Function at 0x140002420
Capabilities:
Create http request
Encode data using xor
Read data from internet
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
mov rax, qword [0x14006c040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
xor esi, esi
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f], xmm0
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, str.KillswitchChecker
call qword [sym.imp.WININET.dll_InternetOpenW]
mov rbx, rax
test rax, rax
je 0x140002550
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f], xmm0
mov qword [rbp + 0x2f], rsi
mov qword [rbp + 0x37], rsi
mov r8d, 0x2b
lea rcx, [rbp + 0x1f]
call fcn.1400027b0
mov edx, esi
lea r8, [0x140059bf0]
mov r9d, 0xffa5
nop dword [rax]
movsx ecx, byte [rdx + r8]
xor cx, r9w
lea rax, [rbp + 0x1f]
cmp qword [rbp + 0x37], 7
cmova rax, qword [rbp + 0x1f]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, 0x2b
jb 0x1400024b0
lea rdx, [rbp + 0x1f]
cmp qword [rbp + 0x37], 7
cmova rdx, qword [rbp + 0x1f]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlW]
mov rdi, rax
test rax, rax
jne 0x14000257b
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov rdx, qword [rbp + 0x37]
cmp rdx, 7
jbe 0x140002550
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000254b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002713
call fcn.140055f74
xor al, al
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.140055f10
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
lea r9, [rbp + 0x17]
mov r8d, 0xf
lea rdx, [rbp + 0x3f]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1400026bd
mov eax, dword [rbp + 0x17]
cmp rax, 0x10
jae 0x14000271a
mov byte [rbp + rax + 0x3f], 0
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
mov qword [rbp + 7], rsi
mov qword [rbp + 0xf], rsi
lea rax, [rbp + 0x3f]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400025e0
lea rdx, [rbp + 0x3f]
lea rcx, [rbp - 9]
call fcn.140002220
lea rsi, [rbp - 9]
mov rdi, qword [rbp - 9]
mov r14, qword [rbp + 0xf]
cmp r14, 0xf
cmova rsi, rdi
mov r8, qword [rbp + 7]
test r8, r8
je 0x14000262e
mov edx, 0x31
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x14000262e
sub rbx, rsi
jmp 0x140002635
mov rbx, 0xffffffffffffffff
cmp r14, 0xf
jbe 0x140002670
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140002667
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002667
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140055f74
nop
mov rdx, qword [rbp + 0x37]
cmp rbx, 0xffffffffffffffff
je 0x140002514
cmp rdx, 7
jbe 0x1400026b6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002713
call fcn.140055f74
mov al, 1
jmp 0x140002552
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov rdx, qword [rbp + 0x37]
cmp rdx, 7
jbe 0x140002550
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000254b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000254b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400560b0
int3