Function at 0x1007e9a
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x102436c
call fcn.0101d5b8
sub esp, 0x48
mov eax, dword [0x1029044]
push ebx
push esi
push edi
mov edi, 0x1029044
cmp eax, edi
mov esi, ecx
je 0x1007ee0
test byte [eax + 0x1c], 4
je 0x1007ee0
cmp byte [eax + 0x19], 5
jb 0x1007ee0
push dword [ebp + 0x10]
push 0x1001a90
push 0x65
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01002b7b
mov eax, dword [0x1029044]
xor ebx, ebx
cmp dword [esi + 0x58], ebx
jne 0x1008330
cmp eax, edi
je 0x1007f12
test byte [eax + 0x1c], 8
je 0x1007f12
cmp byte [eax + 0x19], 4
jb 0x1007f12
push 0x1001a90
push 0x66
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01002b55
mov eax, dword [0x1029044]
mov ecx, dword [ebp + 0x10]
cmp ecx, 0x7b
je 0x1008299
cmp ecx, 0x203
je 0x1008203
cmp ecx, 0x204
je 0x1008299
cmp ecx, 0x402
jle 0x1008330
cmp ecx, 0x404
jle 0x10081ed
cmp ecx, 0x405
jne 0x1008330
cmp eax, edi
je 0x1007f81
test byte [eax + 0x1c], 8
je 0x1007f81
cmp byte [eax + 0x19], 4
jb 0x1007f81
push 0x1001a90
push 0x67
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01002b55
mov eax, dword [0x1029044]
mov ecx, dword [esi + 0x480]
cmp dword [ecx - 0xc], ebx
je 0x1008151
cmp eax, edi
je 0x1007fb2
test byte [eax + 0x1c], 8
je 0x1007fb2
cmp byte [eax + 0x19], 4
jb 0x1007fb2
push 0x1001a90
push 0x68
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01002b55
mov eax, dword [esi + 0x480]
push ebx
push eax
push ebx
call sub.urlmon.dll_IsValidURL
mov dword [ebp + 0x10], eax
mov eax, dword [0x1029044]
cmp eax, edi
je 0x1007ff2
test byte [eax + 0x1c], 8
je 0x1007ff2
cmp byte [eax + 0x19], 4
jb 0x1007ff2
push dword [ebp + 0x10]
push 0x1001a90
push 0x69
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01002b7b
mov eax, dword [0x1029044]
cmp dword [ebp + 0x10], ebx
jne 0x1008330
mov eax, dword [esi + 0x480]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x54], 0x3c
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], 0x1001af4
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov eax, dword [0x1029044]
cmp eax, edi
je 0x1008073
test byte [eax + 0x1c], 8
je 0x1008073
cmp byte [eax + 0x19], 4
jb 0x1008073
push dword [ebp - 0x34]
push 0x1001a90
push 0x6a
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01002b7b
mov eax, dword [0x1029044]
mov ecx, dword [esi + 0x48]
cmp ecx, ebx
je 0x1008330
mov dword [ebp - 0x10], ebx
mov eax, dword [ecx]
lea edx, [ebp - 0x10]
push edx
push ecx
mov dword [ebp - 4], ebx
call dword [eax + 0x4c]
mov dword [ebp + 0x10], eax
mov eax, dword [0x1029044]
cmp eax, edi
je 0x10080c0
test byte [eax + 0x1c], 8
je 0x10080c0
cmp byte [eax + 0x19], 4
jb 0x10080c0
push dword [ebp + 0x10]
push 0x1001a90
push 0x6b
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01002b7b
mov eax, dword [0x1029044]
cmp dword [ebp + 0x10], ebx
jl 0x1008137
push dword [esi + 0x484]
lea ecx, [ebp - 0x14]
call fcn.01006d38
mov eax, dword [ebp - 0x10]
push dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 1
call dword [ecx + 0x28]
mov dword [ebp + 0x10], eax
mov eax, dword [0x1029044]
cmp eax, edi
je 0x1008110
test byte [eax + 0x1c], 8
je 0x1008110
cmp byte [eax + 0x19], 4
jb 0x1008110
push dword [ebp + 0x10]
push 0x1001a90
push 0x6c
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01002b7b
push dword [ebp - 0x14]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp + 0x10], ebx
jl 0x1008132
push ebx
push 0xbb8
push 1
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [esi + 0x64], eax
mov eax, dword [0x1029044]
mov ecx, dword [ebp - 0x10]
or dword [ebp - 4], 0xffffffff
cmp ecx, ebx
je 0x1008330
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
jmp 0x100832b
cmp dword [esi + 0x5c], 1
jne 0x1008191
push ebx
push ebx
push 0x10
push dword [esi + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [0x1029044]
cmp eax, edi
je 0x1008352
test byte [eax + 0x1c], 8
je 0x1008330
cmp byte [eax + 0x19], 4
jb 0x1008330
push 0x1001a90
push 0x6d
jmp 0x1008289
push 9
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x10081b2
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push dword [esi + 0x488]
mov ecx, dword [esi + 0x4c]
call fcn.0100d47c
mov eax, dword [0x1029044]
cmp eax, edi
je 0x1008352
test byte [eax + 0x1c], 8
je 0x1008330
cmp byte [eax + 0x19], 4
jb 0x1008330
push 0x1001a90
push 0x6e
jmp 0x1008289
lea ecx, [esi + 0x480]
mov dword [esi + 0x47c], ebx
call fcn.010038fc
jmp 0x100832b
cmp dword [esi + 0x5c], 1
jne 0x1008240
push ebx
push ebx
push 0x10
push dword [esi + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [0x1029044]
cmp eax, edi
je 0x1008352
test byte [eax + 0x1c], 8
je 0x1008330
cmp byte [eax + 0x19], 4
jb 0x1008330
push 0x1001a90
push 0x6f
jmp 0x1008289
push 9
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1008261
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [0x1029044]
cmp eax, edi
je 0x1008352
test byte [eax + 0x1c], 8
je 0x1008330
cmp byte [eax + 0x19], 4
jb 0x1008330
push 0x1001a90
push 0x70
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01002b55
jmp 0x100832b
push ecx
mov eax, esp
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], ebx
mov dword [ebp + 0x10], esp
mov dword [eax], 0xc8
call fcn.010072e0
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push ebx
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp - 0x10]
call fcn.01007c0e
cmp dword [esi + 0x478], ebx
je 0x10082f8
push ebx
push 0x2328
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_EnableMenuItem]
push ebx
push 0x2328
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_SetMenuDefaultItem]
jmp 0x1008308
push 1
push 0x2328
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_EnableMenuItem]
push ebx
push dword [esi + 4]
push ebx
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push 0x22
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_TrackPopupMenu]
cmp dword [ebp - 0x10], ebx
je 0x100832b
lea ecx, [ebp - 0x10]
call fcn.010073a8
mov eax, dword [0x1029044]
cmp eax, edi
je 0x1008352
test byte [eax + 0x1c], 4
je 0x1008352
cmp byte [eax + 0x19], 5
jb 0x1008352
push 0x1001a90
push 0x71
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01002b55
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
xor eax, eax
mov dword fs:[0], ecx
pop ebx
leave
ret 0x10