Function at 0x14009b490
Capabilities:
Check for unmoving mouse cursor
Check if file exists
Create process on windows
Create thread
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd90
mov rax, qword [0x140185220]
xor rax, rsp
mov qword [rsp + 0xd88], rax
mov r14d, edx
mov dword [rsp + 0x70], edx
mov rbx, rcx
mov qword [rsp + 0x68], rcx
mov dword [rsp + 0x98], edx
xor r15d, r15d
mov r12d, r15d
mov dword [rsp + 0x58], r15d
mov dword [rsp + 0x50], r15d
mov esi, 0x3e8
cmp edx, esi
jg 0x14009b7a1
je 0x14009b6f6
mov ecx, edx
sub ecx, 1
je case.0x14009b7cb.1016
cmp ecx, 1
jne case.0x14009b7cb.1027
cmp byte [0x14018c2e4], r12b
je 0x14009b530
xor r9d, r9d
lea r8, str.escclose
lea rdx, str.settings
call fcn.140071220
movzx edi, al
jmp 0x14009b62a
xorps xmm0, xmm0
movups xmmword [rsp + 0x160], xmm0
mov qword [rsp + 0x170], r15
mov qword [rsp + 0x178], r15
mov r8d, 0x1c
lea rdx, str.SoftwaregrepWinNP3escclose
lea rcx, [rsp + 0x160]
call fcn.14004c390
nop
mov dword [rsp + 0x50], 0x40
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x260]
call fcn.1400627c0
mov qword [rsp + 0x2c0], r15
mov qword [rsp + 0x2c8], r15
mov eax, 0xffffffff
mov qword [rsp + 0x2d0], rax
lea rax, vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov qword [rsp + 0x260], rax
mov r12d, 0xc0
mov dword [rsp + 0x50], r12d
movzx eax, byte [rsp + 0x2b8]
test al, al
je 0x14009b611
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rdx, qword [rsp + 0x2c8]
cmp rax, rdx
jb 0x14009b5f0
add rdx, qword [rsp + 0x2d0]
cmp rax, rdx
ja 0x14009b5f0
movzx eax, byte [rsp + 0x2b8]
jmp 0x14009b5f9
xor al, al
mov byte [rsp + 0x2b8], al
test al, al
je 0x14009b611
cmp byte [rsp + 0x2b9], 0
jne 0x14009b611
mov dword [rsp + 0x2b0], r15d
jmp 0x14009b61e
lea rcx, [rsp + 0x260]
call fcn.1400715a0
cmp dword [rsp + 0x2c0], 0
setne dil
test r12b, r12b
jns 0x14009b654
btr r12d, 7
mov dword [rsp + 0x50], r12d
lea rcx, [rsp + 0x290]
call fcn.14004b2f0
lea rcx, [rsp + 0x270]
call fcn.14004b2f0
nop
test r12b, 0x40
je 0x14009b667
lea rcx, [rsp + 0x160]
call fcn.14004b2f0
test dil, dil
je case.0x14009b7cb.1027
movzx eax, byte [0x14018c33b]
test al, al
je 0x14009b68f
mov r13d, 1
mov eax, r13d
xchg byte [0x14018c33e], al
jmp 0x14009f8da
mov rcx, rbx
call fcn.1400a6920
cmp byte [rbx + 0x174], 0
jne 0x14009b6d0
lea rcx, [rbx + 0x290]
call fcn.1400601d0
lea rcx, [rbx + 0x3a0]
call fcn.1400601d0
lea rcx, [rbx + 0x428]
call fcn.1400601d0
lea rcx, [rbx + 0x4b0]
call fcn.1400601d0
cmp byte [rbx + 0x30], 0
je 0x14009b6e2
mov byte [rbx + 0x31], 1
mov qword [rbx + 0x38], 2
mov edx, 2
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_EndDialog]
jmp case.0x14009b7cb.1027
cmp r8d, 0x300
jne case.0x14009b7cb.1027
mov dword [rsp + 0x70], r15d
mov rcx, qword [rcx + 0x418]
test rcx, rcx
je 0x14009b724
mov rax, qword [rcx]
lea rdx, [rsp + 0x70]
call qword [rax + 0x30]
mov r15d, dword [rsp + 0x70]
bt r15d, 8
jae 0x14009b76c
mov rcx, qword [rbx + 0x418]
test rcx, rcx
je 0x14009b76c
mov rax, qword [rcx]
mov edx, 0x21
call qword [rax + 0x28]
mov rcx, qword [rbx + 0x410]
test rcx, rcx
je 0x14009b75a
lea rdx, [rbx + 0x3e8]
call fcn.14004a810
mov rcx, qword [rbx + 0x420]
test rcx, rcx
je 0x14009b76c
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rbx
call fcn.1400adb60
test eax, eax
setg dil
movzx r8d, dil
mov edx, 0x3fd
mov rcx, rbx
call fcn.14004bdf0
movzx r8d, dil
mov edx, 0x41a
mov rcx, rbx
call fcn.14004bdf0
jmp case.0x14009b7cb.1027
lea eax, [rdx - 0x3e9]
cmp eax, 0x58
ja case.0x14009b7cb.1027
cdqe
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x9f9b0]
mov ecx, dword [rdx + rax*4 + 0x9f944]
add rcx, rdx
jmp rcx
movzx eax, byte [0x14018c33a]
mov r13d, 1
test al, al
je 0x14009b808
mov eax, r13d
xchg byte [0x14018c33e], al
mov qword [rsp + 0x20], r15
mov edx, 0x430
lea r9d, [r13 + 2]
lea r8d, [rdx - 0x20]
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
jmp 0x14009f8da
mov edx, r13d
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetFocus]
mov rcx, rbx
call fcn.1400a6920
test al, al
je 0x14009f8da
xorps xmm0, xmm0
movups xmmword [rsp + 0x4e0], xmm0
mov qword [rsp + 0x4f0], r15
mov qword [rsp + 0x4f8], r15
mov r8d, 2
lea rdx, [0x1401631c0]
lea rcx, [rsp + 0x4e0]
call fcn.14004c390
lea rdx, [rsp + 0x4e0]
lea rcx, [rbx + 0x68]
call fcn.140091370
lea rcx, [rsp + 0x4e0]
call fcn.14004b2f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x380], xmm0
mov qword [rsp + 0x390], r15
mov qword [rsp + 0x398], r15
mov r8, r13
lea rdx, [0x140163810]
lea rcx, [rsp + 0x380]
call fcn.14004c390
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x360], xmm0
mov qword [rsp + 0x370], r15
mov qword [rsp + 0x378], r15
mov r8, r13
lea rdx, [0x1401647a4]
lea rcx, [rsp + 0x360]
