Function at 0x1400080e0
Capabilities:
Check internet connectivity via wininet
Create directory
Initialize winhttp library

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x57]
sub rsp, 0xc0
mov qword [rbp + 0x1f], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rdi, r9
mov rbx, r8
mov r14, rdx
lea rcx, [rbp + 0x5f]
call qword [sym.imp.mfc120u.dll_Ordinal_286]
nop
mov edx, 0x2f
lea rcx, [rbp + 0x5f]
call qword [sym.imp.mfc120u.dll_Ordinal_12433]
lea r8d, [rax + 1]
xor edx, edx
lea rcx, [rbp + 0x5f]
call qword [sym.imp.mfc120u.dll_Ordinal_3683]
lea rcx, [rbp - 0x61]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
mov r9, rbx
mov r8, rdi
lea rdx, str._s_s_
lea rcx, [rbp - 0x61]
call qword [sym.imp.mfc120u.dll_Ordinal_4612]
xor edx, edx
mov rcx, qword [rbp - 0x61]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov r8, qword [rbp - 0x61]
xor edx, edx
lea rcx, [rbp + 0x5f]
call qword [sym.imp.mfc120u.dll_Ordinal_7629]
mov rax, qword [0x140018248]
test rax, rax
je 0x14000819a
mov dword [rax + 0x38], 3
mov rax, qword [0x140018248]
cmp byte [rax + 0x4d5], 0
sete sil
lea r13, vtable.CAPWinCommunication.0
mov qword [rbp - 0x51], r13
xor r15d, r15d
mov qword [rbp - 0x41], r15
mov qword [rbp - 0x39], r15
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
lea rcx, [rbp - 0x19]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [rbp - 0x11], r15b
mov qword [rbp - 9], r15
mov qword [rbp - 1], r15
mov qword [rbp + 7], r15
mov byte [rbp + 0xf], 1
mov qword [rbp - 0x49], r15
mov dword [rbp - 0x31], r15d
lea r12, vtable.CAPWinHttp.0
mov qword [rbp - 0x51], r12
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.Mozilla_4.0__compatible__MSIE_6.0_Windows_NT_5.1_
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov qword [rbp + 0x17], rax
lea rax, [0x1400080b0]
lea rcx, [0x140008080]
test sil, sil
cmovne rax, rcx
mov qword [rbp - 9], rax
lea edi, [r15 + 1]
nop dword [rax + rax]
test sil, sil
je 0x1400082a9
mov ebx, r15d
call fcn.140004f10
xor edx, edx
mov rcx, qword [0x140018a88]
mov rcx, qword [rcx + 0x48]
test al, al
je 0x14000828c
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14000843e
cmp ebx, 0xa
jl 0x14000829a
xor r8d, r8d
mov edx, edi
lea rcx, str.http:__www.nitropdf.com
call qword [sym.imp.WININET.dll_InternetCheckConnectionW]
cmp eax, edi
je 0x140008306
mov ebx, r15d
jmp 0x14000829a
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14000843e
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
jmp 0x140008248
xor r8d, r8d
mov edx, edi
lea rcx, str.http:__www.nitropdf.com
call qword [sym.imp.WININET.dll_InternetCheckConnectionW]
cmp eax, edi
je 0x140008306
nop
mov ebx, r15d
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov rcx, qword [0x140018a88]
mov rcx, qword [rcx + 0x48]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14000843e
inc ebx
cmp ebx, 0xa
jl 0x1400082c3
xor r8d, r8d
mov edx, edi
lea rcx, str.http:__www.nitropdf.com
call qword [sym.imp.WININET.dll_InternetCheckConnectionW]
cmp eax, edi
jne 0x1400082c0
movzx r9d, dil
mov r8, qword [rbp + 0x5f]
mov rdx, r14
lea rcx, [rbp - 0x51]
call fcn.140004060
test al, al
jne 0x140008443
xor r8d, r8d
mov edx, edi
lea rcx, str.http:__www.nitropdf.com
call qword [sym.imp.WININET.dll_InternetCheckConnectionW]
cmp eax, edi
jne 0x14000834e
test sil, sil
je 0x140008437
call fcn.140004f10
test al, al
jne 0x140008437
xor edx, edx
mov rcx, qword [0x140018a88]
mov rcx, qword [rcx + 0x48]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14000843e
test sil, sil
je 0x1400083d2
mov ebx, r15d
call fcn.140004f10
xor edx, edx
mov rcx, qword [0x140018a88]
mov rcx, qword [rcx + 0x48]
test al, al
je 0x1400083b9
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14000843e
cmp ebx, 0xa
jl 0x1400083c3
xor r8d, r8d
mov edx, edi
lea rcx, str.http:__www.nitropdf.com
call qword [sym.imp.WININET.dll_InternetCheckConnectionW]
cmp eax, edi
je 0x140008240
mov ebx, r15d
jmp 0x1400083c3
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14000843e
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
jmp 0x140008371
xor r8d, r8d
mov edx, edi
lea rcx, str.http:__www.nitropdf.com
call qword [sym.imp.WININET.dll_InternetCheckConnectionW]
cmp eax, edi
je 0x140008240
nop dword [rax]
mov ebx, r15d
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov rcx, qword [0x140018a88]
mov rcx, qword [rcx + 0x48]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14000843e
inc ebx
cmp ebx, 0xa
jl 0x1400083f3
xor r8d, r8d
mov edx, edi
lea rcx, str.http:__www.nitropdf.com
call qword [sym.imp.WININET.dll_InternetCheckConnectionW]
cmp eax, edi
jne 0x1400083f0
jmp 0x140008240
mov edi, 0xfffffffb
jmp 0x140008452
mov edi, r15d
jmp 0x140008452
mov rdx, qword [rbp + 0x5f]
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.mfc120u.dll_Ordinal_13477]
nop
mov qword [rbp - 0x51], r12
mov rcx, qword [rbp + 0x17]
test rcx, rcx
je 0x140008469
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov qword [rbp + 0x17], r15
mov qword [rbp - 0x51], r13
mov rcx, qword [rbp - 1]
test rcx, rcx
je 0x140008484
call qword [sym.imp.MSVCR120.dll_free]
mov qword [rbp - 1], r15
mov qword [rbp + 7], r15
lea rcx, [rbp - 0x19]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
lea rcx, [rbp - 0x21]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
lea rcx, [rbp - 0x29]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rbp - 0x61]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rbp + 0x5f]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
mov eax, edi
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret