Function at 0x4d9e80
Capabilities:
Gather firefox profile information
Reference sql statements

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x4da6be
sub rsp, 0xb8
mov qword [rsp + 0xb0], rbp
lea rbp, [rsp + 0xb0]
mov qword [rsp + 0xc8], rbx
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0x90], rcx
mov rax, rbx
mov rbx, rcx
mov rcx, rdi
xor edi, edi
nop
call fcn.004d9960
test rax, rax
jne 0x4da1f9
test rcx, rcx
jne 0x4da108
mov qword [rsp + 0x98], rsi
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x90], r8
nop
nop
mov rcx, r9
and r9d, 0x1f
cmp r9, 0x11
je 0x4d9f2c
nop dword [rax + rax]
cmp r9, 0x14
je 0x4d9f38
cmp r9, 0x17
jne 0x4d9f63
mov qword [rsp + 0x60], r9
xor eax, eax
jmp 0x4da293
mov rax, rsi
mov rbx, r8
nop
call fcn.004b96a0
test rax, rax
je 0x4da039
mov rcx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x98]
mov r8, qword [rsp + 0x90]
mov rax, rsi
mov rbx, r8
call fcn.004baf40
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x80], rbx
lea rax, [0x00752240]
call fcn.0040d400
mov qword [rax + 8], 5
lea rdx, [0x00771d07]
mov qword [rax], rdx
mov rdx, qword [rsp + 0x88]
mov qword [rax + 0x10], rdx
cmp dword [0x00a5a130], 0
jne 0x4d9fbf
mov rdx, qword [rsp + 0x80]
mov qword [rax + 0x18], rdx
jmp 0x4d9fd0
lea rdi, [rax + 0x18]
mov rdx, qword [rsp + 0x80]
call fcn.00462dc0
mov rdx, qword [rsp + 0xc0]
mov rsi, qword [rdx + 0x18]
mov qword [rax + 0x20], rsi
cmp qword [rdx + 0x70], 0
jne 0x4da01d
lea rbx, [0x008152c0]
mov rcx, rax
mov rax, rdx
call fcn.004d91a0
mov rdx, qword [rsp + 0xc0]
mov qword [rdx + 0x70], rax
cmp dword [0x00a5a130], 0
jne 0x4da014
mov qword [rdx + 0x78], rbx
jmp 0x4da01d
lea rdi, [rdx + 0x78]
call fcn.00462de0
mov rax, rdx
call fcn.004d92e0
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
mov rax, qword [rsp + 0xc0]
call fcn.004de4c0
call fcn.0040abe0
nop
cmp byte [0x00a03fa0], 0
je 0x4da087
lea rdx, [0x0070b300]
mov qword [0x00a03fa8], rdx
cmp dword [0x00a5a130], 0
jne 0x4da075
mov qword [0x00a03fb0], rax
jmp 0x4da08e
lea rdi, [0x00a03fb0]
nop dword [rax]
call fcn.00462ca0
jmp 0x4da08e
lea rdx, [0x0070b300]
mov qword [rsp + 0xa0], rdx
mov qword [rsp + 0xa8], rax
mov rdx, qword [rsp + 0xa0]
test rdx, rdx
je 0x4da0ca
movzx r9d, byte [rdx + 0x17]
mov r10d, r9d
and r9d, 0x1f
mov r11, r9
bts r9, 7
test r10b, 0x20
cmove r11, r9
nop
jmp 0x4da0d1
xor r11d, r11d
xor edx, edx
xor eax, eax
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
mov rdi, rdx
mov rsi, rax
mov r8, r11
mov rax, qword [rsp + 0x98]
call fcn.004b9a00
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x60]
nop dword [rax]
call fcn.004baf40
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x80], rbx
lea rax, [0x00752240]
nop dword [rax]
call fcn.0040d400
mov qword [rax + 8], 5
lea rdx, [0x00771d07]
mov qword [rax], rdx
mov rdx, qword [rsp + 0x88]
mov qword [rax + 0x10], rdx
cmp dword [0x00a5a130], 0
jne 0x4da17a
mov rdx, qword [rsp + 0x80]
mov qword [rax + 0x18], rdx
jmp 0x4da18b
lea rdi, [rax + 0x18]
mov rdx, qword [rsp + 0x80]
call fcn.00462dc0
mov rdx, qword [rsp + 0xc0]
mov rsi, qword [rdx + 0x18]
mov qword [rax + 0x20], rsi
cmp qword [rdx + 0x70], 0
jne 0x4da1d8
lea rbx, [0x008152c0]
mov rcx, rax
mov rax, rdx
call fcn.004d91a0
mov rdx, qword [rsp + 0xc0]
mov qword [rdx + 0x70], rax
cmp dword [0x00a5a130], 0
jne 0x4da1cf
mov qword [rdx + 0x78], rbx
jmp 0x4da1d8
lea rdi, [rdx + 0x78]
call fcn.00462de0
mov rax, rdx
nop dword [rax + rax]
call fcn.004d92e0
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x30], rax
nop
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x58], rcx
call fcn.004d92e0
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rcx + 0x10]
mov rbx, qword [rcx]
mov rcx, qword [rcx + 0x18]
cmp rdx, rcx
jb 0x4da28b
mov rsi, qword [rsp + 0x58]
lea rax, [rsi - 1]
nop dword [rax + rax]
cmp rcx, rax
jb 0x4da286
mov r8, qword [rsp + 0x30]
mov r8, qword [r8 + 0x18]
sub rdx, rsi
lea rdi, [rdx + 1]
mov rdx, rdi
neg rdi
sar rdi, 0x3f
and rax, rdi
sub rcx, rsi
add rbx, rax
inc rcx
mov rax, qword [rsp + 0x68]
mov rdi, rdx
call r8
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
call fcn.00463200
call fcn.004631c0
mov rax, rdx
mov qword [rsp + 0x38], rax
mov ebx, 9
mov rax, qword [rsp + 0xc0]
call fcn.004d9460
mov rcx, qword [rsp + 0xc0]
cmp qword [rcx + 0x20], 8
je 0x4da52f
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x17
jne 0x4da452
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
call fcn.004b83e0
mov rdx, qword [rsp + 0x38]
cmp rax, rdx
jg 0x4da408
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
call fcn.004b83e0
mov qword [rsp + 0x58], rax
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x98]
call fcn.004b83e0
mov qword [rsp + 0x50], rax
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x98]
call fcn.004baf40
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x80], rbx
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
call fcn.004b8b60
mov rdx, qword [rsp + 0x50]
mov rsi, rdx
shr rdx, 0x3f
add rdx, rsi
sar rdx, 1
mov rsi, qword [rsp + 0x58]
lea rdi, [rdx + rsi]
cmp rdi, 4
mov edx, 4
cmovl rdi, rdx
mov rbx, qword [rsp + 0x80]
mov rcx, rax
mov rax, qword [rsp + 0x88]
call fcn.004bb800
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x48], rcx
mov rdi, qword [rsp + 0x98]
mov rsi, qword [rsp + 0x90]
mov r8, qword [rsp + 0x40]
call fcn.004bb3c0
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x70]
mov r8, qword [rsp + 0x48]
call fcn.004b9a00
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
nop dword [rax]
call fcn.004b8b60
mov rdx, qword [rsp + 0x38]
cmp rax, rdx
jg 0x4da452
lea rdi, [rdx + 1]
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
call fcn.004ba340
mov rdx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
call fcn.004b8b60
mov rdi, qword [rsp + 0x38]
cmp rax, rdi
jle 0x4da4ad
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
call fcn.004b8800
mov rdi, rcx
mov rcx, rbx
mov rbx, rax
mov rax, qword [rsp + 0xc0]
call fcn.004d9700
test rax, rax
je 0x4da4ca
jmp 0x4da50f
mov rax, qword [rsp + 0xc0]
xor ebx, ebx
xor ecx, ecx
xor edi, edi
nop dword [rax + rax]
call fcn.004d9700
test rax, rax
jne 0x4da51f
mov rax, qword [rsp + 0xc0]
cmp qword [rax + 0x20], 9
jne 0x4da4ed
mov ebx, 9
nop
call fcn.004d9460
mov rax, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0x38]
inc rdx
mov rsi, qword [rax + 0x20]
cmp rsi, 8
je 0x4da534
nop
cmp rsi, 7
je 0x4da290
jmp 0x4da6aa
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x38], rdx
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
call fcn.004b8b60
mov rdi, qword [rsp + 0x38]
cmp rax, rdi
jle 0x4da5cd
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x11
jne 0x4da5ac
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
nop dword [rax]
call fcn.004baf40
mov rdx, qword [rax + 0x48]
mov rax, rbx
call rdx
call fcn.004bbaa0
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x48], rcx
mov rdx, qword [rsp + 0x38]
jmp 0x4da678
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
call fcn.004ba340
mov rax, qword [rsp + 0x38]
jmp 0x4da63c
test rdi, rdi
jne 0x4da628
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x17
jne 0x4da628
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
call fcn.004baf40
xor ecx, ecx
mov rdi, rcx
nop dword [rax]
call fcn.004bb800
mov rdi, rax
mov rsi, rbx
mov r8, rcx
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
call fcn.004b9a00
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
mov rdi, rax
nop
jmp 0x4da5cd
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
call fcn.004b8800
mov rdi, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x70]
mov r8, qword [rsp + 0x48]
call fcn.004b9a00
mov rdx, qword [rsp + 0x38]
inc rdx
mov qword [rsp + 0x38], rdx
mov rax, qword [rsp + 0x98]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x40]
call fcn.004b8b60
mov rdi, qword [rsp + 0x38]
nop dword [rax]
cmp rax, rdi
jg 0x4da642
mov rax, rdi
jmp 0x4da63c
lea rax, [0x0070f0c0]
lea rbx, [0x00814430]
call fcn.004356e0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
call fcn.00460a60
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
jmp fcn.004d9e80