Function at 0x180001f20
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push r13
sub rsp, 0x50
mov rbx, qword [rsp + 0x98]
lea ecx, [rdx + 0x19]
mov qword [rsp + 0x70], rbp
mov esi, r8d
xor esi, 0xf8f
mov qword [rsp + 0x48], r14
lea r14d, [r9 - 0xf99]
mov dword [rsp + 0x78], ecx
mov ebp, edx
xor r9d, 0x1fa4
xor ebp, 0x1145
xor r13d, r13d
lea eax, [rsi + 0x123a]
cmp r14d, eax
je 0x18000205d
mov r9d, r13d
nop word [rax + rax]
mov rax, qword [0x18002f0a8]
mov r8d, dword [r9 + rax]
add r9, 4
imul r8d, dword [0x18002f084]
mov eax, dword [rbx + 0x8c]
sub eax, 0x16dcf3
or dword [0x18002f0c4], eax
mov eax, 0x13123
sub eax, dword [0x18002f074]
add dword [0x18002f06c], eax
mov edx, r8d
movsxd rcx, dword [rbx + 0x7c]
mov eax, dword [rbx + 0x64]
xor eax, 0x13123
shr edx, 0x10
sub dword [rbx + 0x18], eax
mov rax, qword [0x18002f0b0]
mov byte [rcx + rax], dl
mov edx, r8d
inc dword [rbx + 0x7c]
mov rax, qword [section..data]
shr edx, 8
movsxd rcx, dword [rax + 0x7c]
mov rax, qword [rax + 0xa0]
mov byte [rcx + rax], dl
mov rax, qword [section..data]
inc dword [rax + 0x7c]
movsxd rcx, dword [rbx + 0x7c]
mov rax, qword [rbx + 0xa0]
mov byte [rcx + rax], r8b
inc dword [rbx + 0x7c]
mov rcx, qword [section..data]
mov eax, dword [rbx + 0xc4]
sub eax, dword [rbx + 0x5c]
add eax, 0x1070c49d
add dword [rcx + 0x18], eax
mov eax, dword [0x18002f088]
xor dword [rbx + 0xcc], eax
mov eax, dword [rbx + 0xc4]
mov rcx, qword [section..data]
xor eax, 0xef76fb62
add dword [rcx + 0x4c], eax
cmp r9, 0x10dd0
jl 0x180001f80
jmp 0x180002171
mov qword [rsp + 0x80], rdi
mov edi, r14d
and edi, 0x112d
xor edi, 0x10e9
cmp ebp, edi
je 0x180002169
mov qword [rsp + 0x88], r12
mov r13d, ebp
mov qword [rsp + 0x40], r15
movsxd r15, ebp
or r15, 0x115e
mov edx, r9d
mov r12d, ebp
xor r12, 0x12bd
mov eax, ecx
mov qword [rsp + 0x30], rdx
nop word [rax + rax]
mov r9d, dword [0x18002f020]
and r9, rax
mov rax, qword [section..data]
or r9, rdx
mov qword [rsp + 0x20], r9
mov r9, r15
mov edx, dword [rax + 0x5c]
mov r8d, dword [rax + 0x108]
add edx, r14d
mov eax, dword [rbx + 4]
or r8, r12
or rdx, rax
mov eax, dword [rbx + 0xb4]
imul eax, ecx
imul ecx, eax, 0xe94
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov rax, qword [section..data]
mov r8d, dword [rbx + 0x48]
mov ecx, dword [rbx + 0xac]
or r8d, esi
xor ecx, r14d
mov r9d, dword [rax + 0x104]
add r9d, dword [0x18002f09c]
mov edx, dword [rax + 0xc4]
xor edx, dword [0x18002f030]
and r8d, dword [rax + 4]
mov dword [rsp + 0x20], r9d
mov r9, rbx
call fcn.18000e450
mov ecx, dword [rsp + 0x78]
mov esi, eax
mov rdx, qword [rsp + 0x30]
lea eax, [r14 + r14]
or esi, eax
add r13d, 4
mov eax, ecx
cmp r13d, edi
jne 0x1800020b0
mov r15, qword [rsp + 0x40]
xor r13d, r13d
mov r12, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x80]
mov r14, qword [rsp + 0x48]
lea eax, [rsi + 0x103d]
cmp ebp, eax
mov rbp, qword [rsp + 0x70]
je 0x1800022d8
mov eax, dword [rbx + 0x8c]
cmp dword [rbx + 0x5c], eax
jbe 0x1800021a7
mov eax, dword [0x18002f0c4]
add eax, 0xffe8f686
mov dword [0x18002f084], eax
jmp 0x1800021b3
mov eax, dword [0x18002f100]
mov dword [0x18002f0c0], eax
lea rax, [0x1800351c0]
mov qword [0x18002f0a8], rax
nop dword [rax]
nop word [rax + rax]
mov r8d, dword [rax + r13]
add r13, 4
imul r8d, dword [rbx + 0x74]
mov eax, dword [rbx + 0x4c]
mov rcx, qword [section..data]
xor eax, 1
mov edx, r8d
sub dword [rcx + 0xcc], eax
mov eax, dword [0x18002f058]
xor eax, 0xa6313
shr edx, 0x18
sub dword [rbx + 0x78], eax
movsxd rcx, dword [0x18002f08c]
mov rax, qword [0x18002f0b0]
mov byte [rcx + rax], dl
inc dword [0x18002f08c]
mov eax, dword [0x18002f088]
xor dword [rbx + 0x108], eax
mov rdx, qword [section..data]
mov ecx, dword [rdx + 4]
mov eax, dword [rdx + 0x64]
inc ecx
imul eax, ecx
mov dword [rdx + 0x64], eax
mov edx, r8d
movsxd rcx, dword [rbx + 0x7c]
mov rax, qword [rbx + 0xa0]
shr edx, 0x10
mov byte [rcx + rax], dl
mov edx, r8d
inc dword [rbx + 0x7c]
mov ecx, dword [0x18002f09c]
mov eax, dword [0x18002f028]
add eax, 0xfffae184
shr edx, 8
add dword [0x18002f058], eax
mov eax, dword [0x18002f074]
add eax, 0xfffecede
imul ecx, eax
mov rax, qword [section..data]
mov dword [0x18002f09c], ecx
movsxd rcx, dword [rax + 0x7c]
mov rax, qword [0x18002f0b0]
mov byte [rcx + rax], dl
mov rax, qword [section..data]
inc dword [rax + 0x7c]
mov rax, qword [section..data]
movsxd rcx, dword [rax + 0x7c]
mov rax, qword [rbx + 0xa0]
mov byte [rcx + rax], r8b
mov rax, qword [section..data]
inc dword [rax + 0x7c]
cmp r13, 0xece8
jge 0x1800022d8
mov rax, qword [0x18002f0a8]
jmp 0x1800021d0
lea eax, [rsi + 0x10a0]
add rsp, 0x50
pop r13
pop rsi
pop rbx
ret