Function at 0x42f863
Capabilities:
Create process on windows

Disassembly:
push 0x990
mov eax, 0x48ec91
call fcn.0045ce3f
mov eax, dword [ebp + 0xc]
xor ebx, ebx
mov ecx, dword [ebp + 0x10]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x924], ecx
mov dword [ebp - 0x908], ebx
test eax, eax
je 0x42fd32
push eax
lea ecx, [ebp - 0x850]
call fcn.0043231d
mov esi, dword [ebp - 0x840]
mov dword [ebp - 4], ebx
cmp esi, 2
jae 0x42f8b2
mov esi, ebx
jmp 0x42fcdf
push 0x823
lea eax, [ebp - 0x837]
mov byte [ebp - 0x838], bl
push ebx
push eax
call sub.MSVCR120.dll_memset
mov ecx, dword [ebp - 0x83c]
lea eax, [ebp - 0x850]
mov edx, dword [ebp - 0x850]
add esp, 0xc
cmp ecx, 0x10
cmovae eax, edx
cmp byte [eax], 0x22
jne 0x42f93b
cmp ecx, 0x10
lea eax, [ebp - 0x850]
cmovae eax, edx
cmp byte [eax + esi - 1], 0x22
jne 0x42f93b
lea eax, [esi - 2]
push eax
push 1
lea eax, [ebp - 0x868]
push eax
lea ecx, [ebp - 0x850]
call fcn.0043231d
push eax
lea ecx, [ebp - 0x850]
call fcn.0043231d
push ebx
push 1
lea ecx, [ebp - 0x868]
call fcn.0043231d
mov ecx, dword [ebp - 0x83c]
mov edx, dword [ebp - 0x850]
push 0x10
pop esi
cmp ecx, esi
lea eax, [ebp - 0x850]
cmovae eax, edx
push eax
lea eax, [ebp - 0x838]
push 0x824
push eax
call fcn.0043231d
add esp, 0xc
test al, al
je 0x42fd20
push 2
push 0xffffffffffffffff
lea eax, [ebp - 0x838]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x920]
call fcn.00417813
lea ecx, [ebp - 0x920]
mov byte [ebp - 4], 2
call fcn.00418c11
push ebx
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x8fc]
call fcn.0042f388
lea ecx, [ebp - 0x910]
mov byte [ebp - 4], 5
call fcn.0041394e
lea ecx, [ebp - 0x918]
call fcn.0041394e
lea ecx, [ebp - 0x8f8]
call fcn.00430033
push eax
lea ecx, [ebp - 0x984]
call fcn.00420758
lea eax, [ebp - 0x984]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x96c]
call fcn.00413841
lea ecx, [ebp - 0x96c]
mov byte [ebp - 4], 7
call fcn.00418c11
lea eax, [ebp - 0x868]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x96c]
call fcn.004192c5
push eax
lea ecx, [ebp - 0x93c]
mov byte [ebp - 4], 9
call fcn.00413841
lea ecx, [ebp - 0x93c]
mov byte [ebp - 4], 0xa
call fcn.00418c11
lea ecx, [ebp - 0x858]
call fcn.0041394e
lea ecx, [ebp - 0x860]
call fcn.0041394e
lea ecx, [ebp - 0x95c]
call fcn.0041394e
lea ecx, [ebp - 0x964]
call fcn.0041394e
lea ecx, [ebp - 0x974]
mov byte [ebp - 4], 0xe
call fcn.0041394e
lea ecx, [ebp - 0x97c]
call fcn.0041394e
push ebx
push 0xffffffffffffffff
push str.https
lea ecx, [ebp - 0x954]
call fcn.00417813
xor eax, eax
mov byte [ebp - 4], 0xf
inc eax
push ebx
mov dword [ebp - 0x904], eax
lea ecx, [ebp - 0x93c]
mov dword [ebp - 0x908], eax
lea eax, [ebp - 0x954]
push ebx
push eax
call fcn.00418318
movzx eax, ax
test ax, ax
je 0x42fb49
push ebx
push 0xffffffffffffffff
push str.http
lea ecx, [ebp - 0x99c]
call fcn.00417813
push 3
pop eax
push ebx
mov dword [ebp - 0x904], eax
lea ecx, [ebp - 0x93c]
mov dword [ebp - 0x908], eax
lea eax, [ebp - 0x99c]
push ebx
push eax
mov dword [ebp - 4], esi
call fcn.00418318
movzx eax, ax
test ax, ax
je 0x42fb49
push ebx
push 0xffffffffffffffff
push str.acrobat
lea ecx, [ebp - 0x920]
call fcn.00417813
push 7
pop eax
push ebx
mov dword [ebp - 0x904], eax
lea ecx, [ebp - 0x93c]
mov dword [ebp - 0x908], eax
lea eax, [ebp - 0x920]
push ebx
push eax
mov dword [ebp - 4], 0x11
call fcn.00418318
movzx eax, ax
mov byte [ebp - 0x8fd], bl
test ax, ax
jne 0x42fb50
mov byte [ebp - 0x8fd], 1
mov eax, dword [ebp - 0x904]
test al, 4
je 0x42fb7f
and eax, 0xfffffffb
lea ecx, [ebp - 0x910]
mov dword [ebp - 0x904], eax
call fcn.0041394e
lea ecx, [ebp - 0x918]
call fcn.0041394e
mov eax, dword [ebp - 0x904]
test al, 2
je 0x42fba8
and eax, 0xfffffffd
lea ecx, [ebp - 0x98c]
mov dword [ebp - 0x904], eax
call fcn.0041394e
lea ecx, [ebp - 0x994]
call fcn.0041394e
mov eax, dword [ebp - 0x904]
mov dword [ebp - 4], 0xe
test al, 1
je 0x42fbc9
lea ecx, [ebp - 0x944]
call fcn.0041394e
lea ecx, [ebp - 0x94c]
call fcn.0041394e
cmp byte [ebp - 0x8fd], 0
je 0x42fcf5
lea eax, [ebp - 0x954]
push eax
call fcn.0043231d
pop ecx
push eax
lea ecx, [ebp - 0x920]
mov byte [ebp - 4], 0x12
call fcn.00413841
lea ecx, [ebp - 0x920]
mov byte [ebp - 4], 0x13
call fcn.00418c11
lea ecx, [ebp - 0x944]
mov byte [ebp - 4], 0x15
call fcn.0041394e
lea ecx, [ebp - 0x94c]
call fcn.0041394e
mov esi, 0x4a01bc
push esi
call sub.MSVCR120.dll_strlen
pop ecx
push eax
push esi
lea ecx, [ebp - 0x850]
call fcn.0043231d
cmp byte [ebp - 0x838], 0
jne 0x42fc42
mov eax, ebx
jmp 0x42fc4f
lea eax, [ebp - 0x838]
push eax
call sub.MSVCR120.dll_strlen
pop ecx
push eax
lea eax, [ebp - 0x838]
push eax
lea ecx, [ebp - 0x850]
call fcn.0043231d
push esi
call sub.MSVCR120.dll_strlen
pop ecx
push eax
push esi
lea ecx, [ebp - 0x850]
call fcn.0043231d
lea ecx, [ebp - 0x920]
call fcn.00418c11
push dword [ebp - 0x924]
cmp dword [ebp - 0x83c], 0x10
lea ecx, [ebp - 0x850]
push eax
cmovae ecx, dword [ebp - 0x850]
push ebx
push ecx
push ebx
push edi
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x910]
mov esi, eax
call fcn.0041394e
lea ecx, [ebp - 0x918]
call fcn.0041394e
lea ecx, [ebp - 0x92c]
call fcn.0041394e
lea ecx, [ebp - 0x934]
call fcn.0041394e
lea ecx, [ebp - 0x8fc]
call fcn.0041e1e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x850]
push ebx
push 1
call fcn.0043231d
mov eax, esi
jmp 0x42fd34
lea ecx, [ebp - 0x92c]
call fcn.0041394e
lea ecx, [ebp - 0x934]
call fcn.0041394e
lea ecx, [ebp - 0x8fc]
call fcn.0041e1e6
jmp 0x42fd20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x850]
push ebx
push 1
call fcn.0043231d
xor eax, eax
call fcn.0045cd91
ret