Function at 0x1400061a0
Capabilities:
Check internet connectivity via wininet
Read data from internet
Receive data

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x30cf0]
mov eax, 0x30df0
call fcn.1401b39e0
sub rsp, rax
mov qword [rbp - 0x80], 0xfffffffffffffffe
mov qword [rsp + 0x30e38], rbx
mov rax, qword [0x1402a87a8]
xor rax, rsp
mov qword [rbp + 0x30ce0], rax
mov rsi, r9
mov r13, r8
mov rbx, rcx
mov qword [rsp + 0x78], rcx
mov dword [rsp + 0x40], 0
xor edx, edx
mov r8d, 0x186a0
lea rcx, [rbp - 0x60]
call fcn.1401b8ea0
cmp byte [0x1403b0cf0], 0
je 0x14000625f
lea rcx, [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [rbp - 0x6c]
movzx ecx, word [rbp - 0x6e]
movzx edx, word [rbp - 0x70]
movzx r10d, word [rbp - 0x72]
movzx r9d, word [rbp - 0x76]
movzx r8d, word [rbp - 0x78]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r10d
lea rdx, str._.4d__.2d__.2d__.2d:_.2d:_.2d
mov rcx, r13
call qword [sym.imp.USER32.dll_wsprintfW]
xor eax, eax
jmp 0x1400065f4
lea r8, str.Server_Connection_unavailable...
mov edx, 0x80
mov rcx, r13
call fcn.1401c573c
cmp qword [rbx + 8], 0
je 0x1400065ef
xor edx, edx
lea rcx, [rsp + 0x70]
call qword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
je 0x1400065ef
call fcn.140032a84
mov rcx, rax
test rax, rax
je 0x140006629
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rdx, str..phpguidON
mov rdi, 0xffffffffffffffff
cmp rdx, 0x10000
jae 0x1400062d9
movzx edx, dx
lea rcx, [rsp + 0x48]
call fcn.140003670
jmp 0x1400062f8
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400062e0
mov r8d, eax
lea rcx, [rsp + 0x48]
call fcn.140003aa0
nop
call fcn.140032a84
mov rcx, rax
test rax, rax
je 0x140006634
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rdx, str.mynewtime.php_utmacMO_37074682_1utmn1854806732utmr_utmp_2FI_ping_
cmp rdx, 0x10000
jae 0x140006337
movzx edx, dx
lea rcx, [rsp + 0x50]
call fcn.140003670
jmp 0x140006358
mov rax, rdi
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140006340
mov r8d, eax
lea rcx, [rsp + 0x50]
call fcn.140003aa0
nop
mov rbx, qword [rsp + 0x50]
lea r15, [rbx - 0x18]
mov rcx, qword [r15]
test rcx, rcx
je 0x140006377
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140006388
call fcn.140032a84
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x14000663f
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x40], 1
mov ecx, dword [rbx - 0x10]
lea rdx, [0x1403b0d10]
mov rax, rdi
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400063b5
mov dword [rsp + 0x20], ecx
mov r9, rbx
mov r8d, eax
lea rcx, [rsp + 0x60]
call fcn.1400075f0
add rsi, 0x1004
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x1400063f6
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x140006407
call fcn.140032a84
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x14000661e
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov r14d, 3
mov dword [rsp + 0x40], r14d
test rsi, rsi
jne 0x140006433
xor eax, eax
jmp 0x140006440
mov rax, rdi
inc rax
cmp word [rsi + rax*2], 0
jne 0x140006436
mov dword [rsp + 0x20], eax
mov r9, rsi
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.1400075f0
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x68]
call fcn.140007330
nop
mov dword [rsp + 0x40], 1
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140006494
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov eax, edi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x1400064af
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov eax, edi
lock xadd dword [r15 + 0x10], eax
sub eax, 1
jg 0x1400064c9
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400064e7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rsp + 0x68]
mov rcx, qword [rsp + 0x78]
call fcn.140004f20
mov rbx, rax
test rax, rax
jne 0x140006507
lea r14d, [rax + 2]
jmp 0x1400065cd
xor edx, edx
mov r8d, 0x186a0
lea rcx, [rbp + 0x18640]
call fcn.1401b8ea0
mov dword [rsp + 0x44], 0
lea r9, [rsp + 0x44]
mov r8d, 0x186a0
lea rdx, [rbp + 0x18640]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14000654e
cmp dword [rsp + 0x44], 0
jbe 0x14000654e
mov sil, 1
jmp 0x140006551
xor sil, sil
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call fcn.1401b8ea0
movups xmm0, xmmword [rbp + 0x18642]
movaps xmmword [rbp - 0x60], xmm0
movzx eax, word [rbp + 0x18652]
mov word [rbp - 0x50], ax
movzx eax, byte [rbp + 0x18654]
mov byte [rbp - 0x4e], al
lea rax, [rbp - 0x60]
mov r9, rdi
nop dword [rax + rax]
inc r9
cmp byte [rax + r9], 0
jne 0x140006590
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], r13
lea r8, [rbp - 0x60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
test sil, sil
je 0x1400065cd
mov byte [0x1403b0cf0], 1
xor r14d, r14d
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x1400065ea
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, r14d
jmp 0x1400065f4
mov eax, 1
mov rcx, qword [rbp + 0x30ce0]
xor rcx, rsp
call fcn.1401b2ef0
mov rbx, qword [rsp + 0x30e38]
add rsp, 0x30df0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004005
call fcn.140003a80
nop
mov ecx, 0x80004005
call fcn.140003a80
nop
mov ecx, 0x80004005
call fcn.140003a80
nop
mov ecx, 0x80004005
call fcn.140003a80
int3