Function at 0x459360
Capabilities:
Gather firefox profile information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x586b8e
mov eax, dword fs:[0]
push eax
sub esp, 0x25c
mov eax, dword [0x5ed80c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
mov dword [ebp - 0x218], ecx
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x214], ecx
mov dword [ebp - 4], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push str.nss_decryptor.cpp
lea edx, [ebp - 0x208]
push edx
mov ecx, 0x5f1460
mov edi, eax
call fcn.00506650
mov esi, eax
mov ecx, dword [esi]
mov byte [ebp - 4], 1
call fcn.00506510
push 0x59d37c
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push 0xed
mov ecx, eax
call fcn.0040bb90
mov ecx, dword [esi]
call fcn.00506510
push 0x59d378
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push edi
mov ecx, eax
call fcn.0043e160
mov ecx, dword [esi]
call fcn.00506510
push 0x59d374
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push ebx
mov ecx, eax
call fcn.0043e160
mov ecx, dword [esi]
call fcn.00506510
push 0x59d370
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push str.mailru::nss_decryptor::read_and_parse_signons
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push 0x59c870
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push 0x59d344
push eax
call fcn.0040b260
add esp, 8
push str.read_and_parse_signons_started
mov ecx, esi
call fcn.0042a0c0
mov ecx, dword [ebp - 0x208]
mov byte [ebp - 4], 0
call fcn.00506510
push eax
call fcn.0040ceb0
mov eax, dword [ebp - 0x1f0]
add esp, 4
push eax
lea ecx, [ebp - 0x24c]
call fcn.005204d0
lea ecx, [ebp - 0x24c]
push ecx
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 2
call fcn.0051fdd0
mov byte [ebp - 4], 3
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push str.nss_decryptor.cpp
lea edx, [ebp - 0x1f0]
push edx
mov ecx, 0x5f1460
mov edi, eax
call fcn.00506650
mov esi, eax
mov ecx, dword [esi]
mov byte [ebp - 4], 4
call fcn.00506510
push 0x59d37c
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push 0xf3
mov ecx, eax
call fcn.0040bb90
mov ecx, dword [esi]
call fcn.00506510
push 0x59d378
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push edi
mov ecx, eax
call fcn.0043e160
mov ecx, dword [esi]
call fcn.00506510
push 0x59d374
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push ebx
mov ecx, eax
call fcn.0043e160
mov ecx, dword [esi]
call fcn.00506510
push 0x59d370
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push str.mailru::nss_decryptor::read_and_parse_signons
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push 0x59c870
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push 0x59d344
push eax
call fcn.0040b260
add esp, 8
push str.stmt_of_db___okeu
mov ecx, esi
call fcn.0042a0c0
mov ecx, dword [ebp - 0x1f0]
mov byte [ebp - 4], 3
call fcn.00506510
push eax
call fcn.0040ceb0
add esp, 4
push 0x26
xor eax, eax
mov ebx, 7
xor edi, edi
push str.SELECT_hostname_FROM_moz_disabledHosts
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xac], edi
mov word [ebp - 0xbc], ax
call fcn.00401c40
mov eax, dword [ebp - 0x264]
mov byte [ebp - 4], 5
cmp eax, edi
je 0x459659
push str.sqlite3_reset
push eax
call fcn.004add40
add esp, 4
push eax
call fcn.00520480
add esp, 8
jmp 0x459670
lea ecx, [ebp - 0xbc]
push ecx
lea ecx, [ebp - 0x264]
call fcn.005205f0
jmp 0x459670
mov eax, dword [ebp - 0x264]
cmp eax, edi
je 0x4597ed
push eax
call fcn.004bad40
add esp, 4
cmp eax, edi
je 0x45969c
cmp eax, 0x64
je 0x45969c
mov byte [ebp - 0x250], 0
cmp eax, 0x65
jne 0x4596a3
mov byte [ebp - 0x250], 1
cmp eax, 0x64
sete al
test al, al
je 0x4597ed
lea ecx, [ebp - 0x1ec]
call fcn.00457c50
push edi
lea edx, [ebp - 0x30]
push edx
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 6
call fcn.0044f450
mov esi, eax
mov byte [ebp - 4], 7
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 0x1f0], eax
push esi
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00414cf0
mov esi, eax
lea ecx, [ebp - 0x1cc]
cmp ecx, esi
je 0x459775
cmp dword [ebp - 0x1b8], 8
jb 0x459719
mov edx, dword [ebp - 0x1cc]
push edx
call fcn.0055ae44
add esp, 4
xor eax, eax
mov dword [ebp - 0x1b8], ebx
mov dword [ebp - 0x1bc], edi
mov word [ebp - 0x1cc], ax
cmp dword [esi + 0x14], 8
jae 0x45974e
mov eax, dword [esi + 0x10]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [ebp - 0x1cc]
push esi
push edx
call fcn.0055b1c0
add esp, 0xc
jmp 0x459758
mov eax, dword [esi]
mov dword [ebp - 0x1cc], eax
mov dword [esi], edi
mov ecx, dword [esi + 0x10]
mov dword [ebp - 0x1bc], ecx
mov edx, dword [esi + 0x14]
mov dword [ebp - 0x1b8], edx
xor eax, eax
mov dword [esi + 0x14], ebx
mov dword [esi + 0x10], edi
mov word [esi], ax
cmp dword [ebp - 0x70], 8
jb 0x45978a
mov ecx, dword [ebp - 0x84]
push ecx
call fcn.0055ae44
add esp, 4
xor edx, edx
cmp dword [ebp - 0x1c], 0x10
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], edi
mov word [ebp - 0x84], dx
mov byte [ebp - 4], 6
jb 0x4597af
mov eax, dword [ebp - 0x30]
push eax
call fcn.0055ae44
add esp, 4
push edi
push 0x59cedd
lea ecx, [ebp - 0x1e8]
call fcn.00401850
lea ecx, [ebp - 0x1ec]
push ecx
mov ecx, dword [ebp - 0x214]
mov byte [ebp - 0xc4], 1
call fcn.00458f50
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 4], 5
call fcn.0043dfc0
jmp 0x459670
push 0x7d
xor edx, edx
push str.SELECT_hostname__httpRealm__formSubmitURL__usernameField__passwordField__encryptedUsername__encryptedPassword_FROM_moz_logins
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x90], edi
mov word [ebp - 0xa0], dx
call fcn.00401c40
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 9
call fcn.0051fdd0
mov eax, dword [ebp - 0x230]
mov byte [ebp - 4], 0xa
cmp eax, edi
je 0x459851
push str.sqlite3_reset
push eax
call fcn.004add40
add esp, 4
push eax
call fcn.00520480
add esp, 8
jmp 0x459863
lea ecx, [ebp - 0xa0]
push ecx
lea ecx, [ebp - 0x230]
call fcn.005205f0
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push str.nss_decryptor.cpp
lea edx, [ebp - 0x1f0]
push edx
mov ecx, 0x5f1460
mov edi, eax
call fcn.00506650
mov esi, eax
mov ecx, dword [esi]
mov byte [ebp - 4], 0xb
call fcn.00506510
push 0x59d37c
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push 0x112
mov ecx, eax
call fcn.0040bb90
mov ecx, dword [esi]
call fcn.00506510
push 0x59d378
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push edi
mov ecx, eax
call fcn.0043e160
mov ecx, dword [esi]
call fcn.00506510
push 0x59d374
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push ebx
mov ecx, eax
call fcn.0043e160
mov ecx, dword [esi]
call fcn.00506510
push 0x59d370
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push str.mailru::nss_decryptor::read_and_parse_signons
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push 0x59c870
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push 0x59d344
push eax
call fcn.0040b260
add esp, 8
push str.after_prepare
mov ecx, esi
call fcn.0042a0c0
mov ecx, dword [ebp - 0x1f0]
mov byte [ebp - 4], 0xa
call fcn.00506510
mov esi, eax
push 0xa
mov ecx, esi
call fcn.0040bd80
mov eax, dword [esi]
xor edi, edi
mov eax, dword [eax + 4]
test byte [eax + esi + 0xc], 6
jne 0x45999e
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x45999e
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0x4599c0
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0x4599b7
or eax, 4
push 0
push eax
call fcn.00402fc0
nop
mov eax, dword [ebp - 0x230]
test eax, eax
je 0x45a61a
push eax
call fcn.004bad40
add esp, 4
test eax, eax
je 0x4599ec
cmp eax, 0x64
je 0x4599ec
mov byte [ebp - 0x21c], 0
cmp eax, 0x65
jne 0x4599f3
mov byte [ebp - 0x21c], 1
cmp eax, 0x64
sete al
test al, al
je 0x45a61a
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push str.nss_decryptor.cpp
lea edx, [ebp - 0x1f0]
push edx
mov ecx, 0x5f1460
mov edi, eax
call fcn.00506650
mov esi, eax
mov ecx, dword [esi]
mov byte [ebp - 4], 0xc
call fcn.00506510
push 0x59d37c
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push 0x116
mov ecx, eax
call fcn.0040bb90
mov ecx, dword [esi]
call fcn.00506510
push 0x59d378
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push edi
mov ecx, eax
call fcn.0043e160
mov ecx, dword [esi]
call fcn.00506510
push 0x59d374
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push ebx
mov ecx, eax
call fcn.0043e160
mov ecx, dword [esi]
call fcn.00506510
push 0x59d370
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push str.mailru::nss_decryptor::read_and_parse_signons
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push 0x59c870
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push 0x59d344
push eax
call fcn.0040b260
add esp, 8
push 0x5a2abc
mov ecx, esi
call fcn.0042a0c0
mov ecx, dword [ebp - 0x1f0]
mov byte [ebp - 4], 0xa
call fcn.00506510
mov esi, eax
push 0xa
mov ecx, esi
call fcn.0040bd80
mov eax, dword [esi]
xor edi, edi
mov eax, dword [eax + 4]
test byte [eax + esi + 0xc], 6
jne 0x459b3c
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x459b3c
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0x459b5d
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0x459b55
or eax, 4
push 0
push eax
call fcn.00402fc0
mov ebx, 0xf
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x58], 0
mov byte [ebp - 0x68], 0
push 1
lea edx, [ebp - 0x84]
push edx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0xd
call fcn.0044f450
cmp dword [ebp - 0x74], 0
mov byte [ebp - 4], 0xe
push 0
lea ecx, [ebp - 0x230]
je 0x459c7c
lea eax, [ebp - 0x30]
push eax
call fcn.0044f450
push 3
push 0
push 0x5a2ab8
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], bl
call fcn.00412220
cmp eax, 0xffffffff
jne 0x459c58
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x4c]
push 0x5a2ab0
push edx
call fcn.004580e0
add esp, 0xc
mov esi, eax
lea eax, [ebp - 0x30]
lea edi, [ebx + 1]
cmp eax, esi
je 0x459c41
cmp dword [ebp - 0x1c], edi
jb 0x459bf6
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.0055ae44
add esp, 4
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], 0
mov byte [ebp - 0x30], 0
cmp dword [esi + 0x14], edi
jae 0x459c1d
mov eax, dword [esi + 0x10]
inc eax
push eax
lea edx, [ebp - 0x30]
push esi
push edx
call fcn.0055b1c0
add esp, 0xc
jmp 0x459c28
mov eax, dword [esi]
mov dword [ebp - 0x30], eax
mov dword [esi], 0
mov ecx, dword [esi + 0x10]
mov dword [ebp - 0x20], ecx
mov edx, dword [esi + 0x14]
mov dword [ebp - 0x1c], edx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x10], 0
mov byte [esi], 0
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x38], edi
jb 0x459c5d
mov eax, dword [ebp - 0x4c]
push eax
call fcn.0055ae44
add esp, 4
jmp 0x459c5d
mov edi, 0x10
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x68]
call fcn.00401760
cmp dword [ebp - 0x1c], edi
jb 0x459d00
mov edx, dword [ebp - 0x30]
push edx
jmp 0x459cf8
lea eax, [ebp - 0x4c]
push eax
call fcn.0044f450
mov esi, eax
lea ecx, [ebp - 0x68]
mov edi, 0x10
cmp ecx, esi
je 0x459cef
cmp dword [ebp - 0x54], edi
jb 0x459ca4
mov edx, dword [ebp - 0x68]
push edx
call fcn.0055ae44
add esp, 4
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x58], 0
mov byte [ebp - 0x68], 0
cmp dword [esi + 0x14], edi
jae 0x459ccb
mov eax, dword [esi + 0x10]
inc eax
push eax
lea eax, [ebp - 0x68]
push esi
push eax
call fcn.0055b1c0
add esp, 0xc
jmp 0x459cd6
mov ecx, dword [esi]
mov dword [ebp - 0x68], ecx
mov dword [esi], 0
mov edx, dword [esi + 0x10]
mov dword [ebp - 0x58], edx
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x54], eax
mov dword [esi + 0x14], ebx
mov dword [esi + 0x10], 0
mov byte [esi], 0
cmp dword [ebp - 0x38], edi
jb 0x459d00
mov ecx, dword [ebp - 0x4c]
push ecx
call fcn.0055ae44
add esp, 4
lea ecx, [ebp - 0x1ec]
call fcn.00457c50
mov byte [ebp - 4], 0x12
call fcn.00523277
mov edi, eax
mov dword [ebp - 0x1f4], edi
call fcn.00523131
push 0
lea ecx, [ebp - 0x208]
mov esi, eax
call fcn.00523066
mov eax, dword [esi + 4]
cmp eax, 0xffffffff
jae 0x459d3c
inc eax
mov dword [esi + 4], eax
lea ecx, [ebp - 0x208]
call fcn.0052308e
push ecx
mov eax, esp
mov dword [ebp - 0x210], esp
push 0
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 0x13
mov dword [eax], edi
call fcn.00523066
mov eax, dword [edi + 4]
cmp eax, 0xffffffff
jae 0x459d6f
inc eax
mov dword [edi + 4], eax
lea ecx, [ebp - 0x238]
call fcn.0052308e
lea edx, [ebp - 0x68]
push 0x5a1ac0
push edx
call fcn.00458470
add esp, 0xc
test al, al
push 0
lea ecx, [ebp - 0x234]
sete bl
mov byte [ebp - 4], 0x12
call fcn.00523066
mov eax, dword [edi + 4]
test eax, eax
je 0x459db1
cmp eax, 0xffffffff
jae 0x459db1
dec eax
mov dword [edi + 4], eax
mov esi, dword [edi + 4]
neg esi
sbb esi, esi
lea ecx, [ebp - 0x234]
not esi
call fcn.0052308e
and esi, edi
je 0x459dd3
mov eax, dword [esi]
mov edx, dword [eax]
push 1
mov ecx, esi
call edx
test bl, bl
je 0x459de6
push 1
push 0x5a1ac0
lea ecx, [ebp - 0x68]
call fcn.00404540
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 0x1f4], eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x4c]
push ecx
lea ecx, [ebp - 0x1f4]
call fcn.00414cf0
mov esi, eax
lea edx, [ebp - 0x1cc]
cmp edx, esi
je 0x459e9d
mov edi, 8
cmp dword [ebp - 0x1b8], edi
jb 0x459e31
mov eax, dword [ebp - 0x1cc]
push eax
call fcn.0055ae44
add esp, 4
xor ecx, ecx
mov ebx, 7
mov dword [ebp - 0x1b8], ebx
mov dword [ebp - 0x1bc], 0
mov word [ebp - 0x1cc], cx
cmp dword [esi + 0x14], edi
jae 0x459e6e
mov eax, dword [esi + 0x10]
lea edx, [eax + eax + 2]
push edx
lea eax, [ebp - 0x1cc]
push esi
push eax
call fcn.0055b1c0
add esp, 0xc
jmp 0x459e7c
mov ecx, dword [esi]
mov dword [ebp - 0x1cc], ecx
mov dword [esi], 0
mov edx, dword [esi + 0x10]
mov dword [ebp - 0x1bc], edx
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x1b8], eax
xor ecx, ecx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x10], 0
mov word [esi], cx
cmp dword [ebp - 0x38], 8
mov byte [ebp - 4], 0x12
jb 0x459eb3
mov edx, dword [ebp - 0x4c]
push edx
call fcn.0055ae44
add esp, 4
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x1e8]
call fcn.00401760
cmp dword [ebp - 0x74], 0
je 0x459ee2
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x84]
push ecx
lea ecx, [ebp - 0x1e8]
call fcn.00404450
call fcn.00523277
mov edi, eax
mov dword [ebp - 0x210], edi
call fcn.00523131
push 0
lea ecx, [ebp - 0x240]
mov esi, eax
call fcn.00523066
mov eax, dword [esi + 4]
cmp eax, 0xffffffff
jae 0x459f0f
inc eax
mov dword [esi + 4], eax
lea ecx, [ebp - 0x240]
call fcn.0052308e
push ecx
mov eax, esp
mov dword [ebp - 0x1f4], esp
push 0
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x15
mov dword [eax], edi
call fcn.00523066
mov eax, dword [edi + 4]
cmp eax, 0xffffffff
jae 0x459f42
inc eax
mov dword [edi + 4], eax
lea ecx, [ebp - 0x23c]
call fcn.0052308e
lea edx, [ebp - 0x68]
push 0x5a2aa4
push edx
call fcn.00458570
add esp, 0xc
push 0
lea ecx, [ebp - 0x200]
mov bl, al
mov byte [ebp - 4], 0x12
call fcn.00523066
mov eax, dword [edi + 4]
test eax, eax
je 0x459f81
cmp eax, 0xffffffff
jae 0x459f81
dec eax
mov dword [edi + 4], eax
mov esi, dword [edi + 4]
neg esi
sbb esi, esi
lea ecx, [ebp - 0x200]
not esi
call fcn.0052308e
and esi, edi
je 0x459fa3
mov eax, dword [esi]
mov edx, dword [eax]
push 1
mov ecx, esi
call edx
test bl, bl
je 0x459fae
mov byte [ebp - 0xd0], 1
push 3
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x230]
call fcn.00458ab0
mov esi, eax
lea ecx, [ebp - 0x178]
cmp ecx, esi
je 0x45a048
cmp dword [ebp - 0x164], 8
jb 0x459fe3
mov edx, dword [ebp - 0x178]
push edx
call fcn.0055ae44
add esp, 4
xor edi, edi
xor eax, eax
mov ebx, 7
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x168], edi
mov word [ebp - 0x178], ax
cmp dword [esi + 0x14], 8
jae 0x45a01f
mov eax, dword [esi + 0x10]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [ebp - 0x178]
push esi
push edx
call fcn.0055b1c0
add esp, 0xc
jmp 0x45a029
mov eax, dword [esi]
mov dword [ebp - 0x178], eax
mov dword [esi], edi
mov ecx, dword [esi + 0x10]
mov dword [ebp - 0x168], ecx
mov edx, dword [esi + 0x14]
mov dword [ebp - 0x164], edx
xor eax, eax
mov dword [esi + 0x14], ebx
mov dword [esi + 0x10], edi
mov word [esi], ax
jmp 0x45a04f
mov ebx, 7
xor edi, edi
cmp dword [ebp - 0x38], 8
mov byte [ebp - 4], 0x12
jb 0x45a065
mov ecx, dword [ebp - 0x4c]
push ecx
call fcn.0055ae44
add esp, 4
push 5
lea edx, [ebp - 0x4c]
push edx
lea ecx, [ebp - 0x230]
call fcn.0044f450
mov ecx, dword [ebp - 0x218]
push eax
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0x17
call fcn.00458220
mov esi, eax
lea ecx, [ebp - 0x15c]
cmp ecx, esi
je 0x45a10a
cmp dword [ebp - 0x148], 8
jb 0x45a0ae
mov edx, dword [ebp - 0x15c]
push edx
call fcn.0055ae44
add esp, 4
xor eax, eax
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x14c], edi
mov word [ebp - 0x15c], ax
cmp dword [esi + 0x14], 8
jae 0x45a0e3
mov eax, dword [esi + 0x10]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [ebp - 0x15c]
push esi
push edx
call fcn.0055b1c0
add esp, 0xc
jmp 0x45a0ed
mov eax, dword [esi]
mov dword [ebp - 0x15c], eax
mov dword [esi], edi
mov ecx, dword [esi + 0x10]
mov dword [ebp - 0x14c], ecx
mov edx, dword [esi + 0x14]
mov dword [ebp - 0x148], edx
xor eax, eax
mov dword [esi + 0x14], ebx
mov dword [esi + 0x10], edi
mov word [esi], ax
cmp dword [ebp - 0x1c], 8
jb 0x45a11c
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.0055ae44
add esp, 4
xor edx, edx
cmp dword [ebp - 0x38], 0x10
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], edi
mov word [ebp - 0x30], dx
mov byte [ebp - 4], 0x12
jb 0x45a13e
mov eax, dword [ebp - 0x4c]
push eax
call fcn.0055ae44
add esp, 4
push 4
lea ecx, [ebp - 0x4c]
push ecx
lea ecx, [ebp - 0x230]
call fcn.00458ab0
mov esi, eax
lea edx, [ebp - 0x140]
cmp edx, esi
je 0x45a1cf
cmp dword [ebp - 0x12c], 8
jb 0x45a173
mov eax, dword [ebp - 0x140]
push eax
call fcn.0055ae44
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x130], edi
mov word [ebp - 0x140], cx
cmp dword [esi + 0x14], 8
jae 0x45a1a8
mov eax, dword [esi + 0x10]
lea edx, [eax + eax + 2]
push edx
lea eax, [ebp - 0x140]
push esi
push eax
call fcn.0055b1c0
add esp, 0xc
jmp 0x45a1b2
mov ecx, dword [esi]
mov dword [ebp - 0x140], ecx
mov dword [esi], edi
mov edx, dword [esi + 0x10]
mov dword [ebp - 0x130], edx
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x12c], eax
xor ecx, ecx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x10], edi
mov word [esi], cx
cmp dword [ebp - 0x38], 8
mov byte [ebp - 4], 0x12
jb 0x45a1e5
mov edx, dword [ebp - 0x4c]
push edx
call fcn.0055ae44
add esp, 4
push 6
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x230]
call fcn.0044f450
push eax
lea ecx, [ebp - 0x30]
push ecx
mov ecx, dword [ebp - 0x218]
mov byte [ebp - 4], 0x1a
call fcn.00458220
mov esi, eax
lea edx, [ebp - 0x124]
cmp edx, esi
je 0x45a28a
cmp dword [ebp - 0x110], 8
jb 0x45a22e
mov eax, dword [ebp - 0x124]
push eax
call fcn.0055ae44
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x114], edi
mov word [ebp - 0x124], cx
cmp dword [esi + 0x14], 8
jae 0x45a263
mov eax, dword [esi + 0x10]
lea edx, [eax + eax + 2]
push edx
lea eax, [ebp - 0x124]
push esi
push eax
call fcn.0055b1c0
add esp, 0xc
jmp 0x45a26d
mov ecx, dword [esi]
mov dword [ebp - 0x124], ecx
mov dword [esi], edi
mov edx, dword [esi + 0x10]
mov dword [ebp - 0x114], edx
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x110], eax
xor ecx, ecx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x10], edi
mov word [esi], cx
cmp dword [ebp - 0x1c], 8
jb 0x45a29c
mov edx, dword [ebp - 0x30]
push edx
call fcn.0055ae44
add esp, 4
xor eax, eax
cmp dword [ebp - 0x38], 0x10
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], edi
mov word [ebp - 0x30], ax
mov byte [ebp - 4], 0x12
jb 0x45a2be
mov ecx, dword [ebp - 0x4c]
push ecx
call fcn.0055ae44
add esp, 4
cmp dword [ebp - 0x114], edi
jne 0x45a319
lea ecx, [ebp - 0x1ec]
call fcn.0043dfc0
mov esi, 0x10
cmp dword [ebp - 0x70], esi
jb 0x45a2ea
mov edx, dword [ebp - 0x84]
push edx
call fcn.0055ae44
add esp, 4
mov dword [ebp - 0x70], 0xf
mov dword [ebp - 0x74], edi
mov byte [ebp - 0x84], 0
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x54], esi
jb 0x4599c0
mov eax, dword [ebp - 0x68]
push eax
call fcn.0055ae44
add esp, 4
jmp 0x4599c0
push 2
lea ecx, [ebp - 0x4c]
push ecx
lea ecx, [ebp - 0x230]
call fcn.00458ab0
mov esi, eax
lea edx, [ebp - 0x1b0]
cmp edx, esi
je 0x45a3aa
cmp dword [ebp - 0x19c], 8
jb 0x45a34e
mov eax, dword [ebp - 0x1b0]
push eax
call fcn.0055ae44
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x1a0], edi
mov word [ebp - 0x1b0], cx
cmp dword [esi + 0x14], 8
jae 0x45a383
mov eax, dword [esi + 0x10]
lea edx, [eax + eax + 2]
push edx
lea eax, [ebp - 0x1b0]
push esi
push eax
call fcn.0055b1c0
add esp, 0xc
jmp 0x45a38d
mov ecx, dword [esi]
mov dword [ebp - 0x1b0], ecx
mov dword [esi], edi
mov edx, dword [esi + 0x10]
mov dword [ebp - 0x1a0], edx
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x19c], eax
xor ecx, ecx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x10], edi
mov word [esi], cx
cmp dword [ebp - 0x38], 8
mov byte [ebp - 4], 0x12
jb 0x45a3c0
mov edx, dword [ebp - 0x4c]
push edx
call fcn.0055ae44
add esp, 4
call fcn.00523277
mov edi, eax
mov dword [ebp - 0x210], edi
call fcn.00523131
push 0
lea ecx, [ebp - 0x20c]
mov esi, eax
call fcn.00523066
mov eax, dword [esi + 4]
cmp eax, 0xffffffff
jae 0x45a3ed
inc eax
mov dword [esi + 4], eax
lea ecx, [ebp - 0x20c]
call fcn.0052308e
push ecx
mov eax, esp
mov dword [ebp - 0x1f4], esp
push 0
lea ecx, [ebp - 0x204]
mov byte [ebp - 4], 0x1d
mov dword [eax], edi
call fcn.00523066
mov eax, dword [edi + 4]
cmp eax, 0xffffffff
