Function at 0x47e500
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6b673f
mov eax, dword fs:[0]
push eax
sub esp, 0xac
mov eax, dword [0x7e500c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], ax
xorps xmm0, xmm0
mov dword [ebp - 4], eax
movlpd qword [ebp - 0x20], xmm0
push 0x40
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
call fcn.00650ded
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
push 0xd
xor eax, eax
mov dword [ebp - 0x40], 0
push str.webSSOBrowser
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.004271d0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x20]
call fcn.00438090
cmp eax, edi
je 0x47e5c3
cmp dword [edi + 0x14], 8
mov ecx, edi
jb 0x47e5b8
mov ecx, dword [edi]
push dword [edi + 0x10]
push ecx
mov ecx, eax
call fcn.004271d0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.00427170
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
push 0x40
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
call fcn.00650ded
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x50]
push 0xd
xor eax, eax
mov dword [ebp - 0x40], 0
push str.consumer.name
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.004271d0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x18]
call fcn.00438090
cmp eax, edi
je 0x47e650
cmp dword [edi + 0x14], 8
mov ecx, edi
jb 0x47e645
mov ecx, dword [edi]
push dword [edi + 0x10]
push ecx
mov ecx, eax
call fcn.004271d0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.00427170
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
push ebx
call fcn.004307c0
test al, al
je 0x47ea8a
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
cmovae eax, dword [ebp - 0x38]
push eax
push str.Browser_identified._Command_is__s
push 0x71a27c
push 0x71a27c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x1e
call fcn.00432560
add esp, 0x1c
lea eax, [ebp - 0x38]
cmp dword [ebp - 0x24], 8
cmovae eax, dword [ebp - 0x38]
push 0
push 0
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x6c], eax
cmp eax, 0x20
jle 0x47e88f
push 0x1e
xor eax, eax
mov dword [ebp - 0x40], 0
push str.lbs_webSSO_openBrowser_success
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.004271d0
mov byte [ebp - 4], 5
mov eax, dword [0x807678]
test eax, eax
jne 0x47e730
push 0xe0
call fcn.00650ded
mov esi, eax
mov dword [ebp - 0x6c], esi
push 0xe0
push 0
push esi
mov byte [ebp - 4], 6
call fcn.00663090
add esp, 0x10
mov ecx, esi
call fcn.0044cf20
mov byte [ebp - 4], 5
mov dword [0x807678], eax
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x50]
push ecx
mov ecx, eax
call fcn.0044f250
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.00427170
push 7
xor eax, eax
mov dword [ebp - 0x58], 0
push str.browser
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.004271d0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xb4]
push 0xe
xor eax, eax
mov dword [ebp - 0xa4], 0
push str.system_browser
mov dword [ebp - 0xa0], 7
mov word [ebp - 0xb4], ax
call fcn.004271d0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x9c]
push 6
xor eax, eax
mov dword [ebp - 0x8c], 0
push str.render
mov dword [ebp - 0x88], 7
mov word [ebp - 0x9c], ax
call fcn.004271d0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x84]
push 0x11
xor eax, eax
mov dword [ebp - 0x74], 0
push str.ElevationSSOPII
mov dword [ebp - 0x70], 7
mov word [ebp - 0x84], ax
call fcn.004271d0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x50]
push 0x1e
xor eax, eax
mov dword [ebp - 0x40], 0
push str.lbs_webSSO_openBrowser_success
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.004271d0
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.004502d0
mov ecx, eax
call fcn.00452a60
lea ecx, [ebp - 0x50]
call fcn.00427170
lea ecx, [ebp - 0x84]
call fcn.00427170
lea ecx, [ebp - 0x9c]
call fcn.00427170
lea ecx, [ebp - 0xb4]
call fcn.00427170
lea ecx, [ebp - 0x68]
call fcn.00427170
jmp 0x47ecb2
push 0x1f
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_fallback
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.004271d0
mov byte [ebp - 4], 0xc
mov eax, dword [0x807678]
test eax, eax
jne 0x47e8f5
push 0xe0
call fcn.00650ded
mov esi, eax
mov dword [ebp - 0xb8], esi
push 0xe0
push 0
push esi
mov byte [ebp - 4], 0xd
call fcn.00663090
add esp, 0x10
mov ecx, esi
call fcn.0044cf20
mov byte [ebp - 4], 0xc
mov dword [0x807678], eax
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x68]
push ecx
mov ecx, eax
call fcn.0044f250
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.00427170
push 0xe
xor eax, eax
mov dword [ebp - 0x40], 0
push str.system_browser
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.004271d0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x84]
push 0xe
xor eax, eax
mov dword [ebp - 0x74], 0
push str.system_browser
mov dword [ebp - 0x70], 7
mov word [ebp - 0x84], ax
call fcn.004271d0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x9c]
push 6
xor eax, eax
mov dword [ebp - 0x8c], 0
push str.render
mov dword [ebp - 0x88], 7
mov word [ebp - 0x9c], ax
call fcn.004271d0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb4]
push 0x11
xor eax, eax
mov dword [ebp - 0xa4], 0
push str.ElevationSSOPII
mov dword [ebp - 0xa0], 7
mov word [ebp - 0xb4], ax
call fcn.004271d0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x68]
push 0x1f
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_fallback
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.004271d0
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.004502d0
mov ecx, eax
call fcn.00452a60
lea ecx, [ebp - 0x68]
call fcn.00427170
lea ecx, [ebp - 0xb4]
call fcn.00427170
lea ecx, [ebp - 0x9c]
call fcn.00427170
lea ecx, [ebp - 0x84]
call fcn.00427170
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.00427170
push dword [ebp - 0x6c]
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
cmovae eax, dword [ebp - 0x38]
push eax
push str.Command__s_failed_with_return_code__d._Opening_URL_in_default_browser
push 0x71a27c
push 0x71a27c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x32
call fcn.00432560
add esp, 0x20
jmp 0x47ec7c
push 0x23
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_unidentified
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.004271d0
mov byte [ebp - 4], 0x13
mov eax, dword [0x807678]
test eax, eax
jne 0x47eaf0
push 0xe0
call fcn.00650ded
mov esi, eax
mov dword [ebp - 0xb8], esi
push 0xe0
push 0
push esi
mov byte [ebp - 4], 0x14
call fcn.00663090
add esp, 0x10
mov ecx, esi
call fcn.0044cf20
mov byte [ebp - 4], 0x13
mov dword [0x807678], eax
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x68]
push ecx
mov ecx, eax
call fcn.0044f250
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.00427170
push 0x16
xor eax, eax
mov dword [ebp - 0x40], 0
push str.default_system_browser
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.004271d0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x84]
push 0xe
xor eax, eax
mov dword [ebp - 0x74], 0
push str.system_browser
mov dword [ebp - 0x70], 7
mov word [ebp - 0x84], ax
call fcn.004271d0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x9c]
push 6
xor eax, eax
mov dword [ebp - 0x8c], 0
push str.render
mov dword [ebp - 0x88], 7
mov word [ebp - 0x9c], ax
call fcn.004271d0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xb4]
push 0x11
xor eax, eax
mov dword [ebp - 0xa4], 0
push str.ElevationSSOPII
mov dword [ebp - 0xa0], 7
mov word [ebp - 0xb4], ax
call fcn.004271d0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x68]
push 0x23
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_unidentified
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.004271d0
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.004502d0
mov ecx, eax
call fcn.00452a60
lea ecx, [ebp - 0x68]
call fcn.00427170
lea ecx, [ebp - 0xb4]
call fcn.00427170
lea ecx, [ebp - 0x9c]
call fcn.00427170
lea ecx, [ebp - 0x84]
call fcn.00427170
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.00427170
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x47ec58
mov eax, dword [edi]
push eax
push str.Browser__s_unidentified._Opening_URL_in_default_browser
push 0x71a27c
push 0x71a27c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x1e
call fcn.00432560
add esp, 0x1c
cmp dword [edi + 0x34], 0xa
jg 0x47eca9
push str.Latest_Internet_Explorer_version_on_the_machine_is__d
push 0x71a27c
push 0x71a27c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x32
call fcn.00432560
add esp, 0x18
xor bl, bl
jmp 0x47ecb4
xor dl, dl
mov ecx, ebx
call fcn.005d6870
mov bl, 1
mov eax, dword [ebp - 0x18]
push dword [eax + 4]
lea eax, [ebp - 0x18]
push eax
mov ecx, eax
call fcn.004393c0
push 0x40
push dword [ebp - 0x18]
call fcn.0065106e
mov eax, dword [ebp - 0x20]
add esp, 8
push dword [eax + 4]
lea eax, [ebp - 0x20]
push eax
mov ecx, eax
call fcn.004393c0
push 0x40
push dword [ebp - 0x20]
call fcn.0065106e
add esp, 8
lea ecx, [ebp - 0x38]
call fcn.00427170
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00650ddc
mov esp, ebp
pop ebp
ret 4