Function at 0x14002ed00
Capabilities:
Encode data using xor
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x178]
sub rsp, 0x240
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
mov rax, qword [0x140238500]
xor rax, rsp
mov qword [rbp + 0x108], rax
mov rsi, r8
mov rbx, rdx
mov qword [rsp + 0x40], rdx
mov qword [rbp + 0xa0], r8
xor r13d, r13d
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
lea rax, [rbp + 0x178]
movabs rcx, 0xff00ff00ff00ff00
mov qword [rbp + 0xf8], rcx
mov qword [rbp + 0x100], rax
mov r14, qword [rax]
xor r14, rcx
mov qword [rbp + 0xf0], r14
mov qword [rax], r13
call fcn.140027c50
xorps xmm0, xmm0
movups xmmword [rsp + 0x44], xmm0
nop dword [rax]
lea rcx, [rbp - 0x50]
lea rax, [0x1400b3240]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rax]
movups xmmword [rcx], xmm1
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm0
movups xmm1, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm1
movups xmm0, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm0
movups xmm1, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm1
movups xmm0, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm0
movzx eax, word [rax + 0x60]
mov word [rcx + 0x60], ax
mov ecx, r13d
mov r15d, dword [0x140238558]
cmp r15d, 2
jl 0x14002ef65
movdqa xmm5, xmmword [0x1400b4620]
movdqa xmm4, xmmword [0x1400b46f0]
movdqa xmm6, xmmword [str.::::]
movdqa xmm7, xmmword [0x1400b46a0]
lea rdx, [rbp - 0x50]
mov edi, 4
nop word [rax + rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rdx]
xorps xmm3, xmm0
movq qword [rdx], xmm3
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rdx + 8]
xorps xmm3, xmm0
movq qword [rdx + 8], xmm3
add ecx, 8
lea rdx, [rdx + 0x10]
add edi, 8
cmp ecx, 0x70
jl 0x14002ee70
cmp ecx, 0x71
jge 0x14002efa1
movsxd rax, ecx
lea rdi, [rbp - 0x50]
lea rdi, [rdi + rax*2]
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul edx, eax, 0x3a
movzx eax, cx
sub ax, dx
add ax, 0x33
xor word [rdi], ax
inc ecx
lea rdi, [rdi + 2]
cmp ecx, 0x71
jl 0x14002ef70
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x50]
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov r12, rax
test rax, rax
jne 0x14002efe5
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], r13
xor r8d, r8d
lea rdx, [0x1400b3910]
mov rcx, rbx
call fcn.140035750
jmp 0x14002f6c5
movups xmm7, xmmword [str.CMAQBYK]
movups xmmword [rsp + 0x60], xmm7
movq xmm8, qword [0x1400b3388]
movq qword [rsp + 0x70], xmm8
movzx eax, word [0x1400b3390]
mov word [rsp + 0x78], ax
mov edi, r13d
cmp r15d, 2
jl 0x14002f175
movdqa xmm4, xmmword [0x1400b46f0]
movdqa xmm5, xmmword [str.::::]
movdqa xmm6, xmmword [0x1400b46a0]
movdqa xmm2, xmmword [0x1400b4620]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm1, xmm7
xorps xmm3, xmm1
movq qword [rsp + 0x60], xmm3
movdqa xmm2, xmmword [0x1400b4630]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rsp + 0x68]
xorps xmm3, xmm0
movq qword [rsp + 0x68], xmm3
movdqa xmm2, xmmword [0x1400b4640]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, xmm8
xorps xmm3, xmm0
movq qword [rsp + 0x70], xmm3
mov edi, 0xc
mov eax, edi
lea r8, [rsp + 0x60]
lea r8, [r8 + rax*2]
mov eax, 0x8d3dcb09
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, di
sub ax, cx
add ax, 0x33
xor word [r8], ax
inc edi
lea r8, [r8 + 2]
cmp edi, 0xd
jl 0x14002f180
mov r8d, 0x1bb
xor r9d, r9d
lea rdx, [rsp + 0x60]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov r13, rax
test rax, rax
jne 0x14002f1ef
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
xor eax, eax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], rax
jmp 0x14002efce
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0xf
jbe 0x14002f202
add r8, qword [rsi]
mov rdx, qword [rsi]
jmp 0x14002f208
add r8, rsi
mov rdx, rsi
lea rcx, [rbp - 0x78]
call fcn.140034ad0
mov r9, rax
movups xmm7, xmmword [0x1400b3d18]
movups xmmword [rsp + 0x40], xmm7
movq xmm8, qword [0x1400b3d28]
movq qword [rsp + 0x50], xmm8
xor edi, edi
cmp r15d, 2
jl 0x14002f394
movdqa xmm4, xmmword [0x1400b46f0]
