Function at 0x14000b480
Capabilities:
Check internet connectivity via wininet
Read data from internet
Receive data

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x30cf0]
mov eax, 0x30df0
call fcn.1401b7a40
sub rsp, rax
mov qword [rbp - 0x80], 0xfffffffffffffffe
mov qword [rsp + 0x30e38], rbx
mov rax, qword [0x1402ac7a8]
xor rax, rsp
mov qword [rbp + 0x30ce0], rax
mov rsi, r9
mov r13, r8
mov rbx, rcx
mov qword [rsp + 0x78], rcx
mov dword [rsp + 0x40], 0
xor edx, edx
mov r8d, 0x186a0
lea rcx, [rbp - 0x60]
call fcn.1401bcf80
cmp byte [0x1403a6bd0], 0
je 0x14000b53f
lea rcx, [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [rbp - 0x6c]
movzx ecx, word [rbp - 0x6e]
movzx edx, word [rbp - 0x70]
movzx r10d, word [rbp - 0x72]
movzx r9d, word [rbp - 0x76]
movzx r8d, word [rbp - 0x78]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r10d
lea rdx, str._.4d__.2d__.2d__.2d:_.2d:_.2d
mov rcx, r13
call qword [sym.imp.USER32.dll_wsprintfW]
xor eax, eax
jmp 0x14000b8d4
lea r8, str.Server_Connection_unavailable...
mov edx, 0x80
mov rcx, r13
call fcn.1401c981c
cmp qword [rbx + 8], 0
je 0x14000b8cf
xor edx, edx
lea rcx, [rsp + 0x70]
call qword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
je 0x14000b8cf
call fcn.140036b54
mov rcx, rax
test rax, rax
je 0x14000b909
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rdx, str..phpguidON
mov rdi, 0xffffffffffffffff
cmp rdx, 0x10000
jae 0x14000b5b9
movzx edx, dx
lea rcx, [rsp + 0x48]
call fcn.140008900
jmp 0x14000b5d8
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14000b5c0
mov r8d, eax
lea rcx, [rsp + 0x48]
call fcn.140008d30
nop
call fcn.140036b54
mov rcx, rax
test rax, rax
je 0x14000b914
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rdx, str.mynewtime.php_utmacMO_37074682_1utmn1854806732utmr_utmp_2FI_ping_
cmp rdx, 0x10000
jae 0x14000b617
movzx edx, dx
lea rcx, [rsp + 0x50]
call fcn.140008900
jmp 0x14000b638
mov rax, rdi
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14000b620
mov r8d, eax
lea rcx, [rsp + 0x50]
call fcn.140008d30
nop
mov rbx, qword [rsp + 0x50]
lea r15, [rbx - 0x18]
mov rcx, qword [r15]
test rcx, rcx
je 0x14000b657
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x14000b668
call fcn.140036b54
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x14000b91f
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x40], 1
mov ecx, dword [rbx - 0x10]
lea rdx, [0x1403a6bf0]
mov rax, rdi
inc rax
cmp word [rdx + rax*2], 0
jne 0x14000b695
mov dword [rsp + 0x20], ecx
mov r9, rbx
mov r8d, eax
lea rcx, [rsp + 0x60]
call fcn.14000c8d0
add rsi, 0x1004
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x14000b6d6
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x14000b6e7
call fcn.140036b54
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x14000b8fe
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov r14d, 3
mov dword [rsp + 0x40], r14d
test rsi, rsi
jne 0x14000b713
xor eax, eax
jmp 0x14000b720
mov rax, rdi
inc rax
cmp word [rsi + rax*2], 0
jne 0x14000b716
mov dword [rsp + 0x20], eax
mov r9, rsi
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.14000c8d0
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x68]
call fcn.14000c610
nop
mov dword [rsp + 0x40], 1
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000b774
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov eax, edi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x14000b78f
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov eax, edi
lock xadd dword [r15 + 0x10], eax
sub eax, 1
jg 0x14000b7a9
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000b7c7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rsp + 0x68]
mov rcx, qword [rsp + 0x78]
call fcn.14000a200
mov rbx, rax
test rax, rax
jne 0x14000b7e7
lea r14d, [rax + 2]
jmp 0x14000b8ad
xor edx, edx
mov r8d, 0x186a0
lea rcx, [rbp + 0x18640]
call fcn.1401bcf80
mov dword [rsp + 0x44], 0
lea r9, [rsp + 0x44]
mov r8d, 0x186a0
lea rdx, [rbp + 0x18640]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14000b82e
cmp dword [rsp + 0x44], 0
jbe 0x14000b82e
mov sil, 1
jmp 0x14000b831
xor sil, sil
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call fcn.1401bcf80
movups xmm0, xmmword [rbp + 0x18642]
movaps xmmword [rbp - 0x60], xmm0
movzx eax, word [rbp + 0x18652]
mov word [rbp - 0x50], ax
movzx eax, byte [rbp + 0x18654]
mov byte [rbp - 0x4e], al
lea rax, [rbp - 0x60]
mov r9, rdi
nop dword [rax + rax]
inc r9
cmp byte [rax + r9], 0
jne 0x14000b870
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], r13
lea r8, [rbp - 0x60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
test sil, sil
je 0x14000b8ad
mov byte [0x1403a6bd0], 1
xor r14d, r14d
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14000b8ca
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, r14d
jmp 0x14000b8d4
mov eax, 1
mov rcx, qword [rbp + 0x30ce0]
xor rcx, rsp
call fcn.1401b6fc0
mov rbx, qword [rsp + 0x30e38]
add rsp, 0x30df0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004005
call fcn.140008d10
nop
mov ecx, 0x80004005
call fcn.140008d10
nop
mov ecx, 0x80004005
call fcn.140008d10
nop
mov ecx, 0x80004005
call fcn.140008d10
int3