Function at 0x440a00
Capabilities:
Gather firefox profile information
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x68]
cmp r12, qword [r14 + 0x10]
jbe 0x44152a
sub rsp, 0xe8
mov qword [rsp + 0xe0], rbp
lea rbp, [rsp + 0xe0]
mov qword [rsp + 0xc8], r14
mov rcx, qword [rsp + 0xc8]
mov rdx, qword [rcx + 0x30]
mov rax, qword [rdx + 0xa0]
cmp dword [0x00b6e880], 0
je 0x440a51
call fcn.00440780
jmp 0x440a2e
mov qword [rsp + 0xd8], rax
test byte [rax], al
cmp dword [rax + 0x2278], 0
je 0x440a71
call fcn.0043ef40
mov rax, qword [rsp + 0xd8]
xor ebx, ebx
call fcn.004423c0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rbx
cmp byte [0x00b73e30], 0
jne 0x440a94
cmp byte [0x00b73e31], 0
je 0x440ab3
call fcn.00457960
nop dword [rax]
test rax, rax
jne 0x441187
mov rax, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
cmp dword [0x00bc1ca8], 0
je 0x440ae4
mov rbx, qword [rsp + 0xd8]
mov rcx, rax
lea rax, [0x00bc2ce0]
call fcn.00423260
test rax, rax
jne 0x44128c
mov rax, rbx
mov rbx, qword [rsp + 0x50]
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0xd8]
mov edx, dword [rcx + 0x10]
imul edx, edx, 0xc10c9715
nop word [rax + rax]
cmp edx, 0x4325c53
ja 0x440b6a
cmp dword [0x00b6e810], 0
jle 0x440b6a
nop
nop
lea rax, [0x00b6e7b8]
call fcn.0040cd60
mov rax, qword [rsp + 0xd8]
mov ebx, 1
call fcn.004479e0
mov qword [rsp + 0xd0], rax
nop
nop
lea rax, [0x00b6e7b8]
call fcn.0040cf80
mov rax, qword [rsp + 0xd0]
test rax, rax
jne 0x4411cc
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0x50]
cmp byte [0x00bc1c5f], 0
je 0x440ba8
cmp byte [0x00bc1c60], 0
je 0x440ba8
nop dword [rax]
call fcn.0041a0c0
test rax, rax
je 0x440b96
xor ebx, ebx
mov ecx, 1
call fcn.0043d340
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0x50]
mov rdx, qword [0x00833418]
mov rdx, qword [rdx]
test rdx, rdx
je 0x440be5
mov qword [rsp], rdx
mov qword [rsp + 8], 0
call fcn.00466a80
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
call fcn.00448380
test rax, rax
jne 0x44127a
cmp dword [0x00b6e810], 0
je 0x440c49
nop
nop
lea rax, [0x00b6e7b8]
call fcn.0040cd60
mov rax, qword [rsp + 0xd8]
xor ebx, ebx
call fcn.004479e0
mov qword [rsp + 0xb0], rax
nop
nop
lea rax, [0x00b6e7b8]
call fcn.0040cf80
mov rax, qword [rsp + 0xb0]
nop word [rax + rax]
test rax, rax
jne 0x441266
mov edx, dword [0x00bc1cc0]
test edx, edx
je 0x440c70
mov edx, dword [0x00bc1cc4]
test edx, edx
jbe 0x440c6c
mov rdx, qword [0x00b6e7a8]
test rdx, rdx
setne dl
jmp 0x440c72
xor edx, edx
jmp 0x440c72
xor edx, edx
test dl, dl
je 0x440c8b
xor eax, eax
call fcn.00433220
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x4411f3
mov rdx, qword [rsp + 0xc8]
mov rsi, qword [rdx + 0x30]
mov edi, dword [0x00bc1cb4]
cmp byte [rsi + 0xe4], 0
je 0x440cad
mov esi, 1
jmp 0x440cc5
mov esi, dword [0x00b6e7fc]
mov r8d, dword [0x00b6e7f8]
shl esi, 1
sub edi, r8d
cmp esi, edi
setb sil
test sil, sil
jne 0x440cd6
mov rdi, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
jmp 0x440d35
mov rcx, qword [rdx + 0x30]
cmp byte [rcx + 0xe4], 0
jne 0x440cfa
mov byte [rcx + 0xe4], 1
mov ecx, 1
lea rbx, [0x00b6e7fc]
lock xadd dword [rbx], ecx
mov rax, qword [rsp + 0x58]
nop
call fcn.00441620
test rax, rax
jne 0x4411e1
test sil, sil
jne 0x440a2e
test rdi, rdi
je 0x440d2d
mov rdx, qword [rsp + 0x50]
test rdx, rdx
je 0x440d35
cmp rdi, rdx
jl 0x440d35
jmp 0x440d32
mov rdx, qword [rsp + 0x50]
mov rdi, rdx
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rcx
cmp dword [0x00bc1ca8], 0
je 0x440dd9
mov rdx, qword [rsp + 0xd8]
mov rsi, qword [rdx + 0x1240]
nop dword [rax + rax]
test rsi, rsi
je 0x440d82
cmp qword [rsi + 0x10], 0
jne 0x440d7a
mov rsi, qword [rdx + 0x1248]
cmp qword [rsi + 0x10], 0
je 0x440d82
mov eax, 1
nop
jmp 0x440dac
mov rsi, qword [0x00b6cfa0]
test rsi, rsi
jne 0x440da7
mov esi, dword [0x00b6d028]
cmp dword [0x00b6d02c], esi
jbe 0x440da3
mov eax, 1
jmp 0x440dac
xor eax, eax
jmp 0x440dac
mov eax, 1
test al, al
jne 0x440db4
xor eax, eax
jmp 0x440de3
lea rax, [0x00bc2ce0]
nop dword [rax + rax]
call fcn.00423d80
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0xd8]
mov rdi, qword [rsp + 0x50]
jmp 0x440de3
mov rdx, qword [rsp + 0xd8]
xor eax, eax
test al, al
je 0x440ded
nop
jmp 0x441478
mov rcx, qword [0x00b6c100]
mov qword [rsp + 0xb8], rcx
mov rdx, qword [0x00b6c108]
mov qword [rsp + 0x80], rdx
mov rbx, qword [0x00b6c110]
mov qword [rsp + 0x88], rbx
mov rsi, qword [0x00b6c180]
mov qword [rsp + 0xa0], rsi
mov rdi, qword [0x00b6c188]
mov qword [rsp + 0x70], rdi
mov r8, qword [0x00b6c190]
mov qword [rsp + 0x78], r8
mov r9, qword [0x00b6c1c0]
mov qword [rsp + 0x98], r9
mov r10, qword [0x00b6c1c8]
mov qword [rsp + 0x40], r10
mov r11, qword [0x00b6c1d0]
mov qword [rsp + 0x48], r11
nop
nop
lea rax, [0x00b6e7b8]
call fcn.0040cd60
cmp dword [0x00b6e880], 0
jne 0x440e90
mov rax, qword [rsp + 0xd8]
cmp dword [rax + 0x2278], 0
je 0x440ea5
nop
nop
lea rax, [0x00b6e7b8]
call fcn.0040cf80
nop
jmp 0x440a2e
cmp dword [0x00b6e810], 0
jne 0x4413f7
call fcn.00446100
mov rcx, qword [rsp + 0xd8]
nop
cmp rax, rcx
jne 0x441467
mov rax, rcx
mov rbx, qword [rsp + 0x58]
call fcn.00447c20
nop
nop
lea rax, [0x00b6e7b8]
nop
call fcn.0040cf80
mov rcx, qword [rsp + 0xc8]
mov rdx, qword [rcx + 0x30]
movzx esi, byte [rdx + 0xe4]
mov byte [rsp + 0x3f], sil
nop dword [rax]
test sil, sil
je 0x440fde
mov byte [rdx + 0xe4], 0
mov edx, 0xffffffff
lea r9, [0x00b6e7fc]
lock xadd dword [r9], edx
dec edx
test edx, edx
jl 0x441456
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
mov rdi, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
call fcn.004419a0
test rax, rax
je 0x440f8d
nop
call fcn.00445f80
