Function at 0x14000b430
Capabilities:
Check internet connectivity via wininet
Read data from internet
Receive data

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x30cf0]
mov eax, 0x30df0
call fcn.1401b7d00
sub rsp, rax
mov qword [rbp - 0x80], 0xfffffffffffffffe
mov qword [rsp + 0x30e38], rbx
mov rax, qword [0x1402ad7a8]
xor rax, rsp
mov qword [rbp + 0x30ce0], rax
mov rsi, r9
mov r13, r8
mov rbx, rcx
mov qword [rsp + 0x78], rcx
mov dword [rsp + 0x40], 0
xor edx, edx
mov r8d, 0x186a0
lea rcx, [rbp - 0x60]
call fcn.1401bd240
cmp byte [0x1403b5de0], 0
je 0x14000b4ef
lea rcx, [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [rbp - 0x6c]
movzx ecx, word [rbp - 0x6e]
movzx edx, word [rbp - 0x70]
movzx r10d, word [rbp - 0x72]
movzx r9d, word [rbp - 0x76]
movzx r8d, word [rbp - 0x78]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r10d
lea rdx, str._.4d__.2d__.2d__.2d:_.2d:_.2d
mov rcx, r13
call qword [sym.imp.USER32.dll_wsprintfW]
xor eax, eax
jmp 0x14000b884
lea r8, str.Server_Connection_unavailable...
mov edx, 0x80
mov rcx, r13
call fcn.1401c9adc
cmp qword [rbx + 8], 0
je 0x14000b87f
xor edx, edx
lea rcx, [rsp + 0x70]
call qword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
je 0x14000b87f
call fcn.140036e14
mov rcx, rax
test rax, rax
je 0x14000b8b9
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rdx, str..phpguidON
mov rdi, 0xffffffffffffffff
cmp rdx, 0x10000
jae 0x14000b569
movzx edx, dx
lea rcx, [rsp + 0x48]
call fcn.140008900
jmp 0x14000b588
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14000b570
mov r8d, eax
lea rcx, [rsp + 0x48]
call fcn.140008d30
nop
call fcn.140036e14
mov rcx, rax
test rax, rax
je 0x14000b8c4
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rdx, str.mynewtime.php_utmacMO_37074682_1utmn1854806732utmr_utmp_2FI_ping_
cmp rdx, 0x10000
jae 0x14000b5c7
movzx edx, dx
lea rcx, [rsp + 0x50]
call fcn.140008900
jmp 0x14000b5e8
mov rax, rdi
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14000b5d0
mov r8d, eax
lea rcx, [rsp + 0x50]
call fcn.140008d30
nop
mov rbx, qword [rsp + 0x50]
lea r15, [rbx - 0x18]
mov rcx, qword [r15]
test rcx, rcx
je 0x14000b607
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x14000b618
call fcn.140036e14
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x14000b8cf
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x40], 1
mov ecx, dword [rbx - 0x10]
lea rdx, [0x1403b5e00]
mov rax, rdi
inc rax
cmp word [rdx + rax*2], 0
jne 0x14000b645
mov dword [rsp + 0x20], ecx
mov r9, rbx
mov r8d, eax
lea rcx, [rsp + 0x60]
call fcn.14000c880
add rsi, 0x1004
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x14000b686
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x14000b697
call fcn.140036e14
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x14000b8ae
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov r14d, 3
mov dword [rsp + 0x40], r14d
test rsi, rsi
jne 0x14000b6c3
xor eax, eax
jmp 0x14000b6d0
mov rax, rdi
inc rax
cmp word [rsi + rax*2], 0
jne 0x14000b6c6
mov dword [rsp + 0x20], eax
mov r9, rsi
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.14000c880
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x68]
call fcn.14000c5c0
nop
mov dword [rsp + 0x40], 1
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000b724
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov eax, edi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x14000b73f
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov eax, edi
lock xadd dword [r15 + 0x10], eax
sub eax, 1
jg 0x14000b759
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000b777
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rsp + 0x68]
mov rcx, qword [rsp + 0x78]
call fcn.14000a1b0
mov rbx, rax
test rax, rax
jne 0x14000b797
lea r14d, [rax + 2]
jmp 0x14000b85d
xor edx, edx
mov r8d, 0x186a0
lea rcx, [rbp + 0x18640]
call fcn.1401bd240
mov dword [rsp + 0x44], 0
lea r9, [rsp + 0x44]
mov r8d, 0x186a0
lea rdx, [rbp + 0x18640]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14000b7de
cmp dword [rsp + 0x44], 0
jbe 0x14000b7de
mov sil, 1
jmp 0x14000b7e1
xor sil, sil
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call fcn.1401bd240
movups xmm0, xmmword [rbp + 0x18642]
movaps xmmword [rbp - 0x60], xmm0
movzx eax, word [rbp + 0x18652]
mov word [rbp - 0x50], ax
movzx eax, byte [rbp + 0x18654]
mov byte [rbp - 0x4e], al
lea rax, [rbp - 0x60]
mov r9, rdi
nop dword [rax + rax]
inc r9
cmp byte [rax + r9], 0
jne 0x14000b820
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], r13
lea r8, [rbp - 0x60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
test sil, sil
je 0x14000b85d
mov byte [0x1403b5de0], 1
xor r14d, r14d
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14000b87a
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, r14d
jmp 0x14000b884
mov eax, 1
mov rcx, qword [rbp + 0x30ce0]
xor rcx, rsp
call fcn.1401b7280
mov rbx, qword [rsp + 0x30e38]
add rsp, 0x30df0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004005
call fcn.140008d10
nop
mov ecx, 0x80004005
call fcn.140008d10
nop
mov ecx, 0x80004005
call fcn.140008d10
nop
mov ecx, 0x80004005
call fcn.140008d10
int3