Function at 0x180047088
Capabilities:
Print debug messages

Disassembly:
mov rax, rsp
push rbp
push rsi
push r12
push r13
push r14
sub rsp, 0xf0
mov qword [rsp + 0xe0], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov rbp, rcx
lea rdx, [rax - 0x90]
lea r13, [0x180162940]
mov rcx, r13
call fcn.18002b024
mov rdx, qword [rax]
xor ebx, ebx
cmp dword [rdx - 8], ebx
sete bl
mov rdx, qword [rsp + 0x88]
add rdx, 0xfffffffffffffff4
lea r12, [0x18015f758]
or r14d, 0xffffffff
cmp rdx, r12
je 0x180047109
mov eax, r14d
lock xadd dword [rdx], eax
add eax, r14d
test eax, eax
jg 0x180047109
mov rcx, qword [rsp + 0x88]
add rcx, 0xfffffffffffffff4
call fcn.1800d1434
test ebx, ebx
je 0x180047127
lea rdx, str.CDataIESearchRegistryEntity::IsChanged_78_____Search_URL_is_empty._Not_checking...
lea rcx, [0x18015f578]
call fcn.1800098e8
xor eax, eax
jmp 0x1800479cf
mov rcx, r13
call fcn.180004a24
test eax, eax
jne 0x18004714d
lea rdx, str.CDataIESearchRegistryEntity::IsChanged_78_____Search_Installed_flag_is_set_to_False._Not_checking...
lea rcx, [0x18015f578]
call fcn.1800098e8
xor eax, eax
jmp 0x1800479cf
lea rcx, [0x180162138]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ebx, dword [0x1801620e0]
lea rcx, [0x180162138]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
jne 0x18004718b
lea rdx, str.CDataIESearchRegistryEntity::IsChanged_78_____IE_Not_enabled._Not_checking...
lea rcx, [0x18015f578]
call fcn.1800098e8
xor eax, eax
jmp 0x1800479cf
lea rcx, str.BOOOOO
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rdx, str.SoftwareMicrosoftInternet_ExplorerSearchScopes
lea rcx, [rsp + 0x138]
call fcn.1800041c0
nop
lea r8, [rsp + 0x58]
mov rbx, qword [rsp + 0x138]
mov rdx, rbx
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
je 0x18004721e
mov rax, qword [rbp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, str.Entry__s_CHANGED_:_err_cannot_open_reg_key...
mov r8d, 0x56
lea rdx, str..DataIESearchRegistryEntity.cpp
lea rcx, [0x18015f578]
call fcn.18000b1e8
nop
lea rcx, [rbx - 0xc]
cmp rcx, r12
je 0x180047214
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x180047214
call fcn.1800d1434
mov eax, 1
jmp 0x1800479cf
mov rax, qword [0x18015f768]
mov qword [rsp + 0x130], rax
lea rdx, str.DefaultScope
lea rcx, [rsp + 0xd0]
call fcn.1800041c0
lea r9, [rsp + 0x130]
mov r8, rax
mov rdx, qword [rsp + 0x58]
lea rcx, [0x180163340]
call fcn.18001b3c0
test eax, eax
jne 0x1800472ed
mov rax, qword [rbp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, str.Entry__s_CHANGED_:_err_cannot_open_DefaultScope_reg_key...
mov r8d, 0x5f
lea rdx, str..DataIESearchRegistryEntity.cpp
lea rcx, [0x18015f578]
call fcn.18000b1e8
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
mov rcx, qword [rsp + 0x130]
add rcx, 0xfffffffffffffff4
cmp rcx, r12
je 0x1800472bf
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x1800472bf
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x138]
add rcx, 0xfffffffffffffff4
cmp rcx, r12
je 0x1800472e3
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x1800472e3
call fcn.1800d1434
mov eax, 1
jmp 0x1800479cf
mov rax, qword [0x18015f768]
mov qword [rsp + 0x50], rax
lea rdx, str.DoNotAskAgain
lea rcx, [rsp + 0xc8]
call fcn.1800041c0
lea r9, [rsp + 0x50]
mov r8, rax
mov rdx, qword [rsp + 0x58]
lea rcx, [0x180163340]
call fcn.18001b3c0
xor sil, sil
test eax, eax
je 0x18004736c
lea rcx, [rsp + 0x50]
call fcn.180003f8c
mov rbx, qword [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.USER32.dll_CharLowerW]
cmp dword [rbx - 8], 0
jl 0x180047369
lea rdx, str.speedbit.com
mov rcx, rbx
call fcn.1800d1f00
test rax, rax
je 0x180047369
sub rax, rbx
sar rax, 1
test eax, eax
jns 0x18004736c
mov sil, 1
lea rdx, [rsp + 0x90]
mov rcx, r13
call fcn.1800492a8
mov r8, qword [rax]
mov rax, qword [rsp + 0x130]
sub r8, rax
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x18004739e
add rax, 2
test ecx, ecx
jne 0x18004738a
test edx, edx
setne bl
mov rcx, qword [rsp + 0x90]
add rcx, 0xfffffffffffffff4
cmp rcx, r12
je 0x1800473d3
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x1800473d3
mov rcx, qword [rsp + 0x90]
add rcx, 0xfffffffffffffff4
call fcn.1800d1434
test bl, bl
je 0x180047699
lea rdx, [0x18010d528]
lea rcx, [rsp + 0x68]
call fcn.1800041c0
nop
lea rdx, [rsp + 0xa0]
mov rcx, r13
call fcn.1800492a8
nop
mov r9, qword [rax]
mov r8, qword [rsp + 0x130]
lea rdx, str.Current__IE__Search_Value:___s___Value_from_configuration:___s_
lea rcx, [rsp + 0x68]
call fcn.180008f64
nop
mov rcx, qword [rsp + 0xa0]
add rcx, 0xfffffffffffffff4
cmp rcx, r12
je 0x18004744b
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x18004744b
mov rcx, qword [rsp + 0xa0]
add rcx, 0xfffffffffffffff4
call fcn.1800d1434
mov rdx, qword [rsp + 0x68]
lea rcx, [0x18015f578]
call fcn.1800098e8
lea rcx, [rbp + 0x68]
call fcn.180001eac
lea rcx, [rbp + 0x128]
lea rdx, [rsp + 0x130]
call fcn.180003500
mov r11, qword [0x18015f768]
mov qword [rsp + 0x60], r11
mov r8, qword [rsp + 0x130]
lea rdx, str.GUID_s
lea rcx, [rsp + 0x60]
call fcn.180008f64
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x68]
call fcn.180001910
mov r11, qword [0x18015f768]
mov qword [rsp + 0x80], r11
mov r8, qword [rsp + 0x130]
lea rdx, str.SoftwareMicrosoftInternet_ExplorerSearchScopes_s
lea rcx, [rsp + 0x80]
call fcn.180008f64
lea r11, [rsp + 0xc0]
mov qword [rsp + 0xb8], r11
lea rdx, str.DisplayName
lea rcx, [rsp + 0xc0]
call fcn.1800041c0
mov r13, rax
mov rbx, qword [rsp + 0x80]
lea rsi, [rbx - 0xc]
cmp dword [rsi], 0
jl 0x18004751a
mov qword [rsp + 0x70], rbx
lock add dword [rsi], 1
jmp 0x18004753f
mov rax, qword [0x18015f768]
mov qword [rsp + 0x70], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8, rbx
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.180003e28
nop
lea rax, [rsp + 0x130]
mov qword [rsp + 0x20], rax
mov r9, r13
lea r8, [rsp + 0x70]
mov rdx, 0xffffffff80000001
lea rcx, [0x180163340]
call fcn.18000936c
test eax, eax
je 0x180047592
mov r8, qword [rsp + 0x130]
lea rdx, str.DisplayName_s
lea rcx, [rsp + 0x60]
call fcn.180008f64
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x68]
call fcn.180001910
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r9, qword [rsp + 0x130]
mov r8, qword [rbp + 0x60]
lea rdx, str.Entry__s_CHANGED__new_GUID_:__s
lea rcx, [0x18015f578]
call fcn.1800098e8
nop
lea rbx, [0x18015f758]
cmp rsi, rbx
je 0x1800475e0
mov eax, r14d
lock xadd dword [rsi], eax
add eax, r14d
test eax, eax
jg 0x1800475e0
mov rcx, rsi
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x60]
add rcx, 0xfffffffffffffff4
cmp rcx, rbx
je 0x180047602
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x180047602
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x68]
add rcx, 0xfffffffffffffff4
cmp rcx, rbx
je 0x180047624
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x180047624
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x50]
add rcx, 0xfffffffffffffff4
cmp rcx, rbx
je 0x180047646
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x180047646
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x130]
add rcx, 0xfffffffffffffff4
cmp rcx, rbx
je 0x18004766b
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x18004766b
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x138]
add rcx, 0xfffffffffffffff4
cmp rcx, rbx
je 0x18004768f
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x18004768f
call fcn.1800d1434
mov eax, 1
jmp 0x1800479cf
lea rcx, [0x18010d37c]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r8, [0x18010d37c]
mov edx, eax
lea rcx, [rsp + 0x138]
call fcn.180008324
lea rdx, [rsp + 0x98]
mov rcx, r13
call fcn.1800492a8
nop
mov rax, qword [rax]
mov r8, rax
mov edx, dword [rax - 8]
lea rcx, [rsp + 0x138]
call fcn.180008324
nop
mov rcx, qword [rsp + 0x98]
add rcx, 0xfffffffffffffff4
cmp rcx, r12
je 0x180047714
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x180047714
mov rcx, qword [rsp + 0x98]
add rcx, 0xfffffffffffffff4
call fcn.1800d1434
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r11, [rsp + 0x128]
mov qword [rsp + 0x40], r11
lea rax, [rsp + 0x78]
mov qword [rsp + 0x38], rax
and qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20019
and dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rbx, qword [rsp + 0x138]
mov rdx, rbx
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
je 0x18004781e
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x28], rbx
mov rax, qword [rbp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, str.Entry__s_CHANGED_:_err_cannot_open__s_reg_key...
mov r8d, 0x94
lea rdx, str..DataIESearchRegistryEntity.cpp
lea rcx, [0x18015f578]
call fcn.18000b1e8
nop
mov rcx, qword [rsp + 0x50]
add rcx, 0xfffffffffffffff4
cmp rcx, r12
je 0x1800477cb
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x1800477cb
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x130]
add rcx, 0xfffffffffffffff4
cmp rcx, r12
je 0x1800477f0
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x1800477f0
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x138]
add rcx, 0xfffffffffffffff4
cmp rcx, r12
je 0x180047814
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x180047814
call fcn.1800d1434
mov eax, 1
jmp 0x1800479cf
lea rdx, [rsp + 0xa8]
mov rcx, r13
call fcn.18002b024
mov rbx, rax
lea rdx, [0x18011e140]
lea rcx, [rsp + 0xd8]
call fcn.1800041c0
mov r9, rbx
mov r8, rax
mov rdx, qword [rsp + 0x78]
mov rcx, rbp
call fcn.180046f18
test eax, eax
sete bl
mov rcx, qword [rsp + 0xa8]
add rcx, 0xfffffffffffffff4
cmp rcx, r12
je 0x18004788d
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x18004788d
mov rcx, qword [rsp + 0xa8]
add rcx, 0xfffffffffffffff4
call fcn.1800d1434
test bl, bl
je 0x1800478e0
lea rax, [rsp + 0xb0]
mov qword [rsp + 0xb8], rax
lea rdx, [rsp + 0xb0]
mov rcx, r13
call fcn.18002b024
mov rbx, rax
lea rdx, [0x18011e140]
lea rcx, [rsp + 0xe8]
call fcn.1800041c0
nop
mov r9, rbx
mov r8, rax
mov rdx, qword [rsp + 0x78]
lea rcx, [0x180163340]
call fcn.18001b580
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test sil, sil
je 0x180047962
mov rcx, qword [rsp + 0x50]
add rcx, 0xfffffffffffffff4
cmp rcx, r12
je 0x180047912
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x180047912
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x130]
add rcx, 0xfffffffffffffff4
cmp rcx, r12
je 0x180047937
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x180047937
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x138]
add rcx, 0xfffffffffffffff4
cmp rcx, r12
je 0x18004795b
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x18004795b
call fcn.1800d1434
mov eax, 1
jmp 0x1800479cf
mov rcx, qword [rsp + 0x50]
add rcx, 0xfffffffffffffff4
cmp rcx, r12
je 0x180047984
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x180047984
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x130]
add rcx, 0xfffffffffffffff4
cmp rcx, r12
je 0x1800479a9
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x1800479a9
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x138]
add rcx, 0xfffffffffffffff4
cmp rcx, r12
je 0x1800479cd
mov eax, r14d
lock xadd dword [rcx], eax
add eax, r14d
test eax, eax
jg 0x1800479cd
call fcn.1800d1434
xor eax, eax
mov rbx, qword [rsp + 0x120]
add rsp, 0xf0
pop r14
pop r13
pop r12
pop rsi
pop rbp
ret