Function at 0x413ee0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x434
mov eax, dword [0x4ce6a8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, ecx
push esi
push edi
lea edi, [ebx + 0xcec8]
nop
lea eax, [ebp - 0xc]
mov dword [ebx + 0x4a4], 0
push eax
push edi
mov ecx, ebx
call fcn.00414a40
mov esi, eax
cmp esi, 0x2efd
je 0x413f5a
push 3
lea eax, [ebp - 0xc]
push 0x473a60
push eax
call fcn.004566d0
add esp, 0xc
test eax, eax
je 0x414077
test esi, esi
jne 0x413f5a
push 3
lea eax, [ebp - 0xc]
push 0x473a60
push eax
call fcn.004566d0
add esp, 0xc
test eax, eax
jne 0x41403e
push 0x400
lea eax, [ebp - 0x414]
mov ecx, 0x556050
push eax
push 4
push 0x473e60
push 5
push 0x473e68
push 0x400
push edi
call fcn.00444540
lea eax, [ebp - 0x14]
mov ecx, ebx
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.00414a40
test eax, eax
jne 0x413fd0
push 3
lea eax, [ebp - 0x14]
push 0x473a60
push eax
call fcn.004566d0
add esp, 0xc
test eax, eax
je 0x4149cf
push 3
lea eax, [ebp - 0x14]
push 0x473a60
push eax
call fcn.004566d0
add esp, 0xc
test eax, eax
jne 0x414999
cmp dword [ebx + 0x4a8], 0
lea esi, [ebx + 0x27dc]
je 0x413ffa
push esi
push str.We_are_not_able_to_load_the_start_page__please_check_your_device_s_network_connection._If_your_computer_or_network_is_protected_by_a_firewall_or_proxy_make_sure_that_the_secure_browser_is_permitted_to_access___s_
lea eax, [ebx + 0x20d0]
push eax
push dword [0x50c768]
call fcn.00444060
add esp, 0x10
push esi
push 0x474030
push str.We_are_not_able_to_load_the_start_page__please_check_your_device_s_network_connection._If_your_computer_or_network_is_protected_by_a_firewall_or_proxy_make_sure_that_the_secure_browser_is_permitted_to_access___Domain__
push 0x4743dc
mov ecx, ebx
call fcn.0041b3f0
mov ecx, ebx
mov esi, eax
call fcn.0041ba90
mov dword [ebx + 0x4a4], 1
cmp esi, 1
je 0x413f00
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00447cbd
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0x4a8], 0
je 0x414061
push 0x473db0
lea eax, [ebx + 0x20d0]
push eax
push dword [0x50c768]
call fcn.00444060
add esp, 0xc
push 0x473de8
push 0x473e50
mov ecx, ebx
call fcn.0041ae50
jmp 0x414a10
mov edx, dword [ebx + 0x34560]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x414082
sub ecx, esi
sar ecx, 1
cmp ecx, 1
jbe 0x414928
mov ecx, edx
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4140a0
push 0
push 0
push 0
push 0
sub ecx, esi
sar ecx, 1
push ecx
push edx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
lea esi, [edi + 1]
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push esi
push eax
push 0xffffffffffffffff
push dword [ebx + 0x34560]
mov dword [ebx + 0x3220c], eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [edi + edi*2]
push eax
push 1
call fcn.0044dcc9
add esp, 8
mov dword [ebx + 0x3455c], eax
mov ecx, ebx
push dword [ebx + 0x3220c]
call fcn.004132a0
push 0x473a64
push ebx
call fcn.0044aa60
mov ecx, dword [ebx + 0x34560]
add esp, 8
test eax, eax
je 0x4141af
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [ebx + 0x3220c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414142
sub ecx, edx
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x40
call eax
mov esi, dword [ebx + 0x3220c]
mov edx, esi
mov dword [ebp - 0x420], eax
mov dword [ebx + 0x34564], eax
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x414173
sub edx, ecx
mov ecx, esi
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414181
push edx
push dword [ebp - 0x420]
sub ecx, edi
push ecx
push esi
lea ecx, [ebx + 0x34558]
call fcn.00402f20
push dword [ebx + 0x3220c]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x41423e
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4141b2
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x40
call eax
mov esi, dword [ebx + 0x34560]
mov edx, esi
mov dword [ebp - 0x420], eax
mov dword [ebx + 0x34564], eax
lea ecx, [edx + 2]
nop dword [eax]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x4141f0
sub edx, ecx
lea ecx, [esi + 2]
sar edx, 1
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x414205
sub ecx, edi
sar ecx, 1
push edx
push esi
lea eax, [ecx + 2]
push eax
push dword [ebp - 0x420]
call fcn.00458264
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
add esp, 0x10
push dword [ebx + 0x34560]
call esi
push dword [ebx + 0x3220c]
call esi
mov edx, dword [ebx + 0x34564]
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x414250
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
sub ecx, esi
push 0
push 0
push 0
push 0
sar ecx, 1
push ecx
push edx
push 0
push 0xfde9
call edi
mov esi, eax
mov dword [ebp - 0x41c], esi
lea eax, [esi + 1]
push eax
push 0x40
mov dword [ebp - 0x420], eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push esi
push eax
push 0xffffffffffffffff
push dword [ebx + 0x34564]
mov dword [ebp - 0x428], eax
push 0
push 0xfde9
call edi
push 0
push 0
push 0x473a6c
push 0x473a88
push dword [ebp - 0x428]
lea eax, [ebx + 0x1cd0]
mov ecx, ebx
push 0x400
push eax
call fcn.00415800
mov esi, dword [ebx + 0x3455c]
lea ecx, [esi + 1]
nop
mov al, byte [esi]
inc esi
test al, al
jne 0x4142e0
sub esi, ecx
add esi, 0x64
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push dword [ebx + 0x3455c]
lea ecx, [esi - 1]
mov edi, eax
push 0x4719f8
push ecx
push esi
push edi
call fcn.004082c0
push dword [ebx + 0x3455c]
call fcn.0044dcd4
add esp, 0x18
push 0x29
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov ecx, ebx
push esi
push edi
call fcn.004187f0
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414335
sub ecx, edx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov byte [ecx + esi], al
call edi
push dword [ebx + 0x34568]
push esi
call fcn.00457ac8
add esp, 8
test eax, eax
jne 0x4148b5
push esi
call edi
push dword [ebp - 0x420]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, dword [ebp - 0x41c]
mov edi, eax
push 0
push 0
push 0x473aa0
push 0x473ab4
push dword [ebp - 0x428]
mov ecx, ebx
mov dword [ebp - 0x420], edi
push esi
push edi
call fcn.00415800
push edi
push 0x473ac4
push 1
push dword [0x50c768]
call fcn.00444090
push 0x473aec
push 1
push dword [0x50c768]
call fcn.00444090
add esp, 0x1c
mov ecx, ebx
push edi
call fcn.004189b0
push 0x473b08
push 1
push dword [0x50c768]
call fcn.00444090
add esp, 0xc
mov ecx, ebx
call fcn.00419180
mov edi, dword [ebx + 0x34564]
lea ecx, [edi + 2]
mov ax, word [edi]
add edi, 2
test ax, ax
jne 0x4143f2
lea eax, [esi*2 + 2]
sub edi, ecx
push eax
sar edi, 1
push 0x40
mov dword [ebp - 0x430], edi
mov dword [ebp - 0x42c], eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push edi
mov esi, eax
mov ecx, ebx
push esi
push 0
push 0
push 0x473b24
push 0x473b3c
push dword [ebx + 0x34564]
mov dword [ebp - 0x434], esi
call fcn.004159e0
push 0x472ce8
xor edi, edi
push esi
mov dword [ebp - 0x418], edi
call fcn.0044acd0
add esp, 8
mov esi, eax
nop word [eax + eax]
lea esi, [esi + edi*2]
add esi, 0x10
push 0x472cfc
push esi
mov dword [ebp - 0x41c], esi
call fcn.0044acd0
mov edi, eax
add esp, 8
cmp edi, esi
jbe 0x4145ca
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x414487
sub esi, ecx
sar esi, 1
lea eax, [esi*2 + 2]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edx, eax
mov ecx, edi
mov eax, dword [ebp - 0x41c]
sub ecx, eax
sar ecx, 1
push ecx
push eax
push esi
push edx
mov dword [ebp - 0x418], edx
call fcn.00458264
add esp, 0x10
test eax, eax
je 0x4144d6
push dword [ebp - 0x418]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x1000
push 1
call fcn.0044dcc9
add esp, 8
mov esi, eax
mov ecx, ebx
push 0x1000
push esi
push 0
push 0
push 0x472d14
push 0x472d1c
push dword [ebp - 0x418]
call fcn.004159e0
push 0x472cd0
push dword [ebp - 0x418]
xor eax, eax
mov word [ebp - 0x424], ax
call fcn.0044acd0
add esp, 8
test eax, eax
je 0x41452d
add eax, 2
jmp 0x414533
lea eax, [ebp - 0x424]
push eax
push esi
mov ecx, ebx
call fcn.00419010
push esi
call fcn.0044dcd4
mov ecx, edi
add esp, 4
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x414550
sub ecx, edx
mov eax, 0x472cfc
sar ecx, 1
mov dx, word [edi]
cmp dx, word [eax]
jne 0x41458a
test dx, dx
je 0x414586
mov dx, word [edi + 2]
cmp dx, word [eax + 2]
jne 0x41458a
add edi, 4
add eax, 4
test dx, dx
jne 0x414564
xor eax, eax
jmp 0x41458f
sbb eax, eax
or eax, 1
test eax, eax
je 0x4145da
cmp ecx, 0xf
jl 0x4145da
mov edx, dword [ebp - 0x418]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4145a3
sub ecx, esi
sar ecx, 1
push edx
lea edi, [ecx + 0xa]
mov dword [ebp - 0x418], edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov esi, dword [ebp - 0x41c]
jmp 0x4145d0
mov edi, dword [ebp - 0x418]
test esi, esi
jne 0x414460
jmp 0x4145e6
push dword [ebp - 0x418]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push dword [ebp - 0x42c]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push dword [ebp - 0x430]
mov edi, eax
mov ecx, ebx
push edi
push 0
push 0
push 0x473b54
push 0x473b70
push dword [ebx + 0x34564]
mov dword [ebp - 0x42c], edi
call fcn.004159e0
push 0x475160
push edi
xor esi, esi
call fcn.0044acd0
add esp, 8
nop
lea eax, [eax + esi*2]
add eax, 0x12
push 0x475174
push eax
mov dword [ebp - 0x41c], eax
call fcn.0044acd0
mov edi, eax
add esp, 8
mov eax, dword [ebp - 0x41c]
cmp edi, eax
jbe 0x4147d5
mov esi, eax
lea ecx, [esi + 2]
nop
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x414660
sub esi, ecx
sar esi, 1
lea eax, [esi*2 + 2]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edx, eax
mov ecx, edi
mov eax, dword [ebp - 0x41c]
sub ecx, eax
sar ecx, 1
push ecx
push eax
push esi
push edx
mov dword [ebp - 0x418], edx
call fcn.00458264
add esp, 0x10
test eax, eax
je 0x4146af
push dword [ebp - 0x418]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x1000
push 1
call fcn.0044dcc9
add esp, 8
mov esi, eax
mov ecx, ebx
push 0x1000
push esi
push 0
push 0
push 0x472d14
push 0x472d1c
push dword [ebp - 0x418]
call fcn.004159e0
push 0x472cd0
push dword [ebp - 0x418]
xor eax, eax
mov word [ebp - 0x424], ax
call fcn.0044acd0
add esp, 8
test eax, eax
je 0x414706
add eax, 2
jmp 0x41470c
lea eax, [ebp - 0x424]
push eax
push esi
mov ecx, ebx
call fcn.00419b00
push esi
call fcn.0044dcd4
mov ecx, edi
add esp, 4
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x414723
sub ecx, edx
mov eax, 0x475174
sar ecx, 1
mov dx, word [edi]
cmp dx, word [eax]
jne 0x41475d
test dx, dx
je 0x414759
mov dx, word [edi + 2]
cmp dx, word [eax + 2]
jne 0x41475d
add edi, 4
add eax, 4
test dx, dx
jne 0x414737
xor eax, eax
jmp 0x414762
sbb eax, eax
or eax, 1
test eax, eax
je 0x4147e5
cmp ecx, 0xf
jl 0x4147e5
mov eax, 0x47518c
mov cx, word [esi]
cmp cx, word [eax]
jne 0x41479e
test cx, cx
je 0x41479a
mov cx, word [esi + 2]
cmp cx, word [eax + 2]
jne 0x41479e
add esi, 4
add eax, 4
test cx, cx
jne 0x414778
xor eax, eax
jmp 0x4147a3
sbb eax, eax
or eax, 1
test eax, eax
je 0x4147e5
mov edi, dword [ebp - 0x418]
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4147b2
sub ecx, edx
sar ecx, 1
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
lea esi, [ecx + 0xb]
call edi
mov eax, dword [ebp - 0x41c]
jmp 0x4147db
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
test eax, eax
jne 0x414630
jmp 0x4147f3
push dword [ebp - 0x418]
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call edi
push dword [ebp - 0x42c]
call edi
cmp dword [ebx + 0xc5cc], 0
jne 0x414816
cmp dword [0x51f468], 0
je 0x414855
cmp dword [ebx + 0x35374], 0x24
jle 0x414855
mov eax, dword [ebx + 0x35374]
inc eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push 0x473b8c
push 0x473ba0
push dword [ebp - 0x420]
mov esi, eax
mov ecx, ebx
push dword [ebx + 0x35374]
push esi
call fcn.00415800
push esi
mov ecx, ebx
call fcn.00419eb0
push esi
call edi
push dword [ebp - 0x420]
call edi
push dword [ebp - 0x434]
call edi
mov esi, dword [ebp - 0x428]
mov ecx, ebx
push esi
call fcn.00415100
push esi
call edi
lea eax, [ebx + 0x1cd0]
push eax
push 0x473bb4
push 1
push dword [0x50c768]
call fcn.00444090
push 0x473bd0
push 1
push dword [0x50c768]
call fcn.00444090
add esp, 0x1c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00447cbd
mov esp, ebp
pop ebp
ret
push 0x473c00
push 1
push dword [0x50c768]
call fcn.00444090
add esp, 0xc
lea eax, [ebx + 0x27dc]
mov ecx, ebx
push eax
push 0x4720b8
push 0x473c48
push 0x473d38
call fcn.0041b8b0
mov ecx, ebx
mov dword [ebx + 0x4a4], 1
call fcn.0041ba90
cmp dword [ebx + 0x3264c], 0
jne 0x414914
lea eax, [ebx + 0x32650]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebx + 0x3264c], eax
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00447cbd
mov esp, ebp
pop ebp
ret
push 0x473d50
push 0x473d7c
mov ecx, ebx
call fcn.0041ae50
push 0x473d90
push 1
push dword [0x50c768]
call fcn.00444090
add esp, 0xc
cmp dword [ebx + 0x4a8], 0
je 0x414971
push 0x473d90
lea eax, [ebx + 0x20d0]
push eax
push dword [0x50c768]
call fcn.00444060
add esp, 0xc
lea eax, [ebx + 0x23dc]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, ebx
call fcn.0041ba90
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00447cbd
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0x4a8], 0
je 0x4149bc
push 0x473db0
lea eax, [ebx + 0x20d0]
push eax
push dword [0x50c768]
call fcn.00444060
add esp, 0xc
push 0x473de8
push 0x474214
mov ecx, ebx
call fcn.0041b620
jmp 0x414a10
cmp dword [ebx + 0x4a8], 0
lea esi, [ebx + 0x27dc]
je 0x4149f9
push esi
push 0x473e70
lea eax, [ebx + 0x20d0]
push eax
push dword [0x50c768]
call fcn.00444060
add esp, 0x10
push esi
push 0x474030
push 0x474040
push 0x474208
mov ecx, ebx
call fcn.0041b8b0
mov ecx, ebx
call fcn.0041ba90
mov ecx, dword [ebp - 4]
pop edi
pop esi
mov dword [ebx + 0x4a4], 1
xor ecx, ebp
pop ebx
call fcn.00447cbd
mov esp, ebp
pop ebp
ret