Function at 0x433df0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b107a
mov eax, dword fs:[0]
push eax
sub esp, 0x284
mov eax, dword [0x4e406c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x28]
call fcn.0045e3b0
mov dword [ebp - 4], 0
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433e38
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e84e8
call fcn.00410760
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f940
mov edx, 0x4c7114
mov ecx, eax
call fcn.0040f940
push 0xe23
mov ecx, eax
call fcn.0040df40
mov edx, str.:_Installing_BrowserGuard_extension_for_firefox
mov ecx, eax
call fcn.0040f940
push eax
call fcn.0040fcb0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x433ec2
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433eb8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434ce2
push edx
push ecx
call fcn.0046d84e
add esp, 8
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
lea ecx, [ebp - 0x88]
mov dword [ebp - 4], 1
call fcn.00433d20
test al, al
je 0x434be2
lea ecx, [ebp - 0x28]
call fcn.0045e3b0
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433f0a
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e84e8
call fcn.00410760
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f940
mov edx, 0x4c7114
mov ecx, eax
call fcn.0040f940
push 0xe27
mov ecx, eax
call fcn.0040df40
mov edx, str.:_Found_firefox_installed
mov ecx, eax
call fcn.0040f940
push eax
call fcn.0040fcb0
mov byte [ebp - 4], 1
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x433f91
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433f87
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434ce7
push edx
push ecx
call fcn.0046d84e
add esp, 8
push 0x4e9a7c
push 0x41b130
push 0x4e9a84
call fcn.00469d9a
add esp, 0xc
test eax, eax
je 0x434cec
lea ecx, [ebp - 0x70]
call fcn.00441000
push 0x2a
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x270]
push str.242af0bb_db11_4734_b7a0_61cb8a9b20fb.xpi
mov byte [ebp - 0x274], 0
push dword [ebp - 0x274]
call fcn.0043d000
add esp, 0xc
lea eax, [ebp - 0x270]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x70]
call fcn.0041a7f0
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x434035
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43402b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434cf1
push edx
push ecx
call fcn.0046d84e
add esp, 8
push 0x1c
xor eax, eax
mov dword [ebp - 0x48], 0
push str.https:__ark.mwbsys.com_bgext
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.00407cf0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x248]
call fcn.0045e490
mov byte [ebp - 4], 6
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
xor bl, bl
nop dword [eax]
mov eax, esi
inc esi
cmp eax, 3
jge 0x4341af
cmp esi, 1
jle 0x434098
push 0x9c4
call edi
lea ecx, [ebp - 0x28]
call fcn.0045e3b0
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4340af
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e84e8
call fcn.00410760
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f940
mov edx, 0x4c7114
mov ecx, eax
call fcn.0040f940
push 0xe35
mov ecx, eax
call fcn.0040df40
mov edx, str.:_Trying_to_download_BrowserGuard_extension
mov ecx, eax
call fcn.0040f940
push eax
call fcn.0040fcb0
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x434136
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43412c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434ce2
push edx
push ecx
call fcn.0046d84e
add esp, 8
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x270]
call fcn.0040c290
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x248]
call fcn.0045ff80
mov byte [ebp - 4], 6
mov bl, al
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x4341a5
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43419b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434ce2
push edx
push ecx
call fcn.0046d84e
add esp, 8
test bl, bl
je 0x434080
jmp 0x4341b7
test bl, bl
je 0x434af1
lea ecx, [ebp - 0x28]
call fcn.0045e3b0
mov byte [ebp - 4], 9
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4341ce
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e84e8
call fcn.00410760
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f940
mov edx, 0x4c7114
mov ecx, eax
call fcn.0040f940
push 0xe3b
mov ecx, eax
call fcn.0040df40
mov edx, str.:_Successfully_downloaded_BrowserGuard_extension
mov ecx, eax
call fcn.0040f940
push eax
call fcn.0040fcb0
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x434255
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43424b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434cf6
push edx
push ecx
call fcn.0046d84e
add esp, 8
lea edx, [ebp - 0x250]
xor bh, bh
lea ecx, [ebp - 0x70]
call fcn.0043f730
lea ecx, [ebp - 0x28]
test al, al
je 0x4349e6
call fcn.0045e3b0
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x434284
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e84e8
call fcn.00410760
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f940
mov edx, 0x4c7114
mov ecx, eax
call fcn.0040f940
push 0xe47
mov ecx, eax
call fcn.0040df40
mov edx, str.:_Launching_firefox.exe_to_install_BrowserGuard_extension
mov ecx, eax
call fcn.0040f940
push eax
call fcn.0040fcb0
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x43430b
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434301
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434cfb
push edx
push ecx
call fcn.0046d84e
add esp, 8
lea eax, [ebp - 0x88]
mov edx, 0x4c7834
push eax
lea ecx, [ebp - 0x28c]
call fcn.0043bbf0
add esp, 4
push str.___install__extension__
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
call fcn.0043bd90
add esp, 4
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x278]
cmp edx, 8
jb 0x43437f
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434375
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d00
push edx
push ecx
call fcn.0046d84e
add esp, 8
xor eax, eax
mov dword [ebp - 0x27c], 0
mov word [ebp - 0x28c], ax
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x70]
mov dword [ebp - 0x278], 7
push eax
lea ecx, [ebp - 0x270]
call fcn.0043f680
add esp, 4
push 0x4c7834
mov edx, eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x40]
call fcn.0043bd90
add esp, 4
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x43440b
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434401
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d05
push edx
push ecx
call fcn.0046d84e
add esp, 8
xor eax, eax
mov dword [ebp - 0x260], 0
push 0xb0
push eax
mov word [ebp - 0x270], ax
lea eax, [ebp - 0x180]
push eax
mov dword [ebp - 0x25c], 7
call fcn.00485990
add esp, 4
lea ecx, [ebp - 0x180]
call fcn.00437a50
mov edx, str.cmd.exe__C_timeout__t_1_
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x170]
call fcn.00419a50
cmp dword [ebp - 0x2c], 8
lea edx, [ebp - 0x40]
push dword [ebp - 0x30]
cmovae edx, dword [ebp - 0x40]
lea ecx, [ebp - 0x170]
call fcn.00410760
add esp, 4
push 0x4e84e8
call fcn.0040fcb0
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0x44
add esp, 4
movlpd qword [ebp - 0xcc], xmm0
xor eax, eax
movlpd qword [ebp - 0xc4], xmm0
lea ecx, [ebp - 0x28c]
movlpd qword [ebp - 0xbc], xmm0
movlpd qword [ebp - 0xb4], xmm0
movlpd qword [ebp - 0xac], xmm0
movlpd qword [ebp - 0x9e], xmm0
movlpd qword [ebp - 0x96], xmm0
mov word [ebp - 0x8e], ax
mov dword [ebp - 0xa4], 1
mov word [ebp - 0xa0], ax
call fcn.0045e3b0
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4344fe
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e84e8
call fcn.00410760
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f940
mov edx, 0x4c7114
mov ecx, eax
call fcn.0040f940
push 0xe53
mov ecx, eax
call fcn.0040df40
mov edx, str.:_FF_Cmd:
mov ecx, eax
call fcn.0040f940
mov esi, eax
lea ecx, [ebp - 0x180]
lea eax, [ebp - 0x270]
push eax
call fcn.00437990
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 8
jb 0x43455e
mov eax, dword [eax]
mov edx, eax
mov ecx, esi
call fcn.00419a50
push eax
call fcn.0040fcb0
mov byte [ebp - 4], 0x13
add esp, 4
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x4345b4
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4345aa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d0a
push edx
push ecx
call fcn.0046d84e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x25c], 7
mov word [ebp - 0x270], ax
cmp edx, 8
jb 0x434615
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43460b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d0f
push edx
push ecx
call fcn.0046d84e
add esp, 8
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x180]
call fcn.00437990
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 8
jb 0x434633
mov eax, dword [eax]
lea ecx, [ebp - 0x258]
push ecx
lea ecx, [ebp - 0xd0]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x434725
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x270]
mov esi, eax
call fcn.0045e3b0
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x434680
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e84e8
call fcn.00410760
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f940
mov edx, 0x4c7114
mov ecx, eax
call fcn.0040f940
push 0x738
mov ecx, eax
call fcn.0040df40
mov edx, 0x4c731c
mov ecx, eax
call fcn.0040f940
mov edx, str.CreateProcess_failed:
mov ecx, eax
call fcn.00419a50
push esi
mov ecx, eax
call fcn.004196c0
push eax
call fcn.0040fcb0
mov byte [ebp - 4], 0x15
add esp, 4
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x434721
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434717
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d14
push edx
push ecx
call fcn.0046d84e
add esp, 8
xor bl, bl
jmp 0x434727
mov bl, 1
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x278]
cmp edx, 8
jb 0x43476b
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434761
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d19
push edx
push ecx
call fcn.0046d84e
add esp, 8
lea ecx, [ebp - 0x270]
call fcn.0045e3b0
test bl, bl
je 0x43481d
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x14], 8
mov esi, dword [eax + 0x10]
jb 0x43478d
mov eax, dword [eax]
push esi
mov edx, eax
mov ecx, 0x4e84e8
call fcn.00410760
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f940
mov edx, 0x4c7114
mov ecx, eax
call fcn.0040f940
push 0xe56
mov ecx, eax
call fcn.0040df40
mov edx, str.:_Successfully_launched_firefox_to_install_BrowserGuard_extension.
mov ecx, eax
call fcn.0040f940
push eax
call fcn.0040fcb0
mov edx, dword [ebp - 0x25c]
add esp, 4
cmp edx, 8
jb 0x434816
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43480c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d1e
push edx
push ecx
call fcn.0046d84e
add esp, 8
mov bh, 1
jmp 0x4348b5
mov byte [ebp - 4], 0x18
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43482c
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e84e8
call fcn.00410760
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f940
mov edx, 0x4c7114
mov ecx, eax
call fcn.0040f940
push 0xe5b
mov ecx, eax
call fcn.0040df40
mov edx, str.:_Failed_to_launch_firefox_to_install_BrowserGuard_extension.
mov ecx, eax
call fcn.0040f940
push eax
call fcn.0040fcb0
mov edx, dword [ebp - 0x25c]
add esp, 4
cmp edx, 8
jb 0x4348b5
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4348ab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d23
push edx
push ecx
call fcn.0046d84e
add esp, 8
push dword [ebp - 0x254]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x258]
call esi
lea ecx, [ebp - 0x180]
call fcn.00434d50
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x434910
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434906
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d28
push edx
push ecx
call fcn.0046d84e
add esp, 8
mov edx, dword [ebp - 0x14]
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
cmp edx, 8
jb 0x43495e
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434954
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d2d
push edx
push ecx
call fcn.0046d84e
add esp, 8
lea ecx, [ebp - 0x248]
call fcn.0045e6f0
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x4349a3
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434999
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d32
push edx
push ecx
call fcn.0046d84e
add esp, 8
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x434c87
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4349d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d37
push edx
push ecx
call fcn.0046d84e
add esp, 8
jmp 0x434c87
call fcn.0045e3b0
mov byte [ebp - 4], 0x19
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4349fa
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e84e8
call fcn.00410760
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f940
mov edx, 0x4c7114
mov ecx, eax
call fcn.0040f940
push 0xe62
mov ecx, eax
call fcn.0040df40
mov edx, str.:_Could_not_find:
mov ecx, eax
call fcn.0040f940
mov esi, eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x70]
push eax
call fcn.0040c290
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
mov ecx, esi
push dword [ebp - 0x30]
cmovae edx, dword [ebp - 0x40]
call fcn.00410760
add esp, 4
push eax
call fcn.0040fcb0
mov edx, dword [ebp - 0x2c]
add esp, 4
cmp edx, 8
jb 0x434aa7
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434a9d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d3c
push edx
push ecx
call fcn.0046d84e
add esp, 8
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x434b60
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434b56
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d41
jmp 0x434b56
lea ecx, [ebp - 0x28]
call fcn.0045e3b0
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x434b08
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e84e8
call fcn.00410760
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f940
mov edx, 0x4c7114
mov ecx, eax
call fcn.0040f940
push 0xe3f
mov ecx, eax
call fcn.0040df40
mov edx, str.:_Failed_to_download_BrowserGuard_extension
mov ecx, eax
call fcn.0040f940
push eax
call fcn.0040fcb0
add esp, 4
jmp 0x434abb
push edx
push ecx
call fcn.0046d84e
add esp, 8
lea ecx, [ebp - 0x248]
call fcn.0045e6f0
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x434ba5
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434b9b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d41
push edx
push ecx
call fcn.0046d84e
add esp, 8
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x434c85
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434c7b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x434c7b
jmp 0x434d41
lea ecx, [ebp - 0x270]
call fcn.0045e3b0
mov byte [ebp - 4], 0x1b
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x434bfc
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e84e8
call fcn.00410760
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f940
mov edx, 0x4c7114
mov ecx, eax
call fcn.0040f940
push 0xe68
mov ecx, eax
call fcn.0040df40
mov edx, str.:_Firefox_not_found__skipping_BrowserGuard_extension_for_firefox.
mov ecx, eax
call fcn.0040f940
push eax
call fcn.0040fcb0
mov edx, dword [ebp - 0x25c]
add esp, 4
cmp edx, 8
jb 0x434c85
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434c7b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d41
push edx
push ecx
call fcn.0046d84e
add esp, 8
xor bh, bh
mov edx, dword [ebp - 0x74]
cmp edx, 8
jb 0x434cc4
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434cba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434d41
push edx
push ecx
call fcn.0046d84e
add esp, 8
mov al, bh
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046d32d
mov esp, ebp
pop ebp
ret
call fcn.0048879c
call fcn.0048879c
call fcn.0048c110
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
call fcn.0048879c
int3