Function at 0x10037980
Capabilities:
Create process on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x90
mov esi, ecx
mov eax, dword [0x1006b040]
xor eax, esp
mov dword [esp + 0x8c], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 0x2f]
mov ecx, 0x674279c8
mov eax, 0xc48306fa
lea ebx, [esp + 0x48]
lea ebp, [esp + 0x38]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x100379d0
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, 0xf9713f1f
mov eax, 0xdb3655f9
nop
cmp ecx, 0x3d3f18
jle 0x10037a20
cmp ecx, 0x519cd49d
jle 0x10037a70
cmp ecx, 0x674279c7
jle 0x10037ae0
cmp ecx, 0x7c50940d
je 0x10037b9e
cmp ecx, 0x7b4a93fc
je 0x10037c2d
cmp ecx, 0x674279c8
jne 0x100379d0
mov dword [esp + 0x28], eax
mov ecx, 0xc5e9d3fa
jmp 0x100379d0
cmp ecx, 0xe9a6fd8f
jg 0x10037aa0
cmp ecx, 0xcab19628
jg 0x10037b14
cmp ecx, 0xba6c494d
je 0x100379bd
cmp ecx, 0xc5e9d3fa
jne 0x10037d02
mov ecx, dword [esp + 0x28]
cmp ecx, 0xdb3655f9
mov ecx, 0x5e0fb3c1
mov edx, 0x3d3f19
cmovl ecx, edx
jmp 0x100379d0
cmp ecx, 0x145b08a7
jg 0x10037b48
cmp ecx, 0x3d3f19
je 0x10037c6c
cmp ecx, 0x17a81a1
jne 0x100379d0
mov ecx, 0xf9713f1f
jmp 0x100379d0
cmp ecx, 0xf18d4637
jg 0x10037b7c
cmp ecx, 0xe9a6fd90
je 0x10037c88
cmp ecx, 0xedb275ec
jne 0x100379d0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x6e9681f4
mov ecx, 0x145b08a8
mov edx, 0x7b4a93fc
cmove ecx, edx
jmp 0x100379d0
cmp ecx, 0x519cd49e
je 0x10037ca4
cmp ecx, 0x5e0fb3c1
jne 0x100379d0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x5331ee6f
mov ecx, 0x519cd49e
mov edx, 0xe8b678a9
cmovl ecx, edx
jmp 0x100379d0
cmp ecx, 0xcab19629
je 0x10037cc0
cmp ecx, 0xe8b678a9
jne 0x100379d0
mov ecx, dword [esp + 0x28]
cmp ecx, 0xdb3655f9
mov ecx, 0x145b08a8
mov edx, 0x9be0a39f
cmove ecx, edx
jmp 0x100379d0
cmp ecx, 0x145b08a8
je 0x10037cdc
cmp ecx, 0x2c8b5ac2
jne 0x100379d0
mov ecx, dword [esp + 0x28]
cmp ecx, 0xc48306fa
mov ecx, 0x145b08a8
mov edx, 0xf18d4638
cmove ecx, edx
jmp 0x100379d0
cmp ecx, 0xf18d4638
je 0x10037ce6
cmp ecx, 0xf9713f1f
jne 0x100379d0
mov ecx, 0x674279c8
jmp 0x100379d0
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x30]
xorps xmm0, xmm0
movups xmmword [eax + 0x30], xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax], xmm0
mov dword [eax + 0x40], 0
mov dword [esp + 0x34], ebp
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x34]
movups xmmword [eax], xmm0
cmp dword [esi + 0x14], 0x10
mov eax, esi
jb 0x10037bdc
mov eax, dword [esi]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ebx
movaps xmm0, xmmword [0x10067970]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
sub esp, 0x28
test eax, eax
mov eax, 0x6e9681f4
mov ecx, 0x5331ee6f
cmove eax, ecx
mov ecx, 0xf9713f1f
jmp 0x100379d0
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call edi
sub esp, 4
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call edi
sub esp, 4
mov ecx, 0xf9713f1f
mov eax, 0x5331ee6f
jmp 0x100379d0
mov ecx, dword [esp + 0x28]
cmp ecx, 0xc48306fa
mov ecx, 0x2c8b5ac2
mov edx, 0xcab19629
cmovl ecx, edx
jmp 0x100379d0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x5331ee6f
mov ecx, 0x145b08a8
mov edx, 0xba6c494d
cmove ecx, edx
jmp 0x100379d0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x6e9681f4
mov ecx, 0xedb275ec
mov edx, 0xe9a6fd90
cmovl ecx, edx
jmp 0x100379d0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x8b34cbf6
mov ecx, 0x145b08a8
mov edx, 0x7c50940d
cmove ecx, edx
jmp 0x100379d0
mov ecx, 0x17a81a1
jmp 0x100379d0
cmp byte [esp + 0x2f], 0
mov eax, 0x8b34cbf6
mov ecx, 0xdb3655f9
cmovne eax, ecx
mov ecx, 0xf9713f1f
jmp 0x100379d0
cmp ecx, 0x9be0a39f
jne 0x100379d0
mov ecx, dword [esp + 0x8c]
xor ecx, esp
call fcn.1005875a
add esp, 0x90
pop esi
pop edi
pop ebx
pop ebp
ret