Function at 0x14000a820
Capabilities:
Check internet connectivity via wininet
Read data from internet
Receive data

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x30cf0]
mov eax, 0x30df0
call fcn.1401b24e0
sub rsp, rax
mov qword [rbp - 0x80], 0xfffffffffffffffe
mov qword [rsp + 0x30e38], rbx
mov rax, qword [0x14029f7a8]
xor rax, rsp
mov qword [rbp + 0x30ce0], rax
mov rsi, r9
mov r13, r8
mov rbx, rcx
mov qword [rsp + 0x78], rcx
mov dword [rsp + 0x40], 0
xor edx, edx
mov r8d, 0x186a0
lea rcx, [rbp - 0x60]
call fcn.1401b5d40
cmp byte [0x14037d400], 0
je 0x14000a8df
lea rcx, [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [rbp - 0x6c]
movzx ecx, word [rbp - 0x6e]
movzx edx, word [rbp - 0x70]
movzx r10d, word [rbp - 0x72]
movzx r9d, word [rbp - 0x76]
movzx r8d, word [rbp - 0x78]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r10d
lea rdx, str._.4d__.2d__.2d__.2d:_.2d:_.2d
mov rcx, r13
call qword [sym.imp.USER32.dll_wsprintfW]
xor eax, eax
jmp 0x14000ac74
lea r8, str.Server_Connection_unavailable...
mov edx, 0x80
mov rcx, r13
call fcn.1401c07e8
cmp qword [rbx + 8], 0
je 0x14000ac6f
xor edx, edx
lea rcx, [rsp + 0x70]
call qword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
je 0x14000ac6f
call fcn.1400315f4
mov rcx, rax
test rax, rax
je 0x14000aca9
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rdx, str..phpguidON
mov rdi, 0xffffffffffffffff
cmp rdx, 0x10000
jae 0x14000a959
movzx edx, dx
lea rcx, [rsp + 0x48]
call fcn.140007da0
jmp 0x14000a978
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14000a960
mov r8d, eax
lea rcx, [rsp + 0x48]
call fcn.1400081d0
nop
call fcn.1400315f4
mov rcx, rax
test rax, rax
je 0x14000acb4
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rdx, str.mynewtime.php_utmacMO_37074682_1utmn1854806732utmr_utmp_2FI_ping_
cmp rdx, 0x10000
jae 0x14000a9b7
movzx edx, dx
lea rcx, [rsp + 0x50]
call fcn.140007da0
jmp 0x14000a9d8
mov rax, rdi
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14000a9c0
mov r8d, eax
lea rcx, [rsp + 0x50]
call fcn.1400081d0
nop
mov rbx, qword [rsp + 0x50]
lea r15, [rbx - 0x18]
mov rcx, qword [r15]
test rcx, rcx
je 0x14000a9f7
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x14000aa08
call fcn.1400315f4
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x14000acbf
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x40], 1
mov ecx, dword [rbx - 0x10]
lea rdx, [0x14037d420]
mov rax, rdi
inc rax
cmp word [rdx + rax*2], 0
jne 0x14000aa35
mov dword [rsp + 0x20], ecx
mov r9, rbx
mov r8d, eax
lea rcx, [rsp + 0x60]
call fcn.14000bc70
add rsi, 0x1004
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x14000aa76
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x14000aa87
call fcn.1400315f4
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x14000ac9e
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov r14d, 3
mov dword [rsp + 0x40], r14d
test rsi, rsi
jne 0x14000aab3
xor eax, eax
jmp 0x14000aac0
mov rax, rdi
inc rax
cmp word [rsi + rax*2], 0
jne 0x14000aab6
mov dword [rsp + 0x20], eax
mov r9, rsi
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.14000bc70
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x68]
call fcn.14000b9b0
nop
mov dword [rsp + 0x40], 1
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000ab14
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov eax, edi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x14000ab2f
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov eax, edi
lock xadd dword [r15 + 0x10], eax
sub eax, 1
jg 0x14000ab49
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000ab67
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rsp + 0x68]
mov rcx, qword [rsp + 0x78]
call fcn.1400095a0
mov rbx, rax
test rax, rax
jne 0x14000ab87
lea r14d, [rax + 2]
jmp 0x14000ac4d
xor edx, edx
mov r8d, 0x186a0
lea rcx, [rbp + 0x18640]
call fcn.1401b5d40
mov dword [rsp + 0x44], 0
lea r9, [rsp + 0x44]
mov r8d, 0x186a0
lea rdx, [rbp + 0x18640]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14000abce
cmp dword [rsp + 0x44], 0
jbe 0x14000abce
mov sil, 1
jmp 0x14000abd1
xor sil, sil
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call fcn.1401b5d40
movups xmm0, xmmword [rbp + 0x18642]
movaps xmmword [rbp - 0x60], xmm0
movzx eax, word [rbp + 0x18652]
mov word [rbp - 0x50], ax
movzx eax, byte [rbp + 0x18654]
mov byte [rbp - 0x4e], al
lea rax, [rbp - 0x60]
mov r9, rdi
nop dword [rax + rax]
inc r9
cmp byte [rax + r9], 0
jne 0x14000ac10
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], r13
lea r8, [rbp - 0x60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
test sil, sil
je 0x14000ac4d
mov byte [0x14037d400], 1
xor r14d, r14d
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14000ac6a
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, r14d
jmp 0x14000ac74
mov eax, 1
mov rcx, qword [rbp + 0x30ce0]
xor rcx, rsp
call fcn.1401b1a60
mov rbx, qword [rsp + 0x30e38]
add rsp, 0x30df0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004005
call fcn.1400081b0
nop
mov ecx, 0x80004005
call fcn.1400081b0
nop
mov ecx, 0x80004005
call fcn.1400081b0
nop
mov ecx, 0x80004005
call fcn.1400081b0
int3