Function at 0x42aec0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
lea esp, [esp - 0xa4]
push ebx
mov ebx, eax
mov dword [ebp - 0xa4], 0
mov dword [ebp - 4], 0
xor eax, eax
push fcn.0042aea0
push ebp
push 0x414710
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00427ea0
push 1
push 0
lea eax, [ebp - 4]
call fcn.00403a50
push 0
mov eax, str.__no_default_browser_check___no_first_run___disable_sync___disable_breakpad___metrics_recording_only___disable_domain_reliability___disable_background_networking___log_level0___disable_gpu___disable_gpu_watchdog___disable_gpu_early_init___disable_gpu_compositing___disable_gpu_shader_disk_cache___disable_gpu_rasterization___disable_gpu_driver_bug_workarounds___disable_glsl_translator___disable_software_rasterizer___disable_webgl___no_pings___no_wifi___disable_crash_reporter___disable_histogram_customizer___disable_logging___disable_login_animations___disable_prompt_on_repost___enterprise_disable_arc___disable_field_trial_config___clear_token_service___disable_signin_scoped_device_id___enable_encryption_selection___disable_usb_keyboard_detect___disable_gaia_services___disable_file_system___disable_voice_input___disable_speech_api___disable_media_session_api___disable_presentation_api___disable_remote_playback_api___disable_notifications___disable_permissions_api___disable_translate___disable_office_editing_component_app
mov dword [ebp - 0xa0], eax
mov eax, dword [0x5e2500]
mov dword [ebp - 0x9c], eax
mov eax, 0x5886f4
mov dword [ebp - 0x98], eax
mov eax, dword [0x5e2570]
mov dword [ebp - 0x94], eax
mov eax, 0x5886f4
mov dword [ebp - 0x90], eax
mov eax, dword [0x5e2510]
mov dword [ebp - 0x8c], eax
mov eax, 0x5886f4
mov dword [ebp - 0x88], eax
mov eax, dword [0x5e2520]
mov dword [ebp - 0x84], eax
mov eax, 0x5886f4
mov dword [ebp - 0x80], eax
mov eax, dword [0x5e2580]
mov dword [ebp - 0x7c], eax
mov eax, 0x5886f4
mov dword [ebp - 0x78], eax
mov eax, dword [0x5e25d0]
mov dword [ebp - 0x74], eax
mov eax, 0x5886f4
mov dword [ebp - 0x70], eax
mov eax, dword [0x5e2590]
mov dword [ebp - 0x6c], eax
mov eax, 0x5886f4
mov dword [ebp - 0x68], eax
mov eax, dword [0x5e25a0]
mov dword [ebp - 0x64], eax
mov eax, 0x5886f4
mov dword [ebp - 0x60], eax
mov eax, dword [0x5e25b0]
mov dword [ebp - 0x5c], eax
mov eax, 0x5886f4
mov dword [ebp - 0x58], eax
mov eax, dword [0x5e25c0]
mov dword [ebp - 0x54], eax
mov eax, 0x5886f4
mov dword [ebp - 0x50], eax
mov eax, dword [0x5e2540]
mov dword [ebp - 0x4c], eax
mov eax, str.___canvas_msaa_sample_count0___lang
mov dword [ebp - 0x48], eax
mov eax, dword [0x5e24d0]
mov dword [ebp - 0x44], eax
mov eax, 0x5886f4
mov dword [ebp - 0x40], eax
mov eax, dword [0x5e24e0]
mov dword [ebp - 0x3c], eax
mov eax, str.___enable_features
mov dword [ebp - 0x38], eax
mov eax, dword [0x5e2530]
mov dword [ebp - 0x34], eax
mov eax, 0x588758
mov dword [ebp - 0x30], eax
mov eax, dword [0x5e2560]
mov dword [ebp - 0x2c], eax
mov eax, 0x588758
mov dword [ebp - 0x28], eax
mov eax, dword [0x5e2550]
mov dword [ebp - 0x24], eax
mov eax, str.___disable_features
mov dword [ebp - 0x20], eax
mov eax, dword [0x5e24f0]
mov dword [ebp - 0x1c], eax
mov eax, str._ComputePressure_MediaSessionWebRTC_KeyPressMonitoring_NetworkTimeServiceQuerying_RecordMediaEngagementScores_PreloadMediaEngagementData____disk_cache_size
mov dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x4fc]
lea edx, [ebp - 0xa4]
call fcn.004fdf60
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x14], eax
mov eax, str.___user_data_dir_..data_
mov dword [ebp - 0x10], eax
mov eax, dword [0x5e25e0]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0
lea edx, [ebp - 0xa0]
mov ecx, 0x26
lea eax, [ebp - 4]
call fcn.00408d70
mov eax, dword [ebp - 4]
test eax, eax
jne 0x42b084
mov eax, 0x5df2f0
push eax
mov eax, str..yandex_browser.exe
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
cmp dword [0x5e2480], 0
jne 0x42b0b9
mov eax, ebx
call fcn.0041d8c0
mov eax, dword [0x5640f0]
mov edx, dword [0x5640f0]
mov edx, dword [edx]
call dword [edx + 0xfc]
jmp 0x42b0cf
mov eax, dword [ebx + 0x57c]
mov dl, 1
mov ecx, dword [ebx + 0x57c]
mov ecx, dword [ecx]
call dword [ecx + 0xd8]
xor eax, eax
pop edx
add esp, 0xc
mov dword fs:[eax], edx
mov eax, ebp
call fcn.0042aea0
pop ebx
leave
ret