Function at 0x481d38
Capabilities:
Gather firefox profile information

Disassembly:
push 0x18
mov eax, 0x4fd648
call fcn.004e2589
and dword [ebp - 4], 0
and dword [ebp - 0x14], 0
mov dword [ebp - 4], 2
mov ecx, dword [ebp + 8]
push str.select_name__value__path__expiry_from_moz_cookies_where
call fcn.00401769
push 7
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x14], 1
call fcn.004133f6
mov byte [ebp - 4], 3
push 0x522294
mov ecx, eax
call fcn.00403fee
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
call fcn.00401898
test bl, bl
je 0x481dcc
mov eax, dword [ebp + 0xc]
mov eax, dword [eax - 0xc]
add eax, 0xfffffff9
push eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xc]
call fcn.00415e69
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp + 0xc]
call fcn.004043ce
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
call fcn.00401898
push 4
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xc]
call fcn.004133f6
mov byte [ebp - 4], 5
push str.www.
mov ecx, eax
call fcn.00403fee
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
call fcn.00401898
test bl, bl
je 0x481e31
mov eax, dword [ebp + 0xc]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffc
push eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xc]
call fcn.00415e69
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp + 0xc]
call fcn.004043ce
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
call fcn.00401898
push 0x522080
xor ecx, ecx
lea esi, [ebp + 0xc]
call fcn.0041271e
mov esi, eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax - 0xc]
dec eax
cmp esi, eax
jne 0x481e58
lea edi, [ebp + 0xc]
call fcn.00484acf
or esi, 0xffffffff
test esi, esi
jle 0x481f33
mov eax, dword [ebp + 0xc]
mov eax, dword [eax - 0xc]
sub eax, esi
push eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp + 0xc]
call fcn.00415e69
mov byte [ebp - 4], 7
push esi
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp + 0xc]
call fcn.004133f6
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp + 0xc]
call fcn.004043ce
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x18]
call fcn.00401898
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x24]
push str._host_like__
push eax
call fcn.004040f8
mov byte [ebp - 4], 9
push str._and_path__
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00404094
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x10]
push ecx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040403d
mov byte [ebp - 4], 0xb
mov esi, 0x530dfc
push esi
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00404094
add esp, 0x30
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp + 8]
push eax
call fcn.0040426e
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x18]
call fcn.00401898
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1c]
call fcn.00401898
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x20]
call fcn.00401898
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x24]
call fcn.00401898
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
jmp 0x481f7c
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x20]
push str._host_like__
push eax
call fcn.004040f8
mov byte [ebp - 4], 0xd
mov esi, 0x530dfc
push esi
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00404094
add esp, 0x18
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp + 8]
push eax
call fcn.0040426e
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x24]
call fcn.00401898
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x20]
call fcn.00401898
mov eax, dword [ebp + 0x10]
cmp dword [eax - 0xc], 0
je 0x481fd3
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0x20]
push str._and_name__
push eax
call fcn.004040f8
mov byte [ebp - 4], 0xf
push esi
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00404094
add esp, 0x18
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp + 8]
push eax
call fcn.0040426e
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x24]
call fcn.00401898
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x20]
call fcn.00401898
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.00401898
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x10]
call fcn.00401898
mov eax, dword [ebp + 8]
call fcn.004e2661
ret 0xc