Function at 0x18010d860
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
movsxd r13, dword [rsp + 0xa0]
mov rsi, qword [rsp + 0x98]
xor eax, eax
cmp dword [rcx], eax
mov ebx, 0xd
mov r12d, r8d
sete al
mov r14, rdx
mov rbp, rcx
mov dword [rsp + 0x24], eax
lea eax, [r13 - 1]
mov dword [rsp + 0x70], 0
mov r10d, ebx
movsxd r8, eax
test eax, eax
js 0x18010d8d7
nop dword [rax]
movzx ecx, byte [r8 + rsi]
lea eax, [r10*8]
xor ecx, eax
xor r10d, ecx
dec r8
jns 0x18010d8c0
movzx ecx, byte [rsp + 0x90]
mov r8d, dword [rbp + 0x14]
xor edx, edx
lea eax, [r10*8]
mov r15d, 1
mov dword [rsp + 0x20], ecx
xor eax, ecx
xor eax, r10d
div r8d
mov rax, qword [rbp + 0x20]
mov rdi, qword [rax + rdx*8]
mov dword [rsp + 0xa0], edx
test rdi, rdi
je 0x18010d949
cmp byte [rdi + 0x30], cl
jne 0x18010d93d
cmp dword [rdi + 0x1c], r13d
jne 0x18010d93d
lea rcx, [rdi + 0x31]
mov r8, r13
mov rdx, rsi
call fcn.180137910
test eax, eax
je 0x18010d9dc
movzx ecx, byte [rsp + 0x90]
mov rdi, qword [rdi]
test rdi, rdi
jne 0x18010d913
mov r8d, dword [rbp + 0x14]
lea eax, [r13 + 1]
movsxd r12, eax
mov eax, pe_nt_image_headers64
add r12, 0x71
cmp r12, rax
cmovl r12, rax
mov eax, dword [rbp + 0x10]
add eax, eax
cmp eax, r8d
jl 0x18010d9bd
mov rcx, rbp
call fcn.18010d580
test eax, eax
jne 0x18010dd1c
lea eax, [r13 - 1]
movsxd rdx, eax
test eax, eax
js 0x18010d9a4
nop word [rax + rax]
movzx ecx, byte [rdx + rsi]
lea eax, [rbx*8]
xor ecx, eax
xor ebx, ecx
dec rdx
jns 0x18010d990
lea eax, [rbx*8]
xor edx, edx
xor eax, dword [rsp + 0x20]
xor eax, ebx
div dword [rbp + 0x14]
mov dword [rsp + 0xa0], edx
call sym.sqlite.dll_sqlite3_initialize
test eax, eax
jne 0x18010dd17
test r12, r12
je 0x18010da4b
mov rcx, r12
call fcn.18000be40
mov rdi, rax
jmp 0x18010da4d
mov ecx, dword [rdi + 0x10]
mov eax, ecx
sub eax, dword [rdi + 0x18]
cmp eax, 0x16
jge 0x18010da41
lea eax, [rcx + rcx]
movsxd rbx, eax
call sym.sqlite.dll_sqlite3_initialize
test eax, eax
jne 0x18010dd17
mov rdx, rbx
mov rcx, rdi
call fcn.18000c190
test rax, rax
je 0x18010dd17
mov r8d, dword [rsp + 0xa0]
mov dword [rax + 0x10], ebx
mov rcx, qword [rbp + 0x20]
lea rdx, [rcx + r8*8]
mov rcx, qword [rcx + r8*8]
cmp rcx, rdi
je 0x18010da3b
nop dword [rax]
mov rdx, rcx
mov rcx, qword [rcx]
cmp rcx, rdi
jne 0x18010da30
mov qword [rdx], rax
mov rdi, rax
mov esi, dword [rdi + 0x18]
neg esi
jmp 0x18010db32
xor edi, edi
test rdi, rdi
je 0x18010dd17
xor eax, eax
lea rcx, [rdi + 0x31]
mov r8, r13
mov qword [rdi], rax
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], rax
mov qword [rdi + 0x20], rax
mov qword [rdi + 0x28], rax
movzx eax, byte [rsp + 0x90]
mov dword [rdi + 0x10], r12d
mov rdx, rsi
mov byte [rdi + 0x30], al
call fcn.180128750
mov r8d, dword [rsp + 0xa0]
mov dword [rdi + 0x1c], r13d
mov byte [r13 + rdi + 0x31], 0
lea eax, [r13 + 0x32]
mov dword [rdi + 0x18], eax
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax + r8*8]
mov qword [rdi], rcx
mov rax, qword [rbp + 0x20]
mov qword [rax + r8*8], rdi
inc dword [rbp + 0x10]
movsxd rcx, dword [rdi + 0x18]
add rcx, rdi
cmp r14, 0x7f
ja 0x18010dad6
movzx eax, r14b
and al, 0x7f
mov byte [rcx], al
mov eax, r15d
jmp 0x18010db02
cmp r14, 0x3fff
ja 0x18010dafa
mov rax, r14
shr rax, 7
or al, 0x80
mov byte [rcx], al
movzx eax, r14b
and al, 0x7f
mov byte [rcx + 1], al
mov eax, 2
jmp 0x18010db02
mov rdx, r14
call fcn.180011690
add dword [rdi + 0x18], eax
mov eax, dword [rdi + 0x18]
mov r12d, dword [rsp + 0x80]
mov esi, dword [rsp + 0x70]
mov dword [rdi + 0x14], eax
mov qword [rdi + 0x28], r14
cmp dword [rbp], r15d
je 0x18010db32
inc eax
mov dword [rdi + 0x18], eax
mov eax, dword [rbp]
neg eax
sbb cx, cx
mov word [rdi + 0x22], cx
mov rax, qword [rdi + 0x28]
cmp r14, rax
je 0x18010dbc3
mov rbx, r14
xor r8d, r8d
mov rdx, rdi
mov rcx, rbp
sub rbx, rax
call fcn.18010d710
movsxd rcx, dword [rdi + 0x18]
add rcx, rdi
cmp rbx, 0x7f
ja 0x18010db6a
and bl, 0x7f
mov eax, r15d
mov byte [rcx], bl
jmp 0x18010db93
cmp rbx, 0x3fff
ja 0x18010db8b
mov rax, rbx
shr rax, 7
or al, 0x80
and bl, 0x7f
mov byte [rcx], al
mov byte [rcx + 1], bl
mov eax, 2
jmp 0x18010db93
mov rdx, rbx
call fcn.180011690
add dword [rdi + 0x18], eax
mov eax, dword [rdi + 0x18]
mov qword [rdi + 0x28], r14
mov dword [rdi + 0x14], eax
mov r10d, r15d
cmp dword [rbp], r15d
je 0x18010dbc8
inc eax
mov dword [rdi + 0x18], eax
mov eax, dword [rbp]
mov dword [rdi + 0x24], 0
neg eax
sbb cx, cx
mov word [rdi + 0x22], cx
jmp 0x18010dbc8
mov r10d, dword [rsp + 0x24]
test r12d, r12d
js 0x18010dd03
mov ecx, dword [rbp]
cmp ecx, r15d
jne 0x18010dbf0
mov eax, dword [rdi + 0x18]
mov byte [rdi + 0x21], r15b
mov rdx, qword [rbp + 8]
lea ecx, [rsi + rax]
add dword [rdx], ecx
xor eax, eax
jmp 0x18010dd1c
movsx eax, word [rdi + 0x22]
cmp r12d, eax
je 0x18010dc5b
test ecx, ecx
jne 0x18010dca2
movsxd rax, dword [rdi + 0x18]
movsxd rdx, r12d
mov byte [rax + rdi], r15b
inc dword [rdi + 0x18]
movsxd rcx, dword [rdi + 0x18]
add rcx, rdi
cmp rdx, 0x7f
ja 0x18010dc26
and dl, 0x7f
mov eax, r15d
mov byte [rcx], dl
jmp 0x18010dc4c
cmp rdx, 0x3fff
ja 0x18010dc47
mov rax, rdx
shr rax, 7
or al, 0x80
and dl, 0x7f
mov byte [rcx], al
mov byte [rcx + 1], dl
mov eax, 2
jmp 0x18010dc4c
call fcn.180011690
add dword [rdi + 0x18], eax
mov word [rdi + 0x22], r12w
mov dword [rdi + 0x24], 0
test r10d, r10d
je 0x18010dd07
mov r10d, dword [rsp + 0x88]
movsxd rcx, dword [rdi + 0x18]
mov eax, r10d
sub eax, dword [rdi + 0x24]
add rcx, rdi
add eax, 2
movsxd rdx, eax
cmp rdx, 0x7f
ja 0x18010dcac
and dl, 0x7f
mov byte [rcx], dl
add dword [rdi + 0x18], r15d
mov eax, dword [rdi + 0x18]
mov dword [rdi + 0x24], r10d
mov rdx, qword [rbp + 8]
lea ecx, [rsi + rax]
add dword [rdx], ecx
xor eax, eax
jmp 0x18010dd1c
mov r10d, r12d
mov word [rdi + 0x22], r12w
jmp 0x18010dc6c
cmp rdx, 0x3fff
ja 0x18010dce4
mov rax, rdx
and dl, 0x7f
mov r15d, 2
mov byte [rcx + 1], dl
shr rax, 7
or al, 0x80
mov byte [rcx], al
add dword [rdi + 0x18], r15d
mov eax, dword [rdi + 0x18]
mov dword [rdi + 0x24], r10d
mov rdx, qword [rbp + 8]
lea ecx, [rsi + rax]
add dword [rdx], ecx
xor eax, eax
jmp 0x18010dd1c
call fcn.180011690
mov dword [rdi + 0x24], r10d
add dword [rdi + 0x18], eax
mov rdx, qword [rbp + 8]
mov r15d, eax
mov eax, dword [rdi + 0x18]
lea ecx, [rsi + rax]
add dword [rdx], ecx
xor eax, eax
jmp 0x18010dd1c
mov byte [rdi + 0x20], r15b
mov eax, dword [rdi + 0x18]
mov rdx, qword [rbp + 8]
lea ecx, [rsi + rax]
add dword [rdx], ecx
xor eax, eax
jmp 0x18010dd1c
mov eax, 7
mov rbx, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret