Function at 0x7d31a3
Capabilities:
Accept command line arguments
Check for peb beingdebugged flag
Check for trap flag exception
Check mutex on windows
Create process on windows
Get number of processors
Packed with generic packer
Query environment variable
Set environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x810fb0
push 0x7e83f0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
add esp, 0xfffff874
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov byte [ebp - 0x24], 1
mov eax, 1
test eax, eax
je 0x7d31e5
mov dword [ebp - 0x750], 0
jmp 0x7d31f5
push 1
call fcn.007dd0c0
add esp, 4
mov dword [ebp - 0x750], eax
mov ecx, 1
test ecx, ecx
je 0x7d320a
mov dword [ebp - 0x754], 0
jmp 0x7d321d
push 0x80bf18
call fcn.007dd214
add esp, 4
mov dword [ebp - 0x754], eax
mov edx, dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
mov ecx, dword [sym.imp.USER32.dll_LoadStringA]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
add edx, 1
mov dword [ebp - 0x20], edx
mov eax, dword [sym.imp.USER32.dll_LoadStringW]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x20], ecx
push 0x7d1c7c
call fcn.007e82cc
add esp, 4
mov edx, dword [0x80b64c]
xor edx, dword [0x80b654]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x80bf0c
lea eax, [ebp - 0x128]
push eax
call fcn.007e827a
add esp, 0x10
lea ecx, [ebp - 0x128]
push ecx
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
je 0x7d32a3
mov byte [ebp - 0x24], 0
mov edx, dword [ebp - 0x24]
and edx, 0xff
test edx, edx
je 0x7d344b
mov eax, dword [0x80b688]
xor eax, dword [0x80b65c]
xor eax, dword [0x80b690]
and eax, 0x20
test eax, eax
je 0x7d344b
mov ecx, dword [0x80b69c]
xor ecx, dword [0x80b66c]
xor ecx, dword [0x80b64c]
push ecx
push 0x80bf04
lea edx, [ebp - 0x128]
push edx
call fcn.007e827a
add esp, 0xc
lea eax, [ebp - 0x128]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x7d344b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x7d344b
push 0x7530
mov ecx, dword [ebp - 0x12c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
je 0x7d335d
cmp dword [ebp - 0x130], 0x80
jne 0x7d3441
mov edx, dword [0x80b69c]
xor edx, dword [0x80b66c]
xor edx, dword [0x80b64c]
push edx
push 0x80befc
lea eax, [ebp - 0x128]
push eax
call fcn.007e827a
add esp, 0xc
mov dword [ebp - 0x138], 0
jmp 0x7d339f
mov ecx, dword [ebp - 0x138]
add ecx, 1
mov dword [ebp - 0x138], ecx
cmp dword [ebp - 0x138], 0x12c
jge 0x7d33d8
lea edx, [ebp - 0x128]
push edx
push 0x80bef0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
je 0x7d33ce
jmp 0x7d33d8
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x7d3390
cmp dword [ebp - 0x134], 0
je 0x7d3434
mov eax, dword [0x80b69c]
xor eax, dword [0x80b66c]
xor eax, dword [0x80b64c]
mov dword [ebp - 0x144], eax
mov ecx, dword [0x8130a0]
push ecx
call fcn.007e7fa0
add esp, 4
add eax, 1
mov dword [ebp - 0x140], eax
mov edx, dword [0x8130a0]
mov dword [ebp - 0x13c], edx
lea eax, [ebp - 0x144]
push eax
push 0
push 0x4a
mov ecx, dword [ebp - 0x134]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [ebp - 0x12c]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, 1
jmp 0x7d3c8c
mov eax, 1
test eax, eax
je 0x7d3460
mov dword [ebp - 0x758], 0
jmp 0x7d3473
push 0x80bedc
call fcn.007dd214
add esp, 4
mov dword [ebp - 0x758], eax
push 1
call fcn.007d3c9d
add esp, 4
mov ecx, dword [ebp - 0x24]
and ecx, 0xff
test ecx, ecx
je 0x7d366e
mov edx, dword [0x80b688]
xor edx, dword [0x80b65c]
xor edx, dword [0x80b690]
and edx, 0x40
test edx, edx
jne 0x7d366e
push 0x200
lea eax, [ebp - 0x344]
push eax
push 0x80bed4
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x7d366e
push pe_nt_image_headers32
push 0x23
lea ecx, [ebp - 0x344]
push ecx
call fcn.007e7c90
add esp, 0xc
mov byte [ebp - 0x27c], 0
mov dword [ebp - 0x448], 1
jmp 0x7d3502
mov edx, dword [ebp - 0x448]
add edx, 1
mov dword [ebp - 0x448], edx
cmp dword [ebp - 0x448], 0x40
jg 0x7d353c
mov eax, dword [ebp - 0x448]
push eax
push 0x80becc
lea ecx, [ebp - 0x444]
push ecx
call fcn.007e827a
add esp, 0xc
lea edx, [ebp - 0x344]
push edx
lea eax, [ebp - 0x444]
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
jmp 0x7d34f3
mov ecx, dword [0x80b688]
xor ecx, dword [0x80b65c]
xor ecx, dword [0x80b690]
and ecx, 0x10
test ecx, ecx
jne 0x7d366e
lea edx, [ebp - 0x5a0]
push edx
call dword [sym.imp.KERNEL32.dll_GetStartupInfoA]
mov al, byte [0x813088]
mov byte [ebp - 0x6a4], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x6a3]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x813088]
mov byte [ebp - 0x55c], cl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x55b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
cmp dword [0x813098], 1
jne 0x7d35d7
cmp dword [ebp - 0x594], 0
jne 0x7d35d7
lea edx, [ebp - 0x6a4]
push edx
call fcn.007d5430
add esp, 4
and eax, 0xff
test eax, eax
je 0x7d35d7
lea eax, [ebp - 0x6a4]
mov dword [ebp - 0x594], eax
push 0x104
lea ecx, [ebp - 0x55c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x7d35f6
xor eax, eax
jmp 0x7d3c8c
lea edx, [ebp - 0x458]
push edx
lea eax, [ebp - 0x5a0]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push eax
lea ecx, [ebp - 0x55c]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x7d3652
mov dword [0x8132d8], 6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x80beac
push 0x8132dc
call fcn.007e827a
add esp, 0xc
xor eax, eax
jmp 0x7d3c8c
push 0x2710
mov edx, dword [ebp - 0x458]
push edx
call dword [sym.imp.USER32.dll_WaitForInputIdle]
mov eax, 1
jmp 0x7d3c8c
mov eax, 1
test eax, eax
je 0x7d3683
mov dword [ebp - 0x75c], 0
jmp 0x7d3696
push 0x80be98
call fcn.007dd214
add esp, 4
mov dword [ebp - 0x75c], eax
mov ecx, dword [0x80b688]
xor ecx, dword [0x80b65c]
xor ecx, dword [0x80b690]
and ecx, 0x10
test ecx, ecx
je 0x7d3b87
mov edx, dword [0x80b64c]
xor edx, dword [0x80b654]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x80bf0c
lea eax, [ebp - 0x128]
push eax
call fcn.007e827a
add esp, 0x10
mov ecx, 1
test ecx, ecx
je 0x7d36f0
mov dword [ebp - 0x760], 0
jmp 0x7d3703
push 0x80be84
call fcn.007dd214
add esp, 4
mov dword [ebp - 0x760], eax
lea edx, [ebp - 0x128]
push edx
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
jne 0x7d3b85
mov eax, 1
test eax, eax
je 0x7d3734
mov dword [ebp - 0x764], 0
jmp 0x7d3747
push 0x80be70
call fcn.007dd214
add esp, 4
mov dword [ebp - 0x764], eax
push 1
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov byte [ebp - 0x6a8], 0
push 0x80be64
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x6ac], eax
cmp dword [ebp - 0x6ac], 0
je 0x7d37d1
push 0x80be50
mov ecx, dword [ebp - 0x6ac]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x744], eax
cmp dword [ebp - 0x744], 0
je 0x7d37d1
call dword [ebp - 0x744]
test eax, eax
je 0x7d37d1
mov edx, 1
test edx, edx
je 0x7d37b7
mov dword [ebp - 0x768], 0
jmp 0x7d37ca
push 0x80be2c
call fcn.007dd214
add esp, 4
mov dword [ebp - 0x768], eax
mov byte [ebp - 0x6a8], 1
mov eax, 1
test eax, eax
je 0x7d37e6
mov dword [ebp - 0x76c], 0
jmp 0x7d37f9
push 0x80be18
call fcn.007dd214
add esp, 4
mov dword [ebp - 0x76c], eax
mov dword [ebp - 0x740], 0x94
lea ecx, [ebp - 0x740]
push ecx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
cmp dword [ebp - 0x730], 2
je 0x7d3886
mov byte [ebp - 0x748], 0
mov dword [ebp - 4], 0
pushf
pop eax
or eax, 0x100
push eax
popf
nop
mov dword [ebp - 4], 0xffffffff
jmp 0x7d386f
mov edx, dword [ebp - 0x748]
and edx, 0xff
test edx, edx
jne 0x7d3886
mov byte [0x813590], 1
mov eax, 1
test eax, eax
je 0x7d389b
mov dword [ebp - 0x770], 0
jmp 0x7d38ae
push 0x80be04
call fcn.007dd214
add esp, 4
mov dword [ebp - 0x770], eax
cmp dword [ebp - 0x730], 2
jne 0x7d3918
push ecx
bswap ecx
not ecx
push eax
not eax
mov eax, 0x6c65696d
xchg ecx, eax
mov ecx, 0xdeadc0de
xchg ecx, eax
not eax
pop eax
not ecx
pop ecx
pushfd
pushal
xor ebx, ebx
je 0x7d38da
jmp 0x7d38fb
jmp 0x7d390e
xor ebx, ebx
je 0x7d38de
jmp 0x7d38ed
mov ecx, 0x34f9c987
nop
stc
je 0x7d38f1
jmp 0x7d3921
xor eax, eax
je 0x7d38e3
mov eax, 0x4840c987
test eax, eax
jne 0x7d38d7
jmp 0x92e3d660
popal
popfd
xchg dx, ax
xchg dx, ax
mov eax, eax
mov eax, dword fs:[0x30]
movzx eax, byte [eax + 2]
or al, al
jne 0x7d3932
sal byte [ebp + 0x21], 0xe9
fild dword [eax]
add byte [eax], al
jmp 0x7d3932
jmp 0x7d39f1
jo 0x7d3921
jl 0x7d391f
jmp 0x7d3923
je 0x7d391c
jmp 0x7d391c
mov eax, dword fs:[0x20]
or eax, eax
jne 0x7d3932
jmp 0x7d39f1
pushal
xor eax, eax
jne 0x7d3939
jmp 0x7d394e
jmp 0x7d396e
xor eax, eax
jne 0x7d3956
jp 0x7d394c
jo 0x7d3950
jmp 0x7d3951
jb 0x7d3955
jns 0x7d393a
call dword [0x74097900]
invalid
jns 0x7d3957
je 0x7d3940
jmp 0x7d38d9
xchg ebx, ebx
jp 0x7d3945
mov al, byte [0x5c66133]
xor esp, dword [ecx - 0x3a]
add eax, 0x8132c4
add dword [ecx + 1], edi
popal
mov byte [0x8132c4], 1
mov ecx, 1
les esi, [edx]
add dword [eax], 0x1b901
add byte [eax], al
test ecx, ecx
je 0x7d3974
mov dword [ebp - 0x774], 0
add byte [eax], al
add byte [eax], al
jmp 0x7d39ad
cmp dword [ebp - 0x730], 2
jne 0x7d3989
mov dword [ebp - 0x778], 0x80be00
jmp 0x7d3993
mov dword [ebp - 0x778], 0x80bdfc
mov edx, dword [ebp - 0x778]
push edx
push 0x80bddc
call fcn.007dd214
add esp, 8
mov dword [ebp - 0x774], eax
push eax
not eax
bswap eax
