Function at 0x48bde0
Capabilities:
Copy file
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4b0929
mov eax, dword fs:[0]
push eax
sub esp, 0x22c
mov eax, dword [0x4d25ac]
xor eax, esp
mov dword [esp + 0x224], eax
push esi
push edi
mov eax, dword [0x4d25ac]
xor eax, esp
push eax
lea eax, [esp + 0x238]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x10], eax
xor ecx, ecx
xor edi, edi
push 0x20
mov eax, str.CChromeBrowser::SearchDB___start
lea esi, [esp + 0x1fc]
mov dword [esp + 0x214], 7
mov dword [esp + 0x210], edi
mov word [esp + 0x200], cx
call fcn.00401f30
mov edx, esi
push edx
mov dword [esp + 0x244], edi
call fcn.00403780
add esp, 4
mov dword [esp + 0x240], 0xffffffff
cmp dword [esp + 0x210], 8
jb 0x48be8e
mov eax, dword [esp + 0x1fc]
push eax
call fcn.00491101
add esp, 4
cmp ebx, edi
jne 0x48befb
xor ecx, ecx
push 0x39
mov eax, str.CChromeBrowser::SearchDB___CChromeSearchProvider_is_NULL.
lea esi, [esp + 0x1fc]
mov dword [esp + 0x214], 7
mov dword [esp + 0x210], edi
mov word [esp + 0x200], cx
call fcn.00401f30
mov edx, esi
push edx
mov dword [esp + 0x244], 1
call fcn.00403780
add esp, 4
cmp dword [esp + 0x210], 8
jb 0x48bef1
mov eax, dword [esp + 0x1fc]
push eax
call fcn.00491101
add esp, 4
mov eax, 1
jmp 0x48c7aa
push str.temp
lea edi, [esp + 0x3c]
call fcn.004074f0
add esp, 4
mov dword [esp + 0x240], 2
cmp dword [eax + 0x18], 8
jb 0x48bf22
mov eax, dword [eax + 4]
jmp 0x48bf25
add eax, 4
push 3
lea ecx, [esp + 0x17c]
push eax
lea eax, [esp + 0x17c]
mov dword [esp + 0x17c], ecx
call fcn.00403bd0
mov byte [esp + 0x240], 3
mov edx, dword [esp + 0x174]
xor esi, esi
mov eax, edx
mov dword [esp + 0x22c], 0xf
mov dword [esp + 0x228], esi
mov byte [esp + 0x218], 0
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48bf72
sub eax, edi
push eax
push edx
lea ecx, [esp + 0x21c]
call fcn.00408550
mov eax, dword [esp + 0x174]
lea edx, [esp + 0x178]
cmp eax, edx
je 0x48bfa4
push eax
call fcn.0049227f
add esp, 4
mov byte [esp + 0x240], 6
cmp dword [esp + 0x50], 8
jb 0x48bfc0
mov eax, dword [esp + 0x3c]
push eax
call fcn.00491101
add esp, 4
push 7
xor ecx, ecx
push str.ichcop
lea eax, [esp + 0x21c]
mov dword [esp + 0x58], 7
mov dword [esp + 0x54], esi
mov word [esp + 0x44], cx
call fcn.00410e20
mov ecx, dword [esp + 0x218]
mov eax, 0x10
cmp dword [esp + 0x22c], eax
jae 0x48c002
lea ecx, [esp + 0x218]
mov esi, dword [esp + 0x10]
cmp dword [esi + 0x38], eax
lea edi, [esi + 0x20]
jb 0x48c013
mov eax, dword [edi + 4]
jmp 0x48c016
lea eax, [edi + 4]
push 0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
cmp byte [esi + 0x3d], 0
je 0x48c07a
test eax, eax
jne 0x48c07a
mov eax, str.CChromeBrowser::SearchDB___Chrome_is_running.
lea ecx, [esp + 0x14]
call fcn.00401fe0
lea edx, [esp + 0x14]
push edx
mov byte [esp + 0x244], 7
call fcn.00403780
add esp, 4
mov byte [esp + 0x240], 6
cmp dword [esp + 0x2c], 8
jb 0x48c069
mov eax, dword [esp + 0x18]
push eax
call fcn.00491101
add esp, 4
push 0xffffffffffffffff
push 0
push edi
lea ecx, [esp + 0x220]
call fcn.00407a70
mov eax, dword [esp + 0x218]
mov esi, 0x10
cmp dword [esp + 0x22c], esi
jae 0x48c096
lea eax, [esp + 0x218]
push 0
lea ecx, [esp + 0x14]
push ecx
push eax
mov eax, 6
call fcn.0047c0b0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x48c12e
xor edx, edx
push 0x27
mov eax, str.CChromeBrowser::SearchDB___sqlite3_open
lea esi, [esp + 0x1fc]
mov dword [esp + 0x214], 7
mov dword [esp + 0x210], 0
mov word [esp + 0x200], dx
call fcn.00401f30
mov ecx, edi
mov byte [esp + 0x240], 8
call fcn.00403270
cmp dword [esp + 0x210], 8
jb 0x48c10d
mov eax, dword [esp + 0x1fc]
push eax
call fcn.00491101
add esp, 4
cmp dword [esp + 0x22c], 0x10
jb 0x48c127
mov ecx, dword [esp + 0x218]
push ecx
call fcn.00491101
add esp, 4
mov eax, edi
jmp 0x48c7aa
mov edx, dword [0x4d4934]
mov eax, dword [edx + 0xc]
mov ecx, 0x4d4934
call eax
lea edi, [eax + 0x10]
mov dword [esp + 0xc], edi
mov eax, dword [ebp + 0xc]
mov byte [esp + 0x240], 9
test eax, eax
jge 0x48c228
mov dword [esp + 0x210], 0xf
mov dword [esp + 0x20c], 0
mov byte [esp + 0x1fc], 0
lea ecx, [esp + 0x1f8]
push ecx
mov ecx, ebx
mov byte [esp + 0x244], 0xa
call fcn.0048dbb0
test eax, eax
je 0x48c1e4
mov edx, dword [esp + 0x10]
push edx
call fcn.0047ae60
add esp, 4
lea ecx, [esp + 0x1f8]
call fcn.00407660
lea eax, [edi - 0x10]
mov byte [esp + 0x240], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48c1ce
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x214]
call fcn.00407660
mov eax, 0x19
jmp 0x48c7aa
mov eax, dword [esp + 0x1fc]
cmp dword [esp + 0x210], esi
jae 0x48c1fb
lea eax, [esp + 0x1fc]
push eax
push str.keywords
push str.SELECT__FROM__s_WHERE__s
lea edi, [esp + 0x18]
call fcn.0048e410
add esp, 0xc
lea ecx, [esp + 0x1f8]
mov byte [esp + 0x240], 9
call fcn.00407660
jmp 0x48c23f
push eax
push str.keywords
push str.SELECT__FROM__s_WHERE_id_d
lea edi, [esp + 0x18]
call fcn.0048e410
add esp, 0xc
xor ecx, ecx
push 0x1c
mov eax, str.CChromeBrowser::SearchDB_sql
lea esi, [esp + 0x1fc]
mov dword [esp + 0x214], 7
mov dword [esp + 0x210], 0
mov word [esp + 0x200], cx
call fcn.00401f30
mov byte [esp + 0x240], 0xb
mov edi, dword [esp + 0xc]
cmp dword [edi - 4], 1
jle 0x48c296
mov edx, dword [edi - 0xc]
push edx
lea eax, [esp + 0x10]
push eax
call fcn.00407da0
mov edi, dword [esp + 0xc]
push 3
lea ecx, [esp + 0x78]
push edi
lea eax, [esp + 0x78]
mov dword [esp + 0x78], ecx
call fcn.00403c90
mov byte [esp + 0x240], 0xc
mov eax, dword [esp + 0x70]
lea ecx, [esp + 0x14]
call fcn.00401fe0
lea edx, [esp + 0x1f8]
push edx
mov ecx, eax
mov byte [esp + 0x244], 0xd
call fcn.004035d0
mov esi, 8
add esp, 4
cmp dword [esp + 0x2c], esi
jb 0x48c2f1
mov eax, dword [esp + 0x18]
push eax
call fcn.00491101
add esp, 4
mov eax, dword [esp + 0x70]
xor ecx, ecx
lea edx, [esp + 0x74]
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], 0
mov word [esp + 0x18], cx
cmp eax, edx
je 0x48c31d
push eax
call fcn.0049227f
add esp, 4
mov byte [esp + 0x240], 9
cmp dword [esp + 0x210], esi
jb 0x48c33e
mov eax, dword [esp + 0x1fc]
push eax
call fcn.00491101
add esp, 4
cmp dword [edi - 4], 1
jle 0x48c356
mov ecx, dword [edi - 0xc]
push ecx
lea edx, [esp + 0x10]
push edx
call fcn.00407da0
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
push 0
lea eax, [esp + 0x34]
push eax
push 0
push 0
push 0xffffffffffffffff
push edi
push ecx
call fcn.00464a60
mov esi, eax
add esp, 0x1c
mov dword [esp + 0x34], esi
test esi, esi
je 0x48c410
mov eax, str.CChromeBrowser::SearchDB___sqlite3_prepare
lea ecx, [esp + 0x14]
call fcn.00401fe0
mov ecx, esi
lea esi, [esp + 0x14]
mov byte [esp + 0x240], 0xe
call fcn.00403270
mov byte [esp + 0x240], 9
cmp dword [esp + 0x2c], 8
jb 0x48c3bc
mov edx, dword [esp + 0x18]
push edx
call fcn.00491101
add esp, 4
mov eax, dword [esp + 0x10]
push eax
call fcn.0047ae60
lea eax, [edi - 0x10]
add esp, 4
mov byte [esp + 0x240], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48c3ed
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x22c], 0x10
jb 0x48c407
mov ecx, dword [esp + 0x218]
push ecx
call fcn.00491101
add esp, 4
mov eax, dword [esp + 0x34]
jmp 0x48c7aa
mov edi, dword [esp + 0x30]
push edi
mov esi, 0x10
call fcn.00440750
add esp, 4
cmp eax, 0x64
jne 0x48c750
push 0
push edi
call fcn.00440e40
add esp, 8
lea edx, [esp + 0x14]
push edx
lea edx, [esi - 0xf]
mov ecx, edi
mov dword [ebx + 4], eax
call fcn.0048e2d0
push 0xffffffffffffffff
push 0
lea esi, [ebx + 8]
push eax
mov ecx, esi
mov byte [esp + 0x24c], 0xf
call fcn.00407a70
lea ecx, [esp + 0x14]
mov byte [esp + 0x240], 9
call fcn.00407660
lea eax, [esp + 0x14]
push eax
mov edx, 2
mov ecx, edi
call fcn.0048e2d0
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebx + 0x24]
mov byte [esp + 0x24c], 0x10
call fcn.00407a70
lea ecx, [esp + 0x14]
mov byte [esp + 0x240], 9
call fcn.00407660
lea ecx, [esp + 0x14]
push ecx
mov edx, 3
mov ecx, edi
call fcn.0048e2d0
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebx + 0x40]
mov byte [esp + 0x24c], 0x11
call fcn.00407a70
lea ecx, [esp + 0x14]
mov byte [esp + 0x240], 9
call fcn.00407660
lea edx, [esp + 0x14]
push edx
mov edx, 4
mov ecx, edi
call fcn.0048e2d0
push 0xffffffffffffffff
push 0
lea ecx, [ebx + 0x5c]
mov byte [esp + 0x248], 0x12
push eax
mov dword [esp + 0x3c], ecx
call fcn.00407a70
lea ecx, [esp + 0x14]
mov byte [esp + 0x240], 9
call fcn.00407660
push 5
push edi
call fcn.00440e40
push 6
push edi
mov dword [ebx + 0x78], eax
call fcn.00440e40
mov dword [ebx + 0x7c], eax
add esp, 0x10
lea eax, [esp + 0x14]
push eax
mov edx, 7
mov ecx, edi
call fcn.0048e2d0
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebx + 0x80]
mov byte [esp + 0x24c], 0x13
call fcn.00407a70
