Function at 0x100370d0
Capabilities:
Create process on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x90
mov esi, ecx
mov eax, dword [0x1006b040]
xor eax, esp
mov dword [esp + 0x8c], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 0x2f]
mov ecx, 0xd44fc7aa
mov eax, 0x468d0313
lea ebx, [esp + 0x48]
lea ebp, [esp + 0x38]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10037120
mov ecx, 0xd44fc7aa
nop word cs:[eax + eax]
nop dword [eax]
cmp ecx, 0xfb174c
jg 0x100371a0
cmp ecx, 0xd1c38887
jle 0x100371e0
cmp ecx, 0xdbf07dcd
jle 0x100372e0
cmp ecx, 0xdbf07dce
je 0x10037390
cmp ecx, 0xe38880ac
je 0x100373ac
cmp ecx, 0xf8a2f2aa
jne 0x10037120
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call edi
sub esp, 4
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call edi
sub esp, 4
mov ecx, 0xd1c38888
mov eax, 0xc2f9f21e
jmp 0x10037120
cmp ecx, 0x42938ea5
jg 0x100372a0
cmp ecx, 0x36d2f68c
jg 0x10037306
cmp ecx, 0x1cc0323a
je 0x100373c8
cmp ecx, 0x1cf1ee5b
jne 0x1003746b
mov ecx, 0x7f647829
jmp 0x10037120
cmp ecx, 0x98ad04c6
jg 0x1003733a
cmp ecx, 0x8da30e19
je 0x100373e4
cmp ecx, 0x931c4d7e
jne 0x10037120
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x30]
xorps xmm0, xmm0
movups xmmword [eax + 0x30], xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax], xmm0
mov dword [eax + 0x40], 0
mov dword [esp + 0x34], ebp
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x34]
movups xmmword [eax], xmm0
cmp dword [esi + 0x14], 0x10
mov eax, esi
jb 0x10037242
mov eax, dword [esi]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ebx
movaps xmm0, xmmword [0x10067970]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
sub esp, 0x28
test eax, eax
mov eax, 0xeec899e9
mov ecx, 0xc2f9f21e
cmove eax, ecx
mov ecx, 0xd1c38888
jmp 0x10037120
cmp ecx, 0x64146b95
jg 0x1003736e
cmp ecx, 0x42938ea6
je 0x10037400
cmp ecx, 0x44e0ef43
jne 0x10037120
mov ecx, dword [esp + 0x28]
cmp ecx, 0xeec899e9
mov ecx, 0x1cf1ee5b
mov edx, 0xf8a2f2aa
cmove ecx, edx
jmp 0x10037120
cmp ecx, 0xd1c38888
je 0x1003710d
cmp ecx, 0xd44fc7aa
jne 0x10037120
mov dword [esp + 0x28], eax
mov ecx, 0x64146b96
jmp 0x10037120
cmp ecx, 0x36d2f68d
je 0x1003741c
cmp ecx, 0x3beb0176
jne 0x10037120
mov ecx, dword [esp + 0x28]
cmp ecx, 0x468d0313
mov ecx, 0x1cc0323a
mov edx, 0xcfdf3470
cmovl ecx, edx
jmp 0x10037120
cmp ecx, 0x98ad04c7
je 0x10037433
cmp ecx, 0xcfdf3470
jne 0x10037120
mov ecx, dword [esp + 0x28]
cmp ecx, 0xfb52df4
mov ecx, 0x1cf1ee5b
mov edx, 0xfb174d
cmove ecx, edx
jmp 0x10037120
cmp ecx, 0x64146b96
je 0x1003744f
cmp ecx, 0x7f647829
jne 0x10037120
mov ecx, 0xd1c38888
jmp 0x10037120
mov ecx, dword [esp + 0x28]
cmp ecx, 0x722fc5dc
mov ecx, 0x1cf1ee5b
mov edx, 0x931c4d7e
cmove ecx, edx
jmp 0x10037120
mov ecx, dword [esp + 0x28]
cmp ecx, 0xeec899e9
mov ecx, 0x44e0ef43
mov edx, 0x42938ea6
cmovl ecx, edx
jmp 0x10037120
mov ecx, dword [esp + 0x28]
cmp ecx, 0x722fc5dc
mov ecx, 0xdbf07dce
mov edx, 0x98ad04c7
cmovl ecx, edx
jmp 0x10037120
cmp byte [esp + 0x2f], 0
mov eax, 0x722fc5dc
mov ecx, 0xfb52df4
cmovne eax, ecx
mov ecx, 0xd1c38888
jmp 0x10037120
mov ecx, dword [esp + 0x28]
cmp ecx, 0xc2f9f21e
mov ecx, 0x1cf1ee5b
mov edx, 0x36d2f68d
cmove ecx, edx
jmp 0x10037120
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, 0xd1c38888
mov eax, 0xfb52df4
jmp 0x10037120
mov ecx, dword [esp + 0x28]
cmp ecx, 0x468d0313
mov ecx, 0x1cf1ee5b
mov edx, 0x8da30e19
cmove ecx, edx
jmp 0x10037120
mov ecx, dword [esp + 0x28]
cmp ecx, 0xfb52df4
mov ecx, 0x3beb0176
mov edx, 0xe38880ac
cmovl ecx, edx
jmp 0x10037120
cmp ecx, 0xfb174d
jne 0x10037120
mov ecx, dword [esp + 0x8c]
xor ecx, esp
call fcn.10058f4a
add esp, 0x90
pop esi
pop edi
pop ebx
pop ebp
ret