call fcn.14004c390
nop
lea r8, [rsp + 0x380]
lea rdx, [rsp + 0x360]
lea rcx, [rbx + 0x68]
call fcn.140062f00
nop
mov rdx, qword [rsp + 0x378]
cmp rdx, 8
jb 0x14009b94a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x360]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009b944
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009f90a
call fcn.14011460c
nop
mov rdx, qword [rsp + 0x398]
cmp rdx, 8
jb 0x14009b992
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x380]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009b98d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009f910
call fcn.14011460c
lea rcx, [rbx + 0x68]
cmp qword [rbx + 0x80], 8
jb 0x14009b9a4
mov rcx, qword [rbx + 0x68]
call qword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
je 0x14009bad8
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0x98
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x220]
call fcn.14006ac50
nop
lea rdx, [rsp + 0x220]
mov rcx, rdi
call fcn.14004e260
cmp rax, qword [rdi]
je 0x14009b9f2
cmp qword [rax + 0x50], 0
lea rdx, [rax + 0x40]
jne 0x14009b9fa
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x180]
call fcn.14004aff0
nop
lea rsi, [rsp + 0x180]
cmp qword [rsp + 0x198], 8
cmovae rsi, qword [rsp + 0x180]
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0x99
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x1e0]
call fcn.14006ac50
nop
lea rdx, [rsp + 0x1e0]
mov rcx, rdi
call fcn.14004e260
cmp rax, qword [rdi]
je 0x14009ba62
cmp qword [rax + 0x50], 0
lea rdx, [rax + 0x40]
jne 0x14009ba6a
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x160]
call fcn.14004aff0
lea r8, [rsp + 0x160]
cmp qword [rsp + 0x178], 8
cmovae r8, qword [rsp + 0x160]
mov r9, rsi
mov rcx, rbx
call fcn.14004bf30
lea rcx, [rsp + 0x160]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x1e0]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x180]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x220]
call fcn.14004b2f0
jmp 0x14009f8da
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xc8], xmm0
mov qword [rsp + 0xd8], r15
lea r9, [0x140164104]
mov r8b, 1
lea rdx, [rbx + 0x68]
lea rcx, [rsp + 0xc8]
call fcn.14004f030
mov rsi, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xd0]
cmp rsi, rdi
je 0x14009bd46
mov rcx, rsi
cmp qword [rsi + 0x18], 8
jb 0x14009bb2d
mov rcx, qword [rsi]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x14009bb45
add rsi, 0x20
cmp rsi, rdi
jne 0x14009bb20
jmp 0x14009bd46
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0xa0
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x6f0]
call fcn.14006ac50
nop
lea rdx, [rsp + 0x6f0]
mov rcx, rdi
call fcn.14004e260
cmp rax, qword [rdi]
je 0x14009bb85
cmp qword [rax + 0x50], 0
lea rdx, [rax + 0x40]
jne 0x14009bb8d
lea rdx, [rsp + 0x6f0]
lea rcx, [rsp + 0x200]
call fcn.14004aff0
nop
lea rcx, [rsp + 0x6f0]
call fcn.14004b2f0
cmp qword [rsi + 0x18], 8
jb 0x14009bbb2
mov rsi, qword [rsi]
lea rdx, [rsp + 0x200]
cmp qword [rsp + 0x218], 8
cmovae rdx, qword [rsp + 0x200]
mov r8, rsi
lea rcx, [rsp + 0x8e0]
call fcn.140062b60
mov rdi, rax
lea rax, [rsp + 0x200]
cmp rax, rdi
je 0x14009bc7c
mov rdx, qword [rsp + 0x218]
cmp rdx, 8
jb 0x14009bc38
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009bc33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009f916
call fcn.14011460c
mov qword [rsp + 0x210], r15
mov qword [rsp + 0x218], 7
mov word [rsp + 0x200], r15w
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x200], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x210], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rsp + 0x8e0]
call fcn.14004b2f0
lea rsi, [rsp + 0x200]
cmp qword [rsp + 0x218], 8
cmovae rsi, qword [rsp + 0x200]
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0x99
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x710]
call fcn.14006ac50
nop
lea rdx, [rsp + 0x710]
mov rcx, rdi
call fcn.14004e260
cmp rax, qword [rdi]
je 0x14009bce3
cmp qword [rax + 0x50], 0
lea rdx, [rax + 0x40]
jne 0x14009bceb
lea rdx, [rsp + 0x710]
lea rcx, [rsp + 0x4c0]
call fcn.14004aff0
lea r8, [rsp + 0x4c0]
cmp qword [rsp + 0x4d8], 8
cmovae r8, qword [rsp + 0x4c0]
mov r9, rsi
mov rcx, rbx
call fcn.14004bf30
lea rcx, [rsp + 0x4c0]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x710]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x200]
call fcn.14004b2f0
cmp r14d, 0x43d
jne 0x14009bdbc
mov rax, qword [rbx + 0x188]
cmp qword [rbx + 0x180], rax
je 0x14009bdbc
lea rax, [rbx + 0x68]
cmp qword [rbx + 0x80], 8
jb 0x14009bd71
mov rax, qword [rbx + 0x68]
mov qword [rbx + 0x78], r15
mov word [rax], r15w
mov r12, qword [rbx + 0x188]
mov rdi, qword [rbx + 0x180]
cmp rdi, r12
je 0x14009bdbc
nop dword [rax]
cmp qword [rbx + 0x78], 0
je 0x14009bda7
lea rdx, [0x140164104]
lea rcx, [rbx + 0x68]
call fcn.14004ef90
mov rdx, rdi
lea rcx, [rbx + 0x68]
call fcn.14004dfb0
add rdi, 0x70
cmp rdi, r12
jne 0x14009bd90
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xa0], xmm0
mov qword [rsp + 0xb0], r15
lea rdx, [rbx + 0x68]
lea r9, [0x140164104]
mov r8b, 1
lea rcx, [rsp + 0xa0]
call fcn.14004f030
mov rdi, qword [rsp + 0xa0]
mov r12, qword [rsp + 0xa8]
cmp rdi, r12
je 0x14009be24
mov rcx, rdi
cmp qword [rdi + 0x18], 8
jb 0x14009be0d
mov rcx, qword [rdi]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x14009bec1
add rdi, 0x20
cmp rdi, r12
jne 0x14009be00
mov qword [rbx + 0x1c0], r15
mov edx, 0x43e
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rdi, qword [rbx + 0x180]
mov rsi, qword [rbx + 0x188]
cmp rdi, rsi
je 0x14009be77
mov rcx, rdi
call fcn.1400df280
add rdi, 0x70
cmp rdi, rsi
jne 0x14009be58
mov rax, qword [rbx + 0x180]
mov qword [rbx + 0x188], rax
lea rcx, [rbx + 0x198]
mov rax, qword [rcx]
cmp rax, qword [rcx + 8]
je 0x14009be8b
mov qword [rcx + 8], rax
mov rax, qword [rcx + 0x10]
sub rax, qword [rcx]
sar rax, 3
cmp rax, 0x7a120
jae 0x14009bea8
mov edx, 0x7a120
call fcn.1400b22b0
lea rcx, [0x14018c3c0]
call fcn.1400ecdd0
test eax, eax
jne 0x14009f91c
jmp 0x14009c003
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0xa0
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x750]
call fcn.14006ac50
nop
lea rdx, [rsp + 0x750]
mov rcx, rdi
call fcn.14004e260
cmp rax, qword [rdi]
je 0x14009bf01
cmp qword [rax + 0x50], 0
lea rdx, [rax + 0x40]
jne 0x14009bf09
lea rdx, [rsp + 0x750]
lea rcx, [rsp + 0x480]
call fcn.14004aff0
nop
lea rsi, [rsp + 0x480]
cmp qword [rsp + 0x498], 8
cmovae rsi, qword [rsp + 0x480]
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0x99
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x730]
call fcn.14006ac50
nop
lea rdx, [rsp + 0x730]
mov rcx, rdi
call fcn.14004e260
cmp rax, qword [rdi]
je 0x14009bf71
cmp qword [rax + 0x50], 0
lea rdx, [rax + 0x40]
jne 0x14009bf79
lea rdx, [rsp + 0x730]
lea rcx, [rsp + 0x4a0]
call fcn.14004aff0
lea r8, [rsp + 0x4a0]
cmp qword [rsp + 0x4b8], 8
cmovae r8, qword [rsp + 0x4a0]
mov r9, rsi
mov rcx, rbx
call fcn.14004bf30
lea rcx, [rsp + 0x4a0]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x730]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x480]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x750]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0xa0]
call fcn.14004ab50
nop
lea rcx, [rsp + 0xc8]
call fcn.14004ab50
jmp 0x14009f8da
mov rax, qword [0x14018c410]
mov qword [rsp + 0x90], rax
mov rsi, qword [rax + 8]
cmp byte [rsi + 0x19], 0
jne 0x14009c061
nop dword [rax]
mov r8, qword [rsi + 0x10]
lea rdx, [0x14018c410]
lea rcx, [0x14018c410]
call fcn.140063910
mov rdi, rsi
mov rsi, qword [rsi]
lea rcx, [rdi + 0x20]
call fcn.14004b2f0
mov edx, 0x40
mov rcx, rdi
call fcn.14011460c
cmp byte [rsi + 0x19], 0
je 0x14009c020
mov rax, qword [rsp + 0x90]
mov qword [rax + 8], rax
mov qword [rax], rax
mov qword [rax + 0x10], rax
mov qword [0x14018c418], r15
lea rcx, [0x14018c3c0]
call fcn.1400ecdf4
mov edx, 0x3f6
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x102f
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x423
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rdi, rax
test rax, rax
je 0x14009c0e3
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rdi
jne 0x14009c0d8
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x28]
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x424
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rdi, rax
test rax, rax
je 0x14009c124
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rdi
jne 0x14009c119
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x28]
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_EnableWindow]
lea rdx, [rbx + 0xe0]
cmp qword [rdx + 0x18], 8
jb 0x14009c135
mov rdx, qword [rdx]
lea rcx, [rbx + 0x290]
call fcn.14005fa60
mov rcx, qword [rbx + 0x300]
test rcx, rcx
je 0x14009c159
lea rdx, [rbx + 0x2d8]
call fcn.14004a810
mov rcx, qword [rbx + 0x310]
test rcx, rcx
je 0x14009c16b
mov rax, qword [rcx]
call qword [rax + 0x20]
lea rdx, [rbx + 0x108]
cmp qword [rdx + 0x18], 8
jb 0x14009c17c
mov rdx, qword [rdx]
lea rcx, [rbx + 0x318]
call fcn.14005fa60
mov rcx, qword [rbx + 0x388]
test rcx, rcx
je 0x14009c1a0
lea rdx, [rbx + 0x360]
call fcn.14004a810
mov rcx, qword [rbx + 0x398]
test rcx, rcx
je 0x14009c1b2
mov rax, qword [rcx]
call qword [rax + 0x20]
lea rdx, [rbx + 0x88]
cmp qword [rdx + 0x18], 8
jb 0x14009c1c3
mov rdx, qword [rdx]
lea rcx, [rbx + 0x3a0]
call fcn.14005fa60
mov rcx, qword [rbx + 0x410]
test rcx, rcx
je 0x14009c1e7
lea rdx, [rbx + 0x3e8]
call fcn.14004a810
mov rcx, qword [rbx + 0x420]
test rcx, rcx
je 0x14009c1f9
mov rax, qword [rcx]
call qword [rax + 0x20]
lea rdx, [rbx + 0xa8]
cmp qword [rdx + 0x18], 8
jb 0x14009c20a
mov rdx, qword [rdx]
lea rcx, [rbx + 0x428]
call fcn.14005fa60
mov rcx, qword [rbx + 0x498]
test rcx, rcx
je 0x14009c22e
lea rdx, [rbx + 0x470]
call fcn.14004a810
mov rcx, qword [rbx + 0x4a8]
test rcx, rcx
je 0x14009c240
mov rax, qword [rcx]
call qword [rax + 0x20]
lea rdx, [rbx + 0x68]
cmp qword [rdx + 0x18], 8
jb 0x14009c24e
mov rdx, qword [rdx]
lea rcx, [rbx + 0x4b0]
call fcn.14005fa60
mov rcx, qword [rbx + 0x520]
test rcx, rcx
je 0x14009c272
lea rdx, [rbx + 0x4f8]
call fcn.14004a810
mov rcx, qword [rbx + 0x530]
test rcx, rcx
je 0x14009c284
mov rax, qword [rcx]
call qword [rax + 0x20]
cmp byte [rbx + 0x174], 0
jne 0x14009c2bd
lea rcx, [rbx + 0x290]
call fcn.1400601d0
lea rcx, [rbx + 0x3a0]
call fcn.1400601d0
lea rcx, [rbx + 0x428]
call fcn.1400601d0
lea rcx, [rbx + 0x4b0]
call fcn.1400601d0
cmp r14d, 0x419
sete al
mov byte [rbx + 0x175], al
jne 0x14009c6bd
cmp byte [rbx + 0x146], 0
jne 0x14009c6bd
cmp byte [rbx + 0x176], 0
jne 0x14009c2f7
cmp qword [rbx + 0xb8], 0
jne 0x14009c6bd
cmp byte [0x14018c2e4], 0
je 0x14009c323
xor r9d, r9d
lea r8, str.nowarnifnobackup
lea rdx, str.settings
call fcn.140071220
movzx edi, al
mov r14d, dword [rsp + 0x50]
jmp 0x14009c415
xorps xmm0, xmm0
movups xmmword [rsp + 0x440], xmm0
mov qword [rsp + 0x450], r15
mov qword [rsp + 0x458], r15
mov r8d, 0x24
lea rdx, str.SoftwaregrepWinNP3_nowarnifnobackup
lea rcx, [rsp + 0x440]
call fcn.14004c390
nop
mov dword [rsp + 0x50], r13d
lea rdx, [rsp + 0x440]
lea rcx, [rsp + 0x5f0]
call fcn.1400627c0
mov qword [rsp + 0x650], r15
mov qword [rsp + 0x658], r15
mov esi, 0xffffffff
mov qword [rsp + 0x660], rsi
lea rsi, vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov qword [rsp + 0x5f0], rsi
mov r14d, 3
mov dword [rsp + 0x50], r14d
movzx eax, byte [rsp + 0x648]
test al, al
je 0x14009c401
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rdx, qword [rsp + 0x658]
cmp rax, rdx
jb 0x14009c3e0
add rdx, qword [rsp + 0x660]
cmp rax, rdx
ja 0x14009c3e0
movzx eax, byte [rsp + 0x648]
jmp 0x14009c3e9
xor al, al
mov byte [rsp + 0x648], al
test al, al
je 0x14009c401
cmp byte [rsp + 0x649], 0
jne 0x14009c401
mov dword [rsp + 0x640], r15d
jmp 0x14009c40e
lea rcx, [rsp + 0x5f0]
call fcn.1400715a0
mov edi, dword [rsp + 0x650]
test r14b, 2
je 0x14009c43f
and r14d, 0xfffffffd
mov dword [rsp + 0x50], r14d
lea rcx, [rsp + 0x620]
call fcn.14004b2f0
lea rcx, [rsp + 0x600]
call fcn.14004b2f0
nop
test r14b, 1
je 0x14009c45b
and r14d, 0xfffffffe
mov dword [rsp + 0x50], r14d
lea rcx, [rsp + 0x440]
call fcn.14004b2f0
test edi, edi
jne 0x14009c6c2
cmp qword [rbx + 0xb8], 0
jne 0x14009c4f5
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0x7d
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x790]
call fcn.14006ac50
nop
or r14d, 4
mov dword [rsp + 0x50], r14d
lea rdx, [rsp + 0x790]
mov rcx, rdi
call fcn.14004e260
cmp rax, qword [rdi]
je 0x14009c4ba
cmp qword [rax + 0x50], 0
lea rdx, [rax + 0x40]
jne 0x14009c4c2
lea rdx, [rsp + 0x790]
lea rcx, [rsp + 0x500]
call fcn.14004aff0
nop
or r14d, 8
mov dword [rsp + 0x50], r14d
lea rax, [rsp + 0x500]
cmp qword [rsp + 0x518], 8
cmovae rax, qword [rsp + 0x500]
jmp 0x14009c506
lea rax, [rbx + 0xa8]
cmp qword [rax + 0x18], 8
jb 0x14009c506
mov rax, qword [rax]
mov qword [rsp + 0x90], rax
lea rsi, [rbx + 0x88]
cmp qword [rsi + 0x18], 8
jb 0x14009c51f
mov rsi, qword [rsi]
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0x7c
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x770]
call fcn.14006ac50
nop
lea rdx, [rsp + 0x770]
mov rcx, rdi
call fcn.14004e260
cmp rax, qword [rdi]
je 0x14009c55f
cmp qword [rax + 0x50], 0
lea rdx, [rax + 0x40]
jne 0x14009c567
lea rdx, [rsp + 0x770]
lea rcx, [rsp + 0x460]
call fcn.14004aff0
nop
lea rdx, [rsp + 0x460]
cmp qword [rsp + 0x478], 8
cmovae rdx, qword [rsp + 0x460]
mov r9, qword [rsp + 0x90]
mov r8, rsi
lea rcx, [rsp + 0x3a0]
call fcn.140062b60
nop
lea rcx, [rsp + 0x460]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x770]
call fcn.14004b2f0
nop
test r14b, 8
je 0x14009c5e1
and r14d, 0xfffffff7
mov dword [rsp + 0x50], r14d
lea rcx, [rsp + 0x500]
call fcn.14004b2f0
nop
test r14b, 4
je 0x14009c5fd
and r14d, 0xfffffffb
mov dword [rsp + 0x50], r14d
lea rcx, [rsp + 0x790]
call fcn.14004b2f0
lea rdx, [rsp + 0x3a0]
cmp qword [rsp + 0x3b8], 8
cmovae rdx, qword [rsp + 0x3a0]
mov r9d, 0x24
lea r8, [0x140167f30]
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, [rsp + 0x3a0]
cmp eax, 6
je 0x14009c6b6
call fcn.14004b2f0
nop
mov rbx, qword [rsp + 0xa0]
test rbx, rbx
je 0x14009c6a4
mov rdi, rbx
cmp rbx, r12
je 0x14009c667
mov rcx, rdi
call fcn.14004b2f0
add rdi, 0x20
cmp rdi, r12
jne 0x14009c656
mov rdx, qword [rsp + 0xb0]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x14009c69b
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009f924
mov rcx, rbx
call fcn.14011460c
nop
lea rcx, [rsp + 0xc8]
call fcn.14004ab50
jmp 0x14009f8da
call fcn.14004b2f0
jmp 0x14009c6c2
mov r14d, dword [rsp + 0x50]
cmp byte [rbx + 0x175], 0
je 0x14009c8ce
cmp byte [rbx + 0x14e], 0
je 0x14009c8ce
mov edx, 0x41d
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
lea esi, [rax + 1]
movsxd rcx, esi
mov eax, 2
mul rcx
mov rdi, rax
mov r12, 0xffffffffffffffff
cmovo rdi, r12
mov rcx, rdi
call fcn.140114b30
mov r12, rax
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.140118720
mov qword [rsp + 0xe0], r12
or r14d, 0x80000000
mov dword [rsp + 0x50], r14d
mov r9d, esi
mov r8, r12
mov edx, 0x41d
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
nop
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0xac
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x7b0]
call fcn.14006ac50
nop
lea rdx, [rsp + 0x7b0]
mov rcx, rdi
call fcn.14004e260
cmp rax, qword [rdi]
je 0x14009c792
cmp qword [rax + 0x50], 0
lea rdx, [rax + 0x40]
jne 0x14009c79a
lea rdx, [rsp + 0x7b0]
lea rcx, [rsp + 0x3c0]
call fcn.14004aff0
nop
lea rdx, [rsp + 0x3c0]
cmp qword [rsp + 0x3d8], 8
cmovae rdx, qword [rsp + 0x3c0]
mov r8, r12
lea rcx, [rsp + 0x3e0]
call fcn.140062b60
nop
lea rcx, [rsp + 0x3c0]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x7b0]
call fcn.14004b2f0
lea rdx, [rsp + 0x3e0]
cmp qword [rsp + 0x3f8], 8
cmovae rdx, qword [rsp + 0x3e0]
mov r9d, 0x134
lea r8, [0x140167f30]
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, [rsp + 0x3e0]
cmp eax, 6
je 0x14009c8c0
call fcn.14004b2f0
nop
mov rcx, r12
call fcn.14011460c
nop
mov rsi, qword [rsp + 0xa0]
test rsi, rsi
je 0x14009c8ae
mov rdi, rsi
mov rbx, qword [rsp + 0xa8]
cmp rsi, rbx
je 0x14009c871
nop dword [rax]
mov rcx, rdi
call fcn.14004b2f0
add rdi, 0x20
cmp rdi, rbx
jne 0x14009c860
mov rdx, qword [rsp + 0xb0]
sub rdx, rsi
and rdx, 0xffffffffffffffe0
mov rax, rsi
cmp rdx, 0x1000
jb 0x14009c8a5
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009f92a
mov rcx, rsi
call fcn.14011460c
nop
lea rcx, [rsp + 0xc8]
call fcn.14004ab50
jmp 0x14009f8da
call fcn.14004b2f0
nop
mov rcx, r12
call fcn.14011460c
mov byte [rbx + 0x176], 1
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
xchg byte [0x14018c33f], al
mov esi, dword [rsp + 0x70]
cmp esi, 0x43c
jne 0x14009c909
mov eax, r13d
xchg byte [0x14018c33f], al
mov byte [rbx + 0x155], 0
jmp 0x14009c92f
mov byte [rbx + 0x155], 0
cmp esi, 0x441
jne 0x14009c92f
mov byte [rbx + 0x155], 1
mov eax, r15d
xchg byte [0x14018c33f], al
mov byte [rbx + 0x175], 0
cmp byte [rbx + 0x175], 0
je 0x14009c968
lea r8, [rbx + 0xa8]
lea rdx, [rsp + 0x900]
call fcn.1400aeec0
mov rdx, rax
lea rcx, [rbx + 0xa8]
call fcn.14004c2b0
lea rcx, [rsp + 0x900]
call fcn.14004b2f0
cmp qword [rbx + 0x98], 0
je 0x14009c97d
movzx eax, byte [0x14018c33f]
test al, al
je 0x14009c9a2
mov edx, 0x423
mov r9d, edx
lea r8d, [rdx + 1]
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_CheckRadioButton]
mov byte [rbx + 0x177], 0
mov rcx, rbx
call fcn.14009fea0
mov eax, r13d
xchg byte [0x14018c33a], al
mov ecx, r15d
xchg byte [0x14018c33e], cl
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0x7e
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x7d0]
call fcn.14006ac50
nop
lea rdx, [rsp + 0x7d0]
mov rcx, rdi
call fcn.14004e260
cmp rax, qword [rdi]
je 0x14009c9f4
cmp qword [rax + 0x50], 0
lea rdx, [rax + 0x40]
jne 0x14009c9fc
lea rdx, [rsp + 0x7d0]
lea rcx, [rsp + 0x400]
call fcn.14004aff0
mov esi, dword [rsp + 0x50]
bts esi, 0x1a
bts esi, 0x19
lea r8, [rsp + 0x400]
cmp qword [rsp + 0x418], 8
cmovae r8, qword [rsp + 0x400]
mov edx, r13d
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea rcx, [rsp + 0x400]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x7d0]
call fcn.14004b2f0
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0x7e
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x7f0]
call fcn.14006ac50
nop
lea rdx, [rsp + 0x7f0]
mov rcx, rdi
call fcn.14004e260
cmp rax, qword [rdi]
je 0x14009ca97
cmp qword [rax + 0x50], 0
lea rdx, [rax + 0x40]
jne 0x14009ca9f
lea rdx, [rsp + 0x7f0]
lea rcx, [rsp + 0x420]
call fcn.14004aff0
bts esi, 0x18
bts esi, 0x17
mov dword [rsp + 0x50], esi
lea r8, [rsp + 0x420]
cmp qword [rsp + 0x438], 8
cmovae r8, qword [rsp + 0x420]
mov edx, r13d
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea rcx, [rsp + 0x420]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x7f0]
call fcn.14004b2f0
mov edx, 0x430
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov qword [rsp + 0x20], r15
mov r9, r13
mov edx, 0x430
lea r8d, [rdx - 0x26]
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov rcx, qword [rbx + 0x60]
test rcx, rcx
je 0x14009cb48
mov rax, qword [rcx]
mov r8d, r13d
mov rdx, qword [rbx + 0x10]
call qword [rax + 0x50]
mov dword [rsp + 0x58], r15d
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
mov r9, rbx
lea r8, [0x1400a99c0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x14009cb80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14009cbcb
mov eax, r13d
xchg byte [0x14018c33e], al
mov ecx, r15d
xchg byte [0x14018c33a], cl
mov edx, 0x430
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov edx, 0x42f
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, r13d
call qword [sym.imp.USER32.dll_EnableWindow]
mov esi, dword [rsp + 0x50]
call fcn.1400ecfb8
lea edi, [rax*4]
cmp byte [0x14018c2e4], 0
je 0x14009cbfd
mov r9d, edi
lea r8, str.MaxNumOfWorker
lea rdx, str.global
call fcn.1400b28a0
mov edi, eax
jmp 0x14009ccf3
xorps xmm0, xmm0
movups xmmword [rsp + 0x340], xmm0
mov qword [rsp + 0x350], r15
mov qword [rsp + 0x358], r15
mov r8d, 0x22
lea rdx, str.SoftwaregrepWinNP3MaxNumOfWorker
lea rcx, [rsp + 0x340]
call fcn.14004c390
nop
or esi, 0x10
mov dword [rsp + 0x50], esi
lea rdx, [rsp + 0x340]
lea rcx, [rsp + 0x670]
call fcn.1400627c0
mov dword [rsp + 0x6d0], edi
mov dword [rsp + 0x6d4], edi
mov qword [rsp + 0x6d8], r15
mov eax, 0xffffffff
mov qword [rsp + 0x6e0], rax
lea rax, vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov qword [rsp + 0x670], rax
or esi, 0x20
mov dword [rsp + 0x50], esi
movzx eax, byte [rsp + 0x6c8]
test al, al
je 0x14009ccdf
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rdx, qword [rsp + 0x6d8]
cmp rax, rdx
jb 0x14009ccbe
add rdx, qword [rsp + 0x6e0]
cmp rax, rdx
ja 0x14009ccbe
movzx eax, byte [rsp + 0x6c8]
jmp 0x14009ccc7
xor al, al
mov byte [rsp + 0x6c8], al
test al, al
je 0x14009ccdf
cmp byte [rsp + 0x6c9], 0
jne 0x14009ccdf
mov dword [rsp + 0x6c0], r15d
jmp 0x14009ccec
lea rcx, [rsp + 0x670]
call fcn.1400715a0
mov edi, dword [rsp + 0x6d0]
test sil, 0x20
je 0x14009cd1b
and esi, 0xffffffdf
mov dword [rsp + 0x50], esi
lea rcx, [rsp + 0x6a0]
call fcn.14004b2f0
lea rcx, [rsp + 0x680]
call fcn.14004b2f0
nop
test sil, 0x10
je 0x14009cd69
mov rdx, qword [rsp + 0x358]
cmp rdx, 8
jb 0x14009cd69
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009cd64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009f930
call fcn.14011460c
cmp edi, 1
jbe 0x14009bfe3
mov eax, r13d
xchg byte [0x14018c33b], al
mov dword [rsp + 0x58], r15d
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
mov r9, rbx
lea r8, [0x1400a99d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x14009cdb6
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14009bfe3
mov eax, r13d
xchg byte [0x14018c33e], al
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8003
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SendMessageW]
xchg byte [0x14018c33b], r15b
mov edx, 0x430
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov edx, 0x42f
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, r13d
call qword [sym.imp.USER32.dll_EnableWindow]
jmp 0x14009bfe3
mov edx, 0x439
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov edi, r15d
mov r14d, 5
cmp eax, 1
cmove edi, r14d
mov edx, 0x43b
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, edi
call qword [sym.imp.USER32.dll_ShowWindow]
mov edx, 0x436
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
cmovne r14d, r15d
mov edx, 0x43a
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov edx, r14d
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
jmp case.0x14009b7cb.1027
mov r8d, esi
lea rdx, [rsp + 0x80]
mov rcx, rbx
call fcn.14004be90
nop
mov rdx, qword [rsp + 0x80]
lea rcx, [rbx + 0x88]
call fcn.14004c9f0
mov r13d, 0x3ff
mov r8d, r13d
lea rdx, [rsp + 0x68]
mov rcx, rbx
call fcn.14004be90
mov rdx, rax
lea rcx, [rsp + 0x80]
call fcn.140058c90
lea rcx, [rsp + 0x68]
call fcn.14004c240
mov rdx, qword [rsp + 0x80]
lea rcx, [rbx + 0xa8]
call fcn.14004c9f0
mov rcx, rbx
call fcn.1400a6920
mov rdx, qword [rbx + 0x10]
lea rcx, [rsp + 0xa30]
call fcn.140073db0
nop
movzx eax, byte [rbx + 0x151]
mov byte [rsp + 0xa79], al
movzx eax, byte [rbx + 0x153]
mov byte [rsp + 0xa78], al
lea r8, [rbx + 0xa8]
lea rdx, [rbx + 0x88]
lea rcx, [rsp + 0xa30]
call fcn.140074760
mov r9, qword [rbx + 0x10]
mov r8d, 0x82
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0xa30]
call fcn.14004b510
cmp rax, 1
jne 0x14009d001
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0xa30]
call fcn.1400928b0
mov rdx, rax
lea rcx, [rbx + 0x88]
