Function at 0x100297a6
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x268
mov eax, dword [0x1024bd20]
xor eax, esp
mov dword [esp + 0x264], eax
cmp word [0x10255998], 0
jne 0x100297cb
mov al, 1
jmp 0x100299de
mov eax, dword [section..data]
push ebx
push ebp
mov ebp, 0x101d4a68
push esi
push edi
cmp eax, section..data
je 0x100297f1
push ebp
push 0x2e
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1002114e
add esp, 0x10
push 0x10255998
lea eax, [esp + 0x70]
xor ebx, ebx
push 0x101d4804
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp dword [esp + 0x27c], ebx
je 0x1002982b
push 0x101d4824
lea eax, [esp + 0x70]
push 0x104
push eax
call fcn.1017c18a
add esp, 0xc
push 0x40
lea eax, [esp + 0x30]
mov dword [esp + 0x2c], ebx
push ebx
push eax
call fcn.10179250
push 1
lea eax, [esp + 0x24]
mov dword [esp + 0x24], ebx
push eax
push 0x1f0003
xorps xmm0, xmm0
mov esi, ebx
push 1
push 0x101d482c
movdqu xmmword [esp + 0x38], xmm0
mov dword [esp + 0x30], esi
call fcn.10028a13
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 0x20
test eax, eax
je 0x1002988c
mov eax, dword [section..data]
cmp eax, section..data
je 0x100299c4
push ebp
push 0x2f
jmp 0x1002996c
push 1
lea eax, [esp + 0x14]
push eax
push 0x1f0001
push ebx
push 0x101d4834
call fcn.10028a13
add esp, 0x14
test eax, eax
je 0x100298d0
mov eax, dword [section..data]
cmp eax, section..data
je 0x100298c7
push ebp
push 0x30
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1002114e
add esp, 0x10
mov esi, dword [esp + 0x10]
jmp 0x100299c4
mov esi, dword [esp + 0x10]
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea eax, [esp + 0x18]
mov dword [esp + 0x28], 0x44
push eax
lea eax, [esp + 0x2c]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [esp + 0x8c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x1002991b
mov eax, dword [section..data]
cmp eax, section..data
je 0x100299c4
push ebp
push 0x31
jmp 0x1002996c
push dword [esp + 0x18]
call edi
push dword [esp + 0x1c]
call edi
mov eax, dword [section..data]
cmp eax, section..data
je 0x10029944
push ebp
push 0x32
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1002114e
add esp, 0x10
mov ebp, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x7530
push dword [esp + 0x18]
call ebp
test eax, eax
je 0x1002997c
mov eax, dword [section..data]
cmp eax, section..data
je 0x100299c4
push 0x101d4a68
push 0x33
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1002114e
add esp, 0x10
jmp 0x100299c4
mov eax, dword [section..data]
mov ebx, section..data
cmp eax, ebx
je 0x1002999f
push 0x101d4a68
push 0x34
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1002114e
add esp, 0x10
push 0xffffffffffffffff
push esi
call ebp
mov eax, dword [section..data]
cmp eax, ebx
je 0x100299c2
push 0x101d4a68
push 0x35
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1002114e
add esp, 0x10
mov bl, 1
cmp dword [esp + 0x14], 0
je 0x100299d1
push dword [esp + 0x14]
call edi
test esi, esi
je 0x100299d8
push esi
call edi
pop edi
pop esi
pop ebp
mov al, bl
pop ebx
mov ecx, dword [esp + 0x264]
xor ecx, esp
call fcn.1017868e
add esp, 0x268
ret