Function at 0x1400d60d0
Capabilities:
Create http request
Encode data using xor
Read data from internet
Receive data
Reference http user-agent string

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x670
mov rax, qword [0x1406e22c0]
xor rax, rsp
mov qword [rsp + 0x660], rax
mov r14, rdx
mov qword [rsp + 0x38], rdx
xor esi, esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov r15d, 1
mov edx, r15d
lea rcx, str.Mozilla_5.0
call qword [sym.imp.WININET.dll_InternetOpenA]
mov r13, rax
test rax, rax
jne 0x1400d617b
lea rdx, str.Failed_to_initialize_WinINet.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140019a90
lea rdx, [0x140019ed0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], rsi
lea r8d, [rsi + 5]
lea rdx, str.34.99
mov rcx, r14
call fcn.140005c10
mov rax, r14
jmp 0x1400d6804
mov dword [rsp + 0x1b0], 0x2a24242a
mov dword [rsp + 0x1b4], 0x7fffb9ea
mov dword [rsp + 0x1b8], 0xb47db731
mov dword [rsp + 0x1bc], 0x767e8041
mov dword [rsp + 0x1c0], 0x4504c531
mov dword [rsp + 0x1c4], 0x681b242
mov dword [rsp + 0x1c8], 0xea8eded
mov dword [rsp + 0x1cc], 0x6a5a299a
mov dword [rsp + 0x1d0], 0x1b35d9d8
mov dword [rsp + 0x1d4], 0xd2a9afa9
mov dword [rsp + 0x1d8], 0x1e115daa
mov dword [rsp + 0x1dc], 0x56d71e52
mov dword [rsp + 0x1e0], 0xc68c8490
mov dword [rsp + 0x1e4], 0xbe813f04
mov dword [rsp + 0x1e8], 0x7d5f87bd
mov dword [rsp + 0x1ec], 0x3cba3baa
mov dword [rsp + 0x1f0], 0xd0b80895
mov dword [rsp + 0x1f4], 0x933fbf4e
mov dword [rsp + 0x1f8], 0xbf7c42bd
mov dword [rsp + 0x1fc], 0x38825181
mov dword [rsp + 0x200], 0xec43d084
mov dword [rsp + 0x204], 0xf80c43d
mov dword [rsp + 0x208], 0x585dffaf
mov dword [rsp + 0x20c], 0xe41b5a18
mov dword [rsp + 0x210], 0x5c8be699
mov dword [rsp + 0x214], 0xf2cfdfdf
mov dword [rsp + 0x218], 0x9271df31
mov dword [rsp + 0x21c], 0xf413f2c3
mov dword [rsp + 0x220], 0xa32387e3
mov dword [rsp + 0x224], 0x3c7fff62
mov dword [rsp + 0x228], 0x6f882fdf
mov dword [rsp + 0x22c], 0xbc6c905
mov dword [rsp + 0x230], 0x3a757ce4
mov dword [rsp + 0x234], 0xfd3f7dba
mov dword [rsp + 0x238], 0x37c3fbc
mov dword [rsp + 0x23c], 0x84c2fe3c
mov dword [rsp + 0x240], 0x9ef375b2
mov byte [rsp + 0x244], reloc.WLDAP32.dll_Ordinal_22
mov ecx, esi
lea rdx, [rsp + 0x1b0]
movzx eax, byte [rdx]
dec al
ror al, 6
add al, 0x24
xor al, cl
not al
add al, cl
not al
sub al, 0x30
xor al, 0x39
not al
sub al, cl
xor al, 0xc9
sub al, cl
not al
mov byte [rdx], al
inc ecx
lea rdx, [rdx + 1]
cmp ecx, 0x95
jb 0x1400d6324
xorps xmm0, xmm0
movups xmmword [rsp + 0x190], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1a0], xmm1
lea rax, [rsp + 0x1b0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], sil
jne 0x1400d6380
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x190]
call fcn.140005c10
nop
lea rdx, [rsp + 0x190]
cmp qword [rsp + 0x1a8], 0xf
cmova rdx, qword [rsp + 0x190]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov r12, rax
test rax, rax
jne 0x1400d641f
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], rsi
lea r8d, [r12 + 5]
lea rdx, str.34.99
mov rcx, r14
call fcn.140005c10
nop
lea rcx, [rsp + 0x190]
call fcn.140019170
mov rax, r14
jmp 0x1400d6804
xorps xmm0, xmm0
movups xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x168], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x150], 0
lea r9, [rsp + 0x138]
mov r8d, 0x400
lea rdx, [rsp + 0x250]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1400d6533
movzx ebx, byte [rsp + 0x30]
nop dword [rax]
nop word [rax + rax]
mov eax, dword [rsp + 0x138]
test eax, eax
je 0x1400d6531
mov esi, eax
mov rcx, qword [rsp + 0x160]
mov rdx, qword [rsp + 0x168]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1400d64e9
lea rax, [rsi + rcx]
mov qword [rsp + 0x160], rax
lea rdi, [rsp + 0x150]
cmp rdx, 0xf
cmova rdi, qword [rsp + 0x150]
add rdi, rcx
mov r8d, esi
lea rdx, [rsp + 0x250]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
jmp 0x1400d650a
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x250]
movzx r8d, bl
mov rdx, rsi
lea rcx, [rsp + 0x150]
call fcn.14001b7c0
lea r9, [rsp + 0x138]
mov r8d, 0x400
lea rdx, [rsp + 0x250]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x1400d6480
xor esi, esi
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
xor edx, edx
lea rcx, [rsp + 0x140]
call fcn.14007b7c0
nop
mov qword [rsp + 0xc0], rsi
lea r8, [rsp + 0x88]
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x40]
call fcn.1400d0260
movzx edx, byte [rsp + 0x140]
movzx ecx, byte [rax]
mov byte [rsp + 0x140], cl
mov byte [rax], dl
lea rcx, [rax + 8]
mov rax, qword [rsp + 0x148]
mov r8, qword [rcx]
mov qword [rsp + 0x148], r8
mov qword [rcx], rax
call fcn.14007b2a0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
movdqa xmm1, xmmword [0x140530e80]
movdqu xmmword [rsp + 0x180], xmm1
mov byte [rsp + 0x170], 0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
mov r8d, 7
lea rdx, str.product
lea rcx, [rsp + 0x60]
call fcn.140005c10
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x140]
call fcn.140079fc0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rsi
mov r8d, 8
lea rdx, str.variants
lea rcx, [rsp + 0x40]
call fcn.140005c10
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140079fc0
mov rdi, rax
cmp byte [rax], 0
jne 0x1400d6665
mov byte [rax], 2
mov ecx, SafeArrayPutElement
call fcn.1402978c0
mov qword [rax], rsi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rsi
mov qword [rdi + 8], rax
cmp byte [rdi], 2
jne 0x1400d6876
mov rsi, qword [rdi + 8]
mov rbx, qword [rsi + 8]
mov rdx, qword [rsi]
mov rcx, rbx
sub rcx, rdx
sar rcx, 4
test rcx, rcx
jne 0x1400d66c9
mov rax, qword [rsi + 0x10]
sub rax, rdx
sar rax, 4
cmp rax, 1
jae 0x1400d66a3
mov rcx, rsi
call fcn.1400d7b20
jmp 0x1400d66c9
sub r15, rcx
je 0x1400d66c5
nop dword [rax + rax]
xor edx, edx
mov rcx, rbx
call fcn.14007b7c0
nop
add rbx, 0x10
sub r15, 1
jne 0x1400d66b0
mov qword [rsi + 8], rbx
mov rax, qword [rdi + 8]
mov rbx, qword [rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xor edi, edi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
lea r8d, [rdi + 5]
lea rdx, str.price
lea rcx, [rsp + 0x60]
call fcn.140005c10
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.140079fc0
cmp byte [rax], 3
jne 0x1400d6831
mov r8, qword [rax + 8]
mov rdx, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x1400d6720
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rsp + 0x170]
call fcn.1400199e0
nop
movups xmm0, xmmword [rsp + 0x170]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rsp + 0x180]
movups xmmword [r14 + 0x10], xmm1
movdqa xmm0, xmmword [0x140530e80]
movdqu xmmword [rsp + 0x180], xmm0
mov byte [rsp + 0x170], 0
lea rcx, [rsp + 0x170]
call fcn.140019170
nop
movzx edx, byte [rsp + 0x140]
lea rcx, [rsp + 0x148]
call fcn.14007b2a0
nop
lea rcx, [rsp + 0x150]
call fcn.140019170
nop
lea rcx, [rsp + 0x190]
call fcn.140019170
mov rax, r14
jmp 0x1400d6804
mov rcx, qword [rsp + 0x660]
xor rcx, rsp
call fcn.140297700
lea r11, [rsp + 0x670]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rcx, rax
call fcn.14007b730
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x88]
call fcn.140085a00
nop
mov r8, rax
lea rcx, [rsp + 0xc8]
call fcn.140085ac0
lea rdx, [0x140551ca0]
lea rcx, [rsp + 0xc8]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rdi
call fcn.14007b730
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x88]
call fcn.1400d7a60
nop
mov r8, rax
mov edx, 0x131
lea rcx, [rsp + 0x100]
call fcn.14007e520
lea rdx, [0x140551ca0]
lea rcx, [rsp + 0x100]
call sub.VCRUNTIME140.dll__CxxThrowException
int3