Function at 0x493440
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6ddcaf
mov eax, dword fs:[0]
push eax
sub esp, 0xac
mov eax, dword [0x82d084]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], ax
xorps xmm0, xmm0
mov dword [ebp - 4], eax
movlpd qword [ebp - 0x20], xmm0
push 0x40
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
call fcn.0067ba12
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
push 0xd
xor eax, eax
mov dword [ebp - 0x40], 0
push str.webSSOBrowser
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.0042fe00
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x20]
call fcn.00440a30
cmp eax, edi
je 0x493503
cmp dword [edi + 0x14], 8
mov ecx, edi
jb 0x4934f8
mov ecx, dword [edi]
push dword [edi + 0x10]
push ecx
mov ecx, eax
call fcn.0042fe00
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.0042fd70
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
push 0x40
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
call fcn.0067ba12
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x50]
push 0xd
xor eax, eax
mov dword [ebp - 0x40], 0
push str.consumer.name
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.0042fe00
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x18]
call fcn.00440a30
cmp eax, edi
je 0x493590
cmp dword [edi + 0x14], 8
mov ecx, edi
jb 0x493585
mov ecx, dword [edi]
push dword [edi + 0x10]
push ecx
mov ecx, eax
call fcn.0042fe00
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.0042fd70
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
push ebx
call fcn.00439340
test al, al
je 0x4939ca
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
cmovae eax, dword [ebp - 0x38]
push eax
push str.Browser_identified._Command_is__s
push 0x75b10c
push 0x75b10c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x1e
call fcn.0043b0f0
add esp, 0x1c
lea eax, [ebp - 0x38]
cmp dword [ebp - 0x24], 8
cmovae eax, dword [ebp - 0x38]
push 0
push 0
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x6c], eax
cmp eax, 0x20
jle 0x4937cf
push 0x1e
xor eax, eax
mov dword [ebp - 0x40], 0
push str.lbs_webSSO_openBrowser_success
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.0042fe00
mov byte [ebp - 4], 5
mov eax, dword [0x853a48]
test eax, eax
jne 0x493670
push 0xe0
call fcn.0067ba12
mov esi, eax
mov dword [ebp - 0x6c], esi
push 0xe0
push 0
push esi
mov byte [ebp - 4], 6
call fcn.0068e800
add esp, 0x10
mov ecx, esi
call fcn.00458480
mov byte [ebp - 4], 5
mov dword [0x853a48], eax
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x50]
push ecx
mov ecx, eax
call fcn.0045a7c0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.0042fd70
push 7
xor eax, eax
mov dword [ebp - 0x58], 0
push str.browser
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.0042fe00
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xb4]
push 0xe
xor eax, eax
mov dword [ebp - 0xa4], 0
push str.system_browser
mov dword [ebp - 0xa0], 7
mov word [ebp - 0xb4], ax
call fcn.0042fe00
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x9c]
push 6
xor eax, eax
mov dword [ebp - 0x8c], 0
push str.render
mov dword [ebp - 0x88], 7
mov word [ebp - 0x9c], ax
call fcn.0042fe00
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x84]
push 3
xor eax, eax
mov dword [ebp - 0x74], 0
push 0x76b6c4
mov dword [ebp - 0x70], 7
mov word [ebp - 0x84], ax
call fcn.0042fe00
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x50]
push 0x1e
xor eax, eax
mov dword [ebp - 0x40], 0
push str.lbs_webSSO_openBrowser_success
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.0042fe00
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.0045b840
mov ecx, eax
call fcn.0045e0e0
lea ecx, [ebp - 0x50]
call fcn.0042fd70
lea ecx, [ebp - 0x84]
call fcn.0042fd70
lea ecx, [ebp - 0x9c]
call fcn.0042fd70
lea ecx, [ebp - 0xb4]
call fcn.0042fd70
lea ecx, [ebp - 0x68]
call fcn.0042fd70
jmp 0x493bf2
push 0x1f
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_fallback
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.0042fe00
mov byte [ebp - 4], 0xc
mov eax, dword [0x853a48]
test eax, eax
jne 0x493835
push 0xe0
call fcn.0067ba12
mov esi, eax
mov dword [ebp - 0xb8], esi
push 0xe0
push 0
push esi
mov byte [ebp - 4], 0xd
call fcn.0068e800
add esp, 0x10
mov ecx, esi
call fcn.00458480
mov byte [ebp - 4], 0xc
mov dword [0x853a48], eax
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x68]
push ecx
mov ecx, eax
call fcn.0045a7c0
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0042fd70
push 0xe
xor eax, eax
mov dword [ebp - 0x40], 0
push str.system_browser
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.0042fe00
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x84]
push 0xe
xor eax, eax
mov dword [ebp - 0x74], 0
push str.system_browser
mov dword [ebp - 0x70], 7
mov word [ebp - 0x84], ax
call fcn.0042fe00
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x9c]
push 6
xor eax, eax
mov dword [ebp - 0x8c], 0
push str.render
mov dword [ebp - 0x88], 7
mov word [ebp - 0x9c], ax
call fcn.0042fe00
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb4]
push 3
xor eax, eax
mov dword [ebp - 0xa4], 0
push 0x76b6c4
mov dword [ebp - 0xa0], 7
mov word [ebp - 0xb4], ax
call fcn.0042fe00
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x68]
push 0x1f
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_fallback
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.0042fe00
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0045b840
mov ecx, eax
call fcn.0045e0e0
lea ecx, [ebp - 0x68]
call fcn.0042fd70
lea ecx, [ebp - 0xb4]
call fcn.0042fd70
lea ecx, [ebp - 0x9c]
call fcn.0042fd70
lea ecx, [ebp - 0x84]
call fcn.0042fd70
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.0042fd70
push dword [ebp - 0x6c]
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
cmovae eax, dword [ebp - 0x38]
push eax
push str.Command__s_failed_with_return_code__d._Opening_URL_in_default_browser
push 0x75b10c
push 0x75b10c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x32
call fcn.0043b0f0
add esp, 0x20
jmp 0x493bbc
push 0x23
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_unidentified
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.0042fe00
mov byte [ebp - 4], 0x13
mov eax, dword [0x853a48]
test eax, eax
jne 0x493a30
push 0xe0
call fcn.0067ba12
mov esi, eax
mov dword [ebp - 0xb8], esi
push 0xe0
push 0
push esi
mov byte [ebp - 4], 0x14
call fcn.0068e800
add esp, 0x10
mov ecx, esi
call fcn.00458480
mov byte [ebp - 4], 0x13
mov dword [0x853a48], eax
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x68]
push ecx
mov ecx, eax
call fcn.0045a7c0
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0042fd70
push 0x16
xor eax, eax
mov dword [ebp - 0x40], 0
push str.default_system_browser
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.0042fe00
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x84]
push 0xe
xor eax, eax
mov dword [ebp - 0x74], 0
push str.system_browser
mov dword [ebp - 0x70], 7
mov word [ebp - 0x84], ax
call fcn.0042fe00
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x9c]
push 6
xor eax, eax
mov dword [ebp - 0x8c], 0
push str.render
mov dword [ebp - 0x88], 7
mov word [ebp - 0x9c], ax
call fcn.0042fe00
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xb4]
push 3
xor eax, eax
mov dword [ebp - 0xa4], 0
push 0x76b6c4
mov dword [ebp - 0xa0], 7
mov word [ebp - 0xb4], ax
call fcn.0042fe00
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x68]
push 0x23
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_unidentified
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.0042fe00
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0045b840
mov ecx, eax
call fcn.0045e0e0
lea ecx, [ebp - 0x68]
call fcn.0042fd70
lea ecx, [ebp - 0xb4]
call fcn.0042fd70
lea ecx, [ebp - 0x9c]
call fcn.0042fd70
lea ecx, [ebp - 0x84]
call fcn.0042fd70
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.0042fd70
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x493b98
mov eax, dword [edi]
push eax
push str.Browser__s_unidentified._Opening_URL_in_default_browser
push 0x75b10c
push 0x75b10c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x1e
call fcn.0043b0f0
add esp, 0x1c
cmp dword [edi + 0x34], 0xa
jg 0x493be9
push str.Latest_Internet_Explorer_version_on_the_machine_is__d
push 0x75b10c
push 0x75b10c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x32
call fcn.0043b0f0
add esp, 0x18
xor bl, bl
jmp 0x493bf4
xor dl, dl
mov ecx, ebx
call fcn.00618df0
mov bl, 1
mov eax, dword [ebp - 0x18]
push dword [eax + 4]
lea eax, [ebp - 0x18]
push eax
mov ecx, eax
call fcn.00441e30
push 0x40
push dword [ebp - 0x18]
call fcn.0067bc93
mov eax, dword [ebp - 0x20]
add esp, 8
push dword [eax + 4]
lea eax, [ebp - 0x20]
push eax
mov ecx, eax
call fcn.00441e30
push 0x40
push dword [ebp - 0x20]
call fcn.0067bc93
add esp, 8
lea ecx, [ebp - 0x38]
call fcn.0042fd70
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0067ba01
mov esp, ebp
pop ebp
ret 4