Function at 0x14003d1cc
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov qword [rax - 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov r12, rdx
mov rdi, rcx
lea r14, [rcx + 0x40]
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
mov qword [rsp + 0xa0], r14
xor r13b, r13b
mov bpl, 1
xor r15d, r15d
lock inc dword [rdi + 0x30]
lea rsi, [rdi + 0x38]
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
lea rcx, [rsp + 0x90]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
mov rbx, qword [rsp + 0x90]
mov rax, rbx
sub rax, qword [rdi + 0x58]
imul rax, rax, 0x3e8
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [0x1400e8868]
divsd xmm1, xmm0
cvtpd2ps xmm1, xmm1
comiss xmm1, dword [0x1400c0970]
seta al
xor r11d, r11d
test al, al
je 0x14003d27f
mov rcx, rdi
call fcn.14003d5ec
mov qword [rdi + 0x58], rbx
xor r11d, r11d
mov r9, qword [rdi + 0x20]
mov eax, dword [r9]
lea ecx, [rax*2 - 2]
xor ecx, eax
and ecx, 2
xor ecx, eax
mov dword [r9], ecx
lea rbx, [rdi + 0x48]
mov r8, qword [rbx]
mov rcx, qword [r8]
cmp rcx, r8
je 0x14003d334
mov r10, qword [rcx + 0x40]
mov edx, dword [r10]
mov eax, edx
shr eax, 1
xor eax, dword [r9]
test al, 1
je 0x14003d2be
int 0x2c
mov eax, edx
lock cmpxchg dword [r10], edx
cmp edx, eax
jne 0x14003d2ae
mov eax, dword [r9]
shr eax, 1
xor eax, edx
test al, 1
jne 0x14003d2e2
test edx, 0xfffffffc
movzx ebp, bpl
cmova ebp, r11d
mov rax, qword [rcx + 0x10]
cmp byte [rax + 0x19], r11b
je 0x14003d30a
mov rax, qword [rcx + 8]
jmp 0x14003d2ff
cmp rcx, qword [rax + 0x10]
jne 0x14003d305
mov rcx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], r11b
je 0x14003d2f2
mov rcx, rax
jmp 0x14003d325
mov rcx, rax
mov rdx, qword [rax]
cmp byte [rdx + 0x19], r11b
jne 0x14003d325
mov rcx, rdx
mov rax, qword [rdx]
mov rdx, rax
cmp byte [rax + 0x19], r11b
je 0x14003d316
cmp rcx, r8
jne 0x14003d2aa
test bpl, bpl
jne 0x14003d334
inc dword [rdi + 0x64]
jmp 0x14003d35f
mov eax, dword [r9]
shr rax, 1
and eax, 1
imul rdx, rax, 0x100020
mov rcx, qword [rdi + 0x20]
lea r15, [rcx + 0x10]
add r15, rdx
mov eax, dword [rdi + 0x30]
mov dword [rdx + rcx + 8], eax
lock or dword [rsp], r11d
or dword [r9], 4
test rsi, rsi
je 0x14003d36d
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
test bpl, bpl
je 0x14003d4c9
call fcn.140022a94
mov rcx, qword [rax + 8]
xor ebp, ebp
test rcx, rcx
je 0x14003d394
cmp dword [rcx], ebp
jbe 0x14003d394
call fcn.140022a94
call fcn.14003e49c
mov rax, qword [r12 + 8]
mov rcx, qword [rax + 0x98]
mov rax, qword [rcx]
mov r8d, 0x100000
mov rdx, r15
mov rax, qword [rax + 0x18]
call qword [case.0x1400a0b76.0]
mov rcx, qword [r12]
mov dword [rcx], eax
mov rcx, qword [r12 + 0x10]
mov eax, dword [r15 + 4]
mov dword [rcx], eax
mov rcx, qword [r12 + 8]
mov rcx, qword [rcx + 0x90]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ResetEvent]
mov rcx, qword [rsp + 0x88]
test eax, eax
je 0x14003d5d2
call fcn.140022a94
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14003d405
cmp dword [rcx], ebp
jbe 0x14003d405
call fcn.140022a94
call fcn.14003e410
mov r13b, 1
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
mov r11, qword [rdi + 0x20]
mov ecx, dword [r11]
and ecx, 0xfffffffb
mov dword [r11], ecx
shr rcx, 1
and ecx, 1
imul rdx, rcx, 0x100020
mov rcx, qword [rdi + 0x20]
mov eax, dword [rdi + 0x30]
mov dword [rdx + rcx + 0xc], eax
mov eax, dword [r11]
shr eax, 1
xor eax, dword [r11]
and eax, 1
xor dword [r11], eax
mov dword [rdi + 0x64], ebp
mov r9, qword [rbx]
mov r8, qword [r9]
jmp 0x14003d4b4
mov r10, qword [r8 + 0x40]
prefetchw byte [r10]
mov edx, dword [r10]
mov ecx, dword [r11]
add ecx, ecx
xor ecx, edx
and ecx, 2
xor ecx, edx
mov eax, edx
lock cmpxchg dword [r10], ecx
cmp edx, eax
jne 0x14003d457
mov rax, qword [r8 + 0x10]
cmp byte [rax + 0x19], bpl
je 0x14003d499
mov rax, qword [r8 + 8]
jmp 0x14003d48e
cmp r8, qword [rax + 0x10]
jne 0x14003d494
mov r8, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], bpl
je 0x14003d481
mov r8, rax
jmp 0x14003d4b4
mov r8, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], bpl
jne 0x14003d4b4
mov r8, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], bpl
je 0x14003d4a5
cmp r8, r9
jne 0x14003d44f
test rsi, rsi
je 0x14003d4cb
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
jmp 0x14003d4cb
xor ebp, ebp
mov eax, dword [rdi + 0x60]
test eax, eax
je 0x14003d58e
cmp dword [rdi + 0x64], eax
jl 0x14003d58e
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
mov rcx, rbx
call fcn.14002b6a8
mov ebx, 0x200048
mov edx, ebx
lea rcx, [rsp + 0x28]
call fcn.14006aaf0
mov r8d, ebx
mov rdx, qword [rdi + 0x20]
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov rcx, qword [rdi + 0x18]
test rcx, rcx
je 0x14003d52c
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
test eax, eax
je 0x14003d5b7
mov rax, qword [rsp + 0x38]
mov qword [rdi + 0x18], rax
mov qword [rsp + 0x38], rbp
mov qword [rdi + 0x20], rbx
mov eax, dword [rsp + 0x48]
mov dword [rdi + 0x28], eax
mov qword [rsp + 0x40], rbp
mov dword [rsp + 0x48], 0x8000ffff
mov dword [rdi + 0x64], ebp
lea rcx, [rsp + 0x28]
call fcn.14006a9e0
test rsi, rsi
je 0x14003d56d
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
mov rcx, qword [rdi + 0xa0]
test rcx, rcx
jne 0x14003d580
call qword [sym.imp.msvcp_win.dll_void___cdecl_std::_Xbad_function_call_void_]
int3
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x1400a0b76.0]
nop
test r14, r14
je 0x14003d59c
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
mov al, r13b
mov rbx, qword [rsp + 0x98]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
call fcn.1400120bc
int3
lea r8, str.internal_sdkincwilopensource_wil_resource.h
mov edx, 0x8eb
call fcn.140003bc8
int3