Function at 0x140001730
Capabilities:
Connect to http server
Create http request
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x4f8
xor r9d, r9d
movabs rax, 0x44c6ee5d75c2565f
movabs r12, 0x76d397bb1425e99c
movabs r14, 0x75e8df7225960217
mov qword [rsp + 0x48], r12
mov rdi, rcx
mov rsi, rdx
mov r15d, r8d
mov qword [rsp + 0xa0], rax
xor r8d, r8d
lea rbx, [rsp + 0xa0]
lea r13, [rsp + 0x4bf]
mov qword [rsp + 0xa8], r12
mov edx, 1
mov rcx, rbx
and r13, 0xffffffffffffffe0
mov qword [rsp + 0x40], r14
vmovdqa xmm1, xmmword [rsp + 0x40]
vpxor xmm0, xmm1, xmmword [rsp + 0xa0]
mov dword [rsp + 0x20], 0
vmovdqa xmmword [rsp + 0xa0], xmm0
call qword [sym.imp.WININET.dll_InternetOpenA]
mov rbp, rax
test rax, rax
je 0x140001bc0
mov qword [rsp + 0x38], 0
xor r9d, r9d
mov rcx, rax
mov rdx, qword [0x140018100]
mov dword [rsp + 0x30], 0
mov r8d, 0x1bb
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], 0
call qword [sym.imp.WININET.dll_InternetConnectA]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140001bd0
mov qword [rsp + 0x40], r14
mov rcx, rax
xor r9d, r9d
mov rdx, rbx
movabs rax, 0x75e8df7225c24750
mov qword [rsp + 0x48], r12
vmovdqa xmm2, xmmword [rsp + 0x40]
mov qword [rsp + 0xa8], r12
mov qword [rsp + 0xa0], rax
vpxor xmm0, xmm2, xmmword [rsp + 0xa0]
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x80800000
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r8, qword [rdi]
vmovdqa xmmword [rsp + 0xa0], xmm0
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov rdi, rax
test rax, rax
je 0x140001be8
imul r15d, r15d, 0x3e8
mov r9d, 4
lea r8, [rsp + 0x78]
mov rcx, rax
mov edx, 6
mov dword [rsp + 0x78], r15d
call qword [sym.imp.WININET.dll_InternetSetOptionA]
mov qword [r13 + 0x20], r14
mov rcx, r13
movabs rax, 0x589cb11751f86d54
mov qword [r13], rax
movabs rax, 0x13a7b781715590c8
mov qword [r13 + 8], rax
movabs rax, 0x89d3b22c3acd0871
mov qword [r13 + 0x10], rax
movabs rax, 0x1ed4e1d9dcb3747c
mov qword [r13 + 0x18], rax
vmovdqa ymm3, ymmword [r13]
movabs rax, 0x84bfdf5852e27c09
mov qword [r13 + 0x30], rax
movabs rax, 0x1ed4e1d9dcb37476
mov qword [r13 + 0x38], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x90]
mov qword [r13 + 0x28], r12
vpxor ymm0, ymm3, ymmword [r13 + 0x20]
mov r12, rax
mov qword [rsp + 0x80], rax
vmovdqa ymmword [r13], ymm0
vmovdqu ymmword [rsp + 0x40], ymm0
vzeroupper
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
vmovdqu ymm0, ymmword [rsp + 0x40]
cmp rax, 0xf
mov qword [rsp + 0xa0], rax
mov r14, rax
ja 0x140001aa8
cmp rax, 1
jne 0x140001b40
vpextrb byte [rsp + 0x90], xmm0, 0
mov rdx, r12
vzeroupper
mov qword [rsp + 0x88], rax
xor r9d, r9d
mov rcx, rdi
mov byte [rdx + rax], 0
mov rax, qword [rsp + 0x88]
mov dword [rsp + 0x20], 0
mov rdx, qword [rsp + 0x80]
lea r8d, [rax - 1]
call qword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
je 0x140001b58
mov rax, qword [rsi]
mov qword [rsi + 8], 0
lea r14, [rsp + 0x7c]
movabs r15, 0x3fffffffffffffff
mov r13, qword [sym.imp.WININET.dll_InternetReadFile]
mov byte [rax], 0
jmp 0x140001a36
mov eax, dword [rsp + 0x7c]
test eax, eax
je 0x140001a54
mov rcx, rbx
mov byte [rsp + rax + 0xa0], 0
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r8, rax
mov rax, r15
sub rax, qword [rsi + 8]
cmp rax, r8
jb 0x140001c1d
mov rdx, rbx
mov rcx, rsi
call fcn.14000bae0
mov r9, r14
mov r8d, 0x3ff
mov rdx, rbx
mov rcx, rdi
mov dword [rsp + 0x7c], 0
call r13
test eax, eax
jne 0x140001a00
mov rbx, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call rbx
mov rcx, qword [rsp + 0x60]
call rbx
mov rcx, rbp
call rbx
mov ebx, 0xe8
mov rcx, qword [rsp + 0x80]
cmp rcx, r12
je 0x140001a8f
mov rax, qword [rsp + 0x90]
lea rdx, [rax + 1]
call sub.libstdc_6.dll_operator_delete_void__unsigned_long_long_
mov eax, ebx
add rsp, 0x4f8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x68]
xor r8d, r8d
mov rdx, rbx
vzeroupper
call fcn.14000bad0
mov rdx, qword [rsp + 0xa0]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x90], rdx
cmp r14d, 8
jb 0x140001b90
mov rdx, qword [r13]
mov qword [rax], rdx
mov edx, r14d
mov rcx, qword [r13 + rdx - 8]
mov qword [rax + rdx - 8], rcx
lea rdx, [rax + 8]
and rdx, 0xfffffffffffffff8
sub rax, rdx
add r14d, eax
sub r13, rax
and r14d, 0xfffffff8
cmp r14d, 8
jb 0x140001b25
and r14d, 0xfffffff8
xor eax, eax
mov ecx, eax
add eax, 8
mov r8, qword [r13 + rcx]
mov qword [rdx + rcx], r8
cmp eax, r14d
jb 0x140001b12
mov rax, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0x80]
jmp 0x140001998
test rax, rax
je 0x140001992
mov rax, r12
vzeroupper
jmp 0x140001ad3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rbx, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov esi, eax
mov rcx, rdi
call rbx
mov rcx, qword [rsp + 0x60]
call rbx
mov rcx, rbp
call rbx
xor ebx, ebx
cmp esi, 0x2ee2
sete bl
lea ebx, [rbx*4 + 0xe3]
jmp 0x140001a71
test r14b, 4
jne 0x140001c05
test r14d, r14d
je 0x140001b25
movzx edx, byte [r13]
mov byte [rax], dl
test r14b, 2
je 0x140001b25
mov r14d, r14d
movzx edx, word [r13 + r14 - 2]
mov word [rax + r14 - 2], dx
jmp 0x140001b25
mov ebx, 0xe6
jmp 0x140001a8f
mov rcx, rbp
mov ebx, 0xe5
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x140001a8f
mov rbx, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x60]
call rbx
mov rcx, rbp
call rbx
mov ebx, 0xe4
jmp 0x140001a8f
mov edx, dword [r13]
mov r14d, r14d
mov dword [rax], edx
mov edx, dword [r13 + r14 - 4]
mov dword [rax + r14 - 4], edx
jmp 0x140001b25
lea rcx, str.basic_string::append
call fcn.14000ba48
mov rbx, rax
jmp 0x14000ffb0
mov rcx, qword [rsp + 0x68]
vzeroupper
call fcn.14000bb00
mov rcx, rbx
call sub.libgcc_s_seh_1.dll__Unwind_Resume
nop
mov rcx, qword [rsp + 0x78]
vzeroupper
call fcn.14000bb00
mov rcx, rbx
call sub.libgcc_s_seh_1.dll__Unwind_Resume
nop
mov rcx, qword [rsp + 0x68]
vzeroupper
call fcn.14000bb00
mov rcx, rbx
call sub.libgcc_s_seh_1.dll__Unwind_Resume
nop
xor ecx, ecx
vzeroupper
call sub.gdiplus.dll_GdipDisposeImage
mov rcx, r15
call fcn.14000bab8
mov rcx, rbx
call sub.libgcc_s_seh_1.dll__Unwind_Resume
mov rcx, r13
vzeroupper
call sub.gdiplus.dll_GdipDisposeImage
jmp 0x14000fffc