Function at 0x6ff92930
Capabilities:
Connect to http server
Create http request
Encode data using xor
Read data from internet
Receive data
Send data
Send http request

Disassembly:
movabs rax, 0x352a344b4f4f531b
push r15
push r14
mov r14, rcx
push r13
mov r13, rdx
push r12
push rbp
mov rbp, r8
push rdi
push rsi
push rbx
mov rbx, r9
sub rsp, 0x458
mov byte [rsp + 0x59], 0
lea rdx, [rsp + 0x58]
mov byte [rsp + 0x58], 0x2a
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov rsi, rax
xor byte [rax + 1], 0x1b
inc rax
cmp rax, rdx
jne 0x6ff92975
lea r15, [rsp + 0x51]
mov byte [rsp + 0x59], 0
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0
mov edx, 1
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetOpenA]
mov r12, rax
mov eax, 0xe6
test r12, r12
je 0x6ff92c0a
mov rdx, r14
xor r9d, r9d
mov r8d, 0x1bb
mov rcx, r12
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], 0
call qword [sym.imp.WININET.dll_InternetConnectA]
mov r14, rax
test rax, rax
jne 0x6ff92a0a
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, 0xe5
jmp 0x6ff92c0a
mov byte [rsp + 0x55], 0
mov rax, rsi
lea rdx, [rsp + 0x54]
mov dword [rsp + 0x50], 0x4a564919
mov byte [rsp + 0x54], 0x4d
xor byte [rax + 1], 0x19
inc rax
cmp rax, rdx
jne 0x6ff92a24
mov r8, r13
mov byte [rsp + 0x55], 0
xor r9d, r9d
mov rdx, r15
mov qword [rsp + 0x38], 0
mov rcx, r14
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov r13, rax
test rax, rax
jne 0x6ff92a8d
mov rbx, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r14
call rbx
mov rcx, r12
call rbx
mov eax, 0xe4
jmp 0x6ff92c0a
mov edx, 6
mov rcx, rax
lea r8, [rsp + 0x48]
mov rdi, rbp
mov dword [rsp + 0x48], 0xea60
mov r9d, 4
call qword [sym.imp.WININET.dll_InternetSetOptionA]
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdx, rsi
repne scasb al, byte [rdi]
mov byte [rsp + 0x71], 0
movabs rdi, 0x445e55445e5f7330
mov qword [rsp + 0x50], rdi
movabs rdi, 0x51100a554049641d
mov qword [rsp + 0x58], rdi
movabs rdi, 0x59445153595c4040
mov qword [rsp + 0x60], rdi
movabs rdi, 0x3d5e5f435a1f5e5f
mov qword [rsp + 0x68], rdi
mov byte [rsp + 0x70], 0x3a
mov rax, rcx
lea rcx, [rsp + 0x70]
not rax
dec rax
xor byte [rdx + 1], 0x30
inc rdx
cmp rdx, rcx
jne 0x6ff92b10
or r8d, 0xffffffff
mov byte [rsp + 0x71], 0
mov r9, rbp
mov rdx, r15
mov dword [rsp + 0x20], eax
mov rcx, r13
call qword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
jne 0x6ff92b71
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rsi, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r13
mov ebx, eax
call rsi
mov rcx, r14
call rsi
mov rcx, r12
call rsi
xor eax, eax
cmp ebx, 0x2ee2
sete al
lea eax, [rax*4 + 0xe3]
jmp 0x6ff92c0a
mov ecx, 1
lea rbp, [rsp + 0x4c]
call sub.msvcrt.dll_malloc
mov dword [rsp + 0x4c], 0
mov r15, qword [sym.imp.WININET.dll_InternetReadFile]
mov qword [rbx], rax
mov byte [rax], 0
mov r9, rbp
mov r8d, 0x3ff
mov rdx, rsi
mov rcx, r13
call r15
test eax, eax
je 0x6ff92bef
mov edx, dword [rsp + 0x4c]
test edx, edx
je 0x6ff92bef
mov r8, qword [rbx]
mov byte [rsp + rdx + 0x50], 0
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r8
repne scasb al, byte [rdi]
mov rax, rcx
mov rcx, r8
not rax
add rdx, rax
call sub.msvcrt.dll_realloc
mov rdx, rsi
mov qword [rbx], rax
mov rcx, rax
call sub.msvcrt.dll_strcat
mov dword [rsp + 0x4c], 0
jmp 0x6ff92b95
mov rbx, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r13
call rbx
mov rcx, r14
call rbx
mov rcx, r12
call rbx
mov eax, 0xe8
add rsp, 0x458
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret