Function at 0x418d40
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x434
mov eax, dword [0x4d9770]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, ecx
push esi
push edi
lea edi, [ebx + 0xe2d8]
nop
lea eax, [ebp - 0xc]
mov dword [ebx + 0x4ac], 0
push eax
push edi
mov ecx, ebx
call fcn.00419890
mov esi, eax
cmp esi, 0x2efd
je 0x418dba
push 3
lea eax, [ebp - 0xc]
push 0x47beb0
push eax
call fcn.0045de90
add esp, 0xc
test eax, eax
je 0x418ed7
test esi, esi
jne 0x418dba
push 3
lea eax, [ebp - 0xc]
push 0x47beb0
push eax
call fcn.0045de90
add esp, 0xc
test eax, eax
jne 0x418e9e
push 0x400
lea eax, [ebp - 0x414]
mov ecx, 0x5647e0
push eax
push 4
push str.http
push 5
push str.https
push 0x400
push edi
call fcn.00449900
lea eax, [ebp - 0x14]
mov ecx, ebx
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.00419890
test eax, eax
jne 0x418e30
push 3
lea eax, [ebp - 0x14]
push 0x47beb0
push eax
call fcn.0045de90
add esp, 0xc
test eax, eax
je 0x41981f
push 3
lea eax, [ebp - 0x14]
push 0x47beb0
push eax
call fcn.0045de90
add esp, 0xc
test eax, eax
jne 0x4197e9
cmp dword [ebx + 0x4b0], 0
lea esi, [ebx + 0x27f0]
je 0x418e5a
push esi
push str.We_are_not_able_to_load_the_start_page__please_check_your_device_s_network_connection._If_your_computer_or_network_is_protected_by_a_firewall_or_proxy_make_sure_that_the_secure_browser_is_permitted_to_access___s_
lea eax, [ebx + 0x20e4]
push eax
push dword [0x514990]
call fcn.00449420
add esp, 0x10
push esi
push str._Domain_
push str.We_are_not_able_to_load_the_start_page__please_check_your_device_s_network_connection._If_your_computer_or_network_is_protected_by_a_firewall_or_proxy_make_sure_that_the_secure_browser_is_permitted_to_access___Domain__
push str.Connectionfailure
mov ecx, ebx
call fcn.00420720
mov ecx, ebx
mov esi, eax
call fcn.004210d0
mov dword [ebx + 0x4ac], 1
cmp esi, 1
je 0x418d60
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044d06d
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0x4b0], 0
je 0x418ec1
push str.We_are_currently_experiencing_connection_issues.
lea eax, [ebx + 0x20e4]
push eax
push dword [0x514990]
call fcn.00449420
add esp, 0xc
push str.We_are_currently_experiencing_connection_issues._Please_close_the_secure_browser_and_try_again_later.
push str.SERVERPROBLEM
mov ecx, ebx
call fcn.00420170
jmp 0x419860
mov edx, dword [ebx + 0x37110]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x418ee2
sub ecx, esi
sar ecx, 1
cmp ecx, 1
jbe 0x419778
mov ecx, edx
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x418f00
push 0
push 0
push 0
push 0
sub ecx, esi
sar ecx, 1
push ecx
push edx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
lea esi, [edi + 1]
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push esi
push eax
push 0xffffffffffffffff
push dword [ebx + 0x37110]
mov dword [ebx + 0x33a24], eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [edi + edi*2]
push eax
push 1
call fcn.004534b1
add esp, 8
mov dword [ebx + 0x3710c], eax
mov ecx, ebx
push dword [ebx + 0x33a24]
call fcn.00417fa0
push 0x47beb4
push ebx
call fcn.00450270
mov ecx, dword [ebx + 0x37110]
add esp, 8
test eax, eax
je 0x41900f
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [ebx + 0x33a24]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x418fa2
sub ecx, edx
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x40
call eax
mov esi, dword [ebx + 0x33a24]
mov edx, esi
mov dword [ebp - 0x420], eax
mov dword [ebx + 0x37114], eax
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x418fd3
sub edx, ecx
mov ecx, esi
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x418fe1
push edx
push dword [ebp - 0x420]
sub ecx, edi
push ecx
push esi
lea ecx, [ebx + 0x37108]
call fcn.00403200
push dword [ebx + 0x33a24]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x41909e
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x419012
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x40
call eax
mov esi, dword [ebx + 0x37110]
mov edx, esi
mov dword [ebp - 0x420], eax
mov dword [ebx + 0x37114], eax
lea ecx, [edx + 2]
nop dword [eax]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x419050
sub edx, ecx
lea ecx, [esi + 2]
sar edx, 1
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x419065
sub ecx, edi
sar ecx, 1
push edx
push esi
lea eax, [ecx + 2]
push eax
push dword [ebp - 0x420]
call fcn.0045fd29
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
add esp, 0x10
push dword [ebx + 0x37110]
call esi
push dword [ebx + 0x33a24]
call esi
mov edx, dword [ebx + 0x37114]
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4190b0
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
sub ecx, esi
push 0
push 0
push 0
push 0
sar ecx, 1
push ecx
push edx
push 0
push 0xfde9
call edi
mov esi, eax
mov dword [ebp - 0x41c], esi
lea eax, [esi + 1]
push eax
push 0x40
mov dword [ebp - 0x420], eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push esi
push eax
push 0xffffffffffffffff
push dword [ebx + 0x37114]
mov dword [ebp - 0x428], eax
push 0
push 0xfde9
call edi
push 0
push 0
push str.__SbrowserDownloadXMLID_
push str._SbrowserDownloadXMLID_
push dword [ebp - 0x428]
lea eax, [ebx + 0x1ce4]
mov ecx, ebx
push 0x400
push eax
call fcn.0041a6a0
mov esi, dword [ebx + 0x3710c]
lea ecx, [esi + 1]
nop
mov al, byte [esi]
inc esi
test al, al
jne 0x419140
sub esi, ecx
add esi, 0x64
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push dword [ebx + 0x3710c]
lea ecx, [esi - 1]
mov edi, eax
push str._sy1QM3bQ6VnxkCUm7Uv2zjj1ogux0O0ESsjq4G8fXpdwXkRJOqz
push ecx
push esi
push edi
call fcn.004085a0
push dword [ebx + 0x3710c]
call fcn.004534bc
add esp, 0x18
push 0x29
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov ecx, ebx
push esi
push edi
call fcn.0041d410
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x419195
sub ecx, edx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov byte [ecx + esi], al
call edi
push dword [ebx + 0x37118]
push esi
call fcn.0045f54b
add esp, 8
test eax, eax
jne 0x419705
push esi
call edi
push dword [ebp - 0x420]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, dword [ebp - 0x41c]
mov edi, eax
push 0
push 0
push str.__Configuration_
push str._Configuration_
push dword [ebp - 0x428]
mov ecx, ebx
mov dword [ebp - 0x420], edi
push esi
push edi
call fcn.0041a6a0
push str.Before_set_config_override
push 1
push dword [0x514990]
call fcn.00449450
add esp, 0xc
mov ecx, ebx
push edi
call fcn.0041d5d0
push str.After_set_config_override
push 1
push dword [0x514990]
call fcn.00449450
add esp, 0xc
mov ecx, ebx
call fcn.0041ddc0
mov edi, dword [ebx + 0x37114]
lea ecx, [edi + 2]
nop
mov ax, word [edi]
add edi, 2
test ax, ax
jne 0x419240
lea eax, [esi*2 + 2]
sub edi, ecx
push eax
sar edi, 1
push 0x40
mov dword [ebp - 0x430], edi
mov dword [ebp - 0x42c], eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push edi
mov esi, eax
mov ecx, ebx
push esi
push 0
push 0
push str.__Messages_
push str._Messages_
push dword [ebx + 0x37114]
mov dword [ebp - 0x434], esi
call fcn.0041a880
push str._Message
xor edi, edi
push esi
mov dword [ebp - 0x418], edi
call fcn.004504e0
add esp, 8
mov esi, eax
nop dword [eax + eax]
lea esi, [esi + edi*2]
add esi, 0x10
push str.__Message_
push esi
mov dword [ebp - 0x41c], esi
call fcn.004504e0
mov edi, eax
add esp, 8
cmp edi, esi
jbe 0x41941a
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4192d7
sub esi, ecx
sar esi, 1
lea eax, [esi*2 + 2]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edx, eax
mov ecx, edi
mov eax, dword [ebp - 0x41c]
sub ecx, eax
sar ecx, 1
push ecx
push eax
push esi
push edx
mov dword [ebp - 0x418], edx
call fcn.0045fd29
add esp, 0x10
test eax, eax
je 0x419326
push dword [ebp - 0x418]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x1000
push 1
call fcn.004534b1
add esp, 8
mov esi, eax
mov ecx, ebx
push 0x1000
push esi
push 0
push 0
push 0x47b04c
push str.Key_
push dword [ebp - 0x418]
call fcn.0041a880
push 0x47b008
push dword [ebp - 0x418]
xor eax, eax
mov word [ebp - 0x424], ax
call fcn.004504e0
add esp, 8
test eax, eax
je 0x41937d
add eax, 2
jmp 0x419383
lea eax, [ebp - 0x424]
push eax
push esi
mov ecx, ebx
call fcn.0041dc50
push esi
call fcn.004534bc
mov ecx, edi
add esp, 4
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4193a0
sub ecx, edx
mov eax, str.__Message_
sar ecx, 1
mov dx, word [edi]
cmp dx, word [eax]
jne 0x4193da
test dx, dx
je 0x4193d6
mov dx, word [edi + 2]
cmp dx, word [eax + 2]
jne 0x4193da
add edi, 4
add eax, 4
test dx, dx
jne 0x4193b4
xor eax, eax
jmp 0x4193df
sbb eax, eax
or eax, 1
test eax, eax
je 0x41942a
cmp ecx, 0xf
jl 0x41942a
mov edx, dword [ebp - 0x418]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4193f3
sub ecx, esi
sar ecx, 1
push edx
lea edi, [ecx + 0xa]
mov dword [ebp - 0x418], edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov esi, dword [ebp - 0x41c]
jmp 0x419420
mov edi, dword [ebp - 0x418]
test esi, esi
jne 0x4192b0
jmp 0x419436
push dword [ebp - 0x418]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push dword [ebp - 0x42c]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push dword [ebp - 0x430]
mov edi, eax
mov ecx, ebx
push edi
push 0
push 0
push str.__Properties_
push str._Properties_
push dword [ebx + 0x37114]
mov dword [ebp - 0x42c], edi
call fcn.0041a880
push str._Property
push edi
xor esi, esi
call fcn.004504e0
add esp, 8
nop
lea eax, [eax + esi*2]
add eax, 0x12
push str.__Property_
push eax
mov dword [ebp - 0x41c], eax
call fcn.004504e0
mov edi, eax
add esp, 8
mov eax, dword [ebp - 0x41c]
cmp edi, eax
jbe 0x419625
mov esi, eax
lea ecx, [esi + 2]
nop
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4194b0
sub esi, ecx
sar esi, 1
lea eax, [esi*2 + 2]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edx, eax
mov ecx, edi
mov eax, dword [ebp - 0x41c]
sub ecx, eax
sar ecx, 1
push ecx
push eax
push esi
push edx
mov dword [ebp - 0x418], edx
call fcn.0045fd29
add esp, 0x10
test eax, eax
je 0x4194ff
push dword [ebp - 0x418]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x1000
push 1
call fcn.004534b1
add esp, 8
mov esi, eax
mov ecx, ebx
push 0x1000
push esi
push 0
push 0
push 0x47b04c
push str.Key_
push dword [ebp - 0x418]
call fcn.0041a880
push 0x47b008
push dword [ebp - 0x418]
xor eax, eax
mov word [ebp - 0x424], ax
call fcn.004504e0
add esp, 8
test eax, eax
je 0x419556
add eax, 2
jmp 0x41955c
lea eax, [ebp - 0x424]
push eax
push esi
mov ecx, ebx
call fcn.0041e7c0
push esi
call fcn.004534bc
mov ecx, edi
add esp, 4
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x419573
sub ecx, edx
mov eax, str.__Property_
sar ecx, 1
mov dx, word [edi]
cmp dx, word [eax]
jne 0x4195ad
test dx, dx
je 0x4195a9
mov dx, word [edi + 2]
cmp dx, word [eax + 2]
jne 0x4195ad
add edi, 4
add eax, 4
test dx, dx
jne 0x419587
xor eax, eax
jmp 0x4195b2
sbb eax, eax
or eax, 1
test eax, eax
je 0x419635
cmp ecx, 0xf
jl 0x419635
mov eax, str.SBTokenPrivateKey
mov cx, word [esi]
cmp cx, word [eax]
jne 0x4195ee
test cx, cx
je 0x4195ea
mov cx, word [esi + 2]
cmp cx, word [eax + 2]
jne 0x4195ee
add esi, 4
add eax, 4
test cx, cx
jne 0x4195c8
xor eax, eax
jmp 0x4195f3
sbb eax, eax
or eax, 1
test eax, eax
je 0x419635
mov edi, dword [ebp - 0x418]
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x419602
sub ecx, edx
sar ecx, 1
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
lea esi, [ecx + 0xb]
call edi
mov eax, dword [ebp - 0x41c]
jmp 0x41962b
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
test eax, eax
jne 0x419480
jmp 0x419643
push dword [ebp - 0x418]
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call edi
push dword [ebp - 0x42c]
call edi
cmp dword [ebx + 0xd1e0], 0
jne 0x419666
cmp dword [0x52b068], 0
je 0x4196a5
cmp dword [ebx + 0x37f24], 0x24
jle 0x4196a5
mov eax, dword [ebx + 0x37f24]
inc eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push str.__MultiPublicKeys_
push str._MultiPublicKeys_
push dword [ebp - 0x420]
mov esi, eax
mov ecx, ebx
push dword [ebx + 0x37f24]
push esi
call fcn.0041a6a0
push esi
mov ecx, ebx
call fcn.0041ed50
push esi
call edi
push dword [ebp - 0x420]
call edi
push dword [ebp - 0x434]
call edi
mov esi, dword [ebp - 0x428]
mov ecx, ebx
push esi
call fcn.00419fa0
push esi
call edi
lea eax, [ebx + 0x1ce4]
push eax
push str.SbrowserDownloadXMLID____s
push 1
push dword [0x514990]
call fcn.00449450
push str.Security_XML_downloaded_and_messages_set
push 1
push dword [0x514990]
call fcn.00449450
add esp, 0x1c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044d06d
mov esp, ebp
pop ebp
ret
push str.Security_configurations_tampered_with__will_not_proceed_further.
