Function at 0x409750
Capabilities:
Check if file exists
Check mutex on windows
Create process on windows
Delete file
Download url
Get common file path
Get file version info
Get session user name
Receive data
Reference http user-agent string
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x469a20
mov eax, dword fs:[0]
push eax
mov eax, 0x66a8
call fcn.00444d50
mov eax, dword [0x4ca578]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0x14]
push 0x100
mov dword [0x504e48], edi
mov dword [0x504e4c], esi
mov dword [ebp - 0x6668], 0x200
mov dword [ebp - 0x6664], 1
mov dword [0x51b560], 0
call fcn.0043f960
push 0x1ffe
mov dword [0x51b564], eax
lea eax, [ebp - 0x6648]
push 0
push eax
call fcn.00447700
add esp, 0x10
mov dword [0x506054], 0
lea ecx, [ebp - 0x6660]
mov dword [0x506058], 0
mov dword [0x504e50], 0
mov dword [0x5120a0], 0
push 0x16
push str.ITSSecureECLiteBrowser
mov dword [0x5120a4], 0
mov dword [0x5420dc], 0
mov dword [0x504e54], 0
mov dword [ebp - 0x6670], 0
mov dword [0x506060], esi
mov dword [ebp - 0x6660], 0
mov dword [ebp - 0x6650], 0
mov dword [ebp - 0x664c], 7
call fcn.00409630
xor esi, esi
nop
push esi
call fcn.004538e0
push esi
call fcn.004538e0
inc esi
add esp, 8
cmp esi, 0x100
jl 0x409860
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
test eax, eax
jne 0x40c63a
cmp dword [ebp - 0x664c], 8
lea eax, [ebp - 0x6660]
cmovae eax, dword [ebp - 0x6660]
push eax
call dword [sym.imp.SHELL32.dll_SetCurrentProcessExplicitAppUserModelID]
push str.User32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call fcn.0045468d
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [eax], 1
jle 0x40a226
mov esi, 1
call fcn.0045468d
cmp dword [eax], esi
jle 0x40a226
cmp esi, 1
jne 0x4098f7
call fcn.00454693
mov eax, dword [eax]
push dword [eax + esi*4]
push 0x1ffe
push 0x506068
call fcn.0044a958
add esp, 0xc
jmp 0x409927
push 0x46da80
push 0x1ffe
push 0x506068
call fcn.0044a9b2
call fcn.00454693
mov eax, dword [eax]
push dword [eax + esi*4]
push 0x1ffe
push 0x506068
call fcn.0044a9b2
add esp, 0x18
call fcn.00454693
push 4
push 0x46da84
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x409965
call fcn.00454693
push 4
push 0x46da8c
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
jne 0x409aed
call fcn.00454693
mov eax, dword [eax]
mov ecx, dword [eax + esi*4]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409972
sub ecx, edx
cmp ecx, 4
jbe 0x409aed
call fcn.00454693
mov eax, dword [eax]
mov eax, dword [eax + esi*4]
add eax, 4
push eax
push 0x800
push 0x5052d8
call fcn.0044a958
push 7
push 0x46da94
push 0x5052d8
call fcn.004536ea
add esp, 0x18
test eax, eax
je 0x409ade
push 8
push 0x46da9c
push 0x5052d8
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x409ade
push 0x46daa8
push 0x5052d8
call fcn.004548af
add esp, 8
test eax, eax
je 0x409a3c
sub eax, 0x5052d8
add eax, 4
push eax
push 0x5052d8
lea eax, [ebp - 0x52c]
push 0x400
push eax
call fcn.00454892
lea ecx, [ebp - 0x52c]
add esp, 0x10
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409a20
push 0x400
lea eax, [ebp - 0x1240]
push eax
push 8
push 0x46da9c
jmp 0x409a9b
push 0x46dab0
push 0x5052d8
call fcn.004548af
add esp, 8
test eax, eax
je 0x409ade
sub eax, 0x5052d8
add eax, 3
push eax
push 0x5052d8
lea eax, [ebp - 0x52c]
push 0x400
push eax
call fcn.00454892
lea ecx, [ebp - 0x52c]
add esp, 0x10
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409a81
push 0x400
lea eax, [ebp - 0x1240]
push eax
push 7
push 0x46da94
sub ecx, edx
lea eax, [ebp - 0x52c]
push ecx
push eax
push 0x400
push 0x5052d8
mov ecx, 0x5420e0
call fcn.00441360
lea eax, [ebp - 0x1240]
push eax
push 0x400
push 0x5052d8
call fcn.0044a958
lea eax, [ebp - 0x1240]
push eax
call fcn.0044aae4
add esp, 0x10
mov dword [0x512084], 1
jmp 0x40a218
call fcn.00454693
push 4
push 0x46dab4
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x40a1c2
call fcn.00454693
push 4
push 0x46dabc
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x40a1c2
call fcn.00454693
push 9
push 0x46dac4
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x40a170
call fcn.00454693
push 9
push 0x46dad0
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x40a170
call fcn.00454693
push 8
push 0x46dadc
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x40a161
call fcn.00454693
push 8
push 0x46dae8
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x40a161
call fcn.00454693
push 0x10
push 0x46daf4
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x40a120
call fcn.00454693
push 0x10
push 0x46db08
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x40a120
call fcn.00454693
push 7
push 0x46db1c
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x40a06e
call fcn.00454693
push 7
push 0x46db24
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x40a06e
call fcn.00454693
push 0x10
push 0x46db2c
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x40a01f
call fcn.00454693
push 0x10
push 0x46db40
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x40a01f
call fcn.00454693
push 0xb
push 0x46db54
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x409fd4
call fcn.00454693
push 0xc
push 0x46db64
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x409fd4
call fcn.00454693
push 0x14
push 0x46db74
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x409f8f
call fcn.00454693
push 0x14
push str._SBPathForadminLaunch
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x409f8f
call fcn.00454693
push 8
push 0x46dba4
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x409f44
call fcn.00454693
push 8
push 0x46dbb0
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x409f44
call fcn.00454693
push 7
push 0x46dbbc
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x409f03
call fcn.00454693
push 7
push str._params
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x409f03
call fcn.00454693
push 0x13
push 0x46dbcc
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x409e58
call fcn.00454693
push 0x13
push str._LauncherDeleteOnly
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x409e58
call fcn.00454693
push 0xf
push 0x46dc4c
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
je 0x409e01
call fcn.00454693
push 0xf
push str._LauncherDelete
mov eax, dword [eax]
push dword [eax + esi*4]
call fcn.004536ea
add esp, 0xc
test eax, eax
jne 0x40a218
call fcn.00454693
mov eax, dword [eax]
mov ecx, dword [eax + esi*4]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409e10
sub ecx, edx
cmp ecx, 0xf
jbe 0x40a218
call fcn.00454693
mov eax, dword [eax]
mov eax, dword [eax + esi*4]
add eax, 0xf
push eax
push 0x104
push 0x53e8dc
call fcn.0044a958
add esp, 0xc
push 0x53e8dc
call ebx
mov dword [0x53e8d8], 0
jmp 0x40a218
call fcn.00454693
mov eax, dword [eax]
mov ecx, dword [eax + esi*4]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409e65
sub ecx, edx
cmp ecx, 0x13
jbe 0x40a218
call fcn.00454693
mov eax, dword [eax]
mov eax, dword [eax + esi*4]
add eax, 0x13
push eax
push 0x104
push 0x53e8dc
call fcn.0044a958
add esp, 0xc
push 0x53e8dc
call ebx
push str.A_shortcut_for_the_Secure_Browser_has_been_created_on_the_desktop
push 0x46dc3c
mov ecx, 0x511bf0
mov dword [0x53e8d8], 0
call fcn.00418f80
mov edx, dword [ebp - 0x664c]
cmp edx, 8
jb 0x409efc
mov ecx, dword [ebp - 0x6660]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x409ef2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c6c4
push edx
push ecx
call fcn.00444ae6
add esp, 8
xor eax, eax
jmp 0x40c6a6
call fcn.00454693
mov eax, dword [eax]
mov ecx, dword [eax + esi*4]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409f10
sub ecx, edx
cmp ecx, 7
jbe 0x40a218
call fcn.00454693
mov eax, dword [eax]
mov eax, dword [eax + esi*4]
add eax, 7
push eax
push 0x1000
push 0x53d414
call fcn.0044a958
jmp 0x40a215
call fcn.00454693
mov eax, dword [eax]
mov ecx, dword [eax + esi*4]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409f51
sub ecx, edx
cmp ecx, 8
jbe 0x40a218
call fcn.00454693
mov eax, dword [eax]
mov eax, dword [eax + esi*4]
add eax, 8
push eax
push 0x104
push 0x51d734
call fcn.0044a958
mov dword [0x51d730], 1
jmp 0x40a215
call fcn.00454693
mov eax, dword [eax]
mov ecx, dword [eax + esi*4]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409fa0
sub ecx, edx
cmp ecx, 0x15
jbe 0x40a218
call fcn.00454693
mov eax, dword [eax]
mov eax, dword [eax + esi*4]
add eax, 0x15
push eax
push 0x104
push 0x50f098
call fcn.0044a958
jmp 0x40a215
call fcn.00454693
mov eax, dword [eax]
mov ecx, dword [eax + esi*4]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409fe1
sub ecx, edx
cmp ecx, 0xc
jbe 0x40a218
call fcn.00454693
mov eax, dword [eax]
mov eax, dword [eax + esi*4]
add eax, 9
push eax
push 0x104
push 0x50ce88
call fcn.0044a958
mov dword [0x50ce84], 1
jmp 0x40a215
call fcn.00454693
mov eax, dword [eax]
mov ecx, dword [eax + esi*4]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a030
sub ecx, edx
cmp ecx, 0x10
jbe 0x40a218
call fcn.00454693
mov eax, dword [eax]
mov eax, dword [eax + esi*4]
add eax, 0x10
push eax
push 0x104
push 0x53e414
call fcn.0044a958
mov dword [0x50ce80], 1
jmp 0x40a215
call fcn.00454693
mov eax, dword [eax]
mov ecx, dword [eax + esi*4]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a080
sub ecx, edx
cmp ecx, 7
jbe 0x40a218
call fcn.00454693
mov eax, dword [eax]
mov eax, dword [eax + esi*4]
add eax, 7
push eax
lea eax, [ebp - 0x230]
push 0x104
push eax
call fcn.0044a958
add esp, 0xc
lea eax, [ebp - 0x230]
push eax
call fcn.00408680
add esp, 4
test eax, eax
je 0x40a0b4
push 0
mov ecx, 0x511bf0
mov dword [0x51d838], 0
call fcn.00419740
mov edx, dword [ebp - 0x664c]
cmp edx, 8
jb 0x409efc
mov ecx, dword [ebp - 0x6660]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x409ef2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c6c4
jmp 0x409ef2
call fcn.00454693
mov eax, dword [eax]
mov ecx, dword [eax + esi*4]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a130
sub ecx, edx
cmp ecx, 0x10
jbe 0x40a218
call fcn.00454693
mov eax, dword [eax]
mov eax, dword [eax + esi*4]
add eax, 0x10
push eax
push 0x64
push 0x516690
call fcn.0044a958
jmp 0x40a215
mov dword [ebp - 0x6664], 0
jmp 0x40a218
mov dword [0x512098], 1
call fcn.00454693
mov eax, dword [eax]
mov ecx, dword [eax + esi*4]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a187
sub ecx, edx
cmp ecx, 9
jbe 0x40a218
call fcn.00454693
mov eax, dword [eax]
mov eax, dword [eax + esi*4]
add eax, 9
push eax
push 0x104
push 0x513cb0
call fcn.0044a958
mov dword [0x51208c], 1
jmp 0x40a215
mov dword [0x512094], 1
call fcn.00454693
mov eax, dword [eax]
mov ecx, dword [eax + esi*4]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a1e0
sub ecx, edx
cmp ecx, 4
jbe 0x40a218
call fcn.00454693
mov eax, dword [eax]
mov eax, dword [eax + esi*4]
add eax, 4
push eax
push 0x104
push 0x514f34
call fcn.0044a958
mov dword [0x512090], 1
add esp, 0xc
inc esi
call fcn.0045468d
cmp esi, dword [eax]
jl 0x4098d4
push 0x80
push 0x505b98
mov ecx, 0x4981a8
call fcn.0040e790
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x104
push 0x51c2dc
push edi
call esi
push 0x51c2dc
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
push eax
push 0x104
push 0x50ee88
call fcn.00407d80
add esp, 0xc
lea eax, [ebp - 0x66b4]
push eax
push 0x51c2dc
call sub.VERSION.dll_GetFileVersionInfoSizeA
push eax
push 0x2040
mov dword [ebp - 0x6668], eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ebx, eax
push ebx
push dword [ebp - 0x6668]
mov dword [ebp - 0x18], ebx
push 0
push 0x51c2dc
call sub.VERSION.dll_GetFileVersionInfoA
lea eax, [ebp - 0x6668]
push eax
lea eax, [ebp - 0x6674]
push eax
push 0x46d7e0
push ebx
call sub.VERSION.dll_VerQueryValueA
mov ecx, dword [ebp - 0x6674]
movzx eax, word [ecx + 0x14]
push eax
movzx eax, word [ecx + 0x16]
push eax
movzx eax, word [ecx + 0x10]
push eax
movzx eax, word [ecx + 0x12]
push eax
push 0x46dc6c
push 0x514ab4
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov dword [0x50573c], edi
lea eax, [ebp - 0x630]
push 0x104
push eax
push 0
call esi
lea eax, [ebp - 0x734]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x734]
lea ecx, [ecx + 1]
mov byte [ecx + 0x50f19f], al
test al, al
jne 0x40a320
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x630]
lea ecx, [ecx + 1]
mov byte [ecx + 0x50f2a3], al
test al, al
jne 0x40a340
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x630]
lea ecx, [ecx + 1]
mov byte [ecx + 0x53e59f], al
test al, al
jne 0x40a360
mov ebx, dword [sym.imp.SHELL32.dll_ShellExecuteExA]
xor eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x50f19c], 0
nop dword [eax]
nop word [eax + eax]
imul eax, eax, 0x104
mov ecx, 0x511be0
add eax, 0x50f1a0
push eax
push 0x104
push 0x5119c0
call fcn.00410710
mov eax, dword [0x51b580]
xorps xmm0, xmm0
mov dword [ebp - 0x66a8], eax
lea eax, [ebp - 0x66b0]
push eax
movlpd qword [ebp - 0x668c], xmm0
movlpd qword [ebp - 0x6684], xmm0
movlpd qword [ebp - 0x667c], xmm0
mov dword [ebp - 0x66b0], 0x3c
mov dword [ebp - 0x66ac], 0x400
mov dword [ebp - 0x66a4], 0
mov dword [ebp - 0x66a0], 0x5119c0
mov dword [ebp - 0x669c], 0x46d520
mov dword [ebp - 0x6698], 0
mov dword [ebp - 0x6694], 5
mov dword [ebp - 0x6690], 0
call ebx
push 0xffffffffffffffff
push dword [ebp - 0x6678]
call esi
push dword [ebp - 0x6678]
call edi
mov ecx, 0x511bf0
call fcn.00419690
test eax, eax
jne 0x40a4fc
mov eax, dword [0x50f19c]
inc dword [0x50f4ac]
inc eax
mov dword [0x50f19c], eax
cmp eax, 3
jl 0x40a3a0
push 0x51c2dc
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
push 0x51c2dc
lea eax, [ebp - 0x734]
mov ecx, 0x511bf0
push eax
push str._SBLocation_
push str._tempLocation_
push str.You_do_not_have_write_and_execute_permissions_to_at_least_one_of_the_following_folders._To_use_this_application__you_must_have_write_execute_access._r_n_tempLocation__r_n_or__r_n_SBLocation_.
push str.NoFolderAccess
call fcn.00419110
mov edx, dword [ebp - 0x664c]
cmp edx, 8
jb 0x40a4f2
mov ecx, dword [ebp - 0x6660]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40a4e8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c6c4
push edx
push ecx
call fcn.00444ae6
add esp, 8
mov eax, 0xb
jmp 0x40c6a6
imul eax, dword [0x50f19c], 0x104
mov edx, 0x53e5a0
lea ecx, [eax + 0x50f1a0]
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [ecx + edx - 1], al
test al, al
jne 0x40a513
mov edi, dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push 0
push 0
push 0x5119c0
push 0x46dd64
push 0
call edi
push 0x53e5a0
push 0x514ab4
push 0x104
lea eax, [ebp - 0x838]
mov ecx, 0x511be0
push eax
call fcn.00410ae0
lea eax, [ebp - 0x838]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x504e50], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 1
push dword [0x504e50]
call fcn.004406c0
push 0x46e930
push dword [0x504e50]
call fcn.00440eb0
push 0x46e948
push dword [0x504e50]
call fcn.00440eb0
push 0x46e9ec
push dword [0x504e50]
call fcn.00440eb0
add esp, 0x20
xor ecx, ecx
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x838]
lea ecx, [ecx + 1]
mov byte [ecx + 0x511ac7], al
test al, al
jne 0x40a5c0
push 0x104
lea eax, [ebp - 0x1648]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x1648]
mov ecx, 0x511bf0
push eax
call fcn.00416200
mov dword [0x5119bc], eax
mov ecx, 0x511bf0
test eax, eax
jne 0x40a616
call fcn.00419690
call fcn.00408360
jmp 0x409ebc
push 0x51ccdc
call fcn.00414860
push 0x53e5a0
push 0x104
push 0x51d5b0
mov ecx, 0x511be0
call fcn.0040fd50
call sub.KERNEL32.dll_GetCurrentProcessId
push 0x80
mov ebx, eax
mov ecx, 0x4d2e1c
push 0x505c18
mov dword [ebp - 0x666c], ebx
call fcn.004079d0
push 0x50ee88
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
jne 0x40c617
push 0x50ee88
push 1
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov ecx, 0x4981a8
call fcn.0040ecb0
push 0x200
lea eax, [ebp - 0x3e48]
push eax
push dword [0x504e50]
call fcn.004406e0
mov dword [0x50c274], eax
lea eax, [ebp - 0x4248]
push 0x200
push eax
push dword [0x504e50]
call fcn.00440760
mov dword [0x50ce78], eax
lea eax, [ebp - 0x4648]
push 0x200
push eax
push dword [0x504e50]
call fcn.00440710
push 0x200
push 0x51b64c
push ebx
push dword [0x504e50]
mov dword [0x50ce7c], eax
call fcn.00440810
add esp, 0x34
mov ecx, 0x5420e0
call fcn.004414e0
push ebx
push 0x46ddb4
push dword [0x504e50]
call fcn.00440eb0
push 0x514ab4
push 0x46ddd4
push dword [0x504e50]
call fcn.00440eb0
call fcn.00409130
push dword [0x50580c]
push dword [0x505810]
push dword [0x5057a4]
push 0x46ddf0
push 0x80
push 0x505818
call fcn.00407d80
push 0x505818
push 0x46ddfc
push dword [0x504e50]
call fcn.00440eb0
push 0x46de0c
push dword [0x504e50]
call fcn.00440eb0
add esp, 0x44
push 0x10
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push eax
push dword [0x504e50]
mov dword [0x505814], eax
call fcn.004407d0
push str.before_MAC_Address
push dword [0x504e50]
call fcn.00440eb0
add esp, 0x10
lea eax, [ebp - 0x1440]
push 0
push 0
push 0x200
push eax
mov eax, dword [0x505814]
push 0xffffffffffffffff
push dword [eax + 8]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push dword [0x505814]
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalFree]
call ebx
lea eax, [ebp - 0x1440]
push eax
push 0x46de40
push dword [0x504e50]
call fcn.00440eb0
push str.after_MAC_Address
push dword [0x504e50]
call fcn.00440eb0
push 0x200
lea eax, [ebp - 0xe40]
push eax
push dword [0x504e50]
call fcn.00440740
lea eax, [ebp - 0xe40]
push eax
push 0x46de68
push dword [0x504e50]
call fcn.00440eb0
push dword [0x504e50]
call fcn.00440f10
test eax, eax
mov edx, 0x46d520
mov ecx, 0x46de80
push 0x28
cmove ecx, edx
push ecx
push 0x28
push 0x506018
call fcn.0044aace
add esp, 0x40
push 0x505898
push 0x46de88
push dword [0x504e50]
call fcn.00440eb0
add esp, 0xc
lea eax, [ebp - 0x6668]
push eax
lea eax, [ebp - 0xc40]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea eax, [ebp - 0xc40]
push eax
push 0x46dea0
push dword [0x504e50]
call fcn.00440eb0
add esp, 0xc
push dword [ebp - 0x18]
call ebx
mov ecx, 0x511be0
call fcn.0040f830
mov ecx, 0x504e40
mov dword [0x512030], eax
call fcn.00407e50
push 0x53e6a8
mov ecx, 0x511bf0
mov dword [0x511ff8], eax
call fcn.00414740
mov ecx, 0x511bf0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a8e0
sub ecx, edx
jne 0x40a91c
push 0x400
push 0x511bf0
push str.UPDATEURL
push 0x94
mov ecx, 0x511be0
call fcn.00410320
push 0x46dec0
push dword [0x504e50]
call fcn.00440eb0
add esp, 8
mov ecx, 0x511bf0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a924
mov eax, dword [0x512044]
sub ecx, edx
push 0x400
xor edx, edx
test ecx, ecx
push 0x515e2c
push str.ERRORURL
cmovne eax, edx
mov ecx, 0x511be0
push 0xa1
mov dword [0x512044], eax
call fcn.00410320
mov ecx, 0x511bf0
call fcn.004146e0
push eax
push 0x46def4
push 0x64
push 0x516884
call fcn.00407d80
push 0x516884
push dword [0x504e50]
call fcn.00440eb0
add esp, 0x18
mov ecx, 0x4d2e1c
push 0x515038
call fcn.004077e0
push eax
push 0x46df04
push 0x64
push 0x516820
call fcn.00407d80
push 0x516820
push dword [0x504e50]
call fcn.00440eb0
add esp, 0x18
mov ecx, 0x4d2e1c
push 0x51509c
call fcn.004077a0
push eax
push 0x46df18
push 0x64
push 0x516758
call fcn.00407d80
push 0x516758
push dword [0x504e50]
call fcn.00440eb0
push 0x64
push 1
call fcn.0044aad9
add esp, 0x20
mov dword [0x4d2e1c], eax
mov ecx, 0x511be0
call fcn.0040f4f0
push str.After_extracting_institution_Id
push dword [0x504e50]
mov dword [0x51b56c], eax
call fcn.00440eb0
push dword [0x51b56c]
push 0x46d754
push 0x64
push dword [0x4d2e1c]
call fcn.00407d80
add esp, 0x18
mov ecx, 0x4d2e1c
call fcn.004078c0
push eax
push 0x46df48
push 0x64
push 0x5167bc
call fcn.00407d80
add esp, 0x10
mov ecx, 0x4d2e1c
call fcn.004078c0
push eax
push 0x46df48
push 0x64
push 0x5151c8
call fcn.00407d80
add esp, 0x10
mov ecx, 0x4d2e1c
push 0x515164
call fcn.00407920
push eax
push 0x46df5c
push 0x64
push 0x515100
call fcn.00407d80
add esp, 0x10
cmp dword [0x512044], 0
je 0x40aaef
push 0x400
push 0x504ed8
push 0x46df68
push 0x75
mov ecx, 0x511be0
call fcn.00410320
push str.local_configuration
push dword [0x504e50]
call fcn.00440eb0
add esp, 8
mov ecx, 0x511be0
push 0x400
push 0x514b34
push str.ALTURL
push 0x7c
call fcn.00410320
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x405
push dword [0x506064]
call ebx
mov ecx, 0x4981a8
call fcn.0040eae0
mov ecx, 0x4981a8
call fcn.0040eec0
push dword [0x504e50]
call fcn.00440a60
add esp, 4
test eax, eax
je 0x40ab4a
mov ecx, 0x4981a8
call fcn.0040eb60
mov ecx, 0x4981a8
call fcn.0040ea50
mov ecx, 0x4981a8
call fcn.0040ef50
push 0
push 0
push 0x405
push dword [0x506064]
call ebx
cmp dword [0x512044], 0
jne 0x40abe5
push 0
push 0
push 0x405
push dword [0x506064]
call ebx
mov ecx, 0x511bf0
call fcn.004137e0
push 0
push 0x505a9c
push 0
call sub.urlmon.dll_CoInternetCreateZoneManager
test eax, eax
js 0x40abd9
push 0
push 0
push 0x405
push dword [0x506064]
call ebx
push 0
push 0x5141b4
push 0x511bf0
mov ecx, 0x5420e8
call fcn.00444290
mov ecx, 0x511bf0
call fcn.004120e0
push 0
push 0
push 0x405
push dword [0x506064]
call ebx
jmp 0x40abef
mov dword [ebp - 0x6670], 1
jmp 0x40abef
mov ecx, 0x511bf0
call fcn.00416f80
mov eax, dword [0x53e8d8]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x40ac0a
push 0x53e8dc
call esi
mov dword [0x53e8d8], eax
cmp dword [0x512088], 0
jne 0x40c5be
push 0
push 0
push 0x405
push dword [0x506064]
call ebx
cmp dword [0x511ff4], 0
jne 0x40ac81
cmp dword [0x511ff8], 0
jne 0x40ac81
push 0x46e888
push 0x46e8f4
mov ecx, 0x511bf0
call fcn.00418f80
push dword [0x51b564]
call fcn.0043f7c0
add esp, 4
mov dword [0x51d838], 8
mov ecx, 0x511bf0
mov dword [0x506050], 1
push 8
call fcn.00419740
jmp 0x40c56d
cmp dword [ebp - 0x6664], 0
je 0x40acab
push 0x514a34
push 0x5149b4
push 0x514ab4
mov ecx, 0x511bf0
call fcn.00414920
test eax, eax
jne 0x40bf76
cmp dword [0x504e50], 0
mov dword [ebp - 0x6664], 0
je 0x40bf76
cmp dword [0x512044], 0
je 0x40acee
mov ecx, 0x511be0
call fcn.00410080
push eax
push str.sBrowserEngineId_from_Local_Config____d
push dword [0x504e50]
mov dword [0x53e518], eax
call fcn.00440eb0
add esp, 0xc
mov eax, dword [0x53e518]
cmp eax, 1
jne 0x40ae9a
mov ecx, 0x511bf0
call fcn.00419690
push 0x506068
push 0x1ffe
push 0x50f4b0
call fcn.0044a958
push 0x53e5a0
push dword [0x512044]
push 0x104
push 0x5114b0
call fcn.004088a0
push 0x5114b0
push str.ExtractSB____s
push dword [0x504e50]
call fcn.00440eb0
push 0x5114b0
lea eax, [ebp - 0x12c]
push 0x104
push eax
call fcn.0044a958
add esp, 0x34
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
push 0x46d7e0
lea eax, [ebp - 0x12c]
push 0x104
push eax
call fcn.0044a9b2
push 0x46dfc0
lea eax, [ebp - 0x12c]
push 0x104
push eax
call fcn.0044a9b2
add esp, 0x18
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x40adca
push 0x53e5a0
push 0x104
lea eax, [ebp - 0x12c]
mov ecx, 0x511be0
push eax
call fcn.00410710
push 1
push 0
push 0
lea eax, [ebp - 0x12c]
push eax
push 0x46dd64
push 0
call edi
push str.__updateUrl_
push 0x1ffe
push 0x50f4b0
call fcn.0044a9b2
push 0x51be58
push 0x1ffe
push 0x50f4b0
call fcn.0044a9b2
push str.___filePath_
push 0x1ffe
push 0x50f4b0
call fcn.0044a9b2
push 0x51c2dc
push 0x1ffe
push 0x50f4b0
call fcn.0044a9b2
push 0x46dff8
push 0x1ffe
push 0x50f4b0
call fcn.0044a9b2
add esp, 0x3c
push 1
push 0
push 0x50f4b0
push 0x5114b0
push 0x46dd64
push 0
call edi
push 0x5114b0
push str.After_shell_execute_SB_lite____s
push dword [0x504e50]
call fcn.00440eb0
add esp, 0xc
cmp dword [0x53e8d8], 0
jne 0x40ae8b
push 0x53e8dc
call esi
mov dword [0x53e8d8], eax
mov ecx, 0x511bf0
call fcn.004118f0
jmp 0x40b2b8
cmp eax, 4
je 0x40aea8
cmp eax, 5
jne 0x40b302
call fcn.00408a00
test eax, eax
jne 0x40b302
cmp dword [0x53e518], 4
mov ecx, 0x511bf0
jne 0x40b10f
push str.Installation_Required__The_Secure_Browser_requires_that_Microsoft_Edge_Runtime_be_installed_on_this_device._This_installation_will_require_administrative_privileges._Click_OK_to_exit_the_Secure_Browser_and_proceed_with_the_installation.
push str.EdgeInstallerRequest
call fcn.00418bd0
test eax, eax
je 0x40b07f
xor esi, esi
push esi
push esi
push str..MicrosoftEdgeWebview2Setup.exe
push str.https:__go.microsoft.com_fwlink_p__LinkId2124703
push esi
mov dword [ebp - 0x6664], esi
call sub.urlmon.dll_URLDownloadToFileA
test eax, eax
jne 0x40afc9
xorps xmm0, xmm0
mov dword [ebp - 0x66b0], 0x3c
lea eax, [ebp - 0x66b0]
movlpd qword [ebp - 0x668c], xmm0
push eax
movlpd qword [ebp - 0x6684], xmm0
movlpd qword [ebp - 0x667c], xmm0
mov dword [ebp - 0x66ac], 0x100
mov dword [ebp - 0x66a8], esi
mov dword [ebp - 0x66a4], 0x46ecac
mov dword [ebp - 0x66a0], str.MicrosoftEdgeWebview2Setup.exe
mov dword [ebp - 0x669c], str.__silent__install
mov dword [ebp - 0x6698], esi
mov dword [ebp - 0x6694], esi
mov dword [ebp - 0x6690], esi
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
je 0x40afc9
mov edi, dword [ebp - 0x6664]
test edi, edi
je 0x40afa0
mov dword [ebp - 4], esi
call dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
mov esi, eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x6664]
mov dword [ebp - 0x6664], 0
push eax
push 0
call fcn.004015e0
mov edi, dword [ebp - 0x6664]
test edi, edi
je 0x40afa0
mov esi, 1
jmp 0x40afcf
mov edi, dword [ebp - 0x6664]
test edi, edi
je 0x40afe8
push edi
mov dword [ebp - 4], 1
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 4], 0xffffffff
test esi, esi
jne 0x40b302
push str.The_installation_failed._Administrative_privileges_are_required_to_complete_the_installation.
push str.EdgeInstallerFailed
mov ecx, 0x511bf0
call fcn.00418f80
mov ecx, 0x511bf0
call fcn.00419690
mov eax, dword [0x4980a0]
mov ecx, 0x511bf0
push eax
mov dword [0x51d838], eax
call fcn.00419740
call fcn.00408360
mov ecx, 0x511bf0
call fcn.004118f0
mov edx, dword [ebp - 0x664c]
mov esi, dword [0x4980a0]
cmp edx, 8
jb 0x40b078
mov ecx, dword [ebp - 0x6660]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b06e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c6c4
push edx
push ecx
call fcn.00444ae6
add esp, 8
mov eax, esi
jmp 0x40c6a6
mov ecx, 0x511bf0
call fcn.00419690
mov eax, dword [0x4980a0]
mov ecx, 0x511bf0
push eax
mov dword [0x51d838], eax
call fcn.00419740
mov ecx, 0x511bf0
call fcn.004118f0
call fcn.00408360
cmp dword [0x53e8d8], 0
jne 0x40b0c2
push 0x53e8dc
call esi
mov dword [0x53e8d8], eax
mov edx, dword [ebp - 0x664c]
mov esi, dword [0x4980a0]
cmp edx, 8
jb 0x40b078
mov ecx, dword [ebp - 0x6660]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b0fe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c6c4
push edx
push ecx
call fcn.00444ae6
add esp, 8
mov eax, esi
jmp 0x40c6a6
call fcn.00419690
push 0x506068
push 0x1ffe
push 0x50f4b0
call fcn.0044a958
push 0x5114b0
push str.BeforeExtractSB____s
push dword [0x504e50]
call fcn.00440eb0
push 0x53e5a0
push dword [0x512044]
push 0x104
push 0x5114b0
call fcn.004088a0
push 0x5114b0
push str.ExtractSB____s
push dword [0x504e50]
call fcn.00440eb0
push 0x5114b0
lea eax, [ebp - 0x12c]
push 0x104
push eax
call fcn.0044a958
add esp, 0x40
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
push 0x46d7e0
lea eax, [ebp - 0x12c]
push 0x104
push eax
call fcn.0044a9b2
push 0x46dfc0
lea eax, [ebp - 0x12c]
push 0x104
push eax
call fcn.0044a9b2
add esp, 0x18
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x40b1ed
push 0x53e5a0
push 0x104
lea eax, [ebp - 0x12c]
mov ecx, 0x511be0
push eax
call fcn.00410710
push 1
push 0
push 0
lea eax, [ebp - 0x12c]
push eax
push 0x46dd64
push 0
call edi
push str.__updateUrl_
push 0x1ffe
push 0x50f4b0
call fcn.0044a9b2
push 0x51be58
push 0x1ffe
push 0x50f4b0
call fcn.0044a9b2
push str.___filePath_
push 0x1ffe
push 0x50f4b0
call fcn.0044a9b2
push 0x51c2dc
push 0x1ffe
push 0x50f4b0
call fcn.0044a9b2
push 0x46dff8
push 0x1ffe
push 0x50f4b0
call fcn.0044a9b2
add esp, 0x3c
push 1
push 0
push 0x50f4b0
push 0x5114b0
push 0x46dd64
push 0
call edi
push 0x5114b0
push str.After_shell_execute_SB_lite____s
push dword [0x504e50]
call fcn.00440eb0
add esp, 0xc
mov ecx, 0x511bf0
call fcn.004118f0
cmp dword [0x53e8d8], 0
jne 0x40b2b8
push 0x53e8dc
call esi
mov dword [0x53e8d8], eax
mov edx, dword [ebp - 0x664c]
cmp edx, 8
jb 0x40b2f8
mov ecx, dword [ebp - 0x6660]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b2ee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c6c4
push edx
push ecx
call fcn.00444ae6
add esp, 8
mov eax, 2
jmp 0x40c6a6
push 0x53e5a0
mov ecx, 0x511be0
call fcn.004108f0
push 0x100
call fcn.00444d7b
add esp, 4
mov dword [ebp - 0x18], eax
test eax, eax
je 0x40b38f
sub esp, 0x28
mov ecx, esp
push 0
push 0
push 0xffffffffffffffff
push 0x46e1b4
push 0
push 3
mov dword [ecx + 0x24], 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov edi, eax
lea ecx, [edi - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov esi, eax
test esi, esi
je 0x40b37a
push edi
push esi
push 0xffffffffffffffff
push 0x46e1b4
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, edi
je 0x40b37a
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
xor esi, esi
push 0
sub esp, 0x18
mov ecx, esp
push esi
call fcn.00407fc0
mov ecx, dword [ebp - 0x18]
call fcn.0041a510
cmp dword [0x511bd4], 0
mov edi, dword [0x51b580]
jne 0x40b3d9
push 0x46edc0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
je 0x40b3d9
push 0x46edcc
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x40b3ce
push 0
push edi
call eax
mov dword [0x511bd4], 1
mov edi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
push esi
call edi
jmp 0x40b3df
mov edi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, 0x4981a8
call fcn.0040e720
cmp dword [0x498390], 1
jne 0x40b48a
lea eax, [ebp - 0x230]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x40b48a
push str.ITSAutomation.log
lea eax, [ebp - 0x230]
push 0x104
push eax
call fcn.0044a9b2
add esp, 0xc
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [ebp - 0x230]
mov ecx, 0x511bf0
push eax
call fcn.00411ec0
push 0x46e1d4
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x6664]
push eax
call fcn.00454750
add esp, 0xc
test eax, eax
jne 0x40b48a
push dword [0x51b580]
push 0x46e1d8
push dword [ebp - 0x6664]
call fcn.0040c6d0
push dword [ebp - 0x6664]
call fcn.0045480e
add esp, 0x10
push str.Before_checking_VM
push dword [0x504e50]
call fcn.00440eb0
add esp, 8
push 0
push 0
push 0x405
push dword [0x506064]
call ebx
push 0x64
push 0x505aa0
push dword [0x504e50]
call fcn.00440a30
push str.After_checking_VM
push dword [0x504e50]
mov dword [0x5120a0], eax
call fcn.00440eb0
push dword [0x504e50]
call fcn.004409d0
push str.After_checking_RDP
push dword [0x504e50]
mov dword [0x5120a4], eax
call fcn.00440eb0
add esp, 0x20
cmp dword [0x5120a0], 0
je 0x40b517
push 0x46e218
push 0x10
push 0x506040
call fcn.0044a958
add esp, 0xc
jmp 0x40b53d
cmp dword [0x5120a4], 0
je 0x40b536
push 0x46e220
push 0x10
push 0x506040
call fcn.0044a958
add esp, 0xc
jmp 0x40b53d
mov byte [0x506040], 0
cmp dword [0x512078], 0
je 0x40b5df
push 0
push 0
push 0x405
push dword [0x506064]
call ebx
cmp dword [0x512030], 0
je 0x40b578
push 0x46e230
push 0xa
push 0x49808c
call fcn.0044a958
add esp, 0xc
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
push 0x506018
push 0x5138b0
push 0x49808c
push 0x514ab4
push str._SecureBrowser__s__s__s_s
push 0x51622c
call esi
push 0x51622c
push 0x46e258
push dword [0x504e50]
call fcn.00440eb0
push 0x5138b0
push 0x49808c
push 0x46e27c
push 0x515a2c
call esi
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
add esp, 0x34
push dword [0x505b68]
call esi
jmp 0x40b6a4
push 5
lea eax, [ebp - 0x28]
push eax
push dword [0x50c274]
call fcn.00454d08
push 5
lea eax, [ebp - 0x18]
push eax
push dword [0x50ce78]
call fcn.00454d08
push 5
lea eax, [ebp - 0x20]
push eax
push dword [0x50ce7c]
call fcn.00454d08
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x18]
add esp, 0x24
cmp dword [0x512044], 0
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x28]
push eax
push 0x506018
push 0x506040
jne 0x40b675
push 0x5138b0
push 0x49808c
push 0x514ab4
push 0x505c18
push str.Mozilla_5.0___s__AppleWebKit_537.36_Chrome_84.0.4147.30_Edg_84.0.522.11__SecureBrowser__s__s__s_s__s__DKM:_s._s._s
push 0x51622c
call esi
push 0x5138b0
push 0x49808c
push 0x46e27c
push 0x515a2c
call esi
add esp, 0x3c
jmp 0x40b6a4
push 0x49808c
push 0x514ab4
push 0x505c18
push str.Mozilla_5.0___s__AppleWebKit_537.36_Chrome_84.0.4147.30_Edg_84.0.522.11__SecureBrowser__s__s_s__s__DKM:_s._s._s
push 0x51622c
call esi
push 0x49808c
push 0x46d888
push 0x515a2c
call esi
add esp, 0x34
push 0
push 0
push 0x405
push dword [0x506064]
call ebx
push dword [ebp - 0x666c]
push 0x46e370
push dword [0x504e50]
call fcn.00440eb0
push 0x514ab4
push 0x46ddd4
push dword [0x504e50]
call fcn.00440eb0
call fcn.00409130
push dword [0x50580c]
push dword [0x505810]
push dword [0x5057a4]
push 0x46ddf0
push 0x80
push 0x505818
call fcn.00407d80
push 0x505818
push 0x46ddfc
push dword [0x504e50]
call fcn.00440eb0
push 0x46de0c
push dword [0x504e50]
call fcn.00440eb0
add esp, 0x44
lea eax, [ebp - 0xe40]
push eax
push 0x46de40
push dword [0x504e50]
call fcn.00440eb0
add esp, 0xc
lea eax, [ebp - 0x6668]
push eax
lea eax, [ebp - 0xc40]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea eax, [ebp - 0xc40]
push eax
push 0x46dea0
push dword [0x504e50]
call fcn.00440eb0
add esp, 0xc
mov ecx, 0x511bf0
call fcn.004182d0
mov ecx, 0x511bf0
call fcn.00418680
mov ecx, 0x511bf0
call fcn.00417c80
mov ecx, 0x511bf0
call fcn.00417e20
mov ecx, 0x511bf0
call fcn.00418160
mov ecx, 0x511bf0
call fcn.00417fc0
mov ecx, 0x511bf0
call fcn.00417b50
cmp dword [0x512064], 0
je 0x40b7e7
push dword [0x51cbbc]
mov ecx, 0x511bf0
push 0x51c3ec
push 0
push dword [0x50f094]
call fcn.00411320
cmp dword [0x512044], 0
je 0x40b7fc
mov ecx, 0x511be0
call fcn.0040f690
jmp 0x40b801
mov eax, dword [0x51b568]
push 0
push 0
push 0x405
push dword [0x506064]
mov dword [0x505b70], eax
call ebx
push dword [0x505b70]
push dword [0x504e50]
call fcn.00440e40
push dword [0x512018]
push dword [0x504e50]
call fcn.00440560
push dword [0x512010]
push dword [0x504e50]
call fcn.004405e0
push dword [0x512034]
push dword [0x504e50]
call fcn.00440540
push dword [0x51201c]
push dword [0x504e50]
call fcn.00440500
push dword [0x512024]
push dword [0x504e50]
call fcn.00440620
push dword [0x512020]
push dword [0x504e50]
call fcn.00440600
push dword [0x512040]
push dword [0x504e50]
call fcn.004404c0
add esp, 0x40
push dword [0x512028]
push dword [0x504e50]
call fcn.00440640
add esp, 8
push 0
push 0
push 0x405
push dword [0x506064]
call ebx
push dword [0x512048]
push dword [0x504e50]
call fcn.004404e0
push dword [0x51204c]
push dword [0x504e50]
call fcn.00440580
push dword [0x512050]
push dword [0x504e50]
call fcn.00440520
push dword [0x512054]
push dword [0x504e50]
call fcn.004406a0
push dword [0x51200c]
push dword [0x504e50]
call fcn.004405c0
push dword [0x512008]
push dword [0x504e50]
call fcn.004405a0
push dword [0x51206c]
push dword [0x504e50]
call fcn.00440660
add esp, 0x38
push 0
push 0
push 0x10
push dword [0x5119b8]
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [0x51b580]
test eax, eax
je 0x40bf6e
push 0
push 0
push 0x405
push dword [0x506064]
mov dword [0x505b74], eax
call ebx
cmp dword [0x512084], 0
je 0x40b9d0
mov ecx, 0x46d520
mov eax, 0x53d414
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40b9b0
test dl, dl
je 0x40b9ac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40b9b0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40b990
xor eax, eax
jmp 0x40b9b5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40b9d0
push 0x5052d8
push 0x400
push 0x504ed8
call fcn.0044a958
add esp, 0xc
push 1
push 0x5420e8
push 0x504ed8
mov ecx, 0x5420e8
call fcn.00444290
mov ecx, 0x5420e8
call fcn.00444580
mov ecx, 0x5420e8
call fcn.004443a0
push 0
push 0
push 0x405
push dword [0x506064]
call ebx
cmp dword [0x511ff0], 0
je 0x40ba34
push 4
push 0x51b574
push 0x51
push 0
mov dword [0x51b574], 3
call dword [sym.imp.WININET.dll_InternetSetOptionA]
mov dword [0x5120a8], eax
cmp dword [0x512054], 0
je 0x40ba71
push 0x46e388
push dword [0x504e50]
call fcn.00440eb0
push dword [0x51b580]
push dword [0x504e50]
call fcn.00440e20
push 0x46e3a4
push dword [0x504e50]
call fcn.00440eb0
add esp, 0x18
push dword [0x51b580]
push dword [0x504e50]
call fcn.00440790
push 4
push dword [0x504e50]
call fcn.00440de0
add esp, 0x10
push 0
push 0
push 0x405
push dword [0x506064]
call ebx
cmp dword [0x512004], 0
jne 0x40bac8
push 0x64
push 0x505aa0
push dword [0x504e50]
call fcn.00440a30
add esp, 0xc
mov dword [0x5120a0], eax
jmp 0x40bad2
mov dword [0x5120a0], 0
cmp dword [0x51207c], 0
jne 0x40baf0
push dword [0x504e50]
call fcn.004409d0
add esp, 4
mov dword [0x5120a4], eax
jmp 0x40bafa
mov dword [0x5120a4], 0
push 0
push 0
push 0x405
push dword [0x506064]
call ebx
cmp dword [0x51202c], 0
jne 0x40bd0a
cmp dword [0x512004], 0
jne 0x40bbff
cmp dword [0x5120a0], 0
je 0x40bbff
push 0
push 0
push 1
push 2
push 0x505aa0
mov ecx, 0x511bf0
mov dword [0x53e6a4], 1
call fcn.004155d0
push 0x46e3c4
push 0x46e400
mov ecx, 0x511bf0
call fcn.00418f80
push dword [0x51b564]
call fcn.0043f7c0
add esp, 4
mov ecx, 0x511bf0
call fcn.00419690
push 7
mov ecx, 0x511bf0
mov dword [0x51d838], 7
mov dword [0x506050], 1
call fcn.00419740
mov ecx, 0x511bf0
call fcn.004118f0
call fcn.00408360
mov edx, dword [ebp - 0x664c]
mov esi, dword [0x51d838]
cmp edx, 8
jb 0x40b078
mov ecx, dword [ebp - 0x6660]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40bbee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c6c4
push edx
push ecx
call fcn.00444ae6
add esp, 8
mov eax, esi
jmp 0x40c6a6
cmp dword [0x51207c], 0
mov eax, dword [0x506050]
jne 0x40bcf1
cmp dword [0x5120a4], 0
je 0x40bcf1
test eax, eax
jne 0x40bcf1
push eax
push eax
push 1
push 3
push 0x46e414
mov ecx, 0x511bf0
mov dword [0x53e6a4], 1
call fcn.004155d0
push 0x46e420
push 0x46e46c
mov ecx, 0x511bf0
call fcn.00418f80
push dword [0x51b564]
call fcn.0043f7c0
add esp, 4
mov ecx, 0x511bf0
call fcn.00419690
push 7
mov ecx, 0x511bf0
mov dword [0x51d838], 7
mov dword [0x506050], 1
call fcn.00419740
mov ecx, 0x511bf0
call fcn.004118f0
call fcn.00408360
mov edx, dword [ebp - 0x664c]
mov esi, dword [0x51d838]
cmp edx, 8
jb 0x40b078
mov ecx, dword [ebp - 0x6660]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40bce0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c6c4
push edx
push ecx
call fcn.00444ae6
add esp, 8
mov eax, esi
jmp 0x40c6a6
cmp dword [0x50ce84], 0
jne 0x40bd27
test eax, eax
jne 0x40bd27
mov ecx, 0x511bf0
call fcn.00411560
jmp 0x40bd27
push str.Default_value_set
push dword [0x504e50]
mov dword [0x51d6b4], 1
call fcn.00440eb0
add esp, 8
push 0
push 0
push 0x405
push dword [0x506064]
call ebx
cmp dword [0x51202c], 0
jne 0x40be48
cmp dword [0x51c3e8], 2
je 0x40bd60
mov ecx, 0x511bf0
call fcn.00413430
test eax, eax
jne 0x40be48
cmp dword [0x50ce84], 0
je 0x40bd7b
mov ecx, 0x511bf0
call fcn.00413430
test eax, eax
jne 0x40be48
mov ecx, 0x511bf0
call fcn.00419690
push 0x46d860
push dword [0x504e50]
call fcn.00440eb0
push dword [0x51b580]
push dword [0x504e50]
call fcn.00440ad0
push 0x46d874
push dword [0x504e50]
call fcn.00440eb0
add esp, 0x18
mov dword [0x51d838], 5
mov ecx, 0x511bf0
push 5
call fcn.00419740
mov ecx, 0x511bf0
call fcn.004118f0
call fcn.00408360
cmp dword [0x53e8d8], 0
jne 0x40bdf7
push 0x53e8dc
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [0x53e8d8], eax
mov edx, dword [ebp - 0x664c]
mov esi, dword [0x51d838]
cmp edx, 8
jb 0x40b078
mov ecx, dword [ebp - 0x6660]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40be37
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c6c4
push edx
push ecx
call fcn.00444ae6
add esp, 8
mov eax, esi
jmp 0x40c6a6
push 0
push 0
push 0x405
push dword [0x506064]
mov dword [0x504e54], 1
call ebx
push 0
push 0
push 0x405
push dword [0x506064]
call ebx
push 0x46e498
push dword [0x504e50]
call fcn.00440eb0
add esp, 8
push 0
push 0
push 0x10
push dword [0x506064]
call ebx
push 0
push 0x408d60
push 0
push 0
call dword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov ecx, 0x511bf0
call fcn.00419690
push dword [0x54078c]
push str.webViewCreated_before_runmessagepump__d
push dword [0x504e50]
call fcn.00440eb0
push dword [0x50605c]
push str.startUrlLoaded_before_runmessagepump__d
push dword [0x504e50]
call fcn.00440eb0
call fcn.004091b0
mov eax, dword [0x506050]
mov ecx, 1
cmp dword [0x51d838], 0
cmove eax, ecx
push eax
push str.quitCode__d
push dword [0x504e50]
mov dword [0x506050], eax
call fcn.00440eb0
add esp, 0x24
cmp dword [0x53e8d8], 0
jne 0x40bf27
push 0x53e8dc
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [0x53e8d8], eax
mov ecx, 0x511bf0
call fcn.00411ff0
push 0x46e510
push dword [0x504e50]
call fcn.00440eb0
add esp, 8
push dword [0x504e50]
call edi
call dword [sym.imp.ole32.dll_OleUninitialize]
cmp dword [ebp - 0x6670], 0
je 0x40c448
push 0x46e64c
push 0x46e678
jmp 0x40c45b
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x40bf4c
call dword [sym.imp.ole32.dll_OleUninitialize]
cmp dword [ebp - 0x6664], 0
je 0x40bf52
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0x104
lea ecx, [ebp - 0x93c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x511bf0
push 0x3ff
push 0x400
push 0x513db4
call fcn.00407d40
mov ecx, 0x516884
add esp, 0x10
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40bfc4
push 0x400
push 0x513db4
sub ecx, edx
push ecx
push 0x516884
push 0xf
push 0x46e524
push 0x400
push 0x513db4
mov ecx, 0x5420e0
call fcn.00441360
mov ecx, 0x516820
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c000
push 0x400
push 0x513db4
sub ecx, edx
push ecx
push 0x516820
push 0x13
push 0x46e534
push 0x400
push 0x513db4
mov ecx, 0x5420e0
call fcn.00441360
mov ecx, 0x516758
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c040
push 0x400
push 0x513db4
sub ecx, edx
push ecx
push 0x516758
push 0x11
push 0x46e548
push 0x400
push 0x513db4
mov ecx, 0x5420e0
call fcn.00441360
mov ecx, 0x5167bc
