Function at 0x401c97
Capabilities:
Set registry value

Disassembly:
push ebp
lea ebp, [esp - 0x78]
sub esp, 0x1e8
mov eax, dword [0x41c0a0]
xor eax, ebp
mov dword [ebp + 0x74], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x170]
push eax
push 0x20006
xor ebx, ebx
push ebx
push str.SoftwareMicrosoftInternet_ExplorerSearchScopes
mov edi, SysReAllocString
push edi
mov byte [ebp - 0x161], bl
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x401e3e
push ebx
lea eax, [ebp - 0x16c]
push eax
push ebx
push 0xf003f
push ebx
push ebx
push ebx
push str.SoftwareMicrosoftInternet_ExplorerSearchScopesBing_Search
push edi
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x401e32
push 0xd2
lea eax, [ebp - 0x5f]
push ebx
push eax
mov byte [ebp - 0x60], bl
call fcn.00403aa0
lea eax, [ebp - 0x60]
push str.Bing_Search
push eax
call fcn.00405860
lea eax, [ebp - 0x60]
push eax
call fcn.00405960
add esp, 0x18
push eax
lea eax, [ebp - 0x60]
push eax
push 1
push ebx
push str.DisplayName
push dword [ebp - 0x16c]
call esi
lea eax, [ebp - 0x60]
push eax
call fcn.00405960
pop ecx
push eax
lea eax, [ebp - 0x60]
push eax
push 1
push ebx
push str.DefaultScope
push dword [ebp - 0x170]
call esi
lea eax, [ebp - 0x60]
push str.http:__bing.com.au_search_qsearchTermsmkt
push eax
mov byte [ebp - 0x161], 1
call fcn.00405860
lea eax, [ebp - 0x60]
push str.en_au
push eax
call fcn.00405870
lea eax, [ebp - 0x60]
push str.FORM
push eax
call fcn.00405870
lea eax, [ebp - 0x60]
push str.MIMW01
push eax
call fcn.00405870
lea eax, [ebp - 0x60]
push eax
call fcn.00405960
add esp, 0x24
push eax
lea eax, [ebp - 0x60]
push eax
push 1
push ebx
push 0x4185f8
push dword [ebp - 0x16c]
call esi
lea eax, [ebp - 0x60]
push str.http:__api.bing.com_qsml.aspx_querysearchTermsmarketLanguageformIE8SSCmaxwidthie:maxWidthrowheightie:rowHeightsectionHeightie:sectionHeight
push eax
call fcn.00405860
lea eax, [ebp - 0x60]
push eax
call fcn.00405960
add esp, 0xc
push eax
lea eax, [ebp - 0x60]
push eax
push 1
push ebx
push str.SuggestionsURL
push dword [ebp - 0x16c]
call esi
push str.http:__www.bing.com_favicon.ico
lea eax, [ebp - 0x60]
push eax
call fcn.00405860
lea eax, [ebp - 0x60]
push eax
call fcn.00405960
add esp, 0xc
push eax
lea eax, [ebp - 0x60]
push eax
push 1
push ebx
push str.FaviconURL
push dword [ebp - 0x16c]
call esi
push dword [ebp - 0x16c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x170]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0xff
lea eax, [ebp - 0x15f]
push ebx
push eax
mov byte [ebp - 0x160], bl
call fcn.00403aa0
lea eax, [ebp - 0x160]
push str.SoftwareMicrosoftOffice_
push eax
call fcn.00405860
add esp, 0x14
lea ecx, [ebp - 0x160]
call fcn.0040168b
test al, al
je 0x401f10
lea ecx, [ebp - 0x160]
call fcn.00401792
test al, al
je 0x401f10
lea ecx, [ebp - 0x160]
call fcn.0040199b
test al, al
je 0x401f10
lea eax, [ebp - 0x170]
push eax
push 0x20006
push ebx
lea eax, [ebp - 0x160]
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x401f10
mov byte [ebp - 0x168], bl
lea edi, [ebp - 0x167]
stosw word es:[edi], ax
lea eax, [ebp - 0x168]
push 0x4186fc
push eax
call fcn.00405860
lea eax, [ebp - 0x168]
push eax
call fcn.00405960
add esp, 0xc
push eax
lea eax, [ebp - 0x168]
push eax
push 1
push ebx
push str.Display
push dword [ebp - 0x170]
call esi
push dword [ebp - 0x170]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp + 0x74]
mov al, byte [ebp - 0x161]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00403a8a
add ebp, 0x78
leave
ret