Function at 0x61c0dd38
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x5c
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], ecx
mov esi, dword [eax]
test esi, esi
jne 0x61c0de5c
mov dword [ebp - 0x34], 0
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx + 0xc]
mov dword [ebp - 0x30], ecx
test ecx, ecx
je 0x61c0dea4
mov ebx, dword [ebp - 0x34]
lea eax, [ecx + ebx*8]
mov esi, dword [eax + 4]
mov eax, dword [eax]
test eax, eax
je 0x61c0df19
test esi, esi
je 0x61c0df19
dec eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x28], eax
jmp 0x61c0ddac
mov esi, dword [esi]
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x61c0df19
test esi, esi
je 0x61c0df19
dec dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
cmp edx, dword [esi + 0x10]
jne 0x61c0dd94
mov eax, dword [esi + 0xc]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
test ebx, ebx
jle 0x61c0de20
mov bl, byte [eax]
test bl, bl
je 0x61c0de20
movzx ebx, bl
mov dword [ebp - 0x3c], ebx
movzx ebx, byte [ecx]
mov dword [ebp - 0x4c], ebx
mov edi, dword [ebp - 0x3c]
mov bl, byte [edi + 0x61c88c20]
mov edi, dword [ebp - 0x4c]
cmp bl, byte [edi + 0x61c88c20]
jne 0x61c0de20
mov dword [ebp - 0x4c], esi
jmp 0x61c0de13
mov bl, byte [eax]
test bl, bl
je 0x61c0de1d
movzx edi, bl
movzx ebx, byte [ecx]
mov dword [ebp - 0x3c], ebx
movzx edi, byte [edi + 0x61c88c20]
mov ebx, edi
mov esi, dword [ebp - 0x3c]
cmp bl, byte [esi + 0x61c88c20]
jne 0x61c0de1d
inc eax
inc ecx
dec edx
lea ebx, [edx + 1]
test ebx, ebx
jg 0x61c0ddf0
mov esi, dword [ebp - 0x4c]
test edx, edx
js 0x61c0de3c
movzx eax, byte [eax]
movzx edx, byte [ecx]
mov al, byte [eax + 0x61c88c20]
cmp al, byte [edx + 0x61c88c20]
jne 0x61c0dd94
mov ebx, dword [esi + 8]
mov edi, dword [ebp + 8]
test edi, edi
je 0x61c0deb2
mov ecx, dword [ebp + 8]
mov dword [esi + 8], ecx
mov edi, dword [ebp - 0x24]
mov dword [esi + 0xc], edi
mov eax, ebx
add esp, 0x5c
pop ebx
pop esi
pop edi
leave
ret
mov edi, dword [ebp - 0x20]
test edi, edi
jle 0x61c0df06
xor edx, edx
xor eax, eax
mov edi, dword [ebp - 0x24]
nop
lea ecx, [eax*8]
movzx ebx, byte [edi + edx]
movzx ebx, byte [ebx + 0x61c88c20]
xor ecx, ebx
xor eax, ecx
inc edx
cmp edx, dword [ebp - 0x20]
jne 0x61c0de70
xor edx, edx
div esi
mov dword [ebp - 0x34], edx
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx + 0xc]
mov dword [ebp - 0x30], ecx
test ecx, ecx
jne 0x61c0dd6c
mov edi, dword [ebp - 0x2c]
mov esi, dword [edi + 8]
mov eax, dword [edi + 4]
jmp 0x61c0dd77
mov eax, dword [esi + 4]
test eax, eax
je 0x61c0df0f
mov edx, dword [esi]
mov dword [eax], edx
mov eax, dword [esi]
test eax, eax
je 0x61c0dec9
mov edx, dword [esi + 4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x30]
test ecx, ecx
je 0x61c0dee0
mov ecx, dword [ebp - 0x34]
mov edi, dword [ebp - 0x30]
lea edx, [edi + ecx*8]
cmp esi, dword [edx + 4]
je 0x61c0df0a
dec dword [edx]
mov dword [esp], esi
call sym.sqlite3.dll_sqlite3_free
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 4]
dec eax
mov dword [edx + 4], eax
test eax, eax
jne 0x61c0de52
mov eax, edx
call fcn.61c0381c
jmp 0x61c0de52
xor eax, eax
jmp 0x61c0de8c
mov dword [edx + 4], eax
jmp 0x61c0dede
mov eax, dword [esi]
mov edi, dword [ebp - 0x2c]
mov dword [edi + 8], eax
jmp 0x61c0debd
xor ebx, ebx
cmp dword [ebp + 8], 0
je 0x61c0de52
mov dword [esp], 0x14
call fcn.61c01e58
mov esi, eax
mov ebx, dword [ebp + 8]
test eax, eax
je 0x61c0de52
mov eax, dword [ebp - 0x24]
mov dword [esi + 0xc], eax
mov edx, dword [ebp - 0x20]
mov dword [esi + 0x10], edx
mov dword [esi + 8], ebx
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx + 4]
inc eax
mov dword [ebx + 4], eax
cmp eax, 9
jbe 0x61c0df69
mov edx, dword [ebx]
lea ecx, [edx + edx]
cmp eax, ecx
ja 0x61c0e004
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x61c0dfde
mov edi, dword [ebp - 0x34]
lea eax, [eax + edi*8]
test eax, eax
je 0x61c0dfb8
mov ecx, dword [eax]
test ecx, ecx
je 0x61c0dfaf
mov edx, dword [eax + 4]
inc ecx
mov dword [eax], ecx
mov dword [eax + 4], esi
test edx, edx
je 0x61c0dfb8
mov dword [esi], edx
mov eax, dword [edx + 4]
mov dword [esi + 4], eax
mov eax, dword [edx + 4]
test eax, eax
je 0x61c0e173
mov dword [eax], esi
mov dword [edx + 4], esi
xor ebx, ebx
jmp 0x61c0de52
mov dword [eax], 1
mov dword [eax + 4], esi
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 8]
mov dword [esi], eax
mov eax, dword [edx + 8]
test eax, eax
je 0x61c0dfca
mov dword [eax + 4], esi
mov dword [esi + 4], 0
mov ecx, dword [ebp - 0x2c]
mov dword [ecx + 8], esi
xor ebx, ebx
jmp 0x61c0de52
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx + 8]
mov dword [esi], eax
mov eax, dword [ebx + 8]
test eax, eax
je 0x61c0dff0
mov dword [eax + 4], esi
mov dword [esi + 4], 0
mov edi, dword [ebp - 0x2c]
mov dword [edi + 8], esi
xor ebx, ebx
jmp 0x61c0de52
lea ebx, [eax + eax]
shl eax, 4
cmp eax, 0x400
jbe 0x61c0e016
mov ebx, pe_nt_image_headers32
cmp edx, ebx
je 0x61c0df69
call fcn.61c01a94
shl ebx, 3
mov dword [esp], ebx
call fcn.61c01e58
mov dword [ebp - 0x1c], eax
call fcn.61c01aac
cmp dword [ebp - 0x1c], 0
je 0x61c0df69
mov edi, dword [ebp - 0x2c]
mov eax, dword [edi + 0xc]
mov dword [esp], eax
call sym.sqlite3.dll_sqlite3_free
mov eax, dword [ebp - 0x1c]
mov dword [edi + 0xc], eax
mov dword [esp], eax
call fcn.61c01d70
shr eax, 3
mov dword [ebp - 0x28], eax
mov dword [edi], eax
mov ecx, eax
shl ecx, 3
xor eax, eax
mov edi, dword [ebp - 0x1c]
rep stosb byte es:[edi], al
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 8]
mov dword [eax + 8], 0
test ecx, ecx
je 0x61c0e13f
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0x30], edx
mov ebx, dword [ecx + 0xc]
mov dword [ebp - 0x34], ebx
test edx, edx
jle 0x61c0e138
xor edx, edx
xor eax, eax
mov dword [ebp - 0x3c], ecx
lea ebx, [eax*8]
mov ecx, dword [ebp - 0x34]
movzx edi, byte [ecx + edx]
movzx edi, byte [edi + 0x61c88c20]
xor ebx, edi
xor eax, ebx
inc edx
cmp edx, dword [ebp - 0x30]
jne 0x61c0e0a0
mov ecx, dword [ebp - 0x3c]
mov ebx, dword [ecx]
xor edx, edx
div dword [ebp - 0x28]
mov edi, dword [ebp - 0x1c]
lea eax, [edi + edx*8]
test eax, eax
je 0x61c0e10a
mov edi, dword [eax]
test edi, edi
je 0x61c0e101
mov edx, dword [eax + 4]
inc edi
mov dword [eax], edi
mov dword [eax + 4], ecx
test edx, edx
je 0x61c0e10a
mov dword [ecx], edx
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
mov eax, dword [edx + 4]
test eax, eax
je 0x61c0e130
mov dword [eax], ecx
mov dword [edx + 4], ecx
mov ecx, ebx
jmp 0x61c0e07d
mov dword [eax], 1
mov dword [eax + 4], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 8]
mov dword [ecx], eax
mov eax, dword [edx + 8]
test eax, eax
je 0x61c0e11c
mov dword [eax + 4], ecx
mov dword [ecx + 4], 0
mov edi, dword [ebp - 0x2c]
mov dword [edi + 8], ecx
mov ecx, ebx
jmp 0x61c0e07d
mov eax, dword [ebp - 0x2c]
mov dword [eax + 8], ecx
jmp 0x61c0e0f7
mov ebx, dword [ecx]
mov eax, dword [ebp - 0x1c]
jmp 0x61c0e0d3
xor eax, eax
mov ecx, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x20]
jmp 0x61c0e160
lea edx, [eax*8]
movzx edi, byte [ecx]
movzx edi, byte [edi + 0x61c88c20]
xor edx, edi
xor eax, edx
inc ecx
dec ebx
test ebx, ebx
jg 0x61c0e149
mov ecx, dword [ebp - 0x2c]
xor edx, edx
div dword [ecx]
mov dword [ebp - 0x34], edx
jmp 0x61c0df69
mov eax, dword [ebp - 0x2c]
mov dword [eax + 8], esi
jmp 0x61c0dfa5