Function at 0x1000d989
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x10058c0d
call fcn.100582b8
sub esp, 0x7c
push ebx
push esi
mov byte [ebp - 0x2c], cl
xor ebx, ebx
mov dword [ebp - 0x14], 0x5b13
cmp dword [ebp - 0x14], 0x5ef7
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x58], edx
jle 0x1000d9fe
push ebx
push ebx
push 0xb63
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], 0x71b7
mov eax, ebx
mov ecx, 0x10072ab8
or eax, esi
cdq
push edx
push eax
call fcn.10001ac8
add ebx, edi
dec dword [ebp - 0x20]
jne 0x1000d9d1
inc edi
push 0
pop ebx
cmp edi, 0x7687
jl 0x1000d9c7
inc esi
cmp esi, 0x29b1
jl 0x1000d9c5
cmp byte [ebp - 0x2c], 0
je 0x1000da5f
push ebx
push ebx
push ebx
push ebx
push 0x17f6
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov dword [ebp - 4], 3
cmp dword [ebp - 0x14], 0x593a
jge 0x1000de13
mov edx, str.adzjtam_rgg_skyfznu_szugqhdbf_qlwirjvor_nezbasu_lfmo_youyglbv_kwc_skmnmgnsv_rzsnnpt_maacgsgh
mov ecx, 0x10072ab8
call fcn.1000350a
jmp 0x1000de13
push 0xa4b
push 1
call fcn.1000d653
pop ecx
pop ecx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov esi, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 4], ebx
cmp dword [esi + 0x14], 8
mov edx, dword [esi + 0x10]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x28], ecx
jb 0x1000da95
mov ecx, dword [esi]
jmp 0x1000da97
mov ecx, esi
push edx
push ebx
push ecx
mov ecx, eax
call fcn.100117ac
mov edi, ebx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x38], edi
cmp edi, dword [ebp - 0x28]
jae 0x1000dc6d
push ecx
push ecx
lea eax, [ebp - 0x30]
mov dword [ebp - 0x18], 0x61f9c28a
push 1
mov byte [ebp - 0x30], bl
mov ecx, 0x3e5d
push eax
call fcn.1000de24
push 0x3601
push 0x6b8c
push 0x7a51
lea eax, [ebp - 0x2e]
mov byte [ebp - 0x2e], bl
mov dl, 1
push ebx
push eax
mov cl, dl
call fcn.1000fc42
mov eax, dword [ebp - 0x14]
add esp, 0x24
cmp eax, 0xffffffff
je 0x1000db6f
cmp eax, edi
je 0x1000db3d
push ecx
push ecx
call fcn.1000f5d1
mov eax, dword [ebp - 0x14]
pop ecx
pop ecx
mov ecx, dword [ebp + 0xc]
sub eax, edi
push eax
push edi
lea eax, [ebp - 0x88]
push eax
call fcn.100111ad
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 2
call fcn.1001126d
push ebx
push 1
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], bl
call fcn.1000ca37
mov eax, dword [ebp - 0x14]
mov edi, dword [ebp - 0x20]
add edi, eax
cmp dword [esi + 0x14], 8
mov dword [ebp - 0x38], edi
jb 0x1000db4f
mov eax, dword [esi]
jmp 0x1000db51
mov eax, esi
push dword [esi + 0x10]
mov ecx, dword [ebp + 0xc]
push edi
push eax
call fcn.100117ac
mov dword [ebp - 0x14], eax
cmp edi, 0xffffffff
jne 0x1000daa9
jmp 0x1000dc6d
push ecx
push ecx
push dword [ebp + 0xc]
lea edx, [ebp - 0x38]
lea ecx, [ebp - 0x44]
call fcn.1000fdac
add esp, 0xc
lea ecx, [ebp - 0x50]
push 1
call fcn.10001bdd
push ebx
push ecx
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 1
push eax
push ecx
mov dword [ebp - 0x20], 3
lea edx, [ebp - 0x34]
mov dword [ebp - 0x28], 0xb275cf8b
push ecx
call fcn.1000f609
add esp, 0x14
mov dword [ebp - 0x34], ebx
jmp 0x1000dbc0
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x70], ebx
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jl 0x1000dbb6
mov eax, dword [ebp - 0x50]
mov dword [eax], 3
