Function at 0x1003b568
Capabilities:
Create process on windows
Read .ini file

Disassembly:
mov eax, 0x10062acb
call fcn.100612c8
sub esp, 0x84
cmp byte [ebp + 0xc], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2c], edx
je 0x1003b58f
and dword [ecx], 0
jmp 0x1003b930
push dword [ebp + 0x10]
lea ecx, [ebp - 0x78]
call fcn.10008281
push ecx
push dword [ebp + 0x14]
xor ebx, ebx
lea ecx, [ebp - 0x78]
mov dword [ebp - 4], ebx
call fcn.10040839
or esi, 0xffffffff
mov dword [ebp - 0x1c], eax
cmp eax, esi
je 0x1003b5cb
lea eax, [ebp - 0x1c]
xor dl, dl
push eax
lea eax, [ebp - 0x78]
mov ecx, 0x7c66
push eax
call fcn.1003bf1f
pop ecx
pop ecx
push 2
mov dword [ebp - 0x14], 0xfff8
lea ecx, [ebp - 0x3c]
pop eax
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x14], 0xfffffffe
mov dword [ebp - 0x14], eax
push eax
call fcn.10001dc8
mov byte [ebp - 4], 1
mov dword [ebp - 0x14], 0x3891
cmp dword [ebp - 0x14], 0x38a4
jle 0x1003b639
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1007cab8
or eax, esi
cdq
push edx
push eax
call fcn.10001cb3
inc edi
cmp edi, 0x51d3
jl 0x1003b607
inc esi
cmp esi, 0x6264
jl 0x1003b605
push 0x1332
push ebx
call dword [sym.imp.KERNEL32.dll_WinExec]
or esi, 0xffffffff
mov byte [ebp - 4], 2
cmp dword [ebp - 0x14], 0x3802
jge 0x1003b655
mov edx, str.ihxy_oscrjzox_qljfvta_diwwwa_dzoazp_zxgrjk_xifqam_apsepquts_znuifzr_cxaod_tqhqdura
mov ecx, 0x1007cab8
call fcn.100036f5
xor edx, edx
inc edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 0x14], 0xfffffff9
mov dword [ebp - 0x14], ebx
jmp 0x1003b6af
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
mov dword [eax + ecx*4], 0x7d437f1b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1003b69f
push 3
mov dword [ebp - 0x14], ebx
pop ecx
jmp 0x1003b6c7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x48], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1003b6bd
mov dword [ebp - 0x14], ebx
jmp 0x1003b6df
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x20], 0xdeb94592
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1003b6d1
mov dword [ebp - 0x14], ebx
jmp 0x1003b6f7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x60], 0xff2b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1003b6e9
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 0xfffffff7
jae 0x1003b735
mov eax, dword [ebp - 0x14]
neg eax
jne 0x1003b714
cmp dword [ebp - 0x14], ebx
jne 0x1003b714
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jne 0x1003b726
cmp dword [ebp - 0x18], ebx
je 0x1003b72a
cmp dword [ebp - 0x14], ebx
je 0x1003b72a
mov ecx, edx
jmp 0x1003b72c
mov ecx, ebx
mov eax, dword [ebp - 0x14]
mov edi, ebx
add eax, ecx
je 0x1003b737
mov edi, edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edi, eax
setge cl
xor eax, eax
cmp ecx, 0xa8f1
setge al
imul eax, eax, 9
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
jne 0x1003b75e
cmp dword [ebp - 0x18], ebx
jne 0x1003b75e
mov edx, ebx
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
cmp esi, ecx
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x18]
setge dl
add ecx, edx
xor edx, edx
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setl bl
xor ecx, ecx
cmp ebx, eax
setne cl
xor ebx, ebx
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], bl
call fcn.10001e25
push ecx
push dword [ebp + 0x14]
lea ecx, [ebp - 0x78]
call fcn.100407b5
push 2
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x1c], eax
call fcn.10001dc8
sub esp, 0x10
mov byte [ebp - 4], 4
lea eax, [ebp - 0x54]
mov dword [ebp - 0x24], 0x9bdba76a
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], 1
push eax
call fcn.1003eb63
add esp, 0x14
lea eax, [ebp - 0x24]
push eax
push ecx
push 0x348c
push 0x3104
push ebx
push 0x288
push 0x7646
push ecx
lea eax, [ebp - 0x28]
push eax
push 0x27cc
call fcn.1003e0ea
add esp, 0x28
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x54]
call fcn.10001e25
cmp dword [ebp - 0x1c], esi
je 0x1003b884
push 0x43d3
push ebx
push 0x1632
push ebx
mov edx, 0x1624
mov ecx, 0x2203
call fcn.1003b21e
push 0x7ee7
push ebx
lea eax, [ebp - 0x78]
mov ecx, 0x63e
push eax
push 0x6b72
push 0x490d
push ebx
push 0x6c2a
push 0x52ca
push 0x5d7c
lea edx, [ebp - 0x1c]
call fcn.1003b3bc
add esp, 0x34
mov dword [ebp - 0x14], 0x79a9
cmp dword [ebp - 0x14], 0x7afc
jle 0x1003b8ff
mov esi, ebx
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x18], ebx
or eax, edi
lea ecx, [ebp - 0x90]
or eax, esi
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003b8b9
mov eax, dword [eax]
push eax
call fcn.100490c6
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x90]
call fcn.1000209f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x32ab
jl 0x1003b89d
inc edi
cmp edi, 0x3eff
jl 0x1003b898
inc esi
cmp esi, 0x5ae7
jl 0x1003b896
push ebx
push 0x893
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
or esi, 0xffffffff
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0x78]
cmp ecx, eax
je 0x1003b911
push esi
push ebx
push eax
call fcn.1000750d
cmp dword [ebp - 0x14], 0x7745
jge 0x1003b925
push str.ncn_wrvjtz_xdhy_lbht_qplod
call fcn.100490c6
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x78]
call fcn.1000737d
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret