Function at 0x42a2be
Capabilities:
Create process on windows

Disassembly:
push 0x38
mov eax, 0x486aac
call fcn.00464d37
xor esi, esi
mov dword [ebp - 4], esi
call fcn.00443455
push eax
lea ecx, [ebp - 0x24]
call fcn.004318e9
lea ecx, [ebp - 0x2c]
mov eax, 0x400
push ecx
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
mov dword [ebp - 0x2c], eax
call fcn.00407b2b
push eax
push str.Open
push str..htm
push 2
push esi
call dword [sym.imp.SHLWAPI.dll_AssocQueryStringA]
push 0xffffffffffffffff
lea ecx, [ebp - 0x24]
call fcn.00405f05
call fcn.00443455
push eax
lea ecx, [ebp - 0x1c]
call fcn.004318e9
mov byte [ebp - 4], 2
call fcn.00443455
push eax
lea ecx, [ebp - 0x34]
call fcn.004318e9
push str.SOFTWAREMicrosoftWindowsCurrentVersionApp_Paths_
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 3
call fcn.00404237
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call fcn.004036b5
mov byte [ebp - 4], 5
call fcn.00443455
push eax
lea ecx, [ebp - 0x18]
call fcn.004318e9
mov byte [ebp - 4], 6
call fcn.00443455
push eax
lea ecx, [ebp - 0x20]
call fcn.004318e9
lea eax, [ebp - 0x30]
push 0x96
push eax
mov byte [ebp - 4], 7
mov byte [ebp - 0xd], 0
call fcn.00428be0
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 8
call fcn.00403ae1
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401000
mov edi, dword [ebp - 0x20]
push 0x495dfc
push edi
call fcn.004661f9
pop ecx
pop ecx
test eax, eax
jne 0x42a3c8
push str.browser.exe
jmp 0x42a40e
push 0x495df0
push edi
call fcn.004661f9
pop ecx
pop ecx
test eax, eax
jne 0x42a3e0
push str.chrome.exe
jmp 0x42a40e
push 0x495de4
push edi
call fcn.004661f9
pop ecx
pop ecx
test eax, eax
jne 0x42a3f8
push str.firefox.exe
jmp 0x42a40e
push 0x495dd4
push edi
call fcn.004661f9
pop ecx
pop ecx
test eax, eax
jne 0x42a416
push str.iexplore.exe
lea ecx, [ebp - 0x14]
call fcn.00403a7c
push esi
mov ebx, 0x48ed6c
push ebx
push dword [ebp - 0x14]
mov edi, reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0x30]
push edi
push eax
call fcn.00430790
add esp, 0x14
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 9
call fcn.00403ae1
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401000
mov esi, dword [ebp - 0x18]
mov eax, dword [esi - 0xc]
test eax, eax
jne 0x42a48d
push 0x100
push ebx
push dword [ebp - 0x14]
lea eax, [ebp - 0x30]
push edi
push eax
call fcn.00430790
add esp, 0x14
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xa
call fcn.00403ae1
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401000
mov esi, dword [ebp - 0x18]
mov eax, dword [esi - 0xc]
test eax, eax
je 0x42a55c
push 0
push str.iexplore.exe
lea ecx, [ebp - 0x24]
call fcn.00403642
test eax, eax
je 0x42a4c2
push 0x495dd4
push dword [ebp - 0x20]
call fcn.004661f9
pop ecx
pop ecx
test eax, eax
je 0x42a55c
push 0
push str.iexplore.exe
lea ecx, [ebp - 0x18]
call fcn.00403642
cmp eax, 0xffffffff
jle 0x42a4da
mov byte [ebp - 0xd], 1
push 0x49887c
lea ecx, [ebp - 0x1c]
call fcn.00403b2e
push dword [esi - 0xc]
lea ecx, [ebp - 0x1c]
push esi
call fcn.004037ae
push 0x49887c
lea ecx, [ebp - 0x1c]
call fcn.00403a7c
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x30]
push 0x4b9aec
push eax
call fcn.00403974
add esp, 0xc
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xb
call fcn.004099c7
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401000
lea ecx, [ebp - 0xe]
call fcn.0043b8a1
push 0
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xe]
mov byte [ebp - 4], 0xc
call fcn.0043b8a4
lea ecx, [ebp - 0xe]
mov byte [ebp - 4], 7
call fcn.0040499e
jmp 0x42a59c
push 1
xor eax, eax
push eax
push eax
push dword [ebp + 8]
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
push str.iexplore.exe
lea ecx, [ebp - 0x24]
call fcn.00403642
cmp eax, 0xffffffff
jle 0x42a59c
push 0x495dd4
push dword [ebp - 0x20]
call fcn.004661f9
pop ecx
pop ecx
test eax, eax
jne 0x42a59c
mov byte [ebp - 0xd], 1
cmp byte [ebp + 0xc], 0
je 0x42a64c
cmp byte [ebp - 0xd], 0
jne 0x42a64c
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.00403ae1
push str.iexplore.exe
lea ecx, [ebp - 0x14]
call fcn.00403a7c
push 0
push ebx
push dword [ebp - 0x14]
lea eax, [ebp + 0xc]
push edi
push eax
call fcn.00430790
add esp, 0x14
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xd
call fcn.00403ae1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401000
mov esi, dword [ebp - 0x18]
cmp dword [esi - 0xc], 0
jne 0x42a632
push 0x100
push ebx
push dword [ebp - 0x14]
lea eax, [ebp + 0xc]
push edi
push eax
call fcn.00430790
add esp, 0x14
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call fcn.00403ae1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401000
mov esi, dword [ebp - 0x18]
xor eax, eax
cmp dword [esi - 0xc], eax
jle 0x42a64c
push 2
push eax
push dword [ebp + 8]
push esi
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00401000
lea ecx, [esi - 0x10]
call fcn.00401000
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00401000
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00401000
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.00401000
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.00401000
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00401000
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00401000
call fcn.00464e0f
ret