Function at 0x140009590
Capabilities:
Create http request
Read data from internet
Receive data
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x5e0
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1401ba600]
xor rax, rsp
mov qword [rbp + 0x580], rax
mov r14, rcx
lea rcx, [rbp + 0x88]
call fcn.1400088d0
nop
movabs rax, 0xde41aa9a50a601a4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x94b00d1920aa6ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0x16ab989980c194f5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs r13, 0x9d88b070d465fc78
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rdi, 0xde33aaff50d501f1
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rsi, 0x92e00b6924ba686
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs r15, 0x16ab989980b5949b
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqu ymmword [rbp + 0x120], ymm1
xor ebx, ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, [rbp + 0x120]
vzeroupper
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r12, rax
test rax, rax
jne 0x140009827
movabs rax, 0xb1528a9e38b960b7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x685a63d3fc24c5a6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x36cab8f4efd6b4e9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0x9d88b070fa2cac39
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0xc0], ymm1
mov r9d, reloc.WS2_32.dll_recv
lea r8, [0x1401977bc]
lea rdx, [rbp + 0xc0]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x1400097f5
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400097f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a16f
call fcn.14013fd60
xor al, al
mov rcx, qword [rbp + 0x580]
xor rcx, rsp
call fcn.14013fd40
lea r11, [rsp + 0x5e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movabs rax, 0xde43aa8b50a10199
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x90100999271a6f5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x16df98ea80d494eb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x9de6b019d407fc1d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0x55cbb34436ae73fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x15cfeba334e88715
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x821874d3a11c6960
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x20902b17655bf6e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0x69b29ce76aa5750d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rcx, 0x1ab8a11e7936248e
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0x55a6b32b36cd73d5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0x15b8ebc2349a873a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0x826e74b5a17b694f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0x27c02dc760fbf0c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movabs rax, 0x69b29ce76aa57579
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0x20], ymm1
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqa xmm0, xmmword [rbp + 0x60]
vxorps xmm0, xmm0, xmmword [rbp + 0x100]
vmovdqa xmmword [rbp + 0x60], xmm0
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x20]
mov rcx, r12
vzeroupper
call qword [sym.imp.WININET.dll_InternetOpenUrlW]
mov r15, rax
test rax, rax
jne 0x140009b15
movabs rax, 0xb1528a9e38b960b7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x7b4f73c5f728c7a6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x1685d1c9c195f5bb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0x16ab989980b5949b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x160]
vmovdqa ymmword [rbp + 0xc0], ymm1
mov r9d, reloc.WS2_32.dll_recv
lea r8, [0x1401977c0]
lea rdx, [rbp + 0xc0]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x1400097b4
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], rbx
mov esi, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xd8], rsi
mov byte [rbp + 0xc0], bl
lea r9, [rbp + 0x80]
mov r8d, 0x400
lea rdx, [rbp + 0x180]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x140009c03
nop dword [rax]
mov eax, dword [rbp + 0x80]
test eax, eax
je 0x140009c03
mov edi, eax
mov rax, rsi
sub rax, rbx
cmp rdi, rax
ja 0x140009bb4
lea rax, [rbx + rdi]
mov qword [rbp + 0xd0], rax
lea rax, [rbp + 0xc0]
cmp rsi, 0xf
cmova rax, qword [rbp + 0xc0]
add rbx, rax
mov r8d, edi
lea rdx, [rbp + 0x180]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x140009bcf
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x180]
mov rdx, rdi
lea rcx, [rbp + 0xc0]
call fcn.140013830
lea r9, [rbp + 0x80]
mov r8d, 0x400
lea rdx, [rbp + 0x180]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x140009c03
mov rsi, qword [rbp + 0xd8]
mov rbx, qword [rbp + 0xd0]
jmp 0x140009b60
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], rax
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0xa8]
call fcn.140008bb0
nop
mov rbx, qword [rbp + 0xa8]
mov rdi, qword [rbp + 0xb0]
cmp rbx, rdi
je 0x140009c8f
mov rsi, qword [r14 + 0x18]
mov r15, qword [r14 + 0x10]
mov rdx, r14
cmp rsi, 0xf
jbe 0x140009c63
mov rdx, qword [r14]
mov r8, qword [rbx + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140009c74
mov rcx, qword [rbx]
cmp r8, r15
jne 0x140009c86
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009d7f
add rbx, 0x48
cmp rbx, rdi
jne 0x140009c57
movabs rax, 0xbf45c4b670ac64ba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0x92e00b6f32fcfea
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0xde33aaff50d501f1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x92e00b6924ba686
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x160]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x160], xmm0
mov r9d, reloc.WS2_32.dll_recv
lea r8, [0x1401977c4]
lea rdx, [rbp + 0x160]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rbp + 0xa8]
call fcn.14000ee60
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x14000a12b
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a125
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a125
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
cmp byte [rbx + 0x41], 0
je 0x140009efe
call fcn.140008130
movabs rax, 0xaa40cfdfbab66ea7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x68426296f3258667
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0x3685eceae9d9fff8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0xf3a8df03a7009f39
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0x55a6924452ac14b0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rcx, 0x15b8ebc2349a873a
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs rax, 0xde33aaff50d501f1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x92e00b6924ba686
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x16ab989980b5949b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0x55a6b32b36cd73d5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0x120], ymm1
vmovdqa xmm2, xmmword [rbp + 0x140]
vxorps xmm2, xmm2, xmmword [rbp + 0xe0]
vmovdqa xmmword [rbp + 0x140], xmm2
mov r9d, reloc.WS2_32.dll_recv
lea r8, [0x1401977c0]
lea rdx, [rbp + 0x120]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, [rbx + 0x20]
lea rdx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0xf
cmova rdx, qword [rbp + 0x88]
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140009f27
mov rcx, qword [rcx]
cmp r8, qword [rbp + 0x98]
jne 0x140009fd8
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140009fd8
lea rcx, [rbp + 0xa8]
call fcn.14000ee60
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140009f90
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009f8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009d78
call fcn.14013fd60
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x140009fd1
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009fcc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a16f
call fcn.14013fd60
mov al, 1
jmp 0x1400097f7
movabs rax, 0xbd5dc3df149c56b9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x6c58edc2f33bcbe9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0x36c4ecfcf2c5b4f7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0x9d88b051bb0f890b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0xde33aaff50d501f1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0x92e00b6924ba686
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0x16ab989980b5949b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x160]
vmovdqa ymmword [rbp + 0x120], ymm1
mov r9d, reloc.WS2_32.dll_recv
lea r8, [0x1401977c0]
lea rdx, [rbp + 0x120]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rbp + 0xa8]
call fcn.14000ee60
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x1400097b4
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a11b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009d78
call fcn.14013fd60
jmp 0x1400097b4
call fcn.14013fd60
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x1400097f5
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400097f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400097f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3