Function at 0x4fcc00
Capabilities:
Gather firefox profile information
Reference sql statements

Disassembly:
lea r12, [rsp - 0xc0]
cmp r12, qword [r14 + 0x10]
jbe 0x4fd3b8
sub rsp, 0x140
mov qword [rsp + 0x138], rbp
lea rbp, [rsp + 0x138]
mov qword [rsp + 0x158], rcx
mov qword [rsp + 0x168], rsi
mov qword [rsp + 0x160], rdi
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x148], rax
lea rax, [0x0073f880]
mov rbx, rsi
mov rcx, rbx
nop
call fcn.00449300
mov qword [rsp + 0xd8], rax
mov rdx, qword [rsp + 0x158]
test rdx, rdx
jne 0x4fcc89
xor ecx, ecx
xor edx, edx
xor ebx, ebx
mov rsi, 0xffffffffffffffff
jmp 0x4fccb7
mov rcx, qword [rdx + 0x10]
mov qword [rsp + 0x38], rcx
mov rax, qword [rdx + 0x18]
mov qword [rsp + 0x98], rax
mov rdx, qword [rcx + 0x28]
call rdx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x98]
mov rbx, rax
mov rsi, rbx
mov qword [rsp + 0x98], rdx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x30], rsi
lea rax, [0x007267e0]
mov rbx, rcx
mov rcx, rdx
nop dword [rax + rax]
call fcn.0040ade0
test rax, rax
jne 0x4fcd06
lea rax, [0x007267e0]
mov rbx, qword [rsp + 0x148]
mov rcx, qword [rsp + 0x150]
call fcn.0040ade0
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x98]
lea rax, [0x007264e0]
mov rbx, qword [rsp + 0x38]
call fcn.0040ade0
test rax, rax
mov esi, 0
cmovne rsi, rbx
mov edi, 0
cmovne rdi, rax
mov rcx, qword [rsp + 0x168]
test rcx, rcx
je 0x4fcd99
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xc8], rsi
mov qword [rsp + 0x80], rdi
test rax, rax
setne r8b
mov byte [rsp + 0x2e], r8b
mov r9, qword [rsp + 0x40]
mov r10, qword [rsp + 0xd8]
mov r11, qword [rsp + 0xa0]
mov r12, qword [rsp + 0x160]
mov rdx, rcx
xor ebx, ebx
xor r13d, r13d
jmp 0x4fceb0
mov rax, rcx
mov rdx, qword [rsp + 0x30]
cmp rdx, 0xffffffffffffffff
je 0x4fce49
cmp rcx, rdx
je 0x4fce49
mov qword [rsp + 0x48], rcx
movups xmmword [rsp + 0x118], xmm15
movups xmmword [rsp + 0x128], xmm15
mov rax, rdx
call fcn.0040aac0
lea rcx, [0x0070e840]
mov qword [rsp + 0x118], rcx
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x48]
call fcn.0040aac0
lea rcx, [0x0070e840]
mov qword [rsp + 0x128], rcx
mov qword [rsp + 0x130], rax
lea rax, [0x007820b5]
mov ebx, 0x22
lea rcx, [rsp + 0x118]
mov edi, 2
mov rsi, rdi
call fcn.004ced20
xor ecx, ecx
mov rdi, rax
mov rsi, rbx
xor eax, eax
mov rbx, rcx
mov rbp, qword [rsp + 0x138]
add rsp, 0x140
ret
mov rbx, rcx
mov rcx, rax
xor edi, edi
xor esi, esi
mov rax, qword [rsp + 0xd8]
mov rbp, qword [rsp + 0x138]
add rsp, 0x140
ret
mov r15, qword [rsp + 0xd0]
lea r12, [r15 + 0x10]
mov r9, qword [rsp + 0x40]
mov r10, qword [rsp + 0xd8]
mov r15, qword [rsp + 0x78]
mov r11, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0x80]
mov rbx, r8
mov r13, rax
mov rax, r15
movzx r8d, byte [rsp + 0x2e]
mov qword [rsp + 0xd0], r12
mov r15, qword [r12 + 8]
mov r12, qword [r12]
cmp rcx, r13
jbe 0x4fd3af
mov qword [rsp + 0x48], rcx
lea rcx, [r13 + r13*4]
lea r8, [r10 + rcx*8]
mov qword [rsp + 0xa8], r8
lea r8, [0x0073f7c0]
cmp r12, r8
jne 0x4fcf33
mov r8, qword [r15]
mov rsi, qword [r15 + 8]
mov r11, qword [r15 + 0x10]
mov r9, qword [r15 + 0x18]
mov qword [rsp + 0xb8], r8
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], r11
mov qword [rsp + 0xb0], r9
mov rsi, qword [rsp + 0xc8]
lea r8, [0x0073f7c0]
mov r9, qword [rsp + 0x40]
mov r11, qword [rsp + 0xa0]
jmp 0x4fcf6c
mov r8d, 0
mov qword [rsp + 0xb8], r8
mov r8d, 0
mov qword [rsp + 0x58], r8
mov r8d, 0
mov qword [rsp + 0x50], r8
mov r8d, 0
mov qword [rsp + 0xb0], r8
lea r8, [0x0073f7c0]
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x60], r13
jne 0x4fd03e
mov qword [rsp + 0x88], rcx
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0x58]
call fcn.004fc540
nop dword [rax]
test rax, rax
jne 0x4fd1ce
mov rcx, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0xd8]
mov qword [rsi + rcx*8 + 8], rbx
lea rdi, [rsi + rcx*8]
cmp dword [0x00a5a130], 0
jne 0x4fcfde
mov rbx, qword [rsp + 0xb8]
mov qword [rsi + rcx*8], rbx
jmp 0x4fcfeb
mov rbx, qword [rsp + 0xb8]
call fcn.00462de0
mov rax, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x168]
mov rbx, qword [rsp + 0x90]
mov rsi, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0x80]
lea r8, [0x0073f7c0]
mov r9, qword [rsp + 0x40]
mov r10, qword [rsp + 0xd8]
mov r11, qword [rsp + 0xa0]
mov r13, qword [rsp + 0x60]
mov r15, qword [rsp + 0xb0]
mov r12, qword [rsp + 0x50]
inc r13
mov qword [r10 + rcx*8 + 0x10], r13
mov qword [r10 + rcx*8 + 0x18], r12
lea r12, [r10 + rcx*8]
lea r12, [r12 + 0x20]
cmp dword [0x00a5a130], 0
jne 0x4fd064
mov qword [r10 + rcx*8 + 0x20], r15
jmp 0x4fd07c
mov rcx, rdi
mov rdi, r12
mov r8, r15
call fcn.00462e20
mov rdi, rcx
lea r8, [0x0073f7c0]
nop dword [rax]
test r9, r9
je 0x4fd0e5
test byte [r9], al
mov qword [rsp + 0xe0], 0
movups xmmword [rsp + 0xe8], xmm15
lea rcx, [0x00507ce0]
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xe8], r9
mov qword [rsp + 0xf0], r11
lea rcx, [0x00507d40]
mov r12, qword [rsp + 0x70]
lea r15, [rsp + 0xe0]
movzx r12d, byte [rsp + 0x2e]
mov byte [rsp + 0x2f], r12b
mov r12, qword [rsp + 0x70]
jmp 0x4fd16e
test rax, rax
je 0x4fd14e
mov qword [rsp + 0xf8], 0
movups xmmword [rsp + 0x100], xmm15
mov qword [rsp + 0x110], 0
lea rcx, [0x00507d40]
mov qword [rsp + 0xf8], rcx
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x108], rsi
mov r12, qword [rsp + 0x70]
mov qword [rsp + 0x110], r12
lea r15, [rsp + 0xf8]
xor ecx, ecx
mov byte [rsp + 0x2f], cl
lea rcx, [0x00507d40]
jmp 0x4fd16e
lea rcx, [0x00507d40]
mov r12, qword [rsp + 0x70]
lea r15, [0x007a7960]
xor r12d, r12d
mov byte [rsp + 0x2f], r12b
mov r12, qword [rsp + 0x70]
mov qword [rsp + 0x88], r13
jmp 0x4fd1f3
mov r8, qword [rsp + 0x48]
lea rcx, [r8 - 1]
mov rdx, qword [rsp + 0x168]
cmp rdx, rcx
jb 0x4fd3aa
mov rax, qword [rsp + 0x60]
jmp 0x4fd1ae
mov rdx, qword [rsp + 0x168]
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x90]
inc r8
nop dword [rax]
cmp rdx, r8
jg 0x4fce6b
jmp 0x4fd3a2
xor ecx, ecx
mov rdi, rax
mov rsi, rbx
xor eax, eax
mov rbx, rcx
mov rbp, qword [rsp + 0x138]
add rsp, 0x140
ret
mov r15, rax
mov byte [rsp + 0x2f], dil
mov rcx, qword [r15]
mov rax, qword [rsp + 0xa8]
mov rdx, r15
call rcx
test rax, rax
je 0x4fd199
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0x68], rax
mov rcx, qword [0x00a02d68]
nop dword [rax]
cmp qword [0x00a02d60], rax
jne 0x4fd243
call fcn.00403ce0
test al, al
jne 0x4fd178
mov rax, qword [rsp + 0x68]
mov rbx, qword [rsp + 0xc0]
mov rcx, qword [0x00a02d78]
cmp qword [0x00a02d70], rax
jne 0x4fd2fa
call fcn.00403ce0
nop dword [rax]
test al, al
je 0x4fd2fa
movzx ecx, byte [rsp + 0x2f]
test cl, cl
jne 0x4fd29e
lea rcx, [0x00507d40]
mov rdx, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0xc8]
lea rax, [0x007a7960]
movzx edi, byte [rsp + 0x2f]
jmp 0x4fd1eb
lea rax, [0x0072ec20]
call fcn.0040d400
lea rcx, [0x00507d40]
mov qword [rax], rcx
mov rdx, qword [rsp + 0x80]
mov qword [rax + 8], rdx
mov rbx, qword [rsp + 0x70]
mov qword [rax + 0x18], rbx
cmp dword [0x00a5a130], 0
jne 0x4fd2e2
mov rsi, qword [rsp + 0xc8]
mov qword [rax + 0x10], rsi
nop
jmp 0x4fd2f3
lea rdi, [rax + 0x10]
mov rsi, qword [rsp + 0xc8]
call fcn.00462e00
xor edi, edi
jmp 0x4fd1eb
mov rax, qword [rsp + 0xa8]
call fcn.004fc460
movups xmmword [rsp + 0x118], xmm15
movups xmmword [rsp + 0x128], xmm15
call fcn.0040ab40
lea rcx, [0x0070f0c0]
mov qword [rsp + 0x118], rcx
mov qword [rsp + 0x120], rax
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x4fd345
mov rax, qword [rcx + 8]
jmp 0x4fd348
mov rax, rcx
mov qword [rsp + 0x128], rax
mov rdx, qword [rsp + 0xc0]
mov qword [rsp + 0x130], rdx
lea rax, [0x00782f0a]
mov ebx, 0x24
lea rcx, [rsp + 0x118]
mov edi, 2
mov rsi, rdi
nop dword [rax]
call fcn.004ced20
xor ecx, ecx
mov rdi, rax
mov rsi, rbx
xor eax, eax
mov rbx, rcx
mov rbp, qword [rsp + 0x138]
add rsp, 0x140
ret
mov rax, rdx
jmp 0x4fcd9c
call fcn.004631c0
mov rax, r13
call fcn.00463140
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
call fcn.00460a60
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
jmp fcn.004fcc00