, r8
mov r8, rbx
xchg rcx, r8
call qword [rax + 8]
lea rcx, [rdi + 0x30]
call fcn.1400915d0
lea rcx, [rdi + 0x18]
call fcn.1400915d0
xchg rdx, rdi
mov rcx, rdx
xchg rdi, rdx
mov rbx, qword [rsp + 0x40]
xchg rbp, r14
mov r14, qword [rsp + 0x48]
xchg rbp, r14
xchg rsi, r9
mov r9, qword [rsp + 0x50]
xchg rsi, r9
add rsp, 0x20
push rax
push rdx
push rcx
xchg qword [rsp + 0x18], r15
pop rcx
pop rdx
pop rax
add rsp, 8
push rbx
push rdx
push rdx
push rbx
push rbx
push rax
push rax
push rdx
xchg qword [rsp + 0x40], r14
pop rdx
pop rax
pop rax
pop rbx
pop rbx
pop rdx
pop rdx
pop rbx
add rsp, 8
nop
mov rdi, qword [rsp]
add rsp, 8
jmp fcn.1400915d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3