Function at 0x4011a0
Capabilities:
Execute anti-debugging instructions
Query environment variable
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x415940
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xac
push ebx
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0x64
movlpd qword [ebp - 0x30], xmm0
mov eax, dword [ebp - 0x2c]
mov ebx, dword [ebp - 0x30]
push esi
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x28], ebx
push edi
nop dword [eax]
rdtsc
mov edi, eax
mov dword [ebp - 0x2c], edx
xor eax, eax
xor ecx, ecx
push ebx
cpuid
mov esi, ebx
pop ebx
lea ebx, [ebp - 0x6c]
mov dword [ebx], eax
mov dword [ebx + 4], esi
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebx + 0xc], edx
mov ebx, dword [ebp - 0x28]
rdtsc
sub eax, edi
sbb edx, dword [ebp - 0x2c]
add ebx, eax
mov dword [ebp - 0x28], ebx
adc ecx, edx
sub dword [ebp - 0x58], 1
mov dword [ebp - 0x54], ecx
jne 0x4011e0
mov eax, ebx
mov dword [ebp - 0x40], 0
mov edx, 0xe147ae15
mov dword [ebp - 0x3c], 0xf
mul edx
mov edi, 0x47ae147a
mov byte [ebp - 0x50], 0
mov dword [ebp - 0x30], eax
mov esi, edx
mov eax, ebx
mul edi
push 0x110
mov edi, eax
mov dword [ebp - 0x2c], edx
mov eax, ecx
mov ecx, 0xe147ae15
mul ecx
mov ecx, eax
mov ebx, edx
mov eax, dword [ebp - 0x54]
mov edx, 0x47ae147a
mul edx
add ecx, esi
mov dword [ebp - 0x58], eax
adc ebx, 0
add edi, ecx
mov ecx, dword [ebp - 0x2c]
adc ecx, 0
mov dword [ebp - 0x64], edi
mov edi, dword [ebp - 0x54]
xor eax, eax
add ebx, ecx
mov ecx, dword [ebp - 0x58]
adc eax, eax
add ecx, ebx
adc edx, eax
mov eax, dword [ebp - 0x28]
sub eax, ecx
sbb edi, edx
shrd eax, edi, 1
shr edi, 1
add eax, ecx
adc edi, edx
shrd eax, edi, 6
mov dword [ebp - 0x28], eax
shr edi, 6
call fcn.00401a1a
push 0x104
mov esi, eax
mov dword [ebp - 0x40], 0x104
push 0
push esi
mov dword [ebp - 0x3c], 0x10f
call fcn.00402e40
mov byte [esi + 0x104], 0
mov dword [ebp - 0x50], esi
push 0x4c
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.00402e40
add esp, 0x1c
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.POWRPROF.dll_GetPwrCapabilities]
xor eax, eax
mov word [ebp - 0x60], 0
xor ecx, ecx
push ebx
cpuid
mov esi, ebx
pop ebx
lea ebx, [ebp - 0x38]
mov dword [ebx], eax
mov dword [ebx + 4], esi
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], edx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x6c], eax
lea ecx, [ebp - 0x50]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3c], 0x10
mov ebx, dword [ebp - 0x28]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x30]
cmovae ecx, dword [ebp - 0x50]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x6c]
push eax
movzx eax, byte [ebp - 0xab]
push eax
movzx eax, byte [ebp - 0xb2]
push eax
movzx eax, byte [ebp - 0xb3]
push eax
movzx eax, byte [ebp - 0xb4]
push eax
movzx eax, byte [ebp - 0xb5]
push eax
push edi
push ebx
push str._llu__u__u__u__u__u__s
push ecx
call fcn.00401010
add esp, 0x28
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], 0x10
cmovae eax, dword [ebp - 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, dword [ebp - 0x40]
mov edx, eax
cmp edx, esi
ja 0x4013a0
cmp dword [ebp - 0x3c], 0x10
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x40], edx
cmovae ecx, dword [ebp - 0x50]
mov byte [ecx + edx], 0
jmp 0x4013e6
mov eax, dword [ebp - 0x3c]
mov ecx, edx
sub ecx, esi
sub eax, esi
mov dword [ebp - 0x2c], ecx
push ecx
cmp ecx, eax
ja 0x4013d5
cmp dword [ebp - 0x3c], 0x10
lea eax, [ebp - 0x50]
push 0
cmovae eax, dword [ebp - 0x50]
add esi, eax
mov dword [ebp - 0x40], edx
push esi
call fcn.00402e40
mov eax, dword [ebp - 0x2c]
add esp, 0xc
mov byte [esi + eax], 0
jmp 0x4013e6
push ecx
mov byte [ebp - 0x2c], 0
push dword [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x50]
call fcn.00401680
cmp dword [ebp - 0x3c], 0x10
lea eax, [ebp - 0x50]
cmovae eax, dword [ebp - 0x50]
push eax
call fcn.00405323
push 0x110
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xf
mov byte [ebp - 0x24], 0
call fcn.00401a1a
push 0x104
mov esi, eax
mov dword [ebp - 0x14], 0x104
push 0
push esi
mov dword [ebp - 0x10], 0x10f
call fcn.00402e40
mov byte [esi + 0x104], 0
add esp, 0x14
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 1
lea eax, [ebp - 0x24]
cmp dword [ebp - 0x10], 0x10
push 0x104
cmovae eax, esi
push eax
push str._APPDATA__
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
cmp dword [ebp - 0x10], 0x10
lea eax, [ebp - 0x24]
cmovae eax, dword [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, dword [ebp - 0x14]
mov edx, eax
cmp edx, esi
ja 0x40148b
cmp dword [ebp - 0x10], 0x10
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x14], edx
cmovae ecx, dword [ebp - 0x24]
mov byte [ecx + edx], 0
jmp 0x4014d1
mov eax, dword [ebp - 0x10]
mov ecx, edx
sub ecx, esi
sub eax, esi
mov dword [ebp - 0x2c], ecx
push ecx
cmp ecx, eax
ja 0x4014c0
cmp dword [ebp - 0x10], 0x10
lea eax, [ebp - 0x24]
push 0
cmovae eax, dword [ebp - 0x24]
add esi, eax
mov dword [ebp - 0x14], edx
push esi
call fcn.00402e40
mov eax, dword [ebp - 0x2c]
add esp, 0xc
mov byte [esi + eax], 0
jmp 0x4014d1
push ecx
mov byte [ebp - 0x2c], 0
push dword [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x24]
call fcn.00401680
cmp dword [ebp - 0x3c], 0x10
lea edx, [ebp - 0x50]
mov ecx, dword [ebp - 0x40]
cmovae edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x14]
sub eax, esi
mov dword [ebp - 0x2c], ecx
push ecx
push edx
cmp ecx, eax
ja 0x401515
cmp dword [ebp - 0x10], 0x10
lea eax, [esi + ecx]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x24]
cmovae eax, dword [ebp - 0x24]
add esi, eax
push esi
call fcn.004042e0
mov eax, dword [ebp - 0x2c]
add esp, 0xc
mov byte [esi + eax], 0
jmp 0x401525
mov byte [ebp - 0x2c], 0
push dword [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x24]
call fcn.004017d0
cmp dword [ebp - 0x10], 0x10
lea eax, [ebp - 0x24]
push 0
cmovae eax, dword [ebp - 0x24]
push 0x80
push 2
push 0
push 2
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
mov dword [ebp - 0x5c], 0x2818
push 0
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x58], 0x828291
push eax
push 4
lea eax, [ebp - 0x58]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
pop edi
pop esi
jne 0x401585
cmp ebx, 0x1f4
jae 0x401585
xor bl, bl
jmp 0x401587
mov bl, 1
mov edx, dword [ebp - 0x10]
cmp edx, 0x10
jb 0x4015b7
mov ecx, dword [ebp - 0x24]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4015ad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40160a
push edx
push ecx
call fcn.00401a4a
add esp, 8
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xf
mov byte [ebp - 0x24], 0
cmp edx, 0x10
jb 0x4015f9
mov ecx, dword [ebp - 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4015ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40160a
push edx
push ecx
call fcn.00401a4a
add esp, 8
mov ecx, dword [ebp - 0xc]
mov al, bl
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
call fcn.00407286
int3