Function at 0x100522f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f7d34
mov eax, dword fs:[0]
push eax
sub esp, 0x1a8
mov eax, dword [0x1012c620]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x101333bc]
and eax, 1
jne 0x100526ca
mov ecx, dword [0x101333bc]
or ecx, 1
mov dword [0x101333bc], ecx
mov dword [ebp - 4], 0
push 0x10103920
lea ecx, [ebp - 0x12c]
call fcn.10005550
mov byte [ebp - 4], 1
push str.http:__www.default_search.net_sidsysidaidappiditypeptypeverkbntmucsrcbar
lea ecx, [ebp - 0xf4]
call fcn.10005550
mov byte [ebp - 4], 2
push 0x10103788
lea ecx, [ebp - 0xbc]
call fcn.10005550
mov byte [ebp - 4], 3
push str.http:__www.default_search.net_search_sidsysidaidappiditypeptypeverkbntmucsrcderrp
lea ecx, [ebp - 0x84]
call fcn.10005550
mov byte [ebp - 4], 4
push str.http:__www.default_search.net_search_sidsysidaidappiditypeptypeverkbntmucsrc404p
lea ecx, [ebp - 0x4c]
call fcn.10005550
mov byte [ebp - 4], 5
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 1
mov dword [ebp - 0x164], 0
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x148]
push ecx
call fcn.1004e8b0
add esp, 8
mov dword [ebp - 0x180], eax
mov edx, dword [ebp - 0x180]
mov dword [ebp - 0x184], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x184]
push eax
push str.NewTabPage2
lea ecx, [ebp - 0xf4]
push ecx
lea edx, [ebp - 0x110]
push edx
call fcn.1004e8b0
add esp, 8
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x18c], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x18c]
push ecx
push str.NewTabPage
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xd8]
push eax
call fcn.1004e8b0
add esp, 8
mov dword [ebp - 0x190], eax
mov ecx, dword [ebp - 0x190]
mov dword [ebp - 0x194], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x194]
push edx
push str.SearchURL
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.1004e8b0
add esp, 8
mov dword [ebp - 0x198], eax
mov edx, dword [ebp - 0x198]
mov dword [ebp - 0x19c], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x19c]
push eax
push str.DNSErrorURL
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x68]
push edx
call fcn.1004e8b0
add esp, 8
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a4], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x1a4]
push ecx
push str.Error404URL
lea edx, [ebp - 0x16c]
push edx
push 0x10105110
lea eax, [ebp - 0x168]
push eax
push 0x101050ec
push 0x10102d5c
push 0x101050d0
lea ecx, [ebp - 0x164]
push ecx
push 0x101050a8
push 0x10105098
push 0x1010509c
push str.ff_nt_supported
push str.GeneralEnabled
push 0x10102b74
push str.ProtectionEnabled
push str.Firefox_BHO
push 0x10102d2c
push str.FFBHO
lea ecx, [ebp - 0x30]
call fcn.10059f10
mov dword [ebp - 0x1a8], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x1ac], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x1ac]
push eax
push 0x10102d48
lea ecx, [ebp - 0x160]
push ecx
call fcn.10059d90
add esp, 0xc
mov dword [ebp - 0x1b0], eax
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b4], edx
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x1b4]
call fcn.10059ed0
mov ecx, eax
call fcn.10059ed0
mov ecx, eax
call fcn.10059ed0
mov ecx, eax
call fcn.10059ed0
mov ecx, eax
call fcn.1005a150
mov ecx, eax
call fcn.1005a150
mov ecx, eax
call fcn.1005a150
mov ecx, eax
call fcn.1005a150
mov ecx, eax
call fcn.10059e90
mov ecx, eax
call fcn.10059e90
mov ecx, eax
call fcn.10059e90
mov ecx, eax
call fcn.10059e90
mov ecx, eax
call fcn.10059e90
mov ecx, eax
call fcn.10059e60
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x17c]
push eax
mov ecx, 0x101333ac
call fcn.10055320
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x17c]
call fcn.1004f530
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x160]
call fcn.1004f510
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x30]
call fcn.10055460
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x68]
call fcn.10005600
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xa0]
call fcn.10005600
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xd8]
call fcn.10005600
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x110]
call fcn.10005600
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x148]
call fcn.10005600
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4c]
call fcn.10005600
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x84]
call fcn.10005600
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xbc]
call fcn.10005600
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf4]
call fcn.10005600
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x12c]
call fcn.10005600
push 0x10100920
call fcn.1007e8d7
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, 0x101333ac
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007dd64
mov esp, ebp
pop ebp
ret