Function at 0x413450
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x434
mov eax, dword [0x4cc5a8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, ecx
push esi
push edi
lea edi, [ebx + 0xccc8]
nop
lea eax, [ebp - 0xc]
mov dword [ebx + 0x49c], 0
push eax
push edi
mov ecx, ebx
call fcn.00413fb0
mov esi, eax
cmp esi, 0x2efd
je 0x4134ca
push 3
lea eax, [ebp - 0xc]
push 0x471720
push eax
call fcn.00455020
add esp, 0xc
test eax, eax
je 0x4135e7
test esi, esi
jne 0x4134ca
push 3
lea eax, [ebp - 0xc]
push 0x471720
push eax
call fcn.00455020
add esp, 0xc
test eax, eax
jne 0x4135ae
push 0x400
lea eax, [ebp - 0x414]
mov ecx, 0x553538
push eax
push 4
push str.http
push 5
push str.https
push 0x400
push edi
call fcn.00442e80
lea eax, [ebp - 0x14]
mov ecx, ebx
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.00413fb0
test eax, eax
jne 0x413540
push 3
lea eax, [ebp - 0x14]
push 0x471720
push eax
call fcn.00455020
add esp, 0xc
test eax, eax
je 0x413f3f
push 3
lea eax, [ebp - 0x14]
push 0x471720
push eax
call fcn.00455020
add esp, 0xc
test eax, eax
jne 0x413f09
cmp dword [ebx + 0x4a0], 0
lea esi, [ebx + 0x27d0]
je 0x41356a
push esi
push str.We_are_not_able_to_load_the_start_page__please_check_your_device_s_network_connection._If_your_computer_or_network_is_protected_by_a_firewall_or_proxy_make_sure_that_the_secure_browser_is_permitted_to_access___s_
lea eax, [ebx + 0x20c4]
push eax
push dword [0x50a534]
call fcn.004429a0
add esp, 0x10
push esi
push str._Domain_
push str.We_are_not_able_to_load_the_start_page__please_check_your_device_s_network_connection._If_your_computer_or_network_is_protected_by_a_firewall_or_proxy_make_sure_that_the_secure_browser_is_permitted_to_access___Domain__
push str.Connectionfailure
mov ecx, ebx
call fcn.0041a400
mov ecx, ebx
mov esi, eax
call fcn.0041aaa0
mov dword [ebx + 0x49c], 1
cmp esi, 1
je 0x413470
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004465ed
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0x4a0], 0
je 0x4135d1
push str.We_are_currently_experiencing_connection_issues.
lea eax, [ebx + 0x20c4]
push eax
push dword [0x50a534]
call fcn.004429a0
add esp, 0xc
push str.We_are_currently_experiencing_connection_issues._Please_close_the_secure_browser_and_try_again_later.
push str.SERVERPROBLEM
mov ecx, ebx
call fcn.00419e60
jmp 0x413f80
mov edx, dword [ebx + 0x33c7c]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4135f2
sub ecx, esi
sar ecx, 1
cmp ecx, 1
jbe 0x413e98
mov ecx, edx
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413610
push 0
push 0
push 0
push 0
sub ecx, esi
sar ecx, 1
push ecx
push edx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
lea esi, [edi + 1]
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push esi
push eax
push 0xffffffffffffffff
push dword [ebx + 0x33c7c]
mov dword [ebx + 0x31a04], eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [edi + edi*2]
push eax
push 1
call fcn.0044c619
add esp, 8
mov dword [ebx + 0x33c78], eax
mov ecx, ebx
push dword [ebx + 0x31a04]
call fcn.00412840
push 0x471724
push ebx
call fcn.004493a0
mov ecx, dword [ebx + 0x33c7c]
add esp, 8
test eax, eax
je 0x41371f
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [ebx + 0x31a04]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4136b2
sub ecx, edx
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x40
call eax
mov esi, dword [ebx + 0x31a04]
mov edx, esi
mov dword [ebp - 0x420], eax
mov dword [ebx + 0x33c80], eax
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x4136e3
sub edx, ecx
mov ecx, esi
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4136f1
push edx
push dword [ebp - 0x420]
sub ecx, edi
push ecx
push esi
lea ecx, [ebx + 0x33c74]
call fcn.00402f20
push dword [ebx + 0x31a04]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x4137ae
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413722
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x40
call eax
mov esi, dword [ebx + 0x33c7c]
mov edx, esi
mov dword [ebp - 0x420], eax
mov dword [ebx + 0x33c80], eax
lea ecx, [edx + 2]
nop dword [eax]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x413760
sub edx, ecx
lea ecx, [esi + 2]
sar edx, 1
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413775
