Function at 0x14007ffa8
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov byte [rax + 0x18], r8b
mov qword [rax + 0x10], rdx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x58
mov rbx, qword [rcx + 0x30]
lea r15, [r9 + 0x10]
xor edi, edi
mov qword [rsp + 0x38], r15
xor r14d, r14d
mov qword [rax - 0x68], rdi
xor ecx, ecx
mov dword [rsp + 0xa0], r14d
xor r10d, r10d
mov r13, r9
movzx eax, byte [r15 + r10]
inc r10
add eax, ecx
imul ecx, eax, 0x401
mov eax, ecx
shr eax, 6
xor ecx, eax
cmp r10, 8
jb 0x14007ffed
mov r8b, byte [rsp + 0xc0]
mov ebp, 2
mov r15b, byte [rsp + 0xb0]
add r8b, bpl
cmp r8b, r15b
jae 0x140080071
movzx edx, r8b
mov al, r15b
shl rdx, 4
add rdx, r9
sub al, r8b
movzx r10d, al
mov r9d, dword [rdx + 8]
xor r8d, r8d
mov r11, qword [rdx]
test r9, r9
je 0x140080067
movzx eax, byte [r8 + r11]
inc r8
add eax, ecx
imul ecx, eax, 0x401
mov eax, ecx
shr eax, 6
xor ecx, eax
cmp r8, r9
jb 0x14008004b
add rdx, 0x10
sub r10, 1
jne 0x14008003c
lea eax, [rcx + rcx*8]
mov ecx, eax
shr ecx, 0xb
xor ecx, eax
lea rax, [rbx + 0x108]
imul r12d, ecx, 0x8001
mov rcx, rax
mov qword [rsp + 0x40], rax
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockShared]
nop dword [rax + rax]
mov eax, r12d
and eax, 0x1f
lea rsi, [rbx + rax*8]
cmp qword [rsi], 0
jne 0x140080113
cmp dword [rbx + 0x100], 0x400
jae 0x14008021d
test rdi, rdi
jne 0x140080101
mov r9b, byte [rsp + 0xc0]
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0xa8]
mov r8, r13
mov qword [rsp + 0x28], rax
mov dl, r15b
mov dword [rsp + 0x20], r12d
call fcn.14007fd68
mov rdi, qword [rsp + 0x30]
mov dword [rsp + 0xa0], eax
test rdi, rdi
je 0x1400801b5
xor eax, eax
lock cmpxchg qword [rsi], rdi
je 0x1400801cf
mov rdi, qword [rsp + 0x30]
mov r14, qword [rsi]
cmp r12d, dword [r14 + 0x28]
je 0x140080125
mov eax, r12d
sub eax, dword [r14 + 0x28]
jmp 0x140080197
mov r13, qword [r14 + 0x10]
mov r8d, 8
mov rcx, qword [rsp + 0x38]
lea rdx, [r13 + 0x10]
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
test eax, eax
jne 0x14008018f
movzx esi, byte [r14 + 0x2d]
add esi, ebp
movzx r15d, r15b
jmp 0x140080180
mov r9, qword [rsp + 0xb8]
mov ecx, esi
shl rcx, 4
mov eax, dword [rcx + r9 + 8]
sub eax, dword [rcx + r13 + 8]
jne 0x140080187
mov r8d, dword [rcx + r9 + 8]
mov rdx, qword [rcx + r13]
mov rcx, qword [rcx + r9]
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
test eax, eax
jne 0x140080187
inc esi
cmp esi, r15d
jb 0x14008014e
xor eax, eax
mov r15b, byte [rsp + 0xb0]
mov r13, qword [rsp + 0xb8]
test eax, eax
je 0x14008022d
cdqe
lea rsi, [r14 + 0x20]
sar rax, 0x3f
and rax, 0xfffffffffffffff8
add rsi, rax
jmp 0x1400800a7
cmp eax, 8
jne 0x1400801c7
inc dword [rbx + 0x130]
mov ebx, eax
jmp 0x1400802dc
inc dword [rbx + 0x134]
jmp 0x1400801c0
and qword [rsp + 0x30], 0
mov eax, 1
lock xadd dword [rbx + 0x100], eax
inc eax
cmp eax, 1
jne 0x1400801fb
mov edx, dword [rbx + 0x160]
mov rcx, qword [rbx + 0x158]
call fcn.14007fb24
mov eax, dword [rbx + 0x100]
mov rdi, qword [rsp + 0x30]
cmp dword [rbx + 0x120], eax
jae 0x1400802d5
mov dword [rbx + 0x120], eax
jmp 0x1400802d5
inc dword [rbx + 0x12c]
mov ebx, 0xea
jmp 0x1400802dc
test r14, r14
je 0x1400802d5
movzx ebx, byte [rsp + 0xc0]
add ebx, ebp
cmp ebx, ebp
jbe 0x1400802d5
movzx ecx, bpl
add rcx, rcx
mov rax, qword [r13 + rcx*8]
mov r8, qword [rax]
mov rax, qword [r14 + 0x10]
movzx r11d, byte [rax + rcx*8 + 0xd]
mov r9, qword [rax + rcx*8]
cmp r11d, 0x71
je 0x1400802bc
lea eax, [r11 - 0x72]
cmp eax, 1
ja 0x1400802c1
mov r10, qword [r9]
xor edx, edx
cmp r8, r10
setl dl
xor ecx, ecx
cmp r8, r10
setg cl
cmp r11d, 0x72
cmove ecx, edx
test ecx, ecx
je 0x1400802c1
mov rax, r10
lock cmpxchg qword [r9], r8
je 0x1400802c1
mov r10, qword [r9]
xor ecx, ecx
cmp r8, r10
setl cl
xor eax, eax
cmp r8, r10
setg al
cmp r11b, 0x72
cmove eax, ecx
test eax, eax
jne 0x140080292
jmp 0x1400802c1
lock xadd qword [r9], r8
inc bpl
movzx eax, bpl
cmp eax, ebx
jb 0x140080248
mov rdi, qword [rsp + 0x30]
mov ebx, dword [rsp + 0xa0]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockShared]
nop dword [rax + rax]
test rdi, rdi
je 0x140080313
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rdi + 0x10]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov eax, ebx
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret