Function at 0x1400187f0
Capabilities:
Connect pipe
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov esi, edx
lea r14d, [rdx + 0x421]
xor esi, 0x9b1
lea r8d, [rdx - 0x4f2]
mov r13, rcx
mov dword [rsp + 0x78], r8d
mov ecx, dword [rsp + 0x90]
lea ebp, [rdx + 0x64b]
lea r15d, [rdx + 0x9e0]
lea eax, [rsi - 0x176]
lea r9d, [rdx - 0x151]
lea r12d, [rcx - 0x51b]
cmp r14d, eax
jge 0x140018ab9
mov eax, r12d
add ecx, 0xfffff2d7
xor eax, 0x274
cmp ecx, eax
jge 0x140018a06
mov eax, r15d
xor eax, 0xfc
cmp ebp, eax
jge 0x1400189c6
add esi, 0xed
xor r10d, r10d
mov rcx, qword [section..data]
mov eax, dword [rcx + 0x12c]
xor eax, dword [r13 + 0x80]
sub eax, 0xf272a
or dword [rcx + 0x18], eax
movsxd rcx, dword [r13 + 0x54]
mov eax, dword [r13 + 0xa0]
sub eax, dword [0x1400350a8]
add eax, 0x6bc78
add dword [r13 + 0xec], eax
mov rax, qword [r13 + 0x78]
mov r9d, dword [r10 + rax]
add r10, 4
imul r9d, dword [0x14003505c]
mov rax, qword [r13 + 0xb0]
mov edx, r9d
shr edx, 0x18
mov byte [rcx + rax], dl
mov edx, r9d
inc dword [r13 + 0x54]
mov eax, dword [0x140035110]
mov r8, qword [section..data]
shr edx, 0x10
mov ecx, dword [r8 + 0xb8]
sub ecx, dword [r13 + 0x100]
sub ecx, 0x16b771
imul eax, ecx
mov dword [0x140035110], eax
movsxd rcx, dword [r8 + 0x54]
mov rax, qword [0x1400350c0]
mov byte [rcx + rax], dl
mov edx, r9d
mov rax, qword [section..data]
shr edx, 8
inc dword [rax + 0x54]
mov rax, qword [section..data]
mov ecx, dword [rax + 0x100]
mov eax, 0x160e1c
add dword [r13 + 0x44], ecx
sub eax, dword [r13 + 0x108]
add dword [0x1400350b8], eax
movsxd rcx, dword [0x140035064]
mov rax, qword [0x1400350c0]
mov byte [rcx + rax], dl
mov eax, dword [0x140035064]
inc eax
mov dword [0x140035064], eax
movsxd rcx, eax
mov rax, qword [r13 + 0xb0]
mov byte [rcx + rax], r9b
inc dword [0x140035064]
mov rdx, qword [section..data]
mov ecx, dword [0x1400350b8]
mov eax, dword [rdx + 0x34]
inc eax
imul ecx, eax
mov dword [0x1400350b8], ecx
mov eax, dword [rdx + 0x34]
sub eax, dword [rdx + 0x18]
or dword [r13 + 0xd8], eax
cmp r10, 0x5d0c
jl 0x14001888a
jmp 0x140018a01
mov eax, dword [0x14003504c]
or eax, r14d
cmp ebp, eax
jbe 0x140018a06
mov rax, qword [section..data]
movsxd rcx, r9d
or rcx, 0xd29
mov edx, dword [rax + 0x9c]
mov eax, ebp
and rdx, rax
mov eax, r15d
or rdx, rax
movsxd rax, r12d
and rcx, rax
call qword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov r8d, dword [rsp + 0x78]
lea eax, [rbp + 0x1ec]
cmp r12d, eax
jge 0x140018a46
mov eax, r15d
lea r9d, [r8 + 0xa7a]
xor esi, 0x60
lea edx, [r15 - 0x82]
xor r14d, 0x743
mov dword [rsp + 0x28], esi
xor eax, 0x82
mov r8d, r14d
mov rcx, r13
mov dword [rsp + 0x20], eax
call section..text
jmp 0x140018ab9
mov rax, qword [section..data]
mov r11d, dword [r13 + 0x94]
mov ebx, dword [r13 + 0x38]
or r11d, r8d
mov r8d, dword [0x140035040]
mov r9d, dword [rax + 0x9c]
add r8d, 0xfffff2bd
mov eax, dword [0x140035054]
mov edi, dword [0x1400350e4]
xor r9, rax
add ebx, dword [r13 + 0x10]
and edi, esi
imul edx, dword [0x140035058], 0xd84
add ebx, r12d
mov eax, esi
or r8, rax
movsxd r10, ebp
movsxd rax, r15d
mov dword [rsp + 0x30], edi
movsxd rcx, r14d
or rcx, rax
mov dword [rsp + 0x28], ebx
xor rcx, r10
mov dword [rsp + 0x20], r11d
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
lea r11, [rsp + 0x40]
xor ebp, 0x581
mov rbx, qword [r11 + 0x30]
mov eax, ebp
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret