Function at 0x41af20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x4b16b6
mov eax, dword fs:[0]
push eax
sub esp, 0x374
mov eax, dword [0x4d25ac]
xor eax, esp
mov dword [esp + 0x370], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4d25ac]
xor eax, esp
push eax
lea eax, [esp + 0x388]
mov dword fs:[0], eax
xor eax, eax
mov word [esp + 0x3c], ax
mov ebp, 7
xor ebx, ebx
push 0x30
mov eax, str.CIGearedToolbarHelper_HandleChromeSearchProvider
lea esi, [esp + 0x3c]
mov edi, ecx
mov dword [esp + 0x54], ebp
mov dword [esp + 0x50], ebx
call fcn.00401f30
mov ecx, esi
push ecx
mov dword [esp + 0x394], ebx
call fcn.00403780
add esp, 4
mov dword [esp + 0x390], 0xffffffff
cmp dword [esp + 0x50], 8
jb 0x41afb4
mov edx, dword [esp + 0x3c]
push edx
call fcn.00491101
add esp, 4
push 1
lea eax, [esp + 0x138]
push eax
call fcn.00489e50
sub esp, 0x1c
mov dword [esp + 0x3ac], 1
mov esi, esp
mov dword [esp + 0xf8], esp
xor ecx, ecx
mov dword [esi + 0x18], ebp
mov dword [esi + 0x14], ebx
push ebx
mov eax, 0x4b49f8
mov word [esi + 4], cx
call fcn.00401f30
sub esp, 0x1c
mov byte [esp + 0x3c8], 2
mov esi, esp
mov dword [esp + 0x110], esp
xor edx, edx
mov dword [esi + 0x18], ebp
mov dword [esi + 0x14], ebx
push ebx
mov eax, 0x4b49f8
mov word [esi + 4], dx
call fcn.00401f30
sub esp, 0x1c
mov esi, esp
mov byte [esp + 0x3e4], 3
xor eax, eax
mov dword [esi + 0x18], ebp
mov dword [esi + 0x14], ebx
mov dword [esp + 0x120], esp
mov word [esi + 4], ax
push ebx
mov eax, 0x4b49f8
call fcn.00401f30
sub esp, 0x1c
mov byte [esp + 0x400], 4
mov ecx, esp
mov dword [esp + 0x138], esp
push 0xffffffffffffffff
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push ebx
mov eax, edi
mov word [ecx + 4], dx
call fcn.00401c20
sub esp, 0x1c
mov esi, esp
mov byte [esp + 0x41c], 5
xor eax, eax
mov dword [esi + 0x18], ebp
mov dword [esi + 0x14], ebx
mov dword [esp + 0x150], esp
mov word [esi + 4], ax
push ebx
mov eax, 0x4b49f8
call fcn.00401f30
sub esp, 0x1c
mov byte [esp + 0x438], 6
mov esi, esp
mov dword [esp + 0x17c], esp
xor ecx, ecx
mov dword [esi + 0x18], ebp
mov dword [esi + 0x14], ebx
push ebx
mov eax, 0x4b49f8
mov word [esi + 4], cx
call fcn.00401f30
sub esp, 0x1c
mov byte [esp + 0x454], 7
mov dword [esp + 0x194], esp
mov esi, esp
xor edx, edx
mov dword [esi + 0x18], ebp
mov dword [esi + 0x14], ebx
push ebx
mov eax, 0x4b49f8
mov word [esi + 4], dx
call fcn.00401f30
lea esi, [esp + 0x340]
mov byte [esp + 0x454], 1
call fcn.004895d0
lea eax, [esp + 0x17]
push eax
lea ecx, [esp + 0x1a]
push ecx
mov edx, esi
push edx
lea ecx, [esp + 0x140]
mov byte [esp + 0x39c], 8
call fcn.0048aa20
xor eax, eax
mov word [esp + 0x3c], ax
push ebx
mov eax, 0x4b49f8
lea esi, [esp + 0x3c]
mov dword [esp + 0x54], ebp
mov dword [esp + 0x50], ebx
call fcn.00401f30
mov byte [esp + 0x390], 9
xor ecx, ecx
push 0xc
mov eax, str.PARTNER_NAME
lea esi, [esp + 0xac]
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xc0], ebx
mov word [esp + 0xb0], cx
call fcn.00401f30
mov byte [esp + 0x390], 0xa
xor edx, edx
push ebp
mov eax, str.General
lea esi, [esp + 0x74]
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x88], ebx
mov word [esp + 0x78], dx
call fcn.00401f30
lea eax, [esp + 0x38]
mov ecx, esi
push eax
push ecx
lea esi, [esp + 0xb0]
lea ecx, [esp + 0xe8]
mov byte [esp + 0x398], 0xb
call fcn.00403f30
add esp, 8
mov edi, 8
cmp dword [esp + 0x88], edi
jb 0x41b1e5
mov edx, dword [esp + 0x74]
push edx
call fcn.00491101
add esp, 4
xor eax, eax
mov dword [esp + 0x88], ebp
mov dword [esp + 0x84], ebx
mov word [esp + 0x74], ax
cmp dword [esp + 0xc0], edi
jb 0x41b213
mov ecx, dword [esp + 0xac]
push ecx
call fcn.00491101
add esp, 4
xor edx, edx
mov dword [esp + 0xc0], ebp
mov dword [esp + 0xbc], ebx
mov word [esp + 0xac], dx
mov byte [esp + 0x390], 0xf
cmp dword [esp + 0x50], edi
jb 0x41b246
mov eax, dword [esp + 0x3c]
push eax
call fcn.00491101
add esp, 4
xor ecx, ecx
mov dword [esp + 0x50], ebp
mov dword [esp + 0x4c], ebx
mov word [esp + 0x3c], cx
mov eax, str.True
cmp byte [esp + 0x16], bl
jne 0x41b265
mov eax, str.False
xor edx, edx
mov ecx, eax
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x68], ebx
mov word [esp + 0x58], dx
lea esi, [ecx + 2]
lea esp, [esp]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x41b280
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [esp + 0x58]
call fcn.00401f30
mov byte [esp + 0x390], 0x10
xor eax, eax
mov word [esp + 0x1c], ax
push 6
mov eax, str._ch_sp
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
call fcn.00401f30
push 2
lea ecx, [esp + 0x58]
push ecx
lea edx, [esp + 0xe8]
push edx
mov ecx, esi
mov byte [esp + 0x39c], 0x11
call fcn.00418440
add esp, 0xc
cmp dword [esp + 0x30], edi
jb 0x41b2f4
mov eax, dword [esp + 0x1c]
push eax
call fcn.00491101
add esp, 4
xor ecx, ecx
mov byte [esp + 0x390], 0xf
mov dword [esp + 0x30], ebp
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], cx
cmp dword [esp + 0x6c], edi
jb 0x41b31e
mov edx, dword [esp + 0x58]
push edx
call fcn.00491101
add esp, 4
mov eax, str.True
cmp byte [esp + 0x17], bl
jne 0x41b32e
mov eax, str.False
xor ecx, ecx
mov word [esp + 0x58], cx
mov ecx, eax
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x68], ebx
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x41b342
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [esp + 0x58]
call fcn.00401f30
mov byte [esp + 0x390], 0x12
xor edx, edx
push ebp
mov eax, str._ch_dsp
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], dx
call fcn.00401f30
push 2
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0xe8]
push ecx
mov ecx, esi
mov byte [esp + 0x39c], 0x13
call fcn.00418440
add esp, 0xc
cmp dword [esp + 0x30], edi
jb 0x41b3b5
mov edx, dword [esp + 0x1c]
push edx
call fcn.00491101
add esp, 4
xor eax, eax
mov byte [esp + 0x390], 0xf
mov dword [esp + 0x30], ebp
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], ax
cmp dword [esp + 0x6c], edi
jb 0x41b3df
mov ecx, dword [esp + 0x58]
push ecx
call fcn.00491101
add esp, 4
cmp byte [esp + 0x16], bl
je 0x41b3f9
lea edx, [esp + 0x27c]
push edx
lea ecx, [esp + 0x138]
call fcn.0048a620
xor eax, eax
mov word [esp + 0x90], ax
push ebx
mov eax, 0x4b49f8
lea esi, [esp + 0x90]
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xa4], ebx
call fcn.00401f30
mov byte [esp + 0x390], 0x14
xor ecx, ecx
push 0x14
mov eax, str.Installation_DSP_Url
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], cx
call fcn.00401f30
lea edx, [esp + 0x8c]
push edx
mov edi, esi
lea ecx, [esp + 0x11c]
mov byte [esp + 0x394], 0x15
call fcn.00403e50
add esp, 4
mov esi, 8
cmp dword [esp + 0x30], esi
jb 0x41b483
mov eax, dword [esp + 0x1c]
push eax
call fcn.00491101
add esp, 4
xor ecx, ecx
mov dword [esp + 0x30], ebp
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], cx
mov byte [esp + 0x390], 0x18
cmp dword [esp + 0xa4], esi
jb 0x41b4b3
mov edx, dword [esp + 0x90]
push edx
call fcn.00491101
add esp, 4
lea ecx, [esp + 0xe0]
xor eax, eax
push ecx
lea ecx, [esp + 0x11c]
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xa4], ebx
mov word [esp + 0x94], ax
call fcn.00406170
add esp, 4
xor edx, edx
push ebx
mov eax, 0x4b49f8
lea esi, [esp + 0xac]
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xc0], ebx
mov word [esp + 0xb0], dx
call fcn.00401f30
mov byte [esp + 0x390], 0x19
xor eax, eax
mov word [esp + 0x3c], ax
push 0x1f
mov eax, str.Installation_DSP_SuggestionsURL
lea esi, [esp + 0x3c]
mov dword [esp + 0x54], ebp
mov dword [esp + 0x50], ebx
call fcn.00401f30
lea ecx, [esp + 0xa8]
push ecx
mov edi, esi
lea ecx, [esp + 0x100]
mov byte [esp + 0x394], 0x1a
call fcn.00403e50
add esp, 4
mov esi, 8
cmp dword [esp + 0x50], esi
jb 0x41b56c
mov edx, dword [esp + 0x3c]
push edx
call fcn.00491101
add esp, 4
xor eax, eax
mov dword [esp + 0x50], ebp
mov dword [esp + 0x4c], ebx
mov word [esp + 0x3c], ax
mov byte [esp + 0x390], 0x1d
cmp dword [esp + 0xc0], esi
jb 0x41b59c
mov ecx, dword [esp + 0xac]
push ecx
call fcn.00491101
add esp, 4
lea eax, [esp + 0xe0]
xor edx, edx
push eax
lea ecx, [esp + 0x100]
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xc0], ebx
mov word [esp + 0xb0], dx
call fcn.00406170
add esp, 4
xor ecx, ecx
push ebx
mov eax, 0x4b49f8
lea esi, [esp + 0x58]
mov dword [esp + 0x70], ebp
mov dword [esp + 0x6c], ebx
mov word [esp + 0x5c], cx
call fcn.00401f30
mov byte [esp + 0x390], 0x1e
xor edx, edx
push 0x1b
mov eax, str.Installation_DSP_FaviconURL
lea esi, [esp + 0x74]
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x88], ebx
mov word [esp + 0x78], dx
call fcn.00401f30
mov byte [esp + 0x390], 0x1f
xor eax, eax
mov word [esp + 0x1c], ax
push ebx
mov eax, 0x4b49f8
lea esi, [esp + 0x1c]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
call fcn.00401f30
mov byte [esp + 0x390], 0x20
xor ecx, ecx
push 0x1c
mov eax, str.Installation_DSP_DisplayName
lea esi, [esp + 0x90]
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xa4], ebx
mov word [esp + 0x94], cx
call fcn.00401f30
sub esp, 0x1c
mov byte [esp + 0x3ac], 0x21
mov esi, esp
mov dword [esp + 0xec], esp
xor edx, edx
mov dword [esi + 0x18], ebp
mov dword [esi + 0x14], ebx
push ebx
mov eax, 0x4b49f8
mov word [esi + 4], dx
call fcn.00401f30
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x3c8], 0x22
mov dword [esp + 0x10c], esp
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push 0xffffffffffffffff
mov word [ecx + 4], ax
push ebx
lea eax, [esp + 0x13c]
call fcn.00401c20
sub esp, 0x1c
mov byte [esp + 0x3e4], 0x23
