Function at 0x1003d8da
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
push esi
mov esi, ecx
cmp dword [esi], 0
je 0x1003db19
push ebx
push edi
push dword [esi]
xor ebx, ebx
push ebx
push dword [esi + 4]
call fcn.10023c36
add esp, 0xc
xor edi, edi
inc edi
push 0xfffffffffffffffd
pop eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0xb24ce554
mov dword [ebp - 8], ebx
jmp 0x1003d92a
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x18], 2
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x1003d91c
mov dword [ebp - 8], ebx
jmp 0x1003d942
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x6c], 0x5a83d87
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x1003d934
mov dword [ebp - 0x3c], 7
cmp dword [ebp - 0x3c], 5
jl 0x1003d995
mov edx, 0x2415
mov dword [ebp - 0x5c], edx
mov ecx, edi
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x3c]
sub ecx, eax
mov dword [ebp - 0x18], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x54], ebx
mov eax, dword [ebp - 0x30]
test eax, eax
sets cl
mov dword [ebp - 0x6c], ecx
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 5
jge 0x1003d95a
push dword [esi + 4]
call fcn.100617b2
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0x5a74d4b4
pop ecx
mov dword [ebp - 8], ebx
jmp 0x1003d9be
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xc], 0x9c9fb37b
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x1003d9b0
mov dword [ebp - 8], ebx
jmp 0x1003d9d6
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x4c], 0x83989226
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x1003d9c8
cmp dword [ebp - 0xc], ebx
jne 0x1003da34
mov eax, dword [ebp - 0x44]
sub eax, 5
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add eax, 0x7356a0b3
imul eax, dword [ebp - 0x40]
test eax, eax
jne 0x1003da03
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0x40]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0xc]
setg dl
sub edx, 0xb333
neg edx
sbb edx, edx
inc edx
sub edx, eax
mov eax, ebx
je 0x1003da36
mov eax, edi
xor edx, edx
cmp eax, 0x3f6a0837
mov eax, dword [ebp - 0x40]
sete dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0xc]
jle 0x1003da5b
cmp dword [ebp - 0x10], ebx
jne 0x1003da5b
mov dword [ebp - 0xc], ebx
mov eax, ebx
jmp 0x1003da60
mov dword [ebp - 0xc], edi
mov eax, edi
mov dword [ebp - 0x14], eax
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x1003da72
push ebx
call dword [sym.imp.KERNEL32.dll_InitializeSListHead]
mov dword [esi + 4], ebx
mov dword [ebp - 0x10], 0x6915a136
mov dword [ebp - 8], ebx
jmp 0x1003da8f
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x2c], 0x8ec0
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x1003da81
push 2
pop edx
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], ebx
jl 0x1003daf9
mov dword [ebp - 8], 0xcd53bc6e
mov dword [ebp - 0x1c], 0xfada
mov dword [ebp - 0x14], 0xe75cb554
mov dword [ebp - 8], edx
cmp dword [ebp - 8], ebx
jl 0x1003daf1
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x14], edi
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
je 0x1003dad4
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x28], 4
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, edi
setge cl
mov dword [ebp - 0x14], ecx
dec dword [ebp - 8]
jns 0x1003dabd
mov eax, dword [ebp - 0x24]
dec dword [ebp - 0x10]
jns 0x1003daa0
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x1003db15
push ebx
push ebx
push ebx
push ebx
push 0x26fd
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
pop edi
mov dword [esi], ebx
pop ebx
pop esi
mov esp, ebp
pop ebp
ret