jae 0x45a420
inc eax
mov dword [edi + 4], eax
lea ecx, [ebp - 0x204]
call fcn.0052308e
lea eax, [ebp - 0x1b0]
push 0x5a2aa0
push eax
call fcn.004586f0
add esp, 0xc
test al, al
push 0
lea ecx, [ebp - 0x1f8]
sete bl
mov byte [ebp - 4], 0x12
call fcn.00523066
mov eax, dword [edi + 4]
test eax, eax
je 0x45a465
cmp eax, 0xffffffff
jae 0x45a465
dec eax
mov dword [edi + 4], eax
mov esi, dword [edi + 4]
neg esi
sbb esi, esi
lea ecx, [ebp - 0x1f8]
not esi
call fcn.0052308e
and esi, edi
je 0x45a487
mov edx, dword [esi]
mov eax, dword [edx]
push 1
mov ecx, esi
call eax
test bl, bl
je 0x45a49d
push 1
push 0x5a2aa0
lea ecx, [ebp - 0x1b0]
call fcn.00405220
lea ecx, [ebp - 0x1ec]
push ecx
mov ecx, dword [ebp - 0x214]
call fcn.00458f50
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push str.nss_decryptor.cpp
lea edx, [ebp - 0x1fc]
push edx
mov ecx, 0x5f1460
mov edi, eax
call fcn.00506650
mov esi, eax
mov ecx, dword [esi]
mov byte [ebp - 4], 0x1e
call fcn.00506510
push 0x59d37c
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push 0x158
mov ecx, eax
call fcn.0040bb90
mov ecx, dword [esi]
call fcn.00506510
push 0x59d378
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push edi
mov ecx, eax
call fcn.0043e160
mov ecx, dword [esi]
call fcn.00506510
push 0x59d374
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push ebx
mov ecx, eax
call fcn.0043e160
mov ecx, dword [esi]
call fcn.00506510
push 0x59d370
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push str.mailru::nss_decryptor::read_and_parse_signons
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push 0x59c870
push eax
call fcn.0040b260
mov ecx, dword [esi]
add esp, 8
call fcn.00506510
push 0x59d344
push eax
call fcn.0040b260
add esp, 8
push 0x5a2a80
mov ecx, esi
call fcn.0042a0c0
mov ecx, dword [ebp - 0x1fc]
mov byte [ebp - 4], 0x12
call fcn.00506510
push eax
call fcn.0040ceb0
add esp, 4
lea ecx, [ebp - 0x1ec]
call fcn.0043dfc0
mov esi, 0x10
cmp dword [ebp - 0x70], esi
jb 0x45a5e7
mov eax, dword [ebp - 0x84]
push eax
call fcn.0055ae44
add esp, 4
mov dword [ebp - 0x70], 0xf
mov dword [ebp - 0x74], 0
mov byte [ebp - 0x84], 0
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x54], esi
jb 0x4599c0
mov ecx, dword [ebp - 0x68]
push ecx
call fcn.0055ae44
add esp, 4
jmp 0x4599c0
cmp byte [ebp - 0x228], 0
je 0x45a62e
lea ecx, [ebp - 0x230]
call fcn.00402930
mov edi, 8
cmp dword [ebp - 0x8c], edi
jb 0x45a64a
mov edx, dword [ebp - 0xa0]
push edx
call fcn.0055ae44
add esp, 4
xor eax, eax
mov esi, 7
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x90], 0
mov word [ebp - 0xa0], ax
cmp dword [ebp - 0xa8], edi
jb 0x45a67f
mov ecx, dword [ebp - 0xbc]
push ecx
call fcn.0055ae44
add esp, 4
xor edx, edx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xac], 0
mov word [ebp - 0xbc], dx
cmp byte [ebp - 0x25c], dl
je 0x45a6ab
lea ecx, [ebp - 0x264]
call fcn.00402930
cmp byte [ebp - 0x244], 0
je 0x45a6bf
lea ecx, [ebp - 0x24c]
call fcn.00402930
mov al, 1
jmp 0x45a7b8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0055bc32
mov esp, ebp
pop ebp
ret 8