Function at 0x10037f60
Capabilities:
Create process on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x90
mov esi, ecx
mov eax, dword [0x1006b040]
xor eax, esp
mov dword [esp + 0x8c], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 0x2f]
mov ecx, 0x8d47d902
mov eax, 0x146bae0c
lea edi, [esp + 0x48]
lea ebx, [esp + 0x38]
mov ebp, dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10037fb0
mov ecx, 0x8d47d902
nop word cs:[eax + eax]
nop dword [eax]
cmp ecx, 0xf4843d5e
jg 0x10038030
cmp ecx, 0xba88d6d6
jle 0x10038080
cmp ecx, 0xc1b5a59f
jle 0x100380f0
cmp ecx, 0xc1b5a5a0
je 0x10038225
cmp ecx, 0xc29bb2ed
je 0x10037f9d
cmp ecx, 0xe430093c
jne 0x10037fb0
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call ebp
sub esp, 4
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call ebp
sub esp, 4
mov ecx, 0xc29bb2ed
mov eax, 0xe08a2309
jmp 0x10037fb0
cmp ecx, 0xf95f1c5
jle 0x100380b0
cmp ecx, 0x5a73c1f9
jg 0x10038197
cmp ecx, 0xf95f1c6
je 0x10038241
cmp ecx, 0x486f1494
jne 0x100382ee
mov ecx, dword [esp + 0x28]
cmp ecx, 0x6be94b72
mov ecx, 0x8581f23e
mov edx, 0x850f4fda
cmovl ecx, edx
jmp 0x10037fb0
cmp ecx, 0x8581f23d
jg 0x100381cb
cmp ecx, 0x850f4fda
je 0x1003825d
cmp ecx, 0x855f34a2
jne 0x10037fb0
mov ecx, 0xf4843d5f
jmp 0x10037fb0
cmp ecx, 0xfd0a1719
jg 0x100381f1
cmp ecx, 0xf4843d5f
je 0x10038279
cmp ecx, 0xf63f748c
jne 0x10037fb0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x146bae0c
mov ecx, 0xba88d6d7
mov edx, 0xf95f1c6
cmovl ecx, edx
jmp 0x10037fb0
cmp ecx, 0xba88d6d7
je 0x10038283
cmp ecx, 0xbe4e8fc8
jne 0x10037fb0
mov dword [esp + 0x30], edi
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x30]
xorps xmm0, xmm0
movups xmmword [eax + 0x30], xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax], xmm0
mov dword [eax + 0x40], 0
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x34]
movups xmmword [eax], xmm0
cmp dword [esi + 0x14], 0x10
mov eax, esi
jb 0x10038146
mov eax, dword [esi]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], edi
movaps xmm0, xmmword [0x10067970]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
sub esp, 0x28
test eax, eax
mov eax, 0xc8ffad31
mov ecx, 0xe08a2309
cmove eax, ecx
mov ecx, 0xc29bb2ed
jmp 0x10037fb0
cmp ecx, 0x5a73c1fa
je 0x1003829f
cmp ecx, 0x78e00011
jne 0x10037fb0
mov ecx, dword [esp + 0x28]
cmp ecx, 0xc8ffad31
mov ecx, 0x855f34a2
mov edx, 0xe430093c
cmove ecx, edx
jmp 0x10037fb0
cmp ecx, 0x8581f23e
je 0x100382bb
cmp ecx, 0x8d47d902
jne 0x10037fb0
mov dword [esp + 0x28], eax
mov ecx, 0xf63f748c
jmp 0x10037fb0
cmp ecx, 0xfd0a171a
je 0x100382d7
cmp ecx, 0xff2e7524
jne 0x10037fb0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x146bae0c
mov ecx, 0x855f34a2
mov edx, 0xc1b5a5a0
cmove ecx, edx
jmp 0x10037fb0
cmp byte [esp + 0x2f], 0
mov eax, 0x6be94b72
mov ecx, 0x3a5cf139
cmovne eax, ecx
mov ecx, 0xc29bb2ed
jmp 0x10037fb0
mov ecx, dword [esp + 0x28]
cmp ecx, 0xe08a2309
mov ecx, 0x5a73c1fa
mov edx, 0x78e00011
cmovl ecx, edx
jmp 0x10037fb0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x3a5cf139
mov ecx, 0x855f34a2
mov edx, 0x153efb6b
cmove ecx, edx
jmp 0x10037fb0
mov ecx, 0xc29bb2ed
jmp 0x10037fb0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x3a5cf139
mov ecx, 0x486f1494
mov edx, 0xff2e7524
cmovl ecx, edx
jmp 0x10037fb0
mov ecx, dword [esp + 0x28]
cmp ecx, 0xe08a2309
mov ecx, 0x855f34a2
mov edx, 0xfd0a171a
cmove ecx, edx
jmp 0x10037fb0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x6be94b72
mov ecx, 0x855f34a2
mov edx, 0xbe4e8fc8
cmove ecx, edx
jmp 0x10037fb0
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, 0xc29bb2ed
mov eax, 0x3a5cf139
jmp 0x10037fb0
cmp ecx, 0x153efb6b
jne 0x10037fb0
mov ecx, dword [esp + 0x8c]
xor ecx, esp
call fcn.100594ba
add esp, 0x90
pop esi
pop edi
pop ebx
pop ebp
ret