Function at 0x42b110
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
lea esp, [esp - 0xa4]
push ebx
mov ebx, eax
mov dword [ebp - 0xa4], 0
mov dword [ebp - 4], 0
xor eax, eax
push fcn.0042b0f0
push ebp
push 0x414710
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00427ea0
push 1
push 0
lea eax, [ebp - 4]
call fcn.00403a50
push 0
mov eax, str.__no_default_browser_check___no_first_run____disable_sync___disable_breakpad____metrics_recording_only___disable_background_networking___log_level0___no_pings___disable_crash_reporter___disable_logging
mov dword [ebp - 0xa0], eax
mov eax, dword [0x5e2500]
mov dword [ebp - 0x9c], eax
mov eax, 0x5886f4
mov dword [ebp - 0x98], eax
mov eax, dword [0x5e2570]
mov dword [ebp - 0x94], eax
mov eax, 0x5886f4
mov dword [ebp - 0x90], eax
mov eax, dword [0x5e2510]
mov dword [ebp - 0x8c], eax
mov eax, 0x5886f4
mov dword [ebp - 0x88], eax
mov eax, dword [0x5e2520]
mov dword [ebp - 0x84], eax
mov eax, 0x5886f4
mov dword [ebp - 0x80], eax
mov eax, dword [0x5e2580]
mov dword [ebp - 0x7c], eax
mov eax, 0x5886f4
mov dword [ebp - 0x78], eax
mov eax, dword [0x5e25d0]
mov dword [ebp - 0x74], eax
mov eax, 0x5886f4
mov dword [ebp - 0x70], eax
mov eax, dword [0x5e2590]
mov dword [ebp - 0x6c], eax
mov eax, 0x5886f4
mov dword [ebp - 0x68], eax
mov eax, dword [0x5e25a0]
mov dword [ebp - 0x64], eax
mov eax, 0x5886f4
mov dword [ebp - 0x60], eax
mov eax, dword [0x5e25b0]
mov dword [ebp - 0x5c], eax
mov eax, 0x5886f4
mov dword [ebp - 0x58], eax
mov eax, dword [0x5e25c0]
mov dword [ebp - 0x54], eax
mov eax, 0x5886f4
mov dword [ebp - 0x50], eax
mov eax, dword [0x5e2540]
mov dword [ebp - 0x4c], eax
mov eax, str.___lang
mov dword [ebp - 0x48], eax
mov eax, dword [0x5e24d0]
mov dword [ebp - 0x44], eax
mov eax, 0x5886f4
mov dword [ebp - 0x40], eax
mov eax, dword [0x5e24e0]
mov dword [ebp - 0x3c], eax
mov eax, str.___enable_features
mov dword [ebp - 0x38], eax
mov eax, dword [0x5e2530]
mov dword [ebp - 0x34], eax
mov eax, 0x588758
mov dword [ebp - 0x30], eax
mov eax, dword [0x5e2560]
mov dword [ebp - 0x2c], eax
mov eax, 0x588758
mov dword [ebp - 0x28], eax
mov eax, dword [0x5e2550]
mov dword [ebp - 0x24], eax
mov eax, str.___disable_features
mov dword [ebp - 0x20], eax
mov eax, dword [0x5e24f0]
mov dword [ebp - 0x1c], eax
mov eax, str.___disk_cache_size
mov dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x4fc]
lea edx, [ebp - 0xa4]
call fcn.004fdf60
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x14], eax
mov eax, str.___user_data_dir_..data_
mov dword [ebp - 0x10], eax
mov eax, dword [0x5e25e0]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0
lea edx, [ebp - 0xa0]
mov ecx, 0x26
lea eax, [ebp - 4]
call fcn.00408d70
mov eax, dword [ebp - 4]
test eax, eax
jne 0x42b2d4
mov eax, 0x5df2f0
push eax
mov eax, str..yandex_browser.exe
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
cmp dword [0x5e2480], 0
jne 0x42b309
mov eax, ebx
call fcn.0041d8c0
mov eax, dword [0x5640f0]
mov edx, dword [0x5640f0]
mov edx, dword [edx]
call dword [edx + 0xfc]
jmp 0x42b31f
mov eax, dword [ebx + 0x57c]
mov dl, 1
mov ecx, dword [ebx + 0x57c]
mov ecx, dword [ecx]
call dword [ecx + 0xd8]
xor eax, eax
pop edx
add esp, 0xc
mov dword fs:[eax], edx
mov eax, ebp
call fcn.0042b0f0
pop ebx
leave
ret