Function at 0x42aff0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
lea esp, [esp - 0xa4]
push ebx
mov ebx, eax
mov dword [ebp - 0xa4], 0
mov dword [ebp - 4], 0
xor eax, eax
push fcn.0042afd0
push ebp
push 0x414710
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00427f90
push 1
push 0
lea eax, [ebp - 4]
call fcn.00403a50
push 0
mov eax, str.__no_default_browser_check___no_first_run___disable_sync___disable_breakpad___metrics_recording_only___disable_domain_reliability___log_level0___disable_gpu___disable_gpu_watchdog___disable_gpu_early_init___disable_gpu_compositing___disable_gpu_shader_disk_cache___disable_gpu_rasterization___disable_gpu_driver_bug_workarounds___disable_glsl_translator___disable_software_rasterizer___disable_webgl___no_pings___no_wifi___disable_crash_reporter___disable_histogram_customizer___disable_logging___disable_login_animations___disable_prompt_on_repost___enterprise_disable_arc___disable_field_trial_config___clear_token_service___disable_signin_scoped_device_id___enable_encryption_selection___disable_usb_keyboard_detect___disable_gaia_services___disable_file_system___disable_voice_input___disable_speech_api___disable_media_session_api___disable_presentation_api___disable_remote_playback_api___disable_notifications___disable_permissions_api___disable_translate___disable_office_editing_component_app
mov dword [ebp - 0xa0], eax
mov eax, dword [0x5e3500]
mov dword [ebp - 0x9c], eax
mov eax, 0x589784
mov dword [ebp - 0x98], eax
mov eax, dword [0x5e3570]
mov dword [ebp - 0x94], eax
mov eax, 0x589784
mov dword [ebp - 0x90], eax
mov eax, dword [0x5e3510]
mov dword [ebp - 0x8c], eax
mov eax, 0x589784
mov dword [ebp - 0x88], eax
mov eax, dword [0x5e3520]
mov dword [ebp - 0x84], eax
mov eax, 0x589784
mov dword [ebp - 0x80], eax
mov eax, dword [0x5e3580]
mov dword [ebp - 0x7c], eax
mov eax, 0x589784
mov dword [ebp - 0x78], eax
mov eax, dword [0x5e35d0]
mov dword [ebp - 0x74], eax
mov eax, 0x589784
mov dword [ebp - 0x70], eax
mov eax, dword [0x5e3590]
mov dword [ebp - 0x6c], eax
mov eax, 0x589784
mov dword [ebp - 0x68], eax
mov eax, dword [0x5e35a0]
mov dword [ebp - 0x64], eax
mov eax, 0x589784
mov dword [ebp - 0x60], eax
mov eax, dword [0x5e35b0]
mov dword [ebp - 0x5c], eax
mov eax, 0x589784
mov dword [ebp - 0x58], eax
mov eax, dword [0x5e35c0]
mov dword [ebp - 0x54], eax
mov eax, 0x589784
mov dword [ebp - 0x50], eax
mov eax, dword [0x5e3540]
mov dword [ebp - 0x4c], eax
mov eax, str.___canvas_msaa_sample_count0___lang
mov dword [ebp - 0x48], eax
mov eax, dword [0x5e34d0]
mov dword [ebp - 0x44], eax
mov eax, 0x589784
mov dword [ebp - 0x40], eax
mov eax, dword [0x5e34e0]
mov dword [ebp - 0x3c], eax
mov eax, str.___enable_features
mov dword [ebp - 0x38], eax
mov eax, dword [0x5e3530]
mov dword [ebp - 0x34], eax
mov eax, 0x5897e8
mov dword [ebp - 0x30], eax
mov eax, dword [0x5e3560]
mov dword [ebp - 0x2c], eax
mov eax, 0x5897e8
mov dword [ebp - 0x28], eax
mov eax, dword [0x5e3550]
mov dword [ebp - 0x24], eax
mov eax, str.___disable_features
mov dword [ebp - 0x20], eax
mov eax, dword [0x5e34f0]
mov dword [ebp - 0x1c], eax
mov eax, str._ComputePressure_MediaSessionWebRTC_KeyPressMonitoring_NetworkTimeServiceQuerying_RecordMediaEngagementScores_PreloadMediaEngagementData____disk_cache_size
mov dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x4fc]
lea edx, [ebp - 0xa4]
call fcn.004fe090
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x14], eax
mov eax, str.___user_data_dir_..data_
mov dword [ebp - 0x10], eax
mov eax, dword [0x5e35e0]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0
lea edx, [ebp - 0xa0]
mov ecx, 0x26
lea eax, [ebp - 4]
call fcn.00408d70
mov eax, dword [ebp - 4]
test eax, eax
jne 0x42b1b4
mov eax, 0x5e02f0
push eax
mov eax, str..ungoogledchrome.exe
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
cmp dword [0x5e3480], 0
jne 0x42b1e9
mov eax, ebx
call fcn.0041d8c0
mov eax, dword [0x5650f0]
mov edx, dword [0x5650f0]
mov edx, dword [edx]
call dword [edx + 0xfc]
jmp 0x42b1ff
mov eax, dword [ebx + 0x57c]
mov dl, 1
mov ecx, dword [ebx + 0x57c]
mov ecx, dword [ecx]
call dword [ecx + 0xd8]
xor eax, eax
pop edx
add esp, 0xc
mov dword fs:[eax], edx
mov eax, ebp
call fcn.0042afd0
pop ebx
leave
ret