mov rcx, qword [rsp + 0xc8]
mov rdx, qword [rcx + 0x30]
mov byte [rdx + 0xe4], 1
mov edx, 1
lea rbx, [0x00b6e7fc]
lock xadd dword [rbx], edx
jmp 0x440a2e
call fcn.00441b80
test rax, rax
jne 0x4412a3
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x98]
mov rsi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0x50]
call fcn.00441ae0
mov rcx, qword [rsp + 0xc8]
movzx esi, byte [rsp + 0x3f]
jmp 0x440fe3
mov rax, qword [rsp + 0x50]
mov edx, dword [0x00bc1cc0]
test edx, edx
je 0x441014
mov edx, dword [0x00bc1cc4]
test edx, edx
ja 0x440ffc
test rax, rax
je 0x441010
xor edx, edx
lea rdi, [0x00b6e7a8]
xchg qword [rdi], rdx
test rdx, rdx
setne dl
jmp 0x441016
xor edx, edx
jmp 0x441016
xor edx, edx
test dl, dl
je 0x4413b5
lea rdx, [0x00b6e7b0]
mov rdi, rax
xchg qword [rdx], rax
mov r8, qword [rcx + 0x30]
cmp qword [r8 + 0xa0], 0
jne 0x441445
cmp byte [r8 + 0xe4], 0
jne 0x441430
mov qword [rsp + 0x90], rdi
nop
call fcn.00468c80
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp]
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0x90]
nop
test rcx, rcx
je 0x441096
sub rcx, rax
test rcx, rcx
mov edx, 0
cmovl rcx, rdx
jmp 0x44109f
xor edx, edx
mov rcx, 0xffffffffffffffff
cmp qword [0x00bc1f38], 0
cmovne rcx, rdx
mov rax, rcx
call fcn.00433220
mov qword [rsp + 0x60], rax
xor ecx, ecx
lea rdx, [0x00b6e7b0]
xchg qword [rdx], rcx
mov rcx, qword [rsp + 0x58]
lea rdx, [0x00b6e7a8]
xchg qword [rdx], rcx
cmp qword [0x00bc1f38], 0
je 0x4410ef
cmp qword [rsp + 0x60], 0
jne 0x4410ef
call fcn.0043fcc0
jmp 0x440a2e
nop
nop
lea rax, [0x00b6e7b8]
call fcn.0040cd60
mov rax, qword [rsp + 0x58]
call fcn.00447dc0
mov qword [rsp + 0xc0], rax
nop
nop
lea rax, [0x00b6e7b8]
call fcn.0040cf80
mov rax, qword [rsp + 0xc0]
test rax, rax
je 0x4413a9
call fcn.00445f80
mov rcx, qword [rsp + 0x60]
nop dword [rax + rax]
test rcx, rcx
jne 0x441339
movzx ecx, byte [rsp + 0x3f]
test cl, cl
je 0x44117a
mov rcx, qword [rsp + 0xc8]
mov rdx, qword [rcx + 0x30]
mov byte [rdx + 0xe4], 1
mov edx, 1
lea rsi, [0x00b6e7fc]
lock xadd dword [rsi], edx
jmp 0x440a2e
mov rcx, qword [rsp + 0xc8]
jmp 0x440a2e
mov qword [rsp + 0xd0], rax
mov ebx, 4
mov ecx, 1
call fcn.0043daa0
mov rax, qword [rsp + 0xd0]
xor ebx, ebx
call fcn.00459000
mov rax, qword [rsp + 0xd0]
xor ebx, ebx
mov ecx, 1
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
xor ebx, ebx
mov ecx, ebx
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
nop
ret
xor ecx, ecx
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
nop
nop
mov qword [rsp + 0xd8], rax
nop dword [rax]
test rax, rax
je 0x441211
mov rcx, qword [rax + 0xa0]
mov qword [rsp + 0x68], rcx
lea rax, [rsp + 0x68]
call fcn.00441e40
mov rax, qword [rsp + 0xd8]
mov ebx, 4
mov ecx, 1
call fcn.0043daa0
cmp byte [0x00b73e30], 0
je 0x44124a
mov rax, qword [rsp + 0xd8]
xor ebx, ebx
call fcn.00459000
mov rax, qword [rsp + 0xd8]
xor ebx, ebx
mov ecx, ebx
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
xor ebx, ebx
mov ecx, ebx
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
xor ecx, ecx
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
xor ebx, ebx
mov ecx, 1
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xd0], rbx
call fcn.00445f80
mov rcx, qword [rsp + 0xc8]
mov rcx, qword [rcx + 0x30]
mov byte [rcx + 0xe4], 1
mov ecx, 1
lea rdx, [0x00b6e7fc]
lock xadd dword [rdx], ecx
mov rcx, qword [rsp + 0xc0]
mov qword [rcx + 0x1230], 3
mov rax, qword [rsp + 0xd0]
mov ebx, 4
mov ecx, 1
call fcn.0043daa0
cmp byte [0x00b73e30], 0
je 0x44131d
mov rax, qword [rsp + 0xd0]
xor ebx, ebx
call fcn.00459000
mov rax, qword [rsp + 0xd0]
xor ebx, ebx
mov ecx, ebx
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
nop
nop
mov qword [rsp + 0xd8], rcx
test rcx, rcx
je 0x441354
mov rdx, qword [rcx + 0xa0]
mov qword [rsp + 0x60], rdx
lea rax, [rsp + 0x60]
call fcn.00441e40
mov rax, qword [rsp + 0xd8]
mov ebx, 4
mov ecx, 1
call fcn.0043daa0
cmp byte [0x00b73e30], 0
je 0x44138d
mov rax, qword [rsp + 0xd8]
xor ebx, ebx
call fcn.00459000
mov rax, qword [rsp + 0xd8]
xor ebx, ebx
mov ecx, ebx
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
lea rax, [rsp + 0x60]
call fcn.00441e40
jmp 0x4413ed
test rax, rax
je 0x4413c7
mov edx, dword [0x00bc1cc0]
test edx, edx
setne dl
jmp 0x4413c9
xor edx, edx
test dl, dl
je 0x4413ed
mov rdx, qword [0x00b6e7b0]
test rdx, rdx
je 0x4413de
cmp rdx, rax
jle 0x4413ed
nop
call fcn.00433120
mov rcx, qword [rsp + 0xc8]
call fcn.0043fcc0
jmp 0x440a2e
xor ebx, ebx
call fcn.004479e0
mov qword [rsp + 0xa8], rax
nop
nop
lea rax, [0x00b6e7b8]
call fcn.0040cf80
mov rax, qword [rsp + 0xa8]
xor ebx, ebx
mov ecx, ebx
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
lea rax, [0x008e17c3]
mov ebx, 0x23
nop dword [rax]
call fcn.00439600
lea rax, [0x008ddd06]
mov ebx, 0x1c
call fcn.00439600
lea rax, [0x008e063e]
mov ebx, 0x21
call fcn.00439600
lea rax, [0x008d9f95]
mov ebx, 0x15
call fcn.00439600
mov rax, qword [0x00bc1f60]
nop
test rax, rax
je 0x4414b1
mov rsi, rax
sar rax, 0x13
shl rax, 3
nop
mov r8, qword [rax]
mov rbx, rax
mov rax, rsi
lea r9, [0x00bc1f60]
lock cmpxchg qword [r9], r8
sete sil
test sil, sil
je 0x441478
jmp 0x4414ba
lea r9, [0x00bc1f60]
xor ebx, ebx
test rbx, rbx
jne 0x4414d0
lea rax, [0x00bc2ce0]
call fcn.00423e60
jmp 0x440ded
mov qword [rdx + 0x1230], 3
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0xd8], rax
mov ebx, 4
mov ecx, 1
call fcn.0043daa0
cmp byte [0x00b73e30], 0
je 0x44150e
mov rax, qword [rsp + 0xd8]
xor ebx, ebx
call fcn.00459000
mov rax, qword [rsp + 0xd8]
xor ebx, ebx
mov ecx, ebx
mov rbp, qword [rsp + 0xe0]
add rsp, 0xe8
ret
call fcn.00464c60
jmp fcn.00440a00