Function at 0x6877a0
Capabilities:
Gather firefox profile information
Reference sql statements

Disassembly:
lea r12, [rsp - 0x58]
cmp r12, qword [r14 + 0x10]
jbe 0x687f91
sub rsp, 0xd8
mov qword [rsp + 0xd0], rbp
lea rbp, [rsp + 0xd0]
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xf8], rdi
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xe0], rax
lea rdx, [rbx + rdi*2]
lea rdx, [rdx + 1]
mov qword [rsp + 0x80], rdx
lea rax, [0x0070f280]
mov rcx, rdx
call fcn.00449300
mov rbx, qword [rsp + 0xe0]
cmp rax, rbx
je 0x68782f
mov qword [rsp + 0xc8], rax
mov rcx, qword [rsp + 0xe8]
call fcn.00463ac0
mov rax, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0xf8]
mov r8, qword [rsp + 0xf0]
mov r9, qword [rsp + 0xe8]
mov rdx, qword [rsp + 0x80]
xor ecx, ecx
xor esi, esi
xor edi, edi
jmp 0x68785d
mov rcx, r11
mov r9, r12
mov qword [rsp + 0x78], r9
mov dword [rsp + 0x44], edi
mov dword [rsp + 0x64], esi
cmp rbx, rcx
jle 0x687960
movzx r10d, byte [r8 + rcx]
nop dword [rax + rax]
cmp r10d, 0x80
jge 0x68788f
lea r11, [rcx + 1]
jmp 0x6878e0
mov qword [rsp + 0xa8], rdx
mov qword [rsp + 0xb0], rax
mov rax, r8
call fcn.0045b840
mov rdx, qword [rsp + 0xa8]
mov esi, dword [rsp + 0x64]
mov edi, dword [rsp + 0x44]
mov r8, qword [rsp + 0xf0]
mov r9, qword [rsp + 0x78]
mov r10d, eax
mov r11, rbx
mov rax, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0xf8]
nop word [rax + rax]
cmp r10d, 0x80
jge 0x687953
lea r12, [r9 + 1]
cmp rdx, r12
jae 0x687948
mov dword [rsp + 0x48], r10d
mov qword [rsp + 0xa0], r11
mov rbx, rax
mov rcx, r9
mov rdi, rdx
mov rsi, r12
lea rax, [0x0070f280]
call fcn.004493e0
lea r12, [rbx + 1]
mov rbx, qword [rsp + 0xf8]
mov esi, dword [rsp + 0x64]
mov edi, dword [rsp + 0x44]
mov r8, qword [rsp + 0xf0]
mov r9, qword [rsp + 0x78]
mov r10d, dword [rsp + 0x48]
mov r11, qword [rsp + 0xa0]
mov rdx, rcx
mov byte [rax + r9], r10b
inc esi
jmp 0x687857
inc edi
mov r12, r9
jmp 0x687857
test esi, esi
jle 0x6879b0
lea r10, [r9 + 1]
cmp rdx, r10
jae 0x6879a9
mov rbx, rax
mov rcx, r9
mov rdi, rdx
mov rsi, r10
lea rax, [0x0070f280]
call fcn.004493e0
lea r10, [rbx + 1]
mov rbx, qword [rsp + 0xf8]
mov esi, dword [rsp + 0x64]
mov edi, dword [rsp + 0x44]
mov r8, qword [rsp + 0xf0]
mov r9, qword [rsp + 0x78]
mov rdx, rcx
mov byte [rax + r9], 0x2d
jmp 0x6879b3
mov r10, r9
mov ecx, esi
mov r9d, pe_nt_image_headers64
xor r11d, r11d
mov r12d, 0x48
jmp 0x6879ce
lea r11d, [r9 + 1]
lea r9d, [r13 + 1]
test edi, edi
je 0x687a3f
mov dword [rsp + 0x44], edi
mov dword [rsp + 0x60], r12d
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x78], r10
mov qword [rsp + 0x80], rdx
mov dword [rsp + 0x50], r9d
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x5c], r11d
xor r13d, r13d
mov r15d, 0x7fffffff
jmp 0x687a69
mov r13d, r15d
sub r15d, r9d
lea r9d, [rsi + 1]
movsxd r15, r15d
movsxd r9, r9d
imul r15, r9
movsxd r9, r11d
add r9, 0xffffffff80000001
neg r9
cmp r9, r15
jl 0x687af1
lea r9d, [r15 + r11]
xor r11d, r11d
jmp 0x687b61
mov rbx, rax
mov rcx, r10
xor eax, eax
call fcn.0044d200
xor ecx, ecx
xor edi, edi
mov rbp, qword [rsp + 0xd0]
add rsp, 0xd8
nop
ret
mov rdx, qword [rsp + 0x80]
mov dword [rsp + 0x74], r15d
cmp rbx, r13
jle 0x687a09
movzx edx, byte [r8 + r13]
nop dword [rax + rax]
cmp edx, 0x80
jge 0x687a8d
inc r13
jmp 0x687ada
mov rax, r8
mov rcx, r13
call fcn.0045b840
mov ecx, dword [rsp + 0x64]
mov esi, dword [rsp + 0x58]
mov edi, dword [rsp + 0x44]
mov r8, qword [rsp + 0xf0]
mov r9d, dword [rsp + 0x50]
mov r10, qword [rsp + 0x78]
mov r11d, dword [rsp + 0x5c]
mov r12d, dword [rsp + 0x60]
mov r15d, dword [rsp + 0x74]
mov edx, eax
mov r13, rbx
mov rax, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0xf8]
cmp r15d, edx
jle 0x687a61
nop
cmp r9d, edx
jg 0x687a61
mov r15d, edx
jmp 0x687a61
lea rax, [0x00749300]
call fcn.0040d400
mov rcx, qword [rsp + 0xf8]
mov qword [rax + 8], rcx
cmp dword [0x00a5a130], 0
jne 0x687b1f
mov rdx, qword [rsp + 0xf0]
mov qword [rax], rdx
jmp 0x687b2f
mov rdi, rax
mov rdx, qword [rsp + 0xf0]
call fcn.00462dc0
mov qword [rax + 0x18], 2
lea rdx, [0x00771610]
mov qword [rax + 0x10], rdx
xor ebx, ebx
lea rcx, [0x00815980]
mov rdi, rax
xor eax, eax
mov rbp, qword [rsp + 0xd0]
add rsp, 0xd8
nop
ret
cmp rbx, r11
jle 0x6879c6
mov dword [rsp + 0x70], edi
mov dword [rsp + 0x6c], esi
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0x5c], r9d
movzx r15d, byte [r8 + r11]
cmp r15d, 0x80
jge 0x687b8f
inc r11
jmp 0x687c00
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0x98], r10
mov qword [rsp + 0x90], rdx
mov rax, r8
mov rcx, r11
call fcn.0045b840
mov ecx, dword [rsp + 0x64]
mov rdx, qword [rsp + 0x90]
mov esi, dword [rsp + 0x6c]
mov edi, dword [rsp + 0x70]
mov r8, qword [rsp + 0xf0]
mov r9d, dword [rsp + 0x5c]
mov r10, qword [rsp + 0x98]
mov r12d, dword [rsp + 0x68]
mov r13d, dword [rsp + 0x74]
mov r15d, eax
mov r11, rbx
mov rax, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0xf8]
nop dword [rax + rax]
cmp r15d, r13d
jge 0x687c16
inc r9d
test r9d, r9d
jge 0x687b61
jmp 0x687d7a
jg 0x687b61
mov qword [rsp + 0x88], r11
mov r15d, r9d
mov r9d, 0x24
mov dword [rsp + 0x54], r9d
mov r9d, r15d
jmp 0x687e17
nop word [rax + rax]
cmp r9d, 0x1a
jae 0x687c4c
lea r8d, [r9 + 0x61]
jmp 0x687c5e
lea r8d, [r9 - 0x1a]
cmp r8d, 0xa
jae 0x687f65
lea r8d, [r9 + 0x16]
lea r9, [r10 + 1]
cmp rdx, r9
jae 0x687cb8
mov byte [rsp + 0x42], r8b
mov rbx, rax
mov rcx, r10
mov rdi, rdx
mov rsi, r9
lea rax, [0x0070f280]
nop
call fcn.004493e0
lea r9, [rbx + 1]
mov rbx, qword [rsp + 0xf8]
mov esi, dword [rsp + 0x6c]
mov edi, dword [rsp + 0x70]
movzx r8d, byte [rsp + 0x42]
mov r10, qword [rsp + 0x78]
mov r11, qword [rsp + 0x88]
mov r15d, dword [rsp + 0x5c]
mov rdx, rcx
mov ecx, dword [rsp + 0x64]
mov byte [rax + r10], r8b
nop dword [rax]
cmp esi, ecx
jne 0x687cde
movsxd r8, r15d
mov r10d, 0xbb3ee722
imul r10, r8
sar r10, 0x29
sar r8, 0x3f
sub r10d, r8d
jmp 0x687cec
mov r8d, r15d
shr r15d, 0x1f
lea r10d, [r15 + r8]
sar r10d, 1
cmp esi, 0xffffffff
je 0x687f60
lea r8d, [rsi + 1]
mov rsi, rax
mov eax, r10d
mov r12, rdx
cmp r8d, 0xffffffff
je 0x687d0e
cdq
idiv r8d
jmp 0x687d12
neg eax
xor edx, edx
lea edx, [r10 + rax]
xor eax, eax
jmp 0x687f4b
lea r10d, [rdx + rdx*8]
cmp edx, 0xffffffda
je 0x687f58
shl r10d, 2
lea r13d, [rdx + 0x26]
mov edx, eax
mov eax, r10d
mov r10d, edx
nop word [rax + rax]
cmp r13d, 0xffffffff
je 0x687d4c
cdq
idiv r13d
jmp 0x687d50
neg eax
xor edx, edx
dec edi
lea r13d, [r10 + rax]
mov r10, r9
mov rdx, r12
mov rax, rsi
mov esi, r8d
mov r8, qword [rsp + 0xf0]
xor r9d, r9d
mov r12d, r13d
mov r13d, dword [rsp + 0x74]
jmp 0x687b61
lea rax, [0x00749300]
call fcn.0040d400
mov rcx, qword [rsp + 0xf8]
mov qword [rax + 8], rcx
cmp dword [0x00a5a130], 0
jne 0x687da8
mov rdx, qword [rsp + 0xf0]
mov qword [rax], rdx
jmp 0x687db8
mov rdi, rax
mov rdx, qword [rsp + 0xf0]
call fcn.00462dc0
mov qword [rax + 0x18], 2
lea rdx, [0x00771610]
mov qword [rax + 0x10], rdx
xor ebx, ebx
lea rcx, [0x00815980]
mov rdi, rax
xor eax, eax
mov rbp, qword [rsp + 0xd0]
add rsp, 0xd8
ret
mov byte [r13 + r10], dl
lea edx, [r8 + 0x24]
mov r8, qword [rsp + 0xf0]
mov dword [rsp + 0x54], edx
mov r10, r11
mov rdx, r9
mov r11, qword [rsp + 0x88]
mov r9d, eax
mov rax, r13
mov r13d, dword [rsp + 0x74]
mov r13d, dword [rsp + 0x54]
sub r13d, r12d
mov r8d, dword [rsp + 0x54]
cmp r8d, r12d
jg 0x687e31
mov r13d, 1
jmp 0x687e4b
lea r11d, [r12 + 0x1a]
cmp r8d, r11d
mov r11d, 0x1a
cmovge r13d, r11d
mov r11, qword [rsp + 0x88]
mov qword [rsp + 0x78], r10
cmp r9d, r13d
jl 0x687c3a
sub r9d, r13d
lea r11d, [r13 - 0x24]
neg r11d
test r11d, r11d
je 0x687f8b
mov qword [rsp + 0xb8], rax
mov eax, r9d
mov r9, rdx
nop word [rax + rax]
cmp r11d, 0xffffffff
je 0x687e8c
cdq
idiv r11d
jmp 0x687e90
neg eax
xor edx, edx
lea r11d, [rdx + r13]
cmp r11d, 0x1a
jae 0x687ea3
lea edx, [rdx + r13]
lea edx, [rdx + 0x61]
jmp 0x687ebc
lea r11d, [rdx + r13]
lea r11d, [r11 - 0x1a]
cmp r11d, 0xa
jae 0x687f78
lea edx, [rdx + r13]
lea edx, [rdx + 0x16]
lea r11, [r10 + 1]
cmp r9, r11
jb 0x687ed2
mov r13, qword [rsp + 0xb8]
jmp 0x687de9
mov dword [rsp + 0x4c], eax
mov byte [rsp + 0x43], dl
lea rax, [0x0070f280]
mov rbx, qword [rsp + 0xb8]
mov rcx, r10
mov rdi, r9
mov rsi, r11
call fcn.004493e0
lea r11, [rbx + 1]
movzx edx, byte [rsp + 0x43]
mov rbx, qword [rsp + 0xf8]
mov esi, dword [rsp + 0x6c]
mov edi, dword [rsp + 0x70]
mov r8d, dword [rsp + 0x54]
mov r10, qword [rsp + 0x78]
mov r12d, dword [rsp + 0x68]
mov r15d, dword [rsp + 0x5c]
mov r13, rax
mov r9, rcx
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x64]
jmp 0x687de9
movsxd rdx, edx
mov r10d, 0xea0ea0eb
imul rdx, r10
sar rdx, 0x25
add eax, 0x24
cmp edx, 0x1c7
jg 0x687f37
jmp 0x687d1d
call fcn.00434380
nop dword [rax]
call fcn.00434380
lea rax, [0x0070f0c0]
lea rbx, [0x00814ff0]
call fcn.004356e0
lea rax, [0x0070f0c0]
lea rbx, [0x00814ff0]
call fcn.004356e0
call fcn.00434380
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
call fcn.00460a60
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
nop
jmp fcn.006877a0