Function at 0x10052830
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f7d44
mov eax, dword fs:[0]
push eax
sub esp, 0x1a8
mov eax, dword [0x1012c610]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x1013339c]
and eax, 1
jne 0x10052c0a
mov ecx, dword [0x1013339c]
or ecx, 1
mov dword [0x1013339c], ecx
mov dword [ebp - 4], 0
push 0x10103920
lea ecx, [ebp - 0x12c]
call fcn.10005540
mov byte [ebp - 4], 1
push str.http:__www.default_search.net_sidsysidaidappiditypeptypeverkbntmucsrcbar
lea ecx, [ebp - 0xf4]
call fcn.10005540
mov byte [ebp - 4], 2
push 0x10103788
lea ecx, [ebp - 0xbc]
call fcn.10005540
mov byte [ebp - 4], 3
push str.http:__www.default_search.net_search_sidsysidaidappiditypeptypeverkbntmucsrcderrp
lea ecx, [ebp - 0x84]
call fcn.10005540
mov byte [ebp - 4], 4
push str.http:__www.default_search.net_search_sidsysidaidappiditypeptypeverkbntmucsrc404p
lea ecx, [ebp - 0x4c]
call fcn.10005540
mov byte [ebp - 4], 5
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 1
mov dword [ebp - 0x164], 0
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x148]
push ecx
call fcn.1004edf0
add esp, 8
mov dword [ebp - 0x180], eax
mov edx, dword [ebp - 0x180]
mov dword [ebp - 0x184], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x184]
push eax
push str.NewTabPage2
lea ecx, [ebp - 0xf4]
push ecx
lea edx, [ebp - 0x110]
push edx
call fcn.1004edf0
add esp, 8
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x18c], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x18c]
push ecx
push str.NewTabPage
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xd8]
push eax
call fcn.1004edf0
add esp, 8
mov dword [ebp - 0x190], eax
mov ecx, dword [ebp - 0x190]
mov dword [ebp - 0x194], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x194]
push edx
push str.SearchURL
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.1004edf0
add esp, 8
mov dword [ebp - 0x198], eax
mov edx, dword [ebp - 0x198]
mov dword [ebp - 0x19c], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x19c]
push eax
push str.DNSErrorURL
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x68]
push edx
call fcn.1004edf0
add esp, 8
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a4], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x1a4]
push ecx
push str.Error404URL
lea edx, [ebp - 0x16c]
push edx
push 0x10105110
lea eax, [ebp - 0x168]
push eax
push 0x101050ec
push 0x10102d5c
push 0x101050d0
lea ecx, [ebp - 0x164]
push ecx
push 0x101050a8
push 0x10105098
push 0x1010509c
push str.ff_nt_supported
push str.GeneralEnabled
push 0x10102b74
push str.ProtectionEnabled
push str.Firefox_BHO
push 0x10102d2c
push str.FFBHO
lea ecx, [ebp - 0x30]
call fcn.1005a140
mov dword [ebp - 0x1a8], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x1ac], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x1ac]
push eax
push 0x10102d48
lea ecx, [ebp - 0x160]
push ecx
call fcn.1005a2d0
add esp, 0xc
mov dword [ebp - 0x1b0], eax
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b4], edx
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x1b4]
call fcn.1005a410
mov ecx, eax
call fcn.1005a410
mov ecx, eax
call fcn.1005a410
mov ecx, eax
call fcn.1005a410
mov ecx, eax
call fcn.1005a050
mov ecx, eax
call fcn.1005a050
mov ecx, eax
call fcn.1005a050
mov ecx, eax
call fcn.1005a050
mov ecx, eax
call fcn.1005a0d0
mov ecx, eax
call fcn.1005a0d0
mov ecx, eax
call fcn.1005a0d0
mov ecx, eax
call fcn.1005a0d0
mov ecx, eax
call fcn.1005a0d0
mov ecx, eax
call fcn.1005a110
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x17c]
push eax
mov ecx, 0x1013338c
call fcn.10055860
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x17c]
call fcn.1004fa70
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x160]
call fcn.1004fa50
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x30]
call fcn.100559a0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x68]
call fcn.100055f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xa0]
call fcn.100055f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xd8]
call fcn.100055f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x110]
call fcn.100055f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x148]
call fcn.100055f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4c]
call fcn.100055f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x84]
call fcn.100055f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xbc]
call fcn.100055f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf4]
call fcn.100055f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x12c]
call fcn.100055f0
push 0x10100950
call fcn.1007e8f7
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, 0x1013338c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007dd84
mov esp, ebp
pop ebp
ret