Function at 0x180004400
Capabilities:
Connect to http server
Create http request
Read data from internet
Receive data
Send data
Send http request

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7a0]
sub rsp, 0x8a0
mov rax, qword [0x180017040]
xor rax, rsp
mov qword [rbp + 0x790], rax
mov rdi, rdx
mov rsi, rcx
mov qword [rsp + 0x78], rcx
mov qword [rbp - 0x80], rdx
mov dword [rsp + 0x40], 1
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
xor ebx, ebx
mov qword [rcx + 0x10], rbx
mov qword [rcx + 0x18], rbx
xor r8d, r8d
lea rdx, [0x18001183a]
call fcn.180003220
nop
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, [0x18001183a]
call qword [sym.imp.WININET.dll_InternetOpenA]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x180004781
mov r8d, 0x50
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea rdx, str.xzyph.cc
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetConnectA]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x180004781
mov r15, qword [rdi + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 1
jb 0x1800047fa
mov r13, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x180004501
mov r13, qword [rdi]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
lea r12, [r15 + 1]
mov ebx, 0xf
lea r14, [rsp + 0x48]
cmp r12, rbx
jbe 0x1800045a0
mov rbx, r12
or rbx, 0xf
cmp rbx, rcx
jbe 0x180004561
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18000ecc4
test rax, rax
je 0x180004643
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x18000459b
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x18000457b
xor r14d, r14d
jmp 0x18000459b
cmp rcx, 0x1000
jb 0x180004593
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180004800
jmp 0x180004542
call fcn.18000ecc4
mov r14, rax
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], rbx
mov byte [r14], 0x2f
lea rcx, [r14 + 1]
mov r8, r15
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + r12], 0
mov dword [rsp + 0x40], 3
lea r8, [rsp + 0x48]
cmp qword [rsp + 0x60], 0xf
cmova r8, qword [rsp + 0x48]
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x80000000
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea rdx, [0x1800118ac]
mov r12, qword [rsp + 0x68]
mov rcx, r12
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov r15, rax
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x18000464f
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000464a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000464a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000ec90
movdqa xmm0, xmmword [0x180012080]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], bl
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x390]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x390]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], bl
jne 0x180004683
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x390]
mov r8d, 0x17
lea rdx, str.Content_Type:_text_html
mov rcx, r15
call qword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
je 0x180004781
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp - 0x70]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp - 0x78], ebx
lea r9, [rbp - 0x78]
mov r8d, 0x3ff
lea rdx, [rbp - 0x70]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x180004763
mov eax, dword [rbp - 0x78]
test eax, eax
je 0x180004761
mov r14d, eax
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x180004732
lea rax, [rcx + r14]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0xf
jbe 0x180004718
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8, r14
lea rdx, [rbp - 0x70]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + r14], 0
jmp 0x180004746
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x70]
mov rdx, r14
mov rcx, rsi
call fcn.18000e5d0
lea r9, [rbp - 0x78]
mov r8d, 0x3ff
lea rdx, [rbp - 0x70]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x1800046e7
xor ebx, ebx
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x1800047b7
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1800047b2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800047f3
mov rcx, r8
call fcn.18000ec90
mov byte [rdi], 0
mov qword [rdi + 0x18], 0xf
mov rax, rsi
mov qword [rdi + 0x10], rbx
mov rcx, qword [rbp + 0x790]
xor rcx, rsp
call fcn.18000ec70
mov rbx, qword [rsp + 0x8f0]
add rsp, 0x8a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.180002320
nop
call fcn.180002280
int3