Function at 0x18000ec80
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x60
mov rax, qword [section..data]
xor ebx, ebx
mov dword [rsp + 0x44], 0x5f0
mov dword [rsp + 0x5c], 0xc87
mov dword [rsp + 0x48], ebx
mov dword [rax], ebx
mov rax, qword [section..data]
mov dword [rsp + 0x54], 0x644
mov dword [0x180026024], 1
mov dword [rsp + 0x40], 0x165c
mov dword [rax + 0x28], 1
mov rax, qword [section..data]
mov dword [0x18002603c], 0x47
mov dword [0x180026044], ebx
mov dword [0x180026058], ebx
mov dword [0x180026060], 0x56
mov dword [0x180026070], 0x14
mov dword [rax + 0x74], ebx
mov rax, qword [section..data]
mov dword [0x1800260f0], 1
mov dword [rsp + 0x50], 0x177b
mov dword [0x180026098], ebx
mov qword [0x1800260a4], 1
mov dword [0x1800260ac], ebx
mov dword [0x1800260b8], 1
mov dword [0x1800260ec], 0xd
mov dword [0x180026110], 1
mov dword [0x180026118], 3
mov dword [rax + 0x110], 0x3b
cmp dword [0x1800260f0], 0x83da
mov rcx, qword [section..data]
mov dword [rsp + 0x58], 0x5f0
mov dword [rsp + 0x4c], 0x177b
ja 0x18000ed9d
mov eax, dword [0x180026024]
add eax, 0xf4263
add dword [rcx + 0x28], eax
mov rcx, qword [section..data]
jmp 0x18000edae
mov eax, 0xfffe0070
sub eax, dword [rcx + 0xdc]
add dword [0x180026038], eax
mov edx, dword [rsp + 0x48]
mov r8d, dword [rsp + 0x54]
add edx, 0x177b
mov r9d, dword [rsp + 0x5c]
add r8d, 0xec9
add dword [rcx + 0x108], 0x191a41
add r9d, 0x2e7
mov ecx, dword [rsp + 0x44]
mov eax, dword [rsp + 0x58]
add ecx, 0x618
add eax, 0xf1d
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
lea rcx, [0x180026010]
call fcn.18000d8e0
mov r8d, dword [0x180026054]
cmp r8d, dword [0x18002606c]
mov dword [rsp + 0x48], eax
ja 0x18000ee85
nop word [rax + rax]
mov rdx, qword [section..data]
mov eax, r8d
mov ecx, dword [0x1800260a4]
xor ecx, dword [0x180026024]
imul eax, r8d
sub ecx, 0x1cd1bc
inc r8d
add dword [0x1800260f8], eax
mov eax, dword [0x1800260ec]
add eax, 0xfffce0b0
xor dword [0x180026058], eax
mov eax, dword [rdx + 0x88]
imul eax, ecx
mov dword [rdx + 0x88], eax
mov ecx, dword [0x180026120]
mov eax, ecx
xor eax, 0x3b
add ecx, eax
cmp r8d, dword [0x18002606c]
mov dword [0x180026120], ecx
jbe 0x18000ee20
mov ecx, dword [rsp + 0x58]
lea rdx, [0x180026010]
mov r8d, dword [rsp + 0x5c]
add ecx, 0x54
mov r9d, dword [rsp + 0x4c]
xor r8d, 0x1dfb
mov r11d, dword [rsp + 0x58]
xor r9d, 0x67f
mov r10d, dword [rsp + 0x54]
add r11d, 0x123c
mov eax, dword [rsp + 0x54]
xor r10d, 0xf56
add eax, 0xa16
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
call fcn.180003930
mov dword [rsp + 0x4c], eax
add dword [rsp + 0x44], 0x97e
xor dword [rsp + 0x48], 0x758
mov rax, qword [section..data]
mov ecx, dword [0x180026010]
sub ecx, dword [rax + 0xa8]
sub ecx, 0x111371e3
xor dword [0x180026078], ecx
mov ecx, dword [rsp + 0x44]
mov edx, dword [rsp + 0x44]
add ecx, 0x4c0
mov r8d, dword [rsp + 0x50]
sub edx, 0xad2
mov r9d, dword [rsp + 0x54]
sub r8d, 0x69b
mov rax, qword [section..data]
add r9d, 0xc58
mov qword [rsp + 0x20], rax
call fcn.18000f720
mov dword [rsp + 0x44], eax
mov edx, 0x1a01
add dword [rsp + 0x40], 0xfffff2b6
xor dword [rsp + 0x50], 0x721
add dword [rsp + 0x48], 0xfffffb20
mov eax, dword [0x180026118]
cmp dword [0x180026084], eax
mov eax, 0x14c59b
mov ecx, dword [0x180026078]
cmovne ecx, edx
mov dword [0x180026078], ecx
xor dword [rsp + 0x40], 0x1b8e
mov edx, dword [0x180026078]
mov ecx, dword [0x180026098]
add edx, 0xc4ec4feb
xor ecx, dword [0x180026084]
sub eax, ecx
mov ecx, dword [rsp + 0x50]
add edx, eax
xor ecx, 0x876
lea rax, [0x1800126b0]
mov dword [0x180026078], edx
mov qword [0x1800260c8], rax
mov eax, dword [rsp + 0x5c]
cmp eax, ecx
jg 0x18000f3fa
mov ecx, dword [rsp + 0x50]
mov eax, dword [rsp + 0x48]
add ecx, 0x602
cmp eax, ecx
jge 0x18000f207
mov ecx, dword [0x180026098]
mov r10, rbx
mov rdx, qword [section..data]
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [0x1800260b8]
add eax, 0xffeb1f3d
add ecx, eax
mov rax, qword [0x1800260c8]
xor dword [0x1800260f0], ecx
mov ecx, dword [rdx + 0x60]
xor ecx, dword [0x180026110]
mov r9d, dword [r10 + rax]
sub ecx, 0x18afee8
mov eax, dword [0x180026070]
add r10, 4
imul eax, ecx
mov dword [0x180026070], eax
mov ecx, dword [rdx + 0x88]
mov eax, dword [0x1800260ec]
add eax, 0xffe7ffee
add ecx, eax
xor dword [rdx + 0x110], ecx
movsxd rdx, dword [0x18002607c]
mov eax, dword [0x1800260b8]
imul r9d, dword [0x180026078]
add eax, 0xfff77343
mov ecx, dword [0x1800260f0]
add ecx, eax
mov rax, qword [section..data]
mov dword [0x1800260b8], ecx
mov r8d, r9d
mov rcx, qword [rax + 0xc0]
shr r8d, 0x10
mov byte [rdx + rcx], r8b
mov r8d, r9d
mov eax, dword [0x18002607c]
inc eax
shr r8d, 8
mov dword [0x18002607c], eax
movsxd rdx, eax
mov rax, qword [section..data]
mov rcx, qword [rax + 0xc0]
mov byte [rdx + rcx], r8b
mov eax, dword [0x18002607c]
inc eax
mov dword [0x18002607c], eax
movsxd rcx, eax
mov rax, qword [0x1800260d0]
mov byte [rcx + rax], r9b
inc dword [0x18002607c]
mov rdx, qword [section..data]
mov ecx, dword [0x180026098]
mov eax, dword [rdx + 0x14]
add eax, dword [0x180026038]
xor eax, 0xbed57
or dword [0x180026084], eax
mov eax, 0x9d7e7
sub eax, dword [0x18002603c]
add dword [0x180026024], eax
mov eax, 0x14e0c2
sub eax, ecx
add dword [0x1800260ac], eax
cmp r10, 0x33c0
jl 0x18000f010
xor dword [rsp + 0x40], 0x14d8
add dword [rsp + 0x4c], 0xfffff3bc
add dword [rsp + 0x58], 0x97e
mov rdx, qword [section..data]
mov ecx, dword [0x180026038]
mov eax, dword [0x180026024]
add eax, 0xfff412a9
add ecx, eax
or dword [rdx + 0x98], ecx
mov eax, dword [0x18002608c]
mov rcx, qword [0x1800260d8]
xor dword [rcx + rbx], eax
add rbx, 4
mov rdx, qword [section..data]
mov eax, dword [0x180026084]
sub dword [0x1800260f0], eax
mov eax, dword [0x180026010]
mov ecx, dword [rdx + 0x74]
add eax, 0xffcb783f
add ecx, dword [0x180026118]
add ecx, eax
mov dword [0x180026010], ecx
mov eax, dword [rdx + 0xe4]
add dword [0x18002608c], eax
cmp rbx, 0x384
jl 0x18000f161
add dword [rsp + 0x40], 0xffffffac
mov rax, qword [0x1800260d8]
mov qword [0x1800260c0], rax
xor dword [rsp + 0x40], 0x9c6
add dword [rsp + 0x44], 0x141b
call qword [0x1800260c0]
mov dword [0x1800260fc], eax
add rsp, 0x60
pop rbx
ret
mov eax, dword [0x180026010]
or eax, 0x129c
cmp dword [0x180026108], eax
ja 0x18000f3fa
mov ecx, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x4c]
movsxd r8, dword [rsp + 0x48]
mov eax, dword [0x180026058]
xor r8, 0x1a1d
mov r10d, dword [rsp + 0x5c]
xor rcx, rax
mov rax, qword [section..data]
add edx, dword [0x1800260ec]
imul r9d, dword [rax + 0x60], 0x49c
mov eax, dword [0x180026068]
xor r10, rax
mov qword [rsp + 0x20], r10
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov ecx, dword [rsp + 0x4c]
mov rax, qword [section..data]
sub ecx, dword [rax + 0x9c]
or dword [rsp + 0x50], ecx
mov ebx, dword [rsp + 0x58]
mov edx, dword [rsp + 0x50]
mov rcx, qword [section..data]
mov eax, dword [rcx + 0x48]
imul eax, dword [0x180026070]
sub dword [0x1800260f0], eax
mov eax, dword [0x1800260a0]
add eax, 0xfffff4a3
xor dword [0x1800260ac], eax
mov eax, dword [rsp + 0x5c]
xor edx, eax
mov r8d, dword [rsp + 0x40]
add edx, 0xab3
mov eax, dword [rsp + 0x44]
or r8d, eax
mov eax, dword [rsp + 0x54]
mov r9d, dword [rsp + 0x40]
mov r11d, dword [rsp + 0x44]
add eax, dword [0x180026090]
imul ebx, dword [rcx + 0xfc]
or r9d, eax
mov eax, dword [rsp + 0x54]
xor eax, dword [0x18002610c]
or r11d, dword [0x180026098]
mov r10, qword [section..data]
and r11d, 0xb5d
mov dword [rsp + 0x30], eax
mov ecx, ebx
mov qword [rsp + 0x28], r10
mov dword [rsp + 0x20], r11d
call sym.zpodb664uz4.dll_MmiiJHu18
mov dword [rsp + 0x58], eax
mov ecx, dword [rsp + 0x50]
mov edx, dword [rsp + 0x4c]
and ecx, 0xb5d
mov eax, dword [rsp + 0x40]
sub edx, eax
mov eax, dword [rsp + 0x4c]
mov r8, qword [section..data]
mov r9d, dword [0x180026048]
imul r9d, dword [0x18002603c]
movsxd rdx, edx
add eax, dword [r8 + 0x110]
imul r8d, eax, 0x177b
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov eax, dword [rsp + 0x58]
and eax, dword [0x180026118]
mov ecx, dword [rsp + 0x48]
sub dword [0x18002605c], eax
and ecx, 0x1a1d
mov eax, dword [rsp + 0x40]
imul eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x54]
or eax, dword [0x1800260b4]
mov ecx, dword [0x18002603c]
sub ecx, eax
mov eax, dword [rsp + 0x54]
add eax, ecx
mov dword [0x18002603c], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x44]
add eax, 0x1a1d
and ecx, eax
mov eax, dword [rsp + 0x44]
imul eax, ecx
mov ecx, dword [0x1800260e0]
add ecx, 0x1a1d
mov dword [rsp + 0x44], eax
mov rax, qword [section..data]
add dword [rax], ecx
mov ecx, dword [rsp + 0x48]
mov eax, dword [rsp + 0x5c]
or ecx, eax
or ecx, dword [0x180026058]
mov dword [rsp + 0x48], ecx
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x50]
sub ecx, eax
movsxd rcx, ecx
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov eax, dword [0x1800260fc]
add rsp, 0x60
pop rbx
ret