call fcn.14004c2b0
lea rcx, [rsp + 0x120]
call fcn.14004b2f0
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0xa30]
call fcn.1400928d0
mov rdx, rax
lea rcx, [rbx + 0xa8]
call fcn.14004c2b0
lea rcx, [rsp + 0x1c0]
call fcn.14004b2f0
lea rcx, [rbx + 0x88]
call fcn.14004b370
mov r8, rax
lea edx, [r13 - 0x17]
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea rcx, [rbx + 0xa8]
call fcn.14004b370
mov r8, rax
mov edx, r13d
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
nop
lea rcx, [rsp + 0xa30]
call fcn.140073f10
nop
lea rcx, [rsp + 0x80]
call fcn.14004c240
jmp case.0x14009b7cb.1027
mov rcx, rbx
call fcn.1400aec00
jmp case.0x14009b7cb.1027
mov r8d, 0x3f4
lea rdx, [rsp + 0x68]
mov rcx, rbx
call fcn.14004be90
nop
mov rdx, qword [rax]
lea rcx, [rsp + 0x220]
call fcn.14004c350
nop
lea rcx, [rsp + 0x68]
call fcn.14004c240
lea rdx, [0x14016800c]
lea rcx, [rsp + 0x240]
call fcn.14004c350
nop
lea rdx, [0x140164104]
lea rcx, [rsp + 0x1e0]
call fcn.14004c350
nop
lea r8, [rsp + 0x240]
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x220]
call fcn.140062f00
nop
lea rcx, [rsp + 0x1e0]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x240]
call fcn.14004b2f0
mov rdx, qword [rbx + 0x10]
lea rcx, [rsp + 0x810]
call fcn.140071640
nop
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x810]
call fcn.140091b90
mov r9, qword [rbx + 0x10]
mov r8d, 0x89
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x810]
call fcn.14004b510
cmp rax, 1
jne 0x14009d1b2
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x810]
call fcn.14006ac30
nop
lea rdx, [0x140164104]
lea rcx, [rsp + 0x140]
call fcn.14004c350
nop
lea rdx, [0x14016800c]
lea rcx, [rsp + 0x240]
call fcn.14004c350
nop
lea r8, [rsp + 0x140]
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x1e0]
call fcn.140062f00
nop
lea rcx, [rsp + 0x240]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x140]
call fcn.14004b2f0
lea rcx, [rsp + 0x1e0]
call fcn.14004b370
mov r8, rax
mov edx, 0x3f4
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
nop
lea rcx, [rsp + 0x1e0]
call fcn.14004b2f0
mov edx, 0x3f4
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetFocus]
nop
lea rcx, [rsp + 0x810]
call fcn.140071740
nop
lea rcx, [rsp + 0x220]
call fcn.14004b2f0
jmp case.0x14009b7cb.1027
lea rcx, [rsp + 0xa30]
call fcn.14004c480
mov r8d, 0x3f4
lea rdx, [rsp + 0x88]
mov rcx, rbx
call fcn.14004be90
nop
mov rdi, qword [rsp + 0x88]
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x14009d242
lea rdx, [0x140164104]
mov rcx, rdi
call fcn.140117c94
test rax, rax
je 0x14009d23e
mov word [rax], r15w
jmp 0x14009d242
mov word [rdi], r15w
lea rdx, [0x140168014]
mov rcx, rdi
call fcn.140117c94
test rax, rax
je 0x14009d32c
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0x98
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x220]
call fcn.14006add0
nop
mov r8, rax
lea rdx, [rsp + 0x1e0]
mov rcx, rdi
call fcn.14005ac80
nop
mov rcx, rax
call fcn.14004b370
mov rsi, rax
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0x99
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x1c0]
call fcn.14006add0
nop
mov r8, rax
lea rdx, [rsp + 0x120]
mov rcx, rdi
call fcn.14005ac80
mov rcx, rax
call fcn.14004b370
mov r9, rsi
mov r8, rax
mov rcx, rbx
call fcn.14004bf30
lea rcx, [rsp + 0x120]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x1c0]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x1e0]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x220]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x88]
call fcn.14004c240
jmp case.0x14009b7cb.1027
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], r15
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0x7f
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x1c0]
call fcn.14006add0
nop
mov r8, rax
lea rdx, [rsp + 0x120]
mov rcx, rdi
call fcn.14005ac80
mov rcx, rax
call fcn.14004b370
mov rdx, rax
lea rcx, [rsp + 0xa30]
call fcn.14004c960
lea rcx, [rsp + 0x120]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x1c0]
call fcn.14004b2f0
lea rdx, [rbx + 0x68]
lea rcx, [rsp + 0x1e0]
call fcn.14004aff0
mov r9, rax
lea r8, [rsp + 0x180]
mov rdx, qword [rbx + 0x10]
lea rcx, [rsp + 0xa30]
call fcn.14004c4d0
cmp eax, 2
jne 0x14009d481
lea rcx, [rsp + 0x160]
call fcn.14004c460
nop
mov rdi, qword [rsp + 0x180]
mov rsi, qword [rsp + 0x188]
cmp rdi, rsi
je 0x14009d442
nop
lea rcx, [rsp + 0x160]
cmp qword [rsp + 0x170], 0
jne 0x14009d41d
mov rdx, rdi
call fcn.14004ca10
jmp 0x14009d439
lea rdx, [0x140164104]
call fcn.14004ef90
mov rdx, rdi
lea rcx, [rsp + 0x160]
call fcn.14004dfb0
add rdi, 0x20
cmp rdi, rsi
jne 0x14009d400
lea rcx, [rsp + 0x160]
call fcn.14004b370
mov r8, rax
mov edx, 0x3f4