movdqa xmm5, xmmword [str.::::]
movdqa xmm6, xmmword [0x1400b46a0]
movdqa xmm2, xmmword [0x1400b4620]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm1, xmm7
xorps xmm3, xmm1
movq qword [rsp + 0x40], xmm3
movdqa xmm2, xmmword [0x1400b4630]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rsp + 0x48]
xorps xmm3, xmm0
movq qword [rsp + 0x48], xmm3
movdqa xmm2, xmmword [0x1400b4640]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, xmm8
xorps xmm3, xmm0
movq qword [rsp + 0x50], xmm3
jmp 0x14002f3c9
lea r8, [rsp + 0x40]
nop dword [rax]
mov eax, 0x8d3dcb09
mul edi
shr edx, 5
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, di
sub ax, cx
add ax, 0x33
xor word [r8], ax
inc edi
lea r8, [r8 + 2]
cmp edi, 0xc
jl 0x14002f3a0
mov r8, r9
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xb0]
call fcn.140034eb0
nop
lea rcx, [rbp - 0x78]
call fcn.1400331c0
mov rdi, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x14002f3f4
mov rdi, qword [rsi]
xor eax, eax
mov rcx, qword [rsi + 0x10]
rep stosb byte [rdi], al
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x14002f40d
mov rax, qword [rsi]
mov byte [rax], 0
lea r8, [rbp + 0xb0]
mov rax, qword [0x1400b35d8]
mov qword [rsp + 0x40], rax
cmp qword [rbp + 0xc8], 7
jbe 0x14002f434
mov r8, qword [rbp + 0xb0]
xor edi, edi
cmp r15d, 2
jl 0x14002f4b5
movdqa xmm3, xmmword [0x1400b4620]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400b46f0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400b46f0]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [str.::::]
psubd xmm3, xmm0
pshufhw xmm0, xmm3, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmmword [0x1400b46a0]
movq xmm0, qword [rsp + 0x40]
xorps xmm2, xmm0
movq qword [rsp + 0x40], xmm2
jmp 0x14002f4e9
lea r9, [rsp + 0x40]
nop word [rax + rax]
mov eax, 0x8d3dcb09
mul edi
shr edx, 5
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, di
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc edi
lea r9, [r9 + 2]
cmp edi, 4
jl 0x14002f4c0
mov dword [rsp + 0x30], 0x800000
xor edi, edi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea rdx, [rsp + 0x40]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r15, rax
test rax, rax
je 0x14002f595
lea rdi, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 7
cmova rdi, qword [rbp + 0xb0]
xor eax, eax
mov rcx, qword [rbp + 0xc0]
rep stosb byte [rdi], al
xor edi, edi
mov qword [rbp + 0xc0], rdi
lea rax, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 7
cmova rax, qword [rbp + 0xb0]
mov word [rax], di
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov rcx, r15
test eax, eax
je 0x14002f58f
xor edx, edx
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
jne 0x14002f5cc
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
xor r8d, r8d
lea rdx, [0x1400b3910]
mov rcx, rbx
call fcn.140035750
jmp 0x14002f6b8
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rdi
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], dil
mov dword [rbp + 0xa8], edi
mov ecx, 0x1000
call fcn.140099e08
mov rdi, rax
lea r9, [rbp + 0xa8]
mov r8d, 0x1000
mov rdx, rax
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x14002f659
nop
mov ecx, dword [rbp + 0xa8]
test ecx, ecx
je 0x14002f659
mov r8d, ecx
mov rdx, rdi
lea rcx, [rbp + 0xd0]
call fcn.140031900
lea r9, [rbp + 0xa8]
mov r8d, 0x1000
mov rdx, rdi
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
jne 0x14002f620
mov rcx, rdi
call fcn.1400999e0
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xor eax, eax
movups xmm0, xmmword [rbp + 0xd0]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp + 0xe0]
movups xmmword [rbx + 0x10], xmm1
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], al
lea rcx, [rbp + 0xd0]
call fcn.140033230
nop
lea rcx, [rbp + 0xb0]
call fcn.1400331c0
nop
movabs rax, 0xff00ff00ff00ff00
xor r14, rax
lea rax, [rbp + 0x178]
mov qword [rax], r14
mov rcx, rsi
call fcn.140033230
mov rax, rbx
mov rcx, qword [rbp + 0x108]
xor rcx, rsp
call fcn.140099880
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret