Function at 0x427deb
Capabilities:
Create process on windows

Disassembly:
push 0x38
mov eax, 0x483b4d
call fcn.00462276
xor esi, esi
mov dword [ebp - 4], esi
call fcn.0043fe5b
push eax
lea ecx, [ebp - 0x24]
call fcn.00403560
lea ecx, [ebp - 0x2c]
mov eax, 0x400
push ecx
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
mov dword [ebp - 0x2c], eax
call fcn.0040797f
push eax
push str.Open
push str..htm
push 2
push esi
call dword [sym.imp.SHLWAPI.dll_AssocQueryStringA]
push 0xffffffffffffffff
lea ecx, [ebp - 0x24]
call fcn.004066d3
call fcn.0043fe5b
push eax
lea ecx, [ebp - 0x1c]
call fcn.00403560
mov byte [ebp - 4], 2
call fcn.0043fe5b
push eax
lea ecx, [ebp - 0x34]
call fcn.00403560
push str.SOFTWAREMicrosoftWindowsCurrentVersionApp_Paths_
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 3
call fcn.00404253
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call fcn.004036d1
mov byte [ebp - 4], 5
call fcn.0043fe5b
push eax
lea ecx, [ebp - 0x18]
call fcn.00403560
mov byte [ebp - 4], 6
call fcn.0043fe5b
push eax
lea ecx, [ebp - 0x20]
call fcn.00403560
lea eax, [ebp - 0x30]
push 0x96
push eax
mov byte [ebp - 4], 7
mov byte [ebp - 0xd], 0
call fcn.00426c9a
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 8
call fcn.004039d8
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401264
mov edi, dword [ebp - 0x20]
push 0x49350c
push edi
call fcn.0046372c
pop ecx
pop ecx
test eax, eax
jne 0x427ef5
push str.browser.exe
jmp 0x427f3b
push 0x493500
push edi
call fcn.0046372c
pop ecx
pop ecx
test eax, eax
jne 0x427f0d
push str.chrome.exe
jmp 0x427f3b
push 0x4934f4
push edi
call fcn.0046372c
pop ecx
pop ecx
test eax, eax
jne 0x427f25
push str.firefox.exe
jmp 0x427f3b
push 0x4934e4
push edi
call fcn.0046372c
pop ecx
pop ecx
test eax, eax
jne 0x427f43
push str.iexplore.exe
lea ecx, [ebp - 0x14]
call fcn.00403b5d
push esi
mov ebx, 0x48bc70
push ebx
push dword [ebp - 0x14]
mov edi, reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0x30]
push edi
push eax
call fcn.0042e304
add esp, 0x14
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 9
call fcn.004039d8
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401264
mov esi, dword [ebp - 0x18]
mov eax, dword [esi - 0xc]
test eax, eax
jne 0x427fba
push 0x100
push ebx
push dword [ebp - 0x14]
lea eax, [ebp - 0x30]
push edi
push eax
call fcn.0042e304
add esp, 0x14
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xa
call fcn.004039d8
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401264
mov esi, dword [ebp - 0x18]
mov eax, dword [esi - 0xc]
test eax, eax
je 0x428089
push 0
push str.iexplore.exe
lea ecx, [ebp - 0x24]
call fcn.00403627
test eax, eax
je 0x427fef
push 0x4934e4
push dword [ebp - 0x20]
call fcn.0046372c
pop ecx
pop ecx
test eax, eax
je 0x428089
push 0
push str.iexplore.exe
lea ecx, [ebp - 0x18]
call fcn.00403627
cmp eax, 0xffffffff
jle 0x428007
mov byte [ebp - 0xd], 1
push 0x495064
lea ecx, [ebp - 0x1c]
call fcn.00403a25
push dword [esi - 0xc]
lea ecx, [ebp - 0x1c]
push esi
call fcn.004038d8
push 0x495064
lea ecx, [ebp - 0x1c]
call fcn.00403b5d
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x30]
push 0x4b5974
push eax
call fcn.00403a55
add esp, 0xc
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xb
call fcn.0040a0be
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401264
lea ecx, [ebp - 0xe]
call fcn.0043fed2
push 0
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xe]
mov byte [ebp - 4], 0xc
call fcn.00438f22
lea ecx, [ebp - 0xe]
mov byte [ebp - 4], 7
call fcn.00443e85
jmp 0x4280c9
push 1
xor eax, eax
push eax
push eax
push dword [ebp + 8]
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
push str.iexplore.exe
lea ecx, [ebp - 0x24]
call fcn.00403627
cmp eax, 0xffffffff
jle 0x4280c9
push 0x4934e4
push dword [ebp - 0x20]
call fcn.0046372c
pop ecx
pop ecx
test eax, eax
jne 0x4280c9
mov byte [ebp - 0xd], 1
cmp byte [ebp + 0xc], 0
je 0x428179
cmp byte [ebp - 0xd], 0
jne 0x428179
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.004039d8
push str.iexplore.exe
lea ecx, [ebp - 0x14]
call fcn.00403b5d
push 0
push ebx
push dword [ebp - 0x14]
lea eax, [ebp + 0xc]
push edi
push eax
call fcn.0042e304
add esp, 0x14
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xd
call fcn.004039d8
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401264
mov esi, dword [ebp - 0x18]
cmp dword [esi - 0xc], 0
jne 0x42815f
push 0x100
push ebx
push dword [ebp - 0x14]
lea eax, [ebp + 0xc]
push edi
push eax
call fcn.0042e304
add esp, 0x14
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call fcn.004039d8
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401264
mov esi, dword [ebp - 0x18]
xor eax, eax
cmp dword [esi - 0xc], eax
jle 0x428179
push 2
push eax
push dword [ebp + 8]
push esi
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00401264
lea ecx, [esi - 0x10]
call fcn.00401264
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00401264
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00401264
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.00401264
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.00401264
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00401264
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00401264
call fcn.0046234e
ret