Function at 0x4110c0
Capabilities:
Gather firefox profile information
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4115ba
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
mov qword [rsp + 0x70], rax
mov rbx, qword [rax + 0x18]
mov qword [rsp + 0x50], rbx
movzx esi, byte [rbx + 8]
test sil, 4
je 0x41110f
lea rax, [0x008e2d06]
mov ebx, 0x26
nop dword [rax]
call fcn.00439700
mov rax, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rax + 0x10]
mov qword [rsp + 0x40], rsi
mov r8, qword [rax + 0x50]
mov r9, qword [rax + 0x28]
movzx r10d, byte [rax + 0x4b]
mov r11, qword [rax + 0x58]
jmp 0x411145
movzx r12d, word [rsi + 0x52]
lea r12, [r11 + r12]
lea r12, [r12 - 8]
test byte [rsi], al
mov r9, qword [r12]
xor r10d, r10d
mov r11, rdx
test r9, r9
je 0x411155
mov rdx, r11
mov r11, r9
jmp 0x411219
cmp qword [rax + 0x40], r8
jne 0x411166
cmp byte [rax + 0x49], 0
nop
jne 0x41122a
mov r9, qword [rbx + 0x18]
test r9, r9
je 0x4111df
movzx r10d, byte [rax + 0x4a]
cmp byte [rbx + 9], r10b
jne 0x4111df
mov r10, qword [rax + 0x18]
movzx r11d, byte [r10 + 9]
movzx r10d, byte [r10 + 8]
test r10b, 8
jne 0x411191
dec r11d
mov ecx, r11d
mov r10d, 1
shl r10, cl
dec r10
and r10, r8
movzx r11d, word [rsi + 0x52]
imul r10, r11
nop
lea r12, [r9 + r10]
movzx r9d, byte [r10 + r9]
add r9d, 0xfffffffe
nop word [rax + rax]
cmp r9b, 3
jae 0x4111d7
imul r11, r8
add r11, qword [rax + 0x20]
mov rcx, 0xffffffffffffffff
jmp 0x4111f3
mov rcx, r8
mov r11, r12
jmp 0x4111f3
movzx r11d, word [rsi + 0x52]
imul r11, r8
add r11, qword [rax + 0x20]
mov rcx, 0xffffffffffffffff
inc r8
movzx r9d, byte [rax + 0x4a]
mov rdx, rcx
mov ecx, r9d
mov r10d, 1
shl r10, cl
cmp r10, r8
jne 0x411216
mov byte [rax + 0x49], 1
xor r8d, r8d
xor r10d, r10d
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x58], r11
jmp 0x411260
cmp dword [0x00bc2240], 0
jne 0x411239
movups xmmword [rax], xmm15
jmp 0x41124e
mov rdi, rax
xor ecx, ecx
nop
call fcn.00466fc0
lea rdi, [rax + 8]
call fcn.00466fc0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
inc r10d
nop dword [rax + rax]
cmp r10b, 8
jae 0x41112b
test byte [r11], al
movzx r9d, byte [rax + 0x48]
add r9d, r10d
mov r12d, r9d
and r9d, 7
movzx r13d, byte [r11 + r9]
cmp r13b, 1
jbe 0x411258
cmp r13b, 4
je 0x411258
and r12d, 7
movzx r13d, byte [rsi + 0x50]
mov r15, r13
imul r13, r12
mov rcx, r11
lea r13, [r13 + r11]
lea r13, [r13 + 8]
mov rdi, r8
mov r8d, dword [rsi + 0x54]
bt r8d, 0
jae 0x4112bb
mov r13, qword [r13]
mov byte [rsp + 0x1f], r10b
mov qword [rsp + 0x48], r13
movzx r13d, byte [rsi + 0x51]
imul r13, r12
lea r12, [r13 + r15*8]
lea r11, [r12 + r11]
lea r11, [r11 + 8]
mov qword [rsp + 0x38], r11
cmp rdx, 0xffffffffffffffff
je 0x41141e
movzx r12d, byte [rbx + 8]
test r12b, 8
jne 0x41141e
mov qword [rsp + 0x30], r9
bt r8d, 2
jae 0x41130d
mov r8d, 1
jmp 0x411353
mov rcx, qword [rsi + 0x30]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x48]
mov rbx, rax
call rcx
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
mov r9, qword [rsp + 0x30]
movzx r10d, byte [rsp + 0x1f]
mov r11, qword [rsp + 0x38]
mov r8d, eax
mov rax, qword [rsp + 0x70]
test r8b, r8b
jne 0x411397
movzx r8d, byte [rax + 0x4a]
dec r8d
cmp r8b, 0x40
sbb r12, r12
mov r13, rcx
mov ecx, r8d
mov r15, rdx
shr rdx, cl
and rdx, r12
movzx r8d, byte [r13 + r9]
and r8d, 1
cmp r8, rdx
je 0x411424
mov rdx, r15
mov r8, rdi
mov r11, r13
jmp 0x411258
mov rdx, qword [rsi + 0x48]
mov rcx, qword [rdx]
mov edi, dword [rbx + 0xc]
mov rax, qword [rsp + 0x48]
mov rbx, rdi
call rcx
mov rdi, qword [rsp + 0x70]
movzx ecx, byte [rdi + 0x4a]
mov esi, 1
shl rsi, cl
lea rcx, [rsi - 1]
and rax, rcx
mov rcx, qword [rsp + 0x20]
cmp rcx, rax
je 0x4113f2
mov rax, rdi
mov rdx, rcx
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x28]
movzx r10d, byte [rsp + 0x1f]
mov r11, qword [rsp + 0x58]
jmp 0x411258
mov rax, rdi
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
mov r9, qword [rsp + 0x30]
movzx r10d, byte [rsp + 0x1f]
mov r11, qword [rsp + 0x38]
mov r13, qword [rsp + 0x58]
mov r15, rcx
jmp 0x411424
mov r13, rcx
mov r15, rdx
movzx r8d, byte [r13 + r9]
cmp r8b, 2
je 0x41143d
cmp r8b, 3
je 0x41143d
mov ecx, 1
jmp 0x411492
mov r8d, dword [rsi + 0x54]
bt r8d, 2
jae 0x41144f
mov ecx, 1
jmp 0x41148f
mov rcx, qword [rsi + 0x30]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x48]
mov rbx, rax
call rcx
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
movzx r10d, byte [rsp + 0x1f]
mov r11, qword [rsp + 0x38]
mov r13, qword [rsp + 0x58]
mov r15, qword [rsp + 0x20]
mov ecx, eax
mov rax, qword [rsp + 0x70]
xor ecx, 1
test cl, cl
jne 0x411522
mov rax, rsi
mov rcx, qword [rsp + 0x48]
call fcn.004102e0
test rax, rax
jne 0x4114d5
mov rax, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x28]
movzx r10d, byte [rsp + 0x1f]
mov r11, qword [rsp + 0x58]
jmp 0x411258
cmp dword [0x00bc2240], 0
jne 0x4114ec
mov rdi, qword [rsp + 0x70]
mov qword [rdi], rax
mov qword [rdi + 8], rbx
jmp 0x411508
mov rdi, qword [rsp + 0x70]
call fcn.00466ec0
lea rax, [rdi + 8]
mov rcx, rdi
mov rdi, rax
call fcn.00467000
mov rdi, rcx
mov rax, rdi
mov rdi, qword [rsp + 0x28]
movzx r10d, byte [rsp + 0x1f]
mov r13, qword [rsp + 0x58]
mov r15, qword [rsp + 0x20]
jmp 0x411578
cmp dword [0x00bc2240], 0
jne 0x411535
mov rcx, qword [rsp + 0x48]
mov qword [rax], rcx
jmp 0x411548
mov rcx, rdi
mov rdi, rax
mov rdx, qword [rsp + 0x48]
call fcn.00466fe0
mov rdi, rcx
mov ecx, dword [rsi + 0x54]
bt ecx, 1
jae 0x411554
mov r11, qword [r11]
cmp dword [0x00bc2240], 0
jne 0x411563
mov qword [rax + 8], r11
jmp 0x411578
lea rcx, [rax + 8]
mov rdx, rdi
mov rdi, rcx
mov rbx, r11
call fcn.00467000
mov rdi, rdx
mov qword [rax + 0x50], rdi
nop dword [rax]
cmp qword [rax + 0x28], r13
je 0x4115a5
cmp dword [0x00bc2240], 0
jne 0x411595
mov qword [rax + 0x28], r13
jmp 0x4115a5
lea rdi, [rax + 0x28]
mov rcx, r13
nop dword [rax]
call fcn.00466fc0
lea ecx, [r10 + 1]
mov byte [rax + 0x4b], cl
mov qword [rax + 0x58], r15
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov qword [rsp + 8], rax
nop
call fcn.00464c60
mov rax, qword [rsp + 8]
jmp fcn.004110c0