Function at 0x461450
Capabilities:
Check if file exists
Create process on windows

Disassembly:
sub esp, 0xa34
mov eax, dword [0x52b360]
xor eax, esp
mov dword [esp + 0xa30], eax
push esi
mov esi, ecx
cmp word [esi], 0
mov dword [esp + 8], esi
je 0x46175f
push 0x207
lea eax, [esp + 0x831]
push 0
push eax
mov byte [esp + 0x838], 0
call fcn.004d1df0
add esp, 0xc
push 1
push 0
push 0
push esi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 0x20
ja 0x46175f
push ebx
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
push edi
lea ecx, [esp + 0xc]
push ecx
push 1
push 0
push 0x50968c
push Ordinal_4
call ebx
test eax, eax
jne 0x4614e3
lea edx, [esp + 0xc]
push edx
lea edi, [esp + 0x18]
call fcn.00460d20
add esp, 4
push ebp
mov ebp, dword [sym.imp.SHLWAPI.dll_PathRemoveArgsW]
test eax, eax
jne 0x461553
xor eax, eax
push 0x40e
push eax
lea ecx, [esp + 0x432]
push ecx
mov word [esp + 0x434], ax
call fcn.004d1df0
add esp, 0xc
xor eax, eax
movzx ecx, word [esp + eax + 0x18]
mov word [esp + eax + 0x428], cx
add eax, 2
test cx, cx
jne 0x461510
lea edx, [esp + 0x428]
push edx
call ebp
lea eax, [esp + 0x428]
push eax
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea ecx, [esp + 0x428]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x46167f
lea edx, [esp + 0x10]
push edx
push 1
push 0
push str..htm
push Ordinal_4
call ebx
test eax, eax
jne 0x461643
lea eax, [esp + 0x10]
push eax
lea edi, [esp + 0x1c]
call fcn.00460d20
add esp, 4
test eax, eax
jne 0x461643
add edi, 0xfffffffe
lea esp, [esp]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x461590
mov ecx, 0xa
mov esi, str._shellopencommand
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x10]
push ecx
push 1
push 0
lea edx, [esp + 0x24]
push edx
push Ordinal_4
call ebx
test eax, eax
jne 0x46163f
lea eax, [esp + 0x10]
push eax
lea edi, [esp + 0x1c]
call fcn.00460d20
add esp, 4
test eax, eax
jne 0x46163f
xor ecx, ecx
push 0x40e
push ecx
lea edx, [esp + 0x432]
push edx
mov word [esp + 0x434], cx
call fcn.004d1df0
add esp, 0xc
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x18]
mov word [esp + eax + 0x428], cx
add eax, 2
test cx, cx
jne 0x461600
lea eax, [esp + 0x428]
push eax
call ebp
lea ecx, [esp + 0x428]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea edx, [esp + 0x428]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x46167b
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x10]
push eax
push 1
push 0
push str.htmlfile_shellopencommand
push Ordinal_4
call ebx
test eax, eax
jne 0x46175c
lea ecx, [esp + 0x10]
push ecx
lea edi, [esp + 0x1c]
call fcn.00460d20
add esp, 4
test eax, eax
jne 0x46175c
jmp 0x46167f
mov esi, dword [esp + 0x14]
lea edx, [esp + 0x18]
push str.__1_
push edx
call fcn.004c9453
add esp, 8
test eax, eax
jne 0x4616ce
lea eax, [esp + 0x18]
push 0x509734
push eax
call fcn.004c9453
add esp, 8
test eax, eax
jne 0x4616c7
lea eax, [esp + 0x18]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4616b2
sub eax, edx
sar eax, 1
lea eax, [esp + eax*2 + 0x16]
jmp 0x4616d3
xor ecx, ecx
mov word [eax], cx
jmp 0x4616d3
xor edx, edx
mov word [eax], dx
mov edi, eax
add edi, 0xfffffffe
jmp 0x4616e0
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4616e0
mov ecx, dword [0x502ad8]
mov dword [edi], ecx
mov ecx, esi
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x4616f6
sub ecx, esi
add eax, 0xfffffffe
mov edx, ecx
mov edi, eax
lea ebx, [ebx]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x461710
push 0
mov ecx, edx
shr ecx, 2
push 0
rep movsd dword es:[edi], dword [esi]
push 0x208
mov ecx, edx
lea edx, [esp + 0x844]
push edx
push 0xffffffffffffffff
lea eax, [esp + 0x2c]
push eax
push 0
and ecx, 3
push 0
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 1
lea ecx, [esp + 0x83c]
push ecx
call dword [sym.imp.KERNEL32.dll_WinExec]
pop ebp
pop edi
pop ebx
mov ecx, dword [esp + 0xa34]
pop esi
xor ecx, esp
call fcn.004c8f08
add esp, 0xa34
ret