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0x8e136dc9
cmp dword [ebp - 0x18], ebx
jne 0x1000dc4b
mov eax, dword [ebp - 0x50]
cmp dword [eax], ebx
je 0x1000dc05
mov eax, dword [ebp - 0x18]
xor edx, edx
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x14]
je 0x1000dc05
xor ecx, ecx
inc ecx
jmp 0x1000dc07
mov ecx, ebx
mov eax, dword [ebp - 0x50]
mov edx, dword [eax]
xor eax, eax
cmp ecx, edx
setle al
xor ecx, ecx
cmp eax, edx
setne cl
xor eax, eax
cmp ecx, edx
setl al
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x18]
setle cl
xor edx, edx
add ecx, 0x5fd0
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x18]
jl 0x1000dc4b
mov eax, ebx
jmp 0x1000dc4e
xor eax, eax
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x50]
dec dword [eax]
cmp dword [eax], 0xffffffe2
jne 0x1000dbcf
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], bl
call fcn.10001c3a
mov dword [ebp - 0x1c], 0xac204e2d
mov dword [ebp - 0x24], 0x8530de9b
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x14], 0xcef3cf68
mov dword [ebp - 0x28], 5
mov dword [ebp - 0x1c], ebx
jmp 0x1000dca2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x64], 0xfff8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1000dc94
mov dword [ebp - 0x1c], 0xffffffe3
jmp 0x1000dd1a
mov dword [ebp - 0x54], 0x390197f0
inc ecx
mov dword [ebp - 0x14], ebx
jmp 0x1000dccc
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x68], 0xfffffffe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1000dcbe
push ecx
push 0x4551
push 0x18eb
push 0x45d5
push ecx
push 0x1cd4
lea eax, [ebp - 0x54]
xor dl, dl
push 0x2610
push eax
mov ecx, 0x2a3b
call fcn.1000ea28
add esp, 0x20
mov byte [ebp - 0x2d], bl
mov edx, 0x845
push 0x2a1c
push ecx
lea ecx, [ebp - 0x2d]
call fcn.1000e159
inc dword [ebp - 0x1c]
pop ecx
pop ecx
xor ecx, ecx
cmp dword [ebp - 0x1c], 6
jl 0x1000dcb1
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x28]
imul edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmp edx, eax
setl cl
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 9
sbb eax, eax
xor ecx, ecx
neg eax
add eax, dword [ebp - 0x28]
cmp eax, 0x83e7
mov eax, dword [ebp - 0x24]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x5c]
setne cl
neg edx
sub edx, ecx
neg edx
sbb edx, edx
lea ecx, [edx + 1]
add ecx, eax
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x5c]
cmp ecx, eax
jg 0x1000dd8b
xor eax, eax
inc eax
jmp 0x1000dd8d
mov eax, ebx
xor edx, edx
cmp eax, 0x90a
mov eax, dword [ebp - 0x24]
sete dl
xor ecx, ecx
cmp eax, edx
setg cl
add ecx, dword [ebp - 0x20]
cmp ecx, 0x68dd2ac3
jge 0x1000ddb4
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], eax
jmp 0x1000ddff
mov dword [ebp - 0x24], ebx
jmp 0x1000dde0
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x1000dddd
push 0x1798
push ebx
push 0x444d
call fcn.1000decb
add esp, 0xc
dec dword [ebp - 0x18]
jns 0x1000ddc5
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x1000ddb9
push 0x977
push 0x7dbb
mov dl, 1
mov byte [ebp - 0x2f], bl
lea ecx, [ebp - 0x2f]
call fcn.1000d877
pop ecx
pop ecx
mov ecx, dword [ebp - 0x58]
lea eax, [ebp - 0x44]
push eax
call fcn.100112dd
lea ecx, [ebp - 0x44]
call fcn.10011937
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret