Function at 0x433730
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b28ca
mov eax, dword fs:[0]
push eax
sub esp, 0x284
mov eax, dword [0x4e706c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x28]
call fcn.0045f3e0
mov dword [ebp - 4], 0
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433778
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4eb558
call fcn.004105c0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f7a0
mov edx, 0x4c9104
mov ecx, eax
call fcn.0040f7a0
push 0xe20
mov ecx, eax
call fcn.0040dda0
mov edx, str.:_Installing_BrowserGuard_extension_for_firefox
mov ecx, eax
call fcn.0040f7a0
push eax
call fcn.0040fb10
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x433802
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4337f8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434622
push edx
push ecx
call fcn.0046f0d0
add esp, 8
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
lea ecx, [ebp - 0x88]
mov dword [ebp - 4], 1
call fcn.00433660
test al, al
je 0x434522
lea ecx, [ebp - 0x28]
call fcn.0045f3e0
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43384a
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4eb558
call fcn.004105c0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f7a0
mov edx, 0x4c9104
mov ecx, eax
call fcn.0040f7a0
push 0xe24
mov ecx, eax
call fcn.0040dda0
mov edx, str.:_Found_firefox_installed
mov ecx, eax
call fcn.0040f7a0
push eax
call fcn.0040fb10
mov byte [ebp - 4], 1
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4338d1
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4338c7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434627
push edx
push ecx
call fcn.0046f0d0
add esp, 8
push 0x4ecba4
push 0x41a1b0
push 0x4ecbac
call fcn.0046b5e3
add esp, 0xc
test eax, eax
je 0x43462c
lea ecx, [ebp - 0x70]
call fcn.004403a0
push 0x2a
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x270]
push str.242af0bb_db11_4734_b7a0_61cb8a9b20fb.xpi
mov byte [ebp - 0x274], 0
push dword [ebp - 0x274]
call fcn.0043cfe0
add esp, 0xc
lea eax, [ebp - 0x270]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x70]
call fcn.00419870
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x433975
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43396b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434631
push edx
push ecx
call fcn.0046f0d0
add esp, 8
push 0x1c
xor eax, eax
mov dword [ebp - 0x48], 0
push str.https:__ark.mwbsys.com_bgext
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.00407990
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x248]
call fcn.0045f810
mov byte [ebp - 4], 6
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
xor bl, bl
nop dword [eax]
mov eax, esi
inc esi
cmp eax, 3
jge 0x433aef
cmp esi, 1
jle 0x4339d8
push 0x9c4
call edi
lea ecx, [ebp - 0x28]
call fcn.0045f3e0
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4339ef
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4eb558
call fcn.004105c0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f7a0
mov edx, 0x4c9104
mov ecx, eax
call fcn.0040f7a0
push 0xe32
mov ecx, eax
call fcn.0040dda0
mov edx, str.:_Trying_to_download_BrowserGuard_extension
mov ecx, eax
call fcn.0040f7a0
push eax
call fcn.0040fb10
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x433a76
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433a6c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434622
push edx
push ecx
call fcn.0046f0d0
add esp, 8
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x270]
call fcn.0040bf20
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x248]
call fcn.00461390
mov byte [ebp - 4], 6
mov bl, al
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x433ae5
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433adb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434622
push edx
push ecx
call fcn.0046f0d0
add esp, 8
test bl, bl
je 0x4339c0
jmp 0x433af7
test bl, bl
je 0x434431
lea ecx, [ebp - 0x28]
call fcn.0045f3e0
mov byte [ebp - 4], 9
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433b0e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4eb558
call fcn.004105c0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f7a0
mov edx, 0x4c9104
mov ecx, eax
call fcn.0040f7a0
push 0xe38
mov ecx, eax
call fcn.0040dda0
mov edx, str.:_Successfully_downloaded_BrowserGuard_extension
mov ecx, eax
call fcn.0040f7a0
push eax
call fcn.0040fb10
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x433b95
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433b8b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434636
push edx
push ecx
call fcn.0046f0d0
add esp, 8
lea edx, [ebp - 0x250]
xor bh, bh
lea ecx, [ebp - 0x70]
call fcn.0043ead0
lea ecx, [ebp - 0x28]
test al, al
je 0x434326
call fcn.0045f3e0
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433bc4
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4eb558
call fcn.004105c0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f7a0
mov edx, 0x4c9104
mov ecx, eax
call fcn.0040f7a0
push 0xe44
mov ecx, eax
call fcn.0040dda0
mov edx, str.:_Launching_firefox.exe_to_install_BrowserGuard_extension
mov ecx, eax
call fcn.0040f7a0
push eax
call fcn.0040fb10
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x433c4b
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433c41
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43463b
push edx
push ecx
call fcn.0046f0d0
add esp, 8
lea eax, [ebp - 0x88]
mov edx, 0x4c9888
push eax
lea ecx, [ebp - 0x28c]
call fcn.0043bc00
add esp, 4
push str.___install__extension__
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
call fcn.0043bda0
add esp, 4
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x278]
cmp edx, 8
jb 0x433cbf
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433cb5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434640
push edx
push ecx
call fcn.0046f0d0
add esp, 8
xor eax, eax
mov dword [ebp - 0x27c], 0
mov word [ebp - 0x28c], ax
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x70]
mov dword [ebp - 0x278], 7
push eax
lea ecx, [ebp - 0x270]
call fcn.0043ea20
add esp, 4
push 0x4c9888
mov edx, eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x40]
call fcn.0043bda0
add esp, 4
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x433d4b
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433d41
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434645
push edx
push ecx
call fcn.0046f0d0
add esp, 8
xor eax, eax
mov dword [ebp - 0x260], 0
push 0xb0
push eax
mov word [ebp - 0x270], ax
lea eax, [ebp - 0x180]
push eax
mov dword [ebp - 0x25c], 7
call fcn.00487250
add esp, 4
lea ecx, [ebp - 0x180]
call fcn.00437890
mov edx, str.cmd.exe__C_timeout__t_1_
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x170]
call fcn.00418a90
cmp dword [ebp - 0x2c], 8
lea edx, [ebp - 0x40]
push dword [ebp - 0x30]
cmovae edx, dword [ebp - 0x40]
lea ecx, [ebp - 0x170]
call fcn.004105c0
add esp, 4
push 0x4eb558
call fcn.0040fb10
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0x44
add esp, 4
movlpd qword [ebp - 0xcc], xmm0
xor eax, eax
movlpd qword [ebp - 0xc4], xmm0
lea ecx, [ebp - 0x28c]
movlpd qword [ebp - 0xbc], xmm0
movlpd qword [ebp - 0xb4], xmm0
movlpd qword [ebp - 0xac], xmm0
movlpd qword [ebp - 0x9e], xmm0
movlpd qword [ebp - 0x96], xmm0
mov word [ebp - 0x8e], ax
mov dword [ebp - 0xa4], 1
mov word [ebp - 0xa0], ax
call fcn.0045f3e0
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433e3e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4eb558
call fcn.004105c0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f7a0
mov edx, 0x4c9104
mov ecx, eax
call fcn.0040f7a0
push 0xe50
mov ecx, eax
call fcn.0040dda0
mov edx, str.:_FF_Cmd:
mov ecx, eax
call fcn.0040f7a0
mov esi, eax
lea ecx, [ebp - 0x180]
lea eax, [ebp - 0x270]
push eax
call fcn.004377d0
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 8
jb 0x433e9e
mov eax, dword [eax]
mov edx, eax
mov ecx, esi
call fcn.00418a90
push eax
call fcn.0040fb10
mov byte [ebp - 4], 0x13
add esp, 4
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x433ef4
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433eea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43464a
push edx
push ecx
call fcn.0046f0d0
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x25c], 7
mov word [ebp - 0x270], ax
cmp edx, 8
jb 0x433f55
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433f4b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43464f
push edx
push ecx
call fcn.0046f0d0
add esp, 8
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x180]
call fcn.004377d0
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 8
jb 0x433f73
mov eax, dword [eax]
lea ecx, [ebp - 0x258]
push ecx
lea ecx, [ebp - 0xd0]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x434065
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x270]
mov esi, eax
call fcn.0045f3e0
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x433fc0
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4eb558
call fcn.004105c0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f7a0
mov edx, 0x4c9104
mov ecx, eax
call fcn.0040f7a0
push 0x767
mov ecx, eax
call fcn.0040dda0
mov edx, 0x4c932c
mov ecx, eax
call fcn.0040f7a0
mov edx, str.CreateProcess_failed:
mov ecx, eax
call fcn.00418a90
push esi
mov ecx, eax
call fcn.00418700
push eax
call fcn.0040fb10
mov byte [ebp - 4], 0x15
add esp, 4
mov edx, dword [ebp - 0x25c]
cmp edx, 8
jb 0x434061
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434057
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434654
push edx
push ecx
call fcn.0046f0d0
add esp, 8
xor bl, bl
jmp 0x434067
mov bl, 1
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x278]
cmp edx, 8
jb 0x4340ab
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4340a1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434659
push edx
push ecx
call fcn.0046f0d0
add esp, 8
lea ecx, [ebp - 0x270]
call fcn.0045f3e0
test bl, bl
je 0x43415d
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x14], 8
mov esi, dword [eax + 0x10]
jb 0x4340cd
mov eax, dword [eax]
push esi
mov edx, eax
mov ecx, 0x4eb558
call fcn.004105c0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f7a0
mov edx, 0x4c9104
mov ecx, eax
call fcn.0040f7a0
push 0xe53
mov ecx, eax
call fcn.0040dda0
mov edx, str.:_Successfully_launched_firefox_to_install_BrowserGuard_extension.
mov ecx, eax
call fcn.0040f7a0
push eax
call fcn.0040fb10
mov edx, dword [ebp - 0x25c]
add esp, 4
cmp edx, 8
jb 0x434156
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43414c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43465e
push edx
push ecx
call fcn.0046f0d0
add esp, 8
mov bh, 1
jmp 0x4341f5
mov byte [ebp - 4], 0x18
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43416c
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4eb558
call fcn.004105c0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f7a0
mov edx, 0x4c9104
mov ecx, eax
call fcn.0040f7a0
push 0xe58
mov ecx, eax
call fcn.0040dda0
mov edx, str.:_Failed_to_launch_firefox_to_install_BrowserGuard_extension.
mov ecx, eax
call fcn.0040f7a0
push eax
call fcn.0040fb10
mov edx, dword [ebp - 0x25c]
add esp, 4
cmp edx, 8
jb 0x4341f5
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4341eb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434663
push edx
push ecx
call fcn.0046f0d0
add esp, 8
push dword [ebp - 0x254]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x258]
call esi
lea ecx, [ebp - 0x180]
call fcn.00434690
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x434250
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434246
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434668
push edx
push ecx
call fcn.0046f0d0
add esp, 8
mov edx, dword [ebp - 0x14]
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
cmp edx, 8
jb 0x43429e
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434294
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43466d
push edx
push ecx
call fcn.0046f0d0
add esp, 8
lea ecx, [ebp - 0x248]
call fcn.0045fa70
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x4342e3
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4342d9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434672
push edx
push ecx
call fcn.0046f0d0
add esp, 8
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x4345c7
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434317
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434677
push edx
push ecx
call fcn.0046f0d0
add esp, 8
jmp 0x4345c7
call fcn.0045f3e0
mov byte [ebp - 4], 0x19
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43433a
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4eb558
call fcn.004105c0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f7a0
mov edx, 0x4c9104
mov ecx, eax
call fcn.0040f7a0
push 0xe5f
mov ecx, eax
call fcn.0040dda0
mov edx, str.:_Could_not_find:
mov ecx, eax
call fcn.0040f7a0
mov esi, eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x70]
push eax
call fcn.0040bf20
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
mov ecx, esi
push dword [ebp - 0x30]
cmovae edx, dword [ebp - 0x40]
call fcn.004105c0
add esp, 4
push eax
call fcn.0040fb10
mov edx, dword [ebp - 0x2c]
add esp, 4
cmp edx, 8
jb 0x4343e7
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4343dd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43467c
push edx
push ecx
call fcn.0046f0d0
add esp, 8
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4344a0
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434496
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434681
jmp 0x434496
lea ecx, [ebp - 0x28]
call fcn.0045f3e0
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x434448
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4eb558
call fcn.004105c0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f7a0
mov edx, 0x4c9104
mov ecx, eax
call fcn.0040f7a0
push 0xe3c
mov ecx, eax
call fcn.0040dda0
mov edx, str.:_Failed_to_download_BrowserGuard_extension
mov ecx, eax
call fcn.0040f7a0
push eax
call fcn.0040fb10
add esp, 4
jmp 0x4343fb
push edx
push ecx
call fcn.0046f0d0
add esp, 8
lea ecx, [ebp - 0x248]
call fcn.0045fa70
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x4344e5
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4344db
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434681
push edx
push ecx
call fcn.0046f0d0
add esp, 8
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x4345c5
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4345bb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4345bb
jmp 0x434681
lea ecx, [ebp - 0x270]
call fcn.0045f3e0
mov byte [ebp - 4], 0x1b
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x43453c
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4eb558
call fcn.004105c0
add esp, 4
mov edx, str.c:jenkinsworkspacembam_windows_a_mb5_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040f7a0
mov edx, 0x4c9104
mov ecx, eax
call fcn.0040f7a0
push 0xe65
mov ecx, eax
call fcn.0040dda0
mov edx, str.:_Firefox_not_found__skipping_BrowserGuard_extension_for_firefox.
mov ecx, eax
call fcn.0040f7a0
push eax
call fcn.0040fb10
mov edx, dword [ebp - 0x25c]
add esp, 4
cmp edx, 8
jb 0x4345c5
mov ecx, dword [ebp - 0x270]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4345bb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434681
push edx
push ecx
call fcn.0046f0d0
add esp, 8
xor bh, bh
mov edx, dword [ebp - 0x74]
cmp edx, 8
jb 0x434604
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4345fa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x434681
push edx
push ecx
call fcn.0046f0d0
add esp, 8
mov al, bh
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046ebaf
mov esp, ebp
pop ebp
ret
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048d9d0
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
call fcn.0048a05c
int3