Function at 0x1400018f0
Capabilities:
Create http request
Encode data using xor
Read data from internet
Receive data

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x828]
sub rsp, 0x8f0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov rax, qword [0x14000d008]
xor rax, rsp
mov qword [rbp + 0x7c0], rax
mov rsi, rdx
mov rbx, rcx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x30], rcx
mov qword [rbp - 0x60], rdx
mov dword [rbp - 0x40], 1
movsd xmm0, qword [0x14000a470]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [0x14000a478]
mov dword [rbp - 0x48], eax
xor r13d, r13d
lea ecx, [r13 + 0x1f]
lea r14d, [r13 + 6]
mov edi, dword [0x14000d018]
cmp byte [0x14000a47b], r13b
jne 0x140001ad8
mov r8d, r13d
cmp edi, 2
jl 0x140001a8a
movdqa xmm4, xmmword [0x14000a8d0]
movd xmm6, r14d
movd xmm5, ecx
movdqa xmm2, xmmword [0x14000a880]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14000a8a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000a8b0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.WWWWWWWWWWWWWWWW]
movd xmm0, dword [0x14000a470]
xorps xmm2, xmm0
movd dword [rbp - 0x50], xmm2
movdqa xmm3, xmmword [0x14000a890]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14000a8a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000a8b0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.WWWWWWWWWWWWWWWW]
movd xmm0, dword [rbp - 0x4c]
xorps xmm2, xmm0
movd dword [rbp - 0x4c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0xe070381d
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x49
movzx eax, r8b
sub al, cl
add al, 0x57
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x140001aa0
mov ecx, 0x1f
movzx eax, word [0x14000a6f8]
mov word [rbp - 0x54], ax
movzx r12d, byte [0x14000a6fe]
movzx eax, word [0x14000a6fc]
movzx r15d, byte [0x14000a6fa]
mov byte [rbp - 0x56], r12b
mov word [rbp - 0x58], ax
mov byte [rbp - 0x52], r15b
cmp byte [rbp - 0x45], r13b
je 0x140001c63
mov r8d, r13d
cmp edi, 2
jl 0x140001c25
movdqa xmm4, xmmword [0x14000a8d0]
movd xmm6, r14d
movd xmm5, ecx
movdqa xmm2, xmmword [0x14000a880]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14000a8a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000a8b0]
packuswb xmm2, xmm2
mov eax, dword [str.WWWWWWWWWWWWWWWW]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x50]
xorps xmm2, xmm1
movd dword [rbp - 0x50], xmm2
movdqa xmm3, xmmword [0x14000a890]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14000a8a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000a8b0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x4c]
xorps xmm2, xmm1
movd dword [rbp - 0x4c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop
mov eax, 0xe070381d
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x49
movzx eax, r8b
sub al, cl
add al, 0x57
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x140001c30
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetOpenA]
mov r10, rax
mov qword [rsp + 0x30], rax
cmp byte [rbp - 0x45], r13b
jne 0x140001df3
mov r8d, r13d
cmp edi, 2
jl 0x140001da8
movdqa xmm4, xmmword [0x14000a8d0]
movd xmm6, r14d
mov eax, 0x1f
movd xmm5, eax
movdqa xmm2, xmmword [0x14000a880]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14000a8a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000a8b0]
packuswb xmm2, xmm2
mov eax, dword [str.WWWWWWWWWWWWWWWW]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x50]
xorps xmm2, xmm1
movd dword [rbp - 0x50], xmm2
movdqa xmm3, xmmword [0x14000a890]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14000a8a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000a8b0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x4c]
xorps xmm2, xmm1
movd dword [rbp - 0x4c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0xe070381d
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x49
movzx eax, r8b
sub al, cl
add al, 0x57
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x140001dc0
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov rdi, r13
mov qword [rbp - 0x28], r13
mov r14d, 0xf
mov qword [rbp - 0x20], r14
mov byte [rbp - 0x38], dil
test r10, r10
je 0x140002152
mov rdx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x140001e25
mov rdx, qword [rsi]
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
mov rcx, r10
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov r13, rax
test rax, rax
je 0x14000214a
nop word [rax + rax]
lea r9, [rbp - 0x40]
mov r8d, 0x7d0
lea rdx, [rbp - 0x10]
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetReadFile]
mov ebx, dword [rbp - 0x40]
mov rax, r14
sub rax, rdi
cmp rbx, rax
ja 0x140001ea2
lea rax, [rbx + rdi]
mov qword [rbp - 0x28], rax
lea rax, [rbp - 0x38]
cmp r14, 0x10
cmovae rax, qword [rbp - 0x38]
add rdi, rax
mov r8d, ebx
