Function at 0x100138a0
Capabilities:
Check for time delay via gettickcount
Create process on windows
Delete file

Disassembly:
push 0x80
mov eax, 0x1009be21
call fcn.1007684e
mov eax, dword [0x100d741c]
push 0xc8
mov edi, ecx
mov esi, edx
mov dword [ebp - 0x38], eax
call fcn.1001d6bd
sub esp, 0x18
lea eax, [esi + 0x38]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.1000f6a2
call fcn.10010949
xor ebx, ebx
cmp eax, ebx
setne byte [ebp - 0x2d]
cmp byte [ebp - 0x2d], bl
jne 0x100138f2
mov dword [0x100d9614], 1
call fcn.1000b7bb
push 0x12c
call fcn.1001d6bd
pop ecx
cmp byte [ebp - 0x2d], bl
je 0x10013cd7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x190
mov dword [edi + 0x154], eax
call fcn.1001d6bd
pop ecx
call fcn.10010a91
mov byte [ebp - 0x2d], al
cmp al, bl
jne 0x10013938
mov dword [0x100d9614], 1
push 0x1f4
call fcn.1001d6bd
pop ecx
call fcn.10009329
cmp byte [ebp - 0x2d], bl
je 0x10013cd7
movzx eax, byte [esi + 0xc8]
push eax
sub esp, 0x1c
lea eax, [esi + 0xac]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.1000f6a2
mov dword [ebp - 4], ebx
push dword [esi + 0xa8]
lea eax, [esi + 0x8c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48], esp
push eax
call fcn.1000f6a2
sub esp, 0x1c
mov byte [ebp - 4], 1
lea eax, [esi + 0x70]
mov ecx, esp
mov dword [ebp - 0x4c], esp
push eax
call fcn.1000f6a2
sub esp, 0x1c
mov byte [ebp - 4], 2
lea eax, [esi + 0x54]
mov ecx, esp
mov dword [ebp - 0x50], esp
push eax
call fcn.1000f6a2
sub esp, 0x1c
mov byte [ebp - 4], 3
lea eax, [esi + 0x38]
mov ecx, esp
mov dword [ebp - 0x44], esp
push eax
call fcn.1000f6a2
sub esp, 0x1c
mov byte [ebp - 4], 4
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [ebp - 0x40], esp
push eax
call fcn.1000f6a2
or dword [ebp - 4], 0xffffffff
mov ecx, edi
call fcn.1001329a
push 0x258
call fcn.1001d6bd
pop ecx
call fcn.10010e62
push 0x2bc
call fcn.1001d6bd
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x40], esp
push esi
call fcn.1000f6a2
mov ecx, dword [ebp - 0x38]
call fcn.10010bf8
xor ecx, ecx
inc ecx
cmp eax, ecx
sete byte [ebp - 0x2d]
cmp byte [ebp - 0x2d], bl
jne 0x10013a37
mov dword [0x100d961c], 7
mov dword [0x100d9614], ecx
push 0x320
call fcn.1001d6bd
pop ecx
cmp byte [ebp - 0x2d], bl
je 0x10013cd7
cmp dword [edi + 0x160], ebx
je 0x10013a58
call fcn.1001284e
call fcn.10003cd8
push 0x384
call fcn.1001d6bd
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x40], esp
push edi
call fcn.1000f6a2
sub esp, 0x1c
mov dword [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x44], esp
push esi
call fcn.1000f6a2
or dword [ebp - 4], 0xffffffff
call fcn.10010dab
xor ecx, ecx
inc ecx
cmp eax, ecx
sete byte [ebp - 0x2d]
cmp byte [ebp - 0x2d], bl
jne 0x10013abc
push 0x3b6
mov dword [0x100d961c], 8
mov dword [0x100d9614], ecx
call fcn.1001d6bd
pop ecx
push 0x3e8
call fcn.1001d6bd
pop ecx
cmp byte [ebp - 0x2d], bl
je 0x10013cd7
mov ecx, edi
call fcn.10010f7f
mov byte [ebp - 0x2e], al
call fcn.10007f09
mov al, byte [ebp - 0x2e]
mov byte [ebp - 0x2d], al
cmp al, bl
jne 0x10013afd
mov dword [0x100d961c], 9
mov dword [0x100d9614], 1
push 0x44c
call fcn.1001d6bd
pop ecx
cmp byte [ebp - 0x2e], bl
je 0x10013cd7
mov ecx, edi
call fcn.10011af8
mov byte [ebp - 0x2d], al
cmp al, bl
jne 0x10013b33
mov dword [0x100d961c], 0xa
mov dword [0x100d9614], 1
push 0x4b0
call fcn.1001d6bd
pop ecx
cmp byte [ebp - 0x2d], bl
je 0x10013be3
push 0x38
lea eax, [ebp - 0x88]
push ebx
push eax
call fcn.1005d3f0
lea eax, [ebp - 0x2c]
push str.Baidu.exe
push eax
mov dword [ebp - 0x8c], 0x3c
call fcn.10014290
add esp, 0x14
mov dword [ebp - 4], 6
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x10013b84
