Function at 0x180048580
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
mov qword [rsp + 0x18], r13
push rbp
mov rbp, rsp
sub rsp, 0x60
mov dword [rbp - 0x20], 0x480d
xor ebx, ebx
mov dword [rbp - 0x1c], 0x3376
mov edx, 0x3f84
mov dword [rbp - 8], edx
mov dword [rbp - 0x10], ebx
mov dword [rbp - 0xc], 0x39e8
lea edi, [rbx + 1]
mov dword [rbp - 0x14], 0x3367
mov dword [rbp - 4], ebx
mov dword [rbp - 0x18], 0x3155
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x14]
xor ecx, 0x73cf
cmp eax, ecx
jg 0x18004869c
add dword [rbp - 0x20], 0xfffff54b
add dword [rbp - 4], edx
add dword [rbp - 0x20], 0xfffffdc0
mov eax, dword [rbp - 0x20]
mov dword [rbp - 0x20], eax
mov rax, qword [section..data]
mov dword [0x18011e01c], 0x57
mov dword [rax + 0x20], ebx
mov rax, qword [section..data]
mov dword [rax + 0x30], ebx
mov rax, qword [section..data]
mov qword [0x18011e048], rbx
mov dword [rax + 0x40], ebx
mov rax, qword [section..data]
mov dword [rax + 0x44], edi
mov rax, qword [section..data]
mov dword [0x18011e058], edi
mov dword [0x18011e06c], 0x14
mov dword [0x18011e078], 0x62
mov dword [rax + 0x6c], 0xd
mov rax, qword [section..data]
mov dword [rax + 0x74], edi
mov rax, qword [section..data]
mov dword [0x18011e0a4], ebx
mov dword [0x18011e0c0], 0x3a
mov dword [0x18011e0cc], 0x38
mov dword [0x18011e0d0], edi
mov dword [0x18011e0d8], edi
mov dword [0x18011e100], edi
mov dword [rax + 0xf4], edi
add dword [rbp - 0x18], 0x117c
lea r13, [0x18011e010]
mov rax, qword [section..data]
mov ecx, dword [rax + 0x30]
add ecx, 0x174294
or dword [0x18011e050], ecx
xor dword [rbp - 0x18], 0x7711
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x1c]
add ecx, 0x316
cmp eax, ecx
jg 0x180048923
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x1c]
add ecx, 0xfffffdb9
cmp eax, ecx
jge 0x1800487a1
xor dword [rbp - 0x20], 0x7188
mov ecx, dword [rbp - 0xc]
mov edx, dword [rbp - 0x10]
sub ecx, 0x428
mov r8d, dword [rbp - 0x14]
xor edx, 0x3367
mov r9d, dword [rbp - 0x18]
add r8d, 0x9d6
mov eax, dword [rbp - 0xc]
add r9d, 0x80a
xor eax, 0x7b39
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], eax
mov dword [0x18011e0d4], 0x16d5
call fcn.180048eb8
mov dword [rbp - 8], eax
mov ecx, dword [rbp - 0x10]
mov edx, dword [rbp - 4]
xor ecx, 0x3376
mov r8d, dword [rbp - 0x18]
xor edx, 0x12f5
mov r10d, dword [rbp - 0x1c]
sub r8d, 0x46b
mov r9d, dword [rbp - 0x18]
add r10d, 0x7a2
mov eax, dword [rbp - 4]
xor r9d, 0x898
xor eax, 0x2dc
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r9d
mov r9, r13
mov dword [rsp + 0x20], r10d
call sym.rnlvgrl250sn3.dll_IibN95
mov dword [rbp - 0x14], eax
xor dword [rbp - 8], 0x7982
jmp 0x180048923
mov rax, qword [section..data]
mov ecx, dword [rax + 0xf0]
sub ecx, dword [rax + 0x40]
mov eax, dword [rbp - 0x20]
cmp eax, ecx
jne 0x18004889e
mov rax, qword [section..data]
mov ecx, dword [rax + 0x38]
xor ecx, dword [0x18011e050]
cmp dword [0x18011e01c], ecx
jb 0x18004889e
mov ecx, dword [rbp - 0x10]
sub ecx, dword [0x18011e018]
mov eax, dword [rbp - 0x20]
cmp eax, ecx
jne 0x180048890
mov ecx, dword [rbp - 4]
mov eax, dword [rbp - 0x10]
xor ecx, eax
xor dword [0x18011e078], ecx
mov eax, dword [0x18011e0d0]
mov ecx, dword [rbp - 0x20]
add eax, 0xffffc2a8
add ecx, eax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [rbp - 0x1c]
mov rax, qword [section..data]
add ecx, ecx
mov edx, dword [rax + 0xb0]
and edx, ecx
or dword [rbp - 0x14], edx
mov rax, qword [section..data]
mov ecx, dword [rax + 0x34]
sub ecx, 0x3376
call qword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
mov eax, dword [rbp - 0xc]
or eax, dword [0x18011e058]
or dword [rbp - 0x20], eax
mov eax, dword [0x18011e0c0]
mov ecx, dword [rbp - 0x14]
and rcx, rax
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 8]
or ecx, eax
imul eax, dword [0x18011e0cc], 0x39e8
mov dword [rbp - 0x20], ecx
mov ecx, dword [rbp - 0x1c]
or ecx, eax
mov eax, dword [rbp - 0x18]
imul eax, dword [0x18011e050]
or dword [0x18011e064], ecx
imul eax, eax, 0x3b18
add dword [rbp - 0x10], eax
jmp 0x18004889e
mov eax, dword [rbp - 0xc]
or eax, 0x3d3d
xor dword [0x18011e078], eax
mov eax, dword [0x18011e054]
imul eax, dword [0x18011e04c]
mov edx, dword [rbp - 0x18]
imul edx, dword [0x18011e0d0]
imul ecx, eax, 0x33ca
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov ecx, dword [0x18011e100]
xor ecx, 0x3367
add ecx, dword [0x18011e050]
xor dword [rbp - 0x14], ecx
mov eax, dword [rbp - 0xc]
mov edx, dword [rbp - 0x20]
mov rcx, qword [section..data]
add edx, 0x35c0
imul eax, dword [rcx + 0x48]
mov ecx, eax
mov eax, dword [rbp - 0x14]
or rcx, 0x429a
mov r8, qword [0x18011e0d0]
and r8, rax
and r8d, 0x3155
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov eax, dword [rbp - 0x20]
mov ecx, dword [0x18011e0c0]
xor eax, ecx
or ecx, eax
mov dword [0x18011e0c0], ecx
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 8]
xor ecx, 0x7b39
cmp eax, ecx
jg 0x180048c56
add dword [rbp - 0x1c], 0x24a
mov rax, qword [section..data]
mov ecx, dword [0x18011e0c0]
cmp dword [rax + 0x5c], ecx
jbe 0x18004895d
mov eax, dword [rax + 0x3c]
xor eax, ecx
add dword [0x18011e100], eax
jmp 0x180048967
xor dword [0x18011e074], 0xc7f4d
add dword [rbp - 0x1c], 0xfffffe0a
lea rax, [0x180058530]
add dword [rbp - 0x20], 0xfffff80a
mov r10, rbx
xor dword [rbp - 0x10], 0x3b18
mov qword [0x18011e0a8], rax
add dword [rbp - 0xc], 0x10a8
mov ecx, dword [0x18011e050]
mov rdx, qword [section..data]
lea eax, [rcx - 0x1f5fde]
add dword [rdx + 0x40], eax
mov r8, qword [section..data]
mov rax, qword [0x18011e0a8]
mov ecx, dword [r8 + 0xc0]
mov r9d, dword [rax + r10]
add r10, 4
mov eax, dword [0x18011e0d8]
dec eax
add ecx, eax
mov rax, qword [0x18011e0b0]
mov dword [0x18011e0d8], ecx
imul r9d, dword [r8 + 0x64]
movsxd rcx, dword [r8 + 0x70]
mov edx, r9d
shr edx, 0x18
mov byte [rcx + rax], dl
mov edx, r9d
mov rax, qword [section..data]
shr edx, 0x10
add dword [rax + 0x70], edi
mov rax, qword [section..data]
movsxd rcx, dword [rax + 0x70]
mov rax, qword [0x18011e0b0]
mov byte [rcx + rax], dl
mov edx, r9d
mov rax, qword [section..data]
shr edx, 8
add dword [rax + 0x70], edi
mov rax, qword [section..data]
movsxd rcx, dword [rax + 0x70]
mov rax, qword [rax + 0xa0]
mov byte [rcx + rax], dl
mov rax, qword [section..data]
add dword [rax + 0x70], edi
movsxd rdx, dword [0x18011e080]
mov rax, qword [section..data]
mov rcx, qword [rax + 0xa0]
mov byte [rdx + rcx], r9b
add dword [0x18011e080], edi
mov r8, qword [section..data]
mov ecx, dword [0x18011e01c]
mov edx, dword [0x18011e078]
add edx, 0xffd90b1c
mov eax, dword [r8 + 0x6c]
sub eax, 0xc
imul ecx, eax
mov eax, dword [0x18011e06c]
add eax, 0xffffffed
mov dword [0x18011e01c], ecx
mov ecx, dword [0x18011e050]
imul ecx, eax
mov dword [0x18011e050], ecx
add edx, dword [r8 + 0x44]
mov eax, dword [r8 + 0x6c]
imul eax, edx
mov dword [r8 + 0x6c], eax
mov ecx, dword [0x18011e050]
mov eax, ecx
mov rdx, qword [section..data]
sub eax, dword [rdx + 0x3c]
xor eax, 0x280e64
add ecx, eax
mov eax, ecx
mov dword [0x18011e050], ecx
xor eax, 0x1f5fde
sub dword [0x18011e04c], eax
cmp r10, 0xaf68
jl 0x1800489a1
mov ecx, dword [rbp - 0x1c]
mov rdx, r13
mov r8d, dword [rbp - 0xc]
add ecx, 0xf07
mov r9d, dword [rbp - 0x10]
sub r8d, 0xb22
mov eax, dword [rbp - 8]
xor r9d, 0x7315
add eax, 0x7f6
mov dword [rsp + 0x20], eax
call fcn.18004073c
mov dword [rbp - 0x10], eax
mov eax, dword [0x18011e0cc]
cmp dword [0x18011e0c0], eax
mov rax, qword [section..data]
jne 0x180048b45
mov ecx, dword [rax + 0xc8]
sub dword [0x18011e06c], ecx
jmp 0x180048b5c
mov ecx, dword [rax + 0xb8]
add ecx, dword [rax + 0x10]
add ecx, dword [rax]
xor ecx, 0x6d1026ab
mov dword [0x18011e108], ecx
xor dword [rbp - 0x18], 0x18b1
mov eax, dword [0x18011e054]
mov rcx, qword [0x18011e0b8]
add eax, 0xffd90b7d
add dword [0x18011e048], eax
mov eax, dword [0x18011e0d8]
xor eax, 0x28e10b
add dword [0x18011e01c], eax
mov eax, dword [0x18011e088]
xor dword [rcx + rbx], eax
mov ecx, 0x1bb72f
mov rdx, qword [section..data]
add rbx, 4
mov eax, dword [rdx + 0xb4]
add dword [0x18011e088], eax
mov eax, edi
sub eax, dword [0x18011e0d0]
add dword [0x18011e100], eax
mov eax, dword [0x18011e054]
add eax, 0xffd90b7d
add dword [0x18011e0c0], eax
mov eax, dword [rdx + 0x48]
sub eax, dword [rdx + 0xbc]
sub eax, 0x4fa67
add dword [rdx + 0x5c], eax
mov rax, qword [section..data]
sub ecx, dword [rax + 0x48]
add dword [0x18011e100], ecx
cmp rbx, 0xdb3d0
jl 0x180048b63
mov rax, qword [0x18011e0b8]
lea r8, [0x180116900]
mov qword [0x18011e090], rax
add dword [rbp - 0x1c], 0x16c6
add dword [rbp - 0x20], 0xffffead7
add dword [rbp - 0x1c], 0xffffeb30
mov rax, qword [section..data]
mov rdx, qword [0x18011e0e8]
mov ecx, dword [0x18011e108]
call qword [rax + 0x80]
mov rcx, qword [section..data]
mov dword [rcx + 0xc4], eax
add dword [rbp - 4], 0x889
mov rax, qword [section..data]
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov r13, qword [r11 + 0x20]
mov eax, dword [rax + 0xc4]
mov rsp, r11
pop rbp
ret