lea rdx, [rbp - 0x10]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x140001eb7
mov qword [rsp + 0x20], rbx
lea r9, [rbp - 0x10]
mov rdx, rbx
lea rcx, [rbp - 0x38]
call fcn.1400083d0
xor edx, edx
mov r8d, 0x7d0
lea rcx, [rbp - 0x10]
call sub.VCRUNTIME140.dll_memset
cmp dword [rbp - 0x40], 0
je 0x140001edb
mov r14, qword [rbp - 0x20]
mov rdi, qword [rbp - 0x28]
jmp 0x140001e50
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
test r12b, r12b
je 0x140001f04
xor byte [rbp - 0x58], 0x57
xor byte [rbp - 0x57], 0x58
xor r12b, 0x59
mov byte [rbp - 0x56], r12b
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x80]
call fcn.140007b60
nop
test r15b, r15b
je 0x140001f27
xor byte [rbp - 0x54], 0x57
xor byte [rbp - 0x53], 0x58
xor r15b, 0x59
mov byte [rbp - 0x52], r15b
lea rdx, [rbp - 0x54]
lea rcx, [rsp + 0x60]
call fcn.140007b60
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xor r12d, r12d
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], r12
lea r15, [rbp - 0x38]
mov r14, qword [rbp - 0x38]
mov r13, qword [rbp - 0x20]
cmp r13, 0x10
cmovae r15, r14
movabs rbx, 0x7fffffffffffffff
mov rdi, qword [rbp - 0x28]
cmp rdi, rbx
ja 0x1400022d9
mov qword [rsp + 0x50], 0xf
cmp rdi, 0x10
jae 0x140001f98
mov qword [rsp + 0x48], rdi
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x38], xmm0
jmp 0x14000202d
mov rax, rdi
or rax, 0xf
cmp rax, rbx
ja 0x140001fb3
mov rbx, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rbx, rcx
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x140002000
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400022d3
mov rcx, rax
call fcn.140008ac0
mov rcx, rax
test rax, rax
je 0x140001ff9
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000200f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000200c
call fcn.140008ac0
jmp 0x14000200f
mov rax, r12
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rbx
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea r9, [rbp - 0x80]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x38]
mov rbx, qword [rsp + 0x58]
mov rcx, rbx
call fcn.1400015f0
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14000208a
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002084
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002084
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140008afc
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1400020c9
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400020c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400020c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140008afc
nop
cmp r13, 0x10
jb 0x140002104
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400020fb
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400020fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.140008afc
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x14000213a
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x140002135
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140002143
mov rcx, r8
call fcn.140008afc
mov qword [rsi + 0x10], r12
jmp 0x14000228a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r10, qword [rsp + 0x30]
xor r13d, r13d
mov rcx, r10
call qword [sym.imp.WININET.dll_InternetCloseHandle]
test r12b, r12b
je 0x140002170
xor byte [rbp - 0x58], 0x57
xor byte [rbp - 0x57], 0x58
xor r12b, 0x59
mov byte [rbp - 0x56], r12b
lea rdx, [rbp - 0x58]
lea rcx, [rsp + 0x60]
call fcn.140007b60
nop
test r15b, r15b
je 0x140002194
xor byte [rbp - 0x54], 0x57
xor byte [rbp - 0x53], 0x58
xor r15b, 0x59
mov byte [rbp - 0x52], r15b
lea rdx, [rbp - 0x54]
lea rcx, [rbp - 0x80]
call fcn.140007b60
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], 0xf
movups xmm0, xmmword [rbp - 0x38]
movups xmmword [rsp + 0x38], xmm0
lea r9, [rsp + 0x60]
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1400015f0
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14000220f
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002209
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002209
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140008afc
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140002250
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000224a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000224a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140008afc
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x140002286
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x140002281
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400022cc
mov rcx, r8
call fcn.140008afc
mov qword [rsi + 0x10], r13
mov rax, rbx
mov byte [rsi], 0
mov qword [rsi + 0x18], 0xf
mov rcx, qword [rbp + 0x7c0]
xor rcx, rsp
call fcn.140008aa0
lea r11, [rsp + 0x8f0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140001100
nop
call fcn.1400011a0
int3