Function at 0x10013190
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Inject thread
Query or enumerate registry value
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x11c
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
call fcn.10012db0
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test al, al
je 0x100131da
push 0
push 0
push 0
push 0x10013040
push 0
push 0
call ebx
mov esi, eax
push 0xa
push esi
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
push 0
push 0x10013100
push 0
push 0
call ebx
mov esi, eax
push 0xa
push esi
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [ebp - 0x110]
push eax
push 1
lea eax, [ebp - 0x109]
mov byte [ebp - 0x109], 0xe9
push eax
push 0x40cee4
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call ebx
mov eax, 0x10013170
sub eax, 0x40cee9
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x110]
push eax
push 4
lea eax, [ebp - 0x114]
push eax
push 0x40cee5
call edi
push eax
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x11c]
push eax
push 0x40
push 1
push 0x40cee9
call esi
mov eax, 0x40cee9
mov byte [eax], 0x90
lea eax, [ebp - 0x118]
push eax
push dword [ebp - 0x11c]
push 1
push 0x40cee9
call esi
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x513508
call edi
push eax
call ebx
mov eax, 0x10013020
sub eax, 0x51350d
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x513509
call edi
push eax
call ebx
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x51c5ca
call edi
push eax
call ebx
mov eax, 0x10012d20
sub eax, 0x51c5cf
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x51c5cb
call edi
push eax
call ebx
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x51c611
call edi
push eax
call ebx
mov eax, 0x10012d40
sub eax, 0x51c616
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x51c612
call edi
push eax
call ebx
call fcn.10012db0
test al, al
je 0x10013456
push 0x103
lea eax, [ebp - 0x107]
mov byte [ebp - 0x108], 0
push 0
push eax
call fcn.1003c000
add esp, 0xc
mov dword [ebp - 0x114], 0x104
lea eax, [ebp - 0x110]
push eax
push 0x20019
push 0
push str.SOFTWAREVooblyVooblygame13
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x10013425
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x118]
push eax
push 0
push str.launchtosingle
push dword [ebp - 0x110]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, str.true
lea eax, [ebp - 0x108]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10013410
test dl, dl
je 0x1001340c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10013410
add eax, 2
add ecx, 2
test dl, dl
jne 0x100133f0
xor esi, esi
jmp 0x10013415
sbb esi, esi
or esi, 1
push dword [ebp - 0x110]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
je 0x10013456
push 0
push 0
push 0
push 0x10012ec0
push 0
push 0
mov dword [0x10078798], 1
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
push 0xa
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x520a8f
call edi
push eax
call ebx
mov eax, 0x10012a60
sub eax, 0x520a94
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x520a90
call edi
push eax
call ebx
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x602d69
call edi
push eax
call ebx
mov eax, 0x100129c0
sub eax, 0x602d6e
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x602d6a
call edi
push eax
call ebx
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x519389
call edi
push eax
call ebx
mov eax, 0x10012bd0
sub eax, 0x51938e
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x51938a
call edi
push eax
call ebx
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x44231b
call edi
push eax
call ebx
mov eax, 0x100128c0
sub eax, 0x442320
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x44231c
call edi
push eax
call ebx
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x521f23
call edi
push eax
call ebx
mov eax, 0x100128e0
sub eax, 0x521f28
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x521f24
call edi
push eax
call ebx
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x452914
call edi
push eax
call ebx
mov eax, 0x10012980
sub eax, 0x452919
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x452915
call edi
push eax
call ebx
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x44023f
call edi
push eax
call ebx
mov eax, 0x10012ba0
sub eax, 0x440244
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x440240
call edi
push eax
call ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1002063c
mov esp, ebp
pop ebp
ret