Function at 0x10001c10
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x10c
mov eax, dword [0x10017040]
xor eax, esp
mov dword [esp + 0x108], eax
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x10001e38
push 0x100
lea eax, [esp + 0xc]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword fs:[0x2c]
add esp, 0xc
mov ecx, dword [0x1001780c]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10018728]
cmp eax, dword [ecx + 4]
jle 0x10001ca5
push 0x10018728
call fcn.1000f5c2
add esp, 4
cmp dword [0x10018728], 0xffffffff
jne 0x10001ca5
push str._vsnprintf
push str.ntdll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x10018728
mov dword [0x10018714], eax
call fcn.1000f571
add esp, 4
lea eax, [ebp + 0xc]
push eax
push esi
lea eax, [esp + 0x10]
push 0xff
push eax
call dword [0x10018714]
add esp, 0x10
cmp byte [0x100178f8], 0
jne 0x10001d83
push ecx
push 0x12
push ecx
mov ecx, 0x100171f4
call fcn.1000e310
test eax, eax
mov eax, dword [0x100171f0]
push 0
mov ecx, dword [eax + 4]
je 0x10001cf6
push 0
add ecx, 0x100171f0
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
jmp 0x10001d04
push 2
add ecx, 0x100171f0
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
cmp dword [0x10017240], 0
jne 0x10001d3c
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.Gagal_membuka_file_log:
push 0x1000e670
call fcn.1000e450
push ecx
mov edx, str.AddyLogger.txt
mov ecx, eax
call fcn.1000e450
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
jmp 0x10001d83
mov ecx, 0x100171f4
mov byte [0x100178f8], 1
call fcn.1000e280
test eax, eax
jne 0x10001d68
push eax
mov eax, dword [0x100171f0]
push 2
mov ecx, dword [eax + 4]
add ecx, 0x100171f0
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
push 1
push 0
push str.AddyLogger.txt
push str.notepad.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push ecx
push 0xa
push ecx
mov ecx, 0x100171f4
call fcn.1000e310
test eax, eax
mov eax, dword [0x100171f0]
push 0
mov ecx, dword [eax + 4]
je 0x10001daf
push 0
add ecx, 0x100171f0
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
jmp 0x10001dbd
push 2
add ecx, 0x100171f0
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
cmp dword [0x10017240], 0
push 0x1000e670
push ecx
jne 0x10001dfa
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.Gagal_membuka_file_log:_AddyLogger.txt
call fcn.1000e450
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
pop esi
mov ecx, dword [esp + 0x108]
xor ecx, esp
call fcn.1000f55e
mov esp, ebp
pop ebp
ret
lea edx, [esp + 0x10]
mov ecx, 0x100171f0
call fcn.1000e450
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, 0x100171f4
call fcn.1000e280
test eax, eax
jne 0x10001e38
push eax
mov eax, dword [0x100171f0]
push 2
mov ecx, dword [eax + 4]
add ecx, 0x100171f0
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov ecx, dword [esp + 0x10c]
pop esi
xor ecx, esp
call fcn.1000f55e
mov esp, ebp
pop ebp
ret