Function at 0x140002990
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov r15d, dword [rsp + 0x70]
lea esi, [r9 + 0x98]
mov edi, dword [rsp + 0x80]
lea r14d, [r9 + 0xdc2]
mov rbx, qword [rsp + 0x78]
mov eax, esi
mov ebp, ecx
mov edx, r9d
xor eax, 0x245
xor edx, 0xb8
add r15d, 0xfffff593
add edi, 0xffffe696
xor ebp, 0x1949
cmp edx, eax
jge 0x140002ba7
xor edx, 0x1f34
cmp r14d, edx
je 0x140002b83
xor r10d, r10d
mov rax, qword [rbx + 0x90]
mov edx, dword [rbx + 0x70]
mov r8, qword [section..data]
mov r9d, dword [r10 + rax]
add r10, 4
mov eax, dword [0x14003b04c]
mov ecx, dword [r8 + 0xc8]
imul r9d, dword [0x14003b044]
add ecx, 0xfde0f
add edx, ecx
imul eax, edx
mov dword [0x14003b04c], eax
mov eax, dword [r8 + 0xec]
sub eax, dword [rbx + 0x68]
add eax, 0x14674f
xor dword [r8 + 0xc8], eax
mov eax, dword [rbx + 0xc4]
mov ecx, dword [rbx + 0x54]
inc ecx
imul eax, ecx
mov dword [rbx + 0xc4], eax
mov eax, dword [rbx + 0x38]
xor eax, 0xcc1bb
sub dword [0x14003b0c4], eax
mov rax, qword [section..data]
movsxd rcx, dword [rax + 0x74]
mov rax, qword [rbx + 0xd8]
mov byte [rcx + rax], r9b
mov rax, qword [section..data]
inc dword [rax + 0x74]
mov eax, dword [0x14003b064]
xor dword [0x14003b0d8], eax
mov eax, dword [rbx + 0xa0]
mov edx, dword [rbx + 0x70]
mov ecx, dword [rbx + 4]
add ecx, 0xfde10
add edx, ecx
imul eax, edx
mov dword [rbx + 0xa0], eax
mov eax, dword [rbx + 0x110]
sub eax, 0xa
xor dword [0x14003b080], eax
mov eax, dword [0x14003b0a8]
mov ecx, dword [rbx + 0x30]
mov edx, dword [rbx + 0xc8]
add ecx, 0xfffe9e11
add edx, ecx
imul eax, edx
mov dword [0x14003b0a8], eax
mov eax, dword [rbx + 0x154]
mov ecx, dword [rbx + 0xcc]
sub ecx, dword [0x14003b160]
add ecx, 0x10
imul eax, ecx
mov dword [rbx + 0x154], eax
mov eax, dword [0x14003b0c4]
sub dword [0x14003b0d4], eax
mov rax, qword [section..data]
mov ecx, dword [rax + 0x110]
xor ecx, dword [rbx + 0xec]
mov eax, dword [rbx + 0x3c]
sub ecx, 0xa
imul eax, ecx
mov dword [rbx + 0x3c], eax
mov eax, 0x10e2c2
sub eax, dword [rbx + 0x1c]
add dword [0x14003b124], eax
and dword [rbx + 0x154], 0
cmp r10, 0xc1b0
jl 0x140002a06
cmp dword [rbx + 0xa0], 0x155b2
jbe 0x140002ba7
mov rcx, qword [section..data]
mov eax, dword [rcx + 0xc8]
add eax, 0xd5bb5
mov dword [rcx + 0x34], eax
jmp 0x140002ba7
mov eax, dword [rbx + 0x98]
mov edx, r14d
sub eax, dword [0x14003b164]
mov ecx, r14d
imul r8d, eax, 0x10ee
sub ecx, edi
imul edx, ebp
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [rbp + 0x24c]
cmp r15d, eax
jl 0x140002c2b
mov rax, qword [section..data]
mov edx, dword [0x14003b14c]
sub edx, dword [rax + 0x48]
xor edx, dword [rbx + 0x34]
xor edx, 0xd51b8
mov dword [rbx + 0x34], edx
mov rax, qword [section..data]
mov ecx, dword [rax + 4]
mov eax, dword [0x14003b14c]
add ecx, edx
add eax, 0x1b4
add ecx, eax
cmp dword [rbx + 0x13c], 0x171a6
mov dword [rbx + 0x34], ecx
jae 0x140002c0d
mov rcx, qword [section..data]
mov eax, 0xfffff3bd
sub eax, dword [0x14003b06c]
add dword [rcx + 0x34], eax
jmp 0x140002c14
xor dword [rbx + 0x40], 0x21217
mov rax, qword [section..data]
lea rcx, [0x14001b330]
mov qword [rax + 0x90], rcx
jmp 0x140002ca3
mov eax, edi
sub eax, dword [rbx + 0xa8]
or eax, 0x1672
cmp dword [rbx + 0x124], eax
jbe 0x140002ca3
mov eax, dword [rbx + 0xc4]
inc eax
imul eax, edi
cmp dword [0x14003b12c], eax
jb 0x140002ca3
mov eax, dword [rbx + 0xec]
imul eax, r15d
sub esi, eax
mov rax, qword [section..data]
mov r8d, esi
xor r8d, 0xd13
mov ecx, dword [rax + 4]
mov r10d, ecx
mov eax, edi
sub r10d, edi
or r10, rax
imul r8d, ecx
mov ecx, dword [0x14003b040]
imul eax, edi, 0x1056
mov qword [rsp + 0x20], r10
movsxd r9, eax
lea eax, [r14 + rsi]
movsxd rdx, eax
call qword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov rbx, qword [rsp + 0x50]
lea eax, [r15 + 0x27d]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x30
pop r15
pop r14
pop rdi
ret