Function at 0x140066d70
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov qword [rax - 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov r12, rdx
mov rdi, rcx
lea r14, [rcx + 0x40]
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
mov qword [rsp + 0xa0], r14
xor r13b, r13b
mov bpl, 1
xor r15d, r15d
lock inc dword [rdi + 0x30]
lea rsi, [rdi + 0x38]
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
lea rcx, [rsp + 0x90]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
mov rbx, qword [rsp + 0x90]
mov rax, rbx
sub rax, qword [rdi + 0x58]
imul rax, rax, 0x3e8
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [0x1400e8868]
divsd xmm1, xmm0
cvtpd2ps xmm1, xmm1
comiss xmm1, dword [0x1400c0970]
seta al
xor r11d, r11d
test al, al
je 0x140066e23
mov rcx, rdi
call fcn.14003d5ec
mov qword [rdi + 0x58], rbx
xor r11d, r11d
mov r9, qword [rdi + 0x20]
mov eax, dword [r9]
lea ecx, [rax*2 - 2]
xor ecx, eax
and ecx, 2
xor ecx, eax
mov dword [r9], ecx
lea rbx, [rdi + 0x48]
mov r8, qword [rbx]
mov rcx, qword [r8]
cmp rcx, r8
je 0x140066ed8
mov r10, qword [rcx + 0x40]
mov edx, dword [r10]
mov eax, edx
shr eax, 1
xor eax, dword [r9]
test al, 1
je 0x140066e62
int 0x2c
mov eax, edx
lock cmpxchg dword [r10], edx
cmp edx, eax
jne 0x140066e52
mov eax, dword [r9]
shr eax, 1
xor eax, edx
test al, 1
jne 0x140066e86
test edx, 0xfffffffc
movzx ebp, bpl
cmova ebp, r11d
mov rax, qword [rcx + 0x10]
cmp byte [rax + 0x19], r11b
je 0x140066eae
mov rax, qword [rcx + 8]
jmp 0x140066ea3
cmp rcx, qword [rax + 0x10]
jne 0x140066ea9
mov rcx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], r11b
je 0x140066e96
mov rcx, rax
jmp 0x140066ec9
mov rcx, rax
mov rdx, qword [rax]
cmp byte [rdx + 0x19], r11b
jne 0x140066ec9
mov rcx, rdx
mov rax, qword [rdx]
mov rdx, rax
cmp byte [rax + 0x19], r11b
je 0x140066eba
cmp rcx, r8
jne 0x140066e4e
test bpl, bpl
jne 0x140066ed8
inc dword [rdi + 0x64]
jmp 0x140066f03
mov eax, dword [r9]
shr rax, 1
and eax, 1
imul rdx, rax, 0x10010
mov rcx, qword [rdi + 0x20]
lea r15, [rcx + 0x10]
add r15, rdx
mov eax, dword [rdi + 0x30]
mov dword [rdx + rcx + 8], eax
lock or dword [rsp], r11d
or dword [r9], 4
test rsi, rsi
je 0x140066f11
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
test bpl, bpl
je 0x140066ffc
mov rax, qword [r12]
mov rdx, qword [rax]
add rdx, 0x198
mov r8d, 0x10008
mov rcx, r15
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov r13b, 1
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
mov r11, qword [rdi + 0x20]
mov ecx, dword [r11]
and ecx, 0xfffffffb
mov dword [r11], ecx
shr rcx, 1
and ecx, 1
imul rdx, rcx, 0x10010
mov rcx, qword [rdi + 0x20]
mov eax, dword [rdi + 0x30]
mov dword [rdx + rcx + 0xc], eax
mov eax, dword [r11]
shr eax, 1
xor eax, dword [r11]
and eax, 1
xor dword [r11], eax
xor ebp, ebp
mov dword [rdi + 0x64], ebp
mov r9, qword [rbx]
mov r8, qword [r9]
jmp 0x140066fe7
mov r10, qword [r8 + 0x40]
prefetchw byte [r10]
mov edx, dword [r10]
mov ecx, dword [r11]
add ecx, ecx
xor ecx, edx
and ecx, 2
xor ecx, edx
mov eax, edx
lock cmpxchg dword [r10], ecx
cmp edx, eax
jne 0x140066f8a
mov rax, qword [r8 + 0x10]
cmp byte [rax + 0x19], bpl
je 0x140066fcc
mov rax, qword [r8 + 8]
jmp 0x140066fc1
cmp r8, qword [rax + 0x10]
jne 0x140066fc7
mov r8, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], bpl
je 0x140066fb4
mov r8, rax
jmp 0x140066fe7
mov r8, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], bpl
jne 0x140066fe7
mov r8, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], bpl
je 0x140066fd8
cmp r8, r9
jne 0x140066f82
test rsi, rsi
je 0x140066ffe
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
jmp 0x140066ffe
xor ebp, ebp
mov eax, dword [rdi + 0x60]
test eax, eax
je 0x1400670c1
cmp dword [rdi + 0x64], eax
jl 0x1400670c1
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
mov rcx, rbx
call fcn.14002b6a8
mov ebx, 0x20028
mov edx, ebx
lea rcx, [rsp + 0x28]
call fcn.14006aaf0
mov r8d, ebx
mov rdx, qword [rdi + 0x20]
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov rcx, qword [rdi + 0x18]
test rcx, rcx
je 0x14006705f
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
test eax, eax
je 0x1400670ea
mov rax, qword [rsp + 0x38]
mov qword [rdi + 0x18], rax
mov qword [rsp + 0x38], rbp
mov qword [rdi + 0x20], rbx
mov eax, dword [rsp + 0x48]
mov dword [rdi + 0x28], eax
mov qword [rsp + 0x40], rbp
mov dword [rsp + 0x48], 0x8000ffff
mov dword [rdi + 0x64], ebp
lea rcx, [rsp + 0x28]
call fcn.14006a9e0
test rsi, rsi
je 0x1400670a0
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
mov rcx, qword [rdi + 0xa0]
test rcx, rcx
jne 0x1400670b3
call qword [sym.imp.msvcp_win.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x1400a0b76.0]
nop
test r14, r14
je 0x1400670cf
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
mov al, r13b
mov rbx, qword [rsp + 0x98]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
call fcn.1400120bc
int3