Function at 0x405a59
Capabilities:
Gather firefox profile information

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2050
call fcn.00442d30
push ebx
push esi
xor ebx, ebx
push edi
mov dword [ebp - 0x20], ebx
call fcn.004106f1
push dword [ebp + 0x10]
lea esi, [ebp - 0x44]
call fcn.00440e1a
test eax, eax
je 0x405c8f
call fcn.004106f1
mov esi, 0x3ff
push esi
lea eax, [ebp - 0x84b]
push ebx
push eax
mov dword [ebp - 8], ebx
mov byte [ebp - 0x84c], bl
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x84c]
push eax
push dword [ebp + 0xc]
call fcn.00406f0f
cmp dword [ebp - 0x44], ebx
pop ecx
pop ecx
je 0x405ad0
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x84c]
push eax
call dword [ebp - 0x44]
pop ecx
pop ecx
call fcn.004106f1
cmp dword [ebp - 8], ebx
je 0x405c8f
cmp dword [ebp - 0x40], ebx
je 0x405afb
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp + 0x10]
push eax
push 0xffffffffffffffff
push str.SELECT_id__hostname__httpRealm__formSubmitURL__usernameField__passwordField__encryptedUsername__encryptedPassword_FROM_moz_logins
push dword [ebp - 8]
call dword [ebp - 0x40]
add esp, 0x14
cmp dword [ebp - 0x3c], ebx
je 0x405b09
push dword [ebp + 0x10]
call dword [ebp - 0x3c]
pop ecx
jmp 0x405b0e
mov eax, 0xffff
cmp eax, 0x64
jne 0x405c77
call fcn.004106f1
cmp dword [0x450df4], ebx
jne 0x405c77
push esi
lea eax, [ebp - 0x204b]
push ebx
push eax
mov byte [ebp - 0x204c], bl
call sub.msvcrt.dll_memset
add esp, 0xc
push 0x1400
lea eax, [ebp - 0x1c4c]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
push 1
push dword [ebp + 0x10]
lea eax, [ebp - 0x44]
call fcn.00441011
push 6
push dword [ebp + 0x10]
mov edi, eax
lea eax, [ebp - 0x44]
call fcn.00441011
push 7
push dword [ebp + 0x10]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x44]
call fcn.00441011
push 4
push dword [ebp + 0x10]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x44]
call fcn.00441011
push 5
push dword [ebp + 0x10]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x44]
call fcn.00441011
push 2
push dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x44]
call fcn.00441011
cmp edi, ebx
mov dword [ebp - 0xc], eax
je 0x405bc6
lea eax, [ebp - 0x204c]
push edi
push eax
call sub.msvcrt.dll_strcpy
pop ecx
pop ecx
cmp dword [ebp - 0x1c], ebx
je 0x405bdc
push dword [ebp - 0x1c]
lea eax, [ebp - 0x1c4c]
push eax
call sub.msvcrt.dll_strcpy
pop ecx
pop ecx
cmp dword [ebp - 0x18], ebx
je 0x405bf2
push dword [ebp - 0x18]
lea eax, [ebp - 0x184c]
push eax
call sub.msvcrt.dll_strcpy
pop ecx
pop ecx
cmp dword [ebp - 0x14], ebx
je 0x405c08
push dword [ebp - 0x14]
lea eax, [ebp - 0x144c]
push eax
call sub.msvcrt.dll_strcpy
pop ecx
pop ecx
cmp dword [ebp - 0x10], ebx
je 0x405c1e
push dword [ebp - 0x10]
lea eax, [ebp - 0x104c]
push eax
call sub.msvcrt.dll_strcpy
pop ecx
pop ecx
cmp dword [ebp - 0xc], ebx
je 0x405c34
push dword [ebp - 0xc]
lea eax, [ebp - 0xc4c]
push eax
call sub.msvcrt.dll_strcpy
pop ecx
pop ecx
push esi
lea eax, [ebp - 0x44b]
push ebx
push eax
mov byte [ebp - 0x44c], bl
call sub.msvcrt.dll_memset
lea eax, [ebp - 0x44c]
add esp, 0xc
push eax
call fcn.00406ef2
pop ecx
push 0x23
push dword [ebp + 0xc]
lea eax, [ebp - 0x44c]
push eax
push dword [ebp + 8]
lea ecx, [ebp - 0x204c]
call fcn.004056c5
jmp 0x405afb
cmp dword [ebp - 0x2c], ebx
je 0x405c83
push dword [ebp + 0x10]
call dword [ebp - 0x2c]
pop ecx
cmp dword [ebp - 0x28], ebx
je 0x405c8f
push dword [ebp - 8]
call dword [ebp - 0x28]
pop ecx
pop edi
pop esi
pop ebx
leave
ret 0xc