Function at 0x1003c74f
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
push ebx
push esi
push edi
mov dword [ebp - 8], 0x90ac204e
xor eax, eax
mov dword [ebp - 0xc], 6
push 3
mov dword [ebp - 0x1c], 0xfffffffb
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x10], eax
pop ebx
jmp 0x1003c788
mov ecx, dword [ebp - 0x10]
mov dword [ebp + ecx*4 - 0x40], 1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1003c77a
mov dword [ebp - 8], 0x13
cmp dword [ebp - 8], 0xfffffffd
je 0x1003c8c3
push dword [ebp - 0x28]
movdqa xmm0, xmmword [0x100089d0]
lea ecx, [ebp - 0x4c]
push ecx
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x34], eax
push ecx
push eax
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x30], eax
movdqu xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x2c], eax
call fcn.1001d6c4
mov dword [ebp - 0x18], 0x290be443
xor eax, eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], eax
jl 0x1003c8ab
mov dword [ebp - 0x10], 0xc3a0b8ee
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], eax
jl 0x1003c8a2
mov dword [ebp - 0x14], 0x3e731e7b
mov dword [ebp - 0x14], eax
jmp 0x1003c81b
mov ecx, dword [ebp - 0x14]
mov dword [ebp + ecx*4 - 0x4c], 0xdebf889e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1003c80d
cmp dword [ebp - 8], eax
je 0x1003c856
inc dword [ebp - 0x20]
xor edx, edx
mov esi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x24]
cmp ecx, ecx
mov ecx, dword [ebp - 0x40]
setl dl
xor ebx, ebx
cmp edx, ecx
mov ecx, dword [ebp - 0x18]
setg bl
xor edx, edx
cmp ebx, ecx
mov ecx, dword [ebp - 0x34]
setle dl
cmp dword [ecx + esi*4], edx
jne 0x1003c856
xor edi, edi
inc edi
jmp 0x1003c858
mov edi, eax
xor edx, edx
mov dword [ebp - 0x4c], edi
mov esi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp edi, ecx
push 3
setle dl
xor ecx, ecx
cmp edx, 0xadc1
mov edx, dword [ebp - 8]
setg cl
inc ecx
sub edx, ecx
mov ecx, dword [ebp - 0x34]
neg edx
sbb edx, edx
xor ebx, ebx
inc edx
cmp dword [ecx + esi*4], edx
mov ecx, dword [ebp - 0xc]
setge bl
xor edx, edx
cmp ebx, ecx
pop ebx
setle dl
mov dword [ebp - 0x14], edx
dec dword [ebp - 0x10]
jns 0x1003c801
dec dword [ebp - 0x18]
jns 0x1003c7e0
lea ecx, [ebp - 0x34]
call fcn.10016f47
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xfffffffd
push 0
pop eax
jne 0x1003c79e
mov dword [ebp - 0xc], eax
jmp 0x1003c944
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x24], 0x8317d239
cmp dword [ebp - 0x20], eax
je 0x1003c8e5
cmp dword [ebp - 0xc], eax
je 0x1003c8e5
xor edi, edi
inc edi
jmp 0x1003c8e7
mov edi, eax
mov dword [ebp - 0x24], 1
xor ebx, ebx
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
cmp edx, ecx
setge bl
add ebx, 0x31ec8e12
je 0x1003c90d
cmp dword [ebp - 0xc], eax
je 0x1003c90d
xor ecx, ecx
inc ecx
jmp 0x1003c90f
mov ecx, eax
mov dword [ebp - 8], ecx
xor edx, edx
mov esi, dword [ebp - 0x1c]
sub esi, edi
sub esi, dword [ebp - 0x20]
add esi, dword [ebp - 8]
mov ecx, dword [ebp - 0x1c]
cmp esi, ecx
setne dl
mov dword [ebp - 0x3c], edx
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
je 0x1003c941
push 0x466
push eax
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
xor eax, eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x19
jne 0x1003c8c8
mov ecx, dword [ebp - 0x28]
cmp byte [ecx], 0
je 0x1003c95f
push 0x6d
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret