Function at 0x14004f950
Capabilities:
Create http request
Get system information on windows

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
mov rax, qword [0x1400b9060]
xor rax, rsp
mov qword [rsp + 0x58], rax
xor ebx, ebx
mov dword [rsp + 0x30], 1
xorps xmm0, xmm0
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
lea edx, [rbx + 1]
movdqu xmmword [rsp + 0x38], xmm0
call qword [sym.imp.WININET.dll_InternetOpenA]
mov rdi, rax
test rax, rax
je 0x14004f9c0
lea r9d, [rbx + 0x18]
mov rcx, rax
lea r8, [rsp + 0x30]
lea edx, [rbx + 0x26]
call qword [sym.imp.WININET.dll_InternetSetOptionA]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop word [rax + rax]
mov rax, qword gs:[0x58]
mov ecx, 0x47c
mov r10d, 0x258
mov r9, qword [rax]
mov eax, dword [rcx + r9]
test al, 1
jne 0x14004fa34
movsd xmm0, qword [0x1400a94b0]
lea rdx, [rsp + 0x3a]
or eax, 1
movsd qword [rsp + 0x30], xmm0
mov dword [rcx + r9], eax
mov r8d, ebx
mov eax, dword [0x1400a94b8]
mov dword [rsp + 0x38], eax
xor eax, eax
mov ecx, r10d
add rcx, r9
mov qword [rcx], rbx
mov word [rcx + 8], bx
mov byte [rcx + 0xa], al
lea rax, [rsp + 0x3a]
sub rcx, rax
movzx eax, byte [rdx]
inc r8d
mov byte [rcx + rdx + 0xa], al
lea rdx, [rdx + 1]
cmp r8d, 1
jb 0x14004fa20
mov r8d, r10d
add r8, r9
cmp byte [r8 + 9], bl
jne 0x14004fab9
lea rdx, [r8 + 0xa]
mov r9d, ebx
nop word [rax + rax]
mov eax, dword [r8 + 4]
mov ecx, dword [r8]
lea r10d, [rax + 1]
cmp ecx, r10d
je 0x14004fa8f
lea r10d, [rax + 2]
cmp ecx, r10d
je 0x14004fa8f
cmp ecx, eax
je 0x14004fa9f
lea r10d, [rax + 4]
cmp ecx, r10d
jne 0x14004fa88
lea ecx, [rax + 3]
movzx eax, byte [rdx]
cmp eax, ecx
setne al
mov byte [rdx], al
inc dword [r8]
jmp 0x14004fa50
add eax, 5
cmp ecx, eax
jne 0x14004faad
movzx eax, byte [rdx]
cmp eax, r10d
setne al
mov byte [rdx], al
inc dword [r8]
jmp 0x14004fa50
movzx eax, byte [rdx]
lea ecx, [r9 - 0x73]
cmp eax, ecx
setne al
mov byte [rdx], al
inc r9d
inc rdx
cmp r9d, 1
jb 0x14004fa50
movzx eax, byte [r8 + 0xa]
lea r9, [rsp + 0x50]
mov byte [r8 + 9], 1
lea rdx, [rsp + 0x30]
mov r8d, 8
mov byte [0x140287af6], al
mov qword [rsp + 0x30], 8
mov dword [rsp + 0x50], ebx
lea ecx, [r8 + 0x5f]
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x14004fb9f
cmp dword [rsp + 0x50], 8
jne 0x14004fb9f
test byte [rsp + 0x34], 2
je 0x14004fb9f
call fcn.14004fbe0
mov r9, rax
cmp byte [rax + 9], bl
jne 0x14004fbb7
nop
mov ecx, dword [r9 + 4]
mov r8d, dword [r9]
lea edx, [rcx + 1]
cmp r8d, edx
jne 0x14004fb3e
movsxd rax, ebx
inc cl
xor byte [rax + r9 + 0xa], cl
inc dword [r9]
jmp 0x14004fb20
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x14004fb56
movsxd rax, ebx
add cl, 2
xor byte [rax + r9 + 0xa], cl
inc dword [r9]
jmp 0x14004fb20
cmp r8d, ecx
je 0x14004fb8b
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x14004fb73
movsxd rax, ebx
add cl, 3
xor byte [rax + r9 + 0xa], cl
inc dword [r9]
jmp 0x14004fb20
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x14004fb96
movsxd rax, ebx
add cl, 4
xor byte [rax + r9 + 0xa], cl
inc dword [r9]
jmp 0x14004fb20
movsxd rcx, ebx
lea eax, [rbx - 0x72]
xor byte [rcx + r9 + 0xa], al
inc ebx
cmp ebx, 0x1a
jae 0x14004fbb7
jmp 0x14004fb20
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.140095530
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret
lea rdx, [r9 + 0xa]
mov byte [r9 + 9], 1
lea rcx, [rsp + 0x30]
call fcn.140045ac0
mov rcx, rax
call fcn.14004f5f0
int3