Function at 0x140003e40
Capabilities:
Create http request
Read data from internet
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x5c0
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14026d600]
xor rax, rsp
mov qword [rbp + 0x560], rax
mov r14, rdx
mov r12, rcx
lea rcx, [rbp + 0xc0]
call fcn.140003000
nop
movabs rax, 0x998af41ce06778a0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs rax, 0xa9f7db2fe309085b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
movabs rax, 0x9441333ffd5cfd69
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rbx, 0xeba7f6e373c1d8
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rdi, 0x99f8f479e01478f5
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rsi, 0xa992db48e3480876
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs r15, 0x9441333ffd28fd07
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
vmovdqu ymm0, ymmword [rbp + 0x10]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqu ymmword [rbp + 0x10], ymm1
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, [rbp + 0x10]
vzeroupper
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r13, rax
test rax, rax
je 0x14000419a
movabs rax, 0x9988f40de060789d
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x40], rcx
movabs rax, 0xa9bddb67e3720805
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x48], rcx
movabs rax, 0x94353351fd4dfd75
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x88a7d8e30ac1aa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0xd4fa9a1d7d001db6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0xb35bd341ebd463d9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x4f736829abe4fabe
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0xac044156ca43615a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x5046c230e27e8c32
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rcx, 0x38c61c0557a387e
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movabs rax, 0xd48d9a657d2f1dd9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0xb338d324ebe063ea
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0x4f05685babd2fa8b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0xac664122ca74616c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0x5031c251e20c8c1d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqa xmm0, xmmword [rbp + 0x80]
vxorps xmm0, xmm0, xmmword [rbp + 0x140]
vmovdqa xmmword [rbp + 0x80], xmm0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x40]
mov rcx, r13
vzeroupper
call qword [sym.imp.WININET.dll_InternetOpenUrlW]
mov r15, rax
test rax, rax
jne 0x1400041e7
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor bl, bl
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x1400044d7
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400044d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400044d2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xor ebx, ebx
mov qword [rbp + 0xf0], rbx
mov esi, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xf8], rsi
mov byte [rbp + 0xe0], bl
lea r9, [rbp + 0xa0]
mov r8d, 0x400
lea rdx, [rbp + 0x160]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1400042d4
mov eax, dword [rbp + 0xa0]
test eax, eax
je 0x1400042d4
mov edi, eax
mov rax, rsi
sub rax, rbx
cmp rdi, rax
ja 0x140004285
lea rax, [rbx + rdi]
mov qword [rbp + 0xf0], rax
lea rax, [rbp + 0xe0]
cmp rsi, 0xf
cmova rax, qword [rbp + 0xe0]
add rbx, rax
mov r8d, edi
lea rdx, [rbp + 0x160]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x1400042a0
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x160]
mov rdx, rdi
lea rcx, [rbp + 0xe0]
call fcn.1400c4b60
lea r9, [rbp + 0xa0]
mov r8d, 0x400
lea rdx, [rbp + 0x160]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1400042d4
mov rsi, qword [rbp + 0xf8]
mov rbx, qword [rbp + 0xf0]
jmp 0x140004231
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], rax
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0xa8]
call fcn.140003270
mov rdi, qword [rbp + 0xa8]
mov rsi, rdi
mov r15, qword [rbp + 0xb0]
cmp rdi, r15
je 0x14000439c
mov r13, qword [r12 + 0x18]
lea rbx, [rdi + 0x38]
nop dword [rax + rax]
mov rdx, r12
cmp r13, 0xf
jbe 0x14000433d
mov rdx, qword [r12]
mov r8, qword [rbx - 0x28]
mov rcx, rsi
cmp qword [rbx - 0x20], 0xf
jbe 0x14000434e
mov rcx, qword [rsi]
cmp r8, qword [r12 + 0x10]
jne 0x14000438f
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000438f
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x14000436b
mov rdx, qword [r14]
mov r8, qword [rbx - 8]
lea rcx, [rbx - 0x18]
cmp qword [rbx], 0xf
jbe 0x14000437c
mov rcx, qword [rcx]
cmp r8, qword [r14 + 0x10]
jne 0x14000438f
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000441d
add rsi, 0x60
add rbx, 0x60
cmp rsi, r15
jne 0x140004330
xor bl, bl
test rdi, rdi
je 0x140004485
cmp rdi, r15
je 0x1400043c8
nop dword [rax]
mov rcx, rdi
call fcn.140003d40
add rdi, 0x60
cmp rdi, r15
jne 0x1400043b0
mov rdi, qword [rbp + 0xa8]
mov rcx, qword [rbp + 0xb8]
sub rcx, rdi
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 5
mov rax, rdi
cmp rdx, 0x1000
jb 0x140004467
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004467
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rsi + 0x40]
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0xf
cmova rdx, qword [rbp + 0xc0]
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140004446
mov rcx, qword [rcx]
cmp r8, qword [rbp + 0xd0]
jne 0x14000439c
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000439c
mov bl, 1
jmp 0x14000439e
mov rcx, rdi
call fcn.1401f3090
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x14000419c
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400044c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400044c8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401f3090
jmp 0x14000419c
call fcn.1401f3090
movzx eax, bl
mov rcx, qword [rbp + 0x560]
xor rcx, rsp
call fcn.1401f3070
lea r11, [rsp + 0x5c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret