Function at 0x626ce0
Capabilities:
Encode data using base64
Gather firefox profile information
Reference sql statements

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x627266
sub rsp, 0xb8
mov qword [rsp + 0xb0], rbp
lea rbp, [rsp + 0xb0]
mov qword [rsp + 0xe8], r8
mov qword [rsp + 0xd8], rdi
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0xc0], rax
test rbx, rbx
jne 0x626d3d
mov rdx, rdi
xor esi, esi
xor ebx, ebx
xor r11d, r11d
xor r12d, r12d
jmp 0x626eb8
nop
nop
cmp rbx, 0x14
jae 0x627250
mov rdx, qword [0x009f5458]
mov rsi, qword [0x009f5450]
nop dword [rax + rax]
cmp rbx, rdx
jae 0x627245
mov qword [rsp + 0xe8], r8
mov qword [rsp + 0xf0], r9
mov qword [rsp + 0xf8], r10
movzx edx, byte [rsi + rbx]
cmp rdi, rdx
je 0x626def
nop
lea rax, [0x0072c820]
call fcn.0040d400
mov qword [rax + 8], 0x28
lea rcx, [0x007848d8]
mov qword [rax], rcx
mov rcx, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0xd8]
mov r8, qword [rsp + 0xe8]
mov r9, qword [rsp + 0xf0]
mov r10, qword [rsp + 0xf8]
xor edi, edi
xor esi, esi
lea rbx, [0x00815340]
mov r11, rax
xor r12d, r12d
mov rax, qword [rsp + 0xc0]
jmp 0x626eb8
mov qword [rsp + 0x58], rdx
mov rdx, qword [0x009ff070]
lea rax, [0x0071e260]
mov rcx, rbx
mov rbx, rdx
call fcn.00411340
mov rdx, qword [rax]
mov rsi, qword [rax + 8]
test bl, bl
je 0x626e57
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0xd0]
mov r8, qword [rsp + 0xe8]
mov r9, qword [rsp + 0xf0]
mov r10, qword [rsp + 0xf8]
mov rdi, qword [rsp + 0x58]
xor ebx, ebx
xor r11d, r11d
mov r12, rdx
mov rdx, qword [rsp + 0xd8]
jmp 0x626eb8
nop
lea rax, [0x0072c820]
nop
call fcn.0040d400
mov qword [rax + 8], 0x25
lea rcx, [0x00783331]
mov qword [rax], rcx
mov rcx, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0xd8]
mov r8, qword [rsp + 0xe8]
mov r9, qword [rsp + 0xf0]
mov r10, qword [rsp + 0xf8]
xor edi, edi
xor esi, esi
lea rbx, [0x00815340]
mov r11, rax
xor r12d, r12d
mov rax, qword [rsp + 0xc0]
nop dword [rax + rax]
test rbx, rbx
jne 0x6270d1
mov r11, qword [rax]
lea r13, [rdi + rsi]
nop
mov r15, qword [r11 + 0x10]
mov r11, qword [r11 + 8]
mov rbx, r12
lea r12, [r15 - 1]
test r12, r12
jl 0x626f07
mov r11, qword [r11 + r15*8 - 8]
bsr r11, r11
mov r15, 0xffffffffffffffff
cmove r11, r15
shl r12, 6
lea r11, [r11 + r12]
lea r11, [r11 + 1]
jmp 0x626f0a
xor r11d, r11d
lea r12, [rdi + rsi]
lea r12, [r12 + 0xb]
lea r15, [r11 + 7]
sar r15, 0x3f
shr r15, 0x3d
lea r11, [r15 + r11]
lea r11, [r11 + 7]
sar r11, 3
cmp r12, r11
jg 0x6270b3
cmp r9, r11
jne 0x627095
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x30], r11
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x68], rbx
mov byte [rsp + 0x90], 0
mov qword [rsp + 0x98], 0
movups xmmword [rsp + 0xa0], xmm15
xor eax, eax
xor ebx, ebx
mov rcx, rbx
mov rdi, r8
mov rsi, r9
mov r8, r10
call fcn.00529040
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rcx
mov byte [rsp + 0x90], 0
mov byte [rsp + 0x70], 0
mov qword [rsp + 0x78], 0
movups xmmword [rsp + 0x80], xmm15
lea rax, [rsp + 0x70]
mov rbx, qword [rsp + 0xc0]
lea rcx, [rsp + 0x90]
call fcn.00627e60
mov qword [rsp + 0x60], rax
mov rbx, qword [rsp + 0x30]
mov rcx, rbx
lea rax, [0x0070f280]
call fcn.00449300
mov rbx, rax
mov rcx, qword [rsp + 0x30]
mov rdi, rcx
mov rax, qword [rsp + 0x60]
call fcn.0051f480
test rbx, rbx
jbe 0x627236
movzx esi, byte [rax]
cmp rbx, 1
jbe 0x627229
movzx edi, byte [rax + 1]
dec esi
shr esi, 0x1f
xor edi, 1
movzx edi, dil
dec edi
shr edi, 0x1f
and rdi, rsi
mov rsi, qword [rsp + 0x30]
mov r8, qword [rsp + 0x50]
mov r9, rsi
sub rsi, r8
cmp rcx, r9
jb 0x62721e
cmp r9, rsi
jb 0x627213
mov rdx, r9
sub r9, rsi
mov r8, rsi
sub rsi, rcx
sar rsi, 0x3f
and rsi, r8
add rsi, rax
mov r10, qword [rsp + 0xd8]
cmp r10, r9
je 0x627085
xor esi, esi
nop dword [rax]
jmp 0x627117
mov r10, qword [rsp + 0xd0]
xor r11d, r11d
xor r12d, r12d
jmp 0x627108
mov rax, qword [0x00a02c00]
mov rbx, qword [0x00a02c08]
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
mov rax, qword [0x00a02c00]
mov rbx, qword [0x00a02c08]
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
mov rax, rbx
mov rbx, r11
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
lea r13, [r11 + 1]
mov qword [rsp + 0x48], r13
movzx r15d, byte [r11 + rsi]
movzx r13d, byte [r10 + r11]
xor r13d, r15d
or r12d, r13d
mov r13, qword [rsp + 0x48]
mov r11, r13
cmp r11, r9
jl 0x6270e7
nop
movzx esi, r12b
dec esi
shr esi, 0x1f
and rsi, rdi
mov rdi, qword [rsp + 0x40]
sub rdx, rdi
cmp rdx, r8
ja 0x627208
sub r8, rdx
mov rdi, rdx
sub rdx, rcx
sar rdx, 0x3f
and rdx, rdi
add rdx, rax
mov r9, qword [rsp + 0x38]
cmp r9, r8
je 0x62714c
xor edx, edx
jmp 0x62717e
mov r9, qword [rsp + 0x68]
xor ecx, ecx
xor r10d, r10d
jmp 0x62716f
lea r11, [rcx + 1]
movzx r12d, byte [rcx + rdx]
movzx r13d, byte [r9 + rcx]
xor r13d, r12d
or r10d, r13d
mov rcx, r11
cmp rcx, r8
jl 0x627158
nop
movzx edx, r10b
dec edx
shr edx, 0x1f
and rdx, rsi
lea rsi, [rdi - 1]
cmp rbx, rsi
jbe 0x6271fd
movzx ecx, byte [rdi + rax - 1]
dec ecx
shr ecx, 0x1f
and rcx, rdx
mov edx, 2
jmp 0x6271c0
lea rdi, [rdx + 1]
movzx r8d, byte [rdx + rax]
xor r8d, 0xffffffff
movzx r8d, r8b
dec r8d
shr r8d, 0x1f
and rcx, r8
mov rdx, rdi
nop dword [rax]
cmp rdx, rsi
jl 0x62719e
cmp rcx, 1
je 0x6271e9
mov rax, qword [0x00a02c00]
mov rbx, qword [0x00a02c08]
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
mov rax, rsi
mov rcx, rbx
call fcn.00463140
mov rax, rdx
mov rcx, r8
call fcn.00463200
mov rax, rsi
mov rcx, r9
call fcn.00463200
mov rdx, rcx
mov rcx, r9
call fcn.004631c0
mov eax, 1
mov rcx, rbx
call fcn.00463140
xor eax, eax
mov rcx, rbx
nop dword [rax + rax]
call fcn.00463140
mov rax, rbx
mov rcx, rdx
call fcn.00463160
lea rax, [0x0070f0c0]
lea rbx, [0x00814350]
nop
call fcn.004356e0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x40], r10
call fcn.00460a60
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
nop dword [rax + rax]
jmp fcn.00626ce0