Function at 0x140001180
Capabilities:
Create http request
Download and write a file
Read data from internet
Receive and write data from server to client
Receive data
Write file on windows

Disassembly:
push rbx
push rbp
push r15
mov eax, 0x1070
call fcn.140002900
sub rsp, rax
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x1050], rax
mov rbx, rdx
lea rcx, str.Downloader
xor r15d, r15d
mov edx, 1
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
call qword [sym.imp.WININET.dll_InternetOpenW]
mov rbp, rax
test rax, rax
je 0x1400013ef
mov qword [rsp + 0x28], r15
lea rdx, str.https:__www.dropbox.com_scl_fi_5zdocsjvo0wo8aw1pwfiu_HwidSpoofer.exe_rlkeyn6qn3l6jvdfbwpxar1cqeb5ejst66hi7ct1dl1
xor r9d, r9d
mov dword [rsp + 0x20], 0x4000000
xor r8d, r8d
mov qword [rsp + 0x10a0], rdi
mov rcx, rbp
call qword [sym.imp.WININET.dll_InternetOpenUrlW]
mov rdi, rax
test rax, rax
jne 0x140001216
mov rcx, rbp
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor al, al
jmp 0x1400013e7
mov qword [rsp + 0x30], r15
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0x40000000
mov dword [rsp + 0x20], 2
mov rcx, rbx
mov qword [rsp + 0x10a8], r14
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
mov rcx, rdi
cmp rax, 0xffffffffffffffff
jne 0x140001269
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rbp
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor al, al
jmp 0x1400013df
mov qword [rsp + 0x1090], rsi
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x40]
mov dword [rsp + 0x40], r15d
mov edx, 5
mov dword [rsp + 0x48], 4
mov esi, r15d
mov qword [rsp + 0x20], r15
call qword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
jne 0x1400012a4
mov dword [rsp + 0x40], r15d
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Downloading_required_files._This_should_not_take_more_than_a_few_seconds.
call fcn.140001740
lea rdx, [0x140001920]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r9, [rsp + 0x44]
mov r8d, 0x1000
lea rdx, [rsp + 0x50]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1400013a6
movaps xmmword [rsp + 0x1060], xmm6
movsd xmm6, qword [0x140003678]
nop dword [rax + rax]
mov r8d, dword [rsp + 0x44]
test r8d, r8d
je 0x14000139e
lea r9, [rsp + 0x4c]
mov qword [rsp + 0x20], r15
lea rdx, [rsp + 0x50]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [rsp + 0x40]
add esi, dword [rsp + 0x44]
test ecx, ecx
je 0x14000137d
xorps xmm1, xmm1
mov eax, esi
xorps xmm0, xmm0
lea rdx, str._rProgress:
cvtsi2sd xmm0, rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cvtsi2sd xmm1, rax
divsd xmm1, xmm0
mulsd xmm1, xmm6
cvttsd2si ebx, xmm1
call fcn.140001740
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x14000347c]
call fcn.140001740
lea r9, [rsp + 0x44]
mov r8d, 0x1000
lea rdx, [rsp + 0x50]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x140001300
movaps xmm6, xmmword [rsp + 0x1060]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140001920]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rbp
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rsi, qword [rsp + 0x1090]
mov al, 1
mov r14, qword [rsp + 0x10a8]
mov rdi, qword [rsp + 0x10a0]
mov rcx, qword [rsp + 0x1050]
xor rcx, rsp
call fcn.140001970
add rsp, 0x1070
pop r15
pop rbp
pop rbx
ret