Function at 0x4120e0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x434
mov eax, dword [0x4ca578]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, ecx
push esi
push edi
lea edi, [ebx + 0xa268]
nop
lea eax, [ebp - 0xc]
mov dword [ebx + 0x498], 0
push eax
push edi
mov ecx, ebx
call fcn.00412e40
mov esi, eax
cmp esi, 0x2efd
je 0x41215a
push 3
lea eax, [ebp - 0xc]
push 0x470098
push eax
call fcn.004534e0
add esp, 0xc
test eax, eax
je 0x412277
test esi, esi
jne 0x41215a
push 3
lea eax, [ebp - 0xc]
push 0x470098
push eax
call fcn.004534e0
add esp, 0xc
test eax, eax
jne 0x41223e
push 0x400
lea eax, [ebp - 0x414]
mov ecx, 0x5420e0
push eax
push 4
push str.http
push 5
push str.https
push 0x400
push edi
call fcn.00441360
lea eax, [ebp - 0x14]
mov ecx, ebx
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.00412e40
test eax, eax
jne 0x4121d0
push 3
lea eax, [ebp - 0x14]
push 0x470098
push eax
call fcn.004534e0
add esp, 0xc
test eax, eax
je 0x412ddc
push 3
lea eax, [ebp - 0x14]
push 0x470098
push eax
call fcn.004534e0
add esp, 0xc
test eax, eax
jne 0x412be7
cmp dword [ebx + 0x49c], 0
lea esi, [ebx + 0x25c4]
je 0x4121fa
push esi
push str.We_are_not_able_to_load_the_start_page__please_check_your_device_s_network_connection._If_your_computer_or_network_is_protected_by_a_firewall_or_proxy_make_sure_that_the_secure_browser_is_permitted_to_access___s_
lea eax, [ebx + 0x20c0]
push eax
push dword [0x504e50]
call fcn.00440e80
add esp, 0x10
push esi
push str._Domain_
push str.We_are_not_able_to_load_the_start_page__please_check_your_device_s_network_connection._If_your_computer_or_network_is_protected_by_a_firewall_or_proxy_make_sure_that_the_secure_browser_is_permitted_to_access___Domain__
push str.Connectionfailure
mov ecx, ebx
call fcn.00418d50
mov ecx, ebx
mov esi, eax
call fcn.00419690
mov dword [ebx + 0x498], 1
cmp esi, 1
je 0x412100
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00444ab5
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0x49c], 0
je 0x412261
push str.We_are_currently_experiencing_connection_issues.
lea eax, [ebx + 0x20c0]
push eax
push dword [0x504e50]
call fcn.00440e80
add esp, 0xc
push str.We_are_currently_experiencing_connection_issues._Please_close_the_secure_browser_and_try_again_later.
push str.SERVERPROBLEM
mov ecx, ebx
call fcn.004187c0
jmp 0x412e1d
mov edx, dword [ebx + 0x2d9fc]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x412282
sub ecx, esi
sar ecx, 1
cmp ecx, 1
jbe 0x412b78
mov ecx, edx
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4122a0
push 0
push 0
push 0
push 0
sub ecx, esi
sar ecx, 1
push ecx
push edx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
lea esi, [edi + 1]
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push esi
push eax
push 0xffffffffffffffff
push dword [ebx + 0x2d9fc]
mov dword [ebx + 0x2c9ac], eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [edi + edi*2]
push eax
push 1
call fcn.0044aad9
add esp, 8
mov dword [ebx + 0x2d9f8], eax
mov ecx, ebx
push dword [ebx + 0x2c9ac]
call fcn.00411410
push 0x47009c
push ebx
call fcn.00447860
mov ecx, dword [ebx + 0x2d9fc]
add esp, 8
test eax, eax
je 0x4123af
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [ebx + 0x2c9ac]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412342
sub ecx, edx
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x40
call eax
mov esi, dword [ebx + 0x2c9ac]
mov edx, esi
mov dword [ebp - 0x41c], eax
mov dword [ebx + 0x2da00], eax
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x412373
sub edx, ecx
mov ecx, esi
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412381
push edx
push dword [ebp - 0x41c]
sub ecx, edi
push ecx
push esi
lea ecx, [ebx + 0x2d9f4]
call fcn.004029a0
push dword [ebx + 0x2c9ac]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x41243e
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4123b2
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x40
call eax
mov esi, dword [ebx + 0x2d9fc]
mov edx, esi
mov dword [ebp - 0x41c], eax
mov dword [ebx + 0x2da00], eax
lea ecx, [edx + 2]
nop dword [eax]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x4123f0
sub edx, ecx
lea ecx, [esi + 2]
sar edx, 1
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x412405
sub ecx, edi
sar ecx, 1
push edx
push esi
lea eax, [ecx + 2]
push eax
push dword [ebp - 0x41c]
call fcn.00454e75
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
add esp, 0x10
push dword [ebx + 0x2d9fc]
call esi
push dword [ebx + 0x2c9ac]
call esi
mov edx, dword [ebx + 0x2da00]
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x412450
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
sub ecx, esi
push 0
push 0
push 0
push 0
sar ecx, 1
push ecx
push edx
push 0
push 0xfde9
call edi
mov esi, eax
mov dword [ebp - 0x424], esi
lea eax, [esi + 1]
push eax
push 0x40
mov dword [ebp - 0x41c], eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push esi
push eax
push 0xffffffffffffffff
push dword [ebx + 0x2da00]
mov dword [ebp - 0x42c], eax
push 0
push 0xfde9
call edi
push 0
push 0
push str.__SbrowserDownloadXMLID_
push str._SbrowserDownloadXMLID_
push dword [ebp - 0x42c]
lea eax, [ebx + 0x1cc0]
mov ecx, ebx
push 0x400
push eax
call fcn.00413d00
mov esi, dword [ebx + 0x2d9f8]
lea ecx, [esi + 1]
nop
mov al, byte [esi]
inc esi
test al, al
jne 0x4124e0
sub esi, ecx
add esi, 0x64
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push dword [ebx + 0x2d9f8]
lea ecx, [esi - 1]
mov edi, eax
push str._sy1QM3bQ6VnxkCUm7Uv2zjj1ogux0O0ESsjq4G8fXpdwXkRJOqz
push ecx
push esi
push edi
call fcn.00407d40
push dword [ebx + 0x2d9f8]
call fcn.0044aae4
add esp, 0x18
push 0x29
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov ecx, ebx
push esi
push edi
call fcn.00416630
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412535
sub ecx, edx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov byte [ecx + esi], al
call edi
push dword [ebx + 0x2da04]
push esi
call fcn.004555a7
add esp, 8
test eax, eax
jne 0x412b07
push esi
call edi
push dword [ebp - 0x41c]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, dword [ebp - 0x424]
mov edi, eax
push 0
push 0
push str.__Configuration_
push str._Configuration_
push dword [ebp - 0x42c]
mov ecx, ebx
mov dword [ebp - 0x41c], edi
push esi
push edi
call fcn.00413d00
push edi
push str.Lower_Secure_Browser_Config_XML____s
push dword [0x504e50]
call fcn.00440eb0
push str.Before_set_config_override
push dword [0x504e50]
call fcn.00440eb0
add esp, 0x14
mov ecx, ebx
push edi
call fcn.004167f0
push str.After_set_config_override
push dword [0x504e50]
call fcn.00440eb0
add esp, 8
mov ecx, ebx
call fcn.00416f80
mov edi, dword [ebx + 0x2da00]
lea ecx, [edi + 2]
nop dword [eax]
mov ax, word [edi]
add edi, 2
test ax, ax
jne 0x4125f0
lea eax, [esi*2 + 2]
sub edi, ecx
push eax
sar edi, 1
push 0x40
mov dword [ebp - 0x434], edi
mov dword [ebp - 0x424], eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push edi
mov esi, eax
mov ecx, ebx
push esi
push 0
push 0
push str.__Messages_
push str._Messages_
push dword [ebx + 0x2da00]
mov dword [ebp - 0x430], esi
call fcn.00413ee0
push str._Message
xor edi, edi
push esi
mov dword [ebp - 0x418], edi
call fcn.00447acb
add esp, 8
mov esi, eax
nop dword [eax + eax]
lea esi, [esi + edi*2]
add esi, 0x10
push str.__Message_
push esi
mov dword [ebp - 0x420], esi
call fcn.00447acb
mov edi, eax
add esp, 8
cmp edi, esi
jbe 0x4127ca
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x412687
sub esi, ecx
sar esi, 1
lea eax, [esi*2 + 2]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edx, eax
mov ecx, edi
mov eax, dword [ebp - 0x420]
sub ecx, eax
sar ecx, 1
push ecx
push eax
push esi
push edx
mov dword [ebp - 0x418], edx
call fcn.00454e75
add esp, 0x10
test eax, eax
je 0x4126d6
push dword [ebp - 0x418]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x1000
push 1
call fcn.0044aad9
add esp, 8
mov esi, eax
mov ecx, ebx
push 0x1000
push esi
push 0
push 0
push 0x46f4dc
push str.Key_
push dword [ebp - 0x418]
call fcn.00413ee0
push 0x46f498
push dword [ebp - 0x418]
xor eax, eax
mov word [ebp - 0x428], ax
call fcn.00447acb
add esp, 8
test eax, eax
je 0x41272d
add eax, 2
jmp 0x412733
lea eax, [ebp - 0x428]
push eax
push esi
mov ecx, ebx
call fcn.00416df0
push esi
call fcn.0044aae4
mov ecx, edi
add esp, 4
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x412750
sub ecx, edx
mov eax, str.__Message_
sar ecx, 1
mov dx, word [edi]
cmp dx, word [eax]
jne 0x41278a
test dx, dx
je 0x412786
mov dx, word [edi + 2]
cmp dx, word [eax + 2]
jne 0x41278a
add edi, 4
add eax, 4
test dx, dx
jne 0x412764
xor eax, eax
jmp 0x41278f
sbb eax, eax
or eax, 1
test eax, eax
je 0x4127da
cmp ecx, 0xf
jl 0x4127da
mov edx, dword [ebp - 0x418]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4127a3
sub ecx, esi
sar ecx, 1
push edx
lea edi, [ecx + 0xa]
mov dword [ebp - 0x418], edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov esi, dword [ebp - 0x420]
jmp 0x4127d0
mov edi, dword [ebp - 0x418]
test esi, esi
jne 0x412660
jmp 0x4127e6
push dword [ebp - 0x418]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push dword [ebp - 0x424]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push dword [ebp - 0x434]
mov esi, eax
mov ecx, ebx
push esi
push 0
push 0
push str.__Properties_
push str._Properties_
push dword [ebx + 0x2da00]
call fcn.00413ee0
push str._Property
xor edi, edi
push esi
mov dword [ebp - 0x420], edi
call fcn.00447acb
add esp, 8
mov esi, eax
lea esi, [esi + edi*2]
add esi, 0x12
push str.__Property_
push esi
mov dword [ebp - 0x424], esi
call fcn.00447acb
mov edi, eax
add esp, 8
cmp edi, esi
jbe 0x412a2a
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x412857
sub esi, ecx
sar esi, 1
lea eax, [esi*2 + 2]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edx, eax
mov ecx, edi
mov eax, dword [ebp - 0x424]
sub ecx, eax
sar ecx, 1
push ecx
push eax
push esi
push edx
mov dword [ebp - 0x418], edx
call fcn.00454e75
add esp, 0x10
test eax, eax
je 0x4128a6
push dword [ebp - 0x418]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x1000
push 1
call fcn.0044aad9
add esp, 8
mov esi, eax
mov ecx, ebx
push 0x1000
push esi
push 0
push 0
push 0x46f4dc
push str.Key_
push dword [ebp - 0x418]
call fcn.00413ee0
push 0x46f498
push dword [ebp - 0x418]
xor eax, eax
mov word [ebp - 0x428], ax
call fcn.00447acb
add esp, 8
test eax, eax
je 0x412903
lea edx, [eax + 2]
mov dword [ebp - 0x420], edx
jmp 0x41290f
lea eax, [ebp - 0x428]
mov dword [ebp - 0x420], eax
mov ecx, str.SBTokenPrivateKey
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41293c
test dx, dx
je 0x412938
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41293c
add eax, 4
add ecx, 4
test dx, dx
jne 0x412916
xor eax, eax
jmp 0x412941
sbb eax, eax
or eax, 1
test eax, eax
jne 0x41295c
push dword [ebp - 0x420]