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea rcx, [rbx + 0x68]
lea rdx, [rsp + 0x160]
call fcn.14004ca10
nop
lea rcx, [rsp + 0x160]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x180]
call fcn.14004ab50
nop
lea rcx, [rsp + 0x88]
call fcn.14004c240
jmp case.0x14009b7cb.1027
cmp r8d, 0x300
jne case.0x14009b7cb.1027
lea rcx, [rbx + 0x4b0]
call fcn.14004a7e0
bt eax, 8
jae 0x14009d4d1
mov edx, 0x21
lea rcx, [rbx + 0x4b0]
call fcn.14004a790
mov edx, esi
mov rcx, rbx
call fcn.14004be70
mov r15d, eax
mov r8d, 0x3f4
lea rdx, [rsp + 0x68]
mov rcx, rbx
call fcn.14004be90
mov rdi, qword [rsp + 0x68]
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
setne sil
test eax, eax
jne 0x14009d528
mov dx, 0x7c
mov rcx, rdi
call fcn.140117bf0
movzx esi, sil
mov r13d, 1
test rax, rax
cmovne esi, r13d
jmp 0x14009d52e
mov r13d, 1
mov edx, 0x3f3
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete r14b
movzx r8d, sil
mov edx, 0x3ed
mov rcx, rbx
call fcn.14004bdf0
movzx r8d, sil
mov edx, 0x3ee
mov rcx, rbx
call fcn.14004bdf0
test sil, sil
je 0x14009d586
cmp byte [rbx + 0x12c], r12b
jne 0x14009d586
mov r8b, 1
mov edx, 0x3ef
mov rcx, rbx
call fcn.14004bdf0
jmp 0x14009d59b
xor r8d, r8d
mov edx, 0x3ef
mov rcx, rbx
call fcn.14004bdf0
test sil, sil
je 0x14009d5a9
cmp byte [rbx + 0x12c], r12b
jne 0x14009d5a9
mov r8b, 1
jmp 0x14009d5ac
xor r8d, r8d
mov edx, 0x3f0
mov rcx, rbx
call fcn.14004bdf0
movzx r8d, sil
mov edx, 0x3f1
mov rcx, rbx
call fcn.14004bdf0
movzx r8d, sil
mov edx, 0x3f2
mov rcx, rbx
call fcn.14004bdf0
movzx r8d, sil
mov edx, 0x3f3
mov rcx, rbx
call fcn.14004bdf0
movzx r8d, sil
mov edx, 0x444
mov rcx, rbx
call fcn.14004bdf0
test sil, sil
je 0x14009d6e6
test r15d, r15d
jle 0x14009d6e6
mov r8b, 1
mov edx, 0x41a
mov rcx, rbx
call fcn.14004bdf0
movzx r8d, sil
mov edx, 0x410
mov rcx, rbx
call fcn.14004bdf0
mov r8b, 1
mov edx, 0x413
mov rcx, rbx
call fcn.14004bdf0
movzx r8d, sil
mov edx, 0x416
mov rcx, rbx
call fcn.14004bdf0
movzx r8d, sil
mov edx, 0x418
mov rcx, rbx
call fcn.14004bdf0
xor edx, edx
mov r8d, 0xc8
lea rcx, [rsp + 0x810]
call fcn.140118720
xor r9d, r9d
lea r8d, [r9 + 0x28]
mov rdx, rdi
lea rcx, [rsp + 0x810]
call qword [sym.imp.SHLWAPI.dll_PathCompactPathExW]
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0xa30]
call fcn.140118720
lea r9, [rsp + 0x810]
lea r8, str.grepWinNP3_:__s
mov edx, 0x104
lea rcx, [rsp + 0xa30]
call fcn.140062710
lea rdx, [rsp + 0xa30]
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SetWindowTextW]
lea rcx, [rsp + 0x68]
call fcn.14004c240
jmp 0x14009f8da
xor r8d, r8d
mov edx, 0x41a
mov rcx, rbx
call fcn.14004bdf0
movzx r8d, sil
mov edx, 0x410
mov rcx, rbx
call fcn.14004bdf0
test sil, sil
jne 0x14009d630
test r14b, r14b
jne 0x14009d630
xor r8d, r8d
jmp 0x14009d633
test r8d, r8d
jne case.0x14009b7cb.1027
mov r8d, 0x3f4
lea rdx, [rsp + 0x68]
mov rcx, rbx
call fcn.14004be90
mov edx, 0x3f3
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete sil
mov rdi, qword [rsp + 0x68]
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x14009d77f
lea edx, [rax + 0x7c]
mov rcx, rdi
call fcn.140117bf0
test rax, rax
jne 0x14009d77f
test sil, sil
jne 0x14009d77f
xor r8d, r8d
jmp 0x14009d782
mov r8b, 1
mov edx, 0x413
mov rcx, rbx
call fcn.14004bdf0
lea rcx, [rsp + 0x68]
call fcn.14004c240
jmp case.0x14009b7cb.1027
mov edx, 0x3ed
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete cl
mov byte [rbx + 0x12c], cl
setne sil
mov edx, 0x3ef
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rdi, rax
test rax, rax
je 0x14009d809
test sil, sil
je 0x14009d7df
movzx edx, sil
jmp 0x14009d800
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rdi
jne 0x14009d7fe
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x28]
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_EnableWindow]
movzx esi, byte [rbx + 0x12c]
mov edx, 0x3f0
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rdi, rax
test rax, rax
je case.0x14009b7cb.1027
test sil, sil
jne 0x14009d845
sete r15b
mov edx, r15d
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableWindow]
jmp case.0x14009b7cb.1027
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rdi
jne 0x14009d864
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x28]
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_EnableWindow]
jmp case.0x14009b7cb.1027
cmp r8d, 0x300
jne case.0x14009b7cb.1027
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xd60], xmm0
movups xmmword [rsp + 0xd70], xmm0
mov qword [rsp + 0xd80], rax
lea r9d, [rax + 0x14]
lea r8, [rsp + 0xd60]
mov edx, 0x3f0
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
mov rcx, qword [rbx + 0x10]
lea rax, [rsp + 0xd60]
mov r12, 0xffffffffffffffff
nop dword [rax]
inc r12
cmp word