Function at 0x140002850
Capabilities:
Encode data using xor

Disassembly:
test r9, r9
je 0x140002bec
push rbp
push rsi
push r13
sub rsp, 0x80
mov rax, qword [0x14000b008]
xor rax, rsp
mov qword [rsp + 0x40], rax
movzx eax, byte [r9 + rdx - 1]
mov rbp, rcx
mov qword [rsp + 0x78], rbx
mov rsi, r9
mov rbx, qword [rsp + 0xc0]
mov r13, rdx
mov qword [rsp + 0x68], r12
mov r12, r9
mov qword [rsp + 0x60], r14
and r12d, 7
mov qword [rsp + 0x58], r15
mov r15d, dword [rsp + 0xc8]
mov r14d, r15d
mov qword [rsp + 0x20], rcx
not r14d
mov rcx, qword [rsp + 0xd0]
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x30], r12
mov byte [rcx], al
jne 0x1400028e1
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov edi, ecx
jmp 0x140002a51
mov r9d, r15d
mov r8, rbx
mov edx, 9
mov rcx, rbp
call fcn.140001cf0
mov edi, eax
mov r8, rbx
xor edi, r14d
mov edx, 8
mov r9d, edi
mov rcx, rbp
call fcn.140001cf0
mov r12, qword [rsp + 0x20]
mov ebp, eax
xor ebp, r15d
mov r8, rbx
mov r9d, ebp
mov edx, 7
mov rcx, r12
call fcn.140001cf0
mov r14d, eax
mov r8, rbx
xor r14d, edi
mov edx, 6
mov r9d, r14d
mov rcx, r12
call fcn.140001cf0
mov edi, eax
mov r8, rbx
xor edi, ebp
mov edx, 5
mov r9d, edi
mov rcx, r12
call fcn.140001cf0
mov ebp, eax
mov r8, rbx
xor ebp, r14d
mov edx, 4
mov r9d, ebp
mov rcx, r12
call fcn.140001cf0
mov r14d, eax
mov r8, rbx
xor r14d, edi
mov edx, 3
mov r9d, r14d
mov rcx, r12
call fcn.140001cf0
mov r15d, eax
mov r8, rbx
xor r15d, ebp
mov edx, 2
mov r9d, r15d
mov rcx, r12
call fcn.140001cf0
mov edi, eax
mov r8, rbx
xor edi, r14d
mov edx, 1
mov r9d, edi
mov rcx, r12
call fcn.140001cf0
mov r14d, eax
mov r8, rbx
xor r14d, r15d
xor edx, edx
mov r9d, r14d
mov rcx, r12
call fcn.140001cf0
mov r12, qword [rsp + 0x30]
lea rcx, [rsp + 0x38]
mov ebp, eax
mov r8, r12
xor eax, eax
mov rdx, r13
mov qword [rsp + 0x38], rax
xor ebp, edi
call sub.VCRUNTIME140.dll_memcpy
mov rdi, qword [rsp + 0x38]
xor r14d, edi
mov dword [rsp + 0x30], r14d
mov rcx, rdi
mov r8d, 8
shr rcx, 0x20
sub r8, r12
xor ecx, ebp
xor edx, edx
mov dword [rsp + 0x34], ecx
lea rcx, [rsp + 0x30]
add rcx, r12
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rsp + 0x28]
lea rdx, [rsp + 0x30]
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
mov r8, qword [rsp + 0x28]
mov r15d, dword [rsp + 0x34]
mov r14d, dword [rsp + 0x30]
mov rbp, qword [rsp + 0x20]
mov dword [rsp + 0x38], edi
shr rdi, 0x20
shr rsi, 3
lea rax, [r8 + r12]
mov qword [rsp + 0x28], rax
test rsi, rsi
je 0x140002bbb
sub r13, r8
mov qword [rsp + 0x30], r13
nop
mov r12, qword [rax + r13]
mov r8, rbx
xor r14d, r12d
mov r13, r12
mov r9d, r14d
shr r13, 0x20
xor edx, edx
mov rcx, rbp
call fcn.140001cf0
xor eax, r13d
mov r8, rbx
xor r15d, eax
mov edx, 1
mov r9d, r15d
mov rcx, rbp
call fcn.140001cf0
mov rcx, qword [rsp + 0x20]
mov ebp, eax
xor ebp, r14d
mov r8, rbx
mov r9d, ebp
mov edx, 2
call fcn.140001cf0
mov rcx, qword [rsp + 0x20]
mov r14d, eax
xor r14d, r15d
mov r8, rbx
mov r9d, r14d
mov edx, 3
call fcn.140001cf0
mov rcx, qword [rsp + 0x20]
mov r15d, eax
xor r15d, ebp
mov r8, rbx
mov r9d, r15d
mov edx, 4
call fcn.140001cf0
mov rcx, qword [rsp + 0x20]
mov ebp, eax
xor ebp, r14d
mov r8, rbx
mov r9d, ebp
mov edx, 5
call fcn.140001cf0
mov rcx, qword [rsp + 0x20]
mov r14d, eax
xor r14d, r15d
mov r8, rbx
mov r9d, r14d
mov edx, 6
call fcn.140001cf0
mov rcx, qword [rsp + 0x20]
mov r15d, eax
xor r15d, ebp
mov r8, rbx
mov r9d, r15d
mov edx, 7
call fcn.140001cf0
mov rcx, qword [rsp + 0x20]
mov ebp, eax
xor ebp, r14d
mov r8, rbx
mov r9d, ebp
mov edx, 8
call fcn.140001cf0
mov rcx, qword [rsp + 0x20]
xor eax, r15d
mov r9d, eax
mov r8, rbx
mov edx, 9
mov r15d, eax
call fcn.140001cf0
mov r14d, eax
xor r15d, edi
mov rax, qword [rsp + 0x28]
xor r14d, ebp
xor r14d, dword [rsp + 0x38]
mov dword [rax], r14d
mov dword [rax + 4], r15d
add rax, 8
mov qword [rsp + 0x28], rax
mov rbp, qword [rsp + 0x20]
mov edi, r13d
mov r13, qword [rsp + 0x30]
mov dword [rsp + 0x38], r12d
sub rsi, 1
jne 0x140002a70
mov rdi, qword [rsp + 0x70]
mov r12, qword [rsp + 0x68]
mov r14, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x78]
mov r15, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.140005f50
add rsp, 0x80
pop r13
pop rsi
pop rbp
ret