pop eax
jae 0x7d39b5
pushfd
pushal
jmp 0x7d39e4
sub edx, edx
jo 0x7d39ca
jmp 0x7d39db
xor ecx, ecx
je 0x7d39c2
jmp 0x7d39d4
stc
xor ecx, 3
je 0x7d395a
jmp 0x7d39d1
jmp 0x7d39df
jae 0x7d39cd
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x7d39c4
jmp 0x7d39be
sbb al, 0xdb
jmp 0x7d39e7
jmp 0x7d39b8
popal
popfd
bswap eax
not ecx
bswap eax
not ecx
mov eax, 1
test eax, eax
je 0x7d3a06
mov dword [ebp - 0x77c], 0
jmp 0x7d3a19
push 0x80bdc8
call fcn.007dd214
add esp, 4
mov dword [ebp - 0x77c], eax
mov ecx, dword [ebp - 0x6a8]
and ecx, 0xff
test ecx, ecx
je 0x7d3a82
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x80bdc0
lea edx, [ebp - 0x128]
push edx
call fcn.007e827a
add esp, 0xc
lea eax, [ebp - 0x128]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov ecx, 1
test ecx, ecx
je 0x7d3a6a
mov dword [ebp - 0x780], 0
jmp 0x7d3a7d
push 0x80bdac
call fcn.007dd214
add esp, 4
mov dword [ebp - 0x780], eax
jmp 0x7d3b5d
mov edx, 1
test edx, edx
je 0x7d3a97
mov dword [ebp - 0x784], 0
jmp 0x7d3aaa
push 0x80bd9c
call fcn.007dd214
add esp, 4
mov dword [ebp - 0x784], eax
xor eax, eax
cmp dword [0x813098], 0
sete al
push eax
call fcn.007d6628
add esp, 4
and eax, 0xff
test eax, eax
jne 0x7d3b21
mov ecx, 1
test ecx, ecx
je 0x7d3add
mov dword [ebp - 0x788], 0
jmp 0x7d3af7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x80bd84
call fcn.007dd214
add esp, 8
mov dword [ebp - 0x788], eax
mov dword [0x8132d8], 6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x80bd74
push 0x8132dc
call fcn.007e827a
add esp, 0xc
xor eax, eax
jmp 0x7d3c8c
mov edx, 1
test edx, edx
je 0x7d3b36
mov dword [ebp - 0x78c], 0
jmp 0x7d3b49
push 0x80bd58
call fcn.007dd214
add esp, 4
mov dword [ebp - 0x78c], eax
push 0
call fcn.007d3c9d
add esp, 4
mov eax, 1
jmp 0x7d3c8c
mov eax, 1
test eax, eax
je 0x7d3b72
mov dword [ebp - 0x790], 0
jmp 0x7d3b85
push 0x80bd44
call fcn.007dd214
add esp, 4
mov dword [ebp - 0x790], eax
jmp 0x7d3bcd
mov ecx, dword [0x80b680]
xor ecx, dword [0x80b65c]
xor ecx, dword [0x80b690]
and ecx, 2
test ecx, ecx
je 0x7d3bcd
mov edx, 1
test edx, edx
je 0x7d3bb5
mov dword [ebp - 0x794], 0
jmp 0x7d3bc8
push 0x80bd28
call fcn.007dd214
add esp, 4
mov dword [ebp - 0x794], eax
call fcn.007d0e1d
mov eax, 1
test eax, eax
je 0x7d3be2
mov dword [ebp - 0x798], 0
jmp 0x7d3bf5
push 0x80bd14
call fcn.007dd214
add esp, 4
mov dword [ebp - 0x798], eax
call fcn.007d1cab
mov dword [ebp - 0x1c], eax
push 0
call fcn.007d3c9d
add esp, 4
push 0
call fcn.007e82cc
add esp, 4
cmp dword [ebp - 0x1c], 1
jne 0x7d3c28
push 0x813098
call dword [0x8130c0]
add esp, 4
mov dword [ebp - 0x1c], eax
mov ecx, 1
test ecx, ecx
je 0x7d3c3d
mov dword [ebp - 0x79c], 0
jmp 0x7d3c54
mov edx, dword [ebp - 0x1c]
push edx
push 0x80bcf8
call fcn.007dd214
add esp, 8
mov dword [ebp - 0x79c], eax
push 0x7d1c7c
call fcn.007e82cc
add esp, 4
cmp dword [0x8130bc], 0
je 0x7d3c70
call dword [0x8130bc]
cmp dword [0x8132d0], 0
je 0x7d3c89
push 0
push 0
mov eax, dword [0x8132cc]
push eax
call dword [0x8132d0]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret