Function at 0x6b5de0
Capabilities:
Gather firefox profile information
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6b63c8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rbx
lea rax, [0x00762720]
call fcn.0040d400
mov rcx, qword [rsp + 0x48]
nop dword [rax]
test rcx, rcx
je 0x6b627a
mov qword [rsp + 0x38], rax
mov edx, dword [rcx + 0x10]
cmp edx, 0x29cb474c
jne 0x6b5fcf
lea rdx, [0x00749a80]
cmp rcx, rdx
jne 0x6b6273
mov byte [rax + 0x70], 1
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rcx + 0x80]
nop dword [rax]
test rdx, rdx
je 0x6b5e86
mov rsi, qword [rdx]
mov rdx, qword [rdx + 8]
mov qword [rax + 8], rdx
cmp dword [0x00a5a130], 0
jne 0x6b5e7e
mov qword [rax], rsi
jmp 0x6b5e86
mov rdi, rax
call fcn.00462e00
mov rdx, qword [rcx + 0x48]
mov qword [rsp + 0x30], rdx
mov rbx, qword [rcx + 0x40]
lea rax, [0x00727ce0]
call fcn.0040aca0
mov rcx, qword [rsp + 0x38]
mov qword [rcx + 0x10], rax
cmp dword [0x00a5a130], 0
jne 0x6b5ebc
mov rdx, qword [rsp + 0x30]
mov qword [rcx + 0x18], rdx
jmp 0x6b5eca
lea rdi, [rcx + 0x18]
mov rdx, qword [rsp + 0x30]
call fcn.00462dc0
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rcx + 0x48]
mov qword [rsp + 0x30], rdx
mov rbx, qword [rcx + 0x40]
lea rax, [0x00727c60]
call fcn.0040aca0
mov rcx, qword [rsp + 0x38]
mov qword [rcx + 0x20], rax
cmp dword [0x00a5a130], 0
jne 0x6b5f05
mov rdx, qword [rsp + 0x30]
mov qword [rcx + 0x28], rdx
jmp 0x6b5f13
lea rdi, [rcx + 0x28]
mov rdx, qword [rsp + 0x30]
call fcn.00462dc0
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rdx + 0x50]
mov qword [rcx + 0x38], rsi
movzx esi, byte [rdx + 0x70]
mov byte [rcx + 0x40], sil
mov rsi, qword [rdx + 0x58]
mov r8, qword [rdx + 0x60]
mov r9, qword [rdx + 0x68]
mov qword [rcx + 0x50], r8
mov qword [rcx + 0x58], r9
cmp dword [0x00a5a130], 0
jne 0x6b5f4b
mov qword [rcx + 0x48], rsi
jmp 0x6b5f54
lea rdi, [rcx + 0x48]
call fcn.00462e00
mov rsi, qword [rdx + 0x38]
cmp dword [0x00a5a130], 0
nop
jne 0x6b5f68
mov qword [rcx + 0x60], rsi
jmp 0x6b5f71
lea rdi, [rcx + 0x60]
call fcn.00462e00
mov rsi, qword [rdx + 0x78]
cmp dword [0x00a5a130], 0
jne 0x6b5f84
mov qword [rcx + 0x68], rsi
jmp 0x6b5f8d
lea rdi, [rcx + 0x68]
call fcn.00462e00
nop
mov rsi, qword [rdx + 0x28]
cmp rsi, 1
jle 0x6b5fa0
mov edx, 1
jmp 0x6b5fae
jne 0x6b5fac
cmp qword [rdx + 0x30], 1
setge dl
jmp 0x6b5fae
xor edx, edx
mov rsi, qword [rcx]
cmp qword [rcx + 8], 4
jne 0x6b5fc4
cmp dword [rsi], 0x44414548
sete sil
jmp 0x6b5fc6
xor esi, esi
mov byte [rcx + 0x30], sil
jmp 0x6b627f
cmp edx, 0x7ade63e2
jne 0x6b6273
lea rdx, [0x00765c40]
cmp rcx, rdx
jne 0x6b6273
mov rcx, qword [rsp + 0x40]
cmp qword [rcx + 0x58], 0
je 0x6b604e
cmp qword [rcx + 0x40], 0
jne 0x6b604e
movups xmmword [rsp + 0x50], xmm15
mov rax, qword [rcx + 0x58]
call fcn.0040aac0
lea rcx, [0x0070e900]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
lea rax, [0x00785eb8]
mov ebx, 0x2c
lea rcx, [rsp + 0x50]
mov edi, 1
mov rsi, rdi
call fcn.004ced20
mov rcx, rbx
mov rbx, rax
xor eax, eax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rdx, qword [rcx + 8]
mov rsi, qword [rcx]
test rdx, rdx
jne 0x6b6066
lea rsi, [0x007717ad]
mov edx, 3
mov qword [rax + 8], rdx
cmp dword [0x00a5a130], 0
jne 0x6b6078
mov qword [rax], rsi
jmp 0x6b6085
mov rdi, rax
nop dword [rax + rax]
call fcn.00462e00
movzx edx, byte [rcx + 0x78]
mov byte [rax + 0x40], dl
mov rdx, qword [rcx + 0x60]
mov rsi, qword [rcx + 0x68]
mov r8, qword [rcx + 0x70]
mov qword [rax + 0x50], rsi
mov qword [rax + 0x58], r8
lea rdi, [rax + 0x48]
cmp dword [0x00a5a130], 0
jne 0x6b60b3
mov qword [rax + 0x48], rdx
jmp 0x6b60b8
call fcn.00462dc0
mov rdx, qword [rcx + 0x38]
cmp dword [0x00a5a130], 0
jne 0x6b60cb
mov qword [rax + 0x60], rdx
jmp 0x6b60dd
lea rsi, [rax + 0x60]
mov rbx, rdi
mov rdi, rsi
call fcn.00462dc0
mov rdi, rbx
mov qword [rsp + 0x28], rdi
mov rdx, qword [rcx + 0xa8]
cmp dword [0x00a5a130], 0
jne 0x6b60f8
mov qword [rax + 0x68], rdx
jmp 0x6b6105
lea rsi, [rax + 0x68]
mov rdi, rsi
nop
call fcn.00462dc0
mov rdx, qword [rcx + 0x48]
mov qword [rsp + 0x30], rdx
mov rbx, qword [rcx + 0x40]
lea rax, [0x00727ce0]
call fcn.0040aca0
mov rcx, qword [rsp + 0x38]
mov qword [rcx + 0x10], rax
cmp dword [0x00a5a130], 0
jne 0x6b613b
mov rdx, qword [rsp + 0x30]
mov qword [rcx + 0x18], rdx
jmp 0x6b6149
lea rdi, [rcx + 0x18]
mov rdx, qword [rsp + 0x30]
call fcn.00462dc0
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rcx + 0x48]
mov qword [rsp + 0x30], rdx
mov rbx, qword [rcx + 0x40]
lea rax, [0x00727c60]
call fcn.0040aca0
mov rcx, qword [rsp + 0x38]
mov qword [rcx + 0x20], rax
cmp dword [0x00a5a130], 0
jne 0x6b6184
mov rdx, qword [rsp + 0x30]
mov qword [rcx + 0x28], rdx
jmp 0x6b6192
lea rdi, [rcx + 0x28]
mov rdx, qword [rsp + 0x30]
call fcn.00462dc0
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rdx + 0x40]
nop dword [rax + rax]
test rsi, rsi
je 0x6b61c6
je 0x6b61b4
lea r8, [0x00736fe0]
cmp qword [rsi + 8], r8
je 0x6b61c6
mov rdx, qword [rdx + 0x58]
test rdx, rdx
jne 0x6b61c8
mov rdx, 0xffffffffffffffff
jmp 0x6b61c8
xor edx, edx
mov qword [rcx + 0x38], rdx
test rdx, rdx
jge 0x6b61ec
cmp qword [rcx + 0x50], 0
je 0x6b61dc
xor eax, eax
jmp 0x6b61ee
mov rax, rcx
nop
call fcn.006b6400
mov rcx, qword [rsp + 0x38]
jmp 0x6b61ee
xor eax, eax
test al, al
je 0x6b623e
lea rax, [0x007108a0]
call fcn.0040d400
mov qword [rax + 8], 7
lea rcx, [0x0077254c]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x38]
mov qword [rcx + 0x50], 1
mov qword [rcx + 0x58], 1
cmp dword [0x00a5a130], 0
jne 0x6b6234
mov qword [rcx + 0x48], rax
jmp 0x6b623e
mov rdi, qword [rsp + 0x28]
call fcn.00462ca0
cmp qword [rcx + 0x38], 0
je 0x6b626c
mov rax, qword [rcx + 0x10]
mov rbx, qword [rcx + 0x18]
call fcn.006ba800
test al, al
je 0x6b625d
mov rcx, qword [rsp + 0x38]
jmp 0x6b626c
mov rax, qword [rsp + 0x38]
mov byte [rax + 0x88], 1
mov rcx, rax
mov edx, 1
jmp 0x6b627f
mov rcx, rax
xor edx, edx
jmp 0x6b627f
mov rcx, rax
xor edx, edx
cmp byte [rcx + 0x30], 0
je 0x6b62fa
mov qword [rcx + 0x10], 0
cmp dword [0x00a5a130], 0
jne 0x6b62a2
mov qword [rcx + 0x18], 0
nop
jmp 0x6b62ad
lea rdi, [rcx + 0x18]
xor edx, edx
call fcn.00462dc0
mov rdx, qword [rcx + 0x48]
cmp qword [rcx + 0x50], 0
je 0x6b636c
mov rsi, qword [rdx]
cmp qword [rdx + 8], 7
jne 0x6b636c
cmp dword [rsi], 0x6e756863
jne 0x6b636c
cmp word [rsi + 4], 0x656b
nop dword [rax]
jne 0x6b636c
cmp byte [rsi + 6], 0x64
jne 0x6b636c
mov qword [rcx + 0x38], 0xffffffffffffffff
jmp 0x6b636c
test dl, dl
je 0x6b6305
cmp qword [rcx + 0x10], 0
jne 0x6b6328
movups xmmword [rcx + 0x50], xmm15
cmp dword [0x00a5a130], 0
jne 0x6b631d
mov qword [rcx + 0x48], 0
jmp 0x6b6328
lea rdi, [rcx + 0x48]
xor edx, edx
call fcn.00462dc0
mov rdx, qword [rcx + 0x48]
cmp qword [rcx + 0x50], 0
je 0x6b635d
mov rsi, qword [rdx]
cmp qword [rdx + 8], 7
jne 0x6b635d
cmp dword [rsi], 0x6e756863
jne 0x6b635d
cmp word [rsi + 4], 0x656b
jne 0x6b635d
cmp byte [rsi + 6], 0x64
jne 0x6b635d
mov qword [rcx + 0x38], 0xffffffffffffffff
jmp 0x6b636c
cmp qword [rcx + 0x10], 0
jne 0x6b636c
mov qword [rcx + 0x38], 0
mov rdx, qword [rcx + 0x48]
cmp qword [rcx + 0x50], 0
je 0x6b6398
mov rsi, qword [rdx]
cmp qword [rdx + 8], 7
nop
jne 0x6b6398
cmp dword [rsi], 0x6e756863
jne 0x6b6398
cmp word [rsi + 4], 0x656b
jne 0x6b6398
cmp byte [rsi + 6], 0x64
je 0x6b63b7
cmp dword [0x00a5a130], 0
nop
jne 0x6b63ac
mov qword [rcx + 0x68], 0
jmp 0x6b63b7
lea rdi, [rcx + 0x68]
xor edx, edx
call fcn.00462dc0
mov rax, rcx
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00460a60
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.006b5de0