Function at 0x1400029b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov r15d, dword [rsp + 0x70]
lea ebp, [r9 + 0xa8b]
mov esi, dword [rsp + 0x80]
lea edi, [r9 + 0x739]
mov rbx, qword [rsp + 0x78]
mov eax, ebp
mov r14d, ecx
mov edx, r9d
xor eax, 0x72d
xor edx, 0xd8e
add r15d, 0x37c
add esi, 0x87c
xor r14d, 0x1e18
cmp edx, eax
jge 0x140002bcd
xor edx, 0x17a8
cmp edi, edx
jge 0x140002baa
xor r10d, r10d
mov rax, qword [rbx + 0x90]
mov edx, dword [rbx + 0x70]
mov r8, qword [section..data]
mov r9d, dword [r10 + rax]
add r10, 4
mov eax, dword [0x14079204c]
mov ecx, dword [r8 + 0xc8]
imul r9d, dword [0x140792044]
add ecx, 0xfde0f
add edx, ecx
imul eax, edx
mov dword [0x14079204c], eax
mov eax, dword [r8 + 0xec]
sub eax, dword [rbx + 0x68]
add eax, 0x14674f
xor dword [r8 + 0xc8], eax
mov eax, dword [rbx + 0xc4]
mov ecx, dword [rbx + 0x54]
inc ecx
imul eax, ecx
mov dword [rbx + 0xc4], eax
mov eax, dword [rbx + 0x38]
xor eax, 0xcc1bb
sub dword [0x1407920c4], eax
mov rax, qword [section..data]
movsxd rcx, dword [rax + 0x74]
mov rax, qword [rbx + 0xd8]
mov byte [rcx + rax], r9b
mov rax, qword [section..data]
inc dword [rax + 0x74]
mov eax, dword [0x140792064]
xor dword [0x1407920d8], eax
mov eax, dword [rbx + 0xa0]
mov edx, dword [rbx + 0x70]
mov ecx, dword [rbx + 4]
add ecx, 0xfde10
add edx, ecx
imul eax, edx
mov dword [rbx + 0xa0], eax
mov eax, dword [rbx + 0x110]
sub eax, 0xa
xor dword [0x140792080], eax
mov eax, dword [0x1407920a8]
mov ecx, dword [rbx + 0x30]
mov edx, dword [rbx + 0xc8]
add ecx, 0xfffe9e11
add edx, ecx
imul eax, edx
mov dword [0x1407920a8], eax
mov eax, dword [rbx + 0x154]
mov ecx, dword [rbx + 0xcc]
sub ecx, dword [0x140792160]
add ecx, 0x10
imul eax, ecx
mov dword [rbx + 0x154], eax
mov eax, dword [0x1407920c4]
sub dword [0x1407920d4], eax
mov rax, qword [section..data]
mov ecx, dword [rax + 0x110]
xor ecx, dword [rbx + 0xec]
mov eax, dword [rbx + 0x3c]
sub ecx, 0xa
imul eax, ecx
mov dword [rbx + 0x3c], eax
mov eax, 0x10e2c2
sub eax, dword [rbx + 0x1c]
add dword [0x140792124], eax
and dword [rbx + 0x154], 0
cmp r10, 0x4b3ea0
jl 0x140002a27
sub edi, 0x3d9
cmp dword [rbx + 0xa0], 0x155b2
jbe 0x140002bcd
mov rcx, qword [section..data]
mov eax, dword [rcx + 0xc8]
add eax, 0xd5bb5
mov dword [rcx + 0x34], eax
jmp 0x140002bcd
mov eax, dword [rbx + 0x98]
mov edx, edi
sub eax, dword [0x140792164]
mov ecx, edi
imul r8d, eax, 0xfda
sub ecx, esi
imul edx, r14d
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [r14 + 0x1819]
cmp r15d, eax
jl 0x140002c52
mov rax, qword [section..data]
mov edx, dword [0x14079214c]
sub edx, dword [rax + 0x48]
xor edx, dword [rbx + 0x34]
xor edx, 0xd51b8
mov dword [rbx + 0x34], edx
mov rax, qword [section..data]
mov ecx, dword [rax + 4]
mov eax, dword [0x14079214c]
add ecx, edx
add eax, 0x1b4
add ecx, eax
cmp dword [rbx + 0x13c], 0x171a6
mov dword [rbx + 0x34], ecx
jae 0x140002c34
mov rcx, qword [section..data]
mov eax, 0xfffff3bd
sub eax, dword [0x14079206c]
add dword [rcx + 0x34], eax
jmp 0x140002c3b
xor dword [rbx + 0x40], 0x21217
mov rax, qword [section..data]
lea rcx, [0x1400114c0]
mov qword [rax + 0x90], rcx
jmp 0x140002cd0
mov eax, esi
sub eax, dword [rbx + 0xa8]
or eax, 0x1672
cmp dword [rbx + 0x124], eax
jbe 0x140002cd0
mov eax, dword [rbx + 0xc4]
inc eax
imul eax, esi
cmp dword [0x14079212c], eax
jb 0x140002cd0
mov eax, dword [rbx + 0xec]
imul eax, r15d
sub ebp, eax
mov rax, qword [section..data]
mov r8d, ebp
xor r8d, 0x1056
mov ecx, dword [rax + 4]
mov r10d, ecx
mov eax, esi
sub r10d, esi
or r10, rax
imul r8d, ecx
mov ecx, dword [0x140792040]
imul eax, esi, 0x1ab2
xor rcx, 0x19a8
mov qword [rsp + 0x20], r10
movsxd r9, eax
lea eax, [rdi + rbp]
movsxd rdx, eax
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov rbx, qword [rsp + 0x50]
lea eax, [r15 - 0x53e]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x30
pop r15
pop r14
pop rdi
ret