sub ecx, edi
sar ecx, 1
push edx
push esi
lea eax, [ecx + 2]
push eax
push dword [ebp - 0x420]
call fcn.00456bb4
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
add esp, 0x10
push dword [ebx + 0x33c7c]
call esi
push dword [ebx + 0x31a04]
call esi
mov edx, dword [ebx + 0x33c80]
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4137c0
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
sub ecx, esi
push 0
push 0
push 0
push 0
sar ecx, 1
push ecx
push edx
push 0
push 0xfde9
call edi
mov esi, eax
mov dword [ebp - 0x41c], esi
lea eax, [esi + 1]
push eax
push 0x40
mov dword [ebp - 0x420], eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push esi
push eax
push 0xffffffffffffffff
push dword [ebx + 0x33c80]
mov dword [ebp - 0x428], eax
push 0
push 0xfde9
call edi
push 0
push 0
push str.__SbrowserDownloadXMLID_
push str._SbrowserDownloadXMLID_
push dword [ebp - 0x428]
lea eax, [ebx + 0x1cc4]
mov ecx, ebx
push 0x400
push eax
call fcn.00414d20
mov esi, dword [ebx + 0x33c78]
lea ecx, [esi + 1]
nop
mov al, byte [esi]
inc esi
test al, al
jne 0x413850
sub esi, ecx
add esi, 0x64
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push dword [ebx + 0x33c78]
lea ecx, [esi - 1]
mov edi, eax
push str._sy1QM3bQ6VnxkCUm7Uv2zjj1ogux0O0ESsjq4G8fXpdwXkRJOqz
push ecx
push esi
push edi
call fcn.004082c0
push dword [ebx + 0x33c78]
call fcn.0044c624
add esp, 0x18
push 0x29
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov ecx, ebx
push esi
push edi
call fcn.00417890
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4138a5
sub ecx, edx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov byte [ecx + esi], al
call edi
push dword [ebx + 0x33c84]
push esi
call fcn.00456418
add esp, 8
test eax, eax
jne 0x413e25
push esi
call edi
push dword [ebp - 0x420]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, dword [ebp - 0x41c]
mov edi, eax
push 0
push 0
push str.__Configuration_
push str._Configuration_
push dword [ebp - 0x428]
mov ecx, ebx
mov dword [ebp - 0x420], edi
push esi
push edi
call fcn.00414d20
push edi
push str.Lower_Secure_Browser_Config_XML____s
push 1
push dword [0x50a534]
call fcn.004429d0
push str.Before_set_config_override
push 1
push dword [0x50a534]
call fcn.004429d0
add esp, 0x1c
mov ecx, ebx
push edi
call fcn.00417a50
push str.After_set_config_override
push 1
push dword [0x50a534]
call fcn.004429d0
add esp, 0xc
mov ecx, ebx
call fcn.00418220
mov edi, dword [ebx + 0x33c80]
lea ecx, [edi + 2]
mov ax, word [edi]
add edi, 2
test ax, ax
jne 0x413962
lea eax, [esi*2 + 2]
sub edi, ecx
push eax
sar edi, 1
push 0x40
mov dword [ebp - 0x430], edi
mov dword [ebp - 0x42c], eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push edi
mov esi, eax
mov ecx, ebx
push esi
push 0
push 0
push str.__Messages_
push str._Messages_
push dword [ebx + 0x33c80]
mov dword [ebp - 0x434], esi
call fcn.00414f00
push str._Message
xor edi, edi
push esi
mov dword [ebp - 0x418], edi
call fcn.0044960b
add esp, 8
mov esi, eax
nop word [eax + eax]
lea esi, [esi + edi*2]
add esi, 0x10
push str.__Message_
push esi
mov dword [ebp - 0x41c], esi
call fcn.0044960b
mov edi, eax
add esp, 8
cmp edi, esi
jbe 0x413b3a
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4139f7
sub esi, ecx
sar esi, 1
lea eax, [esi*2 + 2]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edx, eax
mov ecx, edi
mov eax, dword [ebp - 0x41c]
sub ecx, eax
sar ecx, 1
push ecx
push eax
push esi
push edx
mov dword [ebp - 0x418], edx
call fcn.00456bb4
add esp, 0x10
test eax, eax
je 0x413a46
push dword [ebp - 0x418]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x1000
push 1
call fcn.0044c619
add esp, 8
mov esi, eax
mov ecx, ebx
push 0x1000
push esi
push 0
push 0
push 0x470a88
push str.Key_
push dword [ebp - 0x418]
call fcn.00414f00
push 0x470a44
push dword [ebp - 0x418]
xor eax, eax
mov word [ebp - 0x424], ax
call fcn.0044960b
add esp, 8
test eax, eax
je 0x413a9d
add eax, 2
jmp 0x413aa3
lea eax, [ebp - 0x424]
push eax
push esi
mov ecx, ebx
call fcn.004180b0
push esi
call fcn.0044c624
mov ecx, edi
add esp, 4
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413ac0
sub ecx, edx
mov eax, str.__Message_
sar ecx, 1
mov dx, word [edi]
cmp dx, word [eax]
jne 0x413afa
