Function at 0x454980
Capabilities:
Gather firefox profile information
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x454d86
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
mov qword [rsp + 0x78], rdi
mov byte [rsp + 0x80], sil
mov qword [rsp + 0x98], r10
mov qword [rsp + 0x88], r8
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x90], r9
mov rdx, qword [rdi]
lea r11, [rax + 0x34]
mov qword [rsp + 0x30], r11
mov rax, rdx
test rdx, rdx
je 0x4549e9
mov r12, qword [rdx + 0x10]
add r12, 0xffffffffffff0418
neg r12
cmp r12, r11
jge 0x4549fc
mov ebx, ecx
call fcn.00455020
nop
mov rdx, rax
mov rcx, qword [rsp + 0x78]
mov qword [rcx], rax
mov qword [rsp + 0x38], rdx
call fcn.00464000
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp]
shr rax, 6
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rcx + 8]
mov qword [rcx + 8], rax
sub rax, rdx
mov rsi, qword [rsp + 0x88]
test rsi, rsi
jl 0x454a4d
mov rdx, qword [rsp + 0x98]
lea r10d, [rdx + 1]
jmp 0x454a58
mov rdx, qword [rsp + 0x98]
mov r10, rdx
cmp r10b, 3
jbe 0x454a64
mov r10d, 3
mov r8, qword [rcx + 0x10]
mov r9d, r10d
shl r10d, 6
movzx r11d, byte [rsp + 0x80]
or r10d, r11d
nop dword [rax + rax]
cmp r8, 0xfbe8
jae 0x454d77
mov byte [rcx + r8 + 0x418], r10b
mov r10, qword [rcx + 0x10]
inc r10
mov qword [rcx + 0x10], r10
cmp r9b, 3
jne 0x454aad
xor ebx, ebx
jmp 0x454d20
xor ebx, ebx
nop
mov r9, qword [rcx + 0x10]
jmp 0x454ace
mov r10, rax
or eax, 0xffffff80
mov byte [rcx + r9 + 0x418], al
shr r10, 7
inc r9
mov rax, r10
cmp rax, 0x80
jb 0x454ae5
cmp r9, 0xfbe8
jb 0x454ab6
nop
jmp 0x454cf2
cmp r9, 0xfbe8
jae 0x454ce5
mov byte [rcx + r9 + 0x418], al
inc r9
mov qword [rcx + 0x10], r9
mov r9, qword [rsp + 0x90]
xor eax, eax
jmp 0x454b20
mov byte [rcx + r11 + 0x418], r10b
lea r10, [r11 + 1]
mov qword [rcx + 0x10], r10
inc rax
cmp rdx, rax
jle 0x454b45
mov r10, qword [r9 + rax*8]
nop
mov r11, qword [rcx + 0x10]
jmp 0x454caf
cmp r11, 0xfbe8
jb 0x454b0d
nop dword [rax]
jmp 0x454ccb
test rsi, rsi
jne 0x454b55
mov rdx, qword [rcx + 0x10]
xor eax, eax
jmp 0x454c49
jle 0x454b82
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x40], rbx
lea rbx, [rcx + 0x18]
mov rax, qword [rsp + 0x48]
mov edi, pe_nt_image_headers64
mov rcx, rdi
call fcn.00454e00
mov rdx, qword [rsp + 0x38]
mov r8, qword [rdx + 0x10]
jmp 0x454bd1
mov rcx, qword [rcx + 0x10]
sub rcx, r8
mov rdx, qword [rsp + 0x30]
cmp rcx, rdx
jg 0x454ba8
test rbx, rbx
je 0x454b9e
lea rax, [rcx - 2]
mov byte [rbx], al
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
lea rax, [0x007affa2]
mov ebx, 0x1d
call fcn.00436e00
mov rsi, rax
or eax, 0xffffff80
mov byte [rdx + r8 + 0x418], al
shr rsi, 7
inc r8
mov rax, rsi
cmp rax, 0x80
jb 0x454beb
nop dword [rax]
cmp r8, 0xfbe8
jb 0x454bb9
jmp 0x454c25
cmp r8, 0xfbe8
jae 0x454c16
mov byte [rdx + r8 + 0x418], al
lea rsi, [r8 + 1]
mov qword [rdx + 0x10], rsi
mov rcx, rdx
mov rbx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x28]
jmp 0x454b82
mov rax, r8
mov ecx, 0xfbe8
nop
call fcn.00464620
mov rax, r8
mov ecx, 0xfbe8
call fcn.00464620
mov rsi, rax
or eax, 0xffffff80
mov byte [rcx + rdx + 0x418], al
shr rsi, 7
inc rdx
mov rax, rsi
cmp rax, 0x80
jb 0x454c60
cmp rdx, 0xfbe8
jb 0x454c32
jmp 0x454c89
cmp rdx, 0xfbe8
jae 0x454c7c
mov byte [rcx + rdx + 0x418], al
inc rdx
mov qword [rcx + 0x10], rdx
jmp 0x454b82
mov rax, rdx
mov ecx, 0xfbe8
call fcn.00464620
mov rax, rdx
mov ecx, 0xfbe8
call fcn.00464620
mov r12, r10
or r10d, 0xffffff80
mov byte [rcx + r11 + 0x418], r10b
shr r12, 7
inc r11
mov r10, r12
cmp r10, 0x80
jb 0x454b33
nop dword [rax]
cmp r11, 0xfbe8
jb 0x454c96
jmp 0x454cd8
mov rax, r11
mov ecx, 0xfbe8
call fcn.00464620
mov rax, r11
mov ecx, 0xfbe8
call fcn.00464620
mov rax, r9
mov ecx, 0xfbe8
call fcn.00464620
mov rax, r9
mov ecx, 0xfbe8
call fcn.00464620
mov r9, rbx
or ebx, 0xffffff80
mov byte [rcx + r10 + 0x418], bl
shr r9, 7
inc r10
mov rbx, r9
nop word [rax + rax]
cmp rbx, 0x80
jb 0x454d34
cmp r10, 0xfbe8
jb 0x454cff
jmp 0x454d6a
cmp r10, 0xfbe8
jae 0x454d5d
mov byte [rcx + r10 + 0x418], bl
lea r9, [r10 + 1]
mov qword [rcx + 0x10], r9
lea rbx, [rcx + r10]
lea rbx, [rbx + 0x418]
jmp 0x454aaf
mov rax, r10
mov ecx, 0xfbe8
call fcn.00464620
mov rax, r10
mov ecx, 0xfbe8
call fcn.00464620
mov rax, r8
mov ecx, 0xfbe8
nop
call fcn.00464620
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], ecx
mov qword [rsp + 0x20], rdi
mov byte [rsp + 0x28], sil
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x48], r11
call fcn.00461f00
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov ecx, dword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
movzx esi, byte [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
mov r11, qword [rsp + 0x48]
jmp fcn.00454980