Function at 0x140023940
Capabilities:
Create http request
Encode data using xor
Read data from internet
Receive data

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x810]
sub rsp, 0x910
mov rax, qword [0x14003c040]
xor rax, rsp
mov qword [rbp + 0x800], rax
mov rbx, rdx
mov qword [rsp + 0x60], rcx
mov qword [rbp - 0x38], rcx
mov dword [rbp - 0x38], 1
mov dword [rsp + 0x30], 0xf474f471
mov dword [rsp + 0x34], 0xf477
xor esi, esi
mov byte [rsp + 0x38], 1
mov ecx, esi
mov r8d, 0xbbb
nop dword [rax]
nop word [rax + rax]
movzx eax, cx
sub ax, r8w
xor word [rsp + rcx*2 + 0x30], ax
inc rcx
cmp rcx, 3
jb 0x1400239b0
mov byte [rsp + 0x38], sil
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, [rsp + 0x30]
call qword [sym.imp.WININET.dll_InternetOpenW]
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x140035a70]
movdqu xmmword [rbp - 0x20], xmm1
mov word [rbp - 0x30], si
test rax, rax
je 0x140023d52
movups xmm0, xmmword [str.Cache_Control:_no_cache_r_n]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [0x140033a50]
movups xmmword [rbp], xmm1
movups xmm0, xmmword [0x140033a60]
movups xmmword [rbp + 0x10], xmm0
mov eax, dword [0x140033a70]
mov dword [rbp + 0x20], eax
cmp qword [rbx + 0x18], 7
jbe 0x140023a3b
mov rbx, qword [rbx]
lea rax, [rbp - 0x10]
mov r9, 0xffffffffffffffff
nop word [rax + rax]
inc r9
cmp word [rax + r9*2], 0
jne 0x140023a50
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
lea r8, [rbp - 0x10]
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetOpenUrlW]
mov rbx, rax
test rax, rax
je 0x140023d52
lea r9, [rbp - 0x38]
mov r8d, 0x7d0
lea rdx, [rbp + 0x30]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
mov eax, dword [rbp - 0x38]
lea r8, [rbp + 0x30]
add r8, rax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x30]
call fcn.14002d2e0
xor edx, edx
mov r8d, 0x7d0
lea rcx, [rbp + 0x30]
call sub.VCRUNTIME140.dll_memset
cmp dword [rbp - 0x38], 0
jne 0x140023a80
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rsi
mov r8d, 2
lea rdx, [0x140033a74]
lea rcx, [rsp + 0x40]
call fcn.14002e280
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], rsi
mov r8d, 2
lea rdx, [0x140033a7c]
lea rcx, [rsp + 0x68]
call fcn.14002e280
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x58]
call fcn.14002c240
mov rsi, rax
mov qword [rsp + 0x30], rax
xor edx, edx
mov ebx, edx
mov r13, qword [rbp - 0x80]
mov rdi, qword [rsp + 0x78]
mov r15, qword [rsp + 0x68]
mov r12, qword [rsp + 0x50]
nop word [rax + rax]
lea r10, [rsp + 0x68]
cmp r13, 7
cmova r10, r15
mov rax, qword [rsi + 0x10]
mov r14, rsi
cmp qword [rsi + 0x18], 7
jbe 0x140023b7e
mov r14, qword [rsi]
cmp rdi, rax
ja 0x140023c53
sub rax, rdi
cmp rbx, rax
ja 0x140023c53
test rdi, rdi
je 0x140023c0f
lea r11, [rax + 1]
lea r11, [r14 + r11*2]
lea rbx, [r14 + rbx*2]
movzx r9d, word [r10]
nop dword [rax + rax]
mov rax, r11
sub rax, rbx
sar rax, 1
mov rcx, rdx
je 0x140023bda
cmp word [rbx], r9w
je 0x140023bd7
cmp rax, 1
je 0x140023bda
dec rax
add rbx, 2
cmp word [rbx], r9w
jne 0x140023bc4
mov rcx, rbx
mov rbx, rcx
test rcx, rcx
je 0x140023c53
mov rdx, rdi
mov rcx, r10
test rdi, rdi
je 0x140023c07
mov r8, rbx
sub r8, r10
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140023c48
add rcx, 2
sub rdx, 1
jne 0x140023bf3
sub rbx, r14
sar rbx, 1
xor edx, edx
cmp rbx, 0xffffffffffffffff
je 0x140023c53
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 7
cmova r9, qword [rsp + 0x40]
mov qword [rsp + 0x20], r12
mov r8, rdi
mov rdx, rbx
mov rcx, rsi
call fcn.14002ce10
mov r12, qword [rsp + 0x50]
add rbx, r12
xor edx, edx
jmp 0x140023b60
add rbx, 2
xor edx, edx
jmp 0x140023bb0
xorps xmm0, xmm0
mov rbx, qword [rsp + 0x60]
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], rdx
movups xmm0, xmmword [rsi]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbx + 0x10], xmm1
mov qword [rsi + 0x10], rdx
mov qword [rsi + 0x18], 7
mov word [rsi], dx
cmp r13, 7
jbe 0x140023cc2
lea rdx, [r13*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x140023cb9
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023cb9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14002ffa8
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140023d08
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023d02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023d02
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 7
jbe 0x140023fcb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023fc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023fc6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rsi
mov r8d, 2
lea rdx, [0x140033a74]
lea rcx, [rsp + 0x40]
call fcn.14002e280
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], rsi
mov r8d, 2
lea rdx, [0x140033a7c]
lea rcx, [rbp - 0x78]
call fcn.14002e280
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x58]
call fcn.14002c240
mov rsi, rax
mov qword [rsp + 0x30], rax
xor edx, edx
mov ebx, edx
mov r13, qword [rbp - 0x60]
mov rdi, qword [rbp - 0x68]
mov r15, qword [rbp - 0x78]
mov r12, qword [rsp + 0x50]
nop word [rax + rax]
lea r10, [rbp - 0x78]
cmp r13, 7
cmova r10, r15
mov rax, qword [rsi + 0x10]
mov r14, rsi
cmp qword [rsi + 0x18], 7
jbe 0x140023dfd
mov r14, qword [rsi]
cmp rdi, rax
ja 0x140023ed3
sub rax, rdi
cmp rbx, rax
ja 0x140023ed3
test rdi, rdi
je 0x140023e8f
lea r11, [rax + 1]
lea r11, [r14 + r11*2]
lea rbx, [r14 + rbx*2]
movzx r9d, word [r10]
nop word [rax + rax]
mov rax, r11
sub rax, rbx
sar rax, 1
mov rcx, rdx
je 0x140023e5a
cmp word [rbx], r9w
je 0x140023e57
cmp rax, 1
je 0x140023e5a
dec rax
add rbx, 2
cmp word [rbx], r9w
jne 0x140023e44
mov rcx, rbx
mov rbx, rcx
test rcx, rcx
je 0x140023ed3
mov rdx, rdi
mov rcx, r10
test rdi, rdi
je 0x140023e87
mov r8, rbx
sub r8, r10
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140023ec8
add rcx, 2
sub rdx, 1
jne 0x140023e73
sub rbx, r14
sar rbx, 1
xor edx, edx
cmp rbx, 0xffffffffffffffff
je 0x140023ed3
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 7
cmova r9, qword [rsp + 0x40]
mov qword [rsp + 0x20], r12
mov r8, rdi
mov rdx, rbx
mov rcx, rsi
call fcn.14002ce10
mov r12, qword [rsp + 0x50]
add rbx, r12
xor edx, edx
jmp 0x140023de0
add rbx, 2
xor edx, edx
jmp 0x140023e30
xorps xmm0, xmm0
mov rbx, qword [rsp + 0x60]
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], rdx
movups xmm0, xmmword [rsi]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbx + 0x10], xmm1
mov qword [rsi + 0x10], rdx
mov qword [rsi + 0x18], 7
mov word [rsi], dx
cmp r13, 7
jbe 0x140023f42
lea rdx, [r13*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x140023f39
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023f39
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14002ffa8
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140023f88
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023f82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023f82
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 7
jbe 0x140023fcb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023fc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023fc6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
mov rax, rbx
mov rcx, qword [rbp + 0x800]
xor rcx, rsp
call fcn.14002fac0
mov rbx, qword [rsp + 0x960]
add rsp, 0x910
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret