Function at 0x10039500
Capabilities:
Create process on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x90
mov esi, ecx
mov eax, dword [0x1006d040]
xor eax, esp
mov dword [esp + 0x8c], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 0x2f]
mov ecx, 0xb638689f
mov eax, 0x25e9880e
mov ebp, dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edi, [esp + 0x48]
lea ebx, [esp + 0x38]
jmp 0x10039550
mov ecx, 0xb638689f
nop word cs:[eax + eax]
nop dword [eax]
cmp ecx, 0xed07fef2
jle 0x100395b0
cmp ecx, 0x1470fb39
jle 0x10039600
cmp ecx, 0x3d00c6fc
jle 0x1003966e
cmp ecx, 0x3d00c6fd
je 0x1003975c
cmp ecx, 0x4e6d2d84
je 0x10039778
cmp ecx, 0x58ea3a6a
jne 0x10039550
mov ecx, dword [esp + 0x28]
cmp ecx, 0x5dd1d9a0
mov ecx, 0xbd6845b
mov edx, 0x4e6d2d84
cmovl ecx, edx
jmp 0x10039550
cmp ecx, 0xb638689e
jg 0x10039640
cmp ecx, 0x92d6d0e8
jle 0x1003969d
cmp ecx, 0xa34546ca
je 0x10039794
cmp ecx, 0xa5e23fa2
jne 0x1003988f
mov ecx, dword [esp + 0x28]
cmp ecx, 0x2b4845db
mov ecx, 0x58ea3a6a
mov edx, 0x3d00c6fd
cmovl ecx, edx
jmp 0x10039550
cmp ecx, 0xfb4f7106
jg 0x100396f4
cmp ecx, 0xed07fef3
je 0x1003953d
cmp ecx, 0xf3ce12bf
jne 0x10039550
cmp byte [esp + 0x2f], 0
mov eax, 0x2b4845db
mov ecx, 0x5dd1d9a0
cmovne eax, ecx
mov ecx, 0xed07fef3
jmp 0x10039550
cmp ecx, 0xbf630e09
jg 0x10039728
cmp ecx, 0xb638689f
je 0x10039823
cmp ecx, 0xbc691bd9
jne 0x10039550
mov ecx, 0xbf630e0a
jmp 0x10039550
cmp ecx, 0x1470fb3a
je 0x10039831
cmp ecx, 0x2973d068
jne 0x10039550
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, 0xed07fef3
mov eax, 0x5dd1d9a0
jmp 0x10039550
cmp ecx, 0x873ac2a1
je 0x1003984d
cmp ecx, 0x8d8cec8f
jne 0x10039550
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call ebp
sub esp, 4
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call ebp
sub esp, 4
mov ecx, 0xed07fef3
mov eax, 0xf71d0149
jmp 0x10039550
cmp ecx, 0xfb4f7107
je 0x10039869
cmp ecx, 0xbd6845b
jne 0x10039550
mov ecx, dword [esp + 0x28]
cmp ecx, 0x5dd1d9a0
mov ecx, 0xbc691bd9
mov edx, 0x92d6d0e9
cmove ecx, edx
jmp 0x10039550
cmp ecx, 0xbf630e0a
je 0x10039885
cmp ecx, 0xc79356ed
jne 0x10039550
mov ecx, dword [esp + 0x28]
cmp ecx, 0x25e9880e
mov ecx, 0xa5e23fa2
mov edx, 0xfb4f7107
cmovl ecx, edx
jmp 0x10039550
mov ecx, dword [esp + 0x28]
cmp ecx, 0x25e9880e
mov ecx, 0xbc691bd9
mov edx, 0xf3ce12bf
cmove ecx, edx
jmp 0x10039550
mov ecx, dword [esp + 0x28]
cmp ecx, 0x2b4845db
mov ecx, 0xbc691bd9
mov edx, 0xa34546ca
cmove ecx, edx
jmp 0x10039550
mov dword [esp + 0x30], edi
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x30]
xorps xmm0, xmm0
movups xmmword [eax + 0x30], xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax], xmm0
mov dword [eax + 0x40], 0
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x34]
movups xmmword [eax], xmm0
cmp dword [esi + 0x14], 0x10
mov eax, esi
jb 0x100397d2
mov eax, dword [esi]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], edi
movaps xmm0, xmmword [0x10069970]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
sub esp, 0x28
test eax, eax
mov eax, 0x84389f7c
mov ecx, 0xf71d0149
cmove eax, ecx
mov ecx, 0xed07fef3
jmp 0x10039550
mov dword [esp + 0x28], eax
mov ecx, 0xc79356ed
jmp 0x10039550
mov ecx, dword [esp + 0x28]
cmp ecx, 0x84389f7c
mov ecx, 0xbc691bd9
mov edx, 0x8d8cec8f
cmove ecx, edx
jmp 0x10039550
mov ecx, dword [esp + 0x28]
cmp ecx, 0xf71d0149
mov ecx, 0xbc691bd9
mov edx, 0x2973d068
cmove ecx, edx
jmp 0x10039550
mov ecx, dword [esp + 0x28]
cmp ecx, 0xf71d0149
mov ecx, 0x873ac2a1
mov edx, 0x1470fb3a
cmovl ecx, edx
jmp 0x10039550
mov ecx, 0xed07fef3
jmp 0x10039550
cmp ecx, 0x92d6d0e9
jne 0x10039550
mov ecx, dword [esp + 0x8c]
xor ecx, esp
call fcn.1005a81a
add esp, 0x90
pop esi
pop edi
pop ebx
pop ebp
ret