test dx, dx
je 0x413af6
mov dx, word [edi + 2]
cmp dx, word [eax + 2]
jne 0x413afa
add edi, 4
add eax, 4
test dx, dx
jne 0x413ad4
xor eax, eax
jmp 0x413aff
sbb eax, eax
or eax, 1
test eax, eax
je 0x413b4a
cmp ecx, 0xf
jl 0x413b4a
mov edx, dword [ebp - 0x418]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413b13
sub ecx, esi
sar ecx, 1
push edx
lea edi, [ecx + 0xa]
mov dword [ebp - 0x418], edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov esi, dword [ebp - 0x41c]
jmp 0x413b40
mov edi, dword [ebp - 0x418]
test esi, esi
jne 0x4139d0
jmp 0x413b56
push dword [ebp - 0x418]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push dword [ebp - 0x42c]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push dword [ebp - 0x430]
mov edi, eax
mov ecx, ebx
push edi
push 0
push 0
push str.__Properties_
push str._Properties_
push dword [ebx + 0x33c80]
mov dword [ebp - 0x42c], edi
call fcn.00414f00
push str._Property
push edi
xor esi, esi
call fcn.0044960b
add esp, 8
nop
lea eax, [eax + esi*2]
add eax, 0x12
push str.__Property_
push eax
mov dword [ebp - 0x41c], eax
call fcn.0044960b
mov edi, eax
add esp, 8
mov eax, dword [ebp - 0x41c]
cmp edi, eax
jbe 0x413d45
mov esi, eax
lea ecx, [esi + 2]
nop
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x413bd0
sub esi, ecx
sar esi, 1
lea eax, [esi*2 + 2]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edx, eax
mov ecx, edi
mov eax, dword [ebp - 0x41c]
sub ecx, eax
sar ecx, 1
push ecx
push eax
push esi
push edx
mov dword [ebp - 0x418], edx
call fcn.00456bb4
add esp, 0x10
test eax, eax
je 0x413c1f
push dword [ebp - 0x418]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x1000
push 1
call fcn.0044c619
add esp, 8
mov esi, eax
mov ecx, ebx
push 0x1000
push esi
push 0
push 0
push 0x470a88
push str.Key_
push dword [ebp - 0x418]
call fcn.00414f00
push 0x470a44
push dword [ebp - 0x418]
xor eax, eax
mov word [ebp - 0x424], ax
call fcn.0044960b
add esp, 8
test eax, eax
je 0x413c76
add eax, 2
jmp 0x413c7c
lea eax, [ebp - 0x424]
push eax
push esi
mov ecx, ebx
call fcn.00418b20
push esi
call fcn.0044c624
mov ecx, edi
add esp, 4
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413c93
sub ecx, edx
mov eax, str.__Property_
sar ecx, 1
mov dx, word [edi]
cmp dx, word [eax]
jne 0x413ccd
test dx, dx
je 0x413cc9
mov dx, word [edi + 2]
cmp dx, word [eax + 2]
jne 0x413ccd
add edi, 4
add eax, 4
test dx, dx
jne 0x413ca7
xor eax, eax
jmp 0x413cd2
sbb eax, eax
or eax, 1
test eax, eax
je 0x413d55
cmp ecx, 0xf
jl 0x413d55
mov eax, str.SBTokenPrivateKey
mov cx, word [esi]
cmp cx, word [eax]
jne 0x413d0e
test cx, cx
je 0x413d0a
mov cx, word [esi + 2]
cmp cx, word [eax + 2]
jne 0x413d0e
add esi, 4
add eax, 4
test cx, cx
jne 0x413ce8
xor eax, eax
jmp 0x413d13
sbb eax, eax
or eax, 1
test eax, eax
je 0x413d55
mov edi, dword [ebp - 0x418]
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413d22
sub ecx, edx
sar ecx, 1
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
lea esi, [ecx + 0xb]
call edi
mov eax, dword [ebp - 0x41c]
jmp 0x413d4b
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
test eax, eax
jne 0x413ba0
jmp 0x413d63
push dword [ebp - 0x418]
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call edi
push dword [ebp - 0x42c]
call edi
cmp dword [ebx + 0xc3cc], 0
jne 0x413d86
cmp dword [0x51d238], 0
je 0x413dc5
cmp dword [ebx + 0x34a8c], 0x24
jle 0x413dc5
mov eax, dword [ebx + 0x34a8c]
inc eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push str.__MultiPublicKeys_
push str._MultiPublicKeys_
push dword [ebp - 0x420]
mov esi, eax
mov ecx, ebx
push dword [ebx + 0x34a8c]
push esi
call fcn.00414d20
push esi
mov ecx, ebx
call fcn.00418ed0
push esi
call edi
push dword [ebp - 0x420]
call edi
push dword [ebp - 0x434]
call edi
mov esi, dword [ebp - 0x428]
mov ecx, ebx
push esi
call fcn.00414670
push esi
call edi
lea eax, [ebx + 0x1cc4]
push eax
push str.SbrowserDownloadXMLID____s
push 1
push dword [0x50a534]
call fcn.004429d0
push str.Security_XML_downloaded_and_messages_set
push 1
push dword [0x50a534]
call fcn.004429d0
add esp, 0x1c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004465ed
mov esp, ebp
pop ebp
ret
push str.Security_configurations_tampered_with__will_not_proceed_further.
