Function at 0x426e16
Capabilities:
Create process on windows

Disassembly:
push 0x38
mov eax, 0x4817f8
call fcn.004602d6
xor esi, esi
mov dword [ebp - 4], esi
call fcn.0043deb6
push eax
lea ecx, [ebp - 0x24]
call fcn.0042debc
lea ecx, [ebp - 0x2c]
mov eax, 0x400
push ecx
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
mov dword [ebp - 0x2c], eax
call fcn.0040779b
push eax
push str.Open
push str..htm
push 2
push esi
call dword [sym.imp.SHLWAPI.dll_AssocQueryStringA]
push 0xffffffffffffffff
lea ecx, [ebp - 0x24]
call fcn.004066b5
call fcn.0043deb6
push eax
lea ecx, [ebp - 0x1c]
call fcn.0042debc
mov byte [ebp - 4], 2
call fcn.0043deb6
push eax
lea ecx, [ebp - 0x34]
call fcn.0042debc
push str.SOFTWAREMicrosoftWindowsCurrentVersionApp_Paths_
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 3
call fcn.00404279
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call fcn.004036f7
mov byte [ebp - 4], 5
call fcn.0043deb6
push eax
lea ecx, [ebp - 0x18]
call fcn.0042debc
mov byte [ebp - 4], 6
call fcn.0043deb6
push eax
lea ecx, [ebp - 0x20]
call fcn.0042debc
lea eax, [ebp - 0x30]
push 0x96
push eax
mov byte [ebp - 4], 7
mov byte [ebp - 0xd], 0
call fcn.00425b7d
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 8
call fcn.004039fe
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401240
mov edi, dword [ebp - 0x20]
push 0x48fe04
push edi
call fcn.0046178c
pop ecx
pop ecx
test eax, eax
jne 0x426f20
push str.browser.exe
jmp 0x426f66
push 0x48fdf8
push edi
call fcn.0046178c
pop ecx
pop ecx
test eax, eax
jne 0x426f38
push str.chrome.exe
jmp 0x426f66
push 0x48fdec
push edi
call fcn.0046178c
pop ecx
pop ecx
test eax, eax
jne 0x426f50
push str.firefox.exe
jmp 0x426f66
push 0x48fddc
push edi
call fcn.0046178c
pop ecx
pop ecx
test eax, eax
jne 0x426f6e
push str.iexplore.exe
lea ecx, [ebp - 0x14]
call fcn.00403b83
push esi
mov ebx, 0x488c50
push ebx
push dword [ebp - 0x14]
mov edi, reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0x30]
push edi
push eax
call fcn.0042cdc0
add esp, 0x14
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 9
call fcn.004039fe
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401240
mov esi, dword [ebp - 0x18]
mov eax, dword [esi - 0xc]
test eax, eax
jne 0x426fe5
push 0x100
push ebx
push dword [ebp - 0x14]
lea eax, [ebp - 0x30]
push edi
push eax
call fcn.0042cdc0
add esp, 0x14
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xa
call fcn.004039fe
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401240
mov esi, dword [ebp - 0x18]
mov eax, dword [esi - 0xc]
test eax, eax
je 0x4270b4
push 0
push str.iexplore.exe
lea ecx, [ebp - 0x24]
call fcn.0040364d
test eax, eax
je 0x42701a
push 0x48fddc
push dword [ebp - 0x20]
call fcn.0046178c
pop ecx
pop ecx
test eax, eax
je 0x4270b4
push 0
push str.iexplore.exe
lea ecx, [ebp - 0x18]
call fcn.0040364d
cmp eax, 0xffffffff
jle 0x427032
mov byte [ebp - 0xd], 1
push 0x49187c
lea ecx, [ebp - 0x1c]
call fcn.00403a4b
push dword [esi - 0xc]
lea ecx, [ebp - 0x1c]
push esi
call fcn.004038fe
push 0x49187c
lea ecx, [ebp - 0x1c]
call fcn.00403b83
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x30]
push 0x4b1968
push eax
call fcn.00403a7b
add esp, 0xc
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xb
call fcn.00409ebc
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401240
lea ecx, [ebp - 0xe]
call fcn.0043df2d
push 0
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xe]
mov byte [ebp - 4], 0xc
call fcn.00436dc5
lea ecx, [ebp - 0xe]
mov byte [ebp - 4], 7
call fcn.00441f9d
jmp 0x4270f4
push 1
xor eax, eax
push eax
push eax
push dword [ebp + 8]
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
push str.iexplore.exe
lea ecx, [ebp - 0x24]
call fcn.0040364d
cmp eax, 0xffffffff
jle 0x4270f4
push 0x48fddc
push dword [ebp - 0x20]
call fcn.0046178c
pop ecx
pop ecx
test eax, eax
jne 0x4270f4
mov byte [ebp - 0xd], 1
cmp byte [ebp + 0xc], 0
je 0x4271a4
cmp byte [ebp - 0xd], 0
jne 0x4271a4
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.004039fe
push str.iexplore.exe
lea ecx, [ebp - 0x14]
call fcn.00403b83
push 0
push ebx
push dword [ebp - 0x14]
lea eax, [ebp + 0xc]
push edi
push eax
call fcn.0042cdc0
add esp, 0x14
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xd
call fcn.004039fe
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401240
mov esi, dword [ebp - 0x18]
cmp dword [esi - 0xc], 0
jne 0x42718a
push 0x100
push ebx
push dword [ebp - 0x14]
lea eax, [ebp + 0xc]
push edi
push eax
call fcn.0042cdc0
add esp, 0x14
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call fcn.004039fe
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401240
mov esi, dword [ebp - 0x18]
xor eax, eax
cmp dword [esi - 0xc], eax
jle 0x4271a4
push 2
push eax
push dword [ebp + 8]
push esi
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00401240
lea ecx, [esi - 0x10]
call fcn.00401240
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00401240
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00401240
call fcn.004603ae
ret