push 1
push dword [0x514990]
call fcn.00449450
add esp, 0xc
lea eax, [ebx + 0x27f0]
mov ecx, ebx
push eax
push str._domain_
push str.The_security_configuration_has_been_tampered_with_and_the_launch_process_will_be_terminated._If_this_was_not_intentional__verify_that_your_network_configuration_is_not_decrypting_traffic_or_blocking_encrypted_files_for_the__domain__domain
push str.SecurityConfigTampered
call fcn.00420c10
mov ecx, ebx
mov dword [ebx + 0x4ac], 1
call fcn.004210d0
cmp dword [ebx + 0x33e64], 0
jne 0x419764
lea eax, [ebx + 0x33e68]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebx + 0x33e64], eax
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044d06d
mov esp, ebp
pop ebp
ret
push str.Unable_to_download_security_configurations.
push str.ITS_Secure_Browser
mov ecx, ebx
call fcn.00420170
push str.Unable_to_download_security_XML
push 1
push dword [0x514990]
call fcn.00449450
add esp, 0xc
cmp dword [ebx + 0x4b0], 0
je 0x4197c1
push str.Unable_to_download_security_XML
lea eax, [ebx + 0x20e4]
push eax
push dword [0x514990]
call fcn.00449420
add esp, 0xc
lea eax, [ebx + 0x23f0]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, ebx
call fcn.004210d0
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044d06d
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0x4b0], 0
je 0x41980c
push str.We_are_currently_experiencing_connection_issues.
lea eax, [ebx + 0x20e4]
push eax
push dword [0x514990]
call fcn.00449420
add esp, 0xc
push str.We_are_currently_experiencing_connection_issues._Please_close_the_secure_browser_and_try_again_later.
push str.ServerProblem
mov ecx, ebx
call fcn.00420960
jmp 0x419860
cmp dword [ebx + 0x4b0], 0
lea esi, [ebx + 0x27f0]
je 0x419849
push esi
push str.We_were_unable_to_provide_a_secure_connection_to_the___s__domain._This_secure_browser_uses_the_security_protocols_configured_for_Internet_Explorer._We_recommend_updating_to_the_latest_version_of_Internet_Explorer._Alternatively__you_may_try_to_update_Internet_Explorer_to_support_an_acceptable_security_protocol_by_going_to_Internet_Options_Advanced_Security_Settings_and_enabling_the_latest_version_of_TLS._Contact_support_for_further_assistance.
lea eax, [ebx + 0x20e4]
push eax
push dword [0x514990]
call fcn.00449420
add esp, 0x10
push esi
push str._Domain_
push str.We_were_unable_to_provide_a_secure_connection_to_the__Domain__domain._n_nThis_secure_browser_uses_the_security_protocols_configured_for_Internet_Explorer._We_recommend_updating_to_the_latest_version_of_Internet_Explorer._Alternatively__you_may_try_to_update_Internet_Explorer_to_support_an_acceptable_security_protocol_by_going_to_Internet_Options_Advanced_Security_Settings_and_enabling_the_latest_version_of_TLS._Contact_support_for_further_assistance.
push str.Tlsmessage
mov ecx, ebx
call fcn.00420c10
mov ecx, ebx
call fcn.004210d0
mov ecx, dword [ebp - 4]
pop edi
pop esi
mov dword [ebx + 0x4ac], 1
xor ecx, ebp
pop ebx
call fcn.0044d06d
mov esp, ebp
pop ebp
ret