Function at 0x423220
Capabilities:
Check mutex on windows
Delete registry key
Enumerate gui resources
Get common file path
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x21588
call fcn.004adde0
mov eax, dword [0x5021c0]
xor eax, esp
mov dword [esp + 0x21584], eax
mov eax, dword [ebp + 8]
push esi
push edi
mov dword [esp + 0x3c], eax
mov eax, dword [ebp + 0x10]
push 0x4eb5ac
mov dword [esp + 0x30], eax
mov dword [esp + 0x4c], 0
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexW]
push str.6473AA76_0EAE_4C96_8C99_AFDFEFFE42B5
push 0
push 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x48], eax
mov byte [esp + 0x22], 0
test eax, eax
je 0x42328e
call edi
cmp eax, 0xb7
jne 0x423293
mov byte [esp + 0x22], 1
push str.6473AA76_0EAE_4C96_8C99_AFDFEFFE42B6
push 0
push 0
call esi
mov dword [0x507a14], eax
mov byte [esp + 0x1b], 0
test eax, eax
je 0x4232b5
call edi
cmp eax, 0xb7
jne 0x4232ba
mov byte [esp + 0x1b], 1
mov esi, dword [esp + 0x3c]
push 0
mov dword [0x507a18], esi
call dword [sym.imp.ole32.dll_OleInitialize]
push 2
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
lea eax, [esp + 0x54]
mov dword [esp + 0x54], 8
push eax
mov dword [esp + 0x5c], 0xd2ff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 0x507a0c
push 0x80
push 0x80
push 0x6b
push esi
mov dword [0x507a0c], 0
call dword [sym.imp.COMCTL32.dll_Ordinal_381]
push str.Riched20.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [esp + 0x50], eax
xor eax, eax
mov dword [esp + 0x78], eax
push 0x40
mov dword [esp + 0x78], vtable.CCmdLineParser.0
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], 7
mov word [esp + 0x7c], ax
mov dword [esp + 0x98], eax
call fcn.004acccd
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x423394
push eax
lea ecx, [esp + 0x78]
call fcn.00403e40
push str.register
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x2c]
cmp eax, dword [esp + 0x90]
jne 0x4264d9
push str.unregister
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x2c]
cmp eax, dword [esp + 0x90]
jne 0x426495
push str.deregister
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x2c]
cmp eax, dword [esp + 0x90]
jne 0x426495
cmp byte [esp + 0x22], 0
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [esp + 0x23], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x14], 0x14
mov dword [esp + 0x2c], eax
je 0x4234df
push 0x4ecb50
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x90]
jne 0x4234df
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x24]
push eax
push 0x423180
call dword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
je 0x4234ba
cmp byte [esp + 0x1b], 0
je 0x4234a2
mov byte [esp + 0x1b], 0
push dword [0x507a14]
call dword [esp + 0x30]
push 0x64
call esi
push str.6473AA76_0EAE_4C96_8C99_AFDFEFFE42B6
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x507a14], eax
test eax, eax
je 0x423473
call edi
cmp eax, 0xb7
je 0x423473
lea eax, [esp + 0x24]
mov dword [esp + 0x24], 0
push eax
push 0x423180
call dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x4234ca
push 0x64
call esi
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
dec ecx
mov dword [esp + 0x14], ecx
test eax, eax
jne 0x4234df
test ecx, ecx
jne 0x423453
lea ecx, [esp + 0x98]
call fcn.00415980
mov edx, eax
lea ecx, [esp + 0x140]
call fcn.004158c0
lea ecx, [esp + 0x98]
call fcn.004027a0
cmp dword [esp + 0x154], 7
lea eax, [esp + 0x140]
jbe 0x42351d
mov eax, dword [esp + 0x140]
push str.portable
push eax
call fcn.004af6aa
add esp, 8
test eax, eax
jne 0x42357d
push str.portable
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x90]
jne 0x42357d
cmp dword [esp + 0x154], 7
lea eax, [esp + 0x140]
jbe 0x423567
mov eax, dword [esp + 0x140]
push 0x4ecb6c
push eax
call fcn.004af6aa
add esp, 8
test eax, eax
jne 0x42357d
xor al, al
jmp 0x42357f
mov al, 1
lea ecx, [esp + 0x98]
mov byte [0x507a10], al
call fcn.00415980
mov edx, eax
lea ecx, [esp + 0x110]
call fcn.00415660
lea ecx, [esp + 0x98]
call fcn.004027a0
cmp dword [esp + 0x124], 7
lea eax, [esp + 0x110]
jbe 0x4235c2
mov eax, dword [esp + 0x110]
push dword [esp + 0x120]
mov ecx, 0x502dfc
push eax
call fcn.00403a40
push str.grepwinNP3.ini
mov ecx, 0x502dfc
call fcn.00405930
push str.inipath
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x90]
je 0x423662
cmp dword [eax + 0x38], 0
je 0x423662
push str.inipath
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x90]
jne 0x42362d
xor edx, edx
jmp 0x423638
cmp dword [eax + 0x3c], 7
lea edx, [eax + 0x28]
jbe 0x423638
mov edx, dword [edx]
mov ecx, edx
lea esi, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x423640
sub ecx, esi
sar ecx, 1
push ecx
push edx
mov ecx, 0x502dfc
call fcn.00403a40
mov byte [0x507a10], 1
lea ecx, [esp + 0x128]
call fcn.00415cb0
lea ecx, [esp + 0x158]
call fcn.004223f0
push 0x20a
lea eax, [esp + 0x2137c]
push 0
push eax
call fcn.004affe0
add esp, 0xc
lea eax, [esp + 0x21378]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x423709
lea ecx, [esp + 0x21378]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4236b2
sub ecx, edx
lea eax, [esp + 0x128]
sar ecx, 1
cmp dword [esp + 0x13c], 7
jbe 0x4236d9
mov eax, dword [esp + 0x128]
mov edx, dword [esp + 0x138]
push ecx
lea ecx, [esp + 0x2137c]
push ecx
mov ecx, eax
call fcn.00405130
add esp, 8
test eax, eax
jne 0x423709
push eax
push 0x4eb5ac
lea ecx, [esp + 0x130]
call fcn.00403a40
cmp dword [esp + 0x124], 7
lea eax, [esp + 0x110]
jbe 0x423721
mov eax, dword [esp + 0x110]
push eax
call fcn.004c02c5
mov ecx, dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
add esp, 4
cmp byte [0x507a10], 0
mov edi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x28], edi
je 0x42385d
cmp dword [0x502e10], 7
mov eax, 0x502dfc
jbe 0x42375e
mov eax, dword [0x502dfc]
push eax
call ecx
test eax, eax
je 0x423826
push 0x208
lea eax, [esp + 0x21174]
push 0
push eax
call fcn.004affe0
add esp, 0xc
lea esi, [esp + 0x110]
cmp dword [esp + 0x124], 7
jbe 0x423798
mov esi, dword [esp + 0x110]
lea ecx, [esp + 0x21170]
mov edx, 0x104
mov eax, ecx
sub esi, eax
jmp 0x4237b0
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x4237d7
movzx eax, word [ecx + esi]
test ax, ax
je 0x4237d0
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x4237b0
jmp 0x4237d4
test edx, edx
jne 0x4237d7
sub ecx, 2
xor eax, eax
cmp dword [0x502e10], 7
mov word [ecx], ax
mov eax, 0x502dfc
jbe 0x4237ef
mov eax, dword [0x502dfc]
push eax
lea eax, [esp + 0x21174]
push eax
call edi
lea edx, [esp + 0x21170]
lea esi, [edx + 2]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x423804
sub edx, esi
lea eax, [esp + 0x21170]
sar edx, 1
mov ecx, 0x502dfc
push edx
push eax
call fcn.00403a40
cmp dword [0x507a38], 0
jne 0x423836
mov byte [0x507a58], 1
cmp dword [0x502e10], 7
mov eax, 0x502dfc
mov word [0x507a5a], 1
jbe 0x423852
mov eax, dword [0x502dfc]
push eax
mov ecx, 0x507a38
call fcn.0041df90
cmp dword [esp + 0x24], 0
je 0x42417d
xor eax, eax
lea ecx, [esp + 0x98]
push 0x1b
push str.SoftwaregrepWinNP3onlyone
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], eax
call fcn.00403450
sub esp, 0xc
lea eax, [esp + 0xa4]
lea ecx, [esp + 0x2117c]
push eax
call fcn.00418ec0
cmp byte [esp + 0x211b0], 0
mov dword [esp + 0x211b4], 0
mov dword [esp + 0x211b8], 0
mov dword [esp + 0x211c0], 0
mov dword [esp + 0x211c4], 0
mov dword [esp + 0x211c8], 0xffffffff
mov dword [esp + 0x211cc], 0
mov dword [esp + 0x21170], 0x4ece84
je 0x42397d
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov edi, eax
cmp edx, dword [esp + 0x211c4]
jb 0x423975
mov esi, dword [esp + 0x211c0]
ja 0x423933
cmp edi, esi
jb 0x423975
mov ecx, dword [esp + 0x211c8]
mov eax, dword [esp + 0x211cc]
add ecx, esi
adc eax, dword [esp + 0x211c4]
cmp edx, eax
ja 0x423975
jb 0x423954
cmp edi, ecx
ja 0x423975
cmp byte [esp + 0x211b0], 0
je 0x42397d
cmp byte [esp + 0x211b1], 0
jne 0x42397d
mov dword [esp + 0x211a8], 0
jmp 0x423989
mov byte [esp + 0x211b0], 0
lea ecx, [esp + 0x21170]
call fcn.00426a60
cmp dword [esp + 0x211b4], 0
lea ecx, [esp + 0x21190]
setne byte [esp + 0x1b]
call fcn.004027a0
lea ecx, [esp + 0x21178]
call fcn.004027a0
mov ecx, dword [esp + 0xac]
cmp ecx, 7
jbe 0x4239f0
mov edx, dword [esp + 0x98]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4239e6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426561
push ecx
push edx
call fcn.004accfd
add esp, 8
cmp byte [0x507a10], 0
je 0x423a0f
push ecx
push 1
push str.onlyone
push str.global
call fcn.00426590
mov byte [esp + 0x1b], al
push str.searchpath
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x90]
je 0x423b0e
cmp dword [eax + 0x38], 0
je 0x423b0e
push str.searchpath
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x90]
jne 0x423a61
xor edx, edx
jmp 0x423a6c
cmp dword [eax + 0x3c], 7
lea edx, [eax + 0x28]
jbe 0x423a6c
mov edx, dword [edx]
xor eax, eax
mov ecx, edx
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
lea esi, [ecx + 2]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x423aa0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [esp + 0xa0]
call fcn.00403450
lea ecx, [esp + 0x98]
mov eax, dword [ecx]
mov dword [esp + 0xe0], eax
mov eax, dword [ecx + 4]
mov dword [esp + 0xe4], eax
mov eax, dword [ecx + 8]
mov dword [esp + 0xe8], eax
mov eax, dword [ecx + 0xc]
mov dword [esp + 0xec], eax
mov eax, dword [ecx + 0x10]
mov dword [esp + 0xf0], eax
mov eax, dword [ecx + 0x14]
mov dword [esp + 0xf4], eax
xor eax, eax
mov word [esp + 0x98], ax
jmp 0x423cec
cmp byte [0x507a10], 0
je 0x423c1b
lea eax, [esp + 0xb0]
mov dword [esp + 0xb0], str.global
push eax
lea eax, [esp + 0x34]
mov dword [esp + 0xb8], 0
push eax
mov ecx, 0x507a48
mov dword [esp + 0xc0], 0
call fcn.00418210
mov esi, dword [esp + 0x38]
lea eax, [esp + 0xb0]
push eax
push esi
call fcn.004182a0
test al, al
mov eax, dword [0x507a48]
jne 0x423b70
mov esi, eax
cmp esi, eax
jne 0x423b7b
mov edx, 0x4eb5ac
jmp 0x423bb9
lea eax, [esp + 0xb0]
mov dword [esp + 0xb0], str.searchpath
push eax
lea ecx, [esi + 0x1c]
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], 0
call fcn.00417f90
mov edx, 0x4eb5ac
cmp eax, dword [esi + 0x1c]
je 0x423bb9
mov edx, dword [eax + 0x1c]
xor eax, eax
mov ecx, edx
mov dword [esp + 0xf8], eax
mov dword [esp + 0xfc], eax
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], eax
lea esi, [ecx + 2]
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], eax
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x423bf0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [esp + 0x100]
call fcn.00403450
lea esi, [esp + 0xf8]
mov edx, 0xa
jmp 0x423c36
lea eax, [esp + 0x128]
push eax
lea ecx, [esp + 0xcc]
call fcn.004024d0
mov esi, eax
mov edx, 0xc
mov ecx, dword [esi]
and edx, 0xfffffff7
mov eax, dword [esi + 0xc]
mov dword [esp + 0x5c], ecx
mov ecx, dword [esi + 4]
mov dword [esp + 0x68], eax
mov eax, dword [esi + 0x10]
mov dword [esp + 0x6c], eax
mov eax, dword [esi + 0x14]
mov dword [esp + 0x60], ecx
mov ecx, dword [esi + 8]
mov dword [esp + 0x70], eax
xor eax, eax
mov dword [esp + 0x64], ecx
lea ecx, [esp + 0x5c]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov eax, dword [ecx]
mov dword [esp + 0xe0], eax
mov eax, dword [ecx + 4]
mov dword [esp + 0xe4], eax
mov eax, dword [ecx + 8]
mov dword [esp + 0xe8], eax
mov eax, dword [ecx + 0xc]
mov dword [esp + 0xec], eax
mov eax, dword [ecx + 0x10]
mov dword [esp + 0xf0], eax
mov eax, dword [ecx + 0x14]
mov dword [esp + 0xf4], eax
xor eax, eax
mov word [esp + 0x5c], ax
mov dword [esp + 0x14], edx
test dl, 4
je 0x423cdb
and edx, 0xfffffffb
lea ecx, [esp + 0xc8]
mov dword [esp + 0x14], edx
call fcn.004027a0
mov edx, dword [esp + 0x14]
test dl, 2
je 0x423cec
lea ecx, [esp + 0xf8]
call fcn.004027a0
lea edx, [esp + 0xe0]
lea ecx, [esp + 0x98]
call fcn.00422b10
mov esi, eax
lea eax, [esp + 0xe0]
cmp eax, esi
je 0x423d61
mov ecx, eax
call fcn.004027a0
mov ecx, dword [esi]
mov dword [esp + 0xe0], ecx
mov ecx, dword [esi + 4]
mov dword [esp + 0xe4], ecx
mov eax, dword [esi + 8]
mov dword [esp + 0xe8], eax
mov eax, dword [esi + 0xc]
mov dword [esp + 0xec], eax
mov eax, dword [esi + 0x10]
mov dword [esp + 0xf0], eax
mov eax, dword [esi + 0x14]
mov dword [esp + 0xf4], eax
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [esp + 0x98]
call fcn.004027a0
push str.searchfor
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x90]
je 0x423dce
cmp dword [eax + 0x38], 0
je 0x423dce
push str.searchfor
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x90]
jne 0x423dba
xor esi, esi
jmp 0x423e74
cmp dword [eax + 0x3c], 7
lea esi, [eax + 0x28]
jbe 0x423e74
mov esi, dword [esi]
jmp 0x423e74
cmp byte [0x507a10], 0
je 0x423e6f
lea eax, [esp + 0xb0]
mov dword [esp + 0xb0], str.global
push eax
lea eax, [esp + 0x34]
mov dword [esp + 0xb8], 0
push eax
mov ecx, 0x507a48
mov dword [esp + 0xc0], 0
call fcn.00418210
mov esi, dword [esp + 0x38]
lea eax, [esp + 0xb0]
push eax
push esi
call fcn.004182a0
test al, al
mov eax, dword [0x507a48]
jne 0x423e30
mov esi, eax
cmp esi, eax
je 0x423e6f
lea eax, [esp + 0xb0]
mov dword [esp + 0xb0], str.searchfor
push eax
lea ecx, [esi + 0x1c]
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], 0
call fcn.00417f90
cmp eax, dword [esi + 0x1c]
je 0x423e6f
mov esi, dword [eax + 0x1c]
jmp 0x423e74
mov esi, 0x4eb5ac
xor eax, eax
lea ecx, [esp + 0x5c]
push 1
push 0x4ebe50
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
call fcn.00403450
xor eax, eax
lea ecx, [esp + 0x98]
push 1
push 0x4ecc00
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], eax
call fcn.00403450
lea eax, [esp + 0x5c]
push eax
lea edx, [esp + 0x9c]
lea ecx, [esp + 0xe4]
call fcn.00403c70
mov ecx, dword [esp + 0xb0]
add esp, 4
cmp ecx, 7
jbe 0x423f3a
mov edx, dword [esp + 0x98]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x423f30
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426566
push ecx
push edx
call fcn.004accfd
add esp, 8
mov ecx, dword [esp + 0x70]
cmp ecx, 7
jbe 0x423f76
mov edx, dword [esp + 0x5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x423f6c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426566
push ecx
push edx
call fcn.004accfd
add esp, 8
lea edx, [esp + 0xe0]
lea ecx, [esp + 0x98]
call fcn.00422b10
mov edi, eax
lea eax, [esp + 0xe0]
cmp eax, edi
je 0x423feb
mov ecx, eax
call fcn.004027a0
mov ecx, dword [edi]
mov dword [esp + 0xe0], ecx
mov ecx, dword [edi + 4]
mov dword [esp + 0xe4], ecx
mov eax, dword [edi + 8]
mov dword [esp + 0xe8], eax
mov eax, dword [edi + 0xc]
mov dword [esp + 0xec], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 0xf0], eax
mov eax, dword [edi + 0x14]
mov dword [esp + 0xf4], eax
xor eax, eax
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
lea ecx, [esp + 0x98]
call fcn.004027a0
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 1
push dword [0x507a64]
push dword [esp + 0x30]
call edi
mov dword [esp + 0x14], eax
test eax, eax
jne 0x42401f
cmp byte [esp + 0x1b], al
je 0x42413b
push 0x21000
lea eax, [esp + 0x174]
push 0
push eax
call fcn.004affe0
lea ecx, [esp + 0x17c]
add esp, 0xc
mov eax, ecx
mov edx, 0x400
sub esi, eax
lea eax, [edx + 0x7ffffbfe]
test eax, eax
je 0x42406d
movzx eax, word [ecx + esi]
test ax, ax
je 0x424066
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x424046
jmp 0x42406a
test edx, edx
jne 0x42406d
sub ecx, 2
xor eax, eax
lea esi, [esp + 0xe0]
cmp dword [esp + 0xf4], 7
mov word [ecx], ax
jbe 0x42408a
mov esi, dword [esp + 0xe0]
lea ecx, [esp + 0x970]
mov edx, 0x10400
mov eax, ecx
sub esi, eax
lea ebx, [ebx]
lea eax, [edx + 0x7ffefbfe]
test eax, eax
je 0x4240c7
movzx eax, word [ecx + esi]
test ax, ax
je 0x4240c0
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x4240a0
jmp 0x4240c4
test edx, edx
jne 0x4240c7
sub ecx, 2
xor eax, eax
mov dword [esp + 0xb0], 0x1267
cmp dword [esp + 0x14], 0
mov word [ecx], ax
lea eax, [esp + 0x170]
mov dword [esp + 0xb4], 0x21000
mov dword [esp + 0xb8], eax
je 0x424113
push 0
push 0
push dword [0x507a64]
push dword [esp + 0x30]
call edi
lea eax, [esp + 0xb0]
push eax
push 0
jmp 0x424124
cmp byte [esp + 0x1b], 0
je 0x42412c
lea eax, [esp + 0xb0]
push eax
push 1
push 0x4a
push dword [esp + 0x30]
call edi
push dword [esp + 0x24]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov byte [esp + 0x23], 1
mov ecx, dword [esp + 0xf4]
cmp ecx, 7
jbe 0x42417d
mov edx, dword [esp + 0xe0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x424173
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426566
push ecx
push edx
call fcn.004accfd
add esp, 8
xor edi, edi
cmp byte [esp + 0x23], 0
jne 0x426443
push edi
lea eax, [esp + 0xfc]
mov dword [esp + 0xfc], 1
push eax
lea eax, [esp + 0x54]
mov dword [esp + 0x104], edi
push eax
mov dword [esp + 0x10c], edi
mov dword [esp + 0x110], edi
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
cmp byte [0x507a10], 0
je 0x42443d
lea eax, [esp + 0xb0]
mov dword [esp + 0xb0], str.global
push eax
lea eax, [esp + 0x34]
mov dword [esp + 0xb8], edi
push eax
mov ecx, 0x507a48
mov dword [esp + 0xc0], edi
call fcn.00418210
mov esi, dword [esp + 0x38]
lea eax, [esp + 0xb0]
push eax
push esi
call fcn.004182a0
test al, al
mov eax, dword [0x507a48]
jne 0x424218
mov esi, eax
cmp esi, eax
jne 0x424223
mov edx, 0x4eb5ac
jmp 0x424259
lea eax, [esp + 0xb0]
mov dword [esp + 0xb0], 0x4ecc04
push eax
lea ecx, [esi + 0x1c]
mov dword [esp + 0xb8], edi
mov dword [esp + 0xbc], edi
call fcn.00417f90
mov edx, 0x4eb5ac
cmp eax, dword [esi + 0x1c]
je 0x424259
mov edx, dword [eax + 0x1c]
xor eax, eax
mov ecx, edx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
lea esi, [ecx + 2]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
jmp 0x424280
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x424280
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [esp + 0x64]
call fcn.00403450
cmp dword [esp + 0x70], 7
lea eax, [esp + 0x5c]
jbe 0x4242a9
mov eax, dword [esp + 0x5c]
push eax
call dword [esp + 0x20]
test eax, eax
je 0x4243ed
push 0x208
lea eax, [esp + 0x21174]
push 0
push eax
call fcn.004affe0
add esp, 0xc
lea eax, [esp + 0x21170]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0x21170]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
cmp dword [esp + 0x70], 7
lea eax, [esp + 0x5c]
jbe 0x4242ff
mov eax, dword [esp + 0x5c]
push eax
lea eax, [esp + 0x21174]
push eax
call dword [esp + 0x30]
push 0x208
lea eax, [esp + 0x174]
push 0
push eax
call fcn.004affe0
add esp, 0xc
lea eax, [esp + 0x21170]
push eax
lea eax, [esp + 0x174]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCanonicalizeW]
call fcn.00411ad0
mov esi, eax
lea ecx, [esp + 0x170]
xor eax, eax
lea edx, [ecx + 2]
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x424376
sub ecx, edx
lea eax, [esp + 0x170]
sar ecx, 1
push ecx
push eax
lea ecx, [esp + 0xa0]
call fcn.00403450
lea eax, [esp + 0x98]
mov ecx, esi
push eax
call fcn.0040f620
mov ecx, dword [esp + 0xac]
cmp ecx, 7
jbe 0x4243fe
mov edx, dword [esp + 0x98]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4243e1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42656b
push ecx
push edx
call fcn.004accfd
add esp, 8
jmp 0x4243fe
call fcn.00411ad0
lea ecx, [esp + 0x5c]
push ecx
mov ecx, eax
call fcn.0040f620
mov ecx, dword [esp + 0x70]
cmp ecx, 7
jbe 0x42460c
mov edx, dword [esp + 0x5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x424602
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426570
jmp 0x424602
call fcn.00411ad0
mov esi, eax
lea ecx, [esp + 0xc8]
xor eax, eax
push eax
push 0x4eb5ac
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], eax
call fcn.00403450
xor eax, eax
lea ecx, [esp + 0x5c]
push 0x20
push str.SoftwaregrepWinNP3languagefile
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
call fcn.00403450
sub esp, 0xc
lea eax, [esp + 0x68]
lea ecx, [esp + 0x2117c]
push eax
call fcn.00418ec0
lea eax, [esp + 0xc8]
mov dword [esp + 0x21170], 0x4ebff0
push eax
lea ecx, [esp + 0x211b8]
call fcn.004024d0
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x211d0]
call fcn.004024d0
lea ecx, [esp + 0x21170]
mov dword [esp + 0x211e8], edi
mov dword [esp + 0x211ec], edi
mov dword [esp + 0x211f0], 0xffffffff
mov dword [esp + 0x211f4], edi
mov dword [esp + 0x21170], 0x4ec010
call fcn.004178e0
push eax
lea ecx, [esp + 0x9c]
call fcn.004024d0
push eax
mov ecx, esi
call fcn.0040f620
lea ecx, [esp + 0x98]
call fcn.004027a0
lea ecx, [esp + 0x211cc]
call fcn.004027a0
lea ecx, [esp + 0x211b4]
call fcn.004027a0
lea ecx, [esp + 0x21190]
call fcn.004027a0
lea ecx, [esp + 0x21178]
call fcn.004027a0
mov ecx, dword [esp + 0x70]
cmp ecx, 7
jbe 0x4245b7
mov edx, dword [esp + 0x5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4245ad
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426575
push ecx
push edx
call fcn.004accfd
add esp, 8
mov ecx, dword [esp + 0xdc]
xor eax, eax
mov dword [esp + 0x6c], edi
mov dword [esp + 0x70], 7
mov word [esp + 0x5c], ax
cmp ecx, 7
jbe 0x42460c
mov edx, dword [esp + 0xc8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x424602
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426575
push ecx
push edx
call fcn.004accfd
add esp, 8
push str.about
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x90]
jne 0x4263cd
push 0x4ecc70
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x90]
jne 0x4263cd
push 0x4ecc74
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x90]
jne 0x4263cd
push 0
lea ecx, [esp + 0x174]
call fcn.00444b40
push str.searchini
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x14]
xor ecx, ecx
cmp eax, dword [esp + 0x90]
je 0x4246ae
cmp dword [eax + 0x38], ecx
setne cl
mov edi, dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
test ecx, ecx
je 0x425625
push str.searchini
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x90]
jne 0x4246e0
xor edx, edx
jmp 0x4246eb
cmp dword [eax + 0x3c], 7
lea edx, [eax + 0x28]
jbe 0x4246eb
mov edx, dword [edx]
xor eax, eax
mov ecx, edx
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
lea esi, [ecx + 2]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x424720
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [esp + 0xa0]
call fcn.00403450
sub esp, 0xc
lea ecx, [esp + 0x2117c]
call fcn.0041dd60
cmp dword [esp + 0x21170], 0
jne 0x42475e
mov byte [esp + 0x21190], 1
cmp dword [esp + 0xac], 7
lea eax, [esp + 0x98]
jbe 0x424776
mov eax, dword [esp + 0x98]
push eax
lea ecx, [esp + 0x21174]
call fcn.0041df90
xor eax, eax
mov dword [esp + 0x70], 7
mov dword [esp + 0x5c], eax
lea ecx, [esp + 0x74]
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov word [esp + 0x5c], ax
lea eax, [esp + 0x14]
push str.name
push eax
call fcn.00404720
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x90]
je 0x4247e4
cmp dword [eax + 0x38], 0
je 0x4247e4
push str.name
lea ecx, [esp + 0x78]
call fcn.004048f0
push eax
lea ecx, [esp + 0x60]
call fcn.004039c0
cmp dword [esp + 0x70], 7
lea eax, [esp + 0x5c]
jbe 0x4247fb
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x42491f
mov dword [esp + 0xb0], eax
lea ecx, [esp + 0x21180]
lea eax, [esp + 0xb0]
mov dword [esp + 0xb4], 0
push eax
lea eax, [esp + 0x34]
mov dword [esp + 0xbc], 0
push eax
call fcn.00418210
mov esi, dword [esp + 0x38]
lea eax, [esp + 0xb0]
push eax
push esi
call fcn.004182a0
test al, al
mov eax, dword [esp + 0x21180]
jne 0x424850
mov esi, eax
cmp esi, eax
je 0x42491f
lea eax, [esp + 0xb0]
mov dword [esp + 0xb0], str.searchpath
push eax
lea ecx, [esi + 0x1c]
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], 0
call fcn.00417f90
cmp eax, dword [esi + 0x1c]
je 0x42491f
cmp dword [eax + 0x1c], 0
je 0x42491f
push ecx
push 0
push str.searchpath
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
push eax
lea ecx, [esp + 0xcc]
call fcn.00403410
lea edx, [esp + 0xc8]
lea ecx, [esp + 0xb0]
call fcn.00422b10
push eax
lea ecx, [esp + 0xcc]
call fcn.004033c0
lea ecx, [esp + 0xb0]
call fcn.004027a0
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x174]
call fcn.0045a570
lea ecx, [esp + 0x158]
call fcn.004039a0
lea ecx, [esp + 0xc8]
call fcn.004027a0
cmp dword [esp + 0x70], 7
lea eax, [esp + 0x5c]
jbe 0x424936
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x424a1a
mov dword [esp + 0xb0], eax
lea ecx, [esp + 0x21180]
lea eax, [esp + 0xb0]
mov dword [esp + 0xb4], 0
push eax
lea eax, [esp + 0x34]
mov dword [esp + 0xbc], 0
push eax
call fcn.00418210
mov esi, dword [esp + 0x38]
lea eax, [esp + 0xb0]
push eax
push esi
call fcn.004182a0
test al, al
mov eax, dword [esp + 0x21180]
jne 0x42498b
mov esi, eax
cmp esi, eax
je 0x424a1a
lea eax, [esp + 0xb0]
mov dword [esp + 0xb0], str.searchfor
push eax
lea ecx, [esi + 0x1c]
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], 0
call fcn.00417f90
cmp eax, dword [esi + 0x1c]
je 0x424a1a
cmp dword [eax + 0x1c], 0
je 0x424a1a
push ecx
push 0
push str.searchfor
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
push eax
lea ecx, [esp + 0xcc]
call fcn.00403410
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x174]
call fcn.00422300
lea ecx, [esp + 0xc8]
call fcn.004027a0
cmp dword [esp + 0x70], 7
lea eax, [esp + 0x5c]
jbe 0x424a31
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x424b20
mov dword [esp + 0xb0], eax
lea ecx, [esp + 0x21180]
lea eax, [esp + 0xb0]
mov dword [esp + 0xb4], 0
push eax
lea eax, [esp + 0x34]
mov dword [esp + 0xbc], 0
push eax
call fcn.00418210
mov esi, dword [esp + 0x38]
lea eax, [esp + 0xb0]
push eax
push esi
call fcn.004182a0
test al, al
mov eax, dword [esp + 0x21180]
jne 0x424a86
mov esi, eax
cmp esi, eax
je 0x424b20
lea eax, [esp + 0xb0]
mov dword [esp + 0xb0], str.filemaskregex
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0xb8], 0
push eax
lea ecx, [esi + 0x1c]
mov dword [esp + 0xc0], 0
call fcn.00417ad0
mov eax, dword [esp + 0x14]
cmp eax, dword [esi + 0x1c]
je 0x424b20
cmp dword [eax + 0x1c], 0
je 0x424b20
push ecx
push 0
push str.filemaskregex
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
push eax
lea ecx, [esp + 0xcc]
call fcn.00403410
push 1
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x178]
call fcn.00422320
lea ecx, [esp + 0xc8]
call fcn.004027a0
push ecx
push 0
push str.filemask
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x424b8f
push ecx
push 0
push str.filemask
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
push eax
lea ecx, [esp + 0xcc]
call fcn.00403410
push 0
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x178]
call fcn.00422320
lea ecx, [esp + 0xc8]
call fcn.004027a0
push ecx
push 0
push str.direxcluderegex
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
push ecx
lea ecx, [esp + 0x60]
push 0
test eax, eax
je 0x424bbf
push str.direxcluderegex
jmp 0x424be6
push str.filemaskexclude
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x424c25
push ecx
push 0
push str.filemaskexclude
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
push eax
lea ecx, [esp + 0xcc]
call fcn.00403410
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x174]
call fcn.00422360
lea ecx, [esp + 0xc8]
call fcn.004027a0
push ecx
push 0
push str.replacewith
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x424c92
push ecx
push 0
push str.replacewith
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
push eax
lea ecx, [esp + 0xcc]
call fcn.00403410
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x174]
call fcn.00422390
lea ecx, [esp + 0xc8]
call fcn.004027a0
push ecx
push 0
push str.preset
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x424cff
push ecx
push 0
push str.preset
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
push eax
lea ecx, [esp + 0xcc]
call fcn.00403410
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x174]
call fcn.0045a6b0
lea ecx, [esp + 0xc8]
call fcn.004027a0
push ecx
push 0
push 0x4ecd38
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x424d61
push 0x4ecd3c
push ecx
push 0
push 0x4ecd38
lea ecx, [esp + 0x6c]
call fcn.00402810
push eax
lea ecx, [esp + 0x21184]
call fcn.00417300
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x262], 1
test eax, eax
setne al
mov byte [esp + 0x261], al
push ecx
push 0
push 0x4ecd44
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x424dc3
push 0x4ecd3c
push ecx
push 0
push 0x4ecd44
lea ecx, [esp + 0x6c]
call fcn.00402810
push eax
lea ecx, [esp + 0x21184]
call fcn.00417300
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x264], 1
test eax, eax
sete al
mov byte [esp + 0x263], al
push ecx
push 0
push 0x4ecd48
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x424e2d
push 0x4ecd3c
push ecx
push 0
push 0x4ecd48
lea ecx, [esp + 0x6c]
call fcn.00402810
push eax
lea ecx, [esp + 0x21184]
call fcn.00417300
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x257], 1
test eax, eax
mov byte [esp + 0x286], 0
sete al
mov byte [esp + 0x256], al
push ecx
push 0
push str.keepfiledate
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x424e8f
push 0x4ecd3c
push ecx
push 0
push str.keepfiledate
lea ecx, [esp + 0x6c]
call fcn.00402810
push eax
lea ecx, [esp + 0x21184]
call fcn.00417300
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x25d], 1
test eax, eax
sete al
mov byte [esp + 0x25c], al
push ecx
push 0
push str.wholewords
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x424ef1
push 0x4ecd3c
push ecx
push 0
push str.wholewords
lea ecx, [esp + 0x6c]
call fcn.00402810
push eax
lea ecx, [esp + 0x21184]
call fcn.00417300
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x25d], 1
test eax, eax
sete al
mov byte [esp + 0x25c], al
push ecx
push 0
push str.utf8
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x424f55
push 0x4ecd3c
push ecx
push 0
push str.utf8
lea ecx, [esp + 0x6c]
call fcn.00402810
push eax
lea ecx, [esp + 0x21184]
call fcn.00417300
push eax
call fcn.004b4661
add esp, 8
mov word [esp + 0x25f], 1
test eax, eax
sete al
mov byte [esp + 0x25e], al
push ecx
push 0
push str.binary
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x424fb9
push 0x4ecd3c
push ecx
push 0
push str.binary
lea ecx, [esp + 0x6c]
call fcn.00402810
push eax
lea ecx, [esp + 0x21184]
call fcn.00417300
push eax
call fcn.004b4661
add esp, 8
mov word [esp + 0x25e], 0x100
test eax, eax
sete al
mov byte [esp + 0x260], al
push ecx
push 0
push 0x4ecd4c
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x425061
push ecx
xor esi, esi
lea ecx, [esp + 0x60]
push esi
push str.sizecmp
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x42502a
push ecx
push esi
push str.sizecmp
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
push eax
call fcn.004b437f
add esp, 4
mov esi, eax
push esi
push ecx
push 0
push 0x4ecd4c
lea ecx, [esp + 0x6c]
call fcn.00402810
push eax
lea ecx, [esp + 0x21184]
call fcn.00417300
push eax
call fcn.004b437f
add esp, 4
cdq
lea ecx, [esp + 0x174]
push edx
push eax
call fcn.004223b0
push ecx
push 0
push str.shulb
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x4250c3
push 0x4ecd3c
push ecx
push 0
push str.shulb
lea ecx, [esp + 0x6c]
call fcn.00402810
push eax
lea ecx, [esp + 0x21184]
call fcn.00417300
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x24d], 1
test eax, eax
sete al
mov byte [esp + 0x24c], al
push ecx
push 0
push 0x4ecd6c
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x425125
push 0x4ecd3c
push ecx
push 0
push 0x4ecd6c
lea ecx, [esp + 0x6c]
call fcn.00402810
push eax
lea ecx, [esp + 0x21184]
call fcn.00417300
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x24f], 1
test eax, eax
sete al
mov byte [esp + 0x24e], al
push ecx
push 0
push 0x4ecd70
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x425187
push 0x4ecd3c
push ecx
push 0
push 0x4ecd70
lea ecx, [esp + 0x6c]
call fcn.00402810
push eax
lea ecx, [esp + 0x21184]
call fcn.00417300
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x251], 1
test eax, eax
sete al
mov byte [esp + 0x250], al
push ecx
push 0
push 0x4ecd74
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x4251e9
push 0x4ecd3c
push ecx
push 0
push 0x4ecd74
lea ecx, [esp + 0x6c]
call fcn.00402810
push eax
lea ecx, [esp + 0x21184]
call fcn.00417300
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x253], 1
test eax, eax
sete al
mov byte [esp + 0x252], al
push ecx
push 0
push 0x4ecd78
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x42524b
push 0x4ecd3c
push ecx
push 0
push 0x4ecd78
lea ecx, [esp + 0x6c]
call fcn.00402810
push eax
lea ecx, [esp + 0x21184]
call fcn.00417300
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x255], 1
test eax, eax
sete al
mov byte [esp + 0x254], al
push ecx
push 0
push 0x4ecd7c
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x4252ad
push 0x4ecd3c
push ecx
push 0
push 0x4ecd7c
lea ecx, [esp + 0x6c]
call fcn.00402810
push eax
lea ecx, [esp + 0x21184]
call fcn.00417300
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x236], 1
test eax, eax
sete byte [esp + 0x235]
jmp 0x4252d9
push ecx
push 0
push str.searchfor
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x4252d9
mov word [esp + 0x235], 0x101
push ecx
push 0
push str.execute
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
jne 0x42531c
push ecx
push eax
push str.executesearch
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x425327
mov dword [esp + 0x268], 1
push ecx
push 0
push str.executereplace
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x425354
mov dword [esp + 0x268], 2
push ecx
push 0
push str.executecapture
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x425381
mov dword [esp + 0x268], 3
push ecx
push 0
push str.closedialog
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x4253ab
mov byte [esp + 0x267], 1
push ecx
push 0
push str.content
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x4253d7
mov word [esp + 0x287], 0x101
push ecx
push 0
push str.datelimit
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x425604
push ecx
push 0
push str.date1
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x425604
push ecx
push 0
push str.date1
lea ecx, [esp + 0x68]
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x20], 0
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x30]
push ecx
push str._4d:_2d:_2d
push eax
call fcn.00422270
xor eax, eax
add esp, 0x14
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
movzx eax, word [esp + 0x28]
mov word [esp + 0xc8], ax
movzx eax, word [esp + 0x1c]
mov word [esp + 0xca], ax
movzx eax, word [esp + 0x14]
mov word [esp + 0xce], ax
lea eax, [esp + 0xb0]
push eax
lea eax, [esp + 0xcc]
push eax
call edi
push ecx
push 0
push str.date2
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
test eax, eax
je 0x425586
push ecx
push 0
push str.date2
lea ecx, [esp + 0x68]
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x30]
push ecx
push str._4d:_2d:_2d
push eax
call fcn.00422270
movzx eax, word [esp + 0x3c]
add esp, 0x14
mov word [esp + 0xc8], ax
movzx eax, word [esp + 0x1c]
mov word [esp + 0xca], ax
movzx eax, word [esp + 0x14]
mov word [esp + 0xce], ax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0xcc]
push eax
call edi
mov eax, dword [esp + 0x30]
mov esi, dword [esp + 0xb0]
mov edi, dword [esp + 0xb4]
push ecx
push 0
mov dword [esp + 0x48], eax
lea ecx, [esp + 0x64]
mov eax, dword [esp + 0x3c]
push str.datelimit
mov dword [esp + 0x14], eax
call fcn.00402810
push eax
lea ecx, [esp + 0x21180]
call fcn.00417300
push eax
call fcn.004b437f
mov dword [esp + 0x270], eax
add esp, 4
mov eax, dword [esp + 0x40]
mov dword [esp + 0x27c], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x278], edi
mov edi, dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov byte [esp + 0x270], 1
mov dword [esp + 0x274], esi
mov dword [esp + 0x280], eax
lea ecx, [esp + 0x5c]
call fcn.004027a0
lea ecx, [esp + 0x21170]
call fcn.0041de20
lea ecx, [esp + 0x98]
call fcn.004027a0
push str.searchpath
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
xor ecx, ecx
cmp eax, dword [esp + 0x90]
setne cl
test ecx, ecx
je 0x425675
push str.searchpath
lea ecx, [esp + 0x78]
call fcn.004048c0
test eax, eax
je 0x42566e
push str.searchpath
lea ecx, [esp + 0x78]
call fcn.004048f0
jmp 0x425698
mov eax, 0x4eb5ac
jmp 0x425698
cmp byte [0x507a10], 0
je 0x4256eb
push ecx
push 0x4eb5ac
push str.searchpath
push str.global
mov ecx, 0x507a38
call fcn.00417300
push eax
lea ecx, [esp + 0x9c]
call fcn.00403410
lea edx, [esp + 0x98]
lea ecx, [esp + 0x5c]
call fcn.00422b10
push eax
lea ecx, [esp + 0x9c]
call fcn.004033c0
lea ecx, [esp + 0x5c]
call fcn.004027a0
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x174]
call fcn.0045a570
lea ecx, [esp + 0x98]
call fcn.004027a0
cmp dword [esp + 0x168], 0
je 0x425709
lea eax, [esp + 0x158]
push eax
lea ecx, [esp + 0x174]
call fcn.0045a570
push str.searchfor
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x425741
cmp dword [eax + 0x38], 0
je 0x425741
push str.searchfor
lea ecx, [esp + 0x78]
call fcn.004048f0
mov edx, eax
jmp 0x42576d
cmp byte [0x507a10], 0
je 0x425768
push ecx
push 0x4eb5ac
push str.searchfor
push str.global
mov ecx, 0x507a38
call fcn.00417300
mov edx, eax
jmp 0x42576d
mov edx, 0x4eb5ac
xor eax, eax
mov ecx, edx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
lea esi, [ecx + 2]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x425790
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [esp + 0x64]
call fcn.00403450
cmp dword [esp + 0x70], 7
lea eax, [esp + 0x5c]
jbe 0x4257b9
mov eax, dword [esp + 0x5c]
push dword [esp + 0x6c]
lea ecx, [esp + 0x1c8]
push eax
call fcn.00403a40
lea ecx, [esp + 0x5c]
call fcn.004027a0
push str.filemaskregex
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
xor ecx, ecx
cmp eax, dword [esp + 0x90]
setne cl
test ecx, ecx
je 0x425850
push str.filemaskregex
lea ecx, [esp + 0x78]
call fcn.004048f0
test eax, eax
je 0x42581c
push str.filemaskregex
lea ecx, [esp + 0x78]
call fcn.004048f0
jmp 0x425821
mov eax, 0x4eb5ac
push eax
lea ecx, [esp + 0x9c]
call fcn.00403410
push 1
lea eax, [esp + 0x9c]
push eax
lea ecx, [esp + 0x178]
call fcn.00422320
lea ecx, [esp + 0x98]
call fcn.004027a0
push str.filemask
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
xor ecx, ecx
cmp eax, dword [esp + 0x90]
setne cl
test ecx, ecx
je 0x4258cd
push str.filemask
lea ecx, [esp + 0x78]
call fcn.004048f0
test eax, eax
je 0x425899
push str.filemask
lea ecx, [esp + 0x78]
call fcn.004048f0
jmp 0x42589e
mov eax, 0x4eb5ac
push eax
lea ecx, [esp + 0x9c]
call fcn.00403410
push 0
lea eax, [esp + 0x9c]
push eax
lea ecx, [esp + 0x178]
call fcn.00422320
lea ecx, [esp + 0x98]
call fcn.004027a0
push str.direxcluderegex
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
xor ecx, ecx
cmp eax, dword [esp + 0x90]
setne cl
test ecx, ecx
lea ecx, [esp + 0x74]
je 0x425916
push str.direxcluderegex
call fcn.004048f0
test eax, eax
je 0x425946
push str.direxcluderegex
lea ecx, [esp + 0x78]
call fcn.004048f0
jmp 0x42594b
push str.filemaskexclude
call fcn.00404890
test eax, eax
je 0x425978
push str.filemaskexclude
lea ecx, [esp + 0x78]
call fcn.004048f0
test eax, eax
je 0x425946
push str.filemaskexclude
lea ecx, [esp + 0x78]
call fcn.004048f0
jmp 0x42594b
mov eax, 0x4eb5ac
push eax
lea ecx, [esp + 0x9c]
call fcn.00403410
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x174]
call fcn.00422360
lea ecx, [esp + 0x98]
call fcn.004027a0
push str.replacewith
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
xor ecx, ecx
cmp eax, dword [esp + 0x90]
setne cl
test ecx, ecx
je 0x4259f3
push str.replacewith
lea ecx, [esp + 0x78]
call fcn.004048f0
test eax, eax
je 0x4259c1
push str.replacewith
lea ecx, [esp + 0x78]
call fcn.004048f0
jmp 0x4259c6
mov eax, 0x4eb5ac
push eax
lea ecx, [esp + 0x9c]
call fcn.00403410
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x174]
call fcn.00422390
lea ecx, [esp + 0x98]
call fcn.004027a0
push str.preset
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
xor ecx, ecx
cmp eax, dword [esp + 0x90]
je 0x425a1b
cmp dword [eax + 0x38], ecx
setne cl
test ecx, ecx
je 0x425a5a
push str.preset
lea ecx, [esp + 0x78]
call fcn.004048f0
push eax
lea ecx, [esp + 0x9c]
call fcn.00403410
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x174]
call fcn.0045a6b0
lea ecx, [esp + 0x98]
call fcn.004027a0
push 0x4ecd38
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x425ab7
cmp dword [eax + 0x38], 0
je 0x425ab7
push 0x4ecd3c
push ecx
push 0x4ecd38
lea ecx, [esp + 0x80]
call fcn.004048f0
add esp, 4
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x262], 1
test eax, eax
setne al
mov byte [esp + 0x261], al
push 0x4ecd44
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x425b14
cmp dword [eax + 0x38], 0
je 0x425b14
push 0x4ecd3c
push ecx
push 0x4ecd44
lea ecx, [esp + 0x80]
call fcn.004048f0
add esp, 4
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x264], 1
test eax, eax
sete al
mov byte [esp + 0x263], al
push 0x4ecd48
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x425b79
cmp dword [eax + 0x38], 0
je 0x425b79
push 0x4ecd3c
push ecx
push 0x4ecd48
lea ecx, [esp + 0x80]
call fcn.004048f0
add esp, 4
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x257], 1
test eax, eax
mov byte [esp + 0x286], 0
sete al
mov byte [esp + 0x256], al
push str.keepfiledate
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x425bd6
cmp dword [eax + 0x38], 0
je 0x425bd6
push 0x4ecd3c
push ecx
push str.keepfiledate
lea ecx, [esp + 0x80]
call fcn.004048f0
add esp, 4
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x25d], 1
test eax, eax
sete al
mov byte [esp + 0x25c], al
push str.wholewords
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x425c35
cmp dword [eax + 0x38], 0
je 0x425c35
push 0x4ecd3c
push ecx
push str.wholewords
lea ecx, [esp + 0x80]
call fcn.004048f0
add esp, 4
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x25d], 1
test eax, eax
sete al
mov byte [esp + 0x25c], al
jmp 0x425c51
push str.wholewords
lea ecx, [esp + 0x78]
call fcn.00404890
test eax, eax
je 0x425c51
mov word [esp + 0x25c], 0x101
push str.utf8
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x425cb0
cmp dword [eax + 0x38], 0
je 0x425cb0
push 0x4ecd3c
push ecx
push str.utf8
lea ecx, [esp + 0x80]
call fcn.004048f0
add esp, 4
push eax
call fcn.004b4661
add esp, 8
mov word [esp + 0x25f], 1
test eax, eax
sete al
mov byte [esp + 0x25e], al
push str.binary
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x425d0f
cmp dword [eax + 0x38], 0
je 0x425d0f
push 0x4ecd3c
push ecx
push str.binary
lea ecx, [esp + 0x80]
call fcn.004048f0
add esp, 4
push eax
call fcn.004b4661
add esp, 8
mov word [esp + 0x25e], 0x100
test eax, eax
sete al
mov byte [esp + 0x260], al
push 0x4ecd4c
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x425d8c
cmp dword [eax + 0x38], 0
je 0x425d8c
push str.sizecmp
lea ecx, [esp + 0x78]
xor esi, esi
call fcn.004048c0
test eax, eax
je 0x425d59
push str.sizecmp
lea ecx, [esp + 0x78]
call fcn.00404930
mov esi, eax
push 0x4ecd4c
lea ecx, [esp + 0x78]
call fcn.00404930
cdq
shld edx, eax, 0xa
mov byte [esp + 0x266], 1
shl eax, 0xa
mov dword [esp + 0x240], eax
mov dword [esp + 0x244], edx
mov dword [esp + 0x248], esi
push str.shulb
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x425de9
cmp dword [eax + 0x38], 0
je 0x425de9
push 0x4ecd3c
push ecx
push str.shulb
lea ecx, [esp + 0x80]
call fcn.004048f0
add esp, 4
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x24d], 1
test eax, eax
sete al
mov byte [esp + 0x24c], al
push 0x4ecd6c
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x425e46
cmp dword [eax + 0x38], 0
je 0x425e46
push 0x4ecd3c
push ecx
push 0x4ecd6c
lea ecx, [esp + 0x80]
call fcn.004048f0
add esp, 4
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x24f], 1
test eax, eax
sete al
mov byte [esp + 0x24e], al
push 0x4ecd70
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x425ebd
cmp dword [eax + 0x38], 0
je 0x425ebd
push 0x4ecd70
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
jne 0x425e90
xor eax, eax
jmp 0x425e9b
add eax, 0x28
cmp dword [eax + 0x14], 7
jbe 0x425e9b
mov eax, dword [eax]
push 0x4ecd3c
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x251], 1
test eax, eax
sete al
mov byte [esp + 0x250], al
push 0x4ecd74
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x425f34
cmp dword [eax + 0x38], 0
je 0x425f34
push 0x4ecd74
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
jne 0x425f07
xor eax, eax
jmp 0x425f12
add eax, 0x28
cmp dword [eax + 0x14], 7
jbe 0x425f12
mov eax, dword [eax]
push 0x4ecd3c
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x253], 1
test eax, eax
sete al
mov byte [esp + 0x252], al
push 0x4ecd78
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x425fab
cmp dword [eax + 0x38], 0
je 0x425fab
push 0x4ecd78
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
jne 0x425f7e
xor eax, eax
jmp 0x425f89
add eax, 0x28
cmp dword [eax + 0x14], 7
jbe 0x425f89
mov eax, dword [eax]
push 0x4ecd3c
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x255], 1
test eax, eax
sete al
mov byte [esp + 0x254], al
push 0x4ecd7c
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x426022
cmp dword [eax + 0x38], 0
je 0x426022
push 0x4ecd7c
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
jne 0x425ff5
xor eax, eax
jmp 0x426000
add eax, 0x28
cmp dword [eax + 0x14], 7
jbe 0x426000
mov eax, dword [eax]
push 0x4ecd3c
push eax
call fcn.004b4661
add esp, 8
mov byte [esp + 0x236], 1
test eax, eax
sete byte [esp + 0x235]
jmp 0x426052
push str.searchfor
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x426052
cmp dword [eax + 0x38], 0
je 0x426052
mov word [esp + 0x235], 0x101
push str.execute
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
jne 0x426092
push str.executesearch
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x42609d
mov dword [esp + 0x268], 1
push str.executereplace
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x4260c8
mov dword [esp + 0x268], 2
push str.executecapture
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x4260f3
mov dword [esp + 0x268], 3
push str.closedialog
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x42611b
mov byte [esp + 0x267], 1
push str.content
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x426145
mov word [esp + 0x287], 0x101
push str.datelimit
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x426333
cmp dword [eax + 0x38], 0
je 0x426333
push str.date1
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x426333
cmp dword [eax + 0x38], 0
je 0x426333
push str.date1
lea ecx, [esp + 0x78]
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0
call fcn.004048f0
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x1c]
push ecx
push str._4d:_2d:_2d
push eax
call fcn.00422270
xor eax, eax
add esp, 0x14
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
movzx eax, word [esp + 0x14]
mov word [esp + 0xc8], ax
movzx eax, word [esp + 0x1c]
mov word [esp + 0xca], ax
movzx eax, word [esp + 0x28]
mov word [esp + 0xce], ax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0xcc]
push eax
call edi
push str.date2
lea ecx, [esp + 0x78]
call fcn.004048c0
test eax, eax
je 0x4262d4
push str.date2
lea ecx, [esp + 0x78]
call fcn.004048f0
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x1c]
push ecx
push str._4d:_2d:_2d
push eax
call fcn.00422270
movzx eax, word [esp + 0x28]
add esp, 0x14
mov word [esp + 0xc8], ax
movzx eax, word [esp + 0x1c]
mov word [esp + 0xca], ax
movzx eax, word [esp + 0x28]
mov word [esp + 0xce], ax
lea eax, [esp + 0xb0]
push eax
lea eax, [esp + 0xcc]
push eax
call edi
mov eax, dword [esp + 0xb0]
lea ecx, [esp + 0x74]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x34]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xb4]
push str.datelimit
mov dword [esp + 0x44], eax
call fcn.00404930
mov dword [esp + 0x26c], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x27c], eax
mov eax, dword [esp + 0x40]
mov byte [esp + 0x270], 1
mov dword [esp + 0x274], esi
mov dword [esp + 0x278], edi
mov dword [esp + 0x280], eax
push str.nosavesettings
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x7c]
call fcn.00404720
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x90]
je 0x42635b
mov byte [esp + 0x284], 1
push 0x8001
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0x88
push ecx
push 0x81
push dword [esp + 0x48]
lea ecx, [esp + 0x180]
call fcn.00402980
lea ecx, [esp + 0x170]
mov edi, eax
call fcn.00446900
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp byte [0x507a10], 0
je 0x4263be
cmp dword [0x502e10], 7
mov eax, 0x502dfc
jbe 0x4263b1
mov eax, dword [0x502dfc]
push 1
push eax
mov ecx, 0x507a38
call fcn.0041e0c0
push dword [esp + 0x4c]
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
jmp 0x426449
mov eax, dword [0x507a14]
test eax, eax
je 0x4263db
push eax
call dword [esp + 0x30]
push 0
lea ecx, [esp + 0x21174]
call fcn.0041bd30
push 0
push ecx
push 0x87
push dword [esp + 0x48]
call fcn.00402980
mov edi, eax
mov dword [esp + 0x21170], 0x4ec1b4
mov eax, dword [esp + 0x211a8]
mov dword [esp + 0x211a4], 0x4ebdb4
test eax, eax
je 0x426426
push eax
call fcn.004ad06e
add esp, 4
mov eax, dword [esp + 0x2117c]
test eax, eax
je 0x42638f
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
push eax
call esi
jmp 0x426395
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
call dword [sym.imp.ole32.dll_CoUninitialize]
call dword [sym.imp.ole32.dll_OleUninitialize]
push dword [esp + 0x50]
call esi
push dword [esp + 0x48]
call dword [esp + 0x30]
lea ecx, [esp + 0x158]
call fcn.004027a0
lea ecx, [esp + 0x128]
call fcn.004027a0
lea ecx, [esp + 0x110]
call fcn.004027a0
lea ecx, [esp + 0x140]
call fcn.004027a0
jmp 0x4264e2
mov esi, dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
push str.SoftwareClassesDirectory_shellgrepWinNP3
push 0x80000001
call esi
push str.SoftwareClassesDirectoryBackground_shellgrepWinNP3
push 0x80000001
call esi
push str.SoftwareClassesFolder_shellgrepWinNP3
push 0x80000001
call esi
push str.SoftwareClassesDrive_shellgrepWinNP3
push 0x80000001
call esi
push str.SoftwareClasses_shellgrepWinNP3
push 0x80000001
call esi
jmp 0x4264e0
mov cl, 1
call fcn.00422d60
xor edi, edi
mov esi, dword [esp + 0x90]
lea eax, [esp + 0x90]
mov dword [esp + 0x74], vtable.CCmdLineParser.0
mov ecx, eax
push dword [esi + 4]
push eax
call fcn.00405200
mov dword [esi + 4], esi
mov dword [esi], esi
mov dword [esi + 8], esi
mov eax, dword [esp + 0x90]
mov dword [esp + 0x94], 0
push dword [eax + 4]
lea eax, [esp + 0x94]
push eax
mov ecx, eax
call fcn.00405200
push 0x40
push dword [esp + 0x94]
call fcn.004accfd
add esp, 8
lea ecx, [esp + 0x78]
call fcn.004027a0
mov ecx, dword [esp + 0x2158c]
mov eax, edi
pop edi
pop esi
xor ecx, esp
call fcn.004accbf
mov esp, ebp
pop ebp
ret 0x10
call fcn.004b306f
call fcn.004b306f
call fcn.004b306f
call fcn.004b306f
call fcn.004b306f
int3