Function at 0x433280
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b120a
mov eax, dword fs:[0]
push eax
sub esp, 0x284
mov eax, dword [0x4e506c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x28]
call fcn.0045dd60
mov dword [ebp - 4], 0
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4332c8
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe03
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Installing_BrowserGuard_extension_for_firefox
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x433352
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433348
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434172
push edx
push ecx
call fcn.0046da67
add esp, 8
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
lea ecx, [ebp - 0x88]
mov dword [ebp - 4], 1
call fcn.004331b0
test al, al
je 0x434072
lea ecx, [ebp - 0x28]
call fcn.0045dd60
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43339a
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe07
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Found_firefox_installed
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov byte [ebp - 4], 1
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x433421
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433417
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434177
push edx
push ecx
call fcn.0046da67
add esp, 8
push 0x4eab24
push 0x41a0d0
push 0x4eab2c
call fcn.00469f84
add esp, 0xc
test eax, eax
je 0x43417c
lea ecx, [ebp - 0x70]
call fcn.0043ff00
push 0x2a
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x270]
push str.242af0bb_db11_4734_b7a0_61cb8a9b20fb.xpi
mov byte [ebp - 0x274], 0
push dword [ebp - 0x274]
call fcn.0043cb40
add esp, 0xc
lea eax, [ebp - 0x270]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x70]
call fcn.00419790
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x4334c5
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4334bb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434181
push edx
push ecx
call fcn.0046da67
add esp, 8
push 0x1c
xor eax, eax
mov dword [ebp - 0x48], 0
push str.https:__ark.mwbsys.com_bgext
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.00407920
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x248]
call fcn.0045e190
mov byte [ebp - 4], 6
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
xor bl, bl
nop dword [eax]
mov eax, esi
inc esi
cmp eax, 3
jge 0x43363f
cmp esi, 1
jle 0x433528
push 0x9c4
call edi
lea ecx, [ebp - 0x28]
call fcn.0045dd60
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43353f
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe15
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Trying_to_download_BrowserGuard_extension
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4335c6
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4335bc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434172
push edx
push ecx
call fcn.0046da67
add esp, 8
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x270]
call fcn.0040beb0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x248]
call fcn.0045fd20
mov byte [ebp - 4], 6
mov bl, al
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x433635
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43362b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434172
push edx
push ecx
call fcn.0046da67
add esp, 8
test bl, bl
je 0x433510
jmp 0x433647
test bl, bl
je 0x433f81
lea ecx, [ebp - 0x28]
call fcn.0045dd60
mov byte [ebp - 4], 9
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43365e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe1b
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Successfully_downloaded_BrowserGuard_extension
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4336e5
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4336db
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434186
push edx
push ecx
call fcn.0046da67
add esp, 8
lea edx, [ebp - 0x250]
xor bh, bh
lea ecx, [ebp - 0x70]
call fcn.0043e630
lea ecx, [ebp - 0x28]
test al, al
je 0x433e76
call fcn.0045dd60
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433714
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe27
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Launching_firefox.exe_to_install_BrowserGuard_extension
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x43379b
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433791
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43418b
push edx
push ecx
call fcn.0046da67
add esp, 8
lea eax, [ebp - 0x88]
mov edx, 0x4c8888
push eax
lea ecx, [ebp - 0x28c]
call fcn.0043b750
add esp, 4
push str.___install__extension__
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
call fcn.0043b8f0
add esp, 4
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x278]
cmp edx, 8
jb 0x43380f
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433805
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434190
push edx
push ecx
call fcn.0046da67
add esp, 8
xor eax, eax
mov dword [ebp - 0x27c], 0
mov word [ebp - 0x28c], ax
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x70]
mov dword [ebp - 0x278], 7
push eax
lea ecx, [ebp - 0x270]
call fcn.0043e580
add esp, 4
push 0x4c8888
mov edx, eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x40]
call fcn.0043b8f0
add esp, 4
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x43389b
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433891
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434195
push edx
push ecx
call fcn.0046da67
add esp, 8
xor eax, eax
mov dword [ebp - 0x260], 0
push 0xb0
push eax
mov word [ebp - 0x270], ax
lea eax, [ebp - 0x180]
push eax
mov dword [ebp - 0x25c], 7
call fcn.00485bb0
add esp, 4
lea ecx, [ebp - 0x180]
call fcn.004373e0
mov edx, str.cmd.exe__C_timeout__t_1_
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x170]
call fcn.004189b0
cmp dword [ebp - 0x2c], 8
lea edx, [ebp - 0x40]
push dword [ebp - 0x30]
cmovae edx, dword [ebp - 0x40]
lea ecx, [ebp - 0x170]
call fcn.00410550
add esp, 4
push 0x4e94d8
call fcn.0040faa0
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0x44
add esp, 4
movlpd qword [ebp - 0xcc], xmm0
xor eax, eax
movlpd qword [ebp - 0xc4], xmm0
lea ecx, [ebp - 0x28c]
movlpd qword [ebp - 0xbc], xmm0
movlpd qword [ebp - 0xb4], xmm0
movlpd qword [ebp - 0xac], xmm0
movlpd qword [ebp - 0x9e], xmm0
movlpd qword [ebp - 0x96], xmm0
mov word [ebp - 0x8e], ax
mov dword [ebp - 0xa4], 1
mov word [ebp - 0xa0], ax
call fcn.0045dd60
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43398e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe33
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_FF_Cmd:
mov ecx, eax
call fcn.0040f730
mov esi, eax
lea ecx, [ebp - 0x180]
lea eax, [ebp - 0x270]
push eax
call fcn.00437320
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 8
jb 0x4339ee
mov eax, dword [eax]
mov edx, eax
mov ecx, esi
call fcn.004189b0
push eax
call fcn.0040faa0
mov byte [ebp - 4], 0x13
add esp, 4
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x433a44
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433a3a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43419a
push edx
push ecx
call fcn.0046da67
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x25c], 7
mov word [ebp - 0x270], ax
cmp edx, 8
jb 0x433aa5
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433a9b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43419f
push edx
push ecx
call fcn.0046da67
add esp, 8
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x180]
call fcn.00437320
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 8
jb 0x433ac3
mov eax, dword [eax]
lea ecx, [ebp - 0x258]
push ecx
lea ecx, [ebp - 0xd0]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x433bb5
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x270]
mov esi, eax
call fcn.0045dd60
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433b10
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0x74a
mov ecx, eax
call fcn.0040dd30
mov edx, 0x4c832c
mov ecx, eax
call fcn.0040f730
mov edx, str.CreateProcess_failed:
mov ecx, eax
call fcn.004189b0
push esi
mov ecx, eax
call fcn.00418620
push eax
call fcn.0040faa0
mov byte [ebp - 4], 0x15
add esp, 4
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x433bb1
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433ba7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341a4
push edx
push ecx
call fcn.0046da67
add esp, 8
xor bl, bl
jmp 0x433bb7
mov bl, 1
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x278]
cmp edx, 8
jb 0x433bfb
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433bf1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341a9
push edx
push ecx
call fcn.0046da67
add esp, 8
lea ecx, [ebp - 0x270]
call fcn.0045dd60
test bl, bl
je 0x433cad
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x14], 8
mov esi, dword [eax + 0x10]
jb 0x433c1d
mov eax, dword [eax]
push esi
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe36
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Successfully_launched_firefox_to_install_BrowserGuard_extension.
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov edx, dword [ebp - 0x25c]
add esp, 4
cmp edx, 8
jb 0x433ca6
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433c9c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341ae
push edx
push ecx
call fcn.0046da67
add esp, 8
mov bh, 1
jmp 0x433d45
mov byte [ebp - 4], 0x18
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433cbc
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe3b
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Failed_to_launch_firefox_to_install_BrowserGuard_extension.
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov edx, dword [ebp - 0x25c]
add esp, 4
cmp edx, 8
jb 0x433d45
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433d3b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341b3
push edx
push ecx
call fcn.0046da67
add esp, 8
push dword [ebp - 0x254]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x258]
call esi
lea ecx, [ebp - 0x180]
call fcn.004341e0
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x433da0
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433d96
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341b8
push edx
push ecx
call fcn.0046da67
add esp, 8
mov edx, dword [ebp - 0x14]
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
cmp edx, 8
jb 0x433dee
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433de4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341bd
push edx
push ecx
call fcn.0046da67
add esp, 8
lea ecx, [ebp - 0x248]
call fcn.0045e3f0
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x433e33
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433e29
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341c2
push edx
push ecx
call fcn.0046da67
add esp, 8
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x434117
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433e67
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341c7
push edx
push ecx
call fcn.0046da67
add esp, 8
jmp 0x434117
call fcn.0045dd60
mov byte [ebp - 4], 0x19
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433e8a
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe42
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Could_not_find:
mov ecx, eax
call fcn.0040f730
mov esi, eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x70]
push eax
call fcn.0040beb0
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
mov ecx, esi
push dword [ebp - 0x30]
cmovae edx, dword [ebp - 0x40]
call fcn.00410550
add esp, 4
push eax
call fcn.0040faa0
mov edx, dword [ebp - 0x2c]
add esp, 4
cmp edx, 8
jb 0x433f37
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433f2d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341cc
push edx
push ecx
call fcn.0046da67
add esp, 8
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x433ff0
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433fe6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341d1
jmp 0x433fe6
lea ecx, [ebp - 0x28]
call fcn.0045dd60
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433f98
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe1f
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Failed_to_download_BrowserGuard_extension
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
add esp, 4
jmp 0x433f4b
push edx
push ecx
call fcn.0046da67
add esp, 8
lea ecx, [ebp - 0x248]
call fcn.0045e3f0
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x434035
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43402b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341d1
push edx
push ecx
call fcn.0046da67
add esp, 8
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x434115
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43410b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43410b
jmp 0x4341d1
lea ecx, [ebp - 0x270]
call fcn.0045dd60
mov byte [ebp - 4], 0x1b
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43408c
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e94d8
call fcn.00410550
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f730
mov edx, 0x4c8104
mov ecx, eax
call fcn.0040f730
push 0xe48
mov ecx, eax
call fcn.0040dd30
mov edx, str.:_Firefox_not_found__skipping_BrowserGuard_extension_for_firefox.
mov ecx, eax
call fcn.0040f730
push eax
call fcn.0040faa0
mov edx, dword [ebp - 0x25c]
add esp, 4
cmp edx, 8
jb 0x434115
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43410b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341d1
push edx
push ecx
call fcn.0046da67
add esp, 8
xor bh, bh
mov edx, dword [ebp - 0x74]
cmp edx, 8
jb 0x434154
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43414a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4341d1
push edx
push ecx
call fcn.0046da67
add esp, 8
mov al, bh
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046d546
mov esp, ebp
pop ebp
ret
call fcn.004889bc
call fcn.004889bc
call fcn.0048c340
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
call fcn.004889bc
int3