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c080
push 0x400
push 0x513db4
sub ecx, edx
push ecx
push 0x5167bc
push 0x13
push 0x46e55c
push 0x400
push 0x513db4
mov ecx, 0x5420e0
call fcn.00441360
mov ecx, 0x515100
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c0c0
push 0x400
push 0x513db4
sub ecx, edx
push ecx
push 0x515100
push 0x10
push 0x46e570
push 0x400
push 0x513db4
mov ecx, 0x5420e0
call fcn.00441360
push 0x400
push 0x513db4
push 1
push 0x46d520
push 8
push 0x46e584
push 0x400
push 0x513db4
mov ecx, 0x5420e0
call fcn.00441360
mov ecx, 0x513db4
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c128
sub ecx, edx
push str.cmddownload
lea eax, [ecx + 0xe]
push eax
push 0x513db4
call fcn.0044a9b2
add esp, 0xc
mov ecx, 0x511bf0
push 0
push 0
push str.cmddownload
push 0x46e5a0
push 0x513db4
push 0x400
push 0x5115b8
call fcn.00413d00
mov ecx, 0x5115b8
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c176
sub ecx, edx
push str.cmddownload
lea eax, [ecx + 0xe]
push eax
push 0x5115b8
call fcn.0044a9b2
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
add esp, 0xc
push 0x401
push 0x40
call ebx
mov esi, eax
mov ecx, 0x511bf0
push esi
push 0x5115b8
call fcn.0041a050
push esi
push 0x46e5a4
push 0x1ff
lea eax, [ebp - 0x1a48]
push 0x200
push eax
call fcn.00407d40
add esp, 0x14
push 0x2a
push 0x40
call ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [0x5115b4], eax
call esi
push dword [0x5115b4]
lea eax, [ebp - 0x1a48]
mov ecx, 0x511bf0
push eax
call fcn.00416630
push 0x46e5dc
push 0x400
push 0x513db4
call fcn.0044a9b2
push dword [0x5115b4]
push 0x400
push 0x513db4
call fcn.0044a9b2
add esp, 0x18
push dword [0x5115b4]
call esi
push 0x513db4
push 0x3ff
push 0x400
push 0x511bf0
call fcn.00407d40
add esp, 0x10
lea eax, [ebp - 0x6648]
mov ecx, 0x5420e0
push 0x1ffe
push eax
push 9
push 0x46e5e4
push 4
push 0x46da84
push 0x1ffe
push 0x506068
call fcn.00441360
lea eax, [ebp - 0x6648]
push eax
lea eax, [ebp - 0x3a48]
push 0x1ffe
push eax
call fcn.0044a958
push 0x46da80
lea eax, [ebp - 0x3a48]
push 0x1ffe
push eax
call fcn.0044a9b2
push str._url_
lea eax, [ebp - 0x3a48]
push 0x1ffe
push eax
call fcn.0044a9b2
push 0x511bf0
lea eax, [ebp - 0x3a48]
push 0x1ffe
push eax
call fcn.0044a9b2
push str.___exe_
lea eax, [ebp - 0x3a48]
push 0x1ffe
push eax
call fcn.0044a9b2
lea eax, [ebp - 0x93c]
push eax
lea eax, [ebp - 0x3a48]
push 0x1ffe
push eax
call fcn.0044a9b2
add esp, 0x48
lea eax, [ebp - 0x3a48]
push str.___updateversion_
push 0x1ffe
push eax
call fcn.0044a9b2
push 0x5149b4
lea eax, [ebp - 0x3a48]
push 0x1ffe
push eax
call fcn.0044a9b2
push str.___minversion_
lea eax, [ebp - 0x3a48]
push 0x1ffe
push eax
call fcn.0044a9b2
push 0x514a34
lea eax, [ebp - 0x3a48]
push 0x1ffe
push eax
call fcn.0044a9b2
push str.___exitmessage_
lea eax, [ebp - 0x3a48]
mov dword [0x505b88], 0x46e624
push 0x1ffe
push eax
call fcn.0044a9b2
push dword [0x505b88]
lea eax, [ebp - 0x3a48]
push 0x1ffe
push eax
call fcn.0044a9b2
add esp, 0x48
lea eax, [ebp - 0x3a48]
push 0x46dff8
push 0x1ffe
push eax
call fcn.0044a9b2
add esp, 0xc
lea eax, [ebp - 0xa40]
mov ecx, 0x511be0
push 0x53e5a0
push 0x504e58
push 0x104
push eax
call fcn.00410c20
mov ecx, 0x511bf0
call fcn.00419690
push 0xa
push 0
lea eax, [ebp - 0x3a48]
push eax
lea eax, [ebp - 0xa40]
push eax
push 0x46dd64
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
mov edx, dword [ebp - 0x664c]
cmp edx, 8
jb 0x40c43e
mov ecx, dword [ebp - 0x6660]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c434
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c6c4
push edx
push ecx
call fcn.00444ae6
add esp, 8
mov eax, 3
jmp 0x40c6a6
cmp dword [0x504e50], 0
jne 0x40c493
push 0x46e68c
push 0x46e6ac
mov ecx, 0x511bf0
call fcn.00418f80
push dword [0x51b564]
call fcn.0043f7c0
add esp, 4
mov dword [0x51d838], 1
mov ecx, 0x511bf0
mov dword [0x506050], 1
push 1
call fcn.00419740
cmp dword [0x504e54], 0
je 0x40c51d
cmp dword [0x512000], 0
je 0x40c4e3
push 0x46e6c0
push 0x46e774
mov ecx, 0x511bf0
call fcn.00418f80
push dword [0x51b564]
call fcn.0043f7c0
add esp, 4
mov dword [0x51d838], 9
mov dword [0x506050], 1
push 9
jmp 0x40c554
cmp dword [0x512014], 0
je 0x40c50d
push dword [0x505b8c]
mov ecx, 0x4d2e1c
push 0x46e788
push 0x46e798
push str.EaseOfAccess
call fcn.00407b00
jmp 0x40c4bd
push dword [0x51b564]
call fcn.0043f7c0
add esp, 4
jmp 0x40c55e
cmp dword [0x506050], 0
jne 0x40c55e
push 0x46e858
push 0x46e870
mov ecx, 0x511bf0
call fcn.00418f80
push dword [0x51b564]
call fcn.0043f7c0
add esp, 4
mov dword [0x51d838], 0xffffffff
push 0xffffffffffffffff
mov ecx, 0x511bf0
call fcn.00419740
mov ecx, 0x511bf0
call fcn.00419690
call fcn.00408360
mov edx, dword [ebp - 0x664c]
mov esi, dword [0x51d838]
cmp edx, 8
jb 0x40b078
mov ecx, dword [ebp - 0x6660]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c5ad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c6c4
push edx
push ecx
call fcn.00444ae6
add esp, 8
mov eax, esi
jmp 0x40c6a6
test eax, eax
jne 0x40c5ce
push 0x53e8dc
call esi
mov dword [0x53e8d8], eax
mov edx, dword [ebp - 0x664c]
cmp edx, 8
jb 0x40c6a6
mov ecx, dword [ebp - 0x6660]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c608
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c6c4
push edx
push ecx
call fcn.00444ae6
add esp, 8
jmp 0x40c6a6
push str.SecureBrowser_is_already_running..._
push str.SecureBrowserIsAlreadyRunning
mov ecx, 0x511bf0
call fcn.00418f80
mov ecx, 0x511bf0
call fcn.00419690
jmp 0x40a0dd
push 0x1000
push 0x46e904
push 0x46e90c
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0xffffffffffffffff
mov ecx, 0x511bf0
mov dword [0x51d838], 0xffffffff
call fcn.00419740
mov edx, dword [ebp - 0x664c]
cmp edx, 8
jb 0x40c6a3
mov ecx, dword [ebp - 0x6660]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c699
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c6c4
push edx
push ecx
call fcn.00444ae6
add esp, 8
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00444ab5
mov esp, ebp
pop ebp
ret 0x10
call fcn.0044f710
int3