Function at 0x414c20
Capabilities:
Get common file path
Get program files directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x66c
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0xf
pop ecx
mov esi, str.Tor_BrowserBrowserTorBrowserDataBrowserprofile.default
lea edi, [ebp - 0x54]
rep movsd dword es:[edi], dword [esi]
push 5
pop ecx
mov esi, str.Tor_BrowserBrowser
lea edi, [ebp - 0x18]
rep movsd dword es:[edi], dword [esi]
mov edi, str.LoadFromTorBrowser
push edi
push str._s_entered
call fcn.00449974
mov esi, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebp - 0x25c]
pop ecx
pop ecx
push eax
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
call esi
test eax, eax
js 0x414d2f
lea eax, [ebp - 0x25c]
push eax
push edi
push str._n__s___Checking_TOR_browser_in_Downloads_folder__s
call fcn.00449974
lea eax, [ebp - 0x25c]
push 0x5c
push eax
call fcn.006271e0
add esp, 0x14
test eax, eax
je 0x414d2f
mov byte [eax], bl
mov edi, str._sDownloads_s
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x25c]
push eax
push edi
lea eax, [ebp - 0x464]
push 0x208
push eax
call fcn.00445d6d
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x25c]
push eax
push edi
lea eax, [ebp - 0x66c]
push 0x208
push eax
call fcn.00445d6d
lea eax, [ebp - 0x464]
mov edi, str.LoadFromTorBrowser
push eax
push edi
push str._s___Final_TOR_profile_path___s
call fcn.00449974
lea eax, [ebp - 0x464]
push eax
call fcn.0044975e
add esp, 0x38
test eax, eax
je 0x414d2f
push 1
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x464]
push eax
push 0xf
call fcn.00415c2e
add esp, 0x10
lea eax, [ebp - 0x25c]
push eax
push ebx
push ebx
push ebx
push ebx
call esi
test eax, eax
js 0x414dd8
lea eax, [ebp - 0x25c]
push eax
push edi
push str._n__s___Checking_TOR_browser_in_Downloads_folder__s
call fcn.00449974
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x25c]
push eax
push 0x66c218
lea eax, [ebp - 0x464]
push 0x208
push eax
call fcn.00445d6d
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x25c]
push eax
push 0x66c218
lea eax, [ebp - 0x66c]
push 0x208
push eax
call fcn.00445d6d
lea eax, [ebp - 0x464]
push eax
push edi
push str._s___Final_TOR_profile_path___s
call fcn.00449974
add esp, 0x40
lea eax, [ebp - 0x464]
push eax
call fcn.0044975e
pop ecx
test eax, eax
je 0x414dd8
push 1
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x464]
push eax
push 0xf
call fcn.00415c2e
add esp, 0x10
lea eax, [ebp - 0x25c]
push eax
push ebx
push ebx
push 0x2a
push ebx
call esi
test eax, eax
js 0x414e82
lea eax, [ebp - 0x25c]
push eax
push edi
push str._n__s___Checking_TOR_browser_in_Downloads_folder__s
call fcn.00449974
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x25c]
push eax
push 0x66c218
lea eax, [ebp - 0x464]
push 0x208
push eax
call fcn.00445d6d
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x25c]
push eax
push 0x66c218
lea eax, [ebp - 0x66c]
push 0x208
push eax
call fcn.00445d6d
lea eax, [ebp - 0x464]
push eax
push edi
push str._s___Final_TOR_profile_path___s
call fcn.00449974
add esp, 0x40
lea eax, [ebp - 0x464]
push eax
call fcn.0044975e
pop ecx
test eax, eax
je 0x414e82
push 1
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x464]
push eax
push 0xf
call fcn.00415c2e
add esp, 0x10
lea eax, [ebp - 0x25c]
push eax
push ebx
push ebx
push ebx
push ebx
call esi
test eax, eax
js 0x414f3b
lea eax, [ebp - 0x25c]
push eax
push edi
push str._n__s___Checking_TOR_browser_in_Downloads_folder__s
call fcn.00449974
lea eax, [ebp - 0x25c]
push 0x5c
push eax
call fcn.006270b0
add esp, 0x14
test eax, eax
je 0x414f3b
mov byte [eax], bl
mov esi, 0x208
lea eax, [ebp - 0x54]
mov ebx, 0x66c218
push eax
lea eax, [ebp - 0x25c]
push eax
push ebx
lea eax, [ebp - 0x464]
push esi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x25c]
push eax
push ebx
lea eax, [ebp - 0x66c]
push esi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x464]
push eax
push edi
push str._s___Final_TOR_profile_path___s
call fcn.00449974
lea eax, [ebp - 0x464]
push eax
call fcn.0044975e
add esp, 0x38
test eax, eax
je 0x414f3b
push 1
lea ecx, [ebp - 0x66c]
push ecx
lea ecx, [ebp - 0x464]
push ecx
push 0xf
call fcn.00415c2e
add esp, 0x10
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
inc eax
pop ebx
call fcn.005fe955
leave
ret