mov esi, esp
xor ecx, ecx
mov dword [esi + 0x18], ebp
mov dword [esi + 0x14], ebx
mov dword [esp + 0x118], esp
mov word [esi + 4], cx
push ebx
mov eax, 0x4b49f8
call fcn.00401f30
sub esp, 0x1c
mov byte [esp + 0x400], 0x24
mov ecx, esp
mov dword [esp + 0x138], esp
push 0xffffffffffffffff
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push ebx
lea eax, [esp + 0x190]
mov word [ecx + 4], dx
call fcn.00401c20
sub esp, 0x1c
mov byte [esp + 0x41c], 0x25
lea eax, [esp + 0xe0]
mov ecx, esp
mov dword [esp + 0x158], esp
push eax
lea edi, [esp + 0x100]
call fcn.00403e50
sub esp, 0x18
mov byte [esp + 0x438], 0x26
mov esi, esp
mov dword [esp + 0x180], esp
xor ecx, ecx
mov dword [esi + 0x18], ebp
mov dword [esi + 0x14], ebx
push ebx
mov eax, 0x4b49f8
mov word [esi + 4], cx
call fcn.00401f30
sub esp, 0x1c
mov byte [esp + 0x454], 0x27
lea edx, [esp + 0xdc]
mov ecx, esp
mov dword [esp + 0x1a0], esp
push edx
lea edi, [esp + 0x154]
call fcn.00403e50
add esp, 4
lea esi, [esp + 0x238]
mov byte [esp + 0x454], 0x21
call fcn.004895d0
mov edi, 8
cmp dword [esp + 0xa4], edi
jb 0x41b7d3
mov eax, dword [esp + 0x90]
push eax
call fcn.00491101
add esp, 4
xor ecx, ecx
mov dword [esp + 0xa4], ebp
mov dword [esp + 0xa0], ebx
mov word [esp + 0x90], cx
cmp dword [esp + 0x30], edi
jb 0x41b7fe
mov edx, dword [esp + 0x1c]
push edx
call fcn.00491101
add esp, 4
xor eax, eax
mov dword [esp + 0x30], ebp
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], ax
cmp dword [esp + 0x88], edi
jb 0x41b823
mov ecx, dword [esp + 0x74]
push ecx
call fcn.00491101
add esp, 4
xor edx, edx
mov dword [esp + 0x88], ebp
mov dword [esp + 0x84], ebx
mov word [esp + 0x74], dx
mov byte [esp + 0x390], 0x2c
cmp dword [esp + 0x6c], edi
jb 0x41b853
mov eax, dword [esp + 0x58]
push eax
call fcn.00491101
add esp, 4
xor ecx, ecx
lea edx, [esp + 0x37]
push edx
mov word [esp + 0x5c], cx
lea eax, [esp + 0x1a]
push eax
lea ecx, [esp + 0x17c]
push ecx
lea ecx, [esp + 0x140]
mov dword [esp + 0x78], ebp
mov dword [esp + 0x74], ebx
call fcn.0048aa20
cmp byte [esp + 0x16], bl
jne 0x41b89a
lea edx, [esp + 0x174]
push edx
lea ecx, [esp + 0x138]
call fcn.0048a060
cmp byte [esp + 0x17], bl
je 0x41b8b4
lea eax, [esp + 0x174]
push eax
lea ecx, [esp + 0x138]
call fcn.0048b040
lea esi, [esp + 0x174]
call fcn.00489d20
cmp dword [esp + 0x114], edi
jb 0x41b8d9
mov ecx, dword [esp + 0x100]
push ecx
call fcn.00491101
add esp, 4
xor edx, edx
mov dword [esp + 0x114], ebp
mov dword [esp + 0x110], ebx
mov word [esp + 0x100], dx
cmp dword [esp + 0x130], edi
jb 0x41b90a
mov eax, dword [esp + 0x11c]
push eax
call fcn.00491101
add esp, 4
xor ecx, ecx
mov dword [esp + 0x130], ebp
mov dword [esp + 0x12c], ebx
mov word [esp + 0x11c], cx
cmp dword [esp + 0xf8], edi
jb 0x41b93b
mov edx, dword [esp + 0xe4]
push edx
call fcn.00491101
add esp, 4
xor eax, eax
lea esi, [esp + 0x27c]
mov dword [esp + 0xf8], ebp
mov dword [esp + 0xf4], ebx
mov word [esp + 0xe4], ax
call fcn.00489d20
lea esi, [esp + 0x134]
call fcn.0048a010
mov al, 1
mov ecx, dword [esp + 0x388]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x370]
xor ecx, esp
call fcn.0049110c
add esp, 0x380
ret