Function at 0x1400026ec
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov r15d, dword [rsp + 0x70]
lea ebp, [r9 - 0x1ce6]
mov esi, dword [rsp + 0x80]
lea edi, [r9 - 0x37c]
mov rbx, qword [rsp + 0x78]
mov eax, ebp
mov r14d, ecx
mov edx, r9d
xor eax, 0x1744
xor edx, 0x1fa
add r15d, 0x674
add esi, 0xa43
xor r14d, 0x9ed
cmp edx, eax
je 0x140002909
xor edx, 0xb6e
cmp edi, edx
je 0x1400028e6
xor r10d, r10d
mov rax, qword [rbx + 0x90]
mov edx, dword [rbx + 0x70]
mov r8, qword [section..data]
mov r9d, dword [r10 + rax]
add r10, 4
mov eax, dword [0x1404cd04c]
mov ecx, dword [r8 + 0xc8]
imul r9d, dword [0x1404cd044]
add ecx, 0xfde0f
add edx, ecx
imul eax, edx
mov dword [0x1404cd04c], eax
mov eax, dword [r8 + 0xec]
sub eax, dword [rbx + 0x68]
add eax, 0x14674f
xor dword [r8 + 0xc8], eax
mov eax, dword [rbx + 0xc4]
mov ecx, dword [rbx + 0x54]
inc ecx
imul eax, ecx
mov dword [rbx + 0xc4], eax
mov eax, dword [rbx + 0x38]
xor eax, 0xcc1bb
sub dword [0x1404cd0c4], eax
mov rax, qword [section..data]
movsxd rcx, dword [rax + 0x74]
mov rax, qword [rbx + 0xd8]
mov byte [rcx + rax], r9b
mov rax, qword [section..data]
inc dword [rax + 0x74]
mov eax, dword [0x1404cd064]
xor dword [0x1404cd0d8], eax
mov eax, dword [rbx + 0xa0]
mov edx, dword [rbx + 0x70]
mov ecx, dword [rbx + 4]
add ecx, 0xfde10
add edx, ecx
imul eax, edx
mov dword [rbx + 0xa0], eax
mov eax, dword [rbx + 0x110]
sub eax, 0xa
xor dword [0x1404cd080], eax
mov eax, dword [0x1404cd0a8]
mov ecx, dword [rbx + 0x30]
mov edx, dword [rbx + 0xc8]
add ecx, 0xfffe9e11
add edx, ecx
imul eax, edx
mov dword [0x1404cd0a8], eax
mov eax, dword [rbx + 0x154]
mov ecx, dword [rbx + 0xcc]
sub ecx, dword [0x1404cd160]
add ecx, 0x10
imul eax, ecx
mov dword [rbx + 0x154], eax
mov eax, dword [0x1404cd0c4]
sub dword [0x1404cd0d4], eax
mov rax, qword [section..data]
mov ecx, dword [rax + 0x110]
xor ecx, dword [rbx + 0xec]
mov eax, dword [rbx + 0x3c]
sub ecx, 0xa
imul eax, ecx
mov dword [rbx + 0x3c], eax
mov eax, 0x10e2c2
sub eax, dword [rbx + 0x1c]
add dword [0x1404cd124], eax
and dword [rbx + 0x154], 0
cmp r10, 0x2f1570
jl 0x140002763
sub edi, 0x990
cmp dword [rbx + 0xa0], 0x155b2
jbe 0x140002909
mov rcx, qword [section..data]
mov eax, dword [rcx + 0xc8]
add eax, 0xd5bb5
mov dword [rcx + 0x34], eax
jmp 0x140002909
mov eax, dword [rbx + 0x98]
mov edx, edi
sub eax, dword [0x1404cd164]
mov ecx, edi
imul r8d, eax, 0x1d1c
sub ecx, esi
imul edx, r14d
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [r14 - 0x6aa]
cmp r15d, eax
jl 0x14000298e
mov rax, qword [section..data]
mov edx, dword [0x1404cd14c]
sub edx, dword [rax + 0x48]
xor edx, dword [rbx + 0x34]
xor edx, 0xd51b8
mov dword [rbx + 0x34], edx
mov rax, qword [section..data]
mov ecx, dword [rax + 4]
mov eax, dword [0x1404cd14c]
add ecx, edx
add eax, 0x1b4
add ecx, eax
cmp dword [rbx + 0x13c], 0x171a6
mov dword [rbx + 0x34], ecx
jae 0x140002970
mov rcx, qword [section..data]
mov eax, 0xfffff3bd
sub eax, dword [0x1404cd06c]
add dword [rcx + 0x34], eax
jmp 0x140002977
xor dword [rbx + 0x40], 0x21217
mov rax, qword [section..data]
lea rcx, [0x1400174a0]
mov qword [rax + 0x90], rcx
jmp 0x140002a05
mov eax, esi
sub eax, dword [rbx + 0xa8]
or eax, 0x12ab
cmp dword [rbx + 0x124], eax
jbe 0x140002a05
mov eax, dword [rbx + 0xc4]
inc eax
imul eax, esi
cmp dword [0x1404cd12c], eax
jb 0x140002a05
mov eax, dword [rbx + 0xec]
imul eax, r15d
sub ebp, eax
mov rax, qword [section..data]
mov r8d, ebp
xor r8d, 0x1e18
mov ecx, dword [rax + 4]
mov r10d, ecx
mov eax, esi
sub r10d, esi
or r10, rax
imul r8d, ecx
mov ecx, dword [0x1404cd040]
imul eax, esi, 0x10ee
mov qword [rsp + 0x20], r10
movsxd r9, eax
lea eax, [rdi + rbp]
movsxd rdx, eax
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov rbx, qword [rsp + 0x50]
lea eax, [r15 - 0xd0c]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x30
pop r15
pop r14
pop rdi
ret