Function at 0x4291b0
Capabilities:
Accept command line arguments
Create thread
Delete file
Get common file path
Get file attributes
Get graphical window text
Persist via application shimming
Read file on windows
Resolve dns
Set environment variable
Set thread local storage value
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8c
mov dword [ebp - 0x1c], 0x14020
mov dword [ebp - 0x40], 0x4c3b
mov dword [ebp - 0x58], 0x11d2
mov dword [ebp - 0x48], 0x1826
mov dword [ebp - 0x5c], 0x104c9
mov dword [ebp - 0x54], 0x13ab5
mov dword [ebp - 0x34], 0x7aea
mov dword [ebp - 0x60], 0x43bd
mov dword [ebp - 0x2c], 0x17a2c
mov dword [ebp - 4], 0x83e6
mov dword [ebp - 0x18], 0xfdf1
mov dword [ebp - 0x20], 0x15971
mov dword [ebp - 0x44], 0x8ee7
mov dword [ebp - 0x28], 0x13e7
mov dword [ebp - 0x50], 0xe217
mov dword [ebp - 0x10], 0x12b51
mov dword [ebp - 0x14], 0x6073
mov dword [ebp - 0x38], 0x17308
mov dword [ebp - 0xc], 0x17adb
mov dword [ebp - 0x3c], 0x64c8
mov dword [ebp - 0x24], 0x12188
mov dword [ebp - 0x6c], 0x9673
mov dword [ebp - 0x30], 0x1715f
mov dword [ebp - 8], 0x1913
mov dword [ebp - 0x4c], 0x13a78
call fcn.0070a2f0
mov eax, dword [ebp - 0x10]
add eax, 0xb1f
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], ecx
jmp 0x42928c
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x60]
jge 0x429491
mov eax, dword [ebp - 0x28]
cdq
idiv dword [ebp - 0x3c]
cmp eax, dword [ebp - 4]
jge 0x4292b7
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 4]
jge 0x4292b7
mov edx, dword [ebp - 4]
or edx, dword [ebp - 0x5c]
jne 0x4292ca
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x20]
jl 0x4292ca
mov eax, dword [ebp - 0x48]
cdq
idiv dword [ebp - 0x50]
test eax, eax
je 0x4292d3
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x20]
jge 0x429371
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x44]
jge 0x429371
mov ecx, dword [ebp - 0x10]
and ecx, dword [ebp - 0x40]
je 0x429371
mov edx, dword [ebp - 0x54]
sub edx, 1
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x38]
jge 0x429371
mov ecx, dword [ebp - 0x50]
cmp ecx, dword [ebp - 0x38]
jge 0x429371
mov edx, dword [ebp - 0x30]
xor edx, dword [ebp - 4]
je 0x429371
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x10]
jge 0x429371
mov ecx, dword [ebp - 0x30]
xor ecx, dword [ebp - 0x40]
jne 0x429368
mov edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 4]
jge 0x429338
mov dword [ebp - 0x64], 1
jmp 0x42933f
mov dword [ebp - 0x64], 0
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x64]
je 0x429358
mov edx, dword [ebp - 8]
or edx, dword [ebp - 4]
jne 0x429368
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x24]
jl 0x429368
mov ecx, dword [ebp - 0x20]
and ecx, dword [ebp - 0x44]
je 0x429371
mov edx, dword [ebp - 8]
sub edx, 1
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x5c]
cmp edx, dword [ebp - 0x24]
jl 0x4293c0
mov eax, dword [ebp - 0x40]
cdq
idiv dword [ebp - 0xc]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0xc]
sub eax, 1
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x70], 0
jne 0x4293c0
mov ecx, dword [ebp - 0x48]
cmp ecx, dword [ebp - 0x10]
jl 0x4293c0
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x14]
jge 0x4293c9
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x38]
jge 0x4293c9
mov ecx, dword [ebp - 0x18]
add ecx, 1
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 0x4c]
jge 0x42944e
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x48]
jge 0x42944e
mov ecx, dword [ebp - 0x20]
sub ecx, 1
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 8]
je 0x42944e
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x74], ecx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0x18]
sub eax, 1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x74]
cmp ecx, dword [ebp - 0x78]
jge 0x42944e
mov eax, dword [ebp - 0x58]
cdq
idiv dword [ebp - 0x34]
cmp eax, dword [ebp - 0x50]
jge 0x42944e
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x1c]
jl 0x42943d
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 8]
jl 0x42943d
mov ecx, dword [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x18]
cmp edx, dword [ebp - 0x24]
jge 0x42944e
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0xc]
jge 0x42944e
mov ecx, dword [ebp - 4]
sub ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x38]
cmp edx, dword [ebp - 0x1c]
jl 0x429483
mov eax, dword [ebp - 4]
and eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 8]
jl 0x429483
mov ecx, dword [ebp - 0xc]
sub ecx, 1
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 0x3c]
mov dword [ebp - 0x7c], eax
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x7c], 0
je 0x42948c
mov eax, dword [ebp - 0x44]
sub eax, 1
mov dword [ebp - 0x44], eax
jmp 0x429283
call fcn.0040a680
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_ExitProcess]