lea ecx, [esp + 0x14]
mov byte [esp + 0x240], 9
call fcn.00407660
push 8
push edi
call fcn.00440e40
push 9
push edi
mov dword [ebx + 0x9c], eax
call fcn.00440e40
add esp, 0x10
lea ecx, [esp + 0x14]
push ecx
mov edx, 0xa
mov ecx, edi
mov dword [ebx + 0xa0], eax
call fcn.0048e2d0
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebx + 0xa4]
mov byte [esp + 0x24c], 0x14
call fcn.00407a70
lea ecx, [esp + 0x14]
mov byte [esp + 0x240], 9
call fcn.00407660
lea edx, [esp + 0x14]
push edx
mov edx, 0xb
mov ecx, edi
call fcn.0048e2d0
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebx + 0xc0]
mov byte [esp + 0x24c], 0x15
call fcn.00407a70
lea ecx, [esp + 0x14]
mov byte [esp + 0x240], 9
call fcn.00407660
push 0xc
push edi
call fcn.00440e40
push 0xd
push edi
mov dword [ebx + 0xdc], eax
call fcn.00440e40
mov dword [ebx + 0xe0], eax
add esp, 0x10
mov eax, str.CChromeBrowser::CreateSearchProvider___pChromeSearchProvider__sShortName
lea ecx, [esp + 0x14]
call fcn.00401fe0
mov byte [esp + 0x240], 0x16
cmp dword [esi + 0x18], 0x10
jb 0x48c63f
mov esi, dword [esi + 4]
jmp 0x48c642
add esi, 4
lea eax, [esp + 0x74]
push 3
mov dword [esp + 0x74], eax
push esi
lea eax, [esp + 0x78]
call fcn.00403c90
mov byte [esp + 0x240], 0x17
mov eax, dword [esp + 0x70]
lea ecx, [esp + 0x1f8]
call fcn.00401fe0
lea ecx, [esp + 0x14]
push ecx
mov ecx, eax
mov byte [esp + 0x244], 0x18
call fcn.004035d0
add esp, 4
lea esi, [esp + 0x1f8]
call fcn.0040a810
mov eax, dword [esp + 0x70]
lea edx, [esp + 0x74]
cmp eax, edx
je 0x48c6a6
push eax
call fcn.0049227f
add esp, 4
lea esi, [esp + 0x14]
mov byte [esp + 0x240], 9
call fcn.0040a810
mov eax, str.CChromeBrowser::CreateSearchProvider___pChromeSearchProvider__sUrl
lea ecx, [esp + 0x14]
call fcn.00401fe0
mov byte [esp + 0x240], 0x19
mov eax, dword [esp + 0x30]
cmp dword [eax + 0x18], 0x10
jb 0x48c6dc
mov eax, dword [eax + 4]
jmp 0x48c6df
add eax, 4
push 3
lea ecx, [esp + 0x78]
push eax
lea eax, [esp + 0x78]
mov dword [esp + 0x78], ecx
call fcn.00403c90
mov byte [esp + 0x240], 0x1a
mov eax, dword [esp + 0x70]
lea ecx, [esp + 0x54]
call fcn.00401fe0
lea edx, [esp + 0x14]
push edx
mov ecx, eax
mov byte [esp + 0x244], 0x1b
call fcn.004035d0
add esp, 4
lea esi, [esp + 0x54]
call fcn.0040a810
mov eax, dword [esp + 0x70]
lea ecx, [esp + 0x74]
cmp eax, ecx
je 0x48c73d
push eax
call fcn.0049227f
add esp, 4
lea esi, [esp + 0x14]
mov byte [esp + 0x240], 9
call fcn.0040a810
xor esi, esi
push edi
call fcn.0043fb90
mov edx, dword [esp + 0x14]
add esp, 4
push edx
call fcn.0047ae60
mov byte [esp + 0x244], 6
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
add esp, 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48c78e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x22c], 0x10
jb 0x48c7a8
mov ecx, dword [esp + 0x218]
push ecx
call fcn.00491101
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x238]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x224]
xor ecx, esp
call fcn.0049110c
mov esp, ebp
pop ebp
ret 8