Function at 0x407f52
Capabilities:
Create process on windows
Write and execute a file
Write file on windows

Disassembly:
mov eax, 0x40e984
call fcn.0040db00
sub esp, 0x108
push ebx
push esi
mov esi, ecx
push edi
lea ecx, [ebp - 0x6c]
call fcn.00409adf
mov al, byte [esi]
xor ebx, ebx
push ebx
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], ebx
mov byte [ebp - 0x64], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
lea ecx, [ebp - 0x64]
push dword [eax]
push ebx
push esi
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___unsigned_int__unsigned_int_]
lea eax, [ebp - 0x64]
push str.version.txt
push eax
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 1
call sub.MSVCP60.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_std::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__
add esp, 0xc
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
mov byte [ebp - 4], 2
push dword [ecx]
lea ecx, [ebp - 0x64]
push ebx
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___unsigned_int__unsigned_int_]
push 1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov eax, dword [ebp - 0x60]
cmp eax, ebx
jne 0x407fe0
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push str.Send_request:__s
push 1
call fcn.00403caf
mov al, byte [ebp - 0xd]
add esp, 0xc
lea ecx, [ebp - 0x20]
mov byte [ebp - 0x20], al
push ebx
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x64]
push eax
mov byte [ebp - 4], 3
call fcn.00409b32
cmp al, bl
jne 0x408020
mov byte [ebp - 0xd], bl
jmp 0x40845b
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
jne 0x40802c
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push str.Got_response:__s
push 1
call fcn.00403caf
mov esi, 0x413124
push esi
call sub.MSVCRT.dll_strlen
add esp, 0x10
lea ecx, [ebp - 0x20]
push eax
push ebx
push esi
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::find_char_const___unsigned_int__unsigned_int_const]
mov edi, eax
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
cmp edi, dword [eax]
je 0x408018
push edi
lea eax, [ebp - 0xac]
push ebx
push eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::substr_unsigned_int__unsigned_int_]
inc edi
push esi
mov byte [ebp - 4], 4
inc edi
call sub.MSVCRT.dll_strlen
pop ecx
push eax
push edi
push esi
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::find_char_const___unsigned_int__unsigned_int_const]
cmp edi, dword [ebp - 0x18]
mov esi, eax
jb 0x408098
mov byte [ebp - 0xd], bl
jmp 0x408449
mov al, byte [ebp - 0xd]
push ebx
lea ecx, [ebp - 0x54]
mov byte [ebp - 0x54], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
mov byte [ebp - 4], 5
cmp esi, dword [eax]
jne 0x4080e7
push dword [eax]
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0x20]
push edi
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::substr_unsigned_int__unsigned_int_]
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
mov byte [ebp - 4], 6
push dword [ecx]
lea ecx, [ebp - 0x54]
push ebx
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___unsigned_int__unsigned_int_]
mov byte [ebp - 4], 5
push 1
lea ecx, [ebp - 0x34]
jmp 0x408118
sub esi, edi
lea eax, [ebp - 0x34]
push esi
push edi
push eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::substr_unsigned_int__unsigned_int_]
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
mov byte [ebp - 4], 7
push dword [ecx]
lea ecx, [ebp - 0x54]
push ebx
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___unsigned_int__unsigned_int_]
mov byte [ebp - 4], 5
push 1
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
lea eax, [ebp - 0xe]
lea ecx, [ebp - 0xbc]
push eax
mov dword [ebp - 0xc0], 0x80000002
push dword [0x413034]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___class_std::allocator_char__const__]
mov al, byte [ebp - 0xe]
push ebx
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 8
mov byte [ebp - 0x34], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov esi, str.0.0.0.0
push esi
call sub.MSVCRT.dll_strlen
pop ecx
push eax
push esi
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_char_const___unsigned_int_]
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x7c]
push dword [0x413058]
mov byte [ebp - 4], 9
push eax
call fcn.00405f90
push 1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xb
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
cmp ecx, ebx
jne 0x4081a6
mov ecx, eax
cmp dword [ebp - 0x78], ebx
je 0x4081ae
mov eax, dword [ebp - 0x78]
push ecx
push eax
push str.Current_Version:__s_tNewest_Version:__s
push 1
call fcn.00403caf
mov eax, dword [ebp - 0x78]
add esp, 0x10
cmp eax, ebx
jne 0x4081cb
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [ebp - 0x90]
mov esi, dword [sym.imp.MSVCRT.dll_sscanf]
push ecx
lea ecx, [ebp - 0x94]
push ecx
lea ecx, [ebp - 0x98]
push ecx
lea ecx, [ebp - 0x9c]
mov edi, str._d._d._d._d
push ecx
push edi
push eax
call esi
mov eax, dword [ebp - 0xa8]
add esp, 0x18
cmp eax, ebx
jne 0x408208
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [ebp - 0x80]
push ecx
lea ecx, [ebp - 0x84]
push ecx
lea ecx, [ebp - 0x88]
push ecx
lea ecx, [ebp - 0x8c]
push ecx
push edi
push eax
call esi
add esp, 0x18
xor eax, eax
mov ecx, dword [ebp + eax - 0x9c]
mov edx, dword [ebp + eax - 0x8c]
cmp ecx, edx
jb 0x408266
ja 0x408246
add eax, 4
cmp eax, 0x10
jl 0x40822a
push ebx
push str.FVersion
lea ecx, [ebp - 0xc0]
call fcn.00406038
test eax, eax
jne 0x4082fc
push str.Current_version_is_a_mini_version...need_update.
jmp 0x40826b
push str.Version_on_the_server_is_updated...need_update.
push 1
call fcn.00403caf
mov al, byte [ebp - 0xe]
pop ecx
pop ecx
mov byte [ebp - 0x44], al
push ebx
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push 0x10
xor eax, eax
pop ecx
lea edi, [ebp - 0x110]
mov esi, str.temp.exe
mov dword [ebp - 0x114], 0x44
rep stosd dword es:[edi], eax
push esi
mov byte [ebp - 4], 0xc
call sub.MSVCRT.dll_strlen
pop ecx
push eax
push esi
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_char_const___unsigned_int_]
push str.begin_to_download...
push 1
call fcn.00403caf
pop ecx
lea eax, [ebp - 0x20]
pop ecx
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00409b32
cmp al, bl
jne 0x408304
mov eax, dword [ebp - 0x50]
cmp eax, ebx
jne 0x4082e4
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push str.Download_error_:__s
push 4
call fcn.00403caf
add esp, 0xc
mov byte [ebp - 0xd], bl
jmp 0x40840a
mov byte [ebp - 0xd], bl
jmp 0x408419
mov eax, dword [ebp - 0x40]
cmp eax, ebx
jne 0x408310
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push ebx
push 0x80
push 2
push ebx
push ebx
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x40833d
push str.Could_not_create_temporary_file
push 4
call fcn.00403caf
pop ecx
pop ecx
jmp 0x4082f4
xor esi, esi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ebx
cmp eax, ebx
jne 0x40834e
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [ebp - 0x24]
push ebx
push ecx
push dword [ebp - 0x18]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
add esi, dword [ebp - 0x24]
cmp esi, dword [ebp - 0x18]
jb 0x40833f
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call esi
mov ecx, dword [ebp - 0x40]
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
cmp ecx, ebx
jne 0x40837d
mov ecx, eax
cmp dword [ebp - 0x50], ebx
je 0x408385
mov eax, dword [ebp - 0x50]
push ecx
push eax
push str.Download_from__s_to__s
push 1
call fcn.00403caf
mov eax, dword [ebp - 0x40]
add esp, 0x10
cmp eax, ebx
jne 0x4083a2
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [ebp - 0xd0]
push ecx
lea ecx, [ebp - 0x114]
push ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x414090
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
mov eax, dword [ebp - 0x40]
jne 0x4083dd
cmp eax, ebx
jne 0x4083d2
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push str.Error_create_process_:__s
jmp 0x4082ea
cmp eax, ebx
jne 0x4083e6
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push str.Run__s
push 1
call fcn.00403caf
add esp, 0xc
push dword [ebp - 0xd0]
call esi
push dword [ebp - 0xcc]
call esi
mov byte [ebp - 0xd], 1
push 1
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xb
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push 1
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 8
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push 1
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 5
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push 1
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push 1
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 3
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push 1
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push 1
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], bl
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call fcn.00409b22
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp - 0xd]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret