Function at 0x140001a80
Capabilities:
Connect to http server
Create http request
Read data from internet
Receive data
Reference http user-agent string
Send data
Send http request

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rdi
push r13
push r15
sub rsp, 0x70
xor r13d, r13d
lea rcx, str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_128.0.0.0_Safari_537.36
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WININET.dll_InternetOpenW]
mov qword [rsp + 0x38], r13
lea r9, [0x140003170]
mov dword [rsp + 0x30], r13d
lea rdx, str.localhost
mov dword [rsp + 0x28], 3
mov rcx, rax
mov r8d, 0x1bb
mov qword [rsp + 0x20], r9
mov rbp, rax
mov qword [rsp + 0x40], rax
call qword [sym.imp.WININET.dll_InternetConnectW]
mov qword [rsp + 0x38], r13
lea r8, [0x14000318c]
mov dword [rsp + 0x30], 0x803000
lea rdx, [0x140003190]
mov qword [rsp + 0x28], r13
mov rcx, rax
xor r9d, r9d
mov qword [rsp + 0x20], r13
mov rdi, rax
mov qword [rsp + 0xb8], rax
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov r9d, 4
mov dword [rsp + 0xb0], 0x3100
mov rcx, rax
lea r8, [rsp + 0xb0]
mov edx, 0x1f
mov r15, rax
call qword [sym.imp.WININET.dll_InternetSetOptionW]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
xor edx, edx
mov rcx, r15
movzx ebx, r13w
call qword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
jne 0x140001ba0
mov ecx, 0x3e8
inc bx
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp bx, 3
jae 0x140001bf5
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
je 0x140001b72
mov qword [rsp + 0x60], r12
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov r8d, 0x200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r12, rax
test rax, rax
jne 0x140001c03
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rbp
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r12, qword [rsp + 0x60]
xor eax, eax
add rsp, 0x70
pop r15
pop r13
pop rdi
pop rbp
pop rbx
ret
xor eax, eax
add rsp, 0x70
pop r15
pop r13
pop rdi
pop rbp
pop rbx
ret
mov qword [rsp + 0x68], rsi
mov edi, r13d
mov qword [rsp + 0x58], r14
mov r14d, 0x200
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov r8d, r14d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rsi, rax
test rax, rax
jne 0x140001c43
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r12
jmp 0x140001d39
lea r9, [rsp + 0xb0]
mov r8d, r14d
mov rdx, r12
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x140001d1c
nop dword [rax]
nop word [rax + rax]
mov ecx, dword [rsp + 0xb0]
test ecx, ecx
je 0x140001dc7
lea eax, [rcx + rdi]
cmp eax, r14d
jbe 0x140001cdd
add r14d, r14d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8d, r14d
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbp, rax
test rax, rax
je 0x140001d81
mov r8d, edi
mov rdx, rsi
mov rcx, rax
mov ebx, edi
call fcn.140002170
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, dword [rsp + 0xb0]
mov rsi, rbp
jmp 0x140001cdf
mov ebx, edi
mov r8d, ecx
mov rdx, r12
lea rcx, [rbx + rsi]
call fcn.140002170
add edi, dword [rsp + 0xb0]
lea r9, [rsp + 0xb0]
mov r8d, 0x200
mov rdx, r12
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x140001c70
mov rbp, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rbp
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor eax, eax
mov rsi, qword [rsp + 0x68]
mov r14, qword [rsp + 0x58]
mov r12, qword [rsp + 0x60]
add rsp, 0x70
pop r15
pop r13
pop rdi
pop rbp
pop rbx
ret
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x40]
jmp 0x140001d5e
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rax, qword [rsp + 0xa0]
test edi, edi
setne r13b
mov qword [rax], rsi
mov rax, qword [rsp + 0xa8]
mov dword [rax], edi
mov eax, r13d
jmp 0x140001d66