Function at 0x416670
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x6c50
call fcn.00446880
mov eax, dword [0x4cc5a8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push edi
mov edi, dword [ebp + 0x18]
mov ebx, ecx
push 0xc8
mov dword [ebp - 0x6c48], eax
lea eax, [ebp - 0x1e0]
push 0
push eax
call fcn.00449240
push 0x800
lea eax, [ebp - 0x3044]
push 0
push eax
call fcn.00449240
push 0x400
lea eax, [ebp - 0x1844]
push 0
push eax
call fcn.00449240
push 0x400
lea eax, [ebp - 0x2844]
push 0
push eax
call fcn.00449240
push 0x200
lea eax, [ebp - 0x1044]
push 0
push eax
call fcn.00449240
push 0x29
lea eax, [ebp - 0x50]
push 0
push eax
call fcn.00449240
add esp, 0x48
lea eax, [ebp - 0x2044]
push 0x400
push 0
push eax
call fcn.00449240
push 0x400
lea eax, [ebp - 0x644]
push 0
push eax
call fcn.00449240
push 0x400
lea eax, [ebp - 0x1c44]
push 0
push eax
call fcn.00449240
push 0xc00
lea eax, [ebp - 0x4444]
push 0
push eax
call fcn.00449240
push 0x400
lea eax, [ebp - 0xa44]
push 0
push eax
call fcn.00449240
push 0x400
lea eax, [ebp - 0x1444]
push 0
push eax
call fcn.00449240
add esp, 0x48
lea eax, [ebp - 0xe44]
push 0x400
push 0
push eax
call fcn.00449240
push 0x1000
lea eax, [ebp - 0x5c44]
push 0
push eax
call fcn.00449240
push 0x1000
push 0
lea eax, [ebp - 0x6c44]
push eax
call fcn.00449240
push 0x800
lea eax, [ebp - 0x3844]
push 0
push eax
call fcn.00449240
push 5
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push dword [ebx + 0x31c10]
mov byte [ebp - 8], 0
call fcn.00456a47
mov ecx, ebx
add esp, 0x3c
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4167f0
sub ecx, edx
je 0x417236
push esi
lea eax, [ebx + 0x42d0]
mov dword [ebp - 0x6c50], 0x46e590
push eax
push str.agentidentifier_s
push 0x3ff
lea esi, [ebx + 0x3ed0]
push 0x400
push esi
call fcn.004082c0
push dword [ebp - 0x6c48]
lea eax, [ebp - 0x3044]
push str.processname_s
push 0x400
push eax
call fcn.0040a620
lea eax, [ebp - 0x3044]
push eax
lea eax, [ebp - 0x4c44]
push 0x400
push eax
call fcn.00455534
add esp, 0x30
lea eax, [ebp - 0x1c44]
mov ecx, 0x553538
push eax
lea eax, [ebp - 0x4c44]
push eax
call fcn.00443360
test edi, edi
je 0x4168f2
push edi
push str.DomainPublicKeyNav_s
lea eax, [ebp - 0x5c44]
push 0x800
push eax
call fcn.0040a620
lea eax, [ebp - 0x5c44]
push eax
lea eax, [ebp - 0x6c44]
push 0x800
push eax
call fcn.00455534
add esp, 0x1c
lea eax, [ebp - 0x3844]
mov ecx, 0x553538
push eax
lea eax, [ebp - 0x6c44]
push eax
call fcn.00443360
lea eax, [ebp - 0x3844]
push eax
lea eax, [ebp - 0x1c44]
push eax
push str._s_s
lea eax, [ebp - 0x4444]
push 0xc00
push eax
call fcn.0040a5e0
add esp, 0x14
jmp 0x416912
lea eax, [ebp - 0x1c44]
push eax
push 0x46e8f8
lea eax, [ebp - 0x4444]
push 0xc00
push eax
call fcn.0040a5e0
add esp, 0x10
push dword [ebp + 0x14]
lea eax, [ebp - 0x1e0]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push str.errortype_dbrowserState_derrorList_d
push 0xc7
push 0xc8
push eax
call fcn.004082c0
lea eax, [ebx + 0x46d0]
push eax
lea eax, [ebp - 0x2044]
push 0x400
push eax
call fcn.0044c498
lea eax, [ebp - 0x2044]
push 0x400
push eax
call fcn.004566fa
push 0x400
push 1
call fcn.0044c619
mov edi, eax
lea eax, [ebp - 0x2044]
push eax
push 0x3ff
push 0x400
push edi
call fcn.004082c0
add esp, 0x48
lea edx, [ebx + 0x5128]
cmp dword [ebx + 0x4b0], 0
je 0x416a6f
push edi
lea eax, [ebp - 0x2444]
push 0x400
push eax
call fcn.00408300
add esp, 0xc
lea eax, [ebp - 0x244]
mov ecx, 0x553538
push 0x64
push eax
push 0x472144
push str.programid
lea eax, [ebp - 0x2444]
push eax
call fcn.00442c90
lea eax, [ebp - 0x244]
push eax
push str.programid_s
lea eax, [ebp - 0x118]
push 0x64
push eax
call fcn.00408300
lea eax, [ebx + 0x5128]
push eax
push str.programid_s
lea eax, [ebp - 0xb4]
push 0x64
push eax
call fcn.00408300
lea edx, [ebp - 0xb4]
add esp, 0x20
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x416a13
sub edx, ecx
lea ecx, [ebp - 0x118]
lea eax, [ecx + 1]
mov dword [ebp - 0x6c48], eax
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416a30
sub ecx, dword [ebp - 0x6c48]
lea eax, [ebp - 0xb4]
push 0x400
push edi
push edx
push eax
push ecx
lea eax, [ebp - 0x118]
mov ecx, 0x553538
push eax
push 0x400
lea eax, [ebp - 0x2444]
push eax
call fcn.00442e80
lea edx, [ebx + 0x5128]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x6c48], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416a80
sub ecx, dword [ebp - 0x6c48]
push 0x400
push edi
push ecx
push edx
push 0xf
push str.programid_pid_
push 0x400
push edi
mov ecx, 0x553538
call fcn.00442e80
lea eax, [ebx + 0x5128]
push eax
push 1
push dword [0x50a534]
call fcn.004429d0
lea edx, [ebx + 0x50c4]
add esp, 0xc
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x6c48], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416ad4
sub ecx, dword [ebp - 0x6c48]
push 0x400
push edi
push ecx
push edx
push 0x13
push str.environmentid_eid_
push 0x400
push edi
mov ecx, 0x553538
call fcn.00442e80
lea edx, [ebx + 0x5060]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x6c48], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416b11
sub ecx, dword [ebp - 0x6c48]
push 0x400
push edi
push ecx
push edx
push 0x13
push str.institutionid_iid_
push 0x400
push edi
mov ecx, 0x553538
call fcn.00442e80
lea edx, [ebx + 0x4ffc]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x6c48], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416b50
sub ecx, dword [ebp - 0x6c48]
push 0x400
push edi
push ecx
push edx
push 0x11
push str.candidateid_cid_
push 0x400
push edi
mov ecx, 0x553538
call fcn.00442e80
push str.wincsecb_
push edi
call fcn.004493a0
add esp, 8
test eax, eax
jne 0x416bad
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416b93
push 0x400
push edi
sub ecx, edx
push ecx
push esi
push 0x1a
push str.agentidentifierWINCSECB
jmp 0x416bdc
push str.wincaltsecb_
push edi
call fcn.004493a0
add esp, 8
test eax, eax
jne 0x416bec
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416bc4
push 0x400
push edi
sub ecx, edx
push ecx
push esi
push 0x1b
push str.agentidentifierwincaltsecb
push 0x400
push edi
mov ecx, 0x553538
call fcn.00442e80
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416bf1
push 0x400
push edi
sub ecx, edx
push ecx
push esi
push 0x17
push str.agentidentifier_agent_
push 0x400
push edi
mov ecx, 0x553538
call fcn.00442e80
push 0x400
push edi
push 1
push 0x46e590
push 0x16
push str.processname_process_
push 0x400
push edi
mov ecx, 0x553538
call fcn.00442e80
push 0x400
push edi
push 1
push 0x46e590
push 0x12
push str.application_app_
push 0x400
push edi
mov ecx, 0x553538
call fcn.00442e80
push 0x400
push edi
push 1
push 0x46e590
push 0x13
push str.resultid_resultid_
push 0x400
push edi
mov ecx, 0x553538
call fcn.00442e80
push str.resultid
push 0x400
push edi
call fcn.0044c4f2
lea eax, [ebx + 0x4ed0]
push eax
push 0x400
push edi
call fcn.0044c4f2
push str.institutioncode
push 0x400
push edi
call fcn.0044c4f2
lea eax, [ebx + 0x4f34]
push eax
push 0x400
push edi
call fcn.0044c4f2
push str.sbversionid
push 0x400
push edi
call fcn.0044c4f2
push 0x50a538
push 0x400
push edi
call fcn.0044c4f2
add esp, 0x48
push str.uuid
push 0x400
push edi
call fcn.0044c4f2
lea eax, [ebx + 0x31c14]
push eax
push 0x400
push edi
call fcn.0044c4f2
push str.exited
push 0x400
push edi
call fcn.0044c4f2
lea eax, [ebp - 0xc]
push eax
push 0x400
push edi
call fcn.0044c4f2
add esp, 0x30
mov ecx, 0x553538
push 0x400
push edi
push 1
push 0x46e590
push 0x16
push 0x472530
push 0x400
push edi
call fcn.00442e80
mov ecx, edi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416d60
sub ecx, edx
push 0x472530
lea eax, [ecx + 0x17]
push eax
push edi
call fcn.0044c4f2
push 0x400
push 1
call fcn.0044c619
mov esi, eax
lea ecx, [ebp - 0x1e0]
add esp, 0x14
mov dword [ebp - 0x6c4c], esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416d98
push 0x400
push esi
sub ecx, edx
lea eax, [ebp - 0x1e0]
push ecx
push eax
push 0x15
push str.errortype_errortype_
push 0x400
push edi
mov ecx, 0x553538
call fcn.00442e80
push 0
push 0
push str.errortype
push 0x46f894
push esi
push 0x400
lea eax, [ebp - 0x1844]
mov ecx, ebx
push eax
call fcn.00414d20
lea ecx, [ebp - 0x1844]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416df1
sub ecx, edx
lea edx, [ebp - 0x1e0]
lea eax, [edx + 1]
mov dword [ebp - 0x6c48], eax
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x416e10
sub edx, dword [ebp - 0x6c48]
lea eax, [ebp - 0x1e0]
push eax
lea eax, [edx + 1]
add eax, ecx
push eax
lea eax, [ebp - 0x1844]
push eax
call fcn.0044c4f2
add esp, 0xc
lea eax, [ebp - 0x2844]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1844]
push eax
call fcn.0041b570
lea eax, [ebp - 0x2844]
push eax
push str._sy1QM3bQ6VnxkCUm7Uv2zjj1ogux0O0ESsjq4G8fXpdwXkRJOqz
push 0x1ff
lea eax, [ebp - 0x1044]
push 0x200
push eax
call fcn.004082c0
add esp, 0x14
lea eax, [ebp - 0x50]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1044]
push eax
call fcn.00417890
push esi
lea eax, [ebp - 0x644]
push 0x400
push eax
call fcn.0044c498
push 4
push str.sc
lea eax, [ebp - 0x644]
push 0x400
push eax
call fcn.00457050
push 0x29
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x644]
push 0x400
push eax
call fcn.00457050
lea eax, [ebp - 0x644]
push eax
push str.The_error_url_after_generating_sc_code____s
push 1
push dword [0x50a534]
call fcn.004429d0
push 7
lea eax, [ebp - 0x644]
push str.http:__
push eax
call fcn.0045522a
add esp, 0x48
test eax, eax
jne 0x417004
push 0x400
lea eax, [ebp - 0x1444]
mov ecx, 0x553538
push eax
push str._sbrowser
push str.http:__
lea eax, [ebp - 0x644]
push eax
call fcn.00442c90
lea eax, [ebp - 0x1444]
push eax
push str.The_host_is____s
push 1
push dword [0x50a534]
call fcn.004429d0
add esp, 0x10
lea eax, [ebp - 0xa44]
mov ecx, 0x553538
push 0x400
push eax
lea eax, [ebp - 0x50]
push eax
push str._sbrowser
lea eax, [ebp - 0x644]
push eax
call fcn.00442c90
lea eax, [ebp - 0xa44]
push eax
push str.The_Connection_String_is____s
push 1
push dword [0x50a534]
call fcn.004429d0
push 0x29
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0xa44]
push 0x3ff
push eax
call fcn.00457050
lea ecx, [ebp - 0xe44]
add esp, 0x20
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416fa2
sub ecx, edx
push str._sbrowser
lea eax, [ecx + 9]
push eax
lea eax, [ebp - 0xe44]
push 0x400
push eax
call fcn.004082c0
lea ecx, [ebp - 0xa44]
add esp, 0x10
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416fd1
sub ecx, edx
lea eax, [ebp - 0xa44]
push ecx
push eax
lea eax, [ebp - 0xe44]
push 0x400
push eax
call fcn.00457050
lea eax, [ebp - 0xe44]
push eax
push str.The_final_connection_string_is___s
jmp 0x417124
push 8
lea eax, [ebp - 0x644]
push str.https:__
push eax
call fcn.0045522a
add esp, 0xc
test eax, eax
jne 0x417134
push 0x400
lea eax, [ebp - 0x1444]
mov ecx, 0x553538
push eax
push str._sbrowser
push str.https:__
lea eax, [ebp - 0x644]
push eax
call fcn.00442c90
lea eax, [ebp - 0x1444]
push eax
push str.The_host_is____s
push 1
push dword [0x50a534]
call fcn.004429d0
add esp, 0x10
lea eax, [ebp - 0xa44]
mov ecx, 0x553538
push 0x400
push eax
lea eax, [ebp - 0x50]
push eax
push str._sbrowser
lea eax, [ebp - 0x644]
push eax
call fcn.00442c90
lea eax, [ebp - 0xa44]
push eax
push str.The_Connection_String_is____s
push 1
push dword [0x50a534]
call fcn.004429d0
push 0x29
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0xa44]
push 0x400
push eax
call fcn.00457050
lea ecx, [ebp - 0xe44]
add esp, 0x20
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4170c7
sub ecx, edx
push str._sbrowser
lea eax, [ecx + 9]
push eax
lea eax, [ebp - 0xe44]
push 0x400
push eax
call fcn.004082c0
lea ecx, [ebp - 0xa44]
add esp, 0x10
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4170f6
sub ecx, edx
lea eax, [ebp - 0xa44]
push ecx
push eax
lea eax, [ebp - 0xe44]
push 0x400
push eax
call fcn.00457050
lea eax, [ebp - 0xe44]
push eax
push str.The_final_connection_string_is____s
push 1
push dword [0x50a534]
call fcn.004429d0
add esp, 0x20
lea eax, [ebp - 0x4444]
push eax
push str.The_Process_to_POST_is____s
push 1
push dword [0x50a534]
call fcn.004429d0
push 5
lea eax, [ebp - 0x24]
push eax
push dword [0x516d90]
call fcn.00456a47
push 5
lea eax, [ebp - 0x14]
push eax
push dword [0x516d94]
call fcn.00456a47
push 5
lea eax, [ebp - 0x1c]
push eax
push dword [0x516d98]
call fcn.00456a47
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x24]
push eax
push 0x54e9dc
push 0x5267c8
push 0x50be38
push 0x51ea8c
push str.WINCSECB
push 0x50a538
push 0x50ba38
lea esi, [ebx + 0xc8c8]
push str.Mozilla_5.0___s__AppleWebKit_537.36_Chrome_84.0.4147.30_Edg_84.0.522.11__SecureBrowser__s__s__s__s__TS__s__UUID__s__DKM:_s._s._s
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x64
lea eax, [ebp - 0x6c50]
mov ecx, ebx
push eax
lea eax, [ebp - 0x4444]
push eax
lea eax, [ebp - 0xe44]
push eax
push str.Content_Type:application_x_www_form_urlencoded
lea eax, [ebp - 0x1444]
push eax
push esi
call fcn.0041b0b0
pop esi
test eax, eax
je 0x4171f9
push str.Error_Post_was_Successful
jmp 0x4171fe
push str.Error_Post_was_Un_Successful
push 1
push dword [0x50a534]
call fcn.004429d0
add esp, 0xc
push edi
call fcn.0044c624
push dword [ebp - 0x6c4c]
call fcn.0044c624
add esp, 8
xor eax, eax
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004465ed
mov esp, ebp
pop ebp
ret 0x14
push str.Error_Post_Not_Applicable
push 1
push dword [0x50a534]
call fcn.004429d0
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
xor eax, eax
pop edi
pop ebx
call fcn.004465ed
mov esp, ebp
pop ebp
ret 0x14