Function at 0x1023d6e
Capabilities:
Create process on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xa08
mov eax, dword [0x1036f44]
push ebx
mov ebx, dword [ebp + 8]
push esi
xor esi, esi
cmp dword [ebx + 0x350], esi
mov dword [ebp - 4], eax
mov dword [ebp - 0x890], esi
jne 0x1023da0
mov eax, 0x80070057
jmp 0x102423d
push edi
lea eax, [ebp - 0x444]
push eax
mov ecx, ebx
call fcn.01023a52
mov dword [ebp - 0x898], esi
mov esi, ebx
lea edi, [ebp - 0x8b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x898]
movsd dword es:[edi], dword [esi]
push eax
lea eax, [ebp - 0x8b4]
push eax
movsd dword es:[edi], dword [esi]
call dword [sym.imp.ole32.dll_StringFromIID]
test eax, eax
mov esi, 0x1001644
jl 0x1023e21
cmp dword [ebp - 0x898], 0
je 0x1023e21
push dword [ebp - 0x898]
lea ecx, [ebp - 0x9c4]
call fcn.01006bd5
push eax
lea ecx, [ebp - 0x444]
call fcn.0100edac
lea ecx, [ebp - 0x9c4]
mov dword [ebp - 0x9c4], esi
call fcn.010047d1
push dword [ebp - 0x898]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
xor edi, edi
inc edi
push edi
push 0
lea ecx, [ebp - 0x8a4]
call fcn.010235ab
lea eax, [ebp - 0x444]
push eax
lea ecx, [ebp - 0x224]
call fcn.01006c15
push eax
lea eax, [ebp - 0x9c4]
push eax
call fcn.01007ea4
mov eax, dword [eax + 4]
push edi
push eax
lea ecx, [ebp - 0x8a4]
call fcn.0102161c
cmp eax, 2
lea ecx, [ebp - 0x9c4]
sete byte [ebp - 0x891]
mov dword [ebp - 0x9c4], esi
call fcn.010047d1
lea ecx, [ebp - 0x224]
mov dword [ebp - 0x224], esi
call fcn.010047d1
cmp byte [ebp - 0x891], 0
je 0x1023ee2
lea ecx, [ebp - 0x8a4]
call fcn.01005e40
mov edi, eax
test edi, edi
je 0x1024218
mov eax, dword [edi]
test eax, eax
je 0x1023ec4
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1023ec4
push dword [edi]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
cmp dword [ebp - 0x89c], 0
je 0x1024218
push dword [ebp - 0x8a4]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x1024218
lea ecx, [ebp - 0x664]
call fcn.01021fec
cmp dword [ebx + 0x350], edi
jne 0x1023f0b
push dword [ebx + 0x35c]
lea ecx, [ebp - 0x664]
call fcn.01021e88
jmp 0x1023fc6
lea ecx, [ebp - 0x888]
call fcn.01021fec
lea eax, [ebp - 0x8a4]
mov dword [ebp - 0x668], eax
lea eax, [ebp - 0x88c]
push eax
push 0x1023cb6
push 0
push 0x67
push dword [0x1037438]
mov dword [ebp - 0x88c], ebx
call fcn.0102b8ac
cmp eax, edi
jne 0x1023f5b
lea eax, [ebp - 0x888]
push eax
lea ecx, [ebp - 0x664]
call fcn.01021e88
jmp 0x1023fae
cmp eax, 2
jne 0x1023f7b
lea ecx, [ebp - 0x888]
call fcn.01004936
lea ecx, [ebp - 0x664]
call fcn.01004936
jmp 0x102421e
cmp eax, 0xffffffff
jne 0x1023fa4
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
test eax, eax
jg 0x1023f96
call edi
mov dword [ebp - 0x890], eax
jmp 0x1023fae
call edi
and eax, 0xffff
or eax, 0x80070000
jmp 0x1023f8e
mov dword [ebp - 0x890], 0x80004005
lea ecx, [ebp - 0x888]
call fcn.01004936
cmp dword [ebp - 0x890], 0
jl 0x10240d7
lea ecx, [ebp - 0x664]
call fcn.01023a07
test al, al
je 0x10240c0
push 0x10
pop ecx
xor eax, eax
lea edi, [ebp - 0xa04]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x9c4]
push eax
lea ecx, [ebp - 0x664]
mov dword [ebp - 0xa08], 0x44
call fcn.01023a32
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.01007ea4
lea ecx, [ebp - 0x9c4]
mov dword [ebp - 0x9c4], esi
call fcn.010047d1
lea ecx, [ebp - 0x114]
call fcn.01005f1a
test eax, eax
je 0x10240a3
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x8b4], ecx
lea edi, [ebp - 0x8b0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x8b4]
push eax
lea eax, [ebp - 0xa08]
push eax
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push dword [ebp - 0x110]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x102407f
push dword [ebp - 0x8b4]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push dword [ebp - 0x8b0]
call edi
jmp 0x10240ad
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
test eax, eax
jg 0x1024095
call edi
mov dword [ebp - 0x890], eax
jmp 0x10240ad
call edi
and eax, 0xffff
or eax, 0x80070000
jmp 0x102408d
mov dword [ebp - 0x890], 0x8007000e
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x114], esi
call fcn.010047d1
jmp 0x10240ca
mov dword [ebp - 0x890], 0x80004005
cmp dword [ebp - 0x890], 0
jge 0x102420d
lea ecx, [ebp - 0x114]
call fcn.01007096
push dword [ebp - 0x890]
lea eax, [ebp - 0x224]
push eax
call fcn.01028093
lea eax, [ebp - 0x664]
push eax
lea ecx, [ebp - 0x9c4]
call fcn.01006c15
lea eax, [ebp - 0x9c4]
push eax
lea eax, [ebp - 0x334]
push eax
call fcn.01007ea4
lea ecx, [ebp - 0x9c4]
mov dword [ebp - 0x9c4], esi
call fcn.010047d1
lea ecx, [ebp - 0x334]
call fcn.01005f1a
test eax, eax
jne 0x102414f
push dword [0x1037438]
lea ecx, [ebp - 0x334]
push 0x111
call fcn.01006aa0
lea ecx, [ebp - 0x224]
call fcn.01005f1a
test eax, eax
lea eax, [ebp - 0x114]
je 0x1024186
push dword [ebp - 0x220]
push dword [ebp - 0x330]
push dword [0x1037438]
push 0x10f
push eax
call fcn.010070db
add esp, 0x14
jmp 0x10241a0
push dword [ebp - 0x330]
push dword [0x1037438]
push 0x110
push eax
call fcn.010070db
add esp, 0x10
push dword [0x1037438]
lea ecx, [ebp - 0x9c4]
push 0x10e
call fcn.01007053
push 0x10
push dword [eax + 4]
push dword [ebp - 0x110]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x9c4]
mov dword [ebp - 0x9c4], esi
call fcn.010047d1
lea ecx, [ebp - 0x334]
mov dword [ebp - 0x334], esi
call fcn.010047d1
lea ecx, [ebp - 0x224]
mov dword [ebp - 0x224], esi
call fcn.010047d1
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x114], esi
call fcn.010047d1
lea ecx, [ebp - 0x664]
call fcn.01004936
mov edi, dword [ebp - 0x890]
lea ecx, [ebp - 0x8a4]
call fcn.0100564d
lea ecx, [ebp - 0x444]
mov dword [ebp - 0x444], esi
call fcn.010047d1
mov eax, edi
pop edi
mov ecx, dword [ebp - 4]
pop esi
pop ebx
call fcn.01024a32
leave
ret 4