Function at 0x1012c120
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101bf44d
mov eax, dword fs:[0]
push eax
sub esp, 0x10
mov eax, dword [0x1024bdac]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x2c]
mov dword [0x10251e00], ecx
cmp dword [ebp + 8], 0
je 0x1012c166
cmp dword [ebp + 8], 0
je 0x1012c166
cmp dword [ebp + 0xc], 1
je 0x1012c16d
xor al, al
jmp 0x1012c37b
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 8]
cmp eax, dword [edx + 0x24]
jne 0x1012c211
mov ecx, dword [0x10251b9c]
cmp dword [ecx + 0x4f8], 0
jne 0x1012c19c
mov edx, dword [0x10251b9c]
mov ecx, dword [edx + 0x4f8]
call fcn.10041f10
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
mov eax, dword [0x10251b9c]
mov edx, dword [eax + 0x468]
add edx, 0x15c
push edx
call fcn.100e8170
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], 0
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x1c], esp
mov eax, dword [0x10251b9c]
mov edx, dword [eax + 0x468]
add edx, 0x14c
push edx
call fcn.10095630
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10251b9c]
mov ecx, dword [eax + 0x4f8]
call fcn.100930a0
mov ecx, dword [0x10251b9c]
mov ecx, dword [ecx + 0x4f8]
call fcn.10092ad0
jmp 0x1012c379
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 8]
cmp eax, dword [edx + 0x18]
jne 0x1012c241
mov ecx, dword [0x10251b9c]
cmp dword [ecx + 0x500], 0
je 0x1012c23c
mov edx, dword [0x10251b9c]
mov ecx, dword [edx + 0x500]
call fcn.10125750
jmp 0x1012c379
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
cmp ecx, dword [eax + 0x14]
jne 0x1012c282
mov edx, dword [0x10251b9c]
cmp dword [edx + 0x514], 0
je 0x1012c27d
push 0xc8
mov eax, dword [0x10251b9c]
mov ecx, dword [eax + 0x514]
mov edx, dword [0x10251b9c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x514]
mov edx, dword [eax]
call edx
jmp 0x1012c379
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
cmp ecx, dword [eax + 0x10]
jne 0x1012c2a3
mov edx, dword [0x10251b9c]
mov ecx, dword [edx + 0x510]
call fcn.1009abf0
jmp 0x1012c379
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
cmp ecx, dword [eax + 0x20]
jne 0x1012c2e5
mov edx, dword [0x10251b9c]
cmp dword [edx + 0x4c8], 0
je 0x1012c2e0
push 1
mov eax, dword [0x10251b9c]
mov ecx, dword [eax + 0x4c8]
call fcn.10088090
mov ecx, dword [0x10251b9c]
mov ecx, dword [ecx + 0x4c8]
call fcn.100886c0
jmp 0x1012c379
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 8]
cmp eax, dword [edx]
jne 0x1012c323
mov ecx, dword [0x10251b9c]
cmp dword [ecx + 0x4c8], 0
je 0x1012c321
push 1
mov edx, dword [0x10251b9c]
mov ecx, dword [edx + 0x4c8]
call fcn.10088090
mov eax, dword [0x10251b9c]
mov ecx, dword [eax + 0x4c8]
call fcn.100886c0
jmp 0x1012c379
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
cmp edx, dword [ecx + 0xc]
jne 0x1012c34f
push 1
push 0
push 0
mov ecx, dword [ebp - 0x10]
add ecx, 0x54
call fcn.10045c30
push eax
push 0x10219af0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x1012c379
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
cmp ecx, dword [eax + 8]
jne 0x1012c379
push 1
push 0
push 0
mov ecx, dword [ebp - 0x10]
add ecx, 0x38
call fcn.10045c30
push eax
push 0x10219ae8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 8