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x78], str._p_3__i_11
mov dword [ebp - 0x70], 1
mov dword [ebp - 0x88], 0x40
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x6c], ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x10013bd4
push 0x4e2
mov dword [0x100d9614], 1
call fcn.1001d6bd
pop ecx
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.1000f89d
push 0x4e3
call fcn.1001d6bd
pop ecx
cmp byte [ebp - 0x2d], bl
je 0x10013cd7
mov ecx, edi
call fcn.10012935
push 0x514
call fcn.1001d6bd
pop ecx
lea eax, [edi + 0x70]
push eax
mov ecx, edi
call fcn.1000fdf9
test eax, eax
je 0x10013c43
cmp dword [edi + 0x160], ebx
je 0x10013c31
push edi
call fcn.100136df
push 0x51e
call fcn.1001d6bd
pop ecx
mov ecx, edi
call fcn.100135a0
push 0x528
call fcn.1001d6bd
pop ecx
push 0x578
call fcn.1001d6bd
pop ecx
push esi
lea ecx, [ebp - 0x2c]
call fcn.1000f6a2
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x10013c63
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.1000f89d
push 0x5dc
call fcn.1001d6bd
pop ecx
call fcn.10008871
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [edi + 0x174]
cmp ecx, ebx
je 0x10013c9e
sub eax, dword [edi + 0x154]
mov dword [ecx + 8], eax
push 0x640
call fcn.1001d6bd
pop ecx
mov ecx, edi
call fcn.10013824
test al, al
jne 0x10013ccc
push 0x65e
mov dword [0x100d961c], 0xb
mov byte [ebp - 0x2d], bl
call fcn.1001d6bd
pop ecx
push 0x672
call fcn.1001d6bd
pop ecx
xor eax, eax
cmp byte [ebp - 0x2d], bl
sete al
mov dword [edi + 0x17c], eax
cmp byte [ebp - 0x2d], bl
jne 0x10013cf4
mov dword [0x100d9614], 1
mov esi, edi
call fcn.10010ade
push 0x6a4
call fcn.1001d6bd
pop ecx
mov eax, edi
call fcn.100133f9
push 0x708
call fcn.1001d6bd
pop ecx
push ebx
push str.BaiduUpdate
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowExW]
mov esi, eax
mov dword [ebp - 0x3c], esi
cmp esi, ebx
je 0x10013e44
cmp byte [ebp - 0x2d], bl
je 0x10013dd1
push 0x73a
call fcn.1001d6bd
pop ecx
lea eax, [ebp - 0x38]
push eax
push 0x1f4
push ebx
mov eax, 0x7530
push eax
push eax
push 0x22cc
push esi
mov dword [ebp - 0x38], ebx
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
test eax, eax
jne 0x10013db7
call fcn.10024d49
mov edx, dword [eax]
push 0x531
mov ecx, eax
call dword [edx]
mov esi, eax
cmp esi, ebx
je 0x10013dac
mov eax, dword [esi]
mov dword [ebp - 0x34], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [ebp - 0x34]
push ebx
push 0x16
push 1
push esi
call dword [eax + 0x38]
add esp, 0x14
call fcn.10024d49
mov edx, dword [eax]
push ebx
push ebx
push ebx
push esi
mov ecx, eax
call dword [edx + 8]
push 0x73f
call fcn.1001d6bd
pop ecx
push ebx
push dword [0x100d961c]
push 0x8d09
push dword [ebp - 0x3c]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x10013e59
push 0x744
call fcn.1001d6bd
pop ecx
lea eax, [ebp - 0x3c]
push eax
push 0x1f4
push ebx
push ebx
push 9
push 0x22be
push esi
mov dword [ebp - 0x3c], ebx
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
test eax, eax
jne 0x10013e65
call fcn.10024d49
mov edx, dword [eax]
push 0x531
mov ecx, eax
call dword [edx]
mov esi, eax
cmp esi, ebx
je 0x10013e3d
mov eax, dword [esi]
mov dword [ebp - 0x34], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [ebp - 0x34]
push ebx
push 0x64
push 1
push esi
call dword [eax + 0x38]
add esp, 0x14
call fcn.10024d49
mov edx, dword [eax]
push ebx
push ebx
push ebx
push esi
mov ecx, eax
call dword [edx + 8]
push 0x73f
jmp 0x10013e53
mov dword [0x100d961c], 0xb
push 0x74e
call fcn.1001d6bd
pop ecx
cmp byte [ebp - 0x2d], bl
je 0x10013e65
mov ecx, edi
call fcn.10013483
push 0x76c
call fcn.1001d6bd
mov al, byte [ebp - 0x2d]
pop ecx
call fcn.100768d1
ret