Function at 0x18010d230
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
movsxd r13, dword [rsp + 0xa0]
mov rsi, qword [rsp + 0x98]
xor eax, eax
cmp dword [rcx], eax
mov ebx, 0xd
mov r12d, r8d
sete al
mov r14, rdx
mov rbp, rcx
mov dword [rsp + 0x24], eax
lea eax, [r13 - 1]
mov dword [rsp + 0x70], 0
mov r10d, ebx
movsxd r8, eax
test eax, eax
js 0x18010d2a7
nop dword [rax]
movzx ecx, byte [r8 + rsi]
lea eax, [r10*8]
xor ecx, eax
xor r10d, ecx
dec r8
jns 0x18010d290
movzx ecx, byte [rsp + 0x90]
mov r8d, dword [rbp + 0x14]
xor edx, edx
lea eax, [r10*8]
mov r15d, 1
mov dword [rsp + 0x20], ecx
xor eax, ecx
xor eax, r10d
div r8d
mov rax, qword [rbp + 0x20]
mov rdi, qword [rax + rdx*8]
mov dword [rsp + 0xa0], edx
test rdi, rdi
je 0x18010d319
cmp byte [rdi + 0x30], cl
jne 0x18010d30d
cmp dword [rdi + 0x1c], r13d
jne 0x18010d30d
lea rcx, [rdi + 0x31]
mov r8, r13
mov rdx, rsi
call fcn.180137900
test eax, eax
je 0x18010d3ac
movzx ecx, byte [rsp + 0x90]
mov rdi, qword [rdi]
test rdi, rdi
jne 0x18010d2e3
mov r8d, dword [rbp + 0x14]
lea eax, [r13 + 1]
movsxd r12, eax
mov eax, pe_nt_image_headers64
add r12, 0x71
cmp r12, rax
cmovl r12, rax
mov eax, dword [rbp + 0x10]
add eax, eax
cmp eax, r8d
jl 0x18010d38d
mov rcx, rbp
call fcn.18010cf50
test eax, eax
jne 0x18010d6ec
lea eax, [r13 - 1]
movsxd rdx, eax
test eax, eax
js 0x18010d374
nop word [rax + rax]
movzx ecx, byte [rdx + rsi]
lea eax, [rbx*8]
xor ecx, eax
xor ebx, ecx
dec rdx
jns 0x18010d360
lea eax, [rbx*8]
xor edx, edx
xor eax, dword [rsp + 0x20]
xor eax, ebx
div dword [rbp + 0x14]
mov dword [rsp + 0xa0], edx
call sym.sqlite.dll_sqlite3_initialize
test eax, eax
jne 0x18010d6e7
test r12, r12
je 0x18010d41b
mov rcx, r12
call fcn.18000be40
mov rdi, rax
jmp 0x18010d41d
mov ecx, dword [rdi + 0x10]
mov eax, ecx
sub eax, dword [rdi + 0x18]
cmp eax, 0x16
jge 0x18010d411
lea eax, [rcx + rcx]
movsxd rbx, eax
call sym.sqlite.dll_sqlite3_initialize
test eax, eax
jne 0x18010d6e7
mov rdx, rbx
mov rcx, rdi
call fcn.18000c190
test rax, rax
je 0x18010d6e7
mov r8d, dword [rsp + 0xa0]
mov dword [rax + 0x10], ebx
mov rcx, qword [rbp + 0x20]
lea rdx, [rcx + r8*8]
mov rcx, qword [rcx + r8*8]
cmp rcx, rdi
je 0x18010d40b
nop dword [rax]
mov rdx, rcx
mov rcx, qword [rcx]
cmp rcx, rdi
jne 0x18010d400
mov qword [rdx], rax
mov rdi, rax
mov esi, dword [rdi + 0x18]
neg esi
jmp 0x18010d502
xor edi, edi
test rdi, rdi
je 0x18010d6e7
xor eax, eax
lea rcx, [rdi + 0x31]
mov r8, r13
mov qword [rdi], rax
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], rax
mov qword [rdi + 0x20], rax
mov qword [rdi + 0x28], rax
movzx eax, byte [rsp + 0x90]
mov dword [rdi + 0x10], r12d
mov rdx, rsi
mov byte [rdi + 0x30], al
call fcn.180128740
mov r8d, dword [rsp + 0xa0]
mov dword [rdi + 0x1c], r13d
mov byte [r13 + rdi + 0x31], 0
lea eax, [r13 + 0x32]
mov dword [rdi + 0x18], eax
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax + r8*8]
mov qword [rdi], rcx
mov rax, qword [rbp + 0x20]
mov qword [rax + r8*8], rdi
inc dword [rbp + 0x10]
movsxd rcx, dword [rdi + 0x18]
add rcx, rdi
cmp r14, 0x7f
ja 0x18010d4a6
movzx eax, r14b
and al, 0x7f
mov byte [rcx], al
mov eax, r15d
jmp 0x18010d4d2
cmp r14, 0x3fff
ja 0x18010d4ca
mov rax, r14
shr rax, 7
or al, 0x80
mov byte [rcx], al
movzx eax, r14b
and al, 0x7f
mov byte [rcx + 1], al
mov eax, 2
jmp 0x18010d4d2
mov rdx, r14
call fcn.180011690
add dword [rdi + 0x18], eax
mov eax, dword [rdi + 0x18]
mov r12d, dword [rsp + 0x80]
mov esi, dword [rsp + 0x70]
mov dword [rdi + 0x14], eax
mov qword [rdi + 0x28], r14
cmp dword [rbp], r15d
je 0x18010d502
inc eax
mov dword [rdi + 0x18], eax
mov eax, dword [rbp]
neg eax
sbb cx, cx
mov word [rdi + 0x22], cx
mov rax, qword [rdi + 0x28]
cmp r14, rax
je 0x18010d593
mov rbx, r14
xor r8d, r8d
mov rdx, rdi
mov rcx, rbp
sub rbx, rax
call fcn.18010d0e0
movsxd rcx, dword [rdi + 0x18]
add rcx, rdi
cmp rbx, 0x7f
ja 0x18010d53a
and bl, 0x7f
mov eax, r15d
mov byte [rcx], bl
jmp 0x18010d563
cmp rbx, 0x3fff
ja 0x18010d55b
mov rax, rbx
shr rax, 7
or al, 0x80
and bl, 0x7f
mov byte [rcx], al
mov byte [rcx + 1], bl
mov eax, 2
jmp 0x18010d563
mov rdx, rbx
call fcn.180011690
add dword [rdi + 0x18], eax
mov eax, dword [rdi + 0x18]
mov qword [rdi + 0x28], r14
mov dword [rdi + 0x14], eax
mov r10d, r15d
cmp dword [rbp], r15d
je 0x18010d598
inc eax
mov dword [rdi + 0x18], eax
mov eax, dword [rbp]
mov dword [rdi + 0x24], 0
neg eax
sbb cx, cx
mov word [rdi + 0x22], cx
jmp 0x18010d598
mov r10d, dword [rsp + 0x24]
test r12d, r12d
js 0x18010d6d3
mov ecx, dword [rbp]
cmp ecx, r15d
jne 0x18010d5c0
mov eax, dword [rdi + 0x18]
mov byte [rdi + 0x21], r15b
mov rdx, qword [rbp + 8]
lea ecx, [rsi + rax]
add dword [rdx], ecx
xor eax, eax
jmp 0x18010d6ec
movsx eax, word [rdi + 0x22]
cmp r12d, eax
je 0x18010d62b
test ecx, ecx
jne 0x18010d672
movsxd rax, dword [rdi + 0x18]
movsxd rdx, r12d
mov byte [rax + rdi], r15b
inc dword [rdi + 0x18]
movsxd rcx, dword [rdi + 0x18]
add rcx, rdi
cmp rdx, 0x7f
ja 0x18010d5f6
and dl, 0x7f
mov eax, r15d
mov byte [rcx], dl
jmp 0x18010d61c
cmp rdx, 0x3fff
ja 0x18010d617
mov rax, rdx
shr rax, 7
or al, 0x80
and dl, 0x7f
mov byte [rcx], al
mov byte [rcx + 1], dl
mov eax, 2
jmp 0x18010d61c
call fcn.180011690
add dword [rdi + 0x18], eax
mov word [rdi + 0x22], r12w
mov dword [rdi + 0x24], 0
test r10d, r10d
je 0x18010d6d7
mov r10d, dword [rsp + 0x88]
movsxd rcx, dword [rdi + 0x18]
mov eax, r10d
sub eax, dword [rdi + 0x24]
add rcx, rdi
add eax, 2
movsxd rdx, eax
cmp rdx, 0x7f
ja 0x18010d67c
and dl, 0x7f
mov byte [rcx], dl
add dword [rdi + 0x18], r15d
mov eax, dword [rdi + 0x18]
mov dword [rdi + 0x24], r10d
mov rdx, qword [rbp + 8]
lea ecx, [rsi + rax]
add dword [rdx], ecx
xor eax, eax
jmp 0x18010d6ec
mov r10d, r12d
mov word [rdi + 0x22], r12w
jmp 0x18010d63c
cmp rdx, 0x3fff
ja 0x18010d6b4
mov rax, rdx
and dl, 0x7f
mov r15d, 2
mov byte [rcx + 1], dl
shr rax, 7
or al, 0x80
mov byte [rcx], al
add dword [rdi + 0x18], r15d
mov eax, dword [rdi + 0x18]
mov dword [rdi + 0x24], r10d
mov rdx, qword [rbp + 8]
lea ecx, [rsi + rax]
add dword [rdx], ecx
xor eax, eax
jmp 0x18010d6ec
call fcn.180011690
mov dword [rdi + 0x24], r10d
add dword [rdi + 0x18], eax
mov rdx, qword [rbp + 8]
mov r15d, eax
mov eax, dword [rdi + 0x18]
lea ecx, [rsi + rax]
add dword [rdx], ecx
xor eax, eax
jmp 0x18010d6ec
mov byte [rdi + 0x20], r15b
mov eax, dword [rdi + 0x18]
mov rdx, qword [rbp + 8]
lea ecx, [rsi + rax]
add dword [rdx], ecx
xor eax, eax
jmp 0x18010d6ec
mov eax, 7
mov rbx, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret