Function at 0x140045ba0
Capabilities:
Connect to http server
Create http request
Execute command
Terminate process

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov rdi, rcx
xor r12d, r12d
mov dword [rbp + 0xf8], r12d
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], r12b
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r8d, 0x15
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], 0x8000000
mov dword [rsp + 0x28], 1
lea rcx, str.1JYguO9aQGXh5
mov qword [rsp + 0x20], rcx
lea r9, str.if0_35849343
lea rdx, str.ftp.infinityfree.com
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetConnectA]
mov rsi, rax
mov rdx, rdi
lea rcx, [rsp + 0x40]
call fcn.1400485b0
nop
mov r8, rdi
lea rcx, [rsp + 0x60]
call fcn.140048e80
mov rbx, rax
cmp rdi, rax
je 0x140045cc6
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x140045c9a
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x140045c95
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140045cfa
mov rcx, r8
call fcn.14004977c
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140045d06
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045d01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140045d01
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004977c
lea r8, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r8, qword [rsp + 0x40]
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140045d24
mov rdx, qword [rdi]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0x80
xor r9d, r9d
mov rcx, rsi
call qword [sym.imp.WININET.dll_FtpGetFileA]
test eax, eax
je 0x1400463fe
lea rbx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rbx, qword [rsp + 0x40]
lea rax, [0x1400593e0]
mov qword [rbp - 0x60], rax
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rbp + 0xf8], 1
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x60]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea r13, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x60], r13
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x64], edx
lea rcx, [rbp - 0x50]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp - 0x50], rax
mov byte [rbp + 0x2c], 0
mov byte [rbp + 0x21], 0
lea rcx, [rbp - 0x50]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x30], r12
mov rax, qword [0x140062608]
mov qword [rbp + 0x24], rax
mov qword [rbp + 0x18], r12
mov r8d, 1
mov rdx, rbx
lea rcx, [rbp - 0x50]
call fcn.1400489f0
test rax, rax
jne 0x140045e28
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x60]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp - 0x60]
movsxd rdx, dword [rax + 4]
lea rcx, [rbp - 0x60]
add rcx, rdx
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
test al, al
je 0x140045e6d
lea rdx, str.failed__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140048ca0
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x60]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.1400492b0
mov r15, qword [rbp - 0x70]
cmp r15, 2
jae 0x1400460dd
lea rdx, str.New_pc_detected......._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140048ca0
lea rdx, str.Registering_your_pc........._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140048ca0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
lea r15, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r15, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x50]
movabs rbx, 0x7fffffffffffffff
cmp rsi, rbx
ja 0x1400464d3
cmp rsi, 0xf
ja 0x140045f26
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x60], xmm0
jmp 0x140045fbd
mov rax, rsi
or rax, 0xf
cmp rax, rbx
jbe 0x140045f5e
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140049ae4
mov rcx, rax
test rax, rax
je 0x140045f93
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140045f9f
mov rbx, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140045f7b
mov rax, r12
jmp 0x140045f9f
cmp rcx, 0x1000
jb 0x140045f9a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400464c7
jmp 0x140045f40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140049ae4
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rbx
lea r8, [rsi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsp + 0x60]
call fcn.140046550
nop
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x60], r13
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x64], edx
lea rcx, [rbp - 0x50]
call fcn.1400484e0
lea rcx, [rbp - 0x48]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140046042
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004603d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046350
call fcn.14004977c
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140046091
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004608b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004639b
call fcn.14004977c
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x1400460cb
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1400460c6
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400463f7
mov rcx, r8
call fcn.14004977c
mov qword [rdi + 0x18], 0xf
mov eax, 1
jmp 0x140046498
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
lea r12, [rbp - 0x80]
mov rsi, qword [rbp - 0x80]
mov r13, qword [rbp - 0x68]
cmp r13, 0xf
cmova r12, rsi
movabs rbx, 0x7fffffffffffffff
cmp r15, rbx
ja 0x1400464c1
cmp r15, 0xf
ja 0x140046139
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 0xf
movups xmm0, xmmword [r12]
movups xmmword [rsp + 0x60], xmm0
jmp 0x1400461cf
mov rax, r15
or rax, 0xf
cmp rax, rbx
jbe 0x140046171
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140049ae4
mov rcx, rax
test rax, rax
je 0x1400461a5
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400461b1
mov rbx, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14004618d
xor eax, eax
jmp 0x1400461b1
cmp rcx, 0x1000
jb 0x1400461ac
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400464cd
jmp 0x140046153
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140049ae4
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], rbx
lea r8, [r15 + 1]
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsp + 0x60]
call fcn.140046c40
nop
test eax, eax
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x60], rax
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x64], edx
lea rcx, [rbp - 0x50]
je 0x140046302
call fcn.1400484e0
lea rcx, [rbp - 0x48]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140046263
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004625e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046350
call fcn.14004977c
xor ebx, ebx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], bl
cmp r13, 0xf
jbe 0x1400462af
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400462a6
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004639b
mov rcx, rsi
call fcn.14004977c
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x1400462e9
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1400462e4
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400463f7
mov rcx, r8
call fcn.14004977c
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov eax, 1
jmp 0x14004649f
call fcn.1400484e0
lea rcx, [rbp - 0x48]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14004635c
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046357
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140046357
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004977c
xor ebx, ebx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], bl
cmp r13, 0xf
jbe 0x1400463ab
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400463a2
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400463a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.14004977c
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x1400463e1
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1400463dc
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400463f7
mov rcx, r8
call fcn.14004977c
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
xor eax, eax
jmp 0x14004649f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rbx, [rdi + 0x18]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140046446
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004643d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004643d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004977c
lea rbx, [rdi + 0x18]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x14004648f
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x14004648a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400464ba
mov rcx, r8
call fcn.14004977c
mov qword [rbx], 0xf
xor eax, eax
mov byte [rdi], 0
mov qword [rdi + 0x10], r12
mov rbx, qword [rsp + 0x208]
add rsp, 0x1b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140042e70
nop
call fcn.140042dd0
int3
call fcn.140042dd0
int3
call fcn.140042e70
int3