Function at 0x18000ec40
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x60
mov rax, qword [section..data]
xor ebx, ebx
mov dword [rsp + 0x44], 0xb5d
mov dword [rsp + 0x5c], 0x150d
mov dword [rsp + 0x48], 0xab3
mov dword [rax], ebx
mov rax, qword [section..data]
mov dword [rsp + 0x54], 0x165c
mov dword [0x180026024], 1
mov dword [rsp + 0x40], ebx
mov dword [rax + 0x28], 1
mov rax, qword [section..data]
mov dword [0x18002603c], 0x47
mov dword [0x180026044], ebx
mov dword [0x180026058], ebx
mov dword [0x180026060], 0x56
mov dword [0x180026070], 0x14
mov dword [rax + 0x74], ebx
mov rax, qword [section..data]
mov dword [0x1800260f0], 1
mov dword [rsp + 0x50], ebx
mov dword [0x180026098], ebx
mov qword [0x1800260a4], 1
mov dword [0x1800260ac], ebx
mov dword [0x1800260b8], 1
mov dword [0x1800260ec], 0xd
mov dword [0x180026110], 1
mov dword [0x180026118], 3
mov dword [rax + 0x110], 0x3b
cmp dword [0x1800260f0], 0x83da
mov rcx, qword [section..data]
mov dword [rsp + 0x58], 0x177b
mov dword [rsp + 0x4c], ebx
ja 0x18000ed55
mov eax, dword [0x180026024]
add eax, 0xf4263
add dword [rcx + 0x28], eax
mov rcx, qword [section..data]
jmp 0x18000ed66
mov eax, 0xfffe0070
sub eax, dword [rcx + 0xdc]
add dword [0x180026038], eax
mov edx, dword [rsp + 0x48]
mov r8d, dword [rsp + 0x54]
sub edx, 0x617
mov r9d, dword [rsp + 0x5c]
sub r8d, 0x6ee
add dword [rcx + 0x108], 0x191a41
sub r9d, 0x59f
mov ecx, dword [rsp + 0x44]
mov eax, dword [rsp + 0x58]
add ecx, 0xccf
sub eax, 0x80d
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
lea rcx, [0x180026010]
call fcn.18000d8d0
mov r8d, dword [0x180026054]
cmp r8d, dword [0x18002606c]
mov dword [rsp + 0x48], eax
ja 0x18000ee35
nop dword [rax]
mov rdx, qword [section..data]
mov eax, r8d
mov ecx, dword [0x1800260a4]
xor ecx, dword [0x180026024]
imul eax, r8d
sub ecx, 0x1cd1bc
inc r8d
add dword [0x1800260f8], eax
mov eax, dword [0x1800260ec]
add eax, 0xfffce0b0
xor dword [0x180026058], eax
mov eax, dword [rdx + 0x88]
imul eax, ecx
mov dword [rdx + 0x88], eax
mov ecx, dword [0x180026120]
mov eax, ecx
xor eax, 0x3b
add ecx, eax
cmp r8d, dword [0x18002606c]
mov dword [0x180026120], ecx
jbe 0x18000edd0
mov ecx, dword [rsp + 0x58]
lea rdx, [0x180026010]
mov r8d, dword [rsp + 0x5c]
sub ecx, 0xaf4
mov r9d, dword [rsp + 0x4c]
xor r8d, 0x351
mov r11d, dword [rsp + 0x58]
xor r9d, 0xc36
mov r10d, dword [rsp + 0x54]
sub r11d, 0x721
mov eax, dword [rsp + 0x54]
xor r10d, 0x606
sub eax, 0x4e0
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
call fcn.180003900
mov dword [rsp + 0x4c], eax
add dword [rsp + 0x44], 0xfffff93f
xor dword [rsp + 0x48], 0xb19
mov rax, qword [section..data]
mov ecx, dword [0x180026010]
sub ecx, dword [rax + 0xa8]
sub ecx, 0x111371e3
xor dword [0x180026078], ecx
mov ecx, dword [rsp + 0x44]
mov edx, dword [rsp + 0x44]
add ecx, 0xc44
mov r8d, dword [rsp + 0x50]
add edx, 0xe00
mov r9d, dword [rsp + 0x54]
add r8d, 0xe7b
mov rax, qword [section..data]
sub r9d, 0xaff
mov qword [rsp + 0x20], rax
call fcn.18000f6c0
mov dword [rsp + 0x44], eax
mov edx, 0x1a01
add dword [rsp + 0x40], 0x177b
xor dword [rsp + 0x50], 0x5f0
add dword [rsp + 0x48], 0x32a
mov eax, dword [0x180026118]
cmp dword [0x180026084], eax
mov eax, 0x14c59b
mov ecx, dword [0x180026078]
cmovne ecx, edx
mov dword [0x180026078], ecx
xor dword [rsp + 0x40], 0x1b4d
mov edx, dword [0x180026078]
mov ecx, dword [0x180026098]
add edx, 0xc4ec4feb
xor ecx, dword [0x180026084]
sub eax, ecx
mov ecx, dword [rsp + 0x50]
add edx, eax
lea rax, [0x1800128c0]
mov qword [0x1800260c8], rax
mov eax, dword [rsp + 0x5c]
mov dword [0x180026078], edx
cmp eax, ecx
je 0x18000f39e
mov ecx, dword [rsp + 0x50]
mov eax, dword [rsp + 0x48]
add ecx, 0xa6a
cmp eax, ecx
jle 0x18000f1ab
mov ecx, dword [0x180026098]
mov r10, rbx
mov rdx, qword [section..data]
mov eax, dword [0x1800260b8]
add eax, 0xffeb1f3d
add ecx, eax
mov rax, qword [0x1800260c8]
xor dword [0x1800260f0], ecx
mov ecx, dword [rdx + 0x60]
xor ecx, dword [0x180026110]
mov r9d, dword [r10 + rax]
sub ecx, 0x18afee8
mov eax, dword [0x180026070]
add r10, 4
imul eax, ecx
mov dword [0x180026070], eax
mov ecx, dword [rdx + 0x88]
mov eax, dword [0x1800260ec]
add eax, 0xffe7ffee
add ecx, eax
xor dword [rdx + 0x110], ecx
movsxd rdx, dword [0x18002607c]
mov eax, dword [0x1800260b8]
imul r9d, dword [0x180026078]
add eax, 0xfff77343
mov ecx, dword [0x1800260f0]
add ecx, eax
mov rax, qword [section..data]
mov dword [0x1800260b8], ecx
mov r8d, r9d
mov rcx, qword [rax + 0xc0]
shr r8d, 0x10
mov byte [rdx + rcx], r8b
mov r8d, r9d
mov eax, dword [0x18002607c]
inc eax
shr r8d, 8
mov dword [0x18002607c], eax
movsxd rdx, eax
mov rax, qword [section..data]
mov rcx, qword [rax + 0xc0]
mov byte [rdx + rcx], r8b
mov eax, dword [0x18002607c]
inc eax
mov dword [0x18002607c], eax
movsxd rcx, eax
mov rax, qword [0x1800260d0]
mov byte [rcx + rax], r9b
inc dword [0x18002607c]
mov rdx, qword [section..data]
mov ecx, dword [0x180026098]
mov eax, dword [rdx + 0x14]
add eax, dword [0x180026038]
xor eax, 0xbed57
or dword [0x180026084], eax
mov eax, 0x9d7e7
sub eax, dword [0x18002603c]
add dword [0x180026024], eax
mov eax, 0x14e0c2
sub eax, ecx
add dword [0x1800260ac], eax
cmp r10, 0x3250
jl 0x18000efb1
xor dword [rsp + 0x40], 0xa72
add dword [rsp + 0x4c], 0xfffff551
add dword [rsp + 0x58], 0xffffeec9
mov rdx, qword [section..data]
mov ecx, dword [0x180026038]
mov eax, dword [0x180026024]
add eax, 0xfff412a9
add ecx, eax
or dword [rdx + 0x98], ecx
mov eax, dword [0x18002608c]
mov rcx, qword [0x1800260d8]
xor dword [rcx + rbx], eax
add rbx, 4
mov rdx, qword [section..data]
mov eax, dword [0x180026084]
sub dword [0x1800260f0], eax
mov eax, dword [0x180026010]
mov ecx, dword [rdx + 0x74]
add eax, 0xffcb783f
add ecx, dword [0x180026118]
add ecx, eax
mov dword [0x180026010], ecx
mov eax, dword [rdx + 0xe4]
add dword [0x18002608c], eax
cmp rbx, 0x3a8
jl 0x18000f102
