Function at 0x446e60
Capabilities:
Log keystrokes via polling
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x571898
mov eax, dword fs:[0]
push eax
sub esp, 0x538
mov eax, dword [0x5fc150]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov esi, dword [ebp + 0x14]
mov dword [ebp - 0x528], ebx
mov dword [ebp - 0x534], 0
cmp eax, 0x4e
ja 0x4470e7
je 0x4470a6
add eax, 0xfffffffb
cmp eax, 0x26
ja case.0x44724b.1607
movzx eax, byte [eax + 0x4493fc]
jmp dword [eax*4 + 0x4493e8]
mov eax, dword [ebx + 0x2c]
mov dword [esi + 0x1c], eax
mov eax, dword [ebx + 0x28]
mov dword [esi + 0x18], eax
mov eax, dword [ebx + 0x2c]
mov dword [esi + 0x24], eax
xor eax, eax
jmp 0x4493c7
movzx eax, si
mov ecx, ebx
push eax
call fcn.004465a0
mov eax, 1
jmp 0x4493c7
push esi
mov ecx, ebx
call fcn.004419f0
mov eax, 1
jmp 0x4493c7
mov esi, dword [ebp + 0x10]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
cmp si, 1
je 0x446f25
cmp si, 2
jne 0x447019
mov ecx, dword [ebx + 0xac]
lea eax, [ebp - 0x530]
push eax
mov ecx, dword [ecx]
call fcn.00443b40
mov esi, dword [ebp - 0x52c]
mov ecx, ebx
sub esi, dword [ebp - 0x530]
push 0x660
call fcn.004443c0
test al, al
setne al
xor ecx, ecx
test al, al
mov byte [0x5f83d6], al
setne cl
mov dword [ebp - 0x520], ecx
test al, al
jne 0x446f8b
cmp esi, 0x400
jg 0x446f7d
xor edi, edi
mov byte [0x5f83d6], al
jmp 0x446f91
mov edi, 1
mov byte [0x5f83d6], 1
jmp 0x446f91
mov edi, dword [ebp - 0x520]
mov ecx, dword [ebx + 0xac]
push 0
push 0
push 0x977
mov ecx, dword [ecx]
call fcn.0040d9f0
cmp eax, 1
je 0x446fc7
mov ecx, dword [ebx + 0xac]
push 0
push 0
push 0xa0a
mov ecx, dword [ecx]
call fcn.0040d9f0
cmp eax, 1
jle 0x446fd2
xor edi, edi
mov byte [0x5f83d6], 0
xor esi, esi
push esi
push 0x660
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov eax, esi
neg eax
push 0
sbb al, al
and byte [0x5f83d6], al
neg esi
sbb esi, esi
and esi, edi
push esi
push 0xf1
push 0x660
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov esi, dword [ebp + 0x10]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x697
mov ecx, ebx
call fcn.004443c0
test al, al
je 0x447075
test si, si
jne 0x447066
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 0x2c]
call eax
test al, al
je 0x447066
push 0
push 0
push 0x400
push 0x656
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov esi, eax
call fcn.0040baa0
push esi
push dword [ebx + 0xc]
mov ecx, eax
call fcn.004a7820
jmp 0x447075
call fcn.0040baa0
push dword [ebx + 0xc]
mov ecx, eax
call fcn.004ba4a0
push 0x645
mov ecx, ebx
call fcn.004443c0
test al, al
je 0x447089
push 1
jmp 0x44708b
push 0
push 0x6a7
push dword [ebx + 0xc]
call edi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov eax, 1
jmp 0x4493c7
cmp dword [esi + 8], 0xfffffdd9
jne case.0x44724b.1607
mov eax, dword [ebx + 0x8e8]
cmp dword [esi], eax
jne 0x4493a7
push 0
push 0
push 0x130b
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 0
push eax
mov ecx, ebx
call fcn.00441970
mov eax, 1
jmp 0x4493c7
cmp eax, 0x114
ja 0x4493ae
je 0x449340
sub eax, 0x110
je 0x448dec
sub eax, 1
jne case.0x44724b.1607
push eax
push eax
push 0x13a1
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
sete byte [ebp - 0x519]
call fcn.0040baa0
mov esi, dword [ebp + 0x10]
mov edi, eax
movzx eax, si
mov dword [ebp - 0x520], edi
cmp eax, 0x643
ja 0x447225
je 0x447204
sub eax, 1
je case.0x44724b.1721
sub eax, 1
jne case.0x44724b.1607
mov ecx, dword [ebx + 0xac]
push eax
push eax
push 0x899
mov ecx, dword [ecx]
call fcn.0040d9f0
xor eax, eax
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x420], 7
mov dword [ebp - 0x424], 0
mov word [ebp - 0x434], ax
mov dword [ebp - 4], 9
mov ecx, ebx
mov eax, dword [ebx]
mov eax, dword [eax + 0x2c]
call eax
test al, al
je 0x4471e0
cmp dword [ebp - 0x420], 8
mov eax, dword [ebp - 0x434]
mov dword [ebx + 0x948], 5
jae 0x4471d4
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebx + 0x910]
call fcn.004e9be0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x434]
call fcn.004038c0
push 0
push 0
mov ecx, ebx
call fcn.004e92f0
xor eax, eax
jmp 0x4493c7
push 0x643
mov ecx, ebx
call fcn.004443c0
mov byte [0x5f83c8], al
mov byte [edi + 0x9d4], al
mov eax, 1
jmp 0x4493c7
cmp eax, 0xa7f9
ja case.0x44724b.1607
je 0x448ddb
sub eax, 0x644
cmp eax, 0x78
ja case.0x44724b.1607
movzx eax, byte [eax + 0x449494]
jmp dword [eax*4 + 0x449424]
push 0x6bc
mov ecx, ebx
call fcn.004443c0
movzx esi, al
neg esi
mov byte [edi + 0x990], al
mov byte [ebp - 0x519], al
sbb esi, esi
and esi, 5
push esi
push 0x6b9
push dword [ebx + 0xc]
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
call ebx
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call edi
push esi
mov esi, dword [ebp - 0x528]
push 0x6bb
push dword [esi + 0xc]
call ebx
push eax
call edi
xor eax, eax
cmp byte [ebp - 0x519], al
setne al
dec eax
and eax, 5
push eax
push 1
push dword [esi + 0xc]
call ebx
push eax
call edi
xor eax, eax
jmp 0x4493c7
xor eax, eax
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x420], 7
mov dword [ebp - 0x424], 0
mov word [ebp - 0x434], ax
mov dword [ebp - 4], 0xa
mov ecx, ebx
mov eax, dword [ebx]
mov eax, dword [eax + 0x2c]
call eax
test al, al
je 0x447333
cmp dword [ebp - 0x420], 8
mov eax, dword [ebp - 0x434]
mov dword [ebx + 0x948], 5
jae 0x447327
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebx + 0x910]
call fcn.004e9be0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x434]
call fcn.004038c0
push 0x641
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
lea eax, [ebp - 0x44c]
push eax
call fcn.00443be0
add esp, 8
mov dword [ebp - 4], 0xb
mov ecx, 0x5f83d8
push eax
call fcn.00403e70
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44c]
call fcn.004038c0
push 0x641
mov ecx, ebx
call fcn.0044a950
mov byte [edi + 8], 1
mov al, byte [0x5f83cb]
mov byte [ebp - 0x521], al
mov eax, 0x6b9
cmp si, ax
jne 0x4473b5
mov byte [0x5f83cb], 0
jmp 0x4473e6
mov eax, 0x6bb
cmp si, ax
jne 0x4473c8
mov byte [0x5f83cb], 1
jmp 0x4473e6
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
movzx eax, ax
test ax, ax
jns 0x4473e6
cmp byte [0x5f83cb], 0
sete byte [0x5f83cb]
cmp byte [ebp - 0x519], 0
je 0x4473fa
push 1
push 1
mov ecx, ebx
call fcn.0044a0e0
cmp dword [0x5f83ec], 8
mov eax, dword [0x5f83d8]
mov dword [ebp - 0x520], 0
jae 0x447417
mov eax, 0x5f83d8
push 0
lea ecx, [ebp - 0x520]
push ecx
push dword [0x60fc7c]
mov ecx, ebx
push eax
call fcn.00444f50
mov al, byte [ebp - 0x521]
mov byte [0x5f83cb], al
call fcn.0040baa0
mov esi, dword [eax + 0x234d8]
mov eax, dword [ebp - 0x520]
cmp eax, 3
jne 0x44753c
push str.Find:_Found_the_1st_occurrence_from_the_top._The_end_of_the_document_has_been_reached.
lea ecx, [ebp - 0x464]
call fcn.004029a0
mov dword [ebp - 4], 0xc
lea eax, [ebp - 0x464]
push eax
push str.find_status_end_reached
lea eax, [ebp - 0x47c]
mov ecx, esi
push eax
call fcn.0045ff80
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x464]
call fcn.004038c0
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 0x2c]
call eax
test al, al
jne 0x4474e4
push dword [ebx + 0xc]
mov dword [ebp - 0x430], 0x14
call dword [sym.imp.USER32.dll_GetParent]
mov dword [ebp - 0x42c], eax
lea eax, [ebp - 0x430]
push eax
mov dword [ebp - 0x424], 2
mov dword [ebp - 0x420], 0x64
mov dword [ebp - 0x428], 3
call dword [sym.imp.USER32.dll_FlashWindowEx]
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 0x2c]
call eax
test al, al
je 0x44751c
cmp dword [ebp - 0x468], 8
mov eax, dword [ebp - 0x47c]
mov dword [ebx + 0x948], 3
jae 0x447510
lea eax, [ebp - 0x47c]
push eax
lea ecx, [ebx + 0x910]
call fcn.004e9be0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x47c]
call fcn.004038c0
mov byte [edi + 8], 0
mov eax, 1
jmp 0x4493c7
cmp eax, 2
jne 0x4475a3
push str.Find:_Found_the_1st_occurrence_from_the_bottom._The_beginning_of_the_document_has_been_reached.
lea ecx, [ebp - 0x464]
call fcn.004029a0
mov dword [ebp - 4], 0xf
lea eax, [ebp - 0x464]
push eax
push str.find_status_top_reached
lea eax, [ebp - 0x494]
mov ecx, esi
push eax
call fcn.0045ff80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x464]
call fcn.004038c0
push 2
lea eax, [ebp - 0x494]
mov ecx, ebx
push eax
call fcn.0044a7f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x494]
call fcn.004038c0
mov byte [edi + 8], 0
mov eax, 1
jmp 0x4493c7
push 0x60fcac
lea ecx, [ebp - 0x528]
call fcn.0043d960
mov dword [ebp - 4], 0x12
cmp dword [ebx + 0x38], 1
jne 0x447703
push 0x5883b8
lea ecx, [ebp - 0x434]
call fcn.004029a0
mov byte [ebp - 4], 0x13
mov ecx, ebx
mov eax, dword [ebx]
mov eax, dword [eax + 0x2c]
call eax
test al, al
je 0x44761e
cmp dword [ebp - 0x420], 8
mov eax, dword [ebp - 0x434]
mov dword [ebx + 0x948], 5
jae 0x447612
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebx + 0x910]
call fcn.004e9be0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x434]
call fcn.004038c0
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x641
push dword [ebx + 0xc]
call esi
push 0x642
push dword [ebx + 0xc]
mov edi, eax
call esi
mov esi, eax
lea eax, [ebp - 0x44c]
push edi
push eax
call fcn.00443be0
add esp, 8
mov byte [ebp - 4], 0x14
mov ecx, 0x5f83d8
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x44c]
call fcn.004038c0
lea eax, [ebp - 0x44c]
push esi
push eax
call fcn.00443be0
add esp, 8
mov byte [ebp - 4], 0x15
mov ecx, 0x5f83f0
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x44c]
call fcn.004038c0
mov ecx, ebx
call fcn.0044aa50
cmp byte [ebp - 0x519], 0
mov esi, dword [ebp - 0x520]
mov byte [esi + 8], 1
je 0x4476cd
push 2
push dword [ebp + 0x10]
mov ecx, ebx
call fcn.0044a0e0
cmp dword [0x5f8404], 8
mov eax, dword [0x5f83f0]
jae 0x4476e0
mov eax, 0x5f83f0
cmp dword [0x5f83ec], 8
mov ecx, dword [0x5f83d8]
jae 0x4476f4
mov ecx, 0x5f83d8
push 0
push eax
push ecx
mov ecx, ebx
call fcn.00445e40
mov byte [esi + 8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x528]
call fcn.00418e50
mov eax, 1
jmp 0x4493c7
cmp dword [ebx + 0x38], 0
jne 0x4475a7
push 0x5883b8
lea ecx, [ebp - 0x434]
call fcn.004029a0
mov dword [ebp - 4], 0x16
mov ecx, ebx
mov eax, dword [ebx]
mov eax, dword [eax + 0x2c]
call eax
test al, al
je 0x447778
cmp dword [ebp - 0x420], 8
mov eax, dword [ebp - 0x434]
mov dword [ebx + 0x948], 5
jae 0x44776c
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebx + 0x910]
call fcn.004e9be0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x434]
call fcn.004038c0
push 0x641
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x641
mov ecx, ebx
mov esi, eax
call fcn.00440510
lea eax, [ebp - 0x44c]
push esi
push eax
call fcn.00443be0
add esp, 8
mov dword [ebp - 4], 0x17
mov ecx, 0x5f83d8
push eax
call fcn.00403e70
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44c]
call fcn.004038c0
push 0x641
mov ecx, ebx
call fcn.0044a950
cmp byte [ebp - 0x519], 0
mov byte [edi + 8], 1
je 0x4477ff
push 9
push dword [ebp + 0x10]
mov ecx, ebx
call fcn.0044a0e0
push 0
mov ecx, ebx
call fcn.00443340
mov byte [edi + 8], 0
mov eax, 1
jmp 0x4493c7
push 0x5883b8
lea ecx, [ebp - 0x434]
call fcn.004029a0
mov dword [ebp - 4], 0x18
mov ecx, ebx
mov eax, dword [ebx]
mov eax, dword [eax + 0x2c]
call eax
test al, al
je 0x447865
cmp dword [ebp - 0x420], 8
mov eax, dword [ebp - 0x434]
mov dword [ebx + 0x948], 5
jae 0x447859
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebx + 0x910]
call fcn.004e9be0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x434]
call fcn.004038c0
push 0x641
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x641
mov ecx, ebx
mov esi, eax
call fcn.00440510
lea eax, [ebp - 0x44c]
push esi
