Function at 0x10019c44
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x10057ba4
call fcn.10056ec8
sub esp, 0x58
push ebx
push esi
mov byte [ebp - 0x18], dl
mov dword [ebp - 0x20], 0x39c2
cmp dword [ebp - 0x20], 0x3b26
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x30], ecx
jle 0x10019ccb
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor esi, esi
mov edi, esi
mov ebx, esi
mov eax, esi
mov dword [ebp - 0x1c], esi
and eax, ebx
lea ecx, [ebp - 0x48]
or eax, edi
cdq
push edx
push eax
call fcn.10001ba3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10019c97
mov eax, dword [eax]
push eax
call fcn.100410e1
pop ecx
push esi
push 1
lea ecx, [ebp - 0x48]
call fcn.100122d9
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x7684
jl 0x10019c7e
inc ebx
cmp ebx, 0x3867
jl 0x10019c79
inc edi
cmp edi, 0x33ac
jl 0x10019c77
jmp 0x10019ccd
xor esi, esi
cmp dword [ebp - 0x20], 0x37be
jge 0x10019ce1
push str.pzvtvo_gckdgukmf_cvv_mse_hqpkihrc_dtudwte_amyj_aaimsnhkc_xmomhhez_pexttbdl_jtbmq
call fcn.100410e1
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0xb9e
cmp dword [ebp - 0x28], 0xf25
jle 0x10019d7b
mov edi, esi
mov dword [ebp - 0x24], esi
mov eax, edi
mov dword [ebp - 0x20], 0x20d4
mov dword [ebp - 0x1c], eax
mov ebx, esi
mov edi, esi
xor eax, edi
lea ecx, [ebp - 0x60]
xor eax, ebx
cdq
push edx
push eax
call fcn.10001ba3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10019d27
mov eax, dword [eax]
push eax
call fcn.100410e1
pop ecx
push esi
push 1
lea ecx, [ebp - 0x60]
call fcn.100122d9
mov eax, dword [ebp - 0x1c]
inc edi
cmp edi, 0xde8
jl 0x10019d0e
inc ebx
cmp ebx, 0x1750
jl 0x10019d0c
dec eax
dec dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
jne 0x10019d0a
mov edi, dword [ebp - 0x24]
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x734e
jl 0x10019cfe
push esi
push esi
push esi
push esi
push 0x7af
push 1
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
cmp dword [ebp - 0x28], 0xb8b
jge 0x10019d8f
push str.aosjmz_hdfylon_vykjlskoj_msa_obpml_mqxuldq_pqky
call fcn.100410e1
pop ecx
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x18], 0
je 0x10019e7e
mov dword [ebp - 0x1c], 0x3969
cmp dword [ebp - 0x1c], 0x3cf9
jle 0x10019e11
mov edi, esi
mov dword [ebp - 0x20], esi
mov ebx, esi
mov dword [ebp - 0x24], esi
mov eax, ebx
mov dword [ebp - 0x28], esi
and eax, edi
mov dword [ebp - 0x2c], eax
mov edi, eax
mov ebx, esi
mov esi, dword [ebp - 0x28]
mov eax, edi
mov ecx, 0x10072d38
or eax, ebx
or eax, esi
cdq
push edx
push eax
call fcn.10011982
inc ebx
cmp ebx, 0x2270
jl 0x10019dc8
inc esi
push 0
mov dword [ebp - 0x28], esi
cmp esi, 0x5a0
pop esi
jl 0x10019dc3
mov ebx, dword [ebp - 0x24]
mov edi, dword [ebp - 0x20]
inc ebx
mov dword [ebp - 0x24], ebx
cmp ebx, 0x6630
jl 0x10019db7
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x56a2
jl 0x10019db2
mov dword [ebp - 4], 4
cmp dword [ebp - 0x1c], 0x3619
jge 0x10019e4e
mov edx, str.tegkm_cinmzmo_rvaegoop_hhifhskek_timmiks_xumal_ppev_oprijv_cnpeynrc_ndgmo_ppsdqrnx
mov ecx, 0x10072d38
call fcn.10016228
jmp 0x10019e4e
mov edx, dword [ebp + 0x14]
mov dword [edx], esi
cmp dword [edx], 3
jge 0x10019e6d
mov esi, dword [ebp - 0x30]
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x2a3cc92e
inc dword [edx]
cmp dword [edx], 3
jl 0x10019e5b
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x28], 0xa86
cmp dword [ebp - 0x28], 0xaf7
jle 0x10019eb8
mov edi, esi
mov ebx, esi
mov eax, edi
mov ecx, 0x10072d38
cdq
idiv ebx
mov eax, edx
cdq
push edx
push eax
call fcn.10011982
inc ebx
cmp ebx, 0x23ee
jl 0x10019e92
inc edi
cmp edi, 0x7a01
jl 0x10019e90
mov eax, dword [ebp + 0xc]
xor edx, edx
mov ecx, dword [eax]
mov eax, dword [ebp + 0x18]
mov eax, dword [eax]
cmp eax, dword [ecx]
mov eax, dword [ebp + 0x10]
setl dl
mov dword [eax], edx
mov dword [ebp - 4], 6
cmp dword [ebp - 0x28], 0x74d
jge 0x10019e6d
mov edx, str.erpw_tolnkabwi_sinfaroxa_yvbdsdc_vxyywaj_wductcia_krx_itfcu_wxay_qpjarayb
mov ecx, 0x10072d38
call fcn.10016228
jmp 0x10019e6d