Function at 0x1400092e0
Capabilities:
Gather firefox profile information

Disassembly:
push rbp
mov eax, 0x1560
call fcn.14012a4d0
sub rsp, rax
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x14d8], 0xfffffffffffffffe
mov qword [rbp + 0x38], rcx
mov qword [rbp + 0x40], rcx
mov byte [rbp + 0x14d7], 0
mov byte [rbp + 0x14d5], 0
mov byte [rbp + 0x14d4], 0
mov byte [rbp + 0x14d6], 0
mov byte [rbp + 0x14d7], 1
lea rcx, [rbp + 0x48]
call fcn.1400033b0
lea rax, [0x14012e360]
mov qword [rbp + 0x160], rax
mov qword [rbp + 0x168], 0
mov rdx, qword [rbp + 0x160]
mov r8, qword [rbp + 0x168]
lea rcx, [rbp + 0xe0]
mov r9b, 1
call fcn.14003d300
jmp 0x14000936d
lea r8, str.srcmain.rs
lea rcx, [rbp + 0x60]
lea rdx, [rbp + 0xe0]
call fcn.1400053e0
jmp 0x140009386
movups xmm0, xmmword [rbp + 0x80]
movups xmm1, xmmword [rbp + 0x90]
movaps xmmword [rbp + 0x180], xmm1
movaps xmmword [rbp + 0x170], xmm0
lea rcx, [rbp + 0x170]
call fcn.140008d40
mov qword [rbp + 0x28], rdx
mov qword [rbp + 0x30], rax
jmp 0x1400093b8
mov r8, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x30]
mov rax, rsp
mov qword [rax + 0x20], 7
lea r9, str.MozillaFirefoxProfiles
lea rcx, [rbp + 0x1d8]
call fcn.14003c770
jmp 0x1400093e0
lea rcx, [rbp + 0x1d8]
call fcn.140008d40
mov qword [rbp + 0x18], rdx
mov qword [rbp + 0x20], rax
jmp 0x1400093f6
mov r8, qword [rbp + 0x18]
mov rdx, qword [rbp + 0x20]
mov rax, rsp
mov qword [rax + 0x20], 7
lea r9, [0x14012e3b7]
lea rcx, [rbp + 0x1b8]
call fcn.14003c770
jmp 0x14000941e
lea rcx, [rbp + 0x1b8]
call fcn.140008d40
mov qword [rbp + 8], rdx
mov qword [rbp + 0x10], rax
jmp 0x140009434
mov r8, qword [rbp + 8]
mov rdx, qword [rbp + 0x10]
mov rax, rsp
mov qword [rax + 0x20], 8
lea r9, [0x14012e3be]
lea rcx, [rbp + 0x198]
call fcn.14003c770
jmp 0x14000945c
mov byte [rbp + 0x14d5], 1
lea rcx, [rbp + 0x1b8]
call fcn.14003da60
jmp 0x140009471
lea rcx, [rbp + 0x1d8]
call fcn.14003da60
jmp 0x14000947f
lea rcx, [rbp + 0x198]
call fcn.140008d40
mov qword [rbp - 8], rdx
mov qword [rbp], rax
jmp 0x140009495
mov rdx, qword [rbp - 8]
mov rcx, qword [rbp]
call fcn.140046600
mov byte [rbp - 9], al
jmp 0x1400094a7
mov al, byte [rbp - 9]
test al, 1
jne 0x1400094e4
jmp 0x1400094b0
mov rax, qword [rbp + 0x38]
mov byte [rbp + 0x14d7], 0
mov rcx, qword [rbp + 0x48]
mov qword [rax], rcx
mov rcx, qword [rbp + 0x50]
mov qword [rax + 8], rcx
mov rcx, qword [rbp + 0x58]
mov qword [rax + 0x10], rcx
test byte [rbp + 0x14d5], 1
jne 0x1400095e1
jmp 0x1400095cc
mov byte [rbp + 0x14d5], 0
movups xmm0, xmmword [rbp + 0x198]
movups xmm1, xmmword [rbp + 0x1a8]
movaps xmmword [rbp + 0x940], xmm1
movaps xmmword [rbp + 0x930], xmm0
lea rcx, [rbp + 0x6c8]
lea rdx, [rbp + 0x930]
call fcn.140008fd0
jmp 0x14000951c
lea r8, str.srcmain.rs
lea rcx, [rbp + 0x460]
lea rdx, [rbp + 0x6c8]
call fcn.140002880
jmp 0x140009538
lea rcx, [rbp + 0x1f8]
lea rdx, [rbp + 0x460]
call fcn.140009080
jmp 0x14000954d
lea rcx, [rbp + 0x958]
lea rdx, [rbp + 0x1f8]
mov r8d, 0x268
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbp + 0xbc0]
lea rdx, [rbp + 0x958]
call fcn.140041c80
jmp 0x14000957b
cmp qword [rbp + 0xbc0], 0
jne 0x140009596
lea rcx, [rbp + 0x958]
call fcn.140006df0
jmp 0x1400094b0
lea rdx, [rbp + 0xbc8]
lea rcx, [rbp + 0xe20]
mov qword [rbp - 0x18], rcx
mov r8d, 0x258
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rbp - 0x18]
lea r8, str.srcmain.rs
lea rcx, [rbp + 0x10b8]
call fcn.140002610
jmp 0x14000962a
mov byte [rbp + 0x14d5], 0
lea rcx, [rbp + 0x170]
call fcn.14003da60
jmp 0x1400095ef
lea rcx, [rbp + 0x198]
call fcn.14003da60
jmp 0x1400095cc
lea rcx, [rbp + 0x60]
call fcn.14003da60
jmp 0x1400095fa
lea rcx, [rbp + 0xa0]
call fcn.14003da60
jmp 0x140009608
lea rcx, [rbp + 0xc0]
call fcn.14003da60
jmp 0x140009616
mov rax, qword [rbp + 0x40]
mov byte [rbp + 0x14d7], 0
add rsp, 0x1560
pop rbp
ret
lea rcx, [rbp + 0x1098]
lea rdx, [rbp + 0x10b8]
call fcn.140041d10
jmp 0x14000963f
lea rcx, [rbp + 0x1098]
call fcn.140008d40
mov qword [rbp - 0x28], rdx
mov qword [rbp - 0x20], rax
jmp 0x140009655
mov r8, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
mov rax, rsp
mov qword [rax + 0x20], 0xe
lea r9, str.cookies.sqlite
lea rcx, [rbp + 0x1078]
call fcn.14003c770
jmp 0x14000967d
mov byte [rbp + 0x14d4], 1
lea rcx, [rbp + 0x1098]
call fcn.14003da60
jmp 0x140009692
lea rcx, [rbp + 0x10b8]
call fcn.140006e10
jmp 0x1400096a0
lea rcx, [rbp + 0x1078]
call fcn.140008d40
mov qword [rbp - 0x38], rdx
mov qword [rbp - 0x30], rax
jmp 0x1400096b6
mov rdx, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x30]
call fcn.140008c80
mov byte [rbp - 0x39], al
jmp 0x1400096c8
mov al, byte [rbp - 0x39]
test al, 1
jne 0x1400096e3
jmp 0x1400096d1
test byte [rbp + 0x14d4], 1
jne 0x14000993c
jmp 0x140009930
mov byte [rbp + 0x14d4], 0
movups xmm0, xmmword [rbp + 0x1078]
movups xmm1, xmmword [rbp + 0x1088]
movaps xmmword [rbp + 0x1360], xmm1
movaps xmmword [rbp + 0x1350], xmm0
lea rcx, [rbp + 0x1328]
lea rdx, [rbp + 0x1350]
call fcn.1400088c0
jmp 0x14000971b
lea r8, str.srcmain.rs
lea rcx, [rbp + 0x1310]
lea rdx, [rbp + 0x1328]
call fcn.1400029f0
jmp 0x140009737
lea r8, str.SELECT_host__name__value_FROM_moz_cookies
lea rcx, [rbp + 0x1380]
lea rdx, [rbp + 0x1310]
mov r9d, 0x29
call fcn.140013190
jmp 0x140009759
lea rdx, str.srcmain.rs
lea rcx, [rbp + 0x1380]
call fcn.1400024b0
mov qword [rbp - 0x50], rdx
mov qword [rbp - 0x48], rax
jmp 0x140009776
mov rax, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x48]
mov qword [rbp + 0x1370], rcx
mov qword [rbp + 0x1378], rax
lea rcx, [rbp + 0x13b0]
lea rdx, [rbp + 0x1370]
call fcn.140027a10
jmp 0x1400097a1
lea rdx, str.srcmain.rs
lea rcx, [rbp + 0x13b0]
call fcn.140002930
mov byte [rbp - 0x51], al
jmp 0x1400097b9
mov al, byte [rbp - 0x51]
and al, 1
mov byte [rbp + 0x13af], al
mov al, byte [rbp + 0x13af]
and al, 1
movzx eax, al
cmp rax, 0
jne 0x1400097e3
lea rcx, [rbp + 0x13d8]
call fcn.1400033d0
jmp 0x1400097f4
lea rcx, [rbp + 0x1370]
call fcn.140006ef0
jmp 0x14000991f
mov byte [rbp + 0x14d6], 1
xor eax, eax
mov r8d, eax
lea rcx, [rbp + 0x1408]
lea rdx, [rbp + 0x1370]
call fcn.140014580
jmp 0x140009815
lea r8, str.srcmain.rs
lea rcx, [rbp + 0x13f0]
lea rdx, [rbp + 0x1408]
call fcn.1400026c0
jmp 0x140009831
lea rcx, [rbp + 0x13d8]
lea rdx, [rbp + 0x13f0]
call fcn.140003650
jmp 0x140009846
lea rcx, [rbp + 0x1448]
lea rdx, [rbp + 0x1370]
mov r8d, 1
call fcn.140014580
jmp 0x140009861
lea r8, str.srcmain.rs
lea rcx, [rbp + 0x1430]
lea rdx, [rbp + 0x1448]
call fcn.1400026c0
jmp 0x14000987d
lea rcx, [rbp + 0x13d8]
lea rdx, [rbp + 0x1430]
call fcn.140003650
jmp 0x140009892
lea rcx, [rbp + 0x1488]
lea rdx, [rbp + 0x1370]
mov r8d, 2
call fcn.140014580
jmp 0x1400098ad
lea r8, str.srcmain.rs
lea rcx, [rbp + 0x1470]
lea rdx, [rbp + 0x1488]
call fcn.1400026c0
jmp 0x1400098c9
lea rcx, [rbp + 0x13d8]
lea rdx, [rbp + 0x1470]
call fcn.140003650
jmp 0x1400098de
mov byte [rbp + 0x14d6], 0
mov rax, qword [rbp + 0x13e8]
mov qword [rbp + 0x14c0], rax
movups xmm0, xmmword [rbp + 0x13d8]
movaps xmmword [rbp + 0x14b0], xmm0
lea rcx, [rbp + 0x48]
lea rdx, [rbp + 0x14b0]
call fcn.140003740
jmp 0x140009913
mov byte [rbp + 0x14d6], 0
jmp 0x14000978c
lea rcx, [rbp + 0x1310]
call fcn.140006f20
jmp 0x1400096d1
mov byte [rbp + 0x14d4], 0
jmp 0x140009566
lea rcx, [rbp + 0x1078]
call fcn.14003da60
jmp 0x140009930