Function at 0x1400a6920
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov rax, qword [0x140185220]
xor rax, rsp
mov qword [rbp + 0x48], rax
mov r14, rcx
mov edx, 0x3f4
mov rcx, qword [rcx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
lea edi, [rax + 1]
movsxd rcx, edi
mov eax, 2
mul rcx
mov rbx, rax
mov rsi, 0xffffffffffffffff
cmovo rbx, rsi
mov rcx, rbx
call fcn.140114b30
mov r15, rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.140118720
mov qword [rsp + 0x60], r15
mov r9d, edi
mov r8, r15
mov edx, 0x3f4
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
nop
mov r8, rsi
nop
inc r8
cmp word [r15 + r8*2], 0
jne 0x1400a69c0
lea rcx, [r14 + 0x68]
mov rdx, r15
call fcn.14004ca40
mov edx, 0x3e8
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
lea edi, [rax + 1]
movsxd rcx, edi
mov eax, 2
mul rcx
mov rbx, rax
cmovo rbx, rsi
mov rcx, rbx
call fcn.140114b30
mov r12, rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.140118720
mov r9d, edi
mov r8, r12
mov edx, 0x3e8
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
mov qword [rsp + 0x60], r12
mov rcx, r15
call fcn.14011460c
mov r8, rsi
inc r8
cmp word [r12 + r8*2], 0
jne 0x1400a6a41
lea rcx, [r14 + 0x88]
mov rdx, r12
call fcn.14004ca40
mov edx, 0x3ff
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
lea edi, [rax + 1]
movsxd rcx, edi
mov eax, 2
mul rcx
mov rbx, rax
cmovo rbx, rsi
mov rcx, rbx
call fcn.140114b30
mov r15, rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.140118720
mov r9d, edi
mov r8, r15
mov edx, 0x3ff
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
mov qword [rsp + 0x60], r15
mov rcx, r12
call fcn.14011460c
mov r8, rsi
inc r8
cmp word [r15 + r8*2], 0
jne 0x1400a6ac5
lea rcx, [r14 + 0xa8]
mov rdx, r15
call fcn.14004ca40
mov edx, 0x413
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
lea edi, [rax + 1]
movsxd rcx, edi
mov eax, 2
mul rcx
mov rbx, rax
cmovo rbx, rsi
mov rcx, rbx
call fcn.140114b30
mov r12, rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.140118720
mov r9d, edi
mov r8, r12
mov edx, 0x413
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
mov qword [rsp + 0x60], r12
mov rcx, r15
call fcn.14011460c
mov r8, rsi
nop dword [rax]
inc r8
cmp word [r12 + r8*2], 0
jne 0x1400a6b50
lea rcx, [r14 + 0x108]
mov rdx, r12
call fcn.14004ca40
mov edx, 0x410
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
lea edi, [rax + 1]
movsxd rcx, edi
mov eax, 2
mul rcx
mov rbx, rax
cmovo rbx, rsi
mov rcx, rbx
call fcn.140114b30
mov r15, rax
mov qword [rsp + 0x70], rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.140118720
mov r9d, edi
mov r8, r15
mov edx, 0x410
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
mov rbx, r15
mov qword [rsp + 0x60], rbx
mov rcx, r12
call fcn.14011460c
mov r8, rsi
nop dword [rax]
inc r8
cmp word [r15 + r8*2], 0
jne 0x1400a6be0
lea rcx, [r14 + 0xe0]
mov rdx, r15
call fcn.14004ca40
mov r13, r15
lea r15, [r14 + 0xc8]
mov rdi, qword [r15]
mov rsi, qword [r15 + 8]
cmp rdi, rsi
je 0x1400a6c28
mov rcx, rdi
call fcn.14004b2f0
add rdi, 0x20
cmp rdi, rsi
jne 0x1400a6c10
mov rax, qword [r15]
mov qword [r15 + 8], rax
xor esi, esi
nop word [rax + rax]
lea rdx, [0x140164104]
mov rcx, r13
call fcn.14012d150
mov qword [rsp + 0x68], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], rsi
mov r8, rax
mov rdx, r13
lea rcx, [rbp - 0x38]
call fcn.14004c390
nop
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x1400a6dc6
lea rsi, [rbp - 0x38]
cmp qword [rbp - 0x20], 8
jb 0x1400a6c87
mov rsi, qword [rbp - 0x38]
mov rdi, rsi
mov rax, rsi
jmp 0x1400a6c8f
lea rdi, [rbp - 0x38]
lea rax, [rbp - 0x38]
lea r12, [rax + rcx*2]
cmp rdi, r12
je 0x1400a6cb6
sub rsi, rdi
nop dword [rax + rax]
movzx ecx, word [rdi]
call fcn.14011cf6c
nop
mov word [rdi + rsi], ax
add rdi, 2
cmp rdi, r12
jne 0x1400a6ca0
mov rax, qword [r15 + 8]
cmp rax, qword [r15 + 0x10]
je 0x1400a6cd3
lea rdx, [rbp - 0x38]
mov rcx, rax
call fcn.14004aff0
add qword [r15 + 8], 0x20
jmp 0x1400a6ce2
lea r8, [rbp - 0x38]
mov rdx, rax
mov rcx, r15
call fcn.14004ac70
lea rax, [rbp - 0x38]
mov rdx, qword [rbp - 0x20]
cmp rdx, 8
setae r10b
mov rcx, qword [rbp - 0x38]
cmovae rax, rcx
mov r9, qword [rbp - 0x28]
cmp word [rax + r9*2 - 2], 0x2a
jne 0x1400a6dce
cmp r9, 2
jbe 0x1400a6dce
cmp word [rax + r9*2 - 4], 0x2e
jne 0x1400a6dce
lea r8, [r9 - 2]
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xor esi, esi
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], rsi
cmp r9, r8
cmovb r8, r9
lea rdx, [rbp - 0x38]
test r10b, r10b
cmovne rdx, rcx
lea rcx, [rbp - 0x58]
call fcn.14004c390
nop
mov rdx, qword [r15 + 8]
cmp rdx, qword [r15 + 0x10]
je 0x1400a6d7a
movups xmm0, xmmword [rbp - 0x58]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x48]
movups xmmword [rdx + 0x10], xmm1
lea edx, [rsi + 7]
mov word [rbp - 0x58], si
add qword [r15 + 8], 0x20
jmp 0x1400a6d8a
lea r8, [rbp - 0x58]
mov rcx, r15
call fcn.14004cb70
mov rdx, qword [rbp - 0x40]
cmp rdx, 8
jb 0x1400a6dc6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a6dc1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a7d42
call fcn.14011460c
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x20]
mov rax, qword [rsp + 0x68]
lea rdi, [rax*2]
add rdi, r13
lea r13, [rdi + 2]
cmp rdx, 8
jb 0x1400a6e1a
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a6e15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a7d48
call fcn.14011460c
xor esi, esi
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], 7
mov word [rbp - 0x38], si
cmp word [r13], si
je 0x1400a6e3c
cmp word [rdi], si
jne 0x1400a6c30
mov edx, 0x3e9
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete cl
mov byte [r14 + 0x129], cl
lea r12, [r14 + 0x88]
jne 0x1400a6e7a
mov rcx, r12
call fcn.1400a6820
test al, al
jne 0x1400a6e7a
cmp qword [r14 + 0x98], rsi
jne 0x1400a72ca
mov edx, 0x416
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete cl
mov byte [r14 + 0x12b], cl
lea r13, [r14 + 0xe0]
jne 0x1400a6eb8
mov rcx, r13
call fcn.1400a6820
test al, al
jne 0x1400a6eb8
cmp qword [r14 + 0xf0], rsi
jne 0x1400a72ca
lea rcx, [r14 + 0x108]
call fcn.1400a6820
test al, al
jne 0x1400a6ed5
cmp qword [r14 + 0x118], rsi
jne 0x1400a72ca
mov edx, 0x3ed
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete cl
mov byte [r14 + 0x12c], cl
setne sil
mov edx, 0x3f0
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rdi, rax
test rax, rax
je 0x1400a6f41
test sil, sil
je 0x1400a6f17
movzx edx, sil
jmp 0x1400a6f38
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rdi
jne 0x1400a6f36
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x28]
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_EnableWindow]
movzx esi, byte [r14 + 0x12c]
mov edx, 0x3ef
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rdi, rax
test rax, rax
je 0x1400a6f99
test sil, sil
jne 0x1400a6f6f
xor edx, edx
test sil, sil
sete dl
jmp 0x1400a6f90
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rdi
jne 0x1400a6f8e
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x28]
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_EnableWindow]
xor edi, edi
mov qword [r14 + 0x130], rdi
mov dword [r14 + 0x138], edi
cmp byte [r14 + 0x12c], dil
jne 0x1400a7064
mov edx, 0x3f0
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
lea esi, [rax + 1]
movsxd rcx, esi
mov eax, 2
mul rcx
mov rdi, rax
mov r15, 0xffffffffffffffff
cmovo rdi, r15
mov rcx, rdi
call fcn.140114b30
mov rbx, rax
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.140118720
mov r9d, esi
mov r8, rbx
mov edx, 0x3f0
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
mov qword [rsp + 0x60], rbx
mov rcx, qword [rsp + 0x70]
call fcn.14011460c
mov rcx, rbx
call fcn.14011e280
movsxd rcx, eax
shl rcx, 0xa
mov qword [r14 + 0x130], rcx
xor edi, edi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov edx, 0x3ef
mov r8d, 0x147
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov dword [r14 + 0x138], eax
jmp 0x1400a706b
mov r15, 0xffffffffffffffff
mov edx, 0x3f1
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete al
mov byte [r14 + 0x13c], al
mov edx, 0x3f2
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete al
mov byte [r14 + 0x13e], al
mov edx, 0x3f3
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete al
mov byte [r14 + 0x140], al
mov edx, 0x444
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete al
mov byte [r14 + 0x142], al
mov edx, 0x41a
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete al
mov byte [r14 + 0x144], al
mov edx, 0x405
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete al
mov byte [r14 + 0x146], al
mov edx, 0x426
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete al
mov byte [r14 + 0x14a], al
mov edx, 0x3eb
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete al
mov byte [r14 + 0x14c], al
mov edx, 0x41d
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete al
mov byte [r14 + 0x14e], al
mov edx, 0x41e
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete al
mov byte [r14 + 0x150], al
mov edx, 0x412
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete al
