Function at 0x10048d71
Capabilities:
Create process on windows
Identify system language via api

Disassembly:
mov eax, 0x1007cd2a
call fcn.1007b3d0
sub esp, 0x58
mov eax, 0xa5d6c05b
mov dword [ebp - 0x64], eax
push ebx
mov dword [ebp - 0x60], eax
xor ebx, ebx
push esi
mov dword [ebp - 0x5c], eax
mov esi, ecx
mov dword [ebp - 0x58], eax
push edi
mov dword [ebp - 0x18], ebx
jmp 0x10048da9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x34], 0x8da8e97e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10048d9b
mov dword [ebp - 0x30], 3
cmp dword [ebp - 0x30], ebx
jl 0x10048dd4
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x10048dcf
push 0x18f0
push ebx
call dword [sym.imp.KERNEL32.dll_WinExec]
dec dword [ebp - 0x30]
jns 0x10048dbb
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x10048de2
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
xor edi, edi
inc edi
push esi
push edi
call fcn.10043813
pop ecx
mov dword [ebp - 0x18], 0x3ae35568
pop ecx
mov dword [ebp - 0x18], ebx
jmp 0x10048e7e
push 4
lea ecx, [ebp - 0x54]
call fcn.10015fe6
push edi
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], ebx
call fcn.10015fe6
mov dword [ebp - 0x14], ebx
jmp 0x10048e24
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x54]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10048e18
mov dword [ebp - 0x14], ebx
jmp 0x10048e3b
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x48]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10048e2f
mov eax, dword [ebp - 0x48]
mov dword [eax], ebx
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x10048e55
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x48]
inc dword [eax]
cmp dword [eax], 3
jle 0x10048e45
mov eax, dword [ebp - 0x54]
lea ecx, [ebp - 0x48]
cmp dword [eax + 8], ebx
jne 0x10048e8a
call fcn.1001606b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.1001606b
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff2
jge 0x10048dfd
jmp 0x10048e9b
call fcn.1001606b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.1001606b
push esi
call fcn.1002cf31
mov dword [ebp - 0x14], 7
mov esi, eax
mov dword [ebp - 0x18], 0xa2ae
mov dword [ebp - 0x24], 0x7d0
pop ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], ebx
je 0x10048f91
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x10048ee2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x28], 0x4859bb7a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10048ed4
mov dword [ebp - 0x14], ebx
jmp 0x10048f31
mov dword [ebp - 0x1c], 0x86e52d8c
mov dword [ebp - 0x1c], ebx
jmp 0x10048f06
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3c], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10048ef8
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], ebx
jl 0x10048f2e
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x10048f29
push 0x1df
push ebx
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
dec dword [ebp - 0x1c]
jns 0x10048f14
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffed
jne 0x10048eec
cmp dword [ebp - 0x18], ebx
jne 0x10048f54
mov eax, dword [ebp - 0x28]
mov ecx, 0xa0c0e075
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
sub ecx, eax
add ecx, dword [ebp - 0x14]
cmp ecx, 0xffffffff
jne 0x10048f56
mov ebx, edi
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp ebx, eax
setge cl
xor ebx, ebx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x28]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x20], ecx
jmp 0x10049029
mov dword [ebp - 0x20], 9
mov dword [ebp - 0x1c], 0x1b460d54
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10048fb5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2c], 0xd38e20b4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10048fa7
mov dword [ebp - 0x14], ebx
jmp 0x10048fd3
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x10048fd0
push 7
call dword [sym.imp.KERNEL32.dll_TlsFree]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xa
jl 0x10048fbf
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setle cl
xor edx, edx
test ecx, ecx
sets dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
sub ecx, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], edi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret