Function at 0x4944a0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6dfa9f
mov eax, dword fs:[0]
push eax
sub esp, 0xac
mov eax, dword [0x82f084]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], ax
xorps xmm0, xmm0
mov dword [ebp - 4], eax
movlpd qword [ebp - 0x20], xmm0
push 0x40
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
call fcn.0067d662
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
push 0xd
xor eax, eax
mov dword [ebp - 0x40], 0
push str.webSSOBrowser
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.0042fe00
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x20]
call fcn.00440d10
cmp eax, edi
je 0x494563
cmp dword [edi + 0x14], 8
mov ecx, edi
jb 0x494558
mov ecx, dword [edi]
push dword [edi + 0x10]
push ecx
mov ecx, eax
call fcn.0042fe00
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.0042fd70
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
push 0x40
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
call fcn.0067d662
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x50]
push 0xd
xor eax, eax
mov dword [ebp - 0x40], 0
push str.consumer.name
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.0042fe00
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x18]
call fcn.00440d10
cmp eax, edi
je 0x4945f0
cmp dword [edi + 0x14], 8
mov ecx, edi
jb 0x4945e5
mov ecx, dword [edi]
push dword [edi + 0x10]
push ecx
mov ecx, eax
call fcn.0042fe00
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.0042fd70
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
push ebx
call fcn.004394d0
test al, al
je 0x494a2a
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
cmovae eax, dword [ebp - 0x38]
push eax
push str.Browser_identified._Command_is__s
push 0x75c10c
push 0x75c10c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x1e
call fcn.0043b2b0
add esp, 0x1c
lea eax, [ebp - 0x38]
cmp dword [ebp - 0x24], 8
cmovae eax, dword [ebp - 0x38]
push 0
push 0
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x6c], eax
cmp eax, 0x20
jle 0x49482f
push 0x1e
xor eax, eax
mov dword [ebp - 0x40], 0
push str.lbs_webSSO_openBrowser_success
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.0042fe00
mov byte [ebp - 4], 5
mov eax, dword [0x855a48]
test eax, eax
jne 0x4946d0
push 0xe0
call fcn.0067d662
mov esi, eax
mov dword [ebp - 0x6c], esi
push 0xe0
push 0
push esi
mov byte [ebp - 4], 6
call fcn.00690450
add esp, 0x10
mov ecx, esi
call fcn.00458830
mov byte [ebp - 4], 5
mov dword [0x855a48], eax
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x50]
push ecx
mov ecx, eax
call fcn.0045ab70
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.0042fd70
push 7
xor eax, eax
mov dword [ebp - 0x58], 0
push str.browser
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.0042fe00
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xb4]
push 0xe
xor eax, eax
mov dword [ebp - 0xa4], 0
push str.system_browser
mov dword [ebp - 0xa0], 7
mov word [ebp - 0xb4], ax
call fcn.0042fe00
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x9c]
push 6
xor eax, eax
mov dword [ebp - 0x8c], 0
push str.render
mov dword [ebp - 0x88], 7
mov word [ebp - 0x9c], ax
call fcn.0042fe00
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x84]
push 3
xor eax, eax
mov dword [ebp - 0x74], 0
push 0x76c8a4
mov dword [ebp - 0x70], 7
mov word [ebp - 0x84], ax
call fcn.0042fe00
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x50]
push 0x1e
xor eax, eax
mov dword [ebp - 0x40], 0
push str.lbs_webSSO_openBrowser_success
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.0042fe00
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.0045bbf0
mov ecx, eax
call fcn.0045e540
lea ecx, [ebp - 0x50]
call fcn.0042fd70
lea ecx, [ebp - 0x84]
call fcn.0042fd70
lea ecx, [ebp - 0x9c]
call fcn.0042fd70
lea ecx, [ebp - 0xb4]
call fcn.0042fd70
lea ecx, [ebp - 0x68]
call fcn.0042fd70
jmp 0x494c52
push 0x1f
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_fallback
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.0042fe00
mov byte [ebp - 4], 0xc
mov eax, dword [0x855a48]
test eax, eax
jne 0x494895
push 0xe0
call fcn.0067d662
mov esi, eax
mov dword [ebp - 0xb8], esi
push 0xe0
push 0
push esi
mov byte [ebp - 4], 0xd
call fcn.00690450
add esp, 0x10
mov ecx, esi
call fcn.00458830
mov byte [ebp - 4], 0xc
mov dword [0x855a48], eax
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x68]
push ecx
mov ecx, eax
call fcn.0045ab70
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0042fd70
push 0xe
xor eax, eax
mov dword [ebp - 0x40], 0
push str.system_browser
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.0042fe00
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x84]
push 0xe
xor eax, eax
mov dword [ebp - 0x74], 0
push str.system_browser
mov dword [ebp - 0x70], 7
mov word [ebp - 0x84], ax
call fcn.0042fe00
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x9c]
push 6
xor eax, eax
mov dword [ebp - 0x8c], 0
push str.render
mov dword [ebp - 0x88], 7
mov word [ebp - 0x9c], ax
call fcn.0042fe00
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb4]
push 3
xor eax, eax
mov dword [ebp - 0xa4], 0
push 0x76c8a4
mov dword [ebp - 0xa0], 7
mov word [ebp - 0xb4], ax
call fcn.0042fe00
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x68]
push 0x1f
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_fallback
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.0042fe00
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0045bbf0
mov ecx, eax
call fcn.0045e540
lea ecx, [ebp - 0x68]
call fcn.0042fd70
lea ecx, [ebp - 0xb4]
call fcn.0042fd70
lea ecx, [ebp - 0x9c]
call fcn.0042fd70
lea ecx, [ebp - 0x84]
call fcn.0042fd70
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.0042fd70
push dword [ebp - 0x6c]
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
cmovae eax, dword [ebp - 0x38]
push eax
push str.Command__s_failed_with_return_code__d._Opening_URL_in_default_browser
push 0x75c10c
push 0x75c10c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x32
call fcn.0043b2b0
add esp, 0x20
jmp 0x494c1c
push 0x23
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_unidentified
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.0042fe00
mov byte [ebp - 4], 0x13
mov eax, dword [0x855a48]
test eax, eax
jne 0x494a90
push 0xe0
call fcn.0067d662
mov esi, eax
mov dword [ebp - 0xb8], esi
push 0xe0
push 0
push esi
mov byte [ebp - 4], 0x14
call fcn.00690450
add esp, 0x10
mov ecx, esi
call fcn.00458830
mov byte [ebp - 4], 0x13
mov dword [0x855a48], eax
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x68]
push ecx
mov ecx, eax
call fcn.0045ab70
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.0042fd70
push 0x16
xor eax, eax
mov dword [ebp - 0x40], 0
push str.default_system_browser
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
call fcn.0042fe00
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x84]
push 0xe
xor eax, eax
mov dword [ebp - 0x74], 0
push str.system_browser
mov dword [ebp - 0x70], 7
mov word [ebp - 0x84], ax
call fcn.0042fe00
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x9c]
push 6
xor eax, eax
mov dword [ebp - 0x8c], 0
push str.render
mov dword [ebp - 0x88], 7
mov word [ebp - 0x9c], ax
call fcn.0042fe00
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xb4]
push 3
xor eax, eax
mov dword [ebp - 0xa4], 0
push 0x76c8a4
mov dword [ebp - 0xa0], 7
mov word [ebp - 0xb4], ax
call fcn.0042fe00
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x68]
push 0x23
xor eax, eax
mov dword [ebp - 0x58], 0
push str.lbs_webSSO_openBrowser_unidentified
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.0042fe00
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0045bbf0
mov ecx, eax
call fcn.0045e540
lea ecx, [ebp - 0x68]
call fcn.0042fd70
lea ecx, [ebp - 0xb4]
call fcn.0042fd70
lea ecx, [ebp - 0x9c]
call fcn.0042fd70
lea ecx, [ebp - 0x84]
call fcn.0042fd70
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.0042fd70
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x494bf8
mov eax, dword [edi]
push eax
push str.Browser__s_unidentified._Opening_URL_in_default_browser
push 0x75c10c
push 0x75c10c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x1e
call fcn.0043b2b0
add esp, 0x1c
cmp dword [edi + 0x34], 0xa
jg 0x494c49
push str.Latest_Internet_Explorer_version_on_the_machine_is__d
push 0x75c10c
push 0x75c10c
push str.openUrlInExternalBrowser
push str.WAMB
push 0x32
call fcn.0043b2b0
add esp, 0x18
xor bl, bl
jmp 0x494c54
xor dl, dl
mov ecx, ebx
call fcn.0061a5f0
mov bl, 1
mov eax, dword [ebp - 0x18]
push dword [eax + 4]
lea eax, [ebp - 0x18]
push eax
mov ecx, eax
call fcn.00442110
push 0x40
push dword [ebp - 0x18]
call fcn.0067d8e3
mov eax, dword [ebp - 0x20]
add esp, 8
push dword [eax + 4]
lea eax, [ebp - 0x20]
push eax
mov ecx, eax
call fcn.00442110
push 0x40
push dword [ebp - 0x20]
call fcn.0067d8e3
add esp, 8
lea ecx, [ebp - 0x38]
call fcn.0042fd70
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0067d651
mov esp, ebp
pop ebp
ret 4