push eax
call fcn.00443be0
add esp, 8
mov dword [ebp - 4], 0x19
mov ecx, 0x5f83d8
push eax
call fcn.00403e70
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44c]
call fcn.004038c0
push 0x641
mov ecx, ebx
call fcn.0044a950
cmp byte [ebp - 0x519], 0
mov byte [edi + 8], 1
je 0x4478ec
push 9
push dword [ebp + 0x10]
mov ecx, ebx
call fcn.0044a0e0
push 2
jmp 0x447801
push 0x5883b8
lea ecx, [ebp - 0x434]
call fcn.004029a0
mov dword [ebp - 4], 0x1a
mov ecx, ebx
mov eax, dword [ebx]
mov eax, dword [eax + 0x2c]
call eax
test al, al
je 0x447942
cmp dword [ebp - 0x420], 8
mov eax, dword [ebp - 0x434]
mov dword [ebx + 0x948], 5
jae 0x447936
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebx + 0x910]
call fcn.004e9be0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x434]
call fcn.004038c0
mov esi, dword [sym.imp.USER32.dll_GetDlgItemTextW]
xor eax, eax
push 0x100
mov word [ebp - 0x21c], ax
lea eax, [ebp - 0x41c]
push eax
push 0x674
push dword [ebx + 0xc]
call esi
push 0x674
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.0043fcd0
add esp, 8
lea eax, [ebp - 0x41c]
mov ecx, 0x5f8408
push eax
call fcn.00403ef0
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0x675
push dword [ebx + 0xc]
call esi
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x675
push dword [ebx + 0xc]
call esi
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.0043fcd0
add esp, 8
lea eax, [ebp - 0x218]
mov ecx, 0x5f8420
push eax
call fcn.00403ef0
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x447a27
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp word [ebp + eax*2 - 0x21a], 0x5c
je 0x447a27
push 0x588408
mov ecx, 0x5f8420
call fcn.0040a2e0
push 0x641
push dword [ebx + 0xc]
call esi
push 0x641
mov ecx, ebx
mov esi, eax
call fcn.00440510
lea eax, [ebp - 0x44c]
push esi
push eax
call fcn.00443be0
add esp, 8
mov dword [ebp - 4], 0x1b
mov ecx, 0x5f83d8
push eax
call fcn.00403e70
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44c]
call fcn.004038c0
push 0x641
mov ecx, ebx
call fcn.0044a950
cmp byte [ebp - 0x519], 0
mov byte [edi + 8], 1
je 0x447a98
push 5
push dword [ebp + 0x10]
mov ecx, ebx
call fcn.0044a0e0
push 1
jmp 0x447801
push 0x60fcac
lea ecx, [ebp - 0x520]
call fcn.0043d960
mov dword [ebp - 4], 0x1c
lea ecx, [ebp - 0x47c]
push 0x5883b8
call fcn.004029a0
mov byte [ebp - 4], 0x1d
mov ecx, ebx
mov eax, dword [ebx]
mov eax, dword [eax + 0x2c]
call eax
test al, al
je 0x447b02
cmp dword [ebp - 0x468], 8
mov eax, dword [ebp - 0x47c]
mov dword [ebx + 0x948], 5
jae 0x447af6
lea eax, [ebp - 0x47c]
push eax
lea ecx, [ebx + 0x910]
call fcn.004e9be0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x47c]
call fcn.004038c0
mov esi, dword [sym.imp.USER32.dll_GetDlgItemTextW]
lea eax, [ebp - 0x418]
push 0x100
push eax
push 0x674
push dword [ebx + 0xc]
call esi
push 0x674
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
lea eax, [ebp - 0x418]
push eax
call fcn.0043fcd0
add esp, 8
lea eax, [ebp - 0x418]
mov ecx, 0x5f8408
push eax
call fcn.00403ef0
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0x675
push dword [ebx + 0xc]
call esi
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x675
push dword [ebx + 0xc]
call esi
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.0043fcd0
add esp, 8
lea eax, [ebp - 0x218]
mov ecx, 0x5f8420
push eax
call fcn.00403ef0
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x447bdb
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp word [ebp + eax*2 - 0x21a], 0x5c
je 0x447bdb
push 0x588408
mov ecx, 0x5f8420
call fcn.0040a2e0
push str.Are_you_sure_you_want_to_replace_all_occurrences_in_:_r
lea ecx, [ebp - 0x434]
call fcn.004029a0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x434]
push 0xffffffffffffffff
push 0
push 0x5f8420
call fcn.00406650
push str._rfor_file_type_:
lea ecx, [ebp - 0x434]
call fcn.0040a2e0
cmp dword [0x5f841c], 8
mov eax, dword [0x5f8408]
jae 0x447c26
mov eax, 0x5f8408
cmp word [eax], 0
je 0x447c47
push 0x5f8408
lea ecx, [ebp - 0x464]
call fcn.00402970
mov byte [ebp - 4], 0x1f
mov ecx, 1
jmp 0x447c63
push 0x588410
lea ecx, [ebp - 0x44c]
call fcn.004029a0
mov dword [ebp - 4], 0x20
mov ecx, 2
push 0xffffffffffffffff
push 0
mov dword [ebp - 0x534], ecx
lea ecx, [ebp - 0x434]
push eax
call fcn.00406650
mov dword [ebp - 4], 0x1f
mov eax, dword [ebp - 0x534]
test al, 2
je 0x447ca4
and eax, 0xfffffffd
lea ecx, [ebp - 0x44c]
mov dword [ebp - 0x534], eax
call fcn.004038c0
mov eax, dword [ebp - 0x534]
mov dword [ebp - 4], 0x1e
test al, 1
je 0x447cc3
and eax, 0xfffffffe
lea ecx, [ebp - 0x464]
mov dword [ebp - 0x534], eax
call fcn.004038c0
cmp dword [ebp - 0x420], 8
mov eax, dword [ebp - 0x434]
jae 0x447cd8
lea eax, [ebp - 0x434]
push 0x2101
push str.Are_you_sure_
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
jne 0x447dab
push 0x641
push dword [ebx + 0xc]
call esi
push eax
lea eax, [ebp - 0x44c]
push eax
call fcn.00443be0
add esp, 8
mov byte [ebp - 4], 0x21
mov ecx, 0x5f83d8
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x44c]
call fcn.004038c0
push 0x642
push dword [ebx + 0xc]
call esi
push eax
lea eax, [ebp - 0x44c]
push eax
call fcn.00443be0
add esp, 8
mov byte [ebp - 4], 0x22
mov ecx, 0x5f83f0
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x44c]
call fcn.004038c0
push 0x641
mov ecx, ebx
call fcn.0044a950
push 0x642
mov ecx, ebx
call fcn.0044a950
cmp byte [ebp - 0x519], 0
mov byte [edi + 8], 1
je 0x447d95
push 6
push dword [ebp + 0x10]
mov ecx, ebx
call fcn.0044a0e0
push 0
push 0
push 0xbda
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
mov byte [edi + 8], 0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x434]
call fcn.004038c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x520]
call fcn.00418e50
mov eax, 1
jmp 0x4493c7
push 0x60fcac
lea ecx, [ebp - 0x520]
call fcn.0043d960
mov dword [ebp - 4], 0x23
cmp dword [ebx + 0x38], 1
jne 0x447ef3
push 0x5883b8
lea ecx, [ebp - 0x434]
call fcn.004029a0
mov byte [ebp - 4], 0x24
mov ecx, ebx
mov eax, dword [ebx]
mov eax, dword [eax + 0x2c]
call eax
test al, al
je 0x447e43
cmp dword [ebp - 0x420], 8
mov eax, dword [ebp - 0x434]
mov dword [ebx + 0x948], 5
jae 0x447e37
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebx + 0x910]
call fcn.004e9be0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x434]
call fcn.004038c0
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x641
push dword [ebx + 0xc]
call esi
push eax
lea eax, [ebp - 0x44c]
push eax
call fcn.00443be0
add esp, 8
mov byte [ebp - 4], 0x25
mov ecx, 0x5f83d8
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x44c]
call fcn.004038c0
push 0x642
push dword [ebx + 0xc]
call esi
push eax
lea eax, [ebp - 0x44c]
push eax
call fcn.00443be0
add esp, 8
mov byte [ebp - 4], 0x26
mov ecx, 0x5f83f0
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x44c]
call fcn.004038c0
mov ecx, ebx
call fcn.0044aa50
cmp byte [ebp - 0x519], 0
mov byte [edi + 8], 1
je 0x447ee8
push 0xa
push dword [ebp + 0x10]
mov ecx, ebx
call fcn.0044a0e0
mov ecx, ebx
call fcn.00446580
mov byte [edi + 8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x520]
call fcn.00418e50
mov eax, 1
jmp 0x4493c7
push 0x60fcac
lea ecx, [ebp - 0x520]
call fcn.0043d960
mov dword [ebp - 4], 0x27
cmp dword [ebx + 0x38], 1
jne 0x447dba
push 0x5883b8
lea ecx, [ebp - 0x47c]
call fcn.004029a0
mov byte [ebp - 4], 0x28
mov ecx, ebx
mov eax, dword [ebx]
mov eax, dword [eax + 0x2c]
call eax
test al, al
je 0x447f7c
cmp dword [ebp - 0x468], 8
mov eax, dword [ebp - 0x47c]
mov dword [ebx + 0x948], 5
jae 0x447f70
lea eax, [ebp - 0x47c]
push eax
lea ecx, [ebx + 0x910]
call fcn.004e9be0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x47c]
call fcn.004038c0
mov eax, dword [ebx + 0xac]
mov eax, dword [eax]
mov ecx, dword [eax + 0x20]
call fcn.004443f0
test al, al
je 0x448026
call fcn.0040baa0
push str.Replace:_Cannot_replace_text._The_current_document_is_read_only.
lea ecx, [ebp - 0x464]
mov esi, dword [eax + 0x234d8]
call fcn.004029a0
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x464]
push eax
push str.find_status_replace_readonly
lea eax, [ebp - 0x494]
mov ecx, esi
push eax
call fcn.0045ff80
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x464]
call fcn.004038c0
push 1
lea eax, [ebp - 0x494]
mov ecx, ebx
push eax
call fcn.0044a7f0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x494]
call fcn.004038c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x520]
call fcn.00418e50
mov eax, 1
jmp 0x4493c7
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x641
push dword [ebx + 0xc]
call esi
push eax
lea eax, [ebp - 0x44c]
push eax
call fcn.00443be0
add esp, 8
mov byte [ebp - 4], 0x2c
mov ecx, 0x5f83d8
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x44c]
call fcn.004038c0
push 0x642
push dword [ebx + 0xc]
call esi
push eax
lea eax, [ebp - 0x44c]
push eax
call fcn.00443be0
add esp, 8
mov byte [ebp - 4], 0x2d
mov ecx, 0x5f83f0
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x44c]
call fcn.004038c0
mov ecx, ebx
call fcn.0044aa50
cmp byte [ebp - 0x519], 0
mov byte [edi + 8], 1
je 0x4480bc
push 2
push dword [ebp + 0x10]
mov ecx, ebx
call fcn.0044a0e0
mov ecx, dword [ebx + 0xac]
push 0
push 0
push 0x81e
mov ecx, dword [ecx]
call fcn.0040d9f0
push 0xffffffffffffffff
push 0
push 0
push 0x5f83c8
push 1
mov ecx, ebx
call fcn.00444d70
mov ecx, dword [ebx + 0xac]
mov esi, eax
push 0
push 0
push 0x81f
mov ecx, dword [ecx]
call fcn.0040d9f0
xor eax, eax
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 0
mov byte [edi + 8], 0
mov dword [ebp - 0x420], 7
mov dword [ebp - 0x424], 0
mov word [ebp - 0x434], ax
mov byte [ebp - 4], 0x2e
call fcn.0040baa0
lea ecx, [ebp - 0x464]
mov edi, dword [eax + 0x234d8]
test esi, esi
jns 0x448193
push str.Replace_All:_The_regular_expression_is_malformed.
call fcn.004029a0
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0x464]
push eax
push str.find_status_replaceall_re_malformed
lea eax, [ebp - 0x44c]
mov ecx, edi
push eax
call fcn.0045ff80
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x434]
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x44c]
jmp 0x4482bc
cmp esi, 1
jne 0x4481df
push str.Replace_All:_1_occurrence_was_replaced.
call fcn.004029a0
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x464]
push eax
push str.find_status_replaceall_1_replaced
lea eax, [ebp - 0x44c]
mov ecx, edi
push eax
call fcn.0045ff80
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x434]
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x44c]
jmp 0x4482bc
push str.Replace_All:__INT_REPLACE__occurrences_were_replaced.
call fcn.004029a0
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x464]
push eax
push str.find_status_replaceall_nb_replaced
lea eax, [ebp - 0x44c]
mov ecx, edi
push eax
call fcn.0045ff80
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x434]
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x44c]
call fcn.004038c0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x464]
call fcn.004038c0
push str._INT_REPLACE_
lea ecx, [ebp - 0x464]
call fcn.004029a0
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x494]
push esi
push eax
call fcn.0047c630
add esp, 8
mov byte [ebp - 4], 0x36
push eax
lea eax, [ebp - 0x464]
push eax
sub esp, 0x18
lea eax, [ebp - 0x434]
mov ecx, esp
mov dword [ebp - 0x538], esp
push eax
call fcn.00402970
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x44c]
push eax
mov byte [ebp - 4], 0x36
call fcn.004274c0
add esp, 0x24
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x434]
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x44c]
call fcn.004038c0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x494]
call fcn.004038c0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x464]
call fcn.004038c0
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 0x2c]
call eax
test al, al
je 0x448308
cmp dword [ebp - 0x420], 8
mov eax, dword [ebp - 0x434]
mov dword [ebx + 0x948], 4
jae 0x4482fc
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebx + 0x910]
call fcn.004e9be0
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SetFocus]
mov byte [ebp - 4], 0x27
jmp 0x447daf
cmp dword [ebx + 0x38], 0
jne 0x4493a7
push 0x5883b8
lea ecx, [ebp - 0x47c]
call fcn.004029a0
mov dword [ebp - 4], 0x39
mov ecx, ebx
mov eax, dword [ebx]
mov eax, dword [eax + 0x2c]
call eax
test al, al
je 0x448373
cmp dword [ebp - 0x468], 8
mov eax, dword [ebp - 0x47c]
mov dword [ebx + 0x948], 5
jae 0x448367
lea eax, [ebp - 0x47c]
push eax
lea ecx, [ebx + 0x910]
call fcn.004e9be0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x47c]
call fcn.004038c0
push 0x641
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x641
mov ecx, ebx
mov esi, eax
call fcn.0044a950
lea eax, [ebp - 0x44c]
push esi
push eax
call fcn.00443be0
add esp, 8
mov dword [ebp - 4], 0x3a
mov ecx, 0x5f83d8
push eax
call fcn.00403e70
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44c]
call fcn.004038c0
push 0xffffffffffffffff
push 0
push 0
push 0x5f83c8
push 2
mov ecx, ebx
call fcn.00444d70
mov esi, eax
mov dword [ebp - 0x424], 0
xor eax, eax
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x420], 7
mov dword [ebp - 0x424], 0
mov word [ebp - 0x434], ax
mov dword [ebp - 4], 0x3b
call fcn.0040baa0
lea ecx, [ebp - 0x464]
mov edi, dword [eax + 0x234d8]
test esi, esi
jns 0x44848e
push str.Count:_The_regular_expression_to_search_is_malformed.
call fcn.004029a0
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x464]
push eax
push str.find_status_count_re_malformed
lea eax, [ebp - 0x44c]
mov ecx, edi
push eax
call fcn.0045ff80
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x434]
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x44c]
call fcn.004038c0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x464]
jmp 0x4485d5
cmp esi, 1
jne 0x4484e9
push str.Count:_1_match.
call fcn.004029a0
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0x464]
push eax
push str.find_status_count_1_match
lea eax, [ebp - 0x44c]
mov ecx, edi
push eax
call fcn.0045ff80
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x434]
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x44c]
call fcn.004038c0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x464]
jmp 0x4485d5
push str.Count:__INT_REPLACE__matches.
call fcn.004029a0
mov byte [ebp - 4], 0x40
lea eax, [ebp - 0x464]
push eax
push str.find_status_count_nb_matches
lea eax, [ebp - 0x44c]
mov ecx, edi
push eax
call fcn.0045ff80
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x434]
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x44c]
call fcn.004038c0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x464]
call fcn.004038c0
push str._INT_REPLACE_
lea ecx, [ebp - 0x494]
call fcn.004029a0
mov byte [ebp - 4], 0x42
lea eax, [ebp - 0x464]
push esi
push eax
call fcn.0047c630
add esp, 8
mov byte [ebp - 4], 0x43
push eax
lea eax, [ebp - 0x494]
push eax
sub esp, 0x18
lea eax, [ebp - 0x434]
mov ecx, esp
mov dword [ebp - 0x538], esp
push eax
call fcn.00402970
mov byte [ebp - 4], 0x44
lea eax, [ebp - 0x44c]
push eax
mov byte [ebp - 4], 0x43
call fcn.004274c0
add esp, 0x24
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x434]
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x44c]
call fcn.004038c0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x464]
call fcn.004038c0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x494]
call fcn.004038c0
cmp byte [ebp - 0x519], 0
je 0x4485ef
push 1
push dword [ebp + 0x10]
mov ecx, ebx
call fcn.0044a0e0
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 0x2c]
call eax
test al, al
je 0x448627
cmp dword [ebp - 0x420], 8
mov eax, dword [ebp - 0x434]
mov dword [ebx + 0x948], 4
jae 0x44861b
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebx + 0x910]
call fcn.004e9be0
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SetFocus]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x434]
call fcn.004038c0
mov eax, 1
jmp 0x4493c7
cmp dword [ebx + 0x38], 3
jne 0x4493a7
push 0x5883b8
lea ecx, [ebp - 0x47c]
call fcn.004029a0
mov dword [ebp - 4], 0x46
mov ecx, ebx
mov eax, dword [ebx]
mov eax, dword [eax + 0x2c]
call eax
test al, al
je 0x4486a5
cmp dword [ebp - 0x468], 8
mov eax, dword [ebp - 0x47c]
mov dword [ebx + 0x948], 5
jae 0x448699
lea eax, [ebp - 0x47c]
push eax
lea ecx, [ebx + 0x910]
call fcn.004e9be0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x47c]
call fcn.004038c0
push 0x641
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
lea eax, [ebp - 0x44c]
push eax
call fcn.00443be0
add esp, 8
mov dword [ebp - 4], 0x47
mov ecx, 0x5f83d8
push eax
call fcn.00403e70
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44c]
call fcn.004038c0
push 0x641
mov ecx, ebx
call fcn.0044a950
cmp byte [ebp - 0x519], 0
je 0x448718
push 1
push esi
mov ecx, ebx
call fcn.0044a0e0
push 0xffffffffffffffff
push 0
push 0
push 0x5f83c8
push 3
mov ecx, ebx
mov byte [edi + 8], 1
call fcn.00444d70
mov esi, eax
mov dword [ebp - 0x424], 0
xor eax, eax
mov dword [ebp - 0x420], 0
mov byte [edi + 8], 0
mov dword [ebp - 0x420], 7
mov dword [ebp - 0x424], 0
mov word [ebp - 0x434], ax
mov dword [ebp - 4], 0x48
call fcn.0040baa0
lea ecx, [ebp - 0x464]
mov edi, dword [eax + 0x234d8]
test esi, esi
jns 0x4487de
push str.Mark:_The_regular_expression_to_search_is_malformed.
call fcn.004029a0
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0x464]
push eax
push str.find_status_mark_re_malformed
lea eax, [ebp - 0x44c]
mov ecx, edi
push eax
call fcn.0045ff80
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x434]
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x44c]
call fcn.004038c0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x464]
call fcn.004038c0
jmp 0x4485ef
cmp esi, 1
jne 0x44883e
push str.Mark:_1_match.
call fcn.004029a0
mov byte [ebp - 4], 0x4b
lea eax, [ebp - 0x464]
push eax
push str.find_status_mark_1_match
lea eax, [ebp - 0x44c]
mov ecx, edi
push eax
call fcn.0045ff80
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x434]
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x44c]
call fcn.004038c0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x464]
call fcn.004038c0
jmp 0x4485ef
push str.Mark:__INT_REPLACE__matches.
call fcn.004029a0
mov byte [ebp - 4], 0x4d
lea eax, [ebp - 0x464]
push eax
push str.find_status_mark_nb_matches
lea eax, [ebp - 0x44c]
mov ecx, edi
push eax
call fcn.0045ff80
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x434]
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x44c]
call fcn.004038c0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x464]
call fcn.004038c0
push str._INT_REPLACE_
lea ecx, [ebp - 0x494]
call fcn.004029a0
mov byte [ebp - 4], 0x4f
lea eax, [ebp - 0x464]
push esi
push eax
call fcn.0047c630
add esp, 8
mov byte [ebp - 4], 0x50
push eax
lea eax, [ebp - 0x494]
push eax
sub esp, 0x18
lea eax, [ebp - 0x434]
mov ecx, esp
mov dword [ebp - 0x538], esp
push eax
call fcn.00402970
mov byte [ebp - 4], 0x51
lea eax, [ebp - 0x44c]
push eax
mov byte [ebp - 4], 0x50
call fcn.004274c0
add esp, 0x24
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x434]
push eax
call fcn.00403e70
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x44c]
call fcn.004038c0
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x464]
call fcn.004038c0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x494]
call fcn.004038c0
jmp 0x4485ef
cmp dword [ebx + 0x38], 3
jne 0x4493a7
cmp byte [ebp - 0x519], 0
je 0x448951
push 1
push esi
mov ecx, ebx
call fcn.0044a0e0
push 0x5f83c8
mov ecx, ebx
call fcn.004402a0
mov eax, 1
jmp 0x4493c7
push 0x6a7
mov ecx, ebx
call fcn.004443c0
mov byte [0x5f843a], al
mov byte [edi + 0x9d8], al
mov eax, 1
jmp 0x4493c7
push 0x644
mov ecx, ebx
call fcn.004443c0
mov byte [0x5f83c9], al
mov byte [edi + 0x9d5], al
mov eax, 1
jmp 0x4493c7
push 0x645
mov ecx, ebx
call fcn.004443c0
test al, al
je 0x4489d1
mov dword [0x5f83d0], 2
mov dword [edi + 0x9dc], 2
push 1
jmp 0x448a0d
push 0x65a
mov ecx, ebx
call fcn.004443c0
push 0
test al, al
je 0x4489f9
mov dword [0x5f83d0], 1
mov dword [edi + 0x9dc], 1
jmp 0x448a0d
mov dword [0x5f83d0], 0
mov dword [edi + 0x9dc], 0
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x6a7
push dword [ebx + 0xc]
call edi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
cmp dword [0x5f83d0], 2
sete al
mov cl, al
mov dword [ebp - 0x520], ecx
test al, al
je 0x448a7a
mov esi, dword [sym.imp.USER32.dll_SendDlgItemMessageW]
push 0
push 0
push 0xf1
push 0x643
mov byte [0x5f83c8], 0
push dword [ebx + 0xc]
call esi
push 0
push 0
push 0xf1
push 0x6ba
push dword [ebx + 0xc]
call esi
mov ecx, dword [ebp - 0x520]
mov byte [0x5f83cb], 1
movzx esi, cl
xor esi, 1
push esi
push 0x643
push dword [ebx + 0xc]
call edi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push esi
push 0x6ba
jmp 0x447090
push 0x646
mov ecx, ebx
call fcn.004443c0
mov byte [0x5f83ca], al
mov byte [edi + 0x9d6], al
mov eax, 1
jmp 0x4493c7
push 0x6ba
mov ecx, ebx
call fcn.004443c0
test al, al
sete al
cmp al, 1
mov byte [0x5f83cb], al
sete al
mov byte [edi + 0x9d7], al
mov eax, 1
jmp 0x4493c7
cmp dword [ebx + 0x38], 3
jne 0x4493a7
push 0x652
mov ecx, ebx
call fcn.004443c0
mov byte [0x5f83d4], al
mov eax, 1
jmp 0x4493c7
cmp dword [ebx + 0x38], 3
jne 0x4493a7
push 0x650
mov ecx, ebx
call fcn.004443c0
mov byte [0x5f83d5], al
mov eax, 1
jmp 0x4493c7
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x448b48
cmp eax, 1
je 0x448b48
cmp eax, 3
jne 0x4493a7
push 0x660
mov ecx, ebx
call fcn.004443c0
mov byte [0x5f83d6], al
mov eax, 1
jmp 0x4493c7
push 0x696
mov ecx, ebx
call fcn.004443c0
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
movzx ebx, al
mov byte [ebp - 0x521], al
mov eax, dword [ebp - 0x528]
push ebx
push 0x657
push dword [eax + 0xc]
call edi
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
push eax
call esi
mov eax, dword [ebp - 0x528]
push ebx
push 0x697
push dword [eax + 0xc]
call edi
push eax
call esi
mov eax, dword [ebp - 0x528]
push ebx
push 0x698
push dword [eax + 0xc]
call edi
push eax
call esi
push ebx
mov ebx, dword [ebp - 0x528]
push 0x656
push dword [ebx + 0xc]
call edi
push eax
call esi
cmp byte [ebp - 0x521], 0
push 0
je 0x448c0e
push 1
push 0xf1
push 0x697
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov esi, dword [ebp - 0x520]
mov eax, 1
mov dword [esi + 0x9e0], 1
jmp 0x4493c7
mov esi, dword [sym.imp.USER32.dll_SendDlgItemMessageW]
push 0
push 0xf1
push 0x697
push dword [ebx + 0xc]
call esi
push 0
push 0
push 0xf1
push 0x698
push dword [ebx + 0xc]
call esi
call fcn.0040baa0
push dword [ebx + 0xc]
mov ecx, eax
call fcn.004ba4a0
mov esi, dword [ebp - 0x520]
mov eax, 1
mov dword [esi + 0x9e0], 0
jmp 0x4493c7
push 0
push 0
push 0x400
push 0x656
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov esi, eax
call fcn.0040baa0
push esi
push dword [ebx + 0xc]
mov ecx, eax
call fcn.004a7820
mov dword [edi + 0x9e0], 2
mov eax, 1
jmp 0x4493c7
call fcn.0040baa0
push dword [ebx + 0xc]
mov ecx, eax
call fcn.004ba4a0
mov dword [edi + 0x9e0], 1
mov eax, 1
jmp 0x4493c7
cmp dword [ebx + 0x38], 2
jne 0x4493a7
push 0x67a
mov ecx, ebx
call fcn.004443c0
mov byte [0x5f8438], al
mov byte [edi + 0x9d9], al
mov eax, 1
jmp 0x4493c7
cmp dword [ebx + 0x38], 2
jne 0x4493a7
push 0x67b
mov ecx, ebx
call fcn.004443c0
mov byte [0x5f8439], al
mov byte [edi + 0x9da], al
mov eax, 1
jmp 0x4493c7
cmp dword [ebx + 0x38], 2
jne 0x448d2f
push 0x67d
mov ecx, ebx
call fcn.004443c0
mov byte [edi + 0x9ea], al
cmp byte [edi + 0x9ea], 0
je 0x4493a7
call fcn.0040baa0
mov ecx, eax
call fcn.00443cb0
push eax
push 0x675
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 1
jmp 0x4493c7
cmp dword [ebx + 0x38], 2
jne 0x4493a7
push str.Select_a_folder_to_search_from
lea ecx, [ebp - 0x464]
call fcn.004029a0
mov dword [ebp - 4], 0x53
cmp dword [0x5f8434], 8
mov eax, dword [0x5f8420]
jae 0x448d95
mov eax, 0x5f8420
push eax
push 0x675
lea eax, [ebp - 0x464]
push eax
push dword [ebx + 0xc]
lea eax, [ebp - 0x44c]
push eax
call fcn.00425040
add esp, 0x14
lea ecx, [ebp - 0x44c]
call fcn.004038c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x464]
call fcn.004038c0
mov eax, 1
jmp 0x4493c7
mov ecx, ebx
call fcn.004e9680
mov eax, 1
jmp 0x4493c7
call fcn.0040baa0
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
cmp byte [eax + 0xae], 0
je 0x448f1d
push 0x641
push dword [ebx + 0xc]
call edi
push 0x642
push dword [ebx + 0xc]
mov edi, eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov esi, dword [ebp - 0x528]
mov ebx, eax
push 0x674
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x675
push dword [esi + 0xc]
mov dword [ebp - 0x520], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push dword [esi + 0xc]
mov dword [ebp - 0x538], eax
call dword [sym.imp.USER32.dll_GetDC]
push 0x5c
mov esi, eax
lea eax, [ebp - 0x518]
push 0
push eax
call fcn.00544020
add esp, 0xc
push 0x48
push 0x5a
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push eax
push 8
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
push str.Courier_New
mov dword [ebp - 0x518], eax
lea eax, [ebp - 0x4fc]
push 0x20
push eax
call fcn.0054bd88
add esp, 0xc
lea eax, [ebp - 0x518]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov ecx, dword [ebp - 0x528]
push esi
push dword [ecx + 0xc]
mov dword [ecx + 0x94c], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [ebp - 0x528]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 1
push dword [eax + 0x94c]
push 0x30
push edi
call esi
mov eax, dword [ebp - 0x528]
push 1
push dword [eax + 0x94c]
push 0x30
push ebx
call esi
mov ebx, dword [ebp - 0x528]
push 1
push dword [ebx + 0x94c]
push 0x30
push dword [ebp - 0x520]
call esi
push 1
push dword [ebx + 0x94c]
push 0x30
push dword [ebp - 0x538]
call esi
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
lea eax, [ebp - 0x4a4]
push eax
push 2
push dword [ebx + 0xc]
call edi
mov esi, dword [sym.imp.USER32.dll_GetWindowRect]
push eax
call esi
mov eax, dword [ebp - 0x498]
mov edx, dword [ebp - 0x4a0]
sub eax, edx
mov ecx, dword [ebp - 0x4a4]
mov dword [ebx + 0x48], eax
mov dword [ebx + 0x58], eax
mov dword [ebx + 0x68], eax
mov eax, dword [ebp - 0x49c]
sub eax, ecx
mov dword [ebp - 0x530], ecx
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x54], eax
mov dword [ebx + 0x64], eax
lea eax, [ebp - 0x530]
push eax
push dword [ebx + 0xc]
mov dword [ebp - 0x52c], edx
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp byte [ebx + 0xcc], 0
sete al
movzx eax, al
push eax
push 2
push dword [ebx + 0xc]
call edi
push eax
lea eax, [ebp - 0x53c]
mov ecx, ebx
push eax
call fcn.004e94e0
cmp byte [ebx + 0xcc], 0
mov ecx, dword [eax]
mov dword [ebp - 0x530], ecx
mov eax, dword [eax + 4]
mov dword [ebp - 0x52c], eax
mov dword [ebx + 0x50], eax
sete al
movzx eax, al
push eax
push 0x649
push dword [ebx + 0xc]
mov dword [ebx + 0x4c], ecx
call edi
push eax
lea eax, [ebp - 0x53c]
mov ecx, ebx
push eax
call fcn.004e94e0
cmp byte [ebx + 0xcc], 0
mov ecx, dword [eax]
mov dword [ebp - 0x530], ecx
mov eax, dword [eax + 4]
mov dword [ebp - 0x52c], eax
mov dword [ebx + 0x60], eax
sete al
movzx eax, al
push eax
push 2
push dword [ebx + 0xc]
mov dword [ebx + 0x5c], ecx
call edi
push eax
lea eax, [ebp - 0x53c]
mov ecx, ebx
push eax
call fcn.004e94e0
mov ecx, dword [eax]
mov dword [ebp - 0x530], ecx
mov eax, dword [eax + 4]
mov dword [ebp - 0x52c], eax
add eax, 0xa
mov dword [ebx + 0x3c], ecx
mov dword [ebx + 0x40], eax
lea eax, [ebp - 0x474]
push eax
push 0x660
push dword [ebx + 0xc]
call edi
push eax
call esi
mov eax, dword [ebp - 0x468]
sub eax, dword [ebp - 0x470]
mov dword [ebx + 0xa8], eax
mov dword [ebx + 0x98], eax
mov eax, dword [ebp - 0x46c]
sub eax, dword [ebp - 0x474]
cmp byte [ebx + 0xcc], 0
mov dword [ebx + 0xa4], eax
mov dword [ebx + 0x94], eax
sete al
movzx eax, al
push eax
push 0x660
push dword [ebx + 0xc]
call edi
push eax
lea eax, [ebp - 0x53c]
mov ecx, ebx
push eax
call fcn.004e94e0
cmp byte [ebx + 0xcc], 0
mov ecx, dword [eax]
mov dword [ebp - 0x530], ecx
mov eax, dword [eax + 4]
mov dword [ebp - 0x52c], eax
mov dword [ebx + 0xa0], eax
mov dword [ebx + 0x90], eax
sete al
movzx eax, al
push eax
push 0x64e
push dword [ebx + 0xc]
mov dword [ebx + 0x9c], ecx
mov dword [ebx + 0x8c], ecx
call edi
push eax
lea eax, [ebp - 0x544]
mov ecx, ebx
push eax
call fcn.004e94e0
mov eax, dword [ebp - 0x540]
add eax, 4
mov dword [ebx + 0x90], eax
lea eax, [ebp - 0x42c]
push eax
push 0x662
push dword [ebx + 0xc]
call edi
push eax
call esi
mov eax, dword [ebp - 0x420]
sub eax, dword [ebp - 0x428]
mov dword [ebx + 0x88], eax
mov dword [ebx + 0x78], eax
mov eax, dword [ebp - 0x424]
sub eax, dword [ebp - 0x42c]
cmp byte [ebx + 0xcc], 0
mov dword [ebx + 0x84], eax
mov dword [ebx + 0x74], eax
sete al
movzx eax, al
push eax
push 0x662
push dword [ebx + 0xc]
call edi
push eax
lea eax, [ebp - 0x53c]
mov ecx, ebx
push eax
call fcn.004e94e0
mov ecx, dword [eax]
mov dword [ebp - 0x530], ecx
mov eax, dword [eax + 4]
mov dword [ebp - 0x52c], eax
mov dword [ebx + 0x80], eax
mov eax, dword [ebp - 0x540]
add eax, 0xfffffff7
mov dword [ebx + 0x7c], ecx
mov dword [ebx + 0x6c], ecx
mov dword [ebx + 0x70], eax
call fcn.0040baa0
push str.Use_ShiftEnter_to_search_in_the_opposite_direction.
lea ecx, [ebp - 0x44c]
mov esi, dword [eax + 0x234d8]
call fcn.004029a0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x44c]
push eax
push str.shift_change_direction_tip
lea eax, [ebp - 0x464]
mov ecx, esi
push eax
call fcn.0045ff80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x44c]
call fcn.004038c0
cmp dword [ebp - 0x450], 8
mov eax, dword [ebp - 0x464]
jae 0x4491ed
lea eax, [ebp - 0x464]
push eax
push dword [ebx + 4]
push dword [ebx + 0xc]
push 1
call fcn.004238e0
add esp, 0x10
mov dword [ebx + 0xc0], eax
lea ecx, [ebp - 0x44c]
push str.2_find_buttons_mode
call fcn.004029a0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x44c]
push eax
push str.two_find_buttons_tip
lea eax, [ebp - 0x494]
mov ecx, esi
push eax
call fcn.0045ff80
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x44c]
call fcn.004038c0
cmp dword [ebp - 0x480], 8
mov eax, dword [ebp - 0x494]
jae 0x449256
lea eax, [ebp - 0x494]
push eax
push dword [ebx + 4]
push dword [ebx + 0xc]
push 0x6bc
call fcn.004238e0
add esp, 0x10
mov dword [ebx + 0xc4], eax
lea ecx, [ebp - 0x44c]
push str.Find_in_cpp__cxx__h__hxx__hpp:_r.cpp_.cxx_.h_.hxx_.hpp_r_rFind_in_all_files_except_exe__obj__log:_r.__.exe__.obj__.log
call fcn.004029a0
mov byte [ebp - 4], 6
lea eax, [ebp - 0x44c]
push eax
push str.find_in_files_filter_tip
lea eax, [ebp - 0x4bc]
mov ecx, esi
push eax
call fcn.0045ff80
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x44c]
call fcn.004038c0
cmp dword [ebp - 0x4a8], 8
mov eax, dword [ebp - 0x4bc]
jae 0x4492c2
lea eax, [ebp - 0x4bc]
push eax
push dword [ebx + 4]
push dword [ebx + 0xc]
push 0x676
call fcn.004238e0
add esp, 0x10
mov dword [ebx + 0xc8], eax
push 0x595408
push 0x6b9
push dword [ebx + 0xc]
call edi
mov esi, dword [sym.imp.USER32.dll_SetWindowTextW]
push eax
call esi
push 0x59540c
push 0x6bb
push dword [ebx + 0xc]
call edi
push eax
call esi
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4bc]
call fcn.004038c0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x494]
call fcn.004038c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x464]
call fcn.004038c0
mov eax, 1
jmp 0x4493c7
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x656
push dword [ebx + 0xc]
call edi
cmp esi, eax
jne 0x4493a7
push 0
push 0
push 0x400
push 0x656
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov esi, eax
call fcn.0040baa0
push 0
push 0
push 0xf0
push 0x698
mov dword [eax + 0x9e4], esi
push dword [ebx + 0xc]
call edi
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
jne 0x4493a7
call fcn.0040baa0
push esi
push dword [ebx + 0xc]
mov ecx, eax
call fcn.004a7820
mov eax, 1
jmp 0x4493c7
cmp eax, 0x7f4
jne case.0x44724b.1607
push esi
push dword [ebp + 0x10]
push eax
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0052c233
mov esp, ebp
pop ebp
ret 0x10