Function at 0x1400f0410
Capabilities:
Create http request
Encode data using xor
Read data from internet
Receive data
Reference http user-agent string

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x670
mov rax, qword [0x14072a340]
xor rax, rsp
mov qword [rsp + 0x660], rax
mov r14, rdx
mov qword [rsp + 0x38], rdx
xor esi, esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov r15d, 1
mov edx, r15d
lea rcx, str.Mozilla_5.0
call qword [sym.imp.WININET.dll_InternetOpenA]
mov r13, rax
test rax, rax
jne 0x1400f04bb
lea rdx, [0x1405725d8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400063d0
lea rdx, [0x1400065a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], rsi
lea r8d, [rsi + 5]
lea rdx, str.34.99
mov rcx, r14
call fcn.140006600
mov rax, r14
jmp 0x1400f0b44
mov dword [rsp + 0x1b0], 0x2a24242a
mov dword [rsp + 0x1b4], 0x7fffb9ea
mov dword [rsp + 0x1b8], 0xb47db731
mov dword [rsp + 0x1bc], 0x767e8041
mov dword [rsp + 0x1c0], 0x4504c531
mov dword [rsp + 0x1c4], 0x681b242
mov dword [rsp + 0x1c8], 0xea8eded
mov dword [rsp + 0x1cc], 0x6a5a299a
mov dword [rsp + 0x1d0], 0x1b35d9d8
mov dword [rsp + 0x1d4], 0xd2a9afa9
mov dword [rsp + 0x1d8], 0x1e115daa
mov dword [rsp + 0x1dc], 0x56d71e52
mov dword [rsp + 0x1e0], 0xc68c8490
mov dword [rsp + 0x1e4], 0xbe813f04
mov dword [rsp + 0x1e8], 0x7d5f87bd
mov dword [rsp + 0x1ec], 0x3cba3baa
mov dword [rsp + 0x1f0], 0xd0b80895
mov dword [rsp + 0x1f4], 0x933fbf4e
mov dword [rsp + 0x1f8], 0xbf7c42bd
mov dword [rsp + 0x1fc], 0x38825181
mov dword [rsp + 0x200], 0xec43d084
mov dword [rsp + 0x204], 0xf80c43d
mov dword [rsp + 0x208], 0x585dffaf
mov dword [rsp + 0x20c], 0xe41b5a18
mov dword [rsp + 0x210], 0x5c8be699
mov dword [rsp + 0x214], 0xf2cfdfdf
mov dword [rsp + 0x218], 0x9271df31
mov dword [rsp + 0x21c], 0xf413f2c3
mov dword [rsp + 0x220], 0xa32387e3
mov dword [rsp + 0x224], 0x3c7fff62
mov dword [rsp + 0x228], 0x6f882fdf
mov dword [rsp + 0x22c], 0xbc6c905
mov dword [rsp + 0x230], 0x3a757ce4
mov dword [rsp + 0x234], 0xfd3f7dba
mov dword [rsp + 0x238], 0x37c3fbc
mov dword [rsp + 0x23c], 0x84c2fe3c
mov dword [rsp + 0x240], 0x9ef375b2
mov byte [rsp + 0x244], reloc.WLDAP32.dll_Ordinal_22
mov ecx, esi
lea rdx, [rsp + 0x1b0]
movzx eax, byte [rdx]
dec al
ror al, 6
add al, 0x24
xor al, cl
not al
add al, cl
not al
sub al, 0x30
xor al, 0x39
not al
sub al, cl
xor al, 0xc9
sub al, cl
not al
mov byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x95
jb 0x1400f0664
xorps xmm0, xmm0
movups xmmword [rsp + 0x190], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1a0], xmm1
lea rax, [rsp + 0x1b0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], sil
jne 0x1400f06c0
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x190]
call fcn.140006600
nop
lea rdx, [rsp + 0x190]
cmp qword [rsp + 0x1a8], 0xf
cmova rdx, qword [rsp + 0x190]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov r12, rax
test rax, rax
jne 0x1400f075f
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], rsi
lea r8d, [r12 + 5]
lea rdx, str.34.99
mov rcx, r14
call fcn.140006600
nop
lea rcx, [rsp + 0x190]
call fcn.1400062c0
mov rax, r14
jmp 0x1400f0b44
xorps xmm0, xmm0
movups xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x168], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x150], 0
lea r9, [rsp + 0x138]
mov r8d, 0x400
lea rdx, [rsp + 0x250]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1400f0873
movzx ebx, byte [rsp + 0x30]
nop dword [rax]
nop word [rax + rax]
mov eax, dword [rsp + 0x138]
test eax, eax
je 0x1400f0871
mov esi, eax
mov rcx, qword [rsp + 0x160]
mov rdx, qword [rsp + 0x168]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1400f0829
lea rax, [rsi + rcx]
mov qword [rsp + 0x160], rax
lea rdi, [rsp + 0x150]
cmp rdx, 0xf
cmova rdi, qword [rsp + 0x150]
add rdi, rcx
mov r8d, esi
lea rdx, [rsp + 0x250]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
jmp 0x1400f084a
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x250]
movzx r8d, bl
mov rdx, rsi
lea rcx, [rsp + 0x150]
call fcn.140025490
lea r9, [rsp + 0x138]
mov r8d, 0x400
lea rdx, [rsp + 0x250]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x1400f07c0
xor esi, esi
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
xor edx, edx
lea rcx, [rsp + 0x140]
call fcn.140094fe0
nop
mov qword [rsp + 0xc0], rsi
lea r8, [rsp + 0x88]
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x40]
call fcn.1400e9840
movzx edx, byte [rsp + 0x140]
movzx ecx, byte [rax]
mov byte [rsp + 0x140], cl
mov byte [rax], dl
lea rcx, [rax + 8]
mov rax, qword [rsp + 0x148]
mov r8, qword [rcx]
mov qword [rsp + 0x148], r8
mov qword [rcx], rax
call fcn.140094ac0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
movdqa xmm1, xmmword [0x140573a00]
movdqu xmmword [rsp + 0x180], xmm1
mov byte [rsp + 0x170], 0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
mov r8d, 7
lea rdx, str.product
lea rcx, [rsp + 0x60]
call fcn.140006600
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x140]
call fcn.1400937e0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rsi
mov r8d, 8
lea rdx, str.variants
lea rcx, [rsp + 0x40]
call fcn.140006600
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.1400937e0
mov rdi, rax
cmp byte [rax], 0
jne 0x1400f09a5
mov byte [rax], 2
mov ecx, SafeArrayPutElement
call fcn.1402cf390
mov qword [rax], rsi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rsi
mov qword [rdi + 8], rax
cmp byte [rdi], 2
jne 0x1400f0bb6
mov rsi, qword [rdi + 8]
mov rbx, qword [rsi + 8]
mov rdx, qword [rsi]
mov rcx, rbx
sub rcx, rdx
sar rcx, 4
test rcx, rcx
jne 0x1400f0a09
mov rax, qword [rsi + 0x10]
sub rax, rdx
sar rax, 4
cmp rax, 1
jae 0x1400f09e3
mov rcx, rsi
call fcn.1400f4420
jmp 0x1400f0a09
sub r15, rcx
je 0x1400f0a05
nop dword [rax + rax]
xor edx, edx
mov rcx, rbx
call fcn.140094fe0
nop
add rbx, 0x10
sub r15, 1
jne 0x1400f09f0
mov qword [rsi + 8], rbx
mov rax, qword [rdi + 8]
mov rbx, qword [rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xor edi, edi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
lea r8d, [rdi + 5]
lea rdx, str.price
lea rcx, [rsp + 0x60]
call fcn.140006600
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.1400937e0
cmp byte [rax], 3
jne 0x1400f0b71
mov r8, qword [rax + 8]
mov rdx, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x1400f0a60
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rsp + 0x170]
call fcn.140023af0
nop
movups xmm0, xmmword [rsp + 0x170]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rsp + 0x180]
movups xmmword [r14 + 0x10], xmm1
movdqa xmm0, xmmword [0x140573a00]
movdqu xmmword [rsp + 0x180], xmm0
mov byte [rsp + 0x170], 0
lea rcx, [rsp + 0x170]
call fcn.1400062c0
nop
movzx edx, byte [rsp + 0x140]
lea rcx, [rsp + 0x148]
call fcn.140094ac0
nop
lea rcx, [rsp + 0x150]
call fcn.1400062c0
nop
lea rcx, [rsp + 0x190]
call fcn.1400062c0
mov rax, r14
jmp 0x1400f0b44
mov rcx, qword [rsp + 0x660]
xor rcx, rsp
call fcn.1402cf370
lea r11, [rsp + 0x670]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rcx, rax
call fcn.140094f50
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x88]
call fcn.14009f1c0
nop
mov r8, rax
lea rcx, [rsp + 0xc8]
call fcn.14009f280
lea rdx, [0x140599678]
lea rcx, [rsp + 0xc8]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rdi
call fcn.140094f50
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x88]
call fcn.1400f4360
nop
mov r8, rax
mov edx, 0x131
lea rcx, [rsp + 0x100]
call fcn.140097ce0
lea rdx, [0x140599678]
lea rcx, [rsp + 0x100]
call sub.VCRUNTIME140.dll__CxxThrowException
int3