Function at 0x10090268
Capabilities:
Create process on windows

Disassembly:
push 0xa8
mov eax, 0x1012bb3c
call fcn.101236fd
mov eax, dword [ebp + 0x18]
xor ebx, ebx
test eax, eax
je 0x10090282
mov dword [eax], ebx
mov esi, dword [ebp + 0xc]
mov dword [ebp - 4], ebx
cmp dword [esi + 8], 0
je 0x10090580
push 0xffffffffffffffff
push str.https:__
lea ecx, [ebp - 0x40]
call fcn.100893dd
push esi
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.100893a0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 2
call fcn.100b3c7b
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x30]
call fcn.100b3c7b
test eax, eax
jne 0x10090365
push esi
lea ecx, [ebp - 0x60]
call fcn.100893a0
push ebx
mov byte [ebp - 4], 3
call fcn.100b3c7b
pop ecx
lea ecx, [ebp - 0xb4]
push ecx
mov ecx, eax
call fcn.100b3c7b
mov esi, eax
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 4
push str._sender
push eax
call fcn.100b3c7b
pop ecx
pop ecx
push esi
push eax
call fcn.100b3c7b
pop ecx
pop ecx
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 3
call fcn.1008950a
push 1
push ebx
push ebx
push dword [ebp - 0x5c]
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x60]
setge byte [ebp + 0x1b]
call fcn.1008950a
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.1008950a
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], bl
call fcn.1008950a
mov al, byte [ebp + 0x1b]
jmp 0x10090582
mov eax, dword [esi + 8]
lea eax, [eax*2 + 2]
push eax
call fcn.100b3c7b
pop ecx
push dword [esi + 8]
mov edi, eax
mov ecx, esi
push edi
mov dword [ebp - 0x18], edi
call fcn.100b3c7b
mov eax, dword [esi + 8]
xor ecx, ecx
push 0x44
pop esi
push esi
mov word [edi + eax*2], cx
lea eax, [ebp - 0xa4]
push ebx
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0xa4], esi
mov esi, dword [sym.imp.kernel32.dll_GetStdHandle]
mov dword [ebp - 0x78], 1
push 0xfffffffffffffff6
call esi
push 0xfffffffffffffff5
mov dword [ebp - 0x6c], eax
call esi
push 0xfffffffffffffff4
mov dword [ebp - 0x68], eax
call esi
cmp dword [ebp + 0x14], 0
mov dword [ebp - 0x64], eax
mov dword [ebp - 0xa0], ebx
jne 0x100903db
push 5
jmp 0x100903dd
push 7
pop eax
push edi
mov word [ebp - 0x74], ax
call dword [sym.imp.MSVCR120.dll_wcslen]
inc eax
mov dword [ebp - 0x14], eax
add eax, eax
push eax
call fcn.100b3c7b
pop ecx
pop ecx
push edi
push dword [ebp - 0x14]
mov esi, eax
push esi
mov dword [ebp - 0x1c], esi
call dword [sym.imp.MSVCR120.dll_wcscpy_s]
push esi
call dword [sym.imp.MSVCR120.dll_wcslen]
add esp, 0x10
dec eax
movzx ecx, word [esi + eax*2]
cmp ecx, 0x5c
je 0x10090420
cmp ecx, 0x2f
jne 0x10090411
xor ecx, ecx
push edi
mov word [esi + eax*2], cx
call dword [sym.imp.MSVCR120.dll_wcslen]
pop ecx
lea esi, [eax + 0xa]
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x10090440
mov eax, dword [eax + 8]
add eax, 2
add esi, eax
lea eax, [esi + esi]
push eax
call fcn.100b3c7b
pop ecx
mov edi, eax
xor eax, eax
push 0x22
pop ecx
push 0x20
mov word [edi], ax
mov word [ebp + 0xe], ax
pop eax
mov word [ebp - 0x20], ax
xor eax, eax
mov word [ebp - 0x1e], ax
mov eax, dword [ebp - 0x18]
mov word [ebp + 0xc], cx
cmp word [eax], cx
je 0x10090483
lea eax, [ebp + 0xc]
push eax
push esi
push edi
call dword [sym.imp.MSVCR120.dll_wcscat_s]
mov eax, dword [ebp - 0x18]
add esp, 0xc
push eax
push esi
push edi
call dword [sym.imp.MSVCR120.dll_wcscat_s]
mov eax, dword [ebp - 0x18]
add esp, 0xc
mov ax, word [eax]
cmp ax, word [ebp + 0xc]
je 0x100904aa
lea eax, [ebp + 0xc]
push eax
push esi
push edi
call dword [sym.imp.MSVCR120.dll_wcscat_s]
add esp, 0xc
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x10090506
mov eax, dword [eax + 8]
lea eax, [eax*2 + 2]
push eax
call fcn.100b3c7b
pop ecx
mov ecx, eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x14], ecx
push dword [eax + 8]
push ecx
mov ecx, eax
call fcn.100b3c7b
mov eax, dword [ebp + 0x10]
xor edx, edx
mov ecx, dword [ebp - 0x14]
mov eax, dword [eax + 8]
mov word [ecx + eax*2], dx
lea eax, [ebp - 0x20]
push eax
push esi
push edi
call dword [sym.imp.MSVCR120.dll_wcscat_s]
push dword [ebp - 0x14]
push esi
push edi
call dword [sym.imp.MSVCR120.dll_wcscat_s]
push dword [ebp - 0x14]
call sub.MSVCR120.dll_free
add esp, 0x1c
mov esi, dword [ebp - 0x1c]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0xa4]
push eax
push esi
push ebx
push 8
push ebx
push ebx
push ebx
push edi
push ebx
call dword [sym.imp.kernel32.dll_CreateProcessW]
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
call sub.MSVCR120.dll_free
pop ecx
push edi
call sub.MSVCR120.dll_free
pop ecx
push esi
call sub.MSVCR120.dll_free
pop ecx
mov ecx, dword [ebp + 0x18]
test ecx, ecx
je 0x10090549
mov eax, dword [ebp - 0x48]
mov dword [ecx], eax
push dword [ebp - 0x50]
mov esi, dword [sym.imp.kernel32.dll_CloseHandle]
call esi
push dword [ebp - 0x4c]
call esi
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.1008950a
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], bl
call fcn.1008950a
cmp dword [ebp - 0x1c], 0
je 0x10090580
mov al, 1
jmp 0x10090582
xor al, al
call fcn.10123662
ret