Function at 0x140091940
Capabilities:
Encode data using xor
Terminate thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
nop
mov qword [rsp - 8], r15
sub rsp, 8
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
mov byte [rcx + 0x5fc], 0x70
add byte [rcx + 0x5fc], 4
xor byte [rcx + 0x5fc], 0x5e
add byte [rcx + 0x5fc], 0x43
xor byte [rcx + 0x5fc], 5
xor byte [rcx + 0x5fc], 0x3c
xor byte [rcx + 0x5fc], 0x22
sub byte [rcx + 0x5fc], 0x75
xor r15d, r15d
cmp qword [rcx + 0x5c0], r15
je 0x140091a27
mov rcx, qword [rcx + 0x5c8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, 0x3dd4bf54
sub edx, 0x2a2dcc13
add edx, 0x8b7f417
sub edx, 0x12d6d484
xor edx, 0x30597a78
sub edx, 0x38fbddb5
xor edx, 0x7954cb08
sub edx, 0x79813e17
mov rcx, qword [rdi + 0x5c0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140091a1a
xor edx, edx
xchg rcx, r11
mov r11, qword [rdi + 0x5c0]
xchg rcx, r11
call qword [sym.imp.KERNEL32.dll_TerminateThread]
xchg rdx, r15
mov qword [rdi + 0x5c0], rdx
xchg r15, rdx
mov edx, 0x21afd8e7
add edx, 0x4366c8d7
sub edx, 0x3ed5a944
sub edx, 0x22a0fe45
xor edx, 0x95718e1
add edx, 0x9ee0b48
xor edx, 0x14b6edf4
mov rcx, qword [rdi + 0x5d0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140091a77
xor edx, edx
mov rcx, qword [rdi + 0x5d0]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
nop
movabs rsi, 0xffffffff4e567ea5
add rsi, 0x23611036
xor rsi, 0x7c37994
xor rsi, 0xf3f3555
xor rsi, 0xfa7bdb1
sub rsi, 0x10a54c64
xor rsi, 0x7df92431
add rsi, 0x7fffffff
add rsi, 0x6441e88a
xchg rsi, rbx
mov qword [rdi + 0x5d0], rbx
xchg rbx, rsi
mov rbp, qword [rdi + 0x2f8]
mov r14, qword [rdi + 0x2f0]
cmp r14, rbp
je 0x140091b54
xchg r10, rbx
mov r10, qword [r14]
xchg rbx, r10
xchg r14, rax
mov r14, qword [rbx]
xchg r14, rax
mov rcx, rbx
call qword [rax + 0x18]
xchg r15, rax
mov rcx, r15
xchg r15, rax
call fcn.1401fcccc
xchg rsi, rax
mov rsi, qword [rbx]
xchg rsi, rax
mov edx, 0x34639c72
xor edx, 0x70e523fc
xor edx, 0x6f7245b6
add edx, 0x19692a5d
sub edx, 0x3c67a064
add edx, 0x6968619c
sub edx, 0x58a82780
sub edx, 0x6659e66
sub edx, 0x13511fe6
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call qword [rax]
add r14, 8
cmp r14, rbp
jne 0x140091ade
mov rcx, qword [rdi + 0x2b8]
test rcx, rcx
je 0x140091b69
call fcn.1401fcccc
xchg rcx, rdx
mov rdx, qword [rdi + 0x2c0]
xchg rdx, rcx
test rcx, rcx
je 0x140091b84
call fcn.1401fcccc
xchg rcx, r11
mov r11, qword [rdi + 0x2c8]
xchg r11, rcx
test rcx, rcx
je 0x140091b9f
call fcn.1401fcccc
mov rcx, qword [rdi + 0x140]
test rcx, rcx
je 0x140091bb4
call fcn.1401fcccc
mov rcx, qword [rdi + 0x2d0]
test rcx, rcx
je 0x140091bc9
call fcn.1401fcccc
lea rcx, [rdi + 0x5d8]
call fcn.14007af20
lea rcx, [rdi + 0x560]
call fcn.14007af20
lea rcx, [rdi + 0x548]
call fcn.14007af20
mov rbx, qword [rdi + 0x320]
test rbx, rbx
