Function at 0x100051ac
Capabilities:
Create process on windows
Create process suspended

Disassembly:
sub esp, 0x28
mov al, byte [0x100c5518]
test al, al
je 0x10005399
mov ecx, 0x100c54f0
call fcn.1002a1f6
cmp dword [0x100c4004], 0x5b60bf
jne 0x100051dc
mov dword [0x100c4004], 0x5b60ec
cmp dword [0x100c4008], 0x302a
jne 0x10005202
mov dword [0x100c4008], 0x302b
cmp dword [0x100c400c], 0x8a8
je 0x1000538d
mov al, byte [0x100c5548]
test al, al
je 0x100053f0
mov ecx, 0x100c5520
call fcn.1002a1f6
cmp dword [0x100c4004], 0x5b60bf
jne 0x1000522f
mov dword [0x100c4004], 0x5b60ec
cmp dword [0x100c4008], 0x302a
jne 0x10005255
mov dword [0x100c4008], 0x302b
cmp dword [0x100c400c], 0x8a8
je 0x1000538d
mov al, byte [0x100c5578]
test al, al
je 0x10005447
mov ecx, 0x100c5550
call fcn.1002a1f6
cmp dword [0x100c4004], 0x5b60bf
jne 0x10005282
mov dword [0x100c4004], 0x5b60ec
cmp dword [0x100c4008], 0x302a
jne 0x100052a8
mov dword [0x100c4008], 0x302b
cmp dword [0x100c400c], 0x8a8
je 0x1000538d
mov al, byte [0x100c55a8]
test al, al
je 0x1000549e
mov ecx, 0x100c5580
call fcn.1002a1f6
cmp dword [0x100c4004], 0x5b60bf
jne 0x100052d5
mov dword [0x100c4004], 0x5b60ec
cmp dword [0x100c4008], 0x302a
jne 0x100052fb
mov dword [0x100c4008], 0x302b
cmp dword [0x100c400c], 0x8a8
je 0x1000538d
mov al, byte [0x100c55d8]
test al, al
je 0x100054f5
mov ecx, 0x100c55b0
call fcn.1002a240
cmp dword [0x100c4004], 0x5b60bf
jne 0x10005328
mov dword [0x100c4004], 0x5b60ec
cmp dword [0x100c4008], 0x302a
jne 0x1000534a
mov dword [0x100c4008], 0x302b
cmp dword [0x100c400c], 0x8a8
je 0x1000538d
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], eax
xor eax, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
xorps xmm0, xmm0
movups xmmword [esp + 4], xmm0
mov dword [esp], edx
mov dword [esp + 0x14], 4
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
sub esp, 0x28
test eax, eax
setne al
add esp, 0x28
ret
mov dword [esp], 0
call sub.msvcrt.dll_exit
mov dword [esp], 0x100c5518
call fcn.1002a80c
test eax, eax
je 0x100051bc
movaps xmm0, xmmword [0x100b50f0]
movaps xmmword [0x100c54f0], xmm0
movaps xmm0, xmmword [0x100b5100]
movaps xmmword [0x100c5500], xmm0
mov dword [0x100c5510], 0x16c59a3
mov dword [esp], 0x10023772
call fcn.100013b0
mov dword [esp], 0x100c5518
call fcn.1002a8b3
jmp 0x100051bc
mov dword [esp], 0x100c5548
call fcn.1002a80c
test eax, eax
je 0x1000520f
movaps xmm0, xmmword [0x100b5110]
movaps xmmword [0x100c5520], xmm0
movaps xmm0, xmmword [0x100b5120]
movaps xmmword [0x100c5530], xmm0
mov dword [0x100c5540], 0x16c46cc
mov dword [esp], 0x1002378e
call fcn.100013b0
mov dword [esp], 0x100c5548
call fcn.1002a8b3
jmp 0x1000520f
mov dword [esp], 0x100c5578
call fcn.1002a80c
test eax, eax
je 0x10005262
movaps xmm0, xmmword [0x100b50f0]
movaps xmmword [0x100c5550], xmm0
movaps xmm0, xmmword [0x100b5100]
movaps xmmword [0x100c5560], xmm0
mov dword [0x100c5570], 0x16c59a3
mov dword [esp], 0x100237aa
call fcn.100013b0
mov dword [esp], 0x100c5578
call fcn.1002a8b3
jmp 0x10005262
mov dword [esp], 0x100c55a8
call fcn.1002a80c
test eax, eax
je 0x100052b5
movaps xmm0, xmmword [0x100b5110]
movaps xmmword [0x100c5580], xmm0
movaps xmm0, xmmword [0x100b5120]
movaps xmmword [0x100c5590], xmm0
mov dword [0x100c55a0], 0x16c46cc
mov dword [esp], 0x100237c6
call fcn.100013b0
mov dword [esp], 0x100c55a8
call fcn.1002a8b3
jmp 0x100052b5
mov dword [esp], 0x100c55d8
call fcn.1002a80c
test eax, eax
je 0x10005308
mov byte [0x100c55d2], 1
movaps xmm0, xmmword [0x100b5130]
movaps xmmword [0x100c55b0], xmm0
movaps xmm0, xmmword [0x100b5140]
movaps xmmword [0x100c55c0], xmm0
mov word [0x100c55d0], 0x31de
mov dword [esp], 0x100237e2
call fcn.100013b0
mov dword [esp], 0x100c55d8
call fcn.1002a8b3
jmp 0x10005308