Function at 0x140048c6c
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov qword [rax - 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov r12, rdx
mov rdi, rcx
lea r15, [rcx + 0x40]
mov rcx, r15
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
mov qword [rsp + 0xa8], r15
mov byte [rsp + 0x90], 0
mov bpl, 1
xor r14d, r14d
lock inc dword [rdi + 0x30]
lea rsi, [rdi + 0x38]
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
mov rbx, qword [rsp + 0xa0]
mov rax, rbx
sub rax, qword [rdi + 0x58]
imul rax, rax, 0x3e8
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [0x1400e8868]
divsd xmm1, xmm0
cvtpd2ps xmm1, xmm1
comiss xmm1, dword [0x1400c0970]
seta al
xor r11d, r11d
test al, al
je 0x140048d24
mov rcx, rdi
call fcn.14003d5ec
mov qword [rdi + 0x58], rbx
xor r11d, r11d
mov r9, qword [rdi + 0x20]
mov eax, dword [r9]
lea ecx, [rax*2 - 2]
xor ecx, eax
and ecx, 2
xor ecx, eax
mov dword [r9], ecx
lea r13, [rdi + 0x48]
mov r8, qword [r13]
mov rcx, qword [r8]
cmp rcx, r8
je 0x140048dda
mov r10, qword [rcx + 0x40]
mov edx, dword [r10]
mov eax, edx
shr eax, 1
xor eax, dword [r9]
test al, 1
je 0x140048d64
int 0x2c
mov eax, edx
lock cmpxchg dword [r10], edx
cmp edx, eax
jne 0x140048d54
mov eax, dword [r9]
shr eax, 1
xor eax, edx
test al, 1
jne 0x140048d88
test edx, 0xfffffffc
movzx ebp, bpl
cmova ebp, r11d
mov rax, qword [rcx + 0x10]
cmp byte [rax + 0x19], r11b
je 0x140048db0
mov rax, qword [rcx + 8]
jmp 0x140048da5
cmp rcx, qword [rax + 0x10]
jne 0x140048dab
mov rcx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], r11b
je 0x140048d98
mov rcx, rax
jmp 0x140048dcb
mov rcx, rax
mov rdx, qword [rax]
cmp byte [rdx + 0x19], r11b
jne 0x140048dcb
mov rcx, rdx
mov rax, qword [rdx]
mov rdx, rax
cmp byte [rax + 0x19], r11b
je 0x140048dbc
cmp rcx, r8
jne 0x140048d50
test bpl, bpl
jne 0x140048dda
inc dword [rdi + 0x64]
jmp 0x140048e05
mov eax, dword [r9]
shr rax, 1
and eax, 1
imul rdx, rax, 0x100f8
mov rcx, qword [rdi + 0x20]
lea r14, [rcx + 0xc]
add r14, rdx
mov eax, dword [rdi + 0x30]
mov dword [rdx + rcx + 4], eax
lock or dword [rsp], r11d
or dword [r9], 4
test rsi, rsi
je 0x140048e13
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
test bpl, bpl
je 0x140048f29
mov rbx, qword [r12]
mov rcx, qword [rbx]
mov rdx, r14
mov rcx, qword [rcx]
call fcn.1400523a4
mov rax, qword [rbx + 8]
mov rbx, qword [rax + 0x130]
lea rbp, [rbx + 8]
mov rcx, rbp
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockShared]
mov ebx, dword [rbx + 0x14]
xor r12d, r12d
test rbp, rbp
je 0x140048e5a
mov rcx, rbp
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockShared]
test ebx, ebx
setne al
mov byte [r14 + 0x4c], al
mov bpl, 1
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
mov r11, qword [rdi + 0x20]
mov ecx, dword [r11]
and ecx, 0xfffffffb
mov dword [r11], ecx
shr rcx, 1
and ecx, 1
imul rdx, rcx, 0x100f8
mov rcx, qword [rdi + 0x20]
mov eax, dword [rdi + 0x30]
mov dword [rdx + rcx + 8], eax
mov eax, dword [r11]
shr eax, 1
xor eax, dword [r11]
and eax, 1
xor dword [r11], eax
mov dword [rdi + 0x64], r12d
mov r9, qword [r13]
mov r8, qword [r9]
jmp 0x140048f14
mov r10, qword [r8 + 0x40]
prefetchw byte [r10]
mov edx, dword [r10]
mov ecx, dword [r11]
add ecx, ecx
xor ecx, edx
and ecx, 2
xor ecx, edx
mov eax, edx
lock cmpxchg dword [r10], ecx
cmp edx, eax
jne 0x140048eb7
mov rax, qword [r8 + 0x10]
cmp byte [rax + 0x19], r12b
je 0x140048ef9
mov rax, qword [r8 + 8]
jmp 0x140048eee
cmp r8, qword [rax + 0x10]
jne 0x140048ef4
mov r8, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], r12b
je 0x140048ee1
mov r8, rax
jmp 0x140048f14
mov r8, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], r12b
jne 0x140048f14
mov r8, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], r12b
je 0x140048f05
cmp r8, r9
jne 0x140048eaf
test rsi, rsi
je 0x140048f34
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
jmp 0x140048f34
mov bpl, byte [rsp + 0x90]
xor r12d, r12d
mov eax, dword [rdi + 0x60]
test eax, eax
je 0x140048ff8
cmp dword [rdi + 0x64], eax
jl 0x140048ff8
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
mov rcx, r13
call fcn.14002b6a8
mov ebx, 0x201f4
mov edx, ebx
lea rcx, [rsp + 0x28]
call fcn.14006aaf0
mov r8d, ebx
mov rdx, qword [rdi + 0x20]
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov rcx, qword [rdi + 0x18]
test rcx, rcx
je 0x140048f95
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
test eax, eax
je 0x140049021
mov rax, qword [rsp + 0x38]
mov qword [rdi + 0x18], rax
mov qword [rsp + 0x38], r12
mov qword [rdi + 0x20], rbx
mov eax, dword [rsp + 0x48]
mov dword [rdi + 0x28], eax
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x48], 0x8000ffff
mov dword [rdi + 0x64], r12d
lea rcx, [rsp + 0x28]
call fcn.14006a9e0
test rsi, rsi
je 0x140048fd7
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
mov rcx, qword [rdi + 0xa0]
test rcx, rcx
jne 0x140048fea
call qword [sym.imp.msvcp_win.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x1400a0b76.0]
nop
test r15, r15
je 0x140049006
mov rcx, r15
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
mov al, bpl
mov rbx, qword [rsp + 0x98]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
call fcn.1400120bc
int3