Function at 0x10010c44
Capabilities:
Accept command line arguments

Disassembly:
push ebp
lea ebp, [esp - 0x1598]
mov eax, 0x1618
call fcn.10045420
mov eax, dword [0x10084adc]
xor eax, ebp
mov dword [ebp + 0x1594], eax
cmp dword [0x10157874], 2
mov eax, dword [ebp + 0x15a8]
push edi
mov edi, dword [ebp + 0x15a0]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x70], 0x11
jne 0x10010c8a
mov dword [ebp - 0x70], 0x42
push edi
call fcn.10010979
pop ecx
test eax, eax
jne 0x10011057
push ebx
push esi
mov esi, 0x1ff
xor ebx, ebx
push esi
lea eax, [ebp + 0xb95]
push ebx
push eax
mov byte [ebp + 0xb94], bl
call fcn.10045030
push 0x3ff
lea eax, [ebp - 0x6b]
push ebx
push eax
mov byte [ebp - 0x6c], bl
call fcn.10045030
push 0x7ff
lea eax, [ebp + 0x395]
push ebx
push eax
mov byte [ebp + 0x394], bl
call fcn.10045030
lea eax, [ebp + 0xb94]
push str.SoftWareTrojanCut_tc_FileM
push eax
call fcn.10045378
mov eax, dword [0x102b5a40]
cdq
mov ecx, 0xea60
idiv ecx
lea eax, [ebp - 0x6c]
add edx, 0x64
inc dword [0x102b5a40]
push edx
push 0x10061188
push eax
mov dword [ebp - 0x74], edx
call fcn.10045378
push esi
lea eax, [ebp + 0x1195]
push ebx
push eax
mov byte [ebp + 0x1194], bl
call fcn.10045030
lea eax, [ebp - 0x80]
add esp, 0x44
push eax
call fcn.100457db
lea eax, [ebp - 0x80]
push eax
call fcn.100457b4
pop ecx
pop ecx
cmp eax, ebx
je 0x10010d64
push eax
push str._Y__m__d__H:_M:_S
lea eax, [ebp + 0x1194]
push 0x200
push eax
call fcn.10046465
add esp, 0x10
jmp 0x10010d77
lea eax, [ebp + 0x1194]
push str.0000
push eax
call fcn.1000789a
pop ecx
pop ecx
cmp dword [ebp + 0x15a4], 2
jne 0x10010efe
push esi
lea eax, [ebp + 0xf95]
push ebx
push eax
mov byte [ebp + 0xf94], bl
call fcn.10045030
push esi
lea eax, [ebp + 0x1395]
push ebx
push eax
mov byte [ebp + 0x1394], bl
call fcn.10045030
mov esi, 0x10060ec9
push esi
push 0x100627f4
lea eax, [ebp + 0x1394]
push eax
push edi
call fcn.10040259
push esi
push 0x10063a50
lea eax, [ebp + 0xf94]
push eax
lea eax, [ebp + 0x1394]
push eax
call fcn.10040259
push esi
push 0x10063d68
lea eax, [ebp + 0x1394]
push eax
lea eax, [ebp + 0xf94]
push eax
call fcn.10040259
lea eax, [ebp + 0x1394]
add esp, 0x48
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10010e02
sub eax, edi
cmp byte [ebp + eax + 0x1393], 0x20
jne 0x10010e2e
lea eax, [ebp + 0x1394]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10010e1e
sub eax, edx
mov byte [ebp + eax + 0x1393], bl
mov edi, dword [sym.imp.SHLWAPI.dll_StrStrIA]
push 0x10063d60
lea eax, [ebp + 0x1394]
push eax
call edi
cmp eax, ebx
je 0x10010e49
mov byte [eax + 4], bl
push 0x10063d58
lea eax, [ebp + 0x1394]
push eax
call edi
cmp eax, ebx
je 0x10010e5e
mov byte [eax + 4], bl
push 0x200
lea eax, [ebp + 0xd94]
push ebx
push eax
call fcn.10045030
lea eax, [ebp + 0xd94]
push eax
lea eax, [ebp + 0x1394]
push eax
call fcn.1000fb15
push 0x2c
mov edi, 0x10152ad8
push edi
call fcn.10044f10
add esp, 0x1c
cmp eax, ebx
je 0x10010e99
mov byte [eax], bl
push 0x7c
push edi
call fcn.10044f10
pop ecx
pop ecx
cmp eax, ebx
je 0x10010ea9
mov byte [eax], bl
lea eax, [ebp + 0xd94]
push str.6e5dbb7f08bfbfd9
push eax
call fcn.1004c839
pop ecx
pop ecx
test eax, eax
jne 0x10010ec6
mov byte [ebp + 0xd94], bl
push 0x40000000
push esi
push edi
lea eax, [ebp + 0xd94]
push eax
lea eax, [ebp + 0x1394]
push eax
push dword [ebp - 0x70]
lea eax, [ebp + 0x1194]
push eax
lea eax, [ebp + 0x394]
push str._s_d_s_WhiteList__s_s_s_d
push eax
call fcn.10045378
add esp, 0x24
jmp 0x10010fc3
cmp dword [ebp + 0x15a4], 1
jne 0x10010f7c
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push 0x200
mov esi, eax
lea eax, [ebp + 0xf94]
push ebx
push eax
call fcn.10045030
add esp, 0xc
cmp esi, ebx
je 0x10010f52
lea edx, [ebp + 0xf94]
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x10010f32
lea eax, [ebp + 0xf94]
push 0x7c
push eax
call fcn.10044f10
pop ecx
pop ecx
cmp eax, ebx
je 0x10010f52
mov byte [eax], bl
mov eax, dword [ebp - 0x78]
cmp eax, ebx
jne 0x10010f5f
lea eax, [ebp + 0xf94]
push 0x40000000
push 0x10060ec9
push eax
push edi
push dword [ebp - 0x70]
lea eax, [ebp + 0x1194]
push eax
push str._s_d_s_BLACK__s_s_d
jmp 0x10010fb4
cmp dword [ebp + 0x15a4], 3
mov esi, 0x10060ec9
lea eax, [ebp + 0x1194]
jne 0x10010fa3
push 0x40000000
push esi
push esi
push edi
push dword [ebp - 0x70]
push eax
push str._s_d_s_BLACK_Digital_Sign__s_s_d
jmp 0x10010fb4
push 0x2000000
push esi
push esi
push edi
push dword [ebp - 0x70]
push eax
push str._s_d_s_
lea eax, [ebp + 0x394]
push eax
call fcn.10045378
add esp, 0x20
lea eax, [ebp + 0x394]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp + 0xb94]
push eax
push reloc.WS2_32.dll_bind
call fcn.100422d1
add esp, 0x10
cmp dword [0x1015668c], ebx
je 0x10010fff
lea eax, [ebp + 0x394]
push eax
push str.SendInfoDisplayBlack___s_
push ebx
call fcn.100412e2
add esp, 0xc
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
mov edi, 0x100610e0
push edi
push ebx
call esi
cmp eax, ebx
jne 0x10011036
push edi
push ebx
call esi
cmp eax, ebx
jne 0x10011036
push ebx
push str.tc_hnd
push str.SOFTWARETrojanCutTC_Env_tc_COMMUNICATION
push reloc.WS2_32.dll_bind
call fcn.10040ccf
add esp, 0x10
cmp eax, ebx
je 0x10011055
test byte [ebp - 0x70], 1
push 1
push dword [ebp - 0x74]
push 0xcfd
push eax
je 0x1001104f
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x10011055
call dword [sym.imp.USER32.dll_PostMessageA]
pop esi
pop ebx
mov ecx, dword [ebp + 0x1594]
mov eax, dword [ebp - 0x70]
xor ecx, ebp
and eax, 1
pop edi
call fcn.1004501f
add ebp, 0x1598
leave
ret