Function at 0x4fb140
Capabilities:
Gather firefox profile information
Reference sql statements

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x4fb83f
sub rsp, 0xc0
mov qword [rsp + 0xb8], rbp
lea rbp, [rsp + 0xb8]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xd0], rbx
test rax, rax
je 0x4fb589
mov edx, dword [rax + 0x10]
cmp edx, 0x13ff06c5
jne 0x4fb1c5
lea rdx, [0x0070ce00]
cmp rax, rdx
jne 0x4fb1bb
movzx esi, byte [rbx]
lea r8, [0x009bba60]
lea rbx, [r8 + rsi*8]
mov rax, rdx
xor ecx, ecx
xor edi, edi
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
test rax, rax
nop
jmp 0x4fb589
cmp edx, 0x382e7edf
jne 0x4fb380
lea rdx, [0x0070c500]
nop dword [rax + rax]
cmp rax, rdx
jne 0x4fb377
mov rcx, qword [rbx + 8]
mov qword [rsp + 0x28], rcx
mov rdx, qword [rbx + 0x10]
mov qword [rsp + 0x38], rdx
mov rbx, qword [rbx]
mov qword [rsp + 0x68], rbx
lea rax, [rsp + 0x40]
call fcn.0044d200
cmp rbx, 1
je 0x4fb27b
cmp rbx, 4
jne 0x4fb245
cmp dword [rax], 0x45555254
nop
je 0x4fb2c8
cmp dword [rax], 0x65757254
je 0x4fb2c8
cmp dword [rax], 0x65757274
je 0x4fb2c8
nop
jmp 0x4fb2d1
cmp rbx, 5
jne 0x4fb2d1
cmp dword [rax], 0x534c4146
jne 0x4fb25d
cmp byte [rax + 4], 0x45
je 0x4fb2bd
cmp dword [rax], 0x736c6146
jne 0x4fb26b
cmp byte [rax + 4], 0x65
je 0x4fb2bd
cmp dword [rax], 0x736c6166
jne 0x4fb2d1
cmp byte [rax + 4], 0x65
je 0x4fb2bd
jmp 0x4fb2d1
mov qword [rsp + 0x60], rax
lea rcx, [0x007715bc]
mov edi, 1
call fcn.00402660
test rax, rax
jg 0x4fb2ae
mov rdx, qword [rsp + 0x60]
cmp byte [rdx], 0x30
nop
je 0x4fb2bd
cmp byte [rdx], 0x31
je 0x4fb2c8
cmp byte [rdx], 0x46
je 0x4fb2bd
jmp 0x4fb2d1
mov rdx, qword [rsp + 0x60]
cmp byte [rdx], 0x54
je 0x4fb2c8
cmp byte [rdx], 0x66
jne 0x4fb2c3
xor eax, eax
xor ecx, ecx
jmp 0x4fb2da
cmp byte [rdx], 0x74
jne 0x4fb2d1
xor eax, eax
mov ecx, 1
jmp 0x4fb2da
lea rax, [0x00815860]
xor ecx, ecx
test rax, rax
je 0x4fb34e
movups xmmword [rsp + 0x88], xmm15
mov rax, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
call fcn.0040abe0
lea rdx, [0x0070c500]
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x90], rax
lea rax, [0x00786b42]
mov ebx, 0x2e
lea rcx, [rsp + 0x88]
mov edi, 1
mov rsi, rdi
call fcn.004ced20
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
movzx edx, cl
lea rsi, [0x009bba60]
lea rbx, [rsi + rdx*8]
lea rax, [0x0070ce00]
xor ecx, ecx
xor edi, edi
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
test rax, rax
jmp 0x4fb589
cmp edx, 0xe0ff5cb4
jne 0x4fb586
lea rdx, [0x0070f0c0]
cmp rax, rdx
jne 0x4fb581
mov rsi, qword [rbx + 8]
mov rax, qword [rbx]
cmp rsi, 1
je 0x4fb42b
cmp rsi, 4
jne 0x4fb3e0
cmp dword [rax], 0x45555254
je 0x4fb4ce
cmp dword [rax], 0x65757254
je 0x4fb4ce
cmp dword [rax], 0x65757274
je 0x4fb4ce
jmp 0x4fb4e3
cmp rsi, 5
jne 0x4fb4e3
cmp dword [rax], 0x534c4146
jne 0x4fb3fc
cmp byte [rax + 4], 0x45
je 0x4fb4b5
cmp dword [rax], 0x736c6146
jne 0x4fb40e
cmp byte [rax + 4], 0x65
je 0x4fb4b5
cmp dword [rax], 0x736c6166
jne 0x4fb4e3
cmp byte [rax + 4], 0x65
nop
je 0x4fb4b5
jmp 0x4fb4e3
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x70], rax
mov rbx, rsi
lea rcx, [0x007715bc]
mov edi, 1
call fcn.00402660
test rax, rax
jg 0x4fb48c
mov rax, qword [rsp + 0x70]
cmp byte [rax], 0x30
jne 0x4fb466
lea rdx, [0x0070f0c0]
mov rsi, qword [rsp + 0x30]
jmp 0x4fb4b5
cmp byte [rax], 0x31
jne 0x4fb479
lea rdx, [0x0070f0c0]
mov rsi, qword [rsp + 0x30]
jmp 0x4fb4ce
cmp byte [rax], 0x46
jne 0x4fb4d7
lea rdx, [0x0070f0c0]
mov rsi, qword [rsp + 0x30]
jmp 0x4fb4b5
mov rax, qword [rsp + 0x70]
cmp byte [rax], 0x54
jne 0x4fb4a4
lea rdx, [0x0070f0c0]
mov rsi, qword [rsp + 0x30]
jmp 0x4fb4ce
cmp byte [rax], 0x66
jne 0x4fb4bb
lea rdx, [0x0070f0c0]
mov rsi, qword [rsp + 0x30]
xor ecx, ecx
xor ebx, ebx
jmp 0x4fb4ec
cmp byte [rax], 0x74
nop
jne 0x4fb4d7
lea rdx, [0x0070f0c0]
mov rsi, qword [rsp + 0x30]
xor ecx, ecx
mov ebx, 1
jmp 0x4fb4ec
lea rdx, [0x0070f0c0]
mov rsi, qword [rsp + 0x30]
lea rcx, [0x00815860]
xor ebx, ebx
test rcx, rcx
je 0x4fb557
movups xmmword [rsp + 0x88], xmm15
mov rbx, rsi
nop dword [rax]
call fcn.0040ab40
lea rcx, [0x0070f0c0]
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x90], rax
lea rax, [0x00786b42]
mov ebx, 0x2e
lea rcx, [rsp + 0x88]
mov edi, 1
mov rsi, rdi
call fcn.004ced20
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
movzx edx, bl
lea rsi, [0x009bba60]
lea rbx, [rsi + rdx*8]
lea rax, [0x0070ce00]
xor ecx, ecx
xor edi, edi
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
nop
ret
test rax, rax
jmp 0x4fb589
test rax, rax
nop
je 0x4fb5fc
nop
cmp byte [0x00a03fa0], 0
je 0x4fb5bb
mov qword [0x00a03fa8], rax
cmp dword [0x00a5a130], 0
jne 0x4fb5af
mov qword [0x00a03fb0], rbx
jmp 0x4fb5bb
lea rdi, [0x00a03fb0]
call fcn.00462de0
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], rbx
mov rdx, qword [rsp + 0x78]
test rdx, rdx
je 0x4fb5f2
movzx edx, byte [rdx + 0x17]
mov r8d, edx
and edx, 0x1f
mov r9, rdx
bts rdx, 7
test r8b, 0x20
cmove r9, rdx
nop
mov rcx, rbx
jmp 0x4fb604
mov rcx, rbx
xor r9d, r9d
xor ebx, ebx
jmp 0x4fb604
mov rcx, rbx
xor ebx, ebx
xor r9d, r9d
nop
and r9d, 0x1f
lea rdx, [r9 - 2]
nop
cmp rdx, 4
ja 0x4fb6ec
cmp r9, 3
ja 0x4fb631
nop
cmp r9, 2
jne 0x4fb62b
mov rdx, qword [rbx]
jmp 0x4fb64e
movsx rdx, byte [rbx]
jmp 0x4fb64e
cmp r9, 4
jne 0x4fb640
movsx rdx, word [rbx]
jmp 0x4fb64e
cmp r9, 5
jne 0x4fb64b
movsxd rdx, dword [rbx]
jmp 0x4fb64e
mov rdx, qword [rbx]
cmp rdx, 1
je 0x4fb65d
test rdx, rdx
jne 0x4fb689
cmp rdx, 1
sete dl
movzx edx, dl
lea rsi, [0x009bba60]
lea rbx, [rsi + rdx*8]
lea rax, [0x0070ce00]
xor ecx, ecx
xor edi, edi
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
movups xmmword [rsp + 0x88], xmm15
mov rax, rdx
call fcn.0040aac0
lea rcx, [0x0070e900]
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x90], rax
lea rax, [0x00786b14]
mov ebx, 0x2e
lea rcx, [rsp + 0x88]
mov edi, 1
mov rsi, rdi
call fcn.004ced20
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
lea rdx, [r9 - 7]
cmp rdx, 4
ja 0x4fb7cd
nop word [rax + rax]
cmp r9, 9
ja 0x4fb722
cmp r9, 7
jne 0x4fb711
mov rdx, qword [rbx]
jmp 0x4fb72f
cmp r9, 8
jne 0x4fb71c
movzx edx, byte [rbx]
jmp 0x4fb72f
movzx edx, word [rbx]
nop
jmp 0x4fb72f
cmp r9, 0xa
jne 0x4fb72c
mov edx, dword [rbx]
jmp 0x4fb72f
mov rdx, qword [rbx]
cmp rdx, 1
je 0x4fb73e
test rdx, rdx
jne 0x4fb76a
cmp rdx, 1
sete dl
movzx edx, dl
lea rsi, [0x009bba60]
lea rbx, [rsi + rdx*8]
lea rax, [0x0070ce00]
xor ecx, ecx
xor edi, edi
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
movups xmmword [rsp + 0x88], xmm15
mov rax, rdx
call fcn.0040aac0
lea rcx, [0x0070f240]
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x90], rax
lea rax, [0x00786b14]
mov ebx, 0x2e
lea rcx, [rsp + 0x88]
mov edi, 1
mov rsi, rdi
call fcn.004ced20
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
movups xmmword [rsp + 0x98], xmm15
movups xmmword [rsp + 0xa8], xmm15
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], rcx
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xb0], rcx
lea rax, [0x00788289]
mov ebx, 0x33
lea rcx, [rsp + 0x98]
mov edi, 2
mov rsi, rdi
nop dword [rax + rax]
call fcn.004ced20
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00460a60
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.004fb140