Function at 0x1403020bc
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov byte [rax + 0x18], r8b
mov qword [rax + 0x10], rdx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x58
mov rbx, qword [rcx + 0x30]
lea r15, [r9 + 0x10]
xor edi, edi
mov qword [rsp + 0x38], r15
xor r14d, r14d
mov qword [rax - 0x68], rdi
xor ecx, ecx
mov dword [rsp + 0xa0], r14d
xor r10d, r10d
mov r13, r9
movzx eax, byte [r15 + r10]
inc r10
add eax, ecx
imul ecx, eax, 0x401
mov eax, ecx
shr eax, 6
xor ecx, eax
cmp r10, 8
jb 0x140302101
mov r8b, byte [rsp + 0xc0]
mov ebp, 2
mov r15b, byte [rsp + 0xb0]
add r8b, bpl
cmp r8b, r15b
jae 0x140302185
movzx edx, r8b
mov al, r15b
shl rdx, 4
add rdx, r9
sub al, r8b
movzx r10d, al
mov r9d, dword [rdx + 8]
xor r8d, r8d
mov r11, qword [rdx]
test r9, r9
je 0x14030217b
movzx eax, byte [r8 + r11]
inc r8
add eax, ecx
imul ecx, eax, 0x401
mov eax, ecx
shr eax, 6
xor ecx, eax
cmp r8, r9
jb 0x14030215f
add rdx, 0x10
sub r10, 1
jne 0x140302150
lea eax, [rcx + rcx*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
lea rax, [rbx + 0x108]
imul r12d, ecx, 0x8001
mov rcx, rax
mov qword [rsp + 0x40], rax
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockShared]
mov eax, r12d
and eax, 0x1f
lea rsi, [rbx + rax*8]
cmp qword [rsi], 0
jne 0x140302221
cmp dword [rbx + 0x100], 0x400
jae 0x140302335
test rdi, rdi
jne 0x14030220f
mov r9b, byte [rsp + 0xc0]
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0xa8]
mov r8, r13
mov qword [rsp + 0x28], rax
mov dl, r15b
mov dword [rsp + 0x20], r12d
call fcn.140301e88
mov rdi, qword [rsp + 0x30]
mov dword [rsp + 0xa0], eax
test rdi, rdi
je 0x1403022c3
xor eax, eax
lock cmpxchg qword [rsi], rdi
je 0x1403022e0
mov rdi, qword [rsp + 0x30]
mov r14, qword [rsi]
cmp r12d, dword [r14 + 0x28]
je 0x140302239
mov eax, r12d
sub eax, dword [r14 + 0x28]
je 0x14030234d
jmp 0x1403022ad
mov r13, qword [r14 + 0x10]
mov r8d, 8
mov rcx, qword [rsp + 0x38]
lea rdx, [r13 + 0x10]
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x1403022a5
movzx esi, byte [r14 + 0x2d]
add esi, ebp
movzx r15d, r15b
cmp esi, r15d
jae 0x140302345
mov r9, qword [rsp + 0xb8]
mov ecx, esi
shl rcx, 4
mov eax, dword [rcx + r9 + 8]
sub eax, dword [rcx + r13 + 8]
jne 0x14030229d
mov r8d, dword [rcx + r9 + 8]
mov rdx, qword [rcx + r13]
mov rcx, qword [rcx + r9]
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x14030229d
inc esi
jmp 0x140302260
mov r15b, byte [rsp + 0xb0]
mov r13, qword [rsp + 0xb8]
cdqe
lea rsi, [r14 + 0x20]
sar rax, 0x3f
and rax, 0xfffffffffffffff8
add rsi, rax
jmp 0x1403021b5
mov esi, eax
cmp eax, 8
jne 0x1403022d5
inc dword [rbx + 0x130]
jmp 0x1403023fc
inc dword [rbx + 0x134]
jmp 0x1403023fc
and qword [rsp + 0x30], 0
mov eax, 1
lock xadd dword [rbx + 0x100], eax
inc eax
cmp eax, 1
jne 0x14030230c
mov edx, dword [rbx + 0x160]
mov rcx, qword [rbx + 0x158]
call fcn.140301c98
mov eax, dword [rbx + 0x100]
mov rdi, qword [rsp + 0x30]
mov esi, dword [rsp + 0xa0]
cmp dword [rbx + 0x120], eax
jae 0x1403023fc
mov dword [rbx + 0x120], eax
jmp 0x1403023fc
inc dword [rbx + 0x12c]
mov esi, 0xea
jmp 0x1403023fc
mov r13, qword [rsp + 0xb8]
test r14, r14
je 0x1403023f5
movzx ebx, byte [rsp + 0xc0]
add ebx, ebp
cmp ebx, ebp
jbe 0x1403023f5
movzx ecx, bpl
add rcx, rcx
mov rax, qword [r13 + rcx*8]
mov r8, qword [rax]
mov rax, qword [r14 + 0x10]
movzx r11d, byte [rax + rcx*8 + 0xd]
mov r9, qword [rax + rcx*8]
cmp r11d, 0x71
je 0x1403023dc
lea eax, [r11 - 0x72]
cmp eax, 1
ja 0x1403023e1
mov r10, qword [r9]
xor edx, edx
cmp r8, r10
setl dl
xor ecx, ecx
cmp r8, r10
setg cl
cmp r11d, 0x72
cmove ecx, edx
test ecx, ecx
je 0x1403023e1
mov rax, r10
lock cmpxchg qword [r9], r8
je 0x1403023e1
mov r10, qword [r9]
xor ecx, ecx
cmp r8, r10
setl cl
xor eax, eax
cmp r8, r10
setg al
cmp r11b, 0x72
cmove eax, ecx
test eax, eax
jne 0x1403023b2
jmp 0x1403023e1
lock xadd qword [r9], r8
inc bpl
movzx eax, bpl
cmp eax, ebx
jb 0x140302368
mov rdi, qword [rsp + 0x30]
mov esi, dword [rsp + 0xa0]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockShared]
test rdi, rdi
je 0x140302424
mov rbx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, esi
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret