Function at 0x822ba0
Capabilities:
Connect to http server

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb8
mov rbp, rsp
mov qword [rbp + 0x50], rcx
mov dword [rbp + 0x58], edx
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xf0], r8
mov qword [rbp + 0xf8], r9
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x110]
mov qword [rbp + 0x110], rax
mov rax, qword [rbp + 0x118]
mov qword [rbp + 0x118], rax
mov rax, qword [rbp + 0x120]
mov qword [rbp + 0x120], rax
mov rcx, qword [rbp + 0xf0]
call fcn.00412ee0
mov rcx, qword [rbp + 0xf8]
call fcn.00412ee0
mov rcx, qword [rbp + 0x100]
call fcn.00412ee0
mov rcx, qword [rbp + 0x110]
call fcn.00412ee0
mov rcx, qword [rbp + 0x118]
call fcn.00412ee0
mov rcx, qword [rbp + 0x120]
call fcn.00412ee0
nop
xor eax, eax
mov byte [rbp + 0x5f], al
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax + 0xe0]
mov edx, 0x102
call fcn.0066cf80
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax + 0xe0]
mov rdx, qword [0x00921298]
call fcn.0066cf30
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax + 0xe0]
mov dl, 1
call fcn.0066cc40
mov rax, qword [rbp + 0x50]
mov rax, qword [rax + 0x150]
mov rax, qword [rax + 0x10]
cmp dword [rax + 0x10], 1
jle 0x822d94
lea rcx, [rbp + 0x90]
mov rax, qword [rbp + 0x50]
mov edx, dword [rax + 0x7c]
call fcn.0043bfe0
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax + 0x150]
call fcn.0082e5c0
lea rcx, [rbp + 0x88]
mov edx, eax
call fcn.0043bfe0
lea rcx, [rbp + 0x98]
mov edx, 6
mov r8, qword [rbp + 0x90]
lea r9, [0x008232a8]
mov rax, qword [rbp + 0x50]
mov rax, qword [rax + 0x228]
mov qword [rsp + 0x20], rax
lea rax, [0x008232a8]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x88]
mov qword [rsp + 0x30], rax
lea rax, [0x008232b8]
mov qword [rsp + 0x38], rax
call fcn.00414a50
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax + 0xa0]
mov rdx, qword [rbp + 0x98]
call fcn.00602260
jmp 0x822da6
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax + 0xa0]
xor edx, edx
call fcn.00602260
mov rax, qword [rbp + 0x50]
mov rbx, qword [rax + 0xa0]
mov rcx, rbx
lea rdx, [rbp + 0x78]
call fcn.006021f0
lea rcx, [rbp + 0x70]
mov rdx, qword [rbp + 0x110]
call fcn.008188c0
lea rcx, [rbp + 0x80]
mov edx, 8
mov rax, qword [rbp + 0x50]
mov r8, qword [rax + 0x108]
lea r9, [0x008232a8]
mov rax, qword [rbp + 0x78]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x70]
mov qword [rsp + 0x28], rax
lea rax, [0x008232a8]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x50]
mov rax, qword [rax + 0x238]
mov qword [rsp + 0x38], rax
lea rax, [0x008232a8]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x100]
mov qword [rsp + 0x48], rax
call fcn.00414a50
mov rcx, rbx
mov rdx, qword [rbp + 0x80]
call fcn.00602260
mov rax, qword [rbp + 0x50]
cmp byte [rax + 0x242], 0
je 0x822e59
mov ebx, 0x8000000
jmp 0x822e5b
xor ebx, ebx
mov rax, qword [0x0091a378]
mov rcx, qword [rax]
call fcn.007397f0
lea rcx, [rbp + 0x68]
mov edx, 3
mov r8, qword [rbp + 0x100]
mov r9, qword [rbp + 0xf0]
mov rax, qword [rbp + 0xf8]
mov qword [rsp + 0x20], rax
call fcn.00414a50
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax + 0x2d8]
mov rdx, qword [rbp + 0x68]
call fcn.00414b20
test eax, eax
jne 0x822eba
mov rax, qword [rbp + 0x50]
mov rbx, qword [rax + 0x2d0]
jmp 0x822f90
mov rax, qword [rbp + 0x50]
lea rcx, [rax + 0x2e0]
call fcn.00412d10
cmp qword [rbp + 0xf0], 0
je 0x822ede
cmp qword [rbp + 0xf8], 0
jne 0x822f2b
mov rcx, qword [rbp + 0x100]
call fcn.00414500
mov rcx, qword [rbp + 0x50]
mov rcx, qword [rcx + 0x158]
mov rdx, rax
movzx r8, word [rbp + 0x108]
xor r9, r9
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x38], 0
call sub.wininet.dll_InternetConnectW
mov rbx, rax
jmp 0x822f90
mov rcx, qword [rbp + 0x100]
call fcn.00414500
mov rsi, rax
mov rcx, qword [rbp + 0xf0]
call fcn.00414500
mov rdi, rax
mov rcx, qword [rbp + 0xf8]
call fcn.00414500
mov rcx, qword [rbp + 0x50]
mov rcx, qword [rcx + 0x158]
mov rdx, rsi
movzx r8, word [rbp + 0x108]
mov r9, rdi
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x38], 0
call sub.wininet.dll_InternetConnectW
mov rbx, rax
test rbx, rbx
jne 0x823013
mov rax, qword [rbp + 0x50]
cmp qword [rax + 0x160], 0
je 0x822fc2
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax + 0x168]
mov rdx, qword [rbp + 0x50]
mov r8d, 6
mov rbx, qword [rbp + 0x50]
call qword [rbx + 0x160]
mov rax, qword [rbp + 0x50]
cmp qword [rax + 0x170], 0
je 0x8231bf
lea rcx, [rbp + 0x60]
lea rdx, [0x008232cc]
mov r8, qword [rbp + 0x100]
call fcn.00414920
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax + 0x178]
mov rdx, qword [rbp + 0x50]
mov r8d, 6
mov r9, qword [rbp + 0x60]
mov rbx, qword [rbp + 0x50]
call qword [rbx + 0x170]
jmp 0x8231bf
cmp byte [rbp + 0x128], 0
je 0x823052
mov rax, qword [rbp + 0x50]
mov qword [rax + 0x2d0], rbx
lea rcx, [rax + 0x2d8]
mov edx, 3
mov r8, qword [rbp + 0x100]
mov r9, qword [rbp + 0xf0]
mov rax, qword [rbp + 0xf8]
mov qword [rsp + 0x20], rax
call fcn.00414a50
mov rax, qword [0x0091a378]
mov rcx, qword [rax]
call fcn.007397f0
cmp qword [rbp + 0x118], 0
je 0x8230d7
mov rcx, qword [rbp + 0x118]
mov rax, qword [rbp + 0x50]
mov rdx, qword [rax + 0x2e0]
call fcn.00414b20
test eax, eax
je 0x8230d7
cmp byte [rbp + 0x128], 0
je 0x8230a8
mov rax, qword [rbp + 0x50]
lea rcx, [rax + 0x2e0]
mov rdx, qword [rbp + 0x118]
call fcn.004133a0
jmp 0x8230b8
mov rax, qword [rbp + 0x50]
lea rcx, [rax + 0x2e0]
call fcn.00412d10
mov rcx, qword [rbp + 0x118]
call fcn.00414500
mov rcx, rbx
mov rdx, rax
call sub.wininet.dll_FtpSetCurrentDirectoryW
test eax, eax
je 0x8231bf
mov rax, qword [0x0091a378]
mov rcx, qword [rax]
call fcn.007397f0
lea rcx, [rbp + 0xa8]
mov rdx, qword [rbp + 0x110]
call fcn.00413430
cmp qword [rbp + 0x120], 0
jne 0x823116
lea rcx, [rbp + 0x120]
mov rdx, qword [rbp + 0x110]
call fcn.008188c0
mov rcx, qword [rbp + 0x120]
call fcn.00414500
mov rcx, rbx
mov rdx, rax
call sub.wininet.dll_FtpDeleteFileW
test eax, eax
je 0x82315e
mov rax, qword [rbp + 0x50]
cmp qword [rax + 0x318], 0
je 0x823189
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax + 0x320]
mov rdx, qword [rbp + 0x50]
mov r8d, dword [rbp + 0x58]
mov rsi, qword [rbp + 0x50]
call qword [rsi + 0x318]
jmp 0x823189
mov rax, qword [rbp + 0x50]
cmp qword [rax + 0x328], 0
je 0x823189
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax + 0x330]
mov rdx, qword [rbp + 0x50]
mov r8d, dword [rbp + 0x58]
mov rsi, qword [rbp + 0x50]
call qword [rsi + 0x328]
mov rax, qword [0x0091a378]
mov rcx, qword [rax]
call fcn.007397f0
cmp byte [rbp + 0x128], 0
jne 0x8231b9
mov rcx, rbx
call sub.wininet.dll_InternetCloseHandle
mov rax, qword [rbp + 0x50]
lea rcx, [rax + 0x2d8]
call fcn.00412d10
mov al, 1
mov byte [rbp + 0x5f], al
nop
lea rcx, [rbp + 0x60]
mov edx, 3
call fcn.00412df0
lea rcx, [rbp + 0x78]
call fcn.00412d10
lea rcx, [rbp + 0x80]
mov edx, 4
call fcn.00412df0
lea rcx, [rbp + 0xa8]
call fcn.00412d10
lea rcx, [rbp + 0xf0]
mov edx, 3
call fcn.00412df0
lea rcx, [rbp + 0x110]
mov edx, 3
call fcn.00412df0
movzx rax, byte [rbp + 0x5f]
lea rsp, [rbp + 0xb8]
pop rbx
pop rsi
pop rdi
pop rbp
ret