Function at 0x140048120
Capabilities:
Check internet connectivity via wininet
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
xor ebx, ebx
xor edx, edx
lea rcx, [rbp + 0x90]
call qword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
je 0x140048730
mov eax, dword [rbp + 0x90]
shr eax, 5
not al
test al, 1
je 0x140048730
mov dword [0x1401c8ed4], 1
call fcn.140049930
movzx esi, al
lea rdi, [rbx - 1]
test al, al
je 0x1400482e2
call fcn.140049930
movzx esi, al
test al, al
je 0x1400482e2
movdqa xmm0, xmmword [0x14015d6d0]
mov dword [rsp + 0x30], 0x1f2abcfc
mov dword [rsp + 0x34], 0x4673c477
mov dword [rsp + 0x38], 0x5b3cadf6
mov rax, qword gs:[0x58]
mov r15, qword [rax]
mov ecx, 0x698
mov eax, dword [rcx + r15]
mov r14d, 0x6a0
test al, 1
jne 0x14004823e
or eax, 1
mov dword [rcx + r15], eax
lea rcx, [r15 + r14]
mov byte [rcx + 0x1d], 1
lea rax, [rcx + 0x1c]
lea rdx, [rsp + 0x3c]
cmp rcx, rdx
ja 0x140048218
lea rdx, [rsp + 0x20]
cmp rax, rdx
jb 0x140048218
movups xmmword [rcx], xmm0
movsd xmm0, qword [rsp + 0x30]
movsd qword [rcx + 0x10], xmm0
mov eax, dword [rsp + 0x38]
mov dword [rcx + 0x18], eax
mov byte [rcx + 0x1c], 0x33
jmp 0x140048231
movups xmmword [rcx], xmm0
movsd xmm0, qword [rsp + 0x30]
movsd qword [rcx + 0x10], xmm0
mov eax, dword [rsp + 0x38]
mov dword [rcx + 0x18], eax
mov byte [rcx + 0x1c], 0x33
lea rcx, [0x140124540]
call fcn.14011f97c
nop
lea rdx, [r14 + r15]
cmp byte [rdx + 0x1d], 0
je 0x1400482bf
xor byte [rdx], 0x95
xor byte [rdx + 1], 0xd9
xor byte [rdx + 2], 0x59
xor byte [rdx + 3], 0x3f
xor byte [rdx + 4], 0x33
xor byte [rdx + 5], 0xa1
xor byte [rdx + 6], 7
xor byte [rdx + 7], 0x23
xor byte [rdx + 8], 0x95
xor byte [rdx + 9], 0xd9
xor byte [rdx + 0xa], 0x59
xor byte [rdx + 0xb], 0x3f
xor byte [rdx + 0xc], 0x33
xor byte [rdx + 0xd], 0xa1
xor byte [rdx + 0xe], 7
xor byte [rdx + 0xf], 0x23
xor byte [rdx + 0x10], 0x95
xor byte [rdx + 0x11], 0xd9
xor byte [rdx + 0x12], 0x59
xor byte [rdx + 0x13], 0x3f
xor byte [rdx + 0x14], 0x33
xor byte [rdx + 0x15], 0xa1
xor byte [rdx + 0x16], 7
xor byte [rdx + 0x17], 0x23
xor byte [rdx + 0x18], 0x95
xor byte [rdx + 0x19], 0xd9
xor byte [rdx + 0x1a], 0x59
xor byte [rdx + 0x1b], 0x3f
xor byte [rdx + 0x1c], 0x33
mov byte [rdx + 0x1d], 0
mov r8, rdi
inc r8
cmp byte [rdx + r8], 0
jne 0x1400482c2
lea rcx, str.Unkown_404
call fcn.1400505d0
mov dword [0x1401c8ed4], 4
call fcn.140043df0
test al, al
jne 0x1400482f5
call fcn.140044bf0
jmp 0x140048857
call fcn.140044bf0
test sil, sil
jne 0x140048857
lea rcx, [0x1401c9040]
call fcn.14005d070
test al, al
je 0x14004831a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
lea rax, [rsp + 0x78]
mov qword [rbp + 0x90], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rbx
mov qword [rbp - 0x70], rbx
lea rdx, [0x1401c8f00]
mov r8, rdi
inc r8
cmp byte [rdx + r8], 0
jne 0x140048340
lea rcx, [rsp + 0x78]
call fcn.140041a00
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rbx
lea rdx, [0x1401c8f10]
mov r8, rdi
inc r8
cmp byte [rdx + r8], 0
jne 0x140048371
lea rcx, [rsp + 0x40]
call fcn.140041a00
nop
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x40]
lea rcx, [0x1401c9040]
call fcn.140061390
cmp byte [0x1401c9258], 1
jne 0x1400486f2
lea rcx, [0x1401c8f70]
call fcn.140041b10
test al, al
jne 0x1400484c1
lea rax, [rsp + 0x78]
mov qword [rbp + 0x98], rax
lea rdx, [0x1401c8f70]
lea rcx, [rsp + 0x78]
call fcn.14004fc30
mov rsi, rax
movdqa xmm0, xmmword [0x14015d670]
movdqu xmmword [rbp - 0x68], xmm0
movdqa xmm1, xmmword [str.FQWGH]
movdqu xmmword [rbp - 0x58], xmm1
movdqa xmm0, xmmword [0x14015d710]
movdqu xmmword [rbp - 0x48], xmm0
movdqa xmm1, xmmword [0x14015d6b0]
movdqu xmmword [rbp - 0x38], xmm1
movdqa xmm0, xmmword [0x14015d440]
movdqu xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x14015d8b0]
movdqu xmmword [rbp - 0x18], xmm1
movdqa xmm0, xmmword [0x14015d840]
movdqu xmmword [rbp - 8], xmm0
movdqa xmm1, xmmword [0x14015d7f0]
movdqu xmmword [rbp + 8], xmm1
movdqa xmm0, xmmword [0x14015d920]
movdqu xmmword [rbp + 0x18], xmm0
movdqa xmm1, xmmword [0x14015d850]
movdqu xmmword [rbp + 0x28], xmm1
movdqa xmm0, xmmword [0x14015d8c0]
movdqu xmmword [rbp + 0x38], xmm0
mov dword [rbp + 0x48], 0xeeecb0e0
mov dword [rbp + 0x4c], 0xfcbcbbe7
mov word [rbp + 0x50], 0x100
mov rcx, rbx
lea eax, [rcx + 0x23]
xor byte [rbp + rcx - 0x68], al
inc rcx
cmp rcx, 0xb8
jb 0x140048483
mov byte [rbp + 0x51], 0
lea r9, [rbp + 0x90]
lea r8, [rbp + 0x50]
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x40]
call fcn.1400510a0
nop
mov rdx, rsi
lea rcx, [rsp + 0x40]
call fcn.1400415d0
lea rcx, [0x1401c8f50]
call fcn.140041b10
test al, al
jne 0x140048588
lea rax, [rsp + 0x78]
mov qword [rbp + 0x90], rax
lea rdx, [0x1401c8f50]
lea rcx, [rsp + 0x78]
call fcn.14004fc30
mov rsi, rax
call fcn.140048870
mov r9, rax
cmp byte [rax + 0xc9], 0
je 0x140048547
mov rdx, rbx
movabs r8, 0xcfeb43e9d1b77b37
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [r9 + rdx], al
inc rdx
cmp rdx, 0xc9
jb 0x140048520
mov byte [r9 + 0xc9], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rbx
nop dword [rax]
inc rdi
cmp byte [r9 + rdi], 0
jne 0x140048560
mov r8, rdi
mov rdx, r9
lea rcx, [rsp + 0x40]
call fcn.140041a00
nop
mov rdx, rsi
lea rcx, [rsp + 0x40]
call fcn.1400415d0
lea rcx, [0x1401c9300]
call fcn.140041b10
test al, al
jne 0x1400486a3
lea rax, [rsp + 0x78]
mov qword [rbp + 0x98], rax
lea rdx, [0x1401c9300]
lea rcx, [rsp + 0x78]
call fcn.14004fc30
mov rdi, rax
movdqa xmm0, xmmword [0x14015d670]
movdqu xmmword [rbp - 0x68], xmm0
movdqa xmm1, xmmword [str.FQWGH]
movdqu xmmword [rbp - 0x58], xmm1
movdqa xmm0, xmmword [0x14015d710]
movdqu xmmword [rbp - 0x48], xmm0
movdqa xmm1, xmmword [0x14015d680]
movdqu xmmword [rbp - 0x38], xmm1
movdqa xmm0, xmmword [0x14015d4e0]
movdqu xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x14015d990]
movdqu xmmword [rbp - 0x18], xmm1
movdqa xmm0, xmmword [0x14015d940]
movdqu xmmword [rbp - 8], xmm0
movdqa xmm1, xmmword [0x14015d7a0]