push 1
push dword [0x50a534]
call fcn.004429d0
add esp, 0xc
lea eax, [ebx + 0x27d0]
mov ecx, ebx
push eax
push str._domain_
push str.The_security_configuration_has_been_tampered_with_and_the_launch_process_will_be_terminated._If_this_was_not_intentional__verify_that_your_network_configuration_is_not_decrypting_traffic_or_blocking_encrypted_files_for_the__domain__domain
push str.SecurityConfigTampered
call fcn.0041a8c0
mov ecx, ebx
mov dword [ebx + 0x49c], 1
call fcn.0041aaa0
cmp dword [ebx + 0x31e44], 0
jne 0x413e84
lea eax, [ebx + 0x31e48]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebx + 0x31e44], eax
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004465ed
mov esp, ebp
pop ebp
ret
push str.Unable_to_download_security_configurations.
push str.ITS_Secure_Browser
mov ecx, ebx
call fcn.00419e60
push str.Unable_to_download_security_XML
push 1
push dword [0x50a534]
call fcn.004429d0
add esp, 0xc
cmp dword [ebx + 0x4a0], 0
je 0x413ee1
push str.Unable_to_download_security_XML
lea eax, [ebx + 0x20c4]
push eax
push dword [0x50a534]
call fcn.004429a0
add esp, 0xc
lea eax, [ebx + 0x23d0]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, ebx
call fcn.0041aaa0
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004465ed
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0x4a0], 0
je 0x413f2c
push str.We_are_currently_experiencing_connection_issues.
lea eax, [ebx + 0x20c4]
push eax
push dword [0x50a534]
call fcn.004429a0
add esp, 0xc
push str.We_are_currently_experiencing_connection_issues._Please_close_the_secure_browser_and_try_again_later.
push str.ServerProblem
mov ecx, ebx
call fcn.0041a630
jmp 0x413f80
cmp dword [ebx + 0x4a0], 0
lea esi, [ebx + 0x27d0]
je 0x413f69
push esi
push str.We_were_unable_to_provide_a_secure_connection_to_the___s__domain._This_secure_browser_uses_the_security_protocols_configured_for_Internet_Explorer._We_recommend_updating_to_the_latest_version_of_Internet_Explorer._Alternatively__you_may_try_to_update_Internet_Explorer_to_support_an_acceptable_security_protocol_by_going_to_Internet_Options_Advanced_Security_Settings_and_enabling_the_latest_version_of_TLS._Contact_support_for_further_assistance.
lea eax, [ebx + 0x20c4]
push eax
push dword [0x50a534]
call fcn.004429a0
add esp, 0x10
push esi
push str._Domain_
push str.We_were_unable_to_provide_a_secure_connection_to_the__Domain__domain._n_nThis_secure_browser_uses_the_security_protocols_configured_for_Internet_Explorer._We_recommend_updating_to_the_latest_version_of_Internet_Explorer._Alternatively__you_may_try_to_update_Internet_Explorer_to_support_an_acceptable_security_protocol_by_going_to_Internet_Options_Advanced_Security_Settings_and_enabling_the_latest_version_of_TLS._Contact_support_for_further_assistance.
push str.Tlsmessage
mov ecx, ebx
call fcn.0041a8c0
mov ecx, ebx
call fcn.0041aaa0
mov ecx, dword [ebp - 4]
pop edi
pop esi
mov dword [ebx + 0x49c], 1
xor ecx, ebp
pop ebx
call fcn.004465ed
mov esp, ebp
pop ebp
ret