je 0x140091c42
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091c42
xchg r14, rax
mov r14, qword [rbx]
xchg r14, rax
xchg rbx, rdi
mov rcx, rdi
xchg rbx, rdi
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091c42
xchg r9, rax
mov r9, qword [rbx]
xchg r9, rax
xchg rcx, rdx
mov rdx, rbx
xchg rcx, rdx
call qword [rax + 8]
mov rbx, qword [rdi + 0x310]
test rbx, rbx
je 0x140091c8f
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091c8f
mov rax, qword [rbx]
xchg rdi, rcx
mov rdi, rbx
xchg rcx, rdi
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091c8f
mov rax, qword [rbx]
xchg r12, rcx
mov r12, rbx
xchg rcx, r12
call qword [rax + 8]
xchg rcx, r14
mov r14, qword [rdi + 0x2f0]
xchg rcx, r14
test rcx, rcx
je 0x140091d13
mov rdx, qword [rdi + 0x300]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x140091cf3
nop
add rdx, 0x4d9a9d01
sub rdx, 0x4d9a9cda
xchg r14, r8
mov r14, qword [rcx - 8]
xchg r14, r8
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14009244c
xchg r12, rcx
mov r12, r8
xchg r12, rcx
call fcn.1401fcccc
mov qword [rdi + 0x2f0], r15
xchg rbx, r15
mov qword [rdi + 0x2f8], rbx
xchg r15, rbx
mov qword [rdi + 0x300], r15
mov rbx, qword [rdi + 0x2e8]
test rbx, rbx
je 0x140091d5e
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140091d5e
xchg r10, rax
mov r10, qword [rbx]
xchg r10, rax
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140091d5e
mov rax, qword [rbx]
xchg rcx, r9
mov r9, rbx
xchg r9, rcx
call qword [rax + 8]
mov rbx, qword [rdi + 0x2d8]
test rbx, rbx
je 0x140091db9
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call fcn.14017d870
mov edx, 0x78068039
xor edx, 0x1f9cfa8c
sub edx, 0x45b67b60
add edx, 0x19c0e2c4
add edx, 0x3a98b677
sub edx, 0x3dd319f5
add edx, 0x2a63bbc
xor edx, 0x3b10baf7
xchg r14, rcx
mov r14, rbx
xchg r14, rcx
call fcn.1401fcccc
mov rbx, qword [rdi + 0x2b0]
test rbx, rbx
je 0x140091e1a
xchg rbx, rdx
mov rcx, rdx
xchg rbx, rdx
call fcn.14017d870
mov edx, 0xea52cfe
add edx, 0xd03d5fd
xor edx, 0x2c34c7ce
add edx, 0x296dc2ef
xor edx, 0x30ad43a6
sub edx, 0x1b6b7710
sub edx, 0x76dc214
xor edx, 0x4e3f15f7
sub edx, 0x60f28709
xchg rcx, r12
mov r12, rbx
xchg r12, rcx
call fcn.1401fcccc
xchg rbx, r10
mov r10, qword [rdi + 0x2a8]
xchg r10, rbx
test rbx, rbx
je 0x140091e81
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call fcn.14017a3e0
mov edx, 0x4b57b026
xor edx, 0x123cf070
sub edx, 0x1ea11222
add edx, 0x2c2e41af
xor edx, 0xa471d12
add edx, 0xa0172b4
sub edx, 0x4fd2defd
xor edx, 0x7c6a7dab
sub edx, 0x5a847a63
xchg rdi, rbx
mov rcx, rdi
xchg rdi, rbx
call fcn.1401fcccc
xchg r8, rbx
mov r8, qword [rdi + 0x2a0]
xchg r8, rbx
test rbx, rbx
je 0x140091edc
mov rcx, rbx
call fcn.14017ac50
mov edx, 0x465eac70
sub edx, 0x38b1b897
add edx, 0x1a43fcf1
add edx, 0x3faf347e
xor edx, 0x401017
add edx, 0x47f4f3e
sub edx, 0x1d73b746
sub edx, 0x3c8a2813
sub edx, 0x1261a49c
mov rcx, rbx
call fcn.1401fcccc
mov rbx, qword [rdi + 0x298]
test rbx, rbx
je 0x140091f25
mov rcx, rbx
call fcn.14017a3e0
mov edx, 0x1de471f5
add edx, 0x2f2023c0
add edx, 0x2fbc03ce
sub edx, 0x41733350
xor edx, 0x3da6e926
xor edx, 0x3b26df05
sub edx, 0x3dcd4f70
mov rcx, rbx
call fcn.1401fcccc
lea rcx, [rdi + 0x278]
call fcn.14002f950
lea rcx, [rdi + 0x258]
call fcn.14002f950
lea rcx, [rdi + 0x238]
call fcn.14002f950
lea rcx, [rdi + 0x218]
call fcn.14002f950
lea rcx, [rdi + 0x1f8]
call fcn.14002f950
lea rcx, [rdi + 0x1d8]
call fcn.14002f950
xchg r8, rbx
mov r8, qword [rdi + 0x1d0]
xchg rbx, r8
test rbx, rbx
je 0x140091fce
mov rcx, rbx
call fcn.140184410
mov edx, 0x3bd2fa6e
xor edx, 0x4dc5ded8
sub edx, 0x5b7b9523
xor edx, 0x71841448
xor edx, 0x5a0d85b1
add edx, 0x16ee1fd8
add edx, 0xc9416f1
sub edx, 0xdef12
sub edx, 0x548664f9
xchg r14, rcx
mov r14, rbx
xchg r14, rcx
call fcn.1401fcccc
lea rcx, [rdi + 0x1b0]
call fcn.14002f950
mov rbx, qword [rdi + 0x1a8]
test rbx, rbx
je 0x14009203b
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.14017d870
mov edx, 0x185d31a8
sub edx, 0x184f9463
add edx, 0x73867396
xor edx, 0x6626d5c5
xor edx, 0xff47b27
xor edx, 0x49b0634
add edx, 0x3b721936
xor edx, 0x2007c456
sub edx, 0x7a481475
xchg r14, rcx
mov r14, rbx
xchg rcx, r14
call fcn.1401fcccc
xchg rbx, rbp
mov rbp, qword [rdi + 0x1a0]
xchg rbx, rbp
test rbx, rbx
je 0x140092090
xchg rcx, rsi
mov rsi, rbx
xchg rsi, rcx
call fcn.140184410
mov edx, 0xa05964e
add edx, 0x165fc976
sub edx, 0x18b345eb
xor edx, 0x5d014f03
xor edx, 0x333d51e1
add edx, 0xbe5d297
xor edx, 0x7573d8fa
mov rcx, rbx
call fcn.1401fcccc
xchg rcx, rbx
mov rcx, qword [rdi + 0x198]
xchg rbx, rcx
test rbx, rbx
je 0x1400920eb
xchg r10, rbx
mov rcx, r10
xchg rbx, r10
call fcn.14017d870
mov edx, 0x586485dc
xor edx, 0x457f4563
add edx, 0x11879a12
sub edx, 0xe99a8d3
xor edx, 0x68a3f7bf
xor edx, 0x1b731c81
sub edx, 0x53d95a20
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call fcn.1401fcccc
lea rcx, [rdi + 0x178]
call fcn.14002f950
xchg rbx, r8
mov r8, qword [rdi + 0x170]
xchg r8, rbx
test rbx, rbx
je 0x140092158
xchg r14, rbx
mov rcx, r14
xchg rbx, r14
call fcn.140187260
mov edx, 0xf946cf
add edx, 0x677b3037
sub edx, 0x492bf091
add edx, 0x47edce7d
sub edx, 0x51d6af6c
add edx, 0x179d4485
xor edx, 0x1821eff5
xor edx, 0x2630d50c
xor edx, 0x12edd032
mov rcx, rbx
call fcn.1401fcccc
mov rbx, qword [rdi + 0x168]
test rbx, rbx
je 0x1400921a7
mov rcx, rbx
call fcn.140187890
mov edx, 0x70ca2bce
xor edx, 0x3f006aa3
sub edx, 0x48a6bf11
add edx, 0x6bd09ef9
xor edx, 0x1b5ff7d
xor edx, 0x27a9d51a
sub edx, 0x54e80a8a
xchg rcx, rsi
mov rsi, rbx
xchg rcx, rsi
call fcn.1401fcccc
xchg rdx, rbx
mov rdx, qword [rdi + 0x160]
xchg rbx, rdx
test rbx, rbx
je 0x1400921fc
xchg rcx, rdi
mov rdi, rbx
xchg rdi, rcx
call fcn.14017a3e0
mov edx, 0x517ed6b2
xor edx, 0x2758281f
sub edx, 0xfcd0490
sub edx, 0x4cb8feb8
add edx, 0x3b744c88
sub edx, 0x5515474d
xchg rdi, rcx
mov rdi, rbx
xchg rdi, rcx
call fcn.1401fcccc
lea rcx, [rdi + 0x148]
call 0x140091480
lea rcx, [rdi + 0x110]
call fcn.14002f950
lea rcx, [rdi + 0xf0]
call fcn.14002f950
lea rcx, [rdi + 0xc8]
call fcn.14002f950
lea rcx, [rdi + 0xa8]
call fcn.14002f950
lea rcx, [rdi + 0x88]
call fcn.14002f950
xchg r8, rbx
mov rbx, qword [rdi + 0x78]
xchg rbx, r8
mov r8, qword [r8 + 8]
lea rdx, [rdi + 0x78]
lea rcx, [rdi + 0x78]
call fcn.140081000
mov edx, 0x1bf88418
add edx, 0x2890a781
xor edx, 0x65223ce7
xor edx, 0x74e98c97
sub edx, 0x2e728b62
add edx, 0x11c52c63
xor edx, 0x7e64eba4
sub edx, 0x1d859114
sub edx, 0x296c45a2
mov rcx, qword [rdi + 0x78]
call fcn.1401fcccc
mov rbx, qword [rdi + 0x70]
test rbx, rbx
je 0x1400922fb
xchg rbx, r11
mov rcx, r11
xchg r11, rbx
call fcn.1401891f0
mov edx, 0x64d35107
sub edx, 0x9a5f575
sub edx, 0x4e0f1642
add edx, 0x4c1c2d34
add edx, 0x48d6ee1
sub edx, 0x2bfdb977
xor edx, 0x2b00836d
add edx, 0xf69c960
xor edx, 0x2a346d1b
xchg r15, rbx
mov rcx, r15
xchg rbx, r15
call fcn.1401fcccc
mov rbx, qword [rdi + 0x68]
test rbx, rbx
je 0x14009234d
xchg r12, rbx
mov rcx, r12
xchg r12, rbx
call fcn.140074210
mov edx, 0x4ab42bbc
xor edx, 0x6dfd0484
sub edx, 0x7e17779
add edx, 0x485188b7
xor edx, 0x2ccacfe0
xor edx, 0x376c8c5b
sub edx, 0x7c1f035d
xchg rcx, rdi
mov rdi, rbx
xchg rcx, rdi
call fcn.1401fcccc
mov rbx, qword [rdi + 0x60]
test rbx, rbx
je 0x140092393
xchg rsi, rbx
mov rcx, rsi
xchg rsi, rbx
call fcn.1401ad2c0
mov edx, 0x44acef5a
xor edx, 0x48b54f7e
xor edx, 0x272619d0
sub edx, 0x8181298
add edx, 0x33098471
sub edx, 0x56312b75
mov rcx, rbx
call fcn.1401fcccc
xchg rbx, r10
mov r10, qword [rdi + 0x58]
xchg rbx, r10
test rbx, rbx
je 0x1400923df
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400923df
mov rax, qword [rbx]
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x1400923df
xchg rdx, rax
mov rdx, qword [rbx]
xchg rdx, rax
mov rcx, rbx
call qword [rax + 8]
lea rcx, [rdi + 0x30]
call fcn.140091540
lea rcx, [rdi + 0x18]
call fcn.140091540
xchg r15, rdi
mov rcx, r15
xchg rdi, r15
mov rbx, qword [rsp + 0x40]
xchg rbp, rbx
mov rbx, qword [rsp + 0x48]
xchg rbx, rbp
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
push rcx
push rdx
push rdx
xchg qword [rsp + 0x18], r15
add rsp, 0x20
push rcx
push rax
push rcx
xchg qword [rsp + 0x18], r14
pop rcx
pop rax
pop rcx
add rsp, 8
push rbx
push rcx
push rcx
push rcx
push rcx
push rbx
push rbx
push rcx
xchg qword [rsp + 0x40], rdi
pop rcx
pop rbx
pop rbx
pop rcx
pop rcx
pop rcx
pop rcx
pop rbx
add rsp, 8
jmp fcn.140091540
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3