Function at 0x40b055
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Link many functions at runtime
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7c
mov byte [ebp - 0x18], 0x5c
mov byte [ebp - 0x17], 0x7d
mov byte [ebp - 0x16], 0x7e
mov byte [ebp - 0x15], 0x7c
mov byte [ebp - 0x14], 0x7e
mov byte [ebp - 0x13], 0x57
mov byte [ebp - 0x12], 0x71
mov byte [ebp - 0x11], 0x7c
mov byte [ebp - 0x10], 0x38
mov byte [ebp - 0xf], 0x6e
mov byte [ebp - 0xe], 0x76
push ebx
xor ebx, ebx
mov byte [ebp - 0xd], 0x76
mov byte [ebp - 0xc], bl
mov al, byte [ebp - 0x18]
mov eax, ebx
sub byte [ebp + eax - 0x18], 0xa
inc eax
cmp eax, 0xc
jb 0x40b096
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x41a090], eax
test eax, eax
je 0x40b424
mov dword [ebp - 0x60], 3
mov edx, ebx
mov byte [ebp - 0x5c], 0x51
mov byte [ebp - 0x5b], 0x6e
mov byte [ebp - 0x5a], 0x50
mov byte [ebp - 0x59], 0x77
mov byte [ebp - 0x58], 0x62
mov byte [ebp - 0x57], 0x71
mov byte [ebp - 0x56], 0x77
mov byte [ebp - 0x55], 0x50
mov byte [ebp - 0x54], 0x66
mov byte [ebp - 0x53], 0x70
mov byte [ebp - 0x52], 0x70
mov byte [ebp - 0x51], 0x6a
mov byte [ebp - 0x50], 0x6c
mov byte [ebp - 0x4f], 0x6d
mov al, byte [ebp - 0x5c]
mov byte [ebp - 0x4e], bl
mov al, byte [ebp + edx - 0x5c]
mov ecx, dword [ebp - 0x60]
xor cl, al
mov byte [ebp + edx - 0x5c], cl
inc edx
cmp edx, 0xe
jb 0x40b0ff
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea eax, [ebp - 0x5c]
push eax
push dword [0x41a090]
mov byte [ebp - 0x4e], bl
call esi
mov dword [0x41988c], eax
mov byte [ebp - 0x4c], 0x5d
mov byte [ebp - 0x4b], 0x78
mov byte [ebp - 0x4a], 0x5d
mov byte [ebp - 0x49], 0x70
mov byte [ebp - 0x48], 0x72
mov byte [ebp - 0x47], 0x74
mov byte [ebp - 0x46], 0x7e
mov byte [ebp - 0x45], 0x7f
mov byte [ebp - 0x44], 0x70
mov byte [ebp - 0x43], 0x7d
mov byte [ebp - 0x42], 0x5d
mov byte [ebp - 0x41], 0x70
mov byte [ebp - 0x40], 0x7e
mov byte [ebp - 0x3f], 0x7a
mov byte [ebp - 0x3e], 0x80
mov byte [ebp - 0x3d], 0x7d
mov byte [ebp - 0x3c], 0x6e
mov byte [ebp - 0x3b], 0x70
mov byte [ebp - 0x3a], 0x7e
mov byte [ebp - 0x39], bl
mov al, byte [ebp - 0x4c]
mov eax, ebx
sub byte [ebp + eax - 0x4c], 0xb
inc eax
cmp eax, 0x13
jb 0x40b181
lea eax, [ebp - 0x4c]
push eax
push dword [0x41a090]
call esi
mov dword [0x41a094], eax
mov edx, ebx
mov dword [ebp - 0x38], 0x16
mov eax, dword [ebp - 0x38]
xor al, 0x52
mov byte [ebp - 0x34], al
mov eax, dword [ebp - 0x38]
inc al
xor al, 0x6d
mov byte [ebp - 0x33], al
mov eax, dword [ebp - 0x38]
add al, 2
xor al, 0x47
mov byte [ebp - 0x32], al
mov eax, dword [ebp - 0x38]
add al, 3
xor al, 0x65
mov byte [ebp - 0x31], al
mov eax, dword [ebp - 0x38]
add al, 4
xor al, 0x74
mov byte [ebp - 0x30], al
mov eax, dword [ebp - 0x38]
add al, 5
xor al, 0x4c
mov byte [ebp - 0x2f], al
mov eax, dword [ebp - 0x38]
add al, 6
xor al, 0x69
mov byte [ebp - 0x2e], al
mov eax, dword [ebp - 0x38]
add al, 7
xor al, 0x73
mov byte [ebp - 0x2d], al
mov eax, dword [ebp - 0x38]
add al, 8
mov byte [ebp - 0x2b], bl
xor al, 0x74
mov byte [ebp - 0x2c], al
mov al, byte [ebp - 0x34]
mov al, byte [ebp + edx - 0x34]
mov ecx, dword [ebp - 0x38]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x34], cl
inc edx
cmp edx, 9
jb 0x40b204
lea eax, [ebp - 0x34]
mov byte [ebp - 0x2b], bl
push eax
push dword [0x41a090]
call esi
mov dword [0x41a098], eax
mov ecx, ebx
mov byte [ebp - 0x25], 0x52
mov byte [ebp - 0x24], 0x6d
mov byte [ebp - 0x23], 0x45
mov byte [ebp - 0x22], 0x6e
mov byte [ebp - 0x21], 0x64
mov byte [ebp - 0x20], 0x53
mov byte [ebp - 0x1f], 0x65
mov byte [ebp - 0x1e], 0x73
mov byte [ebp - 0x1d], 0x73
mov byte [ebp - 0x1c], 0x69
mov byte [ebp - 0x1b], 0x6f
mov byte [ebp - 0x1a], 0x6e
mov byte [ebp - 0x19], bl
mov al, byte [ebp - 0x25]
mov al, byte [ebp + ecx - 0x25]
mov byte [ebp + ecx - 0x25], al
inc ecx
cmp ecx, 0xc
jb 0x40b265
lea eax, [ebp - 0x25]
push eax
push dword [0x41a090]
call esi
mov dword [0x419888], eax
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0xa], 0x73
mov byte [ebp - 9], 0x59
mov byte [ebp - 8], 0x6e
mov byte [ebp - 7], 0x7b
mov byte [ebp - 6], 0x7a
mov byte [ebp - 5], 0x6a
mov byte [ebp - 4], 0x75
mov byte [ebp - 3], 0x7d
mov byte [ebp - 2], 0x74
mov byte [ebp - 1], bl
mov al, byte [ebp - 0xb]
mov eax, ebx
sub byte [ebp + eax - 0xb], 6
inc eax
cmp eax, 0xa
jb 0x40b2b4
lea eax, [ebp - 0xb]
push eax
push dword [0x41a090]
call esi
mov dword [0x419880], eax
pop esi
cmp dword [0x41988c], ebx
je 0x40b412
cmp dword [0x41a094], ebx
je 0x40b412
cmp dword [0x41a098], ebx
je 0x40b412
cmp dword [0x419888], ebx
je 0x40b412
test eax, eax
je 0x40b412
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcessId]
mov dword [0x419884], eax
mov edx, ebx
mov dword [ebp - 0x7c], 0x38
mov eax, dword [ebp - 0x7c]
xor al, 0x53
mov byte [ebp - 0x78], al
mov eax, dword [ebp - 0x7c]
inc al
mov byte [ebp - 0x77], al
mov eax, dword [ebp - 0x7c]
add al, 2
xor al, 0x59
mov byte [ebp - 0x76], al
mov eax, dword [ebp - 0x7c]
add al, 3
mov byte [ebp - 0x75], al
mov eax, dword [ebp - 0x7c]
add al, 4
xor al, 0x53
mov byte [ebp - 0x74], al
mov eax, dword [ebp - 0x7c]
add al, 5
mov byte [ebp - 0x73], al
mov eax, dword [ebp - 0x7c]
add al, 6
xor al, 0x54
mov byte [ebp - 0x72], al
mov eax, dword [ebp - 0x7c]
add al, 7
mov byte [ebp - 0x71], al
mov eax, dword [ebp - 0x7c]
add al, 8
xor al, 0x45
mov byte [ebp - 0x70], al
mov eax, dword [ebp - 0x7c]
add al, 9
mov byte [ebp - 0x6f], al
mov eax, dword [ebp - 0x7c]
add al, 0xa
xor al, 0x4d
mov byte [ebp - 0x6e], al
mov eax, dword [ebp - 0x7c]
add al, 0xb
mov byte [ebp - 0x6d], al
mov eax, dword [ebp - 0x7c]
add al, 0xc
xor al, 0x52
mov byte [ebp - 0x6c], al
mov eax, dword [ebp - 0x7c]
add al, 0xd
mov byte [ebp - 0x6b], al
mov eax, dword [ebp - 0x7c]
add al, 0xe
xor al, 0x4f
mov byte [ebp - 0x6a], al
mov eax, dword [ebp - 0x7c]
add al, 0xf
mov byte [ebp - 0x69], al
mov eax, dword [ebp - 0x7c]
add al, 0x10
xor al, 0x4f
mov byte [ebp - 0x68], al
mov eax, dword [ebp - 0x7c]
add al, 0x11
mov byte [ebp - 0x67], al
mov eax, dword [ebp - 0x7c]
add al, 0x12
xor al, 0x54
mov byte [ebp - 0x66], al
mov eax, dword [ebp - 0x7c]
add al, 0x13
mov byte [ebp - 0x65], al
mov eax, dword [ebp - 0x7c]
add al, 0x14
mov byte [ebp - 0x63], bl
mov byte [ebp - 0x64], al
mov al, byte [ebp - 0x78]
mov al, byte [ebp + edx - 0x78]
mov ecx, dword [ebp - 0x7c]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x78], cl
inc edx
cmp edx, 0x15
jb 0x40b3e4
push 0x400
push 0x419890
lea eax, [ebp - 0x78]
mov byte [ebp - 0x63], bl
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
jmp 0x40b424
push dword [0x41a090]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x41a090], ebx
pop ebx
leave
ret