lea eax, [ebx + 0xbaf8]
push 0x20
push eax
call fcn.004539f4
add esp, 0xc
push esi
call fcn.0044aae4
mov ecx, edi
add esp, 4
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x412970
sub ecx, edx
mov eax, str.__Property_
sar ecx, 1
mov dx, word [edi]
cmp dx, word [eax]
jne 0x4129aa
test dx, dx
je 0x4129a6
mov dx, word [edi + 2]
cmp dx, word [eax + 2]
jne 0x4129aa
add edi, 4
add eax, 4
test dx, dx
jne 0x412984
xor eax, eax
jmp 0x4129af
sbb eax, eax
or eax, 1
test eax, eax
je 0x412af4
cmp ecx, 0xf
jl 0x412af4
mov eax, str.SBTokenPrivateKey
mov cx, word [esi]
cmp cx, word [eax]
jne 0x4129eb
test cx, cx
je 0x4129e7
mov cx, word [esi + 2]
cmp cx, word [eax + 2]
jne 0x4129eb
add esi, 4
add eax, 4
test cx, cx
jne 0x4129c5
xor eax, eax
jmp 0x4129f0
sbb eax, eax
or eax, 1
test eax, eax
je 0x412af4
mov esi, dword [ebp - 0x418]
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x412a03
sub ecx, edx
sar ecx, 1
push esi
lea edi, [ecx + 0xb]
mov dword [ebp - 0x420], edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov esi, dword [ebp - 0x424]
jmp 0x412a30
mov edi, dword [ebp - 0x420]
test esi, esi
jne 0x412830
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp dword [ebx + 0x9970], 0
jne 0x412a59
cmp dword [0x512060], 0
je 0x412a98
cmp dword [ebx + 0x2e80c], 0x19
jle 0x412a98
mov eax, dword [ebx + 0x2e80c]
inc eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push str.__MultiPublicKeys_
push str._MultiPublicKeys_
push dword [ebp - 0x41c]
mov esi, eax
mov ecx, ebx
push dword [ebx + 0x2e80c]
push esi
call fcn.00413d00
push esi
mov ecx, ebx
call fcn.00417810
push esi
call edi
push dword [ebp - 0x41c]
call edi
push dword [ebp - 0x430]
call edi
mov esi, dword [ebp - 0x42c]
mov ecx, ebx
push esi
call fcn.00413660
push esi
call edi
lea eax, [ebx + 0x1cc0]
push eax
push str.SbrowserDownloadXMLID____s
push dword [0x504e50]
call fcn.00440eb0
push str.Security_XML_downloaded_and_messages_set
push dword [0x504e50]
call fcn.00440eb0
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00444ab5
mov esp, ebp
pop ebp
ret
push dword [ebp - 0x418]
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call edi
jmp 0x412a3e
push str.Security_configurations_tampered_with__will_not_proceed_further.
push dword [0x504e50]
call fcn.00440eb0
add esp, 8
lea eax, [ebx + 0x25c4]
mov ecx, ebx
push eax
push str._domain_
push str.The_security_configuration_has_been_tampered_with_and_the_launch_process_will_be_terminated._If_this_was_not_intentional__verify_that_your_network_configuration_is_not_decrypting_traffic_or_blocking_encrypted_files_for_the__domain__domain
push str.SecurityConfigTampered
call fcn.004194b0
mov ecx, ebx
mov dword [ebx + 0x498], 1
call fcn.00419690
cmp dword [ebx + 0x2cce8], 0
jne 0x412b64
lea eax, [ebx + 0x2ccec]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebx + 0x2cce8], eax
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00444ab5
mov esp, ebp
pop ebp
ret
push str.Unable_to_download_security_configurations.
push str.ITS_Secure_Browser
mov ecx, ebx
call fcn.004187c0
push str.Unable_to_download_security_XML
push dword [0x504e50]
call fcn.00440eb0
add esp, 8
cmp dword [ebx + 0x49c], 0
je 0x412bbf
push str.Unable_to_download_security_XML
lea eax, [ebx + 0x20c0]
push eax
push dword [0x504e50]
call fcn.00440e80
add esp, 0xc
lea eax, [ebx + 0x21c4]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, ebx
call fcn.00419690
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00444ab5
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0x49c], 0
je 0x412c0a
push str.We_are_currently_experiencing_connection_issues.
lea eax, [ebx + 0x20c0]
push eax
push dword [0x504e50]
call fcn.00440e80
add esp, 0xc
push str.Secure_Browser
push str.SecureBrowserTitle
mov ecx, ebx
call fcn.004140c0
push str.We_are_currently_experiencing_connection_issues._Please_close_the_secure_browser_and_try_again_later.
mov esi, eax
mov ecx, ebx
push str.ServerProblem
mov dword [ebp - 0x424], esi
call fcn.004140c0
push str.Before_killOnQuit
push dword [0x504e50]
mov dword [ebp - 0x418], eax
xor edi, edi
mov dword [ebp - 0x42c], 0
call fcn.00440eb0
push dword [ebx + 0x9990]
push dword [0x504e50]
call fcn.00440ad0
push str.After_killOnQuit
push dword [0x504e50]
call fcn.00440eb0
mov edx, dword [ebp - 0x418]
add esp, 0x18
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x430], eax
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412c90
sub ecx, dword [ebp - 0x430]
push 0
push 0
lea eax, [ecx + 1]
push eax
push edx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x434], eax
test eax, eax
je 0x412d2b
add eax, eax
mov dword [ebp - 0x41c], eax
lea ecx, [eax + 2]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edx, eax
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x42c], edx
lea ecx, [eax + 1]
mov dword [ebp - 0x430], ecx
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x412cf0
push dword [ebp - 0x434]
sub eax, dword [ebp - 0x430]
push edx
inc eax
push eax
push dword [ebp - 0x418]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov eax, dword [ebp - 0x42c]
xor edx, edx
mov ecx, dword [ebp - 0x41c]
mov word [eax + ecx], dx
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412d30
push 0
sub ecx, edx
push 0
lea eax, [ecx + 1]
push eax
push esi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x430], eax
test eax, eax
je 0x412da0
add eax, eax
mov dword [ebp - 0x434], eax
lea ecx, [eax + 2]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edi, eax
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x412d74
push dword [ebp - 0x430]
sub eax, edx
push edi
inc eax
push eax
push esi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov eax, dword [ebp - 0x434]
xor ecx, ecx
mov word [edi + eax], cx
mov esi, dword [ebp - 0x42c]
push 0x1000
push edi
push esi
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call esi
push edi
call esi
push dword [ebp - 0x418]
call fcn.0044aae4
push dword [ebp - 0x424]
call fcn.0044aae4
add esp, 8
jmp 0x412e1d
cmp dword [ebx + 0x49c], 0
lea esi, [ebx + 0x25c4]
je 0x412e06
push esi
push str.We_were_unable_to_provide_a_secure_connection_to_the___s__domain._This_secure_browser_uses_the_security_protocols_configured_for_Internet_Explorer._We_recommend_updating_to_the_latest_version_of_Internet_Explorer._Alternatively__you_may_try_to_update_Internet_Explorer_to_support_an_acceptable_security_protocol_by_going_to_Internet_Options_Advanced_Security_Settings_and_enabling_the_latest_version_of_TLS._Contact_support_for_further_assistance.
lea eax, [ebx + 0x20c0]
push eax
push dword [0x504e50]
call fcn.00440e80
add esp, 0x10
push esi
push str._Domain_
push str.We_were_unable_to_provide_a_secure_connection_to_the__Domain__domain._n_nThis_secure_browser_uses_the_security_protocols_configured_for_Internet_Explorer._We_recommend_updating_to_the_latest_version_of_Internet_Explorer._Alternatively__you_may_try_to_update_Internet_Explorer_to_support_an_acceptable_security_protocol_by_going_to_Internet_Options_Advanced_Security_Settings_and_enabling_the_latest_version_of_TLS._Contact_support_for_further_assistance.
push str.Tlsmessage
mov ecx, ebx
call fcn.004194b0
mov ecx, ebx
call fcn.00419690
mov ecx, dword [ebp - 4]
pop edi
pop esi
mov dword [ebx + 0x498], 1
xor ecx, ebp
pop ebx
call fcn.00444ab5
mov esp, ebp
pop ebp
ret