Function at 0x1401d3080
Capabilities:
Gather firefox profile information

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov byte [rax + 0x18], r8b
mov qword [rax + 0x10], rdx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x100
mov qword [rax - 0x40], 0xfffffffffffffffe
movzx ebx, r8b
mov rdi, rdx
mov rsi, rcx
mov ecx, 0x30
call fcn.14029806c
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1401d30e5
mov r8d, 1
mov rdx, rdi
mov rcx, rax
call fcn.1401f1b80
mov r14, rax
mov qword [rsp + 0x78], rax
xor r15d, r15d
jmp 0x1401d30f0
xor r15d, r15d
mov r14d, r15d
mov qword [rsp + 0x78], r15
lea rax, vtable.Core::SharedPtr_class_Core::Data::SqliteConnection_.0
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], r14
mov r12, r15
mov qword [rsp + 0xa0], r15
test r14, r14
je 0x1401d3149
mov ecx, 4
call fcn.14029806c
mov r12, rax
test rax, rax
je 0x1401d3136
mov dword [rax], r15d
mov qword [rsp + 0xa0], rax
jmp 0x1401d3141
mov r12, r15
mov qword [rsp + 0xa0], r15
mov dword [r12], 1
mov dword [r14 + 0x24], 0x3e8
mov rax, qword [r14 + 0x28]
mov rcx, qword [rax]
test rcx, rcx
je 0x1401d3167
mov edx, 0x3e8
call fcn.140278a50
lea rdx, [r14 + 0x10]
mov r8d, dword [r14 + 0x24]
mov rcx, qword [r14 + 0x28]
call fcn.1401f19f0
mov byte [r14 + 0x20], al
test al, al
je 0x1401d38a5
lea rax, str.SELECT_DISTINCT_host_key_FROM_cookies_ORDER_BY_host_key_
lea rdi, str.SELECT_DISTINCT_host_FROM_moz_cookies_ORDER_BY_host
test bl, bl
cmovne rdi, rax
test rdi, rdi
jne 0x1401d31a7
mov ebx, r15d
mov qword [rsp + 0x60], rdi
jmp 0x1401d31c7
or rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp word [rdi + rbx*2], 0
jne 0x1401d31b0
mov qword [rsp + 0x60], 0
test ebx, ebx
jne 0x1401d31d5
lea rdi, [0x140323de0]
mov qword [rsp + 0x58], rdi
jmp 0x1401d3201
mov edx, ebx
lea rcx, [rsp + 0x58]
call fcn.1401e9030
movsxd r9, ebx
mov eax, dword [rsp + 0x60]
inc eax
movsxd rdx, eax
mov r8, rdi
mov rcx, qword [rsp + 0x58]
call fcn.14029b4d8
lea rdi, [0x140323de0]
mov edx, ebx
lea rcx, [rsp + 0x58]
call fcn.1401ea290
nop
mov ecx, 0x20
call fcn.14029806c
mov r13, rax
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1401d3286
lea rax, vtable.Core::Data::SqliteCommand.0
mov qword [r13], rax
mov qword [r13 + 0x10], 0
mov edx, dword [rsp + 0x64]
test edx, edx
jne 0x1401d324e
mov qword [r13 + 8], rdi
jmp 0x1401d3273
lea rcx, [r13 + 8]
call fcn.1401e9030
movsxd r9, dword [rsp + 0x64]
mov eax, dword [r13 + 0x10]
inc eax
movsxd rdx, eax
mov r8, qword [rsp + 0x58]
mov rcx, qword [r13 + 8]
call fcn.14029b4d8
mov edx, dword [rsp + 0x64]
lea rcx, [r13 + 8]
call fcn.1401ea290
mov qword [r13 + 0x18], r14
jmp 0x1401d3291
mov r13, r15
mov qword [rsp + 0x88], r15
lea rax, vtable.Core::SharedPtr_class_Core::Data::SqliteCommand_.0
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], r13
mov qword [rsp + 0x70], r15
mov qword [rsp + 0xd0], r15
test r13, r13
je 0x1401d32f5
mov ecx, 4
call fcn.14029806c
mov r14, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x1401d32de
mov dword [rax], r15d
mov qword [rsp + 0xd0], rax
jmp 0x1401d32ee
mov r14, r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0xd0], r15
mov dword [r14], 1
mov ecx, 0x18
call fcn.14029806c
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1401d3321
mov rdx, r13
mov rcx, rax
call fcn.1401f91d0
mov r14, rax
mov qword [rsp + 0x80], rax
jmp 0x1401d332c
mov r14, r15
mov qword [rsp + 0x80], r15
lea rax, vtable.Core::SharedPtr_class_Core::Data::SqliteDataReader_.0
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xb0], r14
mov r13, r15
mov qword [rsp + 0xb8], r15
test r14, r14
je 0x1401d3385
mov ecx, 4
call fcn.14029806c
mov r13, rax
test rax, rax
je 0x1401d3372
mov dword [rax], r15d
mov qword [rsp + 0xb8], rax
jmp 0x1401d337d
mov r13, r15
mov qword [rsp + 0xb8], r15
mov dword [r13], 1
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r15
call fcn.14000a210
mov qword [rsp + 0x30], rax
nop dword [rax]
mov rcx, qword [r14 + 0x10]
mov rcx, qword [rcx]
call fcn.140226bd0
cmp eax, 0x64
jne 0x1401d350d
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, r14
call fcn.1401f9550
nop
mov r8d, 1
lea rdx, [0x140322fd0]
lea rcx, [rsp + 0x40]
call fcn.1401eb700
test al, al
je 0x1401d3448
mov r8d, 1
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x40]
call fcn.1401eaef0
mov rbx, rax
mov edx, dword [rax + 0xc]
lea rcx, [rsp + 0x40]
call fcn.1401e9030
movsxd r9, dword [rbx + 0xc]
mov ecx, dword [rsp + 0x48]
inc ecx
movsxd rdx, ecx
mov r8, qword [rbx]
mov rcx, qword [rsp + 0x40]
call fcn.14029b4d8
mov edx, dword [rbx + 0xc]
lea rcx, [rsp + 0x40]
call fcn.1401ea290
nop
cmp dword [rsp + 0xe0], 0
jle 0x1401d3448
mov rcx, qword [rsp + 0xd8]
call fcn.140298600
lea rdx, [rsp + 0x40]
mov rcx, qword [rsi + 8]
call fcn.1400fc670
test al, al
je 0x1401d34f3
mov rax, qword [rsp + 0x30]
mov rbx, qword [rax + 8]
mov rdi, rax
cmp byte [rbx + 0x19], 0
jne 0x1401d34c1
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rbx + 0x20]
call fcn.14029848c
test eax, eax
jns 0x1401d3488
mov rbx, qword [rbx + 0x10]
jmp 0x1401d348e
mov rdi, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x1401d3470
mov rax, qword [rsp + 0x30]
cmp rdi, rax
je 0x1401d34c1
mov rdx, qword [rdi + 0x20]
mov rcx, qword [rsp + 0x40]
call fcn.14029848c
test eax, eax
mov rax, qword [rsp + 0x30]
js 0x1401d34c1
mov qword [rsp + 0x68], rdi
lea rcx, [rsp + 0x68]
jmp 0x1401d34cb
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x50]
cmp qword [rcx], rax
jne 0x1401d34f3
movzx eax, byte [0x1403fdd77]
mov byte [rsp + 0x20], al
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x30]
call fcn.1400e9d70
nop
cmp dword [rsp + 0x48], 0
jle 0x1401d33a0
mov rcx, qword [rsp + 0x40]
call fcn.140298600
jmp 0x1401d33a0
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rdi]
lea rsi, vtable.HitmanPro35::Cookie.0
nop dword [rax]
cmp rbx, rdi
je 0x1401d36f0
lea r9, [rbx + 0x20]
lea r8, [0x140323be0]
mov rdx, qword [rsp + 0x148]
lea rcx, [rsp + 0x40]
call fcn.1401e80f0
nop
mov ecx, 0x68
call fcn.14029806c
mov rdi, rax
cmp byte [rsp + 0x150], 0
je 0x1401d35d6
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1401d35d1
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.1400d5b80
nop
mov qword [rdi], rsi
lea rax, [0x140323de0]
mov qword [rdi + 0x58], rax
mov qword [rdi + 0x60], 0
mov edx, dword [rbx + 0x2c]
lea rcx, [rdi + 0x58]
call fcn.1401e9030
movsxd r9, dword [rbx + 0x2c]
mov eax, dword [rdi + 0x60]
inc eax
movsxd rdx, eax
mov r8, qword [rbx + 0x20]
mov rcx, qword [rdi + 0x58]
call fcn.14029b4d8
mov edx, dword [rbx + 0x2c]
lea rcx, [rdi + 0x58]
call fcn.1401ea290
nop
lea rax, vtable.HitmanPro35::CookieChrome.0
mov qword [rdi], rax
lea rsi, vtable.HitmanPro35::Cookie.0
jmp 0x1401d35d4
mov rdi, r15
jmp 0x1401d364c
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1401d3649
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.1400d5b80
nop
mov qword [rdi], rsi
lea rax, [0x140323de0]
mov qword [rdi + 0x58], rax
mov qword [rdi + 0x60], 0
mov edx, dword [rbx + 0x2c]
lea rcx, [rdi + 0x58]
call fcn.1401e9030
movsxd r9, dword [rbx + 0x2c]
mov eax, dword [rdi + 0x60]
inc eax
movsxd rdx, eax
mov r8, qword [rbx + 0x20]
mov rcx, qword [rdi + 0x58]
call fcn.14029b4d8
mov edx, dword [rbx + 0x2c]
lea rcx, [rdi + 0x58]
call fcn.1401ea290
nop
lea rax, vtable.HitmanPro35::CookieFirefox.0
mov qword [rdi], rax
lea rsi, vtable.HitmanPro35::Cookie.0
jmp 0x1401d364c
mov rdi, r15
mov qword [rsp + 0x68], rdi
movzx eax, byte [0x1403fdd7f]
mov byte [rsp + 0x20], al
lea r9, [rsp + 0x68]
lea rdx, [rsp + 0xe8]
mov rcx, qword [rsp + 0x158]
call fcn.1401d3dd0
nop
cmp dword [rsp + 0x48], 0
jle 0x1401d3688
mov rcx, qword [rsp + 0x40]
call fcn.140298600
cmp byte [rbx + 0x19], 0
je 0x1401d3698
mov rdi, qword [rsp + 0x30]
jmp 0x1401d3520
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
jne 0x1401d36c6
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
jne 0x1401d36bc
nop
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x1401d36b0
mov rdi, qword [rsp + 0x30]
jmp 0x1401d3520
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1401d36e3
cmp rbx, qword [rax + 0x10]
jne 0x1401d36e3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1401d36d0
mov rbx, rax
mov rdi, qword [rsp + 0x30]
jmp 0x1401d3520
mov rbx, qword [rdi]
cmp rbx, rbx
jne 0x1401d3762
mov rsi, qword [rdi + 8]
mov rbx, rsi
cmp byte [rsi + 0x19], 0
jne 0x1401d3746
nop word [rax + rax]
mov rdx, qword [rbx + 0x10]
lea rcx, [rsp + 0x30]
call fcn.14000a110
mov rbx, qword [rbx]
cmp dword [rsi + 0x28], 0
jle 0x1401d3730
mov rcx, qword [rsi + 0x20]
call fcn.140298600
mov rcx, rsi
call fcn.1402012c0
mov rsi, rbx
cmp byte [rbx + 0x19], 0
je 0x1401d3710
mov rdi, qword [rsp + 0x30]
mov qword [rdi + 8], rdi
mov rax, qword [rsp + 0x30]
mov qword [rax], rax
mov rax, qword [rsp + 0x30]
mov qword [rax + 0x10], rax
mov qword [rsp + 0x38], r15
jmp 0x1401d37d2
cmp rbx, rdi
je 0x1401d37d7
mov r8, rbx
cmp byte [rbx + 0x19], 0
jne 0x1401d37be
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
jne 0x1401d379e
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
jne 0x1401d37be
nop word [rax + rax]
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x1401d3790
jmp 0x1401d37be
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1401d37bb
cmp rbx, qword [rax + 0x10]
jne 0x1401d37bb
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1401d37a8
mov rbx, rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.140008cf0
cmp rbx, rdi
jne 0x1401d3767
mov rdi, qword [rsp + 0x30]
mov rcx, rdi
call fcn.1402012c0
nop
test r13, r13
je 0x1401d381d
mov eax, dword [r13]
test eax, eax
jle 0x1401d37f3
dec eax
mov dword [r13], eax
cmp dword [r13], 0
jne 0x1401d381d
mov r14, qword [rsp + 0x80]
test r14, r14
je 0x1401d3814
mov rax, qword [r14]
mov edx, 1
mov rcx, r14
call qword [rax]
mov rcx, r13
call fcn.1402012c0
nop
mov r14, qword [rsp + 0x70]
test r14, r14
je 0x1401d3859
mov eax, dword [r14]
test eax, eax
jle 0x1401d3833
dec eax
mov dword [r14], eax
cmp dword [r14], 0
jne 0x1401d3859
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x1401d3850
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rcx, r14
call fcn.1402012c0
nop
cmp dword [rsp + 0x60], 0
jle 0x1401d386b
mov rcx, qword [rsp + 0x58]
call fcn.140298600
nop
test r12, r12
je 0x1401d38a1
mov eax, dword [r12]
test eax, eax
jle 0x1401d387e
dec eax
mov dword [r12], eax
cmp dword [r12], 0
jne 0x1401d38a1
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1401d3899
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rcx, r12
call fcn.1402012c0
mov al, 1
jmp 0x1401d38d7
test r12, r12
je 0x1401d38d5
mov eax, dword [r12]
test eax, eax
jle 0x1401d38b8
dec eax
mov dword [r12], eax
cmp dword [r12], 0
jne 0x1401d38d5
mov rax, qword [r14]
mov edx, 1
mov rcx, r14
call qword [rax]
mov rcx, r12
call fcn.1402012c0
nop
xor al, al
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret