Function at 0x433300
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b132a
mov eax, dword fs:[0]
push eax
sub esp, 0x284
mov eax, dword [0x4e506c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x28]
call fcn.0045deb0
mov dword [ebp - 4], 0
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433348
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe03
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Installing_BrowserGuard_extension_for_firefox
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4333d2
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4333c8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341f2
push edx
push ecx
call fcn.0046db96
add esp, 8
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
lea ecx, [ebp - 0x88]
mov dword [ebp - 4], 1
call fcn.00433230
test al, al
je 0x4340f2
lea ecx, [ebp - 0x28]
call fcn.0045deb0
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43341a
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe07
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Found_firefox_installed
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov byte [ebp - 4], 1
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4334a1
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433497
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341f7
push edx
push ecx
call fcn.0046db96
add esp, 8
push 0x4eab24
push 0x41a160
push 0x4eab2c
call fcn.0046a0b3
add esp, 0xc
test eax, eax
je 0x4341fc
lea ecx, [ebp - 0x70]
call fcn.0043ff80
push 0x2a
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x270]
push str.242af0bb_db11_4734_b7a0_61cb8a9b20fb.xpi
mov byte [ebp - 0x274], 0
push dword [ebp - 0x274]
call fcn.0043cbc0
add esp, 0xc
lea eax, [ebp - 0x270]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x70]
call fcn.00419820
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x433545
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43353b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434201
push edx
push ecx
call fcn.0046db96
add esp, 8
push 0x1c
xor eax, eax
mov dword [ebp - 0x48], 0
push str.https:__ark.mwbsys.com_bgext
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.00407920
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x248]
call fcn.0045e2e0
mov byte [ebp - 4], 6
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
xor bl, bl
nop dword [eax]
mov eax, esi
inc esi
cmp eax, 3
jge 0x4336bf
cmp esi, 1
jle 0x4335a8
push 0x9c4
call edi
lea ecx, [ebp - 0x28]
call fcn.0045deb0
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4335bf
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe15
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Trying_to_download_BrowserGuard_extension
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x433646
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43363c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341f2
push edx
push ecx
call fcn.0046db96
add esp, 8
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x270]
call fcn.0040beb0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x248]
call fcn.0045fe60
mov byte [ebp - 4], 6
mov bl, al
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x4336b5
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4336ab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341f2
push edx
push ecx
call fcn.0046db96
add esp, 8
test bl, bl
je 0x433590
jmp 0x4336c7
test bl, bl
je 0x434001
lea ecx, [ebp - 0x28]
call fcn.0045deb0
mov byte [ebp - 4], 9
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4336de
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe1b
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Successfully_downloaded_BrowserGuard_extension
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x433765
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43375b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434206
push edx
push ecx
call fcn.0046db96
add esp, 8
lea edx, [ebp - 0x250]
xor bh, bh
lea ecx, [ebp - 0x70]
call fcn.0043e6b0
lea ecx, [ebp - 0x28]
test al, al
je 0x433ef6
call fcn.0045deb0
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433794
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe27
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Launching_firefox.exe_to_install_BrowserGuard_extension
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x43381b
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433811
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43420b
push edx
push ecx
call fcn.0046db96
add esp, 8
lea eax, [ebp - 0x88]
mov edx, 0x4c8888
push eax
lea ecx, [ebp - 0x28c]
call fcn.0043b7d0
add esp, 4
push str.___install__extension__
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
call fcn.0043b970
add esp, 4
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x278]
cmp edx, 8
jb 0x43388f
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433885
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434210
push edx
push ecx
call fcn.0046db96
add esp, 8
xor eax, eax
mov dword [ebp - 0x27c], 0
mov word [ebp - 0x28c], ax
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x70]
mov dword [ebp - 0x278], 7
push eax
lea ecx, [ebp - 0x270]
call fcn.0043e600
add esp, 4
push 0x4c8888
mov edx, eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x40]
call fcn.0043b970
add esp, 4
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x43391b
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433911
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434215
push edx
push ecx
call fcn.0046db96
add esp, 8
xor eax, eax
mov dword [ebp - 0x260], 0
push 0xb0
push eax
mov word [ebp - 0x270], ax
lea eax, [ebp - 0x180]
push eax
mov dword [ebp - 0x25c], 7
call fcn.00485ce0
add esp, 4
lea ecx, [ebp - 0x180]
call fcn.00437460
mov edx, str.cmd.exe__C_timeout__t_1_
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x170]
call fcn.00418a40
cmp dword [ebp - 0x2c], 8
lea edx, [ebp - 0x40]
push dword [ebp - 0x30]
cmovae edx, dword [ebp - 0x40]
lea ecx, [ebp - 0x170]
call fcn.00410550
add esp, 4
push 0x4e94d8
call fcn.0040faa0
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0x44
add esp, 4
movlpd qword [ebp - 0xcc], xmm0
xor eax, eax
movlpd qword [ebp - 0xc4], xmm0
lea ecx, [ebp - 0x28c]
movlpd qword [ebp - 0xbc], xmm0
movlpd qword [ebp - 0xb4], xmm0
movlpd qword [ebp - 0xac], xmm0
movlpd qword [ebp - 0x9e], xmm0
movlpd qword [ebp - 0x96], xmm0
mov word [ebp - 0x8e], ax
mov dword [ebp - 0xa4], 1
mov word [ebp - 0xa0], ax
call fcn.0045deb0
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433a0e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe33
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_FF_Cmd:
mov ecx, eax
call fcn.0040f730
mov esi, eax
lea ecx, [ebp - 0x180]
lea eax, [ebp - 0x270]
push eax
call fcn.004373a0
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 8
jb 0x433a6e
mov eax, dword [eax]
mov edx, eax
mov ecx, esi
call fcn.00418a40
push eax
call fcn.0040faa0
mov byte [ebp - 4], 0x13
add esp, 4
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x433ac4
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433aba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43421a
push edx
push ecx
call fcn.0046db96
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x25c], 7
mov word [ebp - 0x270], ax
cmp edx, 8
jb 0x433b25
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433b1b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43421f
push edx
push ecx
call fcn.0046db96
add esp, 8
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x180]
call fcn.004373a0
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 8
jb 0x433b43
mov eax, dword [eax]
lea ecx, [ebp - 0x258]
push ecx
lea ecx, [ebp - 0xd0]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x433c35
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x270]
mov esi, eax
call fcn.0045deb0
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433b90
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0x74a
mov ecx, eax
call fcn.0040dd30
mov edx, 0x4c832c
mov ecx, eax
call fcn.0040f730
mov edx, str.CreateProcess_failed:
mov ecx, eax
call fcn.00418a40
push esi
mov ecx, eax
call fcn.004186b0
push eax
call fcn.0040faa0
mov byte [ebp - 4], 0x15
add esp, 4
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x433c31
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433c27
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434224
push edx
push ecx
call fcn.0046db96
add esp, 8
xor bl, bl
jmp 0x433c37
mov bl, 1
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x278]
cmp edx, 8
jb 0x433c7b
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433c71
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434229
push edx
push ecx
call fcn.0046db96
add esp, 8
lea ecx, [ebp - 0x270]
call fcn.0045deb0
test bl, bl
je 0x433d2d
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x14], 8
mov esi, dword [eax + 0x10]
jb 0x433c9d
mov eax, dword [eax]
push esi
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe36
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Successfully_launched_firefox_to_install_BrowserGuard_extension.
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov edx, dword [ebp - 0x25c]
add esp, 4
cmp edx, 8
jb 0x433d26
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433d1c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43422e
push edx
push ecx
call fcn.0046db96
add esp, 8
mov bh, 1
jmp 0x433dc5
mov byte [ebp - 4], 0x18
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433d3c
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe3b
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Failed_to_launch_firefox_to_install_BrowserGuard_extension.
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov edx, dword [ebp - 0x25c]
add esp, 4
cmp edx, 8
jb 0x433dc5
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433dbb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434233
push edx
push ecx
call fcn.0046db96
add esp, 8
push dword [ebp - 0x254]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x258]
call esi
lea ecx, [ebp - 0x180]
call fcn.00434260
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x433e20
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433e16
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434238
push edx
push ecx
call fcn.0046db96
add esp, 8
mov edx, dword [ebp - 0x14]
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
cmp edx, 8
jb 0x433e6e
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433e64
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43423d
push edx
push ecx
call fcn.0046db96
add esp, 8
lea ecx, [ebp - 0x248]
call fcn.0045e540
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x433eb3
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433ea9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434242
push edx
push ecx
call fcn.0046db96
add esp, 8
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x434197
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433ee7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434247
push edx
push ecx
call fcn.0046db96
add esp, 8
jmp 0x434197
call fcn.0045deb0
mov byte [ebp - 4], 0x19
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433f0a
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe42
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Could_not_find:
mov ecx, eax
call fcn.0040f730
mov esi, eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x70]
push eax
call fcn.0040beb0
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
mov ecx, esi
push dword [ebp - 0x30]
cmovae edx, dword [ebp - 0x40]
call fcn.00410550
add esp, 4
push eax
call fcn.0040faa0
mov edx, dword [ebp - 0x2c]
add esp, 4
cmp edx, 8
jb 0x433fb7
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433fad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43424c
push edx
push ecx
call fcn.0046db96
add esp, 8
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x434070
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434066
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434251
jmp 0x434066
lea ecx, [ebp - 0x28]
call fcn.0045deb0
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x434018
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe1f
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Failed_to_download_BrowserGuard_extension
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
add esp, 4
jmp 0x433fcb
push edx
push ecx
call fcn.0046db96
add esp, 8
lea ecx, [ebp - 0x248]
call fcn.0045e540
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x4340b5
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4340ab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434251
push edx
push ecx
call fcn.0046db96
add esp, 8
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x434195
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43418b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43418b
jmp 0x434251
lea ecx, [ebp - 0x270]
call fcn.0045deb0
mov byte [ebp - 4], 0x1b
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43410c
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe48
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Firefox_not_found__skipping_BrowserGuard_extension_for_firefox.
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov edx, dword [ebp - 0x25c]
add esp, 4
cmp edx, 8
jb 0x434195
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43418b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434251
push edx
push ecx
call fcn.0046db96
add esp, 8
xor bh, bh
mov edx, dword [ebp - 0x74]
cmp edx, 8
jb 0x4341d4
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4341ca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434251
push edx
push ecx
call fcn.0046db96
add esp, 8
mov al, bh
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046d675
mov esp, ebp
pop ebp
ret
call fcn.00488aec
call fcn.00488aec
call fcn.0048c460
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
call fcn.00488aec
int3