Function at 0x100524f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f7d44
mov eax, dword fs:[0]
push eax
sub esp, 0x1a8
mov eax, dword [0x1012c610]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x1013339c]
and eax, 1
jne 0x100528ca
mov ecx, dword [0x1013339c]
or ecx, 1
mov dword [0x1013339c], ecx
mov dword [ebp - 4], 0
push 0x10103920
lea ecx, [ebp - 0x12c]
call fcn.10005560
mov byte [ebp - 4], 1
push str.http:__www.default_search.net_sidsysidaidappiditypeptypeverkbntmucsrcbar
lea ecx, [ebp - 0xf4]
call fcn.10005560
mov byte [ebp - 4], 2
push 0x10103788
lea ecx, [ebp - 0xbc]
call fcn.10005560
mov byte [ebp - 4], 3
push str.http:__www.default_search.net_search_sidsysidaidappiditypeptypeverkbntmucsrcderrp
lea ecx, [ebp - 0x84]
call fcn.10005560
mov byte [ebp - 4], 4
push str.http:__www.default_search.net_search_sidsysidaidappiditypeptypeverkbntmucsrc404p
lea ecx, [ebp - 0x4c]
call fcn.10005560
mov byte [ebp - 4], 5
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 1
mov dword [ebp - 0x164], 0
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x148]
push ecx
call fcn.1004eab0
add esp, 8
mov dword [ebp - 0x180], eax
mov edx, dword [ebp - 0x180]
mov dword [ebp - 0x184], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x184]
push eax
push str.NewTabPage2
lea ecx, [ebp - 0xf4]
push ecx
lea edx, [ebp - 0x110]
push edx
call fcn.1004eab0
add esp, 8
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x18c], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x18c]
push ecx
push str.NewTabPage
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xd8]
push eax
call fcn.1004eab0
add esp, 8
mov dword [ebp - 0x190], eax
mov ecx, dword [ebp - 0x190]
mov dword [ebp - 0x194], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x194]
push edx
push str.SearchURL
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.1004eab0
add esp, 8
mov dword [ebp - 0x198], eax
mov edx, dword [ebp - 0x198]
mov dword [ebp - 0x19c], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x19c]
push eax
push str.DNSErrorURL
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x68]
push edx
call fcn.1004eab0
add esp, 8
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a4], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x1a4]
push ecx
push str.Error404URL
lea edx, [ebp - 0x16c]
push edx
push 0x10105110
lea eax, [ebp - 0x168]
push eax
push 0x101050ec
push 0x10102d5c
push 0x101050d0
lea ecx, [ebp - 0x164]
push ecx
push 0x101050a8
push 0x10105098
push 0x1010509c
push str.ff_nt_supported
push str.GeneralEnabled
push 0x10102b74
push str.ProtectionEnabled
push str.Firefox_BHO
push 0x10102d2c
push str.FFBHO
lea ecx, [ebp - 0x30]
call fcn.10062370
mov dword [ebp - 0x1a8], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x1ac], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x1ac]
push eax
push 0x10102d48
lea ecx, [ebp - 0x160]
push ecx
call fcn.10059ea0
add esp, 0xc
mov dword [ebp - 0x1b0], eax
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b4], edx
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x1b4]
call fcn.10059dc0
mov ecx, eax
call fcn.10059dc0
mov ecx, eax
call fcn.10059dc0
mov ecx, eax
call fcn.10059dc0
mov ecx, eax
call fcn.1005a060
mov ecx, eax
call fcn.1005a060
mov ecx, eax
call fcn.1005a060
mov ecx, eax
call fcn.1005a060
mov ecx, eax
call fcn.10059d80
mov ecx, eax
call fcn.10059d80
mov ecx, eax
call fcn.10059d80
mov ecx, eax
call fcn.10059d80
mov ecx, eax
call fcn.10059d80
mov ecx, eax
call fcn.10059d50
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x17c]
push eax
mov ecx, 0x1013338c
call fcn.10055570
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x17c]
call fcn.1004f730
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x160]
call fcn.1004f710
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x30]
call fcn.100556e0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x68]
call fcn.10005610
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xa0]
call fcn.10005610
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xd8]
call fcn.10005610
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x110]
call fcn.10005610
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x148]
call fcn.10005610
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4c]
call fcn.10005610
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x84]
call fcn.10005610
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xbc]
call fcn.10005610
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf4]
call fcn.10005610
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x12c]
call fcn.10005610
push 0x10100930
call fcn.1007e917
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, 0x1013338c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007dda4
mov esp, ebp
pop ebp
ret