Function at 0x42cef0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49ce6b
mov eax, dword fs:[0]
push eax
sub esp, 0x34c
mov eax, dword [0x4cb06c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x314], 0
mov eax, 0x4cbcc8
cmp dword [0x4cbcdc], 8
push str.MBRW_B
cmovae eax, dword [0x4cbcc8]
push eax
call fcn.004816eb
add esp, 8
test eax, eax
jne 0x42cf54
xor al, al
jmp 0x42e10d
push 0x4d0758
push 0x418160
push 0x4d0760
call fcn.00459ead
add esp, 0xc
test eax, eax
je 0x42e129
lea eax, [ebp - 0x318]
mov dword [ebp - 0x318], 0
push eax
push 0
push 0
push 0x4a250c
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
xor ecx, ecx
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], cx
mov dword [ebp - 4], ecx
test eax, eax
js 0x42cfdc
mov edx, dword [ebp - 0x318]
test edx, edx
je 0x42cfed
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42cfc0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x90]
call fcn.00407780
mov eax, dword [ebp - 0x318]
test eax, eax
je 0x42cfed
push eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 7
mov word [ebp - 0xc0], ax
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 1
call fcn.0044e680
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x42d028
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4cf1e0
call fcn.0040bda0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040ab10
mov edx, str.:.
mov ecx, eax
call fcn.0040ab10
push 0xc00
mov ecx, eax
call fcn.00407be0
mov edx, str.:_Checking_BG_for_Chrome:
mov ecx, eax
call fcn.0040ab10
push eax
call fcn.0040ae80
mov byte [ebp - 4], 1
add esp, 4
mov edx, dword [ebp - 0x324]
cmp edx, 8
jb 0x42d0b5
mov ecx, dword [ebp - 0x338]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42d0ab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e12e
push edx
push ecx
call fcn.0045d989
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 3
lea ecx, [eax + 1]
call fcn.0042e190
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test al, al
je 0x42d506
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0xc0]
push eax
call fcn.00407780
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x42d144
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42d13a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e133
push edx
push ecx
call fcn.0045d989
add esp, 8
lea eax, [ebp - 0x314]
mov dword [ebp - 0x314], 0
push eax
push 0x20119
push 0
push str.SOFTWAREGoogleChromeExtensionsihcjicgdanjaechkgeegckofjjedodee
push 0x80000002
call edi
test eax, eax
je 0x42d18e
lea eax, [ebp - 0x314]
push eax
push 0x20219
push 0
push str.SOFTWAREGoogleChromeExtensionsihcjicgdanjaechkgeegckofjjedodee
push 0x80000002
call edi
test eax, eax
jne 0x42d240
push dword [ebp - 0x314]
call esi
lea ecx, [ebp - 0x338]
call fcn.0044e680
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x42d1b0
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4cf1e0
call fcn.0040bda0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040ab10
mov edx, str.:.
mov ecx, eax
call fcn.0040ab10
push 0xc15
mov ecx, eax
call fcn.00407be0
mov edx, str.:_BrowserGuard_extension_key_for_chrome_already_exists.
mov ecx, eax
call fcn.0040ab10
push eax
call fcn.0040ae80
mov byte [ebp - 4], 1
add esp, 4
mov edx, dword [ebp - 0x324]
cmp edx, 8
jb 0x42d544
mov ecx, dword [ebp - 0x338]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42d53a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e138
jmp 0x42d53a
push str.GoogleChromeUser_DataDefaultExtensionsihcjicgdanjaechkgeegckofjjedodee
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x28]
call fcn.004356b0
add esp, 4
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 4
call fcn.0044e680
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x42d274
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4cf1e0
call fcn.0040bda0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040ab10
mov edx, str.:.
mov ecx, eax
call fcn.0040ab10
push 0xc07
mov ecx, eax
call fcn.00407be0
mov edx, str.:_Chrome_Ext_Folder:
mov ecx, eax
call fcn.0040ab10
cmp dword [ebp - 0x14], 8
lea edx, [ebp - 0x28]
push dword [ebp - 0x18]
cmovae edx, dword [ebp - 0x28]
mov ecx, eax
call fcn.0040bda0
add esp, 4
push eax
call fcn.0040ae80
mov byte [ebp - 4], 4
add esp, 4
mov edx, dword [ebp - 0x324]
cmp edx, 8
jb 0x42d319
mov ecx, dword [ebp - 0x338]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42d30f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e13d
push edx
push ecx
call fcn.0045d989
add esp, 8
mov byte [ebp - 0x314], 0
lea edx, [ebp - 0x28]
push dword [ebp - 0x314]
lea ecx, [ebp - 0x40]
call fcn.00416d60
add esp, 4
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x40]
call fcn.00437dd0
mov edx, dword [ebp - 0x2c]
test al, al
sete bl
cmp edx, 8
jb 0x42d37e
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42d374
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e142
push edx
push ecx
call fcn.0045d989
add esp, 8
lea ecx, [ebp - 0x338]
call fcn.0044e680
test bl, bl
je 0x42d46a
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 8
mov esi, dword [eax + 0x10]
jb 0x42d3a0
mov eax, dword [eax]
push esi
mov edx, eax
mov ecx, 0x4cf1e0
call fcn.0040bda0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040ab10
mov edx, str.:.
mov ecx, eax
call fcn.0040ab10
push 0xc0b
mov ecx, eax
call fcn.00407be0
mov edx, str.:_Chrome_Ext_Folder_not_found___prompt_to_install_BG
mov ecx, eax
call fcn.0040ab10
push eax
call fcn.0040ae80
mov edx, dword [ebp - 0x324]
add esp, 4
cmp edx, 8
jb 0x42d429
mov ecx, dword [ebp - 0x338]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42d41f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e147
push edx
push ecx
call fcn.0045d989
add esp, 8
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x42d463
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42d459
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e14c
push edx
push ecx
call fcn.0045d989
add esp, 8
mov bl, 1
jmp 0x42e0f5
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x42d479
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4cf1e0
call fcn.0040bda0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040ab10
mov edx, str.:.
mov ecx, eax
call fcn.0040ab10
push 0xc10
mov ecx, eax
call fcn.00407be0
mov edx, str.:_Found_Chrome_Ext_Folder
mov ecx, eax
call fcn.0040ab10
push eax
call fcn.0040ae80
mov byte [ebp - 4], 4
add esp, 4
mov edx, dword [ebp - 0x324]
cmp edx, 8
jb 0x42d506
mov ecx, dword [ebp - 0x338]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42d4fc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e151
push edx
push ecx
call fcn.0045d989
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x42d544
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42d53a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e156
push edx
push ecx
call fcn.0045d989
add esp, 8
xor eax, eax
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 7
mov word [ebp - 0xa8], ax
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 9
call fcn.0044e680
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x42d57f
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4cf1e0
call fcn.0040bda0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040ab10
mov edx, str.:.
mov ecx, eax
call fcn.0040ab10
push 0xc1b
mov ecx, eax
call fcn.00407be0
mov edx, str.:_Checking_BG_for_Edge:
mov ecx, eax
call fcn.0040ab10
push eax
call fcn.0040ae80
mov byte [ebp - 4], 9
add esp, 4
mov edx, dword [ebp - 0x324]
cmp edx, 8
jb 0x42d60c
mov ecx, dword [ebp - 0x338]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42d602
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e15b
push edx
push ecx
call fcn.0045d989
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
xor ecx, ecx
call fcn.0042e190
test al, al
je 0x42dc12
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0xa8]
push eax
call fcn.00407780
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x42d68e
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42d684
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e160
push edx
push ecx
call fcn.0045d989
add esp, 8
lea eax, [ebp - 0x314]
mov dword [ebp - 0x314], 0
push eax
push 0x20119
push 0
push str.SOFTWAREMicrosoftEdgeExtensionsihcjicgdanjaechkgeegckofjjedodee
push 0x80000002
call edi
test eax, eax
je 0x42d714
lea eax, [ebp - 0x314]
push eax
push 0x20219
push 0
push str.SOFTWAREMicrosoftEdgeExtensionsihcjicgdanjaechkgeegckofjjedodee
push 0x80000002
call edi
test eax, eax
je 0x42d714
lea eax, [ebp - 0x314]
push eax
push 0x20119
push 0
push str.SOFTWAREMicrosoftEdgeExtensions_bojobppfploabceghnmlahpoonbcbacn
push 0x80000002
call edi
test eax, eax
je 0x42d714
lea eax, [ebp - 0x314]
push eax
push 0x20219
push 0
push str.SOFTWAREMicrosoftEdgeExtensions_bojobppfploabceghnmlahpoonbcbacn
push 0x80000002
call edi
test eax, eax
jne 0x42d793
push dword [ebp - 0x314]
call esi
lea ecx, [ebp - 0x338]
call fcn.0044e680
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x42d736
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4cf1e0
call fcn.0040bda0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040ab10
mov edx, str.:.
mov ecx, eax
call fcn.0040ab10
push 0xc34
mov ecx, eax
call fcn.00407be0
mov edx, str.:_BrowserGuard_extension_key_for_Edge_already_exists.
mov ecx, eax
call fcn.0040ab10
push eax
call fcn.0040ae80
add esp, 4
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x338]
call fcn.00404b20
jmp 0x42dc50
push str.MicrosoftEdgeUser_DataDefaultExtensionsihcjicgdanjaechkgeegckofjjedodee
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x58]
call fcn.004356b0
add esp, 4
push str.MicrosoftEdgeUser_DataDefaultExtensions_bojobppfploabceghnmlahpoonbcbacn
lea edx, [ebp - 0x90]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
call fcn.004356b0
add esp, 4
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 0xd
call fcn.0044e680
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x42d7e1
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4cf1e0
call fcn.0040bda0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040ab10
mov edx, str.:.
mov ecx, eax
call fcn.0040ab10
push 0xc25
mov ecx, eax
call fcn.00407be0
mov edx, str.:_Edge_Ext_Folder:
mov ecx, eax
call fcn.0040ab10
cmp dword [ebp - 0x44], 8
lea edx, [ebp - 0x58]
push dword [ebp - 0x48]
cmovae edx, dword [ebp - 0x58]
mov ecx, eax
call fcn.0040bda0
add esp, 4
push eax
call fcn.0040ae80
mov byte [ebp - 4], 0xd
add esp, 4
mov edx, dword [ebp - 0x324]
cmp edx, 8
jb 0x42d886
mov ecx, dword [ebp - 0x338]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42d87c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e165
push edx
push ecx
call fcn.0045d989
add esp, 8
lea ecx, [ebp - 0x338]
call fcn.0044e680
mov byte [ebp - 4], 0xf
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x42d8a0
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4cf1e0
call fcn.0040bda0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040ab10
mov edx, str.:.
mov ecx, eax
call fcn.0040ab10
push 0xc26
mov ecx, eax
call fcn.00407be0
mov edx, str.:_Edge_Ext_Folder__2_:
mov ecx, eax
call fcn.0040ab10
cmp dword [ebp - 0x14], 8
lea edx, [ebp - 0x28]
push dword [ebp - 0x18]
cmovae edx, dword [ebp - 0x28]
mov ecx, eax
call fcn.0040bda0
add esp, 4
push eax
call fcn.0040ae80
mov byte [ebp - 4], 0xd
add esp, 4
mov edx, dword [ebp - 0x324]
cmp edx, 8
jb 0x42d945
mov ecx, dword [ebp - 0x338]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42d93b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e16a
push edx
push ecx
call fcn.0045d989
add esp, 8
mov byte [ebp - 0x314], 0
lea edx, [ebp - 0x58]
push dword [ebp - 0x314]
lea ecx, [ebp - 0x338]
call fcn.00416d60
add esp, 4
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x60]
mov ebx, 1
lea ecx, [ebp - 0x338]
mov dword [ebp - 0x314], ebx
call fcn.00437dd0
test al, al
jne 0x42d9b9
mov byte [ebp - 0x33c], al
lea edx, [ebp - 0x28]
push dword [ebp - 0x33c]
lea ecx, [ebp - 0x40]
call fcn.00416d60
add esp, 4
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x40]
mov ebx, 3
call fcn.00437dd0
mov byte [ebp - 0x31d], 1
test al, al
je 0x42d9c0
mov byte [ebp - 0x31d], 0
test bl, 2
je 0x42da13
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x42d9ff
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42d9f5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e16f
push edx
push ecx
call fcn.0045d989
add esp, 8
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov dword [ebp - 4], 0xd
mov edx, dword [ebp - 0x324]
cmp edx, 8
jb 0x42da5a
mov ecx, dword [ebp - 0x338]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42da50
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e174
push edx
push ecx
call fcn.0045d989
add esp, 8
lea ecx, [ebp - 0x338]
call fcn.0044e680
cmp byte [ebp - 0x31d], 0
je 0x42db99
mov byte [ebp - 4], 0x11
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x42da81
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4cf1e0
call fcn.0040bda0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040ab10
mov edx, str.:.
mov ecx, eax
call fcn.0040ab10
push 0xc2a
mov ecx, eax
call fcn.00407be0
mov edx, str.:_Edge_Ext_Folder_not_found___prompt_to_install_BG
mov ecx, eax
call fcn.0040ab10
push eax
call fcn.0040ae80
mov edx, dword [ebp - 0x324]
add esp, 4
cmp edx, 8
jb 0x42db0a
mov ecx, dword [ebp - 0x338]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42db00
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e179
push edx
push ecx
call fcn.0045d989
add esp, 8
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x42db44
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42db3a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e17e
push edx
push ecx
call fcn.0045d989
add esp, 8
mov edx, dword [ebp - 0x44]
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x42db92
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42db88
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e183
push edx
push ecx
call fcn.0045d989
add esp, 8
mov bl, 1
jmp 0x42e0ea
mov byte [ebp - 4], 0x12
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x42dba8
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4cf1e0
call fcn.0040bda0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040ab10
mov edx, str.:.
mov ecx, eax
call fcn.0040ab10
push 0xc2f
mov ecx, eax
call fcn.00407be0
mov edx, str.:_Found_Edge_Ext_Folder
mov ecx, eax
call fcn.0040ab10
push eax
call fcn.0040ae80
add esp, 4
lea ecx, [ebp - 0x338]
call fcn.00404b20
lea ecx, [ebp - 0x28]
call fcn.00404b20
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 9
call fcn.00404b20
jmp 0x42dc50
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x42dc50
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42dc46
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e188
push edx
push ecx
call fcn.0045d989
add esp, 8
lea ecx, [ebp - 0x338]
call fcn.0044e680
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x42dc6a
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4cf1e0
call fcn.0040bda0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040ab10
mov edx, str.:.
mov ecx, eax
call fcn.0040ab10
push 0xc3a
mov ecx, eax
call fcn.00407be0
mov edx, str.:_Checking_BG_for_Firefox:
mov ecx, eax
call fcn.0040ab10
push eax
call fcn.0040ae80
add esp, 4
lea ecx, [ebp - 0x338]
call fcn.00404b20
lea eax, [ebp - 0x31c]
mov dword [ebp - 0x31c], 0
push eax
push 0
push 0
push 0x4a24ec
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
xor ecx, ecx
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], cx
mov byte [ebp - 4], 0x15
test eax, eax
js 0x42dd38
mov edx, dword [ebp - 0x31c]
test edx, edx
je 0x42dd49
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42dd10
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x78]
call fcn.00407780
push 0x10
push str.MozillaFirefox
lea ecx, [ebp - 0x78]
call fcn.00417a80
mov eax, dword [ebp - 0x31c]
test eax, eax
je 0x42dd49
push eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x68], eax
je 0x42e0d8
lea ecx, [ebp - 0x58]
call fcn.0042eba0
test al, al
je 0x42e0d8
push str.Profiles
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x40]
call fcn.004356b0
add esp, 4
push 0x250
lea eax, [ebp - 0x310]
mov byte [ebp - 4], 0x17
push 0
push eax
xor bh, bh
call fcn.00475700
add esp, 0xc
lea ecx, [ebp - 0x310]
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x42dfe8
mov edi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
test byte [ebp - 0x310], 0x10
je 0x42dfc6
mov ecx, 0x4b6b78
lea eax, [ebp - 0x2e4]
nop dword [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42de16
test dx, dx
je 0x42de12
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42de16
add eax, 4
add ecx, 4
test dx, dx
jne 0x42ddf0
xor eax, eax
jmp 0x42de1b
sbb eax, eax
or eax, 1
test eax, eax
je 0x42dfc6
mov ecx, 0x4b6b7c
lea eax, [ebp - 0x2e4]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42de56
test dx, dx
je 0x42de52
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42de56
add eax, 4
add ecx, 4
test dx, dx
jne 0x42de30
xor eax, eax
jmp 0x42de5b
sbb eax, eax
or eax, 1
test eax, eax
je 0x42dfc6
push str.Profiles_
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x354]
call fcn.004356b0
add esp, 4
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 0x18
push ecx
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.00435780
add esp, 4
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 0x1a
call fcn.00404b20
push 0xc
push str.extensions_
lea ecx, [ebp - 0x28]
call fcn.00417a80
push 0x2a
push 0x4b64b8
lea ecx, [ebp - 0x28]
call fcn.00417a80
mov byte [ebp - 0x33c], 0
lea edx, [ebp - 0x28]
push dword [ebp - 0x33c]
lea ecx, [ebp - 0x338]
call fcn.00416d60
add esp, 4
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x338]
call fcn.00437dd0
mov edx, dword [ebp - 0x324]
mov bl, al
cmp edx, 8
jb 0x42df2c
mov ecx, dword [ebp - 0x338]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42df22
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e12e
push edx
push ecx
call fcn.0045d989
add esp, 8
test bl, bl
jne 0x42dfda
lea ecx, [ebp - 0x338]
call fcn.0044e680
mov byte [ebp - 4], 0x1b
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x42df4e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4cf1e0
call fcn.0040bda0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040ab10
mov edx, str.:.
mov ecx, eax
call fcn.0040ab10
push 0xc62
mov ecx, eax
call fcn.00407be0
mov edx, str.:_profilePath:
mov ecx, eax
call fcn.0040ab10
cmp dword [ebp - 0x14], 8
lea edx, [ebp - 0x28]
push dword [ebp - 0x18]
cmovae edx, dword [ebp - 0x28]
mov ecx, eax
call fcn.0040bda0
add esp, 4
push eax
call fcn.0040ae80
add esp, 4
lea ecx, [ebp - 0x338]
call fcn.00404b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x17
call fcn.00404b20
lea eax, [ebp - 0x310]
push eax
push esi
call edi
test eax, eax
jne 0x42ddd3
jmp 0x42dfe8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x17
mov bh, 1
call fcn.00404b20
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x354]
call fcn.0044e680
test bh, bh
jne 0x42e06d
mov byte [ebp - 4], 0x1c
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x42e00d
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4cf1e0
call fcn.0040bda0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040ab10
mov edx, str.:.
mov ecx, eax
call fcn.0040ab10
push 0xc6a
mov ecx, eax
call fcn.00407be0
mov edx, str.:_Firefox_Ext_not_found___prompt_to_install_BG
mov ecx, eax
call fcn.0040ab10
push eax
call fcn.0040ae80
add esp, 4
lea ecx, [ebp - 0x354]
call fcn.00404b20
lea ecx, [ebp - 0x40]
call fcn.00404b20
mov bl, 1
jmp 0x42e0da
mov byte [ebp - 4], 0x1d
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x42e07c
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4cf1e0
call fcn.0040bda0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.0040ab10
mov edx, str.:.
mov ecx, eax
call fcn.0040ab10
push 0xc6f
mov ecx, eax
call fcn.00407be0
mov edx, str.:_BrowserGuard_ext_for_Firefox_already_exists.
mov ecx, eax
call fcn.0040ab10
push eax
call fcn.0040ae80
add esp, 4
lea ecx, [ebp - 0x354]
call fcn.00404b20
lea ecx, [ebp - 0x40]
call fcn.00404b20
xor bl, bl
lea ecx, [ebp - 0x58]
call fcn.00404b20
lea ecx, [ebp - 0x78]
call fcn.00404b20
lea ecx, [ebp - 0xa8]
call fcn.00404b20
lea ecx, [ebp - 0xc0]
call fcn.00404b20
lea ecx, [ebp - 0x90]
call fcn.00404b20
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045d468
mov esp, ebp
pop ebp
ret
call fcn.00479f4a
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
call fcn.004786bc
int3