Function at 0x1401be620
Capabilities:
Read data from internet
Receive data

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
mov qword [rbp - 0x29], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov rax, qword [0x1403c2018]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov edi, edx
mov rsi, rcx
mov ecx, 0x78
call fcn.140038848
mov qword [rbp - 0x31], rax
xor r13d, r13d
test rax, rax
je 0x1401be67f
lea rdx, [rsi + 8]
mov rcx, rax
call fcn.14017cfe8
mov r14, rax
jmp 0x1401be682
mov r14, r13
mov rbx, r14
mov qword [rbp - 0x31], rbx
lea r12, [r14 + 0x60]
mov dword [rbp - 0x41], r13d
test edi, edi
jne 0x1401be9d9
lea r15, [rsi + 0x48]
mov rdx, qword [r12 + 8]
mov al, byte [rbp - 0x49]
mov byte [rsp + 0x20], al
mov r9, r15
mov r8, r15
mov rcx, r12
call fcn.1401bd9e4
mov dil, byte [rbp - 0x49]
mov dword [rbp - 0x41], r13d
lea r9, [rbp - 0x41]
mov r8d, 0x400
mov rdx, r15
mov rcx, qword [rsi + 0x38]
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1401be705
mov r9d, dword [rbp - 0x41]
add r9, 0x48
add r9, rsi
mov rdx, qword [r12 + 8]
mov byte [rsp + 0x20], dil
mov r8, r15
mov rcx, r12
call fcn.1401bd9e4
cmp dword [rbp - 0x41], 0x400
jne 0x1401be745
jmp 0x1401be6bb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp eax, 0x3e5
je 0x1401beaa9
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1401be73d
call fcn.14017b628
mov rdx, rax
mov r9d, edi
lea r8, str.InternetReadFile___failed:__d
mov ecx, 2
call fcn.140178254
test edi, edi
jne 0x1401be9d9
mov dword [r14 + 0x28], r13d
mov dword [rbp - 0x39], r13d
mov dword [rbp - 0x45], 4
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x45]
lea r8, [rbp - 0x39]
mov edx, 0x20000013
mov rcx, qword [rsi + 0x38]
call qword [sym.imp.WININET.dll_HttpQueryInfoA]
test eax, eax
jne 0x1401be7a1
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1401be7a1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
call fcn.14017b628
mov rdx, rax
mov r9d, edi
lea r8, str.HttpQueryInfo_STATUS_CODE__failed:__d
mov ecx, 2
call fcn.140178254
mov eax, dword [rbp - 0x39]
mov dword [r14 + 0x2c], eax
mov dword [rbp - 0x45], 0x3ff
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x45]
mov r8, r15
mov edx, socket
mov rcx, qword [rsi + 0x38]
call qword [sym.imp.WININET.dll_HttpQueryInfoA]
test eax, eax
jne 0x1401be85c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp eax, 0x7a
je 0x1401be80c
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1401be804
call fcn.14017b628
mov r9d, edi
lea r8, str.HttpQueryInfo_RAW_HEADERS__failed:__d
mov rdx, rax
mov ecx, 2
call fcn.140178254
mov eax, r13d
mov dword [rbp - 0x45], eax
jmp 0x1401be85f
mov edx, dword [rbp - 0x45]
inc edx
mov r8, r12
mov rcx, r12
call fcn.140194814
mov r15, qword [r12]
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x45]
mov r8, r15
mov edx, socket
mov rcx, qword [rsi + 0x38]
call qword [sym.imp.WININET.dll_HttpQueryInfoA]
test eax, eax
jne 0x1401be85c
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1401be804
call fcn.14017b628
mov r9d, 0x7a
lea r8, str.HttpQueryInfo_RAW_HEADERS__failed_twice:__d
jmp 0x1401be7f7
mov eax, dword [rbp - 0x45]
mov byte [rax + r15], r13b
cmp byte [r15], r13b
je 0x1401be9af
mov r12d, 0x1000
mov edx, 0x3a
mov rcx, r15
call fcn.1402bbb98
mov rdi, rax
test rax, rax
je 0x1401be9af
lea r9, [rbp - 0x49]
mov r8, rax
mov rdx, r15
lea rcx, [rbp - 1]
call fcn.140169c5c
nop
inc rdi
jmp 0x1401be8a7
inc rdi
cmp byte [rdi], 0x20
je 0x1401be8a4
lea rdx, [0x14033c330]
mov rcx, rdi
call fcn.1402bc7c8
mov r15, rax
test rax, rax
je 0x1401be978
lea r9, [rbp - 0x3d]
mov r8, rax
mov rdx, rdi
lea rcx, [rbp - 0x21]
call fcn.140169c5c
nop
lea rcx, [r14 + 0x30]
lea r8, [rbp - 0x21]
lea rdx, [rbp - 1]
call fcn.1401be358
add r15, 2
mov rdx, qword [rbp - 9]
cmp rdx, 0x10
jb 0x1401be927
inc rdx
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, r12
jb 0x1401be922
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401beaef
call fcn.1400385dc
mov qword [rbp - 0x11], r13
mov qword [rbp - 9], setsockopt
mov byte [rbp - 0x21], r13b
mov rdx, qword [rbp + 0x17]
cmp rdx, 0x10
jb 0x1401be96e
inc rdx
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, r12
jb 0x1401be969
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401beaf5
call fcn.1400385dc
cmp byte [r15], r13b
je 0x1401be9af
jmp 0x1401be872
mov rdx, qword [rbp + 0x17]
cmp rdx, 0x10
jb 0x1401be9af
inc rdx
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, r12
jb 0x1401be9aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401beae9
call fcn.1400385dc
mov rcx, qword [rsi + 0x28]
test rcx, rcx
je 0x1401bea65
mov rax, qword [rcx]
xor r9d, r9d
mov r8, qword [rsi + 0x38]
lea edx, [r9 + 7]
mov rax, qword [rax + 0x10]
call qword [str.0B__]
jmp 0x1401bea65
mov eax, 0x2f14
cmp edi, eax
ja 0x1401bea36
je 0x1401bea5d
cmp edi, 0x2eff
ja 0x1401bea1e
cmp edi, 0x2efc
jae 0x1401bea5d
cmp edi, 0x2ee2
jb 0x1401bea53
cmp edi, 0x2ee3
jbe 0x1401bea5d
cmp edi, 0x2ee7
je 0x1401bea5d
cmp edi, 0x2ef1
jne 0x1401bea53
mov dword [r14 + 0x28], 1
jmp 0x1401bea65
cmp edi, 0x2f04
jbe 0x1401bea53
cmp edi, 0x2f09
je 0x1401bea53
cmp edi, 0x2f0e
jmp 0x1401bea51
cmp edi, 0x2f17
je 0x1401bea5d
add edi, 0xffffd089
cmp edi, 0x18
ja 0x1401bea53
mov eax, 0x10c0223
bt eax, edi
jb 0x1401bea5d
mov dword [r14 + 0x28], 2
jmp 0x1401bea65
mov dword [r14 + 0x28], 3
cmp byte [rsi + 0x448], r13b
jne 0x1401beaa9
xor edx, edx
mov rcx, qword [rsi + 0x38]
call qword [sym.imp.WININET.dll_InternetSetStatusCallbackW]
mov byte [rsi + 0x448], 1
mov rbx, r13
mov qword [rbp - 0x31], rbx
mov rcx, qword [rsi + 0x28]
mov rax, qword [rcx]
mov rdx, r14
mov rax, qword [rax + 8]
call qword [str.0B__]
lea rdx, [rsi + 8]
mov rcx, qword [rsi]
call fcn.1401be470
nop
test rbx, rbx
je 0x1401beac2
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
mov rax, qword [rax]
call qword [str.0B__]
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.140038910
mov rbx, qword [rsp + 0xf0]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14004689c
nop
call fcn.14004689c
nop
call fcn.14004689c
int3