Function at 0x1004f79d
Capabilities:
Print debug messages
Set registry value
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100e8d27
mov eax, dword fs:[0]
push eax
mov eax, 0x3910
call fcn.100c7ed0
mov eax, dword [0x1012c510]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x10]
xor esi, esi
push esi
lea ecx, [ebp - 0x388c]
mov dword [ebp - 0x38fc], eax
mov dword [ebp - 0x3874], 0xf
call fcn.1000d2f6
mov dword [ebp - 4], esi
push 7
pop ebx
xor eax, eax
mov dword [ebp - 0x38f0], esi
mov dword [ebp - 0x38ac], ebx
mov dword [ebp - 0x38b0], esi
mov word [ebp - 0x38c0], ax
lea eax, [ebp - 0x38c4]
push eax
mov byte [ebp - 4], 1
call fcn.1005e40c
cmp dword [ebp - 0x38ac], 8
mov eax, dword [ebp - 0x38c0]
pop ecx
jae 0x1004f837
lea eax, [ebp - 0x38c0]
push eax
call fcn.100c25e7
cmp eax, 8
pop ecx
mov eax, str.http:__websearch.ask.com_redirect_clientietbtboosrckwqquerylocalelocale.underscoreapn_ptnrscbidapn_dtiddtidapn_uidguidapn_sauidsaguid
jg 0x1004f84d
mov eax, str.http:__websearch.ask.com_redirect_clientietbtboosrccrmqquerylocalelocale.underscoreapn_ptnrscbidapn_dtiddtidapn_uidguidapn_sauidsaguid
push eax
lea edi, [ebp - 0x3854]
call fcn.10051356
pop ecx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x388c]
mov byte [ebp - 4], 2
call fcn.1000d11b
push esi
push 1
mov ecx, edi
call fcn.1000d1ca
xor eax, eax
mov dword [ebp - 0x3890], ebx
mov dword [ebp - 0x3894], esi
mov word [ebp - 0x38a4], ax
mov edi, 0x10109274
push edi
mov byte [ebp - 4], 3
call fcn.100c1c20
pop ecx
push eax
push edi
lea eax, [ebp - 0x388c]
push eax
xor eax, eax
call fcn.10029207
mov ebx, eax
cmp ebx, 0xffffffff
je 0x1004f906
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.searchTerms
mov dword [ebp - 0x38ec], eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x38e4], eax
push str.searchTerms
push dword [ebp - 0x38ec]
lea eax, [ebp - 0x388c]
push ebx
push eax
call fcn.1004b4ec
mov eax, dword [ebp - 0x38e4]
add eax, ebx
push eax
push edi
lea eax, [ebp - 0x388c]
push eax
call fcn.1004b50e
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x1004f8d1
cmp dword [ebp - 0x3874], 0x10
mov eax, dword [ebp - 0x3888]
jae 0x1004f91b
lea eax, [ebp - 0x3888]
push eax
lea ebx, [ebp - 0x3854]
call fcn.100514b7
pop ecx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x388c]
mov byte [ebp - 4], 4
call fcn.1000d11b
xor ebx, ebx
push esi
inc ebx
push ebx
lea ecx, [ebp - 0x3854]
mov byte [ebp - 4], 3
call fcn.1000d1ca
cmp dword [ebp - 0x3874], 0x10
mov eax, dword [ebp - 0x3888]
jae 0x1004f964
lea eax, [ebp - 0x3888]
mov dword [ebp - 0x38e4], eax
cmp eax, esi
je 0x1004f980
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
inc edi
cmp edi, 0x3fffffff
jle 0x1004f984
xor eax, eax
jmp 0x1004f99d
lea eax, [edi + edi]
call fcn.100c7f80
mov eax, esp
push 3
push edi
push dword [ebp - 0x38e4]
push eax
call fcn.1002cd8d
push eax
lea eax, [ebp - 0x38e0]
call fcn.10008945
mov dword [ebp - 0x38f8], esi
lea eax, [ebp - 0x38f8]
push eax
push 0x1010dc70
push 0x17
push esi
push 0x10106738
mov byte [ebp - 4], 6
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, esi
jl 0x1004ff0b
mov dword [ebp - 0x38ec], esi
push esi
lea ecx, [ebp - 0x3838]
mov dword [ebp - 0x3820], 0xf
call fcn.1000d2f6
