Function at 0x18000f22c
Capabilities:
Check http status code
Read data from internet
Receive data

Disassembly:
mov rax, rsp
push rbx
push rsi
push rdi
sub rsp, 0xa0
and dword [rax + 8], 0
mov rdi, rcx
mov rcx, qword [rcx + 0x30]
mov esi, edx
mov edx, 0x2710
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebx, eax
test eax, eax
jne 0x18000f4d8
mov ebx, dword [rdi + 0x40]
test ebx, ebx
jne 0x18000f4d8
test esi, esi
je 0x18000f302
and dword [rsp + 0xd8], ebx
and dword [rsp + 0xd0], ebx
mov rcx, qword [rdi + 0x28]
xor r8d, r8d
lea rax, [rsp + 0xd8]
lea r9, [rsp + 0xd0]
lea ebx, [r8 + 0x16]
mov qword [rsp + 0x20], rax
mov edx, ebx
call qword [sym.imp.WININET.dll_HttpQueryInfoA]
movsxd r11, dword [rsp + 0xd0]
test r11d, r11d
je 0x18000f302
mov rcx, qword [0x180023a50]
lea r8, [r11 + 1]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rdi + 8], rax
test rax, rax
je 0x18000f302
lea rcx, [rsp + 0xd8]
lea r9, [rsp + 0xd0]
mov r8, rax
mov qword [rsp + 0x20], rcx
mov rcx, qword [rdi + 0x28]
mov edx, ebx
call qword [sym.imp.WININET.dll_HttpQueryInfoA]
movsxd r11, dword [rsp + 0xd0]
mov rax, qword [rdi + 8]
mov byte [r11 + rax], 0
mov ebx, 8
lea r8, [rsp + 0x38]
xor ecx, ecx
lea edx, [rbx - 7]
call qword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
test eax, eax
jne 0x18000f4d8
mov rcx, qword [0x180023a50]
xor edx, edx
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rsi, rax
test rax, rax
je 0x18000f4cd
mov rcx, qword [rdi + 0x30]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rcx, qword [rdi + 0x28]
lea r9, [rsp + 0xc0]
mov r8d, 0x1000
mov rdx, rsi
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x18000f392
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, 0x3e5
jne 0x18000f3b4
mov rcx, qword [rdi + 0x30]
or edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebx, eax
test eax, eax
jne 0x18000f3b4
mov ebx, dword [rdi + 0x40]
test ebx, ebx
jne 0x18000f3b4
mov r8d, dword [rsp + 0xc0]
test r8d, r8d
je 0x18000f3b2
mov rcx, qword [rsp + 0x38]
xor r9d, r9d
mov rdx, rsi
mov rax, qword [rcx]
call qword [rax + 0x20]
jmp 0x18000f340
xor ebx, ebx
mov rcx, qword [0x180023a50]
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
test ebx, ebx
jne 0x18000f4cd
mov rcx, qword [rdi + 0x28]
and dword [rsp + 0xd8], ebx
lea rax, [rsp + 0xd8]
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0x30]
mov edx, 0x20000013
mov qword [rsp + 0x20], rax
mov dword [rsp + 0xd0], 4
call qword [sym.imp.WININET.dll_HttpQueryInfoA]
test eax, eax
je 0x18000f4c8
cmp dword [rsp + 0x30], 0xc8
jne 0x18000f4c8
mov rcx, qword [rsp + 0x38]
lea r8d, [rbx + 1]
lea rdx, [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov r11d, dword [rsp + 0x60]
mov dword [rsp + 0xc0], r11d
test r11d, r11d
je 0x18000f4c1
mov rcx, qword [rsp + 0x38]
and dword [rsp + 0x40], ebx
and dword [rsp + 0x44], ebx
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
call qword [rax + 0x28]
movsxd r8, dword [rsp + 0xc0]
mov rcx, qword [0x180023a50]
inc r8
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rsi, rax
test rax, rax
je 0x18000f4ba
mov rcx, qword [rsp + 0x38]
mov r8d, dword [rsp + 0xc0]
xor r9d, r9d
mov r10, qword [rcx]
mov rdx, rax
call qword [r10 + 0x18]
movsxd r11, dword [rsp + 0xc0]
mov byte [r11 + rsi], bl
mov eax, dword [rsp + 0xc0]
mov qword [rdi], rsi
mov dword [rdi + 0x44], eax
jmp 0x18000f4cd
mov ebx, 8
jmp 0x18000f4cd
mov ebx, 0x10d2
jmp 0x18000f4cd
mov ebx, 0xe8
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebx
add rsp, 0xa0
pop rdi
pop rsi
pop rbx
ret