Function at 0x44eca0
Capabilities:
Gather firefox profile information
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x130]
cmp r12, qword [r14 + 0x10]
jbe 0x44f04f
sub rsp, 0x1b0
mov qword [rsp + 0x1a8], rbp
lea rbp, [rsp + 0x1a8]
cmp qword [rax + 0x70], 0
jne 0x44f03d
mov rcx, qword [rax + 8]
mov rdx, qword [rax]
nop dword [rax + rax]
test rdx, rdx
je 0x44f02c
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x78], rdx
mov rsi, qword [r14 + 0x30]
mov rdi, qword [rax + 0x38]
mov r8, rcx
sub rcx, rdi
mov qword [rsp + 0x50], rcx
mov rsi, qword [rsi + 0xa0]
mov rdi, r8
sub r8, rdx
mov qword [rsp + 0x70], r8
mov r9, rbx
sub rbx, r8
test rsi, rsi
je 0x44ed6d
mov r10, qword [rsi + 0x22b0]
lea r11, [r10 + rbx]
mov qword [rsi + 0x22b0], r11
lea rbx, [r10 + rbx]
lea rbx, [rbx + 0x1fff]
cmp rbx, 0x3fff
jb 0x44ed79
lea rbx, [0x00bc2d88]
lock xadd qword [rbx], r11
mov qword [rsi + 0x22b0], 0
jmp 0x44ed79
lea rsi, [0x00bc2d88]
lock xadd qword [rsi], rbx
mov qword [rsp + 0x68], r9
mov rax, r9
call fcn.0044dec0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x58], rbx
lea rdi, [rsp + 0x88]
lea rdi, [rdi - 0x20]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.004675e6
mov rbp, qword [rbp]
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x88], rcx
mov rdx, qword [rsp + 0x80]
mov qword [rsp + 0x90], rdx
mov rsi, rbx
sub rbx, rdx
mov qword [rsp + 0x98], rbx
mov rbx, qword [rsp + 0x1b8]
cmp byte [rbx + 0xb8], 0
je 0x44edfe
mov rdi, qword [rbx + 0x148]
xor r8d, r8d
jmp 0x44efcc
mov rdi, qword [rsp + 0x68]
mov r8, qword [rsp + 0x70]
cmp rdi, r8
jae 0x44ee1d
mov dil, byte [rbx + 0xb9]
test dil, dil
jne 0x44efb7
nop
mov rdi, qword [rbx + 0x148]
jmp 0x44ee2b
mov rdi, qword [rdi + 0x40]
test rdi, rdi
je 0x44ee5b
nop
mov r8, qword [rdi + 0x18]
cmp qword [rsp + 0x88], r8
ja 0x44ee27
nop
cmp qword [rsp + 0x90], r8
jbe 0x44ee27
mov r9, qword [rsp + 0x98]
add r8, r9
mov qword [rdi + 0x18], r8
jmp 0x44ee27
mov rdi, qword [rsp + 0x50]
mov rax, rsi
sub rax, rdi
mov rbx, rdx
sub rbx, rdi
mov rcx, rdi
call fcn.00467d00
nop
nop
mov rax, qword [rsp + 0x1b8]
mov rdx, qword [rax + 0x50]
cmp qword [rsp + 0x88], rdx
ja 0x44eea5
cmp qword [rsp + 0x90], rdx
jbe 0x44eea5
mov rcx, qword [rsp + 0x98]
add rcx, rdx
mov qword [rax + 0x50], rcx
nop
mov rcx, qword [rax + 0x68]
cmp qword [rsp + 0x88], rcx
ja 0x44eecd
cmp qword [rsp + 0x90], rcx
jbe 0x44eecd
mov rdx, qword [rsp + 0x98]
add rcx, rdx
mov qword [rax + 0x68], rcx
lea rbx, [rsp + 0x88]
call fcn.0044ea20
nop
nop
mov rdi, qword [rsp + 0x1b8]
mov rcx, qword [rdi + 0x20]
cmp qword [rsp + 0x88], rcx
ja 0x44ef0b
cmp qword [rsp + 0x90], rcx
jbe 0x44ef0b
mov rdx, qword [rsp + 0x98]
add rdx, rcx
mov qword [rdi + 0x20], rdx
mov rdx, qword [rsp + 0x1a0]
test rdx, rdx
je 0x44ef2b
mov r12, qword [rsp + 0x98]
add rdx, r12
mov qword [rsp + 0x1a0], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rdi], rdx
mov r12, qword [rsp + 0x58]
mov qword [rdi + 8], r12
add rdx, 0x13a0
mov qword [rdi + 0x10], rdx
mov rdx, qword [rsp + 0x50]
sub r12, rdx
mov qword [rdi + 0x38], r12
mov rdx, qword [rsp + 0x98]
add qword [rdi + 0x80], rdx
mov qword [rsp], 0
mov rax, 0xffffffffffffffff
mov rbx, rax
xor ecx, ecx
xor esi, esi
xor r8d, r8d
mov r9d, 0x7fffffff
lea r10, [0x009095e0]
lea r11, [rsp + 0x88]
call fcn.00459460
mov rax, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x80]
call fcn.0044e1a0
mov rbp, qword [rsp + 0x1a8]
add rsp, 0x1b0
ret
lea rax, [0x008e6820]
mov ebx, 0x2f
call fcn.00439600
mov rdi, qword [rdi + 0x40]
test rdi, rdi
je 0x44eff5
mov r9, qword [rdi + 0x50]
mov r10, qword [rdi + 0x18]
movzx r9d, word [r9 + 0x18]
add r9, r10
cmp rcx, r9
ja 0x44efc8
cmp rdx, r9
jbe 0x44efc8
cmp r8, r9
jae 0x44efc8
mov r8, r9
jmp 0x44efc8
mov qword [rsp + 0x1a0], r8
mov rax, rbx
mov rbx, qword [rsp + 0x50]
lea rcx, [rsp + 0x88]
call fcn.0044eb20
mov rdi, qword [rsp + 0x50]
sub rdi, rax
mov rdx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x58]
jmp 0x44ee60
lea rax, [0x008d680f]
mov ebx, 0xd
call fcn.00439600
lea rax, [0x008e3739]
mov ebx, 0x27
call fcn.00439600
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00464c60
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.0044eca0