Function at 0x4368c0
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b0d10
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x360
mov eax, dword [0x4de080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov dword [ebp - 0x314], eax
cmp dword [0x4dedd4], 7
mov dword [ebp - 0x324], eax
mov eax, 0x4dedc0
cmova eax, dword [0x4dedc0]
push str.MBRW_B
push eax
call fcn.0048d3cc
add esp, 8
test eax, eax
jne 0x43693b
xor al, al
jmp 0x43812d
lea eax, [ebp - 0x31c]
mov dword [ebp - 0x31c], 0
push eax
push 0
push 0
push 0x4b85ec
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
xorps xmm0, xmm0
mov dword [ebp - 0x48], 7
xor esi, esi
xor ecx, ecx
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x4c], esi
mov word [ebp - 0x5c], cx
mov dword [ebp - 4], ecx
test eax, eax
js 0x4369ac
mov edx, dword [ebp - 0x31c]
test edx, edx
je 0x4369bd
mov ecx, edx
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x436990
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x5c]
call fcn.0040db20
mov esi, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x31c]
test eax, eax
je 0x4369bd
push eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
xor eax, eax
mov dword [ebp - 0xa8], 7
movups xmmword [ebp - 0xbc], xmm0
mov word [ebp - 0xbc], ax
lea ecx, [ebp - 0x33c]
mov byte [ebp - 4], 1
call fcn.00467c30
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x436a02
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd2a
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Checking_BG_for_Chrome:
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov byte [ebp - 4], 1
add esp, 4
mov ecx, dword [ebp - 0x328]
cmp ecx, 7
jbe 0x436a8f
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x436a85
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43814b
push ecx
push edx
call fcn.0048355d
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
xor eax, eax
mov dword [ebp - 0x18], 7
movups xmmword [ebp - 0x2c], xmm0
mov word [ebp - 0x2c], ax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 3
lea ecx, [eax + 1]
call fcn.004381c0
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test al, al
je 0x436f96
cmp dword [ebp - 0x18], 7
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmova eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0xbc]
push eax
call fcn.0040db20
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x436b1f
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x436b15
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4381b9
push ecx
push edx
call fcn.0048355d
add esp, 8
lea eax, [ebp - 0x314]
mov dword [ebp - 0x314], 0
push eax
push 0x20119
push 0
push str.SOFTWAREGoogleChromeExtensionsihcjicgdanjaechkgeegckofjjedodee
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x436b71
lea eax, [ebp - 0x314]
push eax
push 0x20219
push 0
push str.SOFTWAREGoogleChromeExtensionsihcjicgdanjaechkgeegckofjjedodee
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x436c23
push dword [ebp - 0x314]
call edi
lea ecx, [ebp - 0x33c]
call fcn.00467c30
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x436b93
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd3f
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_BrowserGuard_extension_key_for_chrome_already_exists.
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov byte [ebp - 4], 1
add esp, 4
mov ecx, dword [ebp - 0x328]
cmp ecx, 7
jbe 0x436fd4
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x436fca
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438150
jmp 0x436fca
mov eax, 0x7ffffffe
sub eax, esi
cmp eax, 0x4c
jb 0x438155
cmp dword [ebp - 0x48], 7
lea eax, [ebp - 0x5c]
push 0x4c
cmova eax, dword [ebp - 0x5c]
push str.GoogleChromeUser_DataDefaultExtensionsihcjicgdanjaechkgeegckofjjedodee
push esi
push eax
push ecx
push dword [ebp - 0x318]
lea ecx, [ebp - 0x2c]
call fcn.00442380
mov eax, 4
mov dword [ebp - 0x324], eax
lea ecx, [ebp - 0x33c]
mov byte [ebp - 4], al
call fcn.00467c30
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x436c7e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd31
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Chrome_Ext_Folder:
mov ecx, eax
call fcn.00411040
cmp dword [ebp - 0x18], 7
lea edx, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmova edx, dword [ebp - 0x2c]
mov ecx, eax
call fcn.00412510
add esp, 4
push eax
call fcn.004113c0
mov byte [ebp - 4], 4
add esp, 4
mov ecx, dword [ebp - 0x328]
cmp ecx, 7
jbe 0x436d23
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x436d19
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43815a
push ecx
push edx
call fcn.0048355d
add esp, 8
mov byte [ebp - 0x314], 0
lea edx, [ebp - 0x2c]
push dword [ebp - 0x314]
lea ecx, [ebp - 0x360]
call fcn.0041bc40
add esp, 4
lea eax, [ebp - 0x370]
lea ecx, [ebp - 0x360]
push eax
call fcn.0041ca20
add esp, 4
movq xmm0, qword [eax]
movq qword [ebp - 0x348], xmm0
mov eax, dword [ebp - 0x348]
test eax, eax
je 0x436d78
cmp eax, 1
sete byte [ebp - 0x31d]
jmp 0x436d7f
mov byte [ebp - 0x31d], 1
mov ecx, dword [ebp - 0x34c]
cmp ecx, 7
jbe 0x436dbf
mov edx, dword [ebp - 0x360]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x436db5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43815f
push ecx
push edx
call fcn.0048355d
add esp, 8
lea ecx, [ebp - 0x33c]
call fcn.00467c30
cmp byte [ebp - 0x31d], 0
je 0x436eb5
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 7
mov esi, dword [eax + 0x10]
jbe 0x436de6
mov eax, dword [eax]
push esi
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd35
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Chrome_Ext_Folder_not_found___prompt_to_install_BG
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0x328]
add esp, 4
cmp ecx, 7
jbe 0x436e6f
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x436e65
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438164
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x436ea9
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x436e9f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43816e
push ecx
push edx
call fcn.0048355d
add esp, 8
mov byte [ebp - 0x31d], 1
jmp 0x4380ad
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x436ec4
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd3a
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Found_Chrome_Ext_Folder
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov byte [ebp - 4], 4
add esp, 4
mov ecx, dword [ebp - 0x328]
cmp ecx, 7
jbe 0x436f51
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x436f47
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438169
push ecx
push edx
call fcn.0048355d
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x436f91
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x436f85
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43816e
push ecx
push edx
call fcn.0048355d
mov esi, dword [ebp - 0x4c]
jmp 0x436fd1
mov esi, dword [ebp - 0x4c]
jmp 0x436fd4
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x436fd4
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x436fca
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4381b9
push ecx
push edx
call fcn.0048355d
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x94], 0
xor eax, eax
mov dword [ebp - 0x90], 7
movups xmmword [ebp - 0xa4], xmm0
mov word [ebp - 0xa4], ax
lea ecx, [ebp - 0x33c]
mov byte [ebp - 4], 9
call fcn.00467c30
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x437019
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd45
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Checking_BG_for_Edge:
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov byte [ebp - 4], 9
add esp, 4
mov ecx, dword [ebp - 0x328]
cmp ecx, 7
jbe 0x4370a6
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x43709c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438173
push ecx
push edx
call fcn.0048355d
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
xor eax, eax
mov dword [ebp - 0x18], 7
movups xmmword [ebp - 0x2c], xmm0
mov word [ebp - 0x2c], ax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0xb
xor ecx, ecx
call fcn.004381c0
test al, al
je 0x43786c
cmp dword [ebp - 0x18], 7
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmova eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0xa4]
push eax
call fcn.0040db20
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x43712f
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x437125
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4381b9
push ecx
push edx
call fcn.0048355d
add esp, 8
lea eax, [ebp - 0x314]
mov dword [ebp - 0x314], 0
push eax
push 0x20119
push 0
push str.SOFTWAREMicrosoftEdgeExtensionsihcjicgdanjaechkgeegckofjjedodee
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x4371c5
lea eax, [ebp - 0x314]
push eax
push 0x20219
push 0
push str.SOFTWAREMicrosoftEdgeExtensionsihcjicgdanjaechkgeegckofjjedodee
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x4371c5
lea eax, [ebp - 0x314]
push eax
push 0x20119
push 0
push str.SOFTWAREMicrosoftEdgeExtensions_bojobppfploabceghnmlahpoonbcbacn
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x4371c5
lea eax, [ebp - 0x314]
push eax
push 0x20219
push 0
push str.SOFTWAREMicrosoftEdgeExtensions_bojobppfploabceghnmlahpoonbcbacn
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x437277
push dword [ebp - 0x314]
call edi
lea ecx, [ebp - 0x33c]
call fcn.00467c30
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x4371e7
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd5e
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_BrowserGuard_extension_key_for_Edge_already_exists.
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov byte [ebp - 4], 9
add esp, 4
mov ecx, dword [ebp - 0x328]
cmp ecx, 7
jbe 0x4378aa
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4378a0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438178
jmp 0x4378a0
mov eax, 0x7ffffffe
sub eax, esi
cmp eax, 0x4d
jb 0x438155
cmp dword [ebp - 0x48], 7
lea eax, [ebp - 0x5c]
push 0x4d
cmova eax, dword [ebp - 0x5c]
push str.MicrosoftEdgeUser_DataDefaultExtensionsihcjicgdanjaechkgeegckofjjedodee
push esi
push eax
push ecx
push dword [ebp - 0x318]
lea ecx, [ebp - 0x74]
call fcn.00442380
mov esi, dword [ebp - 0x324]
or esi, 0x20
mov byte [ebp - 4], 0xc
mov eax, 0x7ffffffe
mov ecx, dword [ebp - 0x4c]
sub eax, ecx
cmp eax, 0x4d
jb 0x438155
cmp dword [ebp - 0x48], 7
lea eax, [ebp - 0x5c]
push 0x4d
cmova eax, dword [ebp - 0x5c]
push str.MicrosoftEdgeUser_DataDefaultExtensions_bojobppfploabceghnmlahpoonbcbacn
push ecx
push eax
push ecx
push dword [ebp - 0x318]
lea ecx, [ebp - 0x2c]
call fcn.00442380
or esi, 0x40
lea ecx, [ebp - 0x33c]
mov byte [ebp - 4], 0xd
call fcn.00467c30
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x43730e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd4f
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Edge_Ext_Folder:
mov ecx, eax
call fcn.00411040
cmp dword [ebp - 0x60], 7
lea edx, [ebp - 0x74]
push dword [ebp - 0x64]
cmova edx, dword [ebp - 0x74]
mov ecx, eax
call fcn.00412510
add esp, 4
push eax
call fcn.004113c0
mov byte [ebp - 4], 0xd
add esp, 4
mov ecx, dword [ebp - 0x328]
cmp ecx, 7
jbe 0x4373b3
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4373a9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43817d
push ecx
push edx
call fcn.0048355d
add esp, 8
lea ecx, [ebp - 0x33c]
call fcn.00467c30
mov byte [ebp - 4], 0xf
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x4373cd
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd50
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Edge_Ext_Folder__2_:
mov ecx, eax
call fcn.00411040
cmp dword [ebp - 0x18], 7
lea edx, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmova edx, dword [ebp - 0x2c]
mov ecx, eax
call fcn.00412510
add esp, 4
push eax
call fcn.004113c0
mov byte [ebp - 4], 0xd
add esp, 4
mov ecx, dword [ebp - 0x328]
cmp ecx, 7
jbe 0x437472
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x437468
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438182
push ecx
push edx
call fcn.0048355d
add esp, 8
mov byte [ebp - 0x314], 0
lea edx, [ebp - 0x74]
push dword [ebp - 0x314]
lea ecx, [ebp - 0x33c]
call fcn.0041bc40
add esp, 4
lea eax, [ebp - 0x370]
mov byte [ebp - 4], 0x10
or esi, 1
lea ecx, [ebp - 0x33c]
push eax
mov dword [ebp - 0x324], esi
mov dword [ebp - 0x314], esi
call fcn.0041ca20
add esp, 4
movq xmm0, qword [eax]
movq qword [ebp - 0x348], xmm0
mov eax, dword [ebp - 0x348]
test eax, eax
je 0x4374d3
cmp eax, 1
jne 0x43752a
mov byte [ebp - 0x324], 0
lea edx, [ebp - 0x2c]
push dword [ebp - 0x324]
lea ecx, [ebp - 0x360]
call fcn.0041bc40
add esp, 4
lea eax, [ebp - 0x370]
or esi, 2
lea ecx, [ebp - 0x360]
mov dword [ebp - 0x324], esi
push eax
call fcn.0041ca20
add esp, 4
movq xmm0, qword [eax]
movq qword [ebp - 0x348], xmm0
mov eax, dword [ebp - 0x348]
test eax, eax
je 0x437533
cmp eax, 1
je 0x437533
mov byte [ebp - 0x31d], 0
jmp 0x43753a
mov byte [ebp - 0x31d], 1
mov eax, dword [ebp - 0x324]
test al, 2
je 0x4375b0
mov ecx, dword [ebp - 0x34c]
and eax, 0xfffffffd
mov dword [ebp - 0x324], eax
cmp ecx, 7
jbe 0x437593
mov edx, dword [ebp - 0x360]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x437583
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438187
push ecx
push edx
call fcn.0048355d
mov eax, dword [ebp - 0x324]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x350], 0
mov dword [ebp - 0x34c], 7
mov word [ebp - 0x360], cx
mov dword [ebp - 4], 0xd
test al, 1
je 0x437604
mov ecx, dword [ebp - 0x328]
and eax, 0xfffffffe
mov dword [ebp - 0x324], eax
cmp ecx, 7
jbe 0x437604
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4375fa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438187
push ecx
push edx
call fcn.0048355d
add esp, 8
lea ecx, [ebp - 0x33c]
call fcn.00467c30
cmp byte [ebp - 0x31d], 0
je 0x437748
mov byte [ebp - 4], 0x11
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x43762b
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd54
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Edge_Ext_Folder_not_found___prompt_to_install_BG
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0x328]
add esp, 4
cmp ecx, 7
jbe 0x4376b4
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4376aa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43818c
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x4376ee
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4376e4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438196
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x60]
xor eax, eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
cmp ecx, 7
jbe 0x43773c
mov edx, dword [ebp - 0x74]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x437732
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438196
push ecx
push edx
call fcn.0048355d
add esp, 8
mov byte [ebp - 0x31d], 1
jmp 0x43806d
mov byte [ebp - 4], 0x12
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x437757
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd59
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Found_Edge_Ext_Folder
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov byte [ebp - 4], 0xd
add esp, 4
mov ecx, dword [ebp - 0x328]
cmp ecx, 7
jbe 0x4377e4
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4377da
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438191
push ecx
push edx
call fcn.0048355d
add esp, 8
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x437822
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x437818
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438196
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
cmp ecx, 7
jbe 0x4378aa
mov edx, dword [ebp - 0x74]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4378a0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x438196
jmp 0x4378a0
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x4378aa
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4378a0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4381b9
push ecx
push edx
call fcn.0048355d
add esp, 8
lea ecx, [ebp - 0x33c]
call fcn.00467c30
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x4378c4
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd64
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Checking_BG_for_Firefox:
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov byte [ebp - 4], 9
add esp, 4
mov ecx, dword [ebp - 0x328]
cmp ecx, 7
jbe 0x437951
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x437947
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43819b
push ecx
push edx
call fcn.0048355d
add esp, 8
lea eax, [ebp - 0x318]
mov dword [ebp - 0x318], 0
push eax
push 0
push 0
push 0x4b85cc
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
xor ecx, ecx
mov dword [ebp - 0x30], 7
movups xmmword [ebp - 0x44], xmm0
mov word [ebp - 0x44], cx
mov byte [ebp - 4], 0x15
test eax, eax
js 0x4379c9
mov edx, dword [ebp - 0x318]
test edx, edx
je 0x4379da
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4379a3
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.0040db20
push str.MozillaFirefox
lea ecx, [ebp - 0x44]
call fcn.0040d6d0
mov eax, dword [ebp - 0x318]
test eax, eax
je 0x4379da
push eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
xorps xmm0, xmm0
mov dword [ebp - 0x7c], 0
xor eax, eax
mov dword [ebp - 0x78], 7
movups xmmword [ebp - 0x8c], xmm0
mov word [ebp - 0x8c], ax
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x34], eax
je 0x437fdb
lea ecx, [ebp - 0x8c]
call fcn.00438dd0
test al, al
je 0x437fdb
mov ecx, dword [ebp - 0x34]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0xb
jb 0x4381a0
cmp dword [ebp - 0x30], 7
lea eax, [ebp - 0x44]
push 0xb
cmova eax, dword [ebp - 0x44]
push str.Profiles
push ecx
push eax
push ecx
push dword [ebp - 0x318]
lea ecx, [ebp - 0x74]
call fcn.00442380
mov esi, dword [ebp - 0x324]
or esi, 0x200
push 0x250
lea eax, [ebp - 0x310]
mov byte [ebp - 4], 0x17
push 0
push eax
mov byte [ebp - 0x31e], 0
call fcn.00485800
add esp, 0xc
lea ecx, [ebp - 0x310]
cmp dword [ebp - 0x60], 7
lea eax, [ebp - 0x74]
cmova eax, dword [ebp - 0x74]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x437e0c
test byte [ebp - 0x310], 0x10
je 0x437daf
mov ecx, 0x4c6e74
lea eax, [ebp - 0x2e4]
nop word [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x437ae6
test dx, dx
je 0x437ae2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x437ae6
add eax, 4
add ecx, 4
test dx, dx
jne 0x437ac0
xor eax, eax
jmp 0x437aeb
sbb eax, eax
or eax, 1
test eax, eax
je 0x437daf
mov ecx, 0x4c6e78
lea eax, [ebp - 0x2e4]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x437b26
test dx, dx
je 0x437b22
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x437b26
add eax, 4
add ecx, 4
test dx, dx
jne 0x437b00
xor eax, eax
jmp 0x437b2b
sbb eax, eax
or eax, 1
test eax, eax
je 0x437daf
mov ecx, dword [ebp - 0x34]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0xa
jb 0x438155
cmp dword [ebp - 0x30], 7
lea eax, [ebp - 0x44]
push 0xa
cmova eax, dword [ebp - 0x44]
push str.Profiles_
push ecx
push eax
push ecx
push dword [ebp - 0x318]
lea ecx, [ebp - 0x360]
call fcn.00442380
or esi, 0x400
lea eax, [ebp - 0x2e4]
mov byte [ebp - 4], 0x18
push eax
lea edx, [ebp - 0x360]
lea ecx, [ebp - 0x2c]
call fcn.004412c0
add esp, 4
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x34c]
cmp ecx, 7
jbe 0x437bd2
mov edx, dword [ebp - 0x360]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x437bc8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43814b
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov dword [ebp - 0x350], 0
push str.extensions_
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x34c], 7
mov word [ebp - 0x360], ax
call fcn.0040d6d0
push 0x4c6270
lea ecx, [ebp - 0x2c]
call fcn.0040d6d0
mov byte [ebp - 0x314], 0
lea edx, [ebp - 0x2c]
push dword [ebp - 0x314]
lea ecx, [ebp - 0x33c]
call fcn.0041bc40
add esp, 4
lea eax, [ebp - 0x370]
lea ecx, [ebp - 0x33c]
push eax
call fcn.0041ca20
add esp, 4
movq xmm0, qword [eax]
movq qword [ebp - 0x348], xmm0
mov eax, dword [ebp - 0x348]
test eax, eax
je 0x437c5e
cmp eax, 1
setne byte [ebp - 0x31d]
jmp 0x437c65
mov byte [ebp - 0x31d], 0
mov ecx, dword [ebp - 0x328]
cmp ecx, 7
jbe 0x437ca5
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x437c9b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43814b
push ecx
push edx
call fcn.0048355d
add esp, 8
cmp byte [ebp - 0x31d], 0
jne 0x437dc7
lea ecx, [ebp - 0x33c]
call fcn.00467c30
mov byte [ebp - 4], 0x1b
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x437ccc
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd8c
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_profilePath:
mov ecx, eax
call fcn.00411040
cmp dword [ebp - 0x18], 7
lea edx, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmova edx, dword [ebp - 0x2c]
mov ecx, eax
call fcn.00412510
add esp, 4
push eax
call fcn.004113c0
mov byte [ebp - 4], 0x1a
add esp, 4
mov ecx, dword [ebp - 0x328]
cmp ecx, 7
jbe 0x437d71
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x437d67
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43814b
push ecx
push edx
call fcn.0048355d
add esp, 8
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x437daf
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x437da5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4381a5
push ecx
push edx
call fcn.0048355d
add esp, 8
lea eax, [ebp - 0x310]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x437aa2
jmp 0x437e0c
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 0x31e], 1
cmp ecx, 7
jbe 0x437e0c
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x437e02
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4381a5
push ecx
push edx
call fcn.0048355d
add esp, 8
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x33c]
call fcn.00467c30
cmp byte [ebp - 0x31e], 0
jne 0x437f09
mov byte [ebp - 4], 0x1c
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x437e3a
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd94
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_Firefox_Ext_not_found___prompt_to_install_BG
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0x328]
add esp, 4
cmp ecx, 7
jbe 0x437ec3
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x437eb9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4381aa
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x60]
cmp ecx, 7
jbe 0x437efd
mov edx, dword [ebp - 0x74]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x437ef3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4381b4
push ecx
push edx
call fcn.0048355d
add esp, 8
mov byte [ebp - 0x31d], 1
jmp 0x437fe2
mov byte [ebp - 4], 0x1d
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x437f18
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4e14e8
call fcn.00412510
add esp, 4
mov edx, str.C:JenkinsworkspaceMBAM_WindowsA_MB5_MBSetup_srcMBSetupMBSetup.cpp
mov ecx, eax
call fcn.00411040
mov edx, 0x4c14f8
mov ecx, eax
call fcn.00411040
push 0xd99
mov ecx, eax
call fcn.0040f7e0
mov edx, str.:_BrowserGuard_ext_for_Firefox_already_exists.
mov ecx, eax
call fcn.00411040
push eax
call fcn.004113c0
mov ecx, dword [ebp - 0x328]
add esp, 4
cmp ecx, 7
jbe 0x437fa1
mov edx, dword [ebp - 0x33c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x437f97
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4381af
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x60]
cmp ecx, 7
jbe 0x437fdb
mov edx, dword [ebp - 0x74]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x437fd1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4381b4
push ecx
push edx
call fcn.0048355d
add esp, 8
mov byte [ebp - 0x31d], 0
mov ecx, dword [ebp - 0x78]
cmp ecx, 7
jbe 0x43801f
mov edx, dword [ebp - 0x8c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x438015
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4381b9
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x30]
cmp ecx, 7
jbe 0x438059
mov edx, dword [ebp - 0x44]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x43804f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4381b9
push ecx
push edx
call fcn.0048355d
add esp, 8
xor eax, eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
mov ecx, dword [ebp - 0x90]
cmp ecx, 7
jbe 0x4380ad
mov edx, dword [ebp - 0xa4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4380a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4381b9
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0xa8]
cmp ecx, 7
jbe 0x4380ed
mov edx, dword [ebp - 0xbc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4380e3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4381b9
push ecx
push edx
call fcn.0048355d
add esp, 8
mov ecx, dword [ebp - 0x48]
cmp ecx, 7
jbe 0x438127
mov edx, dword [ebp - 0x5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x43811d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4381b9
push ecx
push edx
call fcn.0048355d
add esp, 8
mov al, byte [ebp - 0x31d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00483226
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0048878f
call fcn.0048878f
call fcn.0040ddc0
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0040ddc0
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
call fcn.0048878f
int3