mov byte [r14 + 0x151], al
mov edx, 0x41b
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete al
mov byte [r14 + 0x153], al
mov dword [r14 + 0x15c], edi
mov edx, 0x436
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x1400a71dd
mov dword [r14 + 0x15c], edi
mov edx, 0x437
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x1400a71f8
mov dword [r14 + 0x15c], eax
mov edx, 0x438
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x1400a7217
mov dword [r14 + 0x15c], 2
mov edx, 0x439
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x1400a7236
mov dword [r14 + 0x15c], 3
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov edx, 0x43a
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
lea r9, [rbp + 8]
xor r8d, r8d
mov edx, 0x1001
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, [r14 + 0x164]
lea rcx, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov edx, 0x43b
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
lea r9, [rbp + 8]
xor r8d, r8d
mov edx, 0x1001
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, [r14 + 0x16c]
lea rcx, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov edx, 0x424
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete al
mov byte [r14 + 0x177], al
cmp qword [r14 + 0x78], 0
jne 0x1400a72d2
xor dil, dil
jmp 0x1400a7cfe
cmp byte [r14 + 0x174], 0
jne 0x1400a7cfb
cmp byte [0x14018c2e4], 0
je 0x1400a7363
cmp qword [r12 + 0x18], 8
jb 0x1400a72f5
mov r12, qword [r12]
mov byte [rsp + 0x30], 1
mov qword [rsp + 0x20], 0
mov r9, r12
lea r8, str.searchfor
lea rdx, str.global
lea rcx, [0x14018c350]
call fcn.140060bf0
cmp byte [0x14018c2e4], 0
je 0x1400a7363
lea rax, [r14 + 0x68]
cmp qword [rax + 0x18], 8
jb 0x1400a7337
mov rax, qword [rax]
mov byte [rsp + 0x30], 1
xor r12d, r12d
mov qword [rsp + 0x20], r12
mov r9, rax
lea r8, str.searchpath
lea rdx, str.global
lea rcx, [0x14018c350]
call fcn.140060bf0
jmp 0x1400a7377
lea rcx, [r14 + 0xf40]
mov rax, qword [rcx]
lea rdx, [r14 + 0x68]
call qword [rax + 0x30]
xor r12d, r12d
movzx eax, byte [r14 + 0x129]
cmp byte [0x14018c2e4], 0
je 0x1400a73a1
movzx r9d, al
lea r8, str.UseRegex
lea rdx, str.global
call fcn.1400b29b0
jmp 0x1400a73af
mov edx, eax
lea rcx, [r14 + 0x5b0]
call fcn.1400b1140
movzx eax, byte [r14 + 0x12b]
cmp byte [0x14018c2e4], 0
je 0x1400a73d9
movzx r9d, al
lea r8, str.UseFileMatchRegex
lea rdx, str.global
call fcn.1400b29b0
jmp 0x1400a73e7
mov edx, eax
lea rcx, [r14 + 0xd68]
call fcn.1400b1140
movzx eax, byte [r14 + 0x12c]
cmp byte [0x14018c2e4], 0
je 0x1400a7411
movzx r9d, al
lea r8, str.AllSize
lea rdx, str.global
call fcn.1400b29b0
jmp 0x1400a741f
mov edx, eax
lea rcx, [r14 + 0x628]
call fcn.1400b1140
mov r8, qword [r14 + 0x130]
shr r8, 0xa
lea rdx, str._I64u
lea rcx, [rbp - 0x18]
cmp byte [0x14018c2e4], 0
je 0x1400a747b
call fcn.140062b60
nop
cmp qword [rax + 0x18], 8
jb 0x1400a744e
mov rax, qword [rax]
mov byte [rsp + 0x30], 1
mov qword [rsp + 0x20], r12
mov r9, rax
lea r8, [0x140167bd8]
lea rdx, str.global
lea rcx, [0x14018c350]
call fcn.140060bf0
nop
jmp 0x1400a751e
call fcn.140062b60
nop
cmp qword [rax + 0x18], 8
jb 0x1400a748b
mov rax, qword [rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x40], r12
nop word [rax + rax]
inc r15
cmp word [rax + r15*2], 0
jne 0x1400a74a0
mov r8, r15
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.14004c390
nop
lea rcx, [r14 + 0x6a0]
mov rax, qword [rcx]
lea rdx, [rbp - 0x58]
call qword [rax + 0x30]
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 8
jb 0x1400a750d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a7508
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a7d3c
call fcn.14011460c
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x40], 7
mov word [rbp - 0x58], r12w
lea rcx, [rbp - 0x18]
call fcn.14004b2f0
cmp byte [0x14018c2e4], 0
je 0x1400a7585
mov r8d, dword [r14 + 0x138]
lea rdx, [0x1401656a4]
lea rcx, [rbp - 0x18]
call fcn.140062b60
nop
cmp qword [rax + 0x18], 8
jb 0x1400a7552
mov rax, qword [rax]
mov byte [rsp + 0x30], 1
mov qword [rsp + 0x20], r12
mov r9, rax
lea r8, str.SizeCombo
lea rdx, str.global
lea rcx, [0x14018c350]
call fcn.140060bf0
nop
lea rcx, [rbp - 0x18]
call fcn.14004b2f0
jmp 0x1400a7598
lea rcx, [r14 + 0x750]
mov edx, dword [r14 + 0x138]
call fcn.1400b1140
movzx eax, byte [r14 + 0x13c]
cmp byte [0x14018c2e4], 0
je 0x1400a7a2b
movzx r9d, al
lea r8, str.IncludeSystem
lea rdx, str.global
call fcn.1400b29b0
movzx r9d, byte [r14 + 0x13e]
lea r8, str.IncludeHidden
lea rdx, str.global
call fcn.1400b29b0
movzx r9d, byte [r14 + 0x140]
lea r8, str.IncludeSubfolders
lea rdx, str.global
call fcn.1400b29b0
movzx r9d, byte [r14 + 0x142]
lea r8, str.IncludeSymLinks
lea rdx, str.global
call fcn.1400b29b0
movzx r9d, byte [r14 + 0x144]
lea r8, str.IncludeBinary
lea rdx, str.global
call fcn.1400b29b0
movzx r9d, byte [r14 + 0x146]
lea r8, str.CreateBackup
lea rdx, str.global
call fcn.1400b29b0
movzx r9d, byte [r14 + 0x14a]
lea r8, str.KeepFileDate
lea rdx, str.global
call fcn.1400b29b0
movzx r9d, byte [r14 + 0x14c]
lea r8, str.WholeWords
lea rdx, str.global
call fcn.1400b29b0
movzx r9d, byte [r14 + 0x14e]
lea r8, str.UTF8
lea rdx, str.global
call fcn.1400b29b0
movzx r9d, byte [r14 + 0x221]
lea r8, str.StayOnTop
lea rdx, str.global
call fcn.1400b29b0
movzx r9d, byte [r14 + 0x150]
lea r8, str.Binary
lea rdx, str.global
call fcn.1400b29b0
movzx r9d, byte [r14 + 0x151]
lea r8, str.CaseSensitive
lea rdx, str.global
call fcn.1400b29b0
movzx r9d, byte [r14 + 0x153]
lea r8, str.DotMatchesNewline
lea rdx, str.global
call fcn.1400b29b0
cmp qword [r13 + 0x18], 8
jb 0x1400a7713
mov r13, qword [r13]
mov byte [rsp + 0x30], 1
mov qword [rsp + 0x20], r12
mov r9, r13
lea r8, str.pattern
lea rdx, str.global
lea rcx, [0x14018c350]
call fcn.140060bf0
lea rax, [r14 + 0x108]
cmp qword [rax + 0x18], 8
jb 0x1400a774b
mov rax, qword [rax]
mov byte [rsp + 0x30], 1
mov qword [rsp + 0x20], r12
mov r9, rax
lea r8, str.ExcludeDirsPattern
lea rdx, str.global
lea rcx, [0x14018c350]
call fcn.140060bf0
mov edx, dword [r14 + 0x15c]
lea rcx, [rbp - 0x58]
call fcn.1400deda0
nop
lea r9, [rbp - 0x58]
cmp qword [rbp - 0x40], 8
cmovae r9, qword [rbp - 0x58]
mov byte [rsp + 0x30], 1
mov qword [rsp + 0x20], r12
lea r8, str.DateLimit
lea rdx, str.global
lea rcx, [0x14018c350]
call fcn.140060bf0
nop
lea rcx, [rbp - 0x58]
call fcn.14004b2f0
mov r8d, dword [r14 + 0x164]
lea r9, [rbp + 0x42]
nop word [rax + rax]
sub r9, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r9], r8w
mov r8d, edx
test edx, edx
jne 0x1400a77d0
lea r8, [rbp + 0x42]
mov rdx, r9
lea rcx, [rbp - 0x58]
call fcn.1400def60
nop
lea r9, [rbp - 0x58]
cmp qword [rbp - 0x40], 8
cmovae r9, qword [rbp - 0x58]
mov byte [rsp + 0x30], 1
mov qword [rsp + 0x20], r12
lea r8, str.Date1Low
lea rdx, str.global
lea rcx, [0x14018c350]
call fcn.140060bf0
nop
lea rcx, [rbp - 0x58]
call fcn.14004b2f0
mov r8d, dword [r14 + 0x168]
lea r9, [rbp + 0x42]
nop dword [rax + rax]
sub r9, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r9], r8w
mov r8d, edx
test edx, edx
jne 0x1400a7860
lea r8, [rbp + 0x42]
mov rdx, r9
lea rcx, [rbp - 0x58]
call fcn.1400def60
nop
lea r9, [rbp - 0x58]
cmp qword [rbp - 0x40], 8
cmovae r9, qword [rbp - 0x58]
mov byte [rsp + 0x30], 1
mov qword [rsp + 0x20], r12
lea r8, str.Date1High
lea rdx, str.global
lea rcx, [0x14018c350]
call fcn.140060bf0
nop
lea rcx, [rbp - 0x58]
call fcn.14004b2f0
mov r8d, dword [r14 + 0x16c]
lea r9, [rbp + 0x42]
nop dword [rax + rax]
sub r9, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r9], r8w
mov r8d, edx
test edx, edx
jne 0x1400a78f0
lea r8, [rbp + 0x42]
mov rdx, r9
lea rcx, [rbp - 0x58]
call fcn.1400def60
nop
lea r9, [rbp - 0x58]
cmp qword [rbp - 0x40], 8
cmovae r9, qword [rbp - 0x58]
mov byte [rsp + 0x30], 1
mov qword [rsp + 0x20], r12
lea r8, str.Date2Low
lea rdx, str.global
lea rcx, [0x14018c350]
call fcn.140060bf0
nop
lea rcx, [rbp - 0x58]
call fcn.14004b2f0
mov r8d, dword [r14 + 0x170]
lea r9, [rbp + 0x42]
nop dword [rax + rax]
sub r9, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r9], r8w
mov r8d, edx
test edx, edx
jne 0x1400a7980
lea r8, [rbp + 0x42]
mov rdx, r9
lea rcx, [rbp - 0x58]
call fcn.1400def60
nop
lea r9, [rbp - 0x58]
cmp qword [rbp - 0x40], 8
cmovae r9, qword [rbp - 0x58]
mov byte [rsp + 0x30], 1
mov qword [rsp + 0x20], r12
lea r8, str.Date2High
lea rdx, str.global
lea rcx, [0x14018c350]
call fcn.140060bf0
nop
lea rcx, [rbp - 0x58]
call fcn.14004b2f0
cmp byte [r14 + 0x178], 0
jne 0x1400a7bca
movzx r9d, byte [r14 + 0x177]
lea r8, str.showcontent
lea rdx, str.global
call fcn.1400b29b0
jmp 0x1400a7bca
mov edx, eax
lea rcx, [r14 + 0x7c8]
call fcn.1400b1140
movzx edx, byte [r14 + 0x13e]
lea rcx, [r14 + 0x840]
call fcn.1400b1140
movzx edx, byte [r14 + 0x140]
lea rcx, [r14 + 0x8b8]
call fcn.1400b1140
movzx edx, byte [r14 + 0x142]
lea rcx, [r14 + 0x930]
call fcn.1400b1140
movzx edx, byte [r14 + 0x144]
lea rcx, [r14 + 0x9a8]
call fcn.1400b1140
movzx edx, byte [r14 + 0x146]
lea rcx, [r14 + 0xa20]
call fcn.1400b1140
movzx edx, byte [r14 + 0x14a]
lea rcx, [r14 + 0xa98]