add dword [rsp + 0x40], 0x2ce
mov rax, qword [0x1800260d8]
mov qword [0x1800260c0], rax
xor dword [rsp + 0x40], 0x1c1f
add dword [rsp + 0x44], 0xfffff540
call qword [0x1800260c0]
mov dword [0x1800260fc], eax
add rsp, 0x60
pop rbx
ret
mov eax, dword [0x180026010]
or eax, 0x5f0
cmp dword [0x180026108], eax
ja 0x18000f39e
mov ecx, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x4c]
movsxd r8, dword [rsp + 0x48]
mov eax, dword [0x180026058]
xor r8, 0x150d
mov r10d, dword [rsp + 0x5c]
xor rcx, rax
mov rax, qword [section..data]
add edx, dword [0x1800260ec]
imul r9d, dword [rax + 0x60], 0x49c
mov eax, dword [0x180026068]
xor r10, rax
mov qword [rsp + 0x20], r10
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov ecx, dword [rsp + 0x4c]
mov rax, qword [section..data]
sub ecx, dword [rax + 0x9c]
or dword [rsp + 0x50], ecx
mov ebx, dword [rsp + 0x58]
mov edx, dword [rsp + 0x50]
mov rcx, qword [section..data]
mov eax, dword [rcx + 0x48]
imul eax, dword [0x180026070]
sub dword [0x1800260f0], eax
mov eax, dword [0x1800260a0]
add eax, 0xfffffb64
xor dword [0x1800260ac], eax
mov eax, dword [rsp + 0x5c]
xor edx, eax
mov r8d, dword [rsp + 0x40]
add edx, 0xab3
mov eax, dword [rsp + 0x44]
or r8d, eax
mov eax, dword [rsp + 0x54]
mov r9d, dword [rsp + 0x40]
mov r11d, dword [rsp + 0x44]
add eax, dword [0x180026090]
imul ebx, dword [rcx + 0xfc]
or r9d, eax
mov eax, dword [rsp + 0x54]
xor eax, dword [0x18002610c]
or r11d, dword [0x180026098]
mov r10, qword [section..data]
and r11d, 0x105a
mov dword [rsp + 0x30], eax
mov ecx, ebx
mov qword [rsp + 0x28], r10
mov dword [rsp + 0x20], r11d
call sym.zpodb664uz4.dll_MmiiJHu18
mov dword [rsp + 0x58], eax
mov ecx, dword [rsp + 0x50]
mov edx, dword [rsp + 0x4c]
and ecx, 0x49c
mov eax, dword [rsp + 0x40]
sub edx, eax
mov eax, dword [rsp + 0x4c]
mov r8, qword [section..data]
mov r9d, dword [0x180026048]
imul r9d, dword [0x18002603c]
movsxd rdx, edx
add eax, dword [r8 + 0x110]
imul r8d, eax, 0x912
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov eax, dword [rsp + 0x58]
and eax, dword [0x180026118]
mov ecx, dword [rsp + 0x48]
sub dword [0x18002605c], eax
and ecx, 0x5f0
mov eax, dword [rsp + 0x40]
imul eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x54]
or eax, dword [0x1800260b4]
mov ecx, dword [0x18002603c]
sub ecx, eax
mov eax, dword [rsp + 0x54]
add eax, ecx
mov dword [0x18002603c], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x44]
add eax, 0x10e0
and ecx, eax
mov eax, dword [rsp + 0x44]
imul eax, ecx
mov ecx, dword [0x1800260e0]
add ecx, 0x150d
mov dword [rsp + 0x44], eax
mov rax, qword [section..data]
add dword [rax], ecx
mov ecx, dword [rsp + 0x48]
mov eax, dword [rsp + 0x5c]
or ecx, eax
or ecx, dword [0x180026058]
mov dword [rsp + 0x48], ecx
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x50]
sub ecx, eax
movsxd rcx, ecx
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov eax, dword [0x1800260fc]
add rsp, 0x60
pop rbx
ret