Function at 0x426de7
Capabilities:
Gather firefox profile information

Disassembly:
push 0x38
mov eax, 0x43ea9a
call fcn.0043d0b2
and dword [ebp - 4], 0
and dword [ebp - 0x24], 0
mov ecx, dword [ebp + 8]
push 0x479624
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_class]
xor ebx, ebx
inc ebx
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x24], ebx
call dword [0x474bb4]
mov dword [ebp - 4], ebx
push dword [0x4a46d0]
mov esi, dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Format]
lea eax, [ebp - 0x1c]
push str._sMozillaFireFoxProfiles
push eax
call esi
add esp, 0xc
lea ecx, [ebp - 0x44]
call sub.mfc90u.dll_CFileFind::CFileFind
push 0
mov byte [ebp - 4], 2
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x44]
call sub.mfc90u.dll_CFileFind::FindFile
test eax, eax
je 0x426f24
lea ecx, [ebp - 0x44]
call sub.mfc90u.dll_CFileFind::FindNextFileW
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x44]
call sub.mfc90u.dll_CFileFind::GetFileName
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x44]
push 0x10
lea ecx, [ebp - 0x44]
call dword [eax + 0x40]
test eax, eax
je 0x426ee3
lea ecx, [ebp - 0x44]
call sub.mfc90u.dll_CFileFind::IsDots
test eax, eax
jne 0x426ee3
lea ecx, [ebp - 0x20]
call dword [0x474bb4]
lea ecx, [ebp - 0x14]
call dword [0x474bb4]
mov byte [ebp - 4], 5
push dword [ebp - 0x18]
lea eax, [ebp - 0x14]
push dword [0x4a46d0]
push str._sMozillaFireFoxProfiles_scookies.sqlite
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x2c], esp
push eax
call dword [0x474b9c]
call fcn.004065f6
test eax, eax
jne 0x426efc
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
cmp dword [ebp - 0x28], 0
jne 0x426e56
jmp 0x426f24
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_2]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], bl
call fcn.0043bc98
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov eax, dword [ebp + 8]
call fcn.0043d18a
ret 4