Function at 0x483650
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x69e3ef
mov eax, dword fs:[0]
push eax
sub esp, 0xac
mov eax, dword [0x7ca00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], ax
xorps xmm0, xmm0
mov dword [ebp - 4], eax
movlpd qword [ebp - 0x20], xmm0
push 0x40
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
call fcn.0063de82
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
push 0xd
xor eax, eax
mov dword [ebp - 0x40], 0
push str.webSSOBrowser
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.00428800
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x20]
call fcn.004390d0
cmp eax, edi
je 0x483713
cmp dword [edi + 0x14], 8
mov ecx, edi
jb 0x483708
mov ecx, dword [edi]
push dword [edi + 0x10]
push ecx
mov ecx, eax
call fcn.00428800
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.00428770
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
push 0x40
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
call fcn.0063de82
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x50]
push 0xd
xor eax, eax
mov dword [ebp - 0x40], 0
push str.consumer.name
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.00428800
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x18]
call fcn.004390d0
cmp eax, edi
je 0x4837a0
cmp dword [edi + 0x14], 8
mov ecx, edi
jb 0x483795
mov ecx, dword [edi]
push dword [edi + 0x10]
push ecx
mov ecx, eax
call fcn.00428800
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.00428770
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
push ebx
call fcn.00431d10
test al, al
je 0x483bda
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
cmovae eax, dword [ebp - 0x38]
push eax
push str.Browser_identified._Command_is__s
push 0x701e7c
push 0x701e7c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x1e
call fcn.00433ac0
add esp, 0x1c
lea eax, [ebp - 0x38]
cmp dword [ebp - 0x24], 8
cmovae eax, dword [ebp - 0x38]
push 0
push 0
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x6c], eax
cmp eax, 0x20
jle 0x4839df
push 0x1e
xor eax, eax
mov dword [ebp - 0x40], 0
push str.lbs_webSSO_openBrowser_success
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.00428800
mov byte [ebp - 4], 5
mov eax, dword [0x7eb9c8]
test eax, eax
jne 0x483880
push 0xe0
call fcn.0063de82
mov esi, eax
mov dword [ebp - 0x6c], esi
push 0xe0
push 0
push esi
mov byte [ebp - 4], 6
call fcn.006501e0
add esp, 0x10
mov ecx, esi
call fcn.0044e2f0
mov byte [ebp - 4], 5
mov dword [0x7eb9c8], eax
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x50]
push ecx
mov ecx, eax
call fcn.00450630
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.00428770
push 7
xor eax, eax
mov dword [ebp - 0x58], 0
push str.browser
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.00428800
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xb4]
push 0xe
xor eax, eax
mov dword [ebp - 0xa4], 0
push str.system_browser
mov dword [ebp - 0xa0], 7
mov word [ebp - 0xb4], ax
call fcn.00428800
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x9c]
push 6
xor eax, eax
mov dword [ebp - 0x8c], 0
push str.render
mov dword [ebp - 0x88], 7
mov word [ebp - 0x9c], ax
call fcn.00428800
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x84]
push 3
xor eax, eax
mov dword [ebp - 0x74], 0
push 0x71106c
mov dword [ebp - 0x70], 7
mov word [ebp - 0x84], ax
call fcn.00428800
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x50]
push 0x1e
xor eax, eax
mov dword [ebp - 0x40], 0
push str.lbs_webSSO_openBrowser_success
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.00428800
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.004516b0
mov ecx, eax
call fcn.00453f50
lea ecx, [ebp - 0x50]
call fcn.00428770
lea ecx, [ebp - 0x84]
call fcn.00428770
lea ecx, [ebp - 0x9c]
call fcn.00428770
lea ecx, [ebp - 0xb4]
call fcn.00428770
lea ecx, [ebp - 0x68]
call fcn.00428770
jmp 0x483e02
push 0x1f
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_fallback
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.00428800
mov byte [ebp - 4], 0xc
mov eax, dword [0x7eb9c8]
test eax, eax
jne 0x483a45
push 0xe0
call fcn.0063de82
mov esi, eax
mov dword [ebp - 0xb8], esi
push 0xe0
push 0
push esi
mov byte [ebp - 4], 0xd
call fcn.006501e0
add esp, 0x10
mov ecx, esi
call fcn.0044e2f0
mov byte [ebp - 4], 0xc
mov dword [0x7eb9c8], eax
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x68]
push ecx
mov ecx, eax
call fcn.00450630
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.00428770
push 0xe
xor eax, eax
mov dword [ebp - 0x40], 0
push str.system_browser
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.00428800
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x84]
push 0xe
xor eax, eax
mov dword [ebp - 0x74], 0
push str.system_browser
mov dword [ebp - 0x70], 7
mov word [ebp - 0x84], ax
call fcn.00428800
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x9c]
push 6
xor eax, eax
mov dword [ebp - 0x8c], 0
push str.render
mov dword [ebp - 0x88], 7
mov word [ebp - 0x9c], ax
call fcn.00428800
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb4]
push 3
xor eax, eax
mov dword [ebp - 0xa4], 0
push 0x71106c
mov dword [ebp - 0xa0], 7
mov word [ebp - 0xb4], ax
call fcn.00428800
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x68]
push 0x1f
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_fallback
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.00428800
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.004516b0
mov ecx, eax
call fcn.00453f50
lea ecx, [ebp - 0x68]
call fcn.00428770
lea ecx, [ebp - 0xb4]
call fcn.00428770
lea ecx, [ebp - 0x9c]
call fcn.00428770
lea ecx, [ebp - 0x84]
call fcn.00428770
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.00428770
push dword [ebp - 0x6c]
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
cmovae eax, dword [ebp - 0x38]
push eax
push str.Command__s_failed_with_return_code__d._Opening_URL_in_default_browser
push 0x701e7c
push 0x701e7c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x32
call fcn.00433ac0
add esp, 0x20
jmp 0x483dcc
push 0x23
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_unidentified
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.00428800
mov byte [ebp - 4], 0x13
mov eax, dword [0x7eb9c8]
test eax, eax
jne 0x483c40
push 0xe0
call fcn.0063de82
mov esi, eax
mov dword [ebp - 0xb8], esi
push 0xe0
push 0
push esi
mov byte [ebp - 4], 0x14
call fcn.006501e0
add esp, 0x10
mov ecx, esi
call fcn.0044e2f0
mov byte [ebp - 4], 0x13
mov dword [0x7eb9c8], eax
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x68]
push ecx
mov ecx, eax
call fcn.00450630
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.00428770
push 0x16
xor eax, eax
mov dword [ebp - 0x40], 0
push str.default_system_browser
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.00428800
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x84]
push 0xe
xor eax, eax
mov dword [ebp - 0x74], 0
push str.system_browser
mov dword [ebp - 0x70], 7
mov word [ebp - 0x84], ax
call fcn.00428800
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x9c]
push 6
xor eax, eax
mov dword [ebp - 0x8c], 0
push str.render
mov dword [ebp - 0x88], 7
mov word [ebp - 0x9c], ax
call fcn.00428800
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xb4]
push 3
xor eax, eax
mov dword [ebp - 0xa4], 0
push 0x71106c
mov dword [ebp - 0xa0], 7
mov word [ebp - 0xb4], ax
call fcn.00428800
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x68]
push 0x23
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_unidentified
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.00428800
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.004516b0
mov ecx, eax
call fcn.00453f50
lea ecx, [ebp - 0x68]
call fcn.00428770
lea ecx, [ebp - 0xb4]
call fcn.00428770
lea ecx, [ebp - 0x9c]
call fcn.00428770
lea ecx, [ebp - 0x84]
call fcn.00428770
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.00428770
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x483da8
mov eax, dword [edi]
push eax
push str.Browser__s_unidentified._Opening_URL_in_default_browser
push 0x701e7c
push 0x701e7c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x1e
call fcn.00433ac0
add esp, 0x1c
cmp dword [edi + 0x34], 0xa
jg 0x483df9
push str.Latest_Internet_Explorer_version_on_the_machine_is__d
push 0x701e7c
push 0x701e7c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x32
call fcn.00433ac0
add esp, 0x18
xor bl, bl
jmp 0x483e04
xor dl, dl
mov ecx, ebx
call fcn.005e4e20
mov bl, 1
mov eax, dword [ebp - 0x18]
push dword [eax + 4]
lea eax, [ebp - 0x18]
push eax
mov ecx, eax
call fcn.0043a420
push 0x40
push dword [ebp - 0x18]
call fcn.0063e103
mov eax, dword [ebp - 0x20]
add esp, 8
push dword [eax + 4]
lea eax, [ebp - 0x20]
push eax
mov ecx, eax
call fcn.0043a420
push 0x40
push dword [ebp - 0x20]
call fcn.0063e103
add esp, 8
lea ecx, [ebp - 0x38]
call fcn.00428770
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0063de71
mov esp, ebp
pop ebp
ret 4