Function at 0x10037420
Capabilities:
Create process on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x90
mov esi, ecx
mov eax, dword [0x1006a040]
xor eax, esp
mov dword [esp + 0x8c], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 0x2f]
mov ecx, 0x1d949b9e
mov eax, 0xd6533d10
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ebx, [esp + 0x48]
lea ebp, [esp + 0x38]
jmp 0x10037470
mov ecx, 0x1d949b9e
nop word cs:[eax + eax]
nop dword [eax]
cmp ecx, 0xe124cb1
jg 0x100374d0
cmp ecx, 0xd963891a
jle 0x10037510
cmp ecx, 0xecb42981
jle 0x10037590
cmp ecx, 0xecb42982
je 0x10037663
cmp ecx, 0xf7a9175b
je 0x1003767a
cmp ecx, 0x946c1f7
jne 0x10037470
mov ecx, dword [esp + 0x28]
cmp ecx, 0x3f62108
mov ecx, 0x57eafd1a
mov edx, 0xb21d964b
cmovl ecx, edx
jmp 0x10037470
cmp ecx, 0x57eafd19
jg 0x10037550
cmp ecx, 0x2780a6fc
jle 0x100375e7
cmp ecx, 0x2992e78a
je 0x10037696
cmp ecx, 0x3db7ec42
jne 0x100377b1
mov ecx, 0x73c02d1c
jmp 0x10037470
cmp ecx, 0xb21d964a
jg 0x1003760d
cmp ecx, 0x8e3e05dd
je 0x100376b2
cmp ecx, 0x8e4bc687
jne 0x10037470
mov ecx, dword [esp + 0x28]
cmp ecx, 0x554b81c5
mov ecx, 0x3db7ec42
mov edx, 0xecb42982
cmove ecx, edx
jmp 0x10037470
cmp ecx, 0x5d18463b
jg 0x10037641
cmp ecx, 0x57eafd1a
je 0x100376ce
cmp ecx, 0x598b942d
jne 0x10037470
mov ecx, dword [esp + 0x28]
cmp ecx, 0x3f8a9d31
mov ecx, 0xd963891b
mov edx, 0x946c1f7
cmovl ecx, edx
jmp 0x10037470
cmp ecx, 0xd963891b
je 0x100376ea
cmp ecx, 0xea947f59
jne 0x10037470
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call edi
sub esp, 4
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call edi
sub esp, 4
mov ecx, 0x5d18463c
mov eax, 0x554b81c5
jmp 0x10037470
cmp ecx, 0xe124cb2
je 0x10037706
cmp ecx, 0x1d949b9e
jne 0x10037470
mov dword [esp + 0x28], eax
mov ecx, 0x598b942d
jmp 0x10037470
cmp ecx, 0xb21d964b
je 0x10037795
cmp ecx, 0xd6e29ed1
jne 0x10037470
cmp byte [esp + 0x2f], 0
mov eax, 0x3f62108
mov ecx, 0x6e1ef5e5
cmovne eax, ecx
mov ecx, 0x5d18463c
jmp 0x10037470
cmp ecx, 0x5d18463c
je 0x1003745d
cmp ecx, 0x73c02d1c
jne 0x10037470
mov ecx, 0x5d18463c
jmp 0x10037470
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, 0x5d18463c
mov eax, 0x6e1ef5e5
jmp 0x10037470
mov ecx, dword [esp + 0x28]
cmp ecx, 0x3f8a9d31
mov ecx, 0x3db7ec42
mov edx, 0xea947f59
cmove ecx, edx
jmp 0x10037470
mov ecx, dword [esp + 0x28]
cmp ecx, 0x6e1ef5e5
mov ecx, 0x8e3e05dd
mov edx, 0x8e4bc687
cmovl ecx, edx
jmp 0x10037470
mov ecx, dword [esp + 0x28]
cmp ecx, 0x6e1ef5e5
mov ecx, 0x3db7ec42
mov edx, 0x2780a6fd
cmove ecx, edx
jmp 0x10037470
mov ecx, dword [esp + 0x28]
cmp ecx, 0x3f62108
mov ecx, 0x3db7ec42
mov edx, 0xe124cb2
cmove ecx, edx
jmp 0x10037470
mov ecx, dword [esp + 0x28]
cmp ecx, 0x554b81c5
mov ecx, 0x2992e78a
mov edx, 0xf7a9175b
cmovl ecx, edx
jmp 0x10037470
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x30]
xorps xmm0, xmm0
movups xmmword [eax + 0x30], xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax], xmm0
mov dword [eax + 0x40], 0
mov dword [esp + 0x34], ebp
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x34]
movups xmmword [eax], xmm0
cmp dword [esi + 0x14], 0x10
mov eax, esi
jb 0x10037744
mov eax, dword [esi]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ebx
movaps xmm0, xmmword [0x10066970]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
sub esp, 0x28
test eax, eax
mov eax, 0x3f8a9d31
mov ecx, 0x554b81c5
cmove eax, ecx
mov ecx, 0x5d18463c
jmp 0x10037470
mov ecx, dword [esp + 0x28]
cmp ecx, 0xd6533d10
mov ecx, 0x3db7ec42
mov edx, 0xd6e29ed1
cmove ecx, edx
jmp 0x10037470
cmp ecx, 0x2780a6fd
jne 0x10037470
mov ecx, dword [esp + 0x8c]
xor ecx, esp
call fcn.100582ea
add esp, 0x90
pop esi
pop edi
pop ebx
pop ebp
ret