Function at 0x44d1c0
Capabilities:
Gather firefox profile information
Reference sql statements

Disassembly:
lea r12, [rsp - 0x50]
cmp r12, qword [r14 + 0x10]
jbe 0x44d96b
sub rsp, 0xd0
mov qword [rsp + 0xc8], rbp
lea rbp, [rsp + 0xc8]
mov qword [rsp + 0xb0], 0
movups xmmword [rsp + 0xb8], xmm15
mov rdx, qword [rax + 0x18]
nop
test rdx, rdx
je 0x44d633
mov qword [rsp + 0xd8], rax
mov r10, qword [rax]
mov qword [rsp + 0xa8], r10
mov r11, qword [rax + 8]
mov qword [rsp + 0xa0], r11
cmp qword [r10], rdx
jne 0x44d234
mov ecx, 0xffffffff
jmp 0x44d26f
lea rdi, [rdx - 1]
mov qword [rsp + 0x38], rdi
mov rax, r10
mov ecx, 1
mov rsi, rbx
mov rbx, r11
call fcn.004514c0
mov r10, qword [rsp + 0xa8]
mov r11, qword [rsp + 0xa0]
mov ecx, eax
mov rdx, qword [rsp + 0x38]
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x38], rdx
cmp ecx, 0xffffffff
mov r12d, 0
cmove ecx, r12d
mov dword [rsp + 0x2c], ecx
mov r12, qword [rax + 0x38]
sub r12, qword [rax + 0x28]
test r12, r12
jbe 0x44d39e
mov qword [rsp + 0x40], r12
cmp byte [r10 + 0x2b], 1
ja 0x44d2ad
mov r15, r10
xor r10d, r10d
jmp 0x44d345
lea r13, [r10 + 0x2b]
mov r15d, dword [r10 + 0x20]
lea r13, [r13 + r15*4]
lea r13, [r13 + 1]
mov r15, r13
bt r15d, 2
jae 0x44d33e
mov r15, r10
bt r10d, 2
jae 0x44d338
mov qword [rsp + 0x80], r13
call fcn.00438580
lea rax, [0x007ae959]
mov ebx, 0x19
call fcn.00438e80
mov rax, qword [rsp + 0xa8]
call fcn.00438e00
nop dword [rax]
call fcn.004387e0
call fcn.00438600
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0x2c]
mov rdx, qword [rsp + 0x38]
mov r11, qword [rsp + 0xa0]
mov r12, qword [rsp + 0x40]
mov r13, qword [rsp + 0x80]
mov r15, qword [rsp + 0xa8]
add r13, 4
jmp 0x44d341
mov r15, r10
mov r10, qword [r13 + 8]
test r10, r10
je 0x44d8bb
mov r13d, dword [r10]
test r13d, r13d
jle 0x44d8bb
mov r12d, dword [r10 + 4]
nop
test r12d, r12d
jle 0x44d396
mov qword [rsp + 0x78], r10
test ecx, ecx
jl 0x44d7e5
cmp r13d, ecx
jle 0x44d7e5
nop
lea r13d, [r12 + 7]
sar r13d, 3
imul r13d, ecx
movsxd r13, r13d
lea r10, [r10 + r13]
lea r10, [r10 + 8]
jmp 0x44d3a7
xor r12d, r12d
xor r10d, r10d
jmp 0x44d3a7
mov r15, r10
xor r12d, r12d
xor r10d, r10d
mov qword [rsp + 0x98], r10
mov dword [rsp + 0x34], r12d
mov r13, qword [rax + 0x48]
nop dword [rax + rax]
test r13, r13
jbe 0x44d4fa
mov rbx, rdx
mov rdx, qword [rax + 0x50]
test rdx, rdx
je 0x44d3ef
mov r11d, dword [rdx]
shr r13, 3
cmp r11d, r13d
cmovg r11d, r13d
mov rdx, qword [rdx + 8]
mov r13, r15
jmp 0x44d502
cmp byte [r15 + 0x2b], 0
ja 0x44d405
mov r13, r15
xor edx, edx
nop dword [rax + rax]
jmp 0x44d4a0
lea rdx, [r15 + 0x2b]
mov r13d, dword [r15 + 0x20]
lea rdx, [rdx + r13*4]
lea rdx, [rdx + 1]
mov r13, rdx
bt r13d, 2
jae 0x44d495
mov r13, r15
bt r15d, 2
jae 0x44d48f
mov qword [rsp + 0x68], rdx
call fcn.00438580
lea rax, [0x007ae959]
mov ebx, 0x19
nop
call fcn.00438e80
mov rax, qword [rsp + 0xa8]
call fcn.00438e00
call fcn.004387e0
call fcn.00438600
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0x2c]
mov rdx, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x38]
mov r10, qword [rsp + 0x98]
mov r11, qword [rsp + 0xa0]
mov r12d, dword [rsp + 0x34]
mov r13, qword [rsp + 0xa8]
add rdx, 4
jmp 0x44d498
mov r13, r15
mov rdx, qword [rdx]
nop dword [rax + rax]
test rdx, rdx
je 0x44d72c
mov r15d, dword [rdx]
test r15d, r15d
jle 0x44d72c
mov qword [rsp + 0x88], rdx
nop dword [rax]
test ecx, ecx
jl 0x44d65a
cmp r15d, ecx
jle 0x44d65a
mov r11d, dword [rdx + 4]
test r11d, r11d
jle 0x44d4f3
lea r15d, [r11 + 7]
sar r15d, 3
imul ecx, r15d
movsxd r15, ecx
lea rdx, [rdx + r15]
lea rdx, [rdx + 8]
jmp 0x44d502
xor r11d, r11d
xor edx, edx
jmp 0x44d502
mov r13, r15
xor r11d, r11d
xor edx, edx
cmp qword [rax + 0x50], 0
je 0x44d53e
mov r13, qword [0x007376c0]
mov r15, qword [0x007376c8]
mov rax, rdx
mov rdx, qword [0x007376d0]
mov qword [rsp + 0xb0], r13
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0xc0], rdx
jmp 0x44d5ff
cmp byte [r13 + 0x2b], 2
ja 0x44d54f
mov rax, rdx
xor edx, edx
jmp 0x44d5da
lea r15, [r13 + 0x2b]
mov rax, rdx
mov edx, dword [r13 + 0x20]
lea rdx, [r15 + rdx*4]
lea rdx, [rdx + 1]
mov r15, rdx
bt r15d, 2
jae 0x44d5d6
bt r13d, 2
jae 0x44d5d1
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x90], rax
mov dword [rsp + 0x30], r11d
call fcn.00438580
lea rax, [0x007ae959]
mov ebx, 0x19
call fcn.00438e80
mov rax, qword [rsp + 0xa8]
call fcn.00438e00
call fcn.004387e0
call fcn.00438600
mov rax, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x70]
mov r10, qword [rsp + 0x98]
mov r11d, dword [rsp + 0x30]
mov r12d, dword [rsp + 0x34]
nop
add rdx, 4
mov rdx, qword [rdx + 0x10]
test rdx, rdx
je 0x44d5ff
mov r13, qword [rdx]
nop
add rdx, 8
mov qword [rsp + 0xb0], rdx
mov qword [rsp + 0xb8], r13
mov qword [rsp + 0xc0], r13
mov r8, qword [rsp + 0xb8]
mov r9, qword [rsp + 0xc0]
mov rsi, qword [rsp + 0xb0]
mov rbx, r10
mov ecx, r11d
mov rdi, rax
mov eax, r12d
mov rbp, qword [rsp + 0xc8]
add rsp, 0xd0
ret
mov rsi, qword [rsp + 0xb0]
xor eax, eax
xor ebx, ebx
mov ecx, eax
mov rdi, rbx
xor r8d, r8d
mov r9, r8
mov rbp, qword [rsp + 0xc8]
add rsp, 0xd0
ret
mov rax, r13
mov rbx, r11
call fcn.00450dc0
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x60], rbx
mov rcx, qword [rsp + 0x88]
movsxd rcx, dword [rcx]
mov qword [rsp + 0x58], rcx
call fcn.00438580
lea rax, [0x007abbe5]
mov ebx, 0x13
call fcn.00438e80
mov ecx, dword [rsp + 0x2c]
movsxd rax, ecx
nop
call fcn.00438c80
lea rax, [0x007a3e98]
mov ebx, 5
call fcn.00438e80
mov rax, qword [rsp + 0x58]
nop dword [rax + rax]
call fcn.00438c80
lea rax, [0x007af73b]
mov ebx, 0x1c
call fcn.00438e80
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x60]
call fcn.00438e80
lea rax, [0x007a7ddc]
mov ebx, 0xb
call fcn.00438e80
mov rax, qword [rsp + 0x38]
nop
call fcn.00438ce0
lea rax, [0x007a34e7]
mov ebx, 2
call fcn.00438e80
call fcn.00438600
lea rax, [0x007aa295]
mov ebx, 0x10
call fcn.00436e00
mov rax, r13
mov rbx, r11
call fcn.00450dc0
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x60], rbx
mov rcx, qword [rsp + 0xd8]
mov rdx, qword [rcx + 0x40]
mov qword [rsp + 0x50], rdx
mov rcx, qword [rcx + 0x48]
mov qword [rsp + 0x48], rcx
nop
call fcn.00438580
lea rax, [0x007a9db1]
mov ebx, 0xf
call fcn.00438e80
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x60]
call fcn.00438e80
lea rax, [0x007a91a8]
mov ebx, 0xe
call fcn.00438e80
mov rax, qword [rsp + 0x50]
nop
call fcn.00438ce0
lea rax, [0x007a34a7]
mov ebx, 1
call fcn.00438e80
mov rax, qword [rsp + 0x48]
nop dword [rax + rax]
call fcn.00438ce0
call fcn.004387e0
call fcn.00438600
lea rax, [0x007aa415]
mov ebx, 0x10
nop dword [rax + rax]
call fcn.00436e00
mov rax, r15
mov rbx, r11
call fcn.00450dc0
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x60], rbx
mov rcx, qword [rsp + 0x78]
movsxd rcx, dword [rcx]
mov qword [rsp + 0x58], rcx
call fcn.00438580
lea rax, [0x007abbe5]
mov ebx, 0x13
nop dword [rax + rax]
call fcn.00438e80
mov ecx, dword [rsp + 0x2c]
movsxd rax, ecx
call fcn.00438c80
lea rax, [0x007a3e98]
mov ebx, 5
nop dword [rax]
call fcn.00438e80
mov rax, qword [rsp + 0x58]
call fcn.00438c80
lea rax, [0x007b039b]
mov ebx, 0x1e
nop dword [rax + rax]
call fcn.00438e80
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x60]
call fcn.00438e80
lea rax, [0x007a7ddc]
mov ebx, 0xb
call fcn.00438e80
mov rax, qword [rsp + 0x38]
call fcn.00438ce0
lea rax, [0x007a34e7]
mov ebx, 2
nop
call fcn.00438e80
call fcn.00438600
lea rax, [0x007aa295]
mov ebx, 0x10
call fcn.00436e00
mov rax, r15
mov rbx, r11
call fcn.00450dc0
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x60], rbx
mov rcx, qword [rsp + 0xd8]
mov rcx, qword [rcx + 0x38]
mov qword [rsp + 0x50], rcx
call fcn.00438580
lea rax, [0x007a9db1]
mov ebx, 0xf
call fcn.00438e80
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x60]
call fcn.00438e80
lea rax, [0x007a9e95]
mov ebx, 0x10
call fcn.00438e80
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x40]
sub rax, rcx
call fcn.00438ce0
lea rax, [0x007a34a7]
mov ebx, 1
nop dword [rax + rax]
call fcn.00438e80
mov rax, qword [rsp + 0x40]
call fcn.00438ce0
call fcn.004387e0
call fcn.00438600
lea rax, [0x007aa415]
mov ebx, 0x10
call fcn.00436e00
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov byte [rsp + 0x18], cl
call fcn.00461f00
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
movzx ecx, byte [rsp + 0x18]
jmp fcn.0044d1c0