Function at 0x433680
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b1b4a
mov eax, dword fs:[0]
push eax
sub esp, 0x284
mov eax, dword [0x4e506c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x28]
call fcn.0045e700
mov dword [ebp - 4], 0
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4336c8
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94e0
call fcn.004104f0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f6d0
mov edx, 0x4c8124
mov ecx, eax
call fcn.0040f6d0
push 0xe15
mov ecx, eax
call fcn.0040dcd0
mov edx, str.:_Installing_BrowserGuard_extension_for_firefox
mov ecx, eax
call fcn.0040f6d0
push eax
call fcn.0040fa40
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x433752
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433748
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434572
push edx
push ecx
call fcn.0046e3a3
add esp, 8
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
lea ecx, [ebp - 0x88]
mov dword [ebp - 4], 1
call fcn.004335b0
test al, al
je 0x434472
lea ecx, [ebp - 0x28]
call fcn.0045e700
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43379a
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94e0
call fcn.004104f0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f6d0
mov edx, 0x4c8124
mov ecx, eax
call fcn.0040f6d0
push 0xe19
mov ecx, eax
call fcn.0040dcd0
mov edx, str.:_Found_firefox_installed
mov ecx, eax
call fcn.0040f6d0
push eax
call fcn.0040fa40
mov byte [ebp - 4], 1
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x433821
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433817
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434577
push edx
push ecx
call fcn.0046e3a3
add esp, 8
push 0x4eab24
push 0x41af20
push 0x4eab2c
call fcn.0046a8b6
add esp, 0xc
test eax, eax
je 0x43457c
lea ecx, [ebp - 0x70]
call fcn.0043fea0
push 0x2a
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x270]
push str.242af0bb_db11_4734_b7a0_61cb8a9b20fb.xpi
mov byte [ebp - 0x274], 0
push dword [ebp - 0x274]
call fcn.0043cae0
add esp, 0xc
lea eax, [ebp - 0x270]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x70]
call fcn.0041a5e0
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x4338c5
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4338bb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434581
push edx
push ecx
call fcn.0046e3a3
add esp, 8
push 0x1c
xor eax, eax
mov dword [ebp - 0x48], 0
push str.https:__ark.mwbsys.com_bgext
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.004078c0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x248]
call fcn.0045eb30
mov byte [ebp - 4], 6
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
xor bl, bl
nop dword [eax]
mov eax, esi
inc esi
cmp eax, 3
jge 0x433a3f
cmp esi, 1
jle 0x433928
push 0x9c4
call edi
lea ecx, [ebp - 0x28]
call fcn.0045e700
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43393f
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94e0
call fcn.004104f0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f6d0
mov edx, 0x4c8124
mov ecx, eax
call fcn.0040f6d0
push 0xe27
mov ecx, eax
call fcn.0040dcd0
mov edx, str.:_Trying_to_download_BrowserGuard_extension
mov ecx, eax
call fcn.0040f6d0
push eax
call fcn.0040fa40
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4339c6
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4339bc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434572
push edx
push ecx
call fcn.0046e3a3
add esp, 8
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x270]
call fcn.0040be50
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x248]
call fcn.00460550
mov byte [ebp - 4], 6
mov bl, al
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x433a35
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433a2b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434572
push edx
push ecx
call fcn.0046e3a3
add esp, 8
test bl, bl
je 0x433910
jmp 0x433a47
test bl, bl
je 0x434381
lea ecx, [ebp - 0x28]
call fcn.0045e700
mov byte [ebp - 4], 9
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433a5e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94e0
call fcn.004104f0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f6d0
mov edx, 0x4c8124
mov ecx, eax
call fcn.0040f6d0
push 0xe2d
mov ecx, eax
call fcn.0040dcd0
mov edx, str.:_Successfully_downloaded_BrowserGuard_extension
mov ecx, eax
call fcn.0040f6d0
push eax
call fcn.0040fa40
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x433ae5
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433adb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434586
push edx
push ecx
call fcn.0046e3a3
add esp, 8
lea edx, [ebp - 0x250]
xor bh, bh
lea ecx, [ebp - 0x70]
call fcn.0043e5d0
lea ecx, [ebp - 0x28]
test al, al
je 0x434276
call fcn.0045e700
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433b14
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94e0
call fcn.004104f0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f6d0
mov edx, 0x4c8124
mov ecx, eax
call fcn.0040f6d0
push 0xe39
mov ecx, eax
call fcn.0040dcd0
mov edx, str.:_Launching_firefox.exe_to_install_BrowserGuard_extension
mov ecx, eax
call fcn.0040f6d0
push eax
call fcn.0040fa40
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x433b9b
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433b91
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43458b
push edx
push ecx
call fcn.0046e3a3
add esp, 8
lea eax, [ebp - 0x88]
mov edx, 0x4c88c8
push eax
lea ecx, [ebp - 0x28c]
call fcn.0043b6f0
add esp, 4
push str.___install__extension__
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
call fcn.0043b890
add esp, 4
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x278]
cmp edx, 8
jb 0x433c0f
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433c05
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434590
push edx
push ecx
call fcn.0046e3a3
add esp, 8
xor eax, eax
mov dword [ebp - 0x27c], 0
mov word [ebp - 0x28c], ax
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x70]
mov dword [ebp - 0x278], 7
push eax
lea ecx, [ebp - 0x270]
call fcn.0043e520
add esp, 4
push 0x4c88c8
mov edx, eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x40]
call fcn.0043b890
add esp, 4
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x433c9b
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433c91
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434595
push edx
push ecx
call fcn.0046e3a3
add esp, 8
xor eax, eax
mov dword [ebp - 0x260], 0
push 0xb0
push eax
mov word [ebp - 0x270], ax
lea eax, [ebp - 0x180]
push eax
mov dword [ebp - 0x25c], 7
call fcn.004864f0
add esp, 4
lea ecx, [ebp - 0x180]
call fcn.004371e0
mov edx, str.cmd.exe__C_timeout__t_1_
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x170]
call fcn.00419840
cmp dword [ebp - 0x2c], 8
lea edx, [ebp - 0x40]
push dword [ebp - 0x30]
cmovae edx, dword [ebp - 0x40]
lea ecx, [ebp - 0x170]
call fcn.004104f0
add esp, 4
push 0x4e94e0
call fcn.0040fa40
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0x44
add esp, 4
movlpd qword [ebp - 0xcc], xmm0
xor eax, eax
movlpd qword [ebp - 0xc4], xmm0
lea ecx, [ebp - 0x28c]
movlpd qword [ebp - 0xbc], xmm0
movlpd qword [ebp - 0xb4], xmm0
movlpd qword [ebp - 0xac], xmm0
movlpd qword [ebp - 0x9e], xmm0
movlpd qword [ebp - 0x96], xmm0
mov word [ebp - 0x8e], ax
mov dword [ebp - 0xa4], 1
mov word [ebp - 0xa0], ax
call fcn.0045e700
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433d8e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94e0
call fcn.004104f0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f6d0
mov edx, 0x4c8124
mov ecx, eax
call fcn.0040f6d0
push 0xe45
mov ecx, eax
call fcn.0040dcd0
mov edx, str.:_FF_Cmd:
mov ecx, eax
call fcn.0040f6d0
mov esi, eax
lea ecx, [ebp - 0x180]
lea eax, [ebp - 0x270]
push eax
call fcn.00437120
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 8
jb 0x433dee
mov eax, dword [eax]
mov edx, eax
mov ecx, esi
call fcn.00419840
push eax
call fcn.0040fa40
mov byte [ebp - 4], 0x13
add esp, 4
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x433e44
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433e3a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43459a
push edx
push ecx
call fcn.0046e3a3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x25c], 7
mov word [ebp - 0x270], ax
cmp edx, 8
jb 0x433ea5
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433e9b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43459f
push edx
push ecx
call fcn.0046e3a3
add esp, 8
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x180]
call fcn.00437120
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 8
jb 0x433ec3
mov eax, dword [eax]
lea ecx, [ebp - 0x258]
push ecx
lea ecx, [ebp - 0xd0]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x433fb5
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x270]
mov esi, eax
call fcn.0045e700
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433f10
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94e0
call fcn.004104f0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f6d0
mov edx, 0x4c8124
mov ecx, eax
call fcn.0040f6d0
push 0x746
mov ecx, eax
call fcn.0040dcd0
mov edx, 0x4c834c
mov ecx, eax
call fcn.0040f6d0
mov edx, str.CreateProcess_failed:
mov ecx, eax
call fcn.00419840
push esi
mov ecx, eax
call fcn.004194b0
push eax
call fcn.0040fa40
mov byte [ebp - 4], 0x15
add esp, 4
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x433fb1
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433fa7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4345a4
push edx
push ecx
call fcn.0046e3a3
add esp, 8
xor bl, bl
jmp 0x433fb7
mov bl, 1
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x278]
cmp edx, 8
jb 0x433ffb
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433ff1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4345a9
push edx
push ecx
call fcn.0046e3a3
add esp, 8
lea ecx, [ebp - 0x270]
call fcn.0045e700
test bl, bl
je 0x4340ad
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x14], 8
mov esi, dword [eax + 0x10]
jb 0x43401d
mov eax, dword [eax]
push esi
mov edx, eax
mov ecx, 0x4e94e0
call fcn.004104f0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f6d0
mov edx, 0x4c8124
mov ecx, eax
call fcn.0040f6d0
push 0xe48
mov ecx, eax
call fcn.0040dcd0
mov edx, str.:_Successfully_launched_firefox_to_install_BrowserGuard_extension.
mov ecx, eax
call fcn.0040f6d0
push eax
call fcn.0040fa40
mov edx, dword [ebp - 0x25c]
add esp, 4
cmp edx, 8
jb 0x4340a6
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43409c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4345ae
push edx
push ecx
call fcn.0046e3a3
add esp, 8
mov bh, 1
jmp 0x434145
mov byte [ebp - 4], 0x18
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4340bc
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94e0
call fcn.004104f0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f6d0
mov edx, 0x4c8124
mov ecx, eax
call fcn.0040f6d0
push 0xe4d
mov ecx, eax
call fcn.0040dcd0
mov edx, str.:_Failed_to_launch_firefox_to_install_BrowserGuard_extension.
mov ecx, eax
call fcn.0040f6d0
push eax
call fcn.0040fa40
mov edx, dword [ebp - 0x25c]
add esp, 4
cmp edx, 8
jb 0x434145
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43413b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4345b3
push edx
push ecx
call fcn.0046e3a3
add esp, 8
push dword [ebp - 0x254]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x258]
call esi
lea ecx, [ebp - 0x180]
call fcn.004345e0
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x4341a0
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434196
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4345b8
push edx
push ecx
call fcn.0046e3a3
add esp, 8
mov edx, dword [ebp - 0x14]
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
cmp edx, 8
jb 0x4341ee
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4341e4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4345bd
push edx
push ecx
call fcn.0046e3a3
add esp, 8
lea ecx, [ebp - 0x248]
call fcn.0045ed90
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x434233
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434229
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4345c2
push edx
push ecx
call fcn.0046e3a3
add esp, 8
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x434517
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434267
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4345c7
push edx
push ecx
call fcn.0046e3a3
add esp, 8
jmp 0x434517
call fcn.0045e700
mov byte [ebp - 4], 0x19
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43428a
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94e0
call fcn.004104f0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f6d0
mov edx, 0x4c8124
mov ecx, eax
call fcn.0040f6d0
push 0xe54
mov ecx, eax
call fcn.0040dcd0
mov edx, str.:_Could_not_find:
mov ecx, eax
call fcn.0040f6d0
mov esi, eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x70]
push eax
call fcn.0040be50
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
mov ecx, esi
push dword [ebp - 0x30]
cmovae edx, dword [ebp - 0x40]
call fcn.004104f0
add esp, 4
push eax
call fcn.0040fa40
mov edx, dword [ebp - 0x2c]
add esp, 4
cmp edx, 8
jb 0x434337
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43432d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4345cc
push edx
push ecx
call fcn.0046e3a3
add esp, 8
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4343f0
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4343e6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4345d1
jmp 0x4343e6
lea ecx, [ebp - 0x28]
call fcn.0045e700
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x434398
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94e0
call fcn.004104f0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f6d0
mov edx, 0x4c8124
mov ecx, eax
call fcn.0040f6d0
push 0xe31
mov ecx, eax
call fcn.0040dcd0
mov edx, str.:_Failed_to_download_BrowserGuard_extension
mov ecx, eax
call fcn.0040f6d0
push eax
call fcn.0040fa40
add esp, 4
jmp 0x43434b
push edx
push ecx
call fcn.0046e3a3
add esp, 8
lea ecx, [ebp - 0x248]
call fcn.0045ed90
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x434435
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43442b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4345d1
push edx
push ecx
call fcn.0046e3a3
add esp, 8
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x434515
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43450b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43450b
jmp 0x4345d1
lea ecx, [ebp - 0x270]
call fcn.0045e700
mov byte [ebp - 4], 0x1b
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43448c
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94e0
call fcn.004104f0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f6d0
mov edx, 0x4c8124
mov ecx, eax
call fcn.0040f6d0
push 0xe5a
mov ecx, eax
call fcn.0040dcd0
mov edx, str.:_Firefox_not_found__skipping_BrowserGuard_extension_for_firefox.
mov ecx, eax
call fcn.0040f6d0
push eax
call fcn.0040fa40
mov edx, dword [ebp - 0x25c]
add esp, 4
cmp edx, 8
jb 0x434515
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43450b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4345d1
push edx
push ecx
call fcn.0046e3a3
add esp, 8
xor bh, bh
mov edx, dword [ebp - 0x74]
cmp edx, 8
jb 0x434554
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43454a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4345d1
push edx
push ecx
call fcn.0046e3a3
add esp, 8
mov al, bh
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046de82
mov esp, ebp
pop ebp
ret
call fcn.004892fc
call fcn.004892fc
call fcn.0048cc70
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
call fcn.004892fc
int3