Function at 0x6e61e0
Capabilities:
Gather firefox profile information
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x6e658c
sub rsp, 0xc0
mov qword [rsp + 0xb8], rbp
lea rbp, [rsp + 0xb8]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xe0], rdi
cmp rsi, rbx
jg 0x6e625b
mov qword [rsp + 0xf8], r9
mov qword [rsp + 0xd0], rbx
mov qword [rsp + 0xe8], rsi
mov qword [rsp + 0xd8], rcx
mov qword [rsp + 0xe0], rdi
mov qword [rsp + 0xc8], rax
xor edx, edx
xor r8d, r8d
xor r10d, r10d
xor r11d, r11d
jmp 0x6e6303
movups xmmword [rsp + 0xa8], xmm15
mov rax, rsi
call fcn.0040c520
lea rcx, [0x008684e0]
mov qword [rsp + 0xa8], rcx
mov qword [rsp + 0xb0], rax
lea rax, [0x008e34a2]
mov ebx, 0x27
lea rcx, [rsp + 0xa8]
mov edi, 1
mov rsi, rdi
nop
call fcn.004f1c00
xor ecx, ecx
mov rdi, rax
mov rsi, rbx
xor eax, eax
mov rbx, rcx
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
mov r12, qword [rsp + 0x40]
inc r12
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0xd0]
mov rsi, qword [rsp + 0xe8]
mov r9, qword [rsp + 0xf8]
mov r10, rdi
mov r11, rdx
mov rdi, qword [rsp + 0xe0]
mov rdx, r12
cmp rsi, rdx
jle 0x6e640d
mov qword [rsp + 0x80], r11
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x50], r10
mov qword [rsp + 0x48], r8
mov rcx, qword [rax + rdx*8]
mov rbx, qword [rdi + rdx*8]
mov rsi, qword [rbx]
mov rax, rcx
mov rdx, rbx
call rsi
test rdi, rdi
jne 0x6e63f6
mov rsi, qword [rsp + 0x48]
lea r8, [rsi + 1]
mov rdi, qword [rsp + 0x50]
cmp rdi, r8
jb 0x6e635c
mov rdx, qword [rsp + 0x80]
jmp 0x6e63af
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0x98], rax
lea rax, [0x008d2ee0]
mov rbx, qword [rsp + 0x80]
mov rcx, rsi
mov rsi, r8
call fcn.0044d080
lea r8, [rbx + 1]
mov rbx, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x48]
mov rdx, rax
mov rdi, rcx
mov rax, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x78]
lea r9, [rsi + rsi*2]
mov qword [rdx + r9*8 + 0x10], rcx
lea r10, [rdx + r9*8]
lea r11, [rdx + r9*8]
lea r11, [r11 + 8]
cmp dword [0x00bc2240], 0
jne 0x6e63db
mov qword [rdx + r9*8], rax
mov qword [rdx + r9*8 + 8], rbx
jmp 0x6e62c2
mov rcx, rdi
mov rdi, r10
call fcn.00466ec0
mov rdi, r11
call fcn.00467000
mov rdi, rcx
jmp 0x6e62c2
xor eax, eax
xor ebx, ebx
mov rcx, rbx
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
test r9, r9
je 0x6e643d
mov r12, rsi
sub rsi, rcx
mov r13, r12
shl r12, 3
sar rsi, 0x3f
and r12, rsi
add r12, rax
mov qword [rsp + 0x90], r12
sub rbx, r13
mov qword [rsp + 0x70], rbx
xor eax, eax
jmp 0x6e6480
mov rax, r11
mov rbx, r8
mov rcx, r10
xor edi, edi
xor esi, esi
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
mov rax, qword [rsp + 0x68]
inc rax
mov rbx, qword [rsp + 0x70]
mov r9, qword [rsp + 0xf8]
mov r12, qword [rsp + 0x90]
mov r10, rdi
mov r11, rdx
nop dword [rax]
cmp rax, rbx
jge 0x6e643d
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x88], r11
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x58], r10
mov rcx, qword [r12 + rax*8]
mov rbx, qword [r9]
mov rdx, r9
mov rax, rcx
call rbx
test rdi, rdi
jne 0x6e6575
mov rsi, qword [rsp + 0x60]
lea r8, [rsi + 1]
mov rdi, qword [rsp + 0x58]
cmp rdi, r8
jb 0x6e64d1
mov rdx, qword [rsp + 0x88]
jmp 0x6e6529
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x78], rcx
lea rax, [0x008d2ee0]
mov rbx, qword [rsp + 0x88]
mov rcx, rsi
mov rsi, r8
nop dword [rax + rax]
call fcn.0044d080
lea r8, [rbx + 1]
mov rbx, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x60]
mov rdx, rax
mov rdi, rcx
mov rax, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x78]
lea r9, [rsi + rsi*2]
mov qword [rdx + r9*8 + 0x10], rcx
lea r10, [rdx + r9*8]
lea r11, [rdx + r9*8]
lea r11, [r11 + 8]
cmp dword [0x00bc2240], 0
jne 0x6e6555
mov qword [rdx + r9*8], rax
mov qword [rdx + r9*8 + 8], rbx
jmp 0x6e645a
mov rcx, rdi
mov rdi, r10
nop dword [rax + rax]
call fcn.00466ec0
mov rdi, r11
call fcn.00467000
mov rdi, rcx
jmp 0x6e645a
xor eax, eax
xor ebx, ebx
mov rcx, rbx
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
call fcn.00464c60
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
jmp fcn.006e61e0