push str.__xml_version_1.0__encoding_utf_8____n_OpenSearchDescription_xmlns_http:__a9.com___spec_opensearch_1.1____n_ShortName_Ask_Search__ShortName__n_Description_Ask_Search__Description__n_Image_height_16__width_16__type_image_icon__
lea ecx, [ebp - 0x3838]
mov byte [ebp - 4], 8
call fcn.1000d1ad
push 0x1010d528
lea eax, [ebp - 0x3838]
push eax
call fcn.1004b4d1
push str.__Image__n
lea eax, [ebp - 0x3838]
push eax
call fcn.1004b4d1
xor eax, eax
push 0x1048
mov word [ebp - 0x381c], ax
lea eax, [ebp - 0x381a]
push esi
push eax
call fcn.100c1480
add esp, 0xc
push 0x824
lea eax, [ebp - 0x381c]
push eax
push str.SuggestionsURL_JSON
push str.Update
call fcn.100399f9
xor eax, eax
add esp, 0x10
cmp ax, word [ebp - 0x381c]
je 0x1004fb1f
push str._Url_type_application_x_suggestionsjson__template_
lea eax, [ebp - 0x3838]
push eax
call fcn.1004b4d1
lea eax, [ebp - 0x381c]
push eax
lea eax, [ebp - 0x3854]
call fcn.10008945
lea edi, [ebp - 0x3854]
mov byte [ebp - 4], 9
call fcn.1004f04e
cmp dword [ebp - 0x383c], 8
mov eax, dword [ebp - 0x3850]
jae 0x1004fab9
lea eax, [ebp - 0x3850]
push eax
lea edi, [ebp - 0x38f4]
call fcn.1000e95c
mov byte [ebp - 4], 0xa
push dword [eax + 4]
lea eax, [ebp - 0x3838]
push eax
call fcn.1004b4d1
mov byte [ebp - 4], 9
push dword [ebp - 0x38f4]
call fcn.100a212e
pop ecx
push dword [ebp - 0x38f0]
call fcn.100a212e
lea eax, [ebp - 0x3838]
mov dword [esp], str.____n
push eax
call fcn.1004b4d1
push esi
push ebx
lea esi, [ebp - 0x3854]
mov dword [ebp - 0x38f0], ebx
mov byte [ebp - 4], 8
call fcn.100016e6
xor esi, esi
xor eax, eax
push 0x1048
mov word [ebp - 0x27cc], ax
lea eax, [ebp - 0x27ca]
push esi
push eax
call fcn.100c1480
add esp, 0xc
push 0x824
lea eax, [ebp - 0x27cc]
push eax
push str.SuggestionsURL
push str.Update
call fcn.100399f9
xor eax, eax
add esp, 0x10
cmp ax, word [ebp - 0x27cc]
je 0x1004fc17
push str._Url_type_application_x_suggestionsxml__template_
lea eax, [ebp - 0x3838]
push eax
call fcn.1004b4d1
lea eax, [ebp - 0x27cc]
push eax
lea eax, [ebp - 0x3854]
call fcn.10008945
lea edi, [ebp - 0x3854]
mov byte [ebp - 4], 0xb
call fcn.1004f04e
cmp dword [ebp - 0x383c], 8
mov eax, dword [ebp - 0x3850]
jae 0x1004fbb1
lea eax, [ebp - 0x3850]
push eax
lea edi, [ebp - 0x38f4]
call fcn.1000e95c
mov byte [ebp - 4], 0xc
push dword [eax + 4]
lea eax, [ebp - 0x3838]
push eax
call fcn.1004b4d1
mov byte [ebp - 4], 0xb
push dword [ebp - 0x38f4]
call fcn.100a212e
pop ecx
push dword [ebp - 0x38f0]
call fcn.100a212e
lea eax, [ebp - 0x3838]
mov dword [esp], str.____n
push eax
call fcn.1004b4d1
push esi
push ebx
lea esi, [ebp - 0x3854]
mov dword [ebp - 0x38f0], ebx
mov byte [ebp - 4], 8
call fcn.100016e6
xor esi, esi
push str._Url_type_text_html__template_
lea eax, [ebp - 0x3838]
push eax
call fcn.1004b4d1
lea edi, [ebp - 0x38e0]
call fcn.1004f04e
cmp dword [ebp - 0x38c8], 8
mov eax, dword [ebp - 0x38dc]
jae 0x1004fc48
lea eax, [ebp - 0x38dc]
push eax
lea edi, [ebp - 0x38e8]
call fcn.1000e95c
mov byte [ebp - 4], 0xd
push dword [eax + 4]
lea eax, [ebp - 0x3838]
push eax
call fcn.1004b4d1
mov byte [ebp - 4], 8
push dword [ebp - 0x38e8]
call fcn.100a212e
pop ecx
push dword [ebp - 0x38e4]
call fcn.100a212e
lea eax, [ebp - 0x3838]
mov dword [esp], str.____n__OpenSearchDescription__n
push eax
call fcn.1004b4d1
xor eax, eax
push 0x145e
mov word [ebp - 0x177c], ax
lea eax, [ebp - 0x177a]
push esi
push eax
call fcn.100c1480
add esp, 0xc
push ebx
lea eax, [ebp - 0x177c]
push 0x924
push eax
call fcn.1005e866
add esp, 0xc
test eax, eax
je 0x1004fdbd
push str.osearch.xml
lea eax, [ebp - 0x177c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push esi
push 0x80
push 2
push esi
push esi
push 0x40000000
lea eax, [ebp - 0x177c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x1004fdbd
cmp dword [ebp - 0x3820], 0x10
mov eax, dword [ebp - 0x3834]
jae 0x1004fd1e
lea eax, [ebp - 0x3834]
push esi
lea ecx, [ebp - 0x38e4]
push ecx
push dword [ebp - 0x3824]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov dword [ebp - 0x3858], 7
mov dword [ebp - 0x385c], esi
mov word [ebp - 0x386c], ax
mov esi, str.file:___
push esi
mov byte [ebp - 4], 0xe
call fcn.100bfd09
pop ecx
mov ecx, esi
lea esi, [ebp - 0x3870]
call fcn.1000181a
lea eax, [ebp - 0x177c]
push eax
mov eax, esi
push eax
call fcn.10014c04
cmp dword [ebp - 0x3858], 8
mov ecx, dword [ebp - 0x386c]
jae 0x1004fd95
lea ecx, [ebp - 0x386c]
mov eax, dword [ebp - 0x38f8]
mov edx, dword [eax]
lea esi, [ebp - 0x38ec]
push esi
push ecx
push eax
call dword [edx + 0xc]
push 0
push ebx
lea esi, [ebp - 0x3870]
mov byte [ebp - 4], 8
call fcn.100016e6
xor esi, esi
mov eax, dword [ebp - 0x38ec]
cmp eax, esi
je 0x1004fed4
cmp dword [ebp + 0xc], esi
je 0x1004fed4
lea edx, [ebp - 0x38e4]
push edx
mov dword [ebp - 0x38e4], esi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
cmp dword [ebp - 0x38e4], esi
je 0x1004fed4
xor eax, eax
push 0xfe
mov word [ebp - 0x114], ax
lea eax, [ebp - 0x112]
push esi
push eax
call fcn.100c1480
add esp, 0xc
push 0x7b
push dword [ebp - 0x38e4]
call fcn.100c2c73
pop ecx
pop ecx
cmp eax, esi
je 0x1004fe39
lea ecx, [ebp - 0x114]
push ecx
mov edx, eax
mov ecx, 0x80
call fcn.1000e8b0
jmp 0x1004fe95
push 0x1010d9cc
push dword [ebp - 0x38e4]
call fcn.100c19e5
pop ecx
pop ecx
cmp eax, esi
je 0x1004fe95
lea edx, [eax + 6]
lea eax, [ebp - 0x112]
push eax
push 0x7f
pop ecx
call fcn.1000e8b0
push 0x7b
pop eax
mov word [ebp - 0x114], ax
lea eax, [ebp - 0x114]
push 0x1010d9d4
push eax
call fcn.100c19e5
pop ecx
pop ecx
cmp eax, esi
je 0x1004fe87
xor ecx, ecx
mov word [eax], cx
lea ebx, [ebp - 0x114]
call fcn.1004e1ac
xor ebx, ebx
inc ebx
push dword [ebp - 0x38e4]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea eax, [ebp - 0x114]
push eax
call fcn.100bfd09
pop ecx
lea ecx, [ebp - 0x114]
lea esi, [ebp - 0x38a8]
call fcn.1000181a
push dword [ebp - 0x38fc]
mov eax, dword [ebp - 0x38ec]
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x10]
xor esi, esi
cmp dword [ebp - 0x38f0], esi
je 0x1004fee1
call fcn.1004f1b8
push esi
push ebx
lea ecx, [ebp - 0x3838]
call fcn.1000d1ca
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x38ec]
cmp eax, esi
je 0x10050438
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x10050438
push str.SoftwareMicrosoftInternet_ExplorerSearchScopes
lea eax, [ebp - 0x3838]
call fcn.10008945
push 0x10107ca8
lea eax, [ebp - 0x3838]
push eax
mov byte [ebp - 4], 0xf
call fcn.10014c04
mov esi, str.171DEBEB_C3D4_40b7_AC73_056A5EBA4A7E
push esi
lea eax, [ebp - 0x3838]
push eax
call fcn.10014c04
push esi
call fcn.100bfd09
pop ecx
mov ecx, esi
lea esi, [ebp - 0x38a8]
call fcn.1000181a
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor esi, esi
push str.SetChrome..
mov dword [ebp - 0x38e4], esi
call edi
cmp dword [ebp - 0x3820], 8
mov eax, dword [ebp - 0x3834]
jae 0x1004ff80
lea eax, [ebp - 0x3834]
lea ecx, [ebp - 0x38ec]
push ecx
lea ecx, [ebp - 0x38e4]
push ecx
push esi
push 0x20006
push esi
push esi
push esi
push eax
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cmp eax, esi
je 0x100500e8
push str.defered
call edi
push ebx
push 0x1010888c
push str.ResetSAFail
mov edi, str.Update
push edi
call fcn.10039999
add esp, 0x10
mov eax, 0x1010888c
cmp dword [ebp + 0xc], esi
jne 0x1004ffda
mov eax, str.0_____
push ebx
push eax
push str.SADef
push edi
call fcn.10039999
add esp, 0x10
mov edi, 0x104
push edi
lea eax, [ebp - 0x31c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x31c]
push edi
push eax
call fcn.100c29a8
lea eax, [ebp - 0x31c]
push str.iexplore.exe
push eax
call fcn.100c19e5
add esp, 0x10
test eax, eax
je 0x100500bb
push ebx
push 0xc8
call fcn.1004ee06
pop ecx
pop ecx
push esi
push ebx
lea esi, [ebp - 0x3838]
mov edi, eax
call fcn.100016e6
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x38f8]
test eax, eax
je 0x10050057
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x38f0], edi
xor esi, esi
push esi
push ebx
lea esi, [ebp - 0x38e0]
call fcn.100016e6
xor edi, edi
push edi
push ebx
lea esi, [ebp - 0x38a8]
call fcn.100016e6
push edi
push ebx
lea esi, [ebp - 0x38c4]
call fcn.100016e6
push edi
push ebx
lea ecx, [ebp - 0x388c]
call fcn.1000d1ca
mov eax, dword [ebp - 0x38f0]
lea esp, [ebp - 0x392c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100bfae1
leave
ret
push esi
push ebx
lea esi, [ebp - 0x3838]
call fcn.100016e6
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x38f8]
test eax, eax
je 0x100500dc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
and dword [ebp - 0x38f0], 0
jmp 0x1005005d
push ebx
push str.0_____
push str.ResetSAFail
push str.Update
call fcn.10039999
add esp, 0x10
push str.success_
call edi
mov edi, str.Ask_Search
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax + eax + 2]
push eax
push edi
push ebx
push esi
push str.DisplayName
push dword [ebp - 0x38e4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push esi
lea ecx, [ebp - 0x3870]
mov dword [ebp - 0x3858], 0xf
call fcn.1000d2f6
push str.http:__websearch.ask.com_redirect_clientietbtboosrccrmqquerylocalelocale.underscoreapn_ptnrscbidapn_dtiddtidapn_uidguidapn_sauidsaguid
lea edi, [ebp - 0x3918]
mov byte [ebp - 4], 0x10
call fcn.10051356
pop ecx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x3870]
mov byte [ebp - 4], 0x11
call fcn.1000d11b
push esi
push ebx
mov ecx, edi
mov byte [ebp - 4], 0x10
call fcn.1000d1ca
mov edi, 0x10109274
push edi
call fcn.100c1c20
pop ecx
push eax
push edi
lea eax, [ebp - 0x3870]
push eax
xor eax, eax
call fcn.10029207
mov ebx, eax
cmp ebx, 0xffffffff
je 0x100501ed
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.searchTerms
mov dword [ebp - 0x38fc], eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x38f0], eax
push str.searchTerms
push dword [ebp - 0x38fc]
lea eax, [ebp - 0x3870]
push ebx
push eax
call fcn.1004b4ec
mov eax, dword [ebp - 0x38f0]
add eax, ebx
push eax
push edi
lea eax, [ebp - 0x3870]
push eax
call fcn.1004b50e
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x100501b8
cmp dword [ebp - 0x3858], 0x10
mov eax, dword [ebp - 0x386c]
jae 0x10050202
lea eax, [ebp - 0x386c]
push eax
lea ebx, [ebp - 0x3918]
call fcn.100514b7
pop ecx
mov byte [ebp - 4], 0x12
cmp dword [eax + 0x18], 0x10
jb 0x1005021e
mov ebx, dword [eax + 4]
jmp 0x10050221
lea ebx, [eax + 4]
cmp ebx, esi
je 0x10050237
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
inc edi
cmp edi, 0x3fffffff
jle 0x1005023b
xor eax, eax
jmp 0x1005024f
lea eax, [edi + edi]
call fcn.100c7f80
mov eax, esp
push 3
push edi
push ebx
push eax
call fcn.1002cd8d
push eax
lea eax, [ebp - 0x3854]
call fcn.10008945
push esi
push 1
lea ecx, [ebp - 0x3918]
mov byte [ebp - 4], 0x14
call fcn.1000d1ca
cmp dword [ebp - 0x383c], 8
mov eax, dword [ebp - 0x3850]
jae 0x10050282
lea eax, [ebp - 0x3850]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp dword [ebp - 0x383c], 8
mov ecx, dword [ebp - 0x3850]
lea eax, [eax + eax + 2]
jae 0x100502a2
lea ecx, [ebp - 0x3850]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push eax
push ecx
push 1
push esi
push 0x1010da00
push dword [ebp - 0x38e4]
call ebx
mov edi, str.http:__www.ask.com_favicon.ico
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, eax
push eax
push edi
push 1
push esi
push str.FaviconUrl
push dword [ebp - 0x38e4]
call ebx
push dword [ebp - 0x38e4]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegFlushKey]
call ebx
push dword [ebp - 0x38e4]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call edi
cmp dword [ebp + 0xc], esi
je 0x1005039d
lea eax, [ebp - 0x38ec]
push eax
lea eax, [ebp - 0x38e4]
push eax
push esi
push 0x20006
push esi
push esi
push esi
push str.SoftwareMicrosoftInternet_ExplorerSearchScopes
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov esi, str.171DEBEB_C3D4_40b7_AC73_056A5EBA4A7E
push esi
call fcn.100bfd09
pop ecx
mov ecx, esi
lea esi, [ebp - 0x3838]
call fcn.1000181a
cmp dword [ebp - 0x3820], 8
mov eax, dword [ebp - 0x3834]
jae 0x10050354
lea eax, [ebp - 0x3834]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp dword [ebp - 0x3820], 8
mov ecx, dword [ebp - 0x3834]
lea eax, [eax + eax + 2]
jae 0x10050374
lea ecx, [ebp - 0x3834]
push eax
push ecx
push 1
push 0
push str.DefaultScope
push dword [ebp - 0x38e4]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push dword [ebp - 0x38e4]
call ebx
push dword [ebp - 0x38e4]
call edi
xor esi, esi
cmp dword [ebp + 8], esi
je 0x100503fe
lea eax, [ebp - 0x38ec]
push eax
lea eax, [ebp - 0x38e4]
push eax
push esi
push 0xf003f
push esi
push esi
push esi
push str.SoftwareMicrosoftInternet_ExplorerMain
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push 4
lea eax, [ebp - 0x38fc]
push eax
push 4
push esi
push str.AutoSearch
push dword [ebp - 0x38e4]
mov dword [ebp - 0x38fc], esi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push dword [ebp - 0x38e4]
call ebx
push dword [ebp - 0x38e4]
call edi
jmp 0x10050403
call fcn.1004f184
push esi
push 1
lea esi, [ebp - 0x3854]
call fcn.100016e6
push 0
push 1
lea ecx, [ebp - 0x3870]
call fcn.1000d1ca
push 0
push 1
lea esi, [ebp - 0x3838]
mov byte [ebp - 4], 6
call fcn.100016e6
xor ebx, ebx
xor esi, esi
inc ebx
push 0xf003f
push ebx
push str.Update
call fcn.1005e769
mov edi, eax
add esp, 0xc
cmp edi, esi
je 0x100504a9
cmp dword [ebp - 0x3890], 8
mov eax, dword [ebp - 0x3894]
mov ecx, dword [ebp - 0x38a4]
lea eax, [eax + eax + 2]
jae 0x10050470
lea ecx, [ebp - 0x38a4]
push eax
push ecx
push ebx
push esi
push str.SSGuid
push edi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push edi
call dword [sym.imp.ADVAPI32.dll_RegFlushKey]
push edi
call fcn.1005e854
pop ecx
call fcn.1004f3d4
test eax, eax
je 0x1005049e
push str._nSetChrome_update_SearchSuggestion_succeeded
jmp 0x100504a3
push str._nSetChrome_update_SearchSuggestion_failed
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x38f8]
cmp eax, esi
je 0x100504bd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x38f0], ebx
jmp 0x1005005f