Function at 0x43a120
Capabilities:
Gather firefox profile information
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x18]
jbe 0x43a65d
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
mov rdx, qword [r14 + 0x30]
mov rdx, qword [rdx + 0x90]
test rdx, rdx
je 0x43a157
mov edx, dword [rdx + 0x90]
cmp edx, 2
je 0x43a64b
mov qword [rsp + 0x78], rax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
xor esi, esi
xor edi, edi
xor r8d, r8d
jmp 0x43a18b
mov rdi, qword [rsp + 0x40]
inc rdi
mov rax, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x38]
mov ebx, dword [rsp + 0x20]
mov rdx, qword [rsp + 0x50]
movzx ecx, byte [rsp + 0x16]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x20], ebx
mov qword [rsp + 0x50], rdx
mov byte [rsp + 0x16], cl
mov qword [rsp + 0x40], rdi
mov r9d, dword [rax + 0x90]
cmp r9d, 4
ja 0x43a360
nop dword [rax + rax]
cmp r9d, 1
je 0x43a3d2
cmp r9d, 2
jne 0x43a350
cmp byte [rax + 0xb2], 0
je 0x43a215
cmp byte [rax + 0xb1], 0
je 0x43a210
cmp qword [rax + 0x10], 0xfffffffffffffade
jne 0x43a20b
cmp qword [rax + 0x30], rdx
jne 0x43a206
mov r9d, dword [rdx + 0x300]
cmp r9d, ebx
sete r9b
jmp 0x43a220
xor r9d, r9d
jmp 0x43a220
xor r9d, r9d
jmp 0x43a220
xor r9d, r9d
jmp 0x43a220
xor r9d, r9d
nop dword [rax + rax]
test r9b, r9b
jne 0x43a410
mov ebx, 2
mov ecx, 0x1002
call fcn.0043d9c0
nop dword [rax + rax]
test al, al
je 0x43a329
mov rax, qword [rsp + 0x78]
mov word [rax + 0xb1], 0x101
mov qword [rax + 0x10], 0xfffffffffffffade
mov rdx, qword [rax + 0x30]
mov qword [rsp + 0x60], rdx
mov esi, dword [rdx + 0x300]
mov dword [rsp + 0x24], esi
mov rdi, qword [rsp + 0x50]
cmp rdi, rdx
je 0x43a282
mov edi, 1
jmp 0x43a28c
mov edi, dword [rsp + 0x20]
cmp esi, edi
setne dil
mov byte [rsp + 0x17], dil
mov ebx, 0x1002
mov ecx, 2
nop dword [rax + rax]
call fcn.0043d600
cmp dword [0x00bc2578], 0
jne 0x43a2ff
movzx eax, byte [rsp + 0x17]
test al, al
je 0x43a2ff
nop
call fcn.00468c80
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp]
mov rcx, qword [rsp + 0x38]
cmp rcx, rax
jg 0x43a304
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x60]
call fcn.00436c20
mov rsi, qword [rsp + 0x28]
add rsi, 0x1388
mov rcx, rsi
jmp 0x43a304
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x60]
mov ebx, dword [rsp + 0x24]
mov rsi, rcx
movzx ecx, byte [rsp + 0x16]
jmp 0x43a410
mov rax, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x30]
movzx ecx, byte [rsp + 0x16]
mov rdx, qword [rsp + 0x50]
mov ebx, dword [rsp + 0x20]
mov rsi, qword [rsp + 0x38]
jmp 0x43a410
cmp r9d, 3
jb 0x43a37a
jmp 0x43a3d2
cmp r9d, 6
je 0x43a51f
cmp r9d, 8
je 0x43a410
cmp r9d, 9
je 0x43a38b
bt r9d, 0xc
nop
jb 0x43a410
jmp 0x43a532
mov ebx, 9
mov ecx, 4
call fcn.0043df60
test al, al
jne 0x43a3c2
mov rax, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x30]
movzx ecx, byte [rsp + 0x16]
mov rdx, qword [rsp + 0x50]
mov ebx, dword [rsp + 0x20]
mov rsi, qword [rsp + 0x38]
jmp 0x43a410
mov rax, qword [rsp + 0x78]
mov r9d, 4
mov ecx, 1
mov byte [rsp + 0x16], cl
mov ebx, r9d
bts r9d, 0xc
mov ecx, r9d
call fcn.0043d9c0
test al, al
jne 0x43a4f2
mov rax, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x30]
movzx ecx, byte [rsp + 0x16]
mov rdx, qword [rsp + 0x50]
mov ebx, dword [rsp + 0x20]
mov rsi, qword [rsp + 0x38]
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x20], ebx
mov qword [rsp + 0x50], rdx
mov byte [rsp + 0x16], cl
test rdi, rdi
jne 0x43a44b
call fcn.00468c80
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov r8, qword [rsp]
add r8, 0x2710
mov qword [rsp + 0x30], r8
call fcn.00468c80
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp + 0x30]
cmp qword [rsp], rax
jge 0x43a4a5
mov dword [rsp], 0xa
nop dword [rax + rax]
call fcn.00466a40
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov r8, qword [rsp + 0x30]
nop
jmp 0x43a16b
lea rax, [0x009098c8]
mov qword [rsp], rax
call fcn.00464b20
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
call fcn.00468c80
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov r8, qword [rsp]
add r8, 0x1388
jmp 0x43a16b
mov rax, qword [rsp + 0x78]
mov word [rax + 0xb1], 0
mov rdx, qword [rax]
add rdx, 0x13a0
mov qword [rax + 0x10], rdx
xor ebx, ebx
movzx ecx, byte [rsp + 0x16]
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
xor eax, eax
mov ebx, 1
xor ecx, ecx
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
nop
mov qword [rsp + 0x58], r14
mov ecx, dword [rax + 0x90]
mov dword [rsp + 0x1c], ecx
mov rdx, qword [rax + 0x98]
mov qword [rsp + 0x48], rdx
call fcn.0043aec0
lea rax, [0x008d7acf]
mov ebx, 0x10
nop
call fcn.0043b7c0
mov rax, qword [rsp + 0x78]
call fcn.0043b740
lea rax, [0x008d421b]
mov ebx, 7
nop dword [rax + rax]
call fcn.0043b7c0
mov rax, qword [rsp + 0x48]
call fcn.0043b5c0
lea rax, [0x008d898c]
mov ebx, 0x13
nop dword [rax + rax]
call fcn.0043b7c0
mov eax, dword [rsp + 0x1c]
mov eax, eax
call fcn.0043b4c0
call fcn.0043b120
call fcn.0043af40
mov rax, qword [rsp + 0x58]
mov ecx, dword [rax + 0x90]
mov dword [rsp + 0x18], ecx
mov rdx, qword [rax + 0x98]
mov qword [rsp + 0x48], rdx
call fcn.0043aec0
lea rax, [0x008d7a9f]
mov ebx, 0x10
call fcn.0043b7c0
mov rax, qword [rsp + 0x58]
call fcn.0043b740
lea rax, [0x008d421b]
mov ebx, 7
call fcn.0043b7c0
mov rax, qword [rsp + 0x48]
call fcn.0043b5c0
lea rax, [0x008d8979]
mov ebx, 0x13
nop dword [rax]
call fcn.0043b7c0
mov eax, dword [rsp + 0x18]
mov eax, eax
call fcn.0043b4c0
call fcn.0043b120
call fcn.0043af40
lea rax, [0x008d794f]
mov ebx, 0x10
call fcn.00439600
lea rax, [0x008e3760]
mov ebx, 0x27
call fcn.00439600
nop
mov qword [rsp + 8], rax
call fcn.00469440
mov rax, qword [rsp + 8]
jmp fcn.0043a120