call fcn.1400b1140
movzx edx, byte [r14 + 0x14c]
lea rcx, [r14 + 0xb10]
call fcn.1400b1140
movzx edx, byte [r14 + 0x14e]
lea rcx, [r14 + 0xb88]
call fcn.1400b1140
movzx edx, byte [r14 + 0x221]
lea rcx, [r14 + 0x13e8]
call fcn.1400b1140
movzx edx, byte [r14 + 0x150]
lea rcx, [r14 + 0xc00]
call fcn.1400b1140
movzx edx, byte [r14 + 0x151]
lea rcx, [r14 + 0xc78]
call fcn.1400b1140
movzx edx, byte [r14 + 0x153]
lea rcx, [r14 + 0xcf0]
call fcn.1400b1140
lea rcx, [r14 + 0xde0]
mov rax, qword [rcx]
mov rdx, r13
call qword [rax + 0x30]
lea rcx, [r14 + 0xe90]
mov rax, qword [rcx]
lea rdx, [r14 + 0x108]
call qword [rax + 0x30]
lea rcx, [r14 + 0x1118]
mov edx, dword [r14 + 0x15c]
call fcn.1400b1140
lea rcx, [r14 + 0x1190]
mov edx, dword [r14 + 0x164]
call fcn.1400b1140
lea rcx, [r14 + 0x1208]
mov edx, dword [r14 + 0x168]
call fcn.1400b1140
lea rcx, [r14 + 0x1280]
mov edx, dword [r14 + 0x16c]
call fcn.1400b1140
lea rcx, [r14 + 0x12f8]
mov edx, dword [r14 + 0x170]
call fcn.1400b1140
cmp byte [r14 + 0x178], 0
jne 0x1400a7bca
movzx edx, byte [r14 + 0x177]
lea rcx, [r14 + 0x1370]
call fcn.1400b1140
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x7c], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x74], xmm1
mov qword [rbp - 0x64], r12
mov dword [rsp + 0x78], 0x2c
lea rdx, [rsp + 0x78]
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.USER32.dll_GetWindowPlacement]
lea rcx, [rbp + 0x18]
call fcn.14005de10
nop
mov r8, rax
lea rcx, [rbp - 0x58]
call fcn.1400b32d0
nop
lea rcx, [rbp + 0x18]
call fcn.14004b2f0
cmp byte [0x14018c2e4], 0
je 0x1400a7cba
mov eax, dword [rbp - 0x60]
mov dword [rsp + 0x58], eax
mov eax, dword [rbp - 0x64]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x48], eax
mov eax, dword [rbp - 0x6c]
mov dword [rsp + 0x40], eax
mov eax, dword [rbp - 0x70]
mov dword [rsp + 0x38], eax
mov eax, dword [rbp - 0x74]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp - 0x78]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp - 0x7c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rbp - 0x80]
mov r8d, dword [rsp + 0x7c]
lea rdx, str._d__d__d__d__d__d__d__d__d__d
lea rcx, [rbp - 0x18]
call fcn.140062b60
nop
lea r9, [rbp - 0x18]
cmp qword [rbp], 8
cmovae r9, qword [rbp - 0x18]
lea r8, [rbp - 0x58]
cmp qword [rbp - 0x40], 8
cmovae r8, qword [rbp - 0x58]
mov byte [rsp + 0x30], 1
mov qword [rsp + 0x20], r12
lea rdx, str.global
lea rcx, [0x14018c350]
call fcn.140060bf0
nop
lea rcx, [rbp - 0x18]
call fcn.14004b2f0
jmp 0x1400a7cf2
lea r8, [rbp - 0x58]
cmp qword [rbp - 0x40], 8
cmovae r8, qword [rbp - 0x58]
mov dword [rsp + 0x28], 0x2c
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea rdx, str.SoftwaregrepWinNP3
mov rcx, 0xffffffff80000001
call qword [sym.imp.SHLWAPI.dll_SHSetValueW]
nop
lea rcx, [rbp - 0x58]
call fcn.14004b2f0
mov dil, 1
test rbx, rbx
je 0x1400a7d0b
mov rcx, rbx
call fcn.14011460c
movzx eax, dil
mov rcx, qword [rbp + 0x48]
xor rcx, rsp
call fcn.1401145b0
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
int3