Function at 0x1800025a0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x180045028]
xor rax, rsp
mov qword [rbp - 8], rax
mov r15, r8
mov r14, rdx
mov ecx, 0x400
call fcn.180011344
mov rsi, rax
mov rcx, rax
mov rdx, qword [0x180045008]
mov r9d, 8
nop word [rax + rax]
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rdx + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rdx + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rdx + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rdx, [rdx + 0x80]
sub r9, 1
jne 0x1800025f0
lea rcx, str.KERNEL32.DLL
call fcn.180001af0
mov rbx, rax
lea rdx, str.LoadLibraryA
mov rcx, rax
call fcn.180001920
mov rdi, rax
lea rdx, [0x180031448]
mov rcx, rbx
call fcn.180001920
mov rbx, rax
lea rcx, str.Wininet.dll
call rdi
lea rdx, str.InternetSetOptionA
mov rcx, rax
call rbx
mov rdi, rax
movdqa xmm2, xmmword [0x180031920]
lea rcx, [rsi + 0x20]
mov edx, 0x10
nop
movdqu xmm0, xmmword [rcx - 0x20]
pxor xmm0, xmm2
movdqu xmmword [rcx - 0x20], xmm0
movdqu xmm0, xmmword [rcx - 0x10]
pxor xmm0, xmm2
movdqu xmmword [rcx - 0x10], xmm0
movdqu xmm1, xmmword [rcx]
pxor xmm1, xmm2
movdqu xmmword [rcx], xmm1
movdqu xmm0, xmmword [rcx + 0x10]
pxor xmm0, xmm2
movdqu xmmword [rcx + 0x10], xmm0
lea rcx, [rcx + 0x40]
sub rdx, 1
jne 0x1800026a0
xor r12d, r12d
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x10], 0xf
mov qword [rbp - 0x18], 1
mov word [rbp - 0x28], 0x75
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], r12b
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x180002720
mov rdx, rsi
lea rcx, [rbp - 0x48]
call fcn.180002e50
nop
lea rdx, [rbp - 0x28]
lea rcx, [0x1800461d0]
call fcn.1800023f0
mov rcx, rax
lea rdx, [rbp - 0x48]
call fcn.180002360
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x180002790
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000278a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002b74
call fcn.18001133c
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x1800027cb
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800027c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002b7a
call fcn.18001133c
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x30], 0xf
mov qword [rbp - 0x38], 1
mov word [rbp - 0x48], 0x6b
lea rdx, [rsi + 0x100]
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x180002803
lea rcx, [rbp - 0x28]
call fcn.180002e50
nop
lea rdx, [rbp - 0x48]
lea rcx, [0x1800461d0]
call fcn.1800023f0
mov rcx, rax
lea rdx, [rbp - 0x28]
call fcn.180002360
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x180002870
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000286a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002b80
call fcn.18001133c
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x1800028ab
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800028a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002b86
call fcn.18001133c
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x30], 0xf
mov qword [rbp - 0x38], 1
mov word [rbp - 0x48], 0x70
lea rdx, [rsi + 0x200]
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x1800028e3
lea rcx, [rbp - 0x28]
call fcn.180002e50
nop
lea rdx, [rbp - 0x48]
lea rcx, [0x1800461d0]
call fcn.1800023f0
mov rcx, rax
lea rdx, [rbp - 0x28]
call fcn.180002360
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x180002950
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000294a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002b8c
call fcn.18001133c
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x18000298b
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002986
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002b92
call fcn.18001133c
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x30], 0xf
mov qword [rbp - 0x38], 1
mov word [rbp - 0x48], 0x7a
lea rdx, [rsi + 0x300]
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
inc rbx
cmp byte [rdx + rbx], 0
jne 0x1800029c0
mov r8, rbx
lea rcx, [rbp - 0x28]
call fcn.180002e50
nop
lea rdx, [rbp - 0x48]
lea rcx, [0x1800461d0]
call fcn.1800023f0
mov rcx, rax
lea rdx, [rbp - 0x28]
call fcn.180002360
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x180002a2f
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002a29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002b98
call fcn.18001133c
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x180002a6a
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002a65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002b6e
call fcn.18001133c
mov rcx, rsi
call fcn.18001133c
mov dword [rbp - 0x50], 0xc8
mov r9d, 4
lea r8, [rbp - 0x50]
lea edx, [r9 + 0x45]
xor ecx, ecx
call rdi
mov r9d, 4
lea r8, [rbp - 0x50]
lea edx, [r9 + 0x46]
xor ecx, ecx
call rdi
test r14, r14
je 0x180002b42
test r15, r15
je 0x180002b42
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 8]
mov qword [0x1800461c8], rax
mov qword [0x1800461c0], r15
mov ecx, 8
call fcn.180011300
mov rdi, rax
test rax, rax
je 0x180002b3b
lea rax, vtable.CMyHttpModuleFactory.0
mov qword [rdi], rax
mov r10, qword [r14]
xor r9d, r9d
mov r8d, 0x20000001
mov rdx, rdi
mov rcx, r14
call qword [r10 + 0x10]
mov ebx, eax
test eax, eax
js 0x180002b2c
mov rax, qword [r14]
lea r8, str.FIRST
mov edx, 1
mov rcx, r14
call qword [rax + 0x20]
mov rax, qword [r14]
lea r8, str.LAST
mov edx, 0x20000000
mov rcx, r14
call qword [rax + 0x20]
mov ebx, eax
jmp 0x180002b47
mov edx, 8
mov rcx, rdi
call fcn.18001133c
jmp 0x180002b47
mov ebx, 0x80070008
jmp 0x180002b47
mov ebx, 0x80070057
mov eax, ebx
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1800113e0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.180017c78
nop
call fcn.180017c78
nop
call fcn.180017c78
nop
call fcn.180017c78
nop
call fcn.180017c78
nop
call fcn.180017c78
nop
call fcn.180017c78
nop
call fcn.180017c78
int3