movdqu xmmword [rbp + 8], xmm1
movdqa xmm0, xmmword [0x14015d900]
movdqu xmmword [rbp + 0x18], xmm0
movdqa xmm1, xmmword [0x14015d9d0]
movdqu xmmword [rbp + 0x28], xmm1
movdqa xmm0, xmmword [0x14015d8d0]
movdqu xmmword [rbp + 0x38], xmm0
movdqa xmm1, xmmword [0x14015d760]
movdqu xmmword [rbp + 0x48], xmm1
mov dword [rbp + 0x58], 0xc0d6d6d4
mov word [rbp + 0x5c], 0x100
lea eax, [rbx + 0x23]
xor byte [rbp + rbx - 0x68], al
inc rbx
cmp rbx, 0xc4
jb 0x140048665
mov byte [rbp + 0x5d], 0
lea r9, [rbp + 0x90]
lea r8, [rbp + 0x5c]
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x40]
call fcn.1400510a0
nop
mov rdx, rdi
lea rcx, [rsp + 0x40]
call fcn.1400415d0
lea rcx, [0x1401c8f90]
call fcn.140041b10
test al, al
je 0x1400486dc
lea rcx, [0x1401c8f90]
call fcn.14004fa70
mov rcx, rax
call fcn.140043c90
lea rcx, [0x1401c9040]
call fcn.14005c6d0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov byte [0x1401c8ebb], 1
mov dword [0x1401c8ed4], 2
jmp 0x140048857
mov dword [0x1401c8ed4], 4
lea rdx, [0x1401c9260]
cmp qword [0x1401c9278], 0xf
cmova rdx, qword [0x1401c9260]
inc rdi
cmp byte [rdx + rdi], 0
jne 0x140048713
mov r8, rdi
lea rcx, str.Unkown_404
call fcn.1400505d0
jmp 0x140048857
movdqa xmm0, xmmword [0x14015d820]
mov dword [rsp + 0x70], 0x80e178ae
mov word [rsp + 0x74], 0xcdfe
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x548
mov eax, dword [rdx + rcx]
mov ebx, 0x490
add rbx, rcx
test al, 1
jne 0x1400487c6
or eax, 1
mov dword [rdx + rcx], eax
mov byte [rbx + 0x17], 1
lea rax, [rbx + 0x16]
lea rcx, [rsp + 0x76]
cmp rbx, rcx
ja 0x1400487a2
lea rcx, [rsp + 0x60]
cmp rax, rcx
jb 0x1400487a2
movups xmmword [rbx], xmm0
mov eax, dword [rsp + 0x70]
mov dword [rbx + 0x10], eax
movzx eax, word [rsp + 0x74]
mov word [rbx + 0x14], ax
mov byte [rbx + 0x16], 0x57
jmp 0x1400487b9
movups xmmword [rbx], xmm0
mov eax, dword [rsp + 0x70]
mov dword [rbx + 0x10], eax
movzx eax, word [rsp + 0x74]
mov word [rbx + 0x14], ax
mov byte [rbx + 0x16], 0x57
lea rcx, [0x140124570]
call fcn.14011f97c
nop
cmp byte [rbx + 0x17], 0
je 0x14004882b
xor byte [rbx], 0xcb
xor byte [rbx + 1], 0x1b
xor byte [rbx + 2], 0x95
xor byte [rbx + 3], 0xe9
xor byte [rbx + 4], 0x91
xor byte [rbx + 5], 0xa3
xor byte [rbx + 6], 0x57
xor byte [rbx + 7], 0xcf
xor byte [rbx + 8], 0xcb
xor byte [rbx + 9], 0x1b
xor byte [rbx + 0xa], 0x95
xor byte [rbx + 0xb], 0xe9
xor byte [rbx + 0xc], 0x91
xor byte [rbx + 0xd], 0xa3
xor byte [rbx + 0xe], 0x57
xor byte [rbx + 0xf], 0xcf
xor byte [rbx + 0x10], 0xcb
xor byte [rbx + 0x11], 0x1b
xor byte [rbx + 0x12], 0x95
xor byte [rbx + 0x13], 0xe9
xor byte [rbx + 0x14], 0x91
xor byte [rbx + 0x15], 0xa3
xor byte [rbx + 0x16], 0x57
mov byte [rbx + 0x17], 0
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rbx + rdi], 0
jne 0x140048832
mov r8, rdi
mov rdx, rbx
lea rcx, str.Unkown_404
call fcn.1400505d0
mov dword [0x1401c8ed4], 4
mov rbx, qword [rsp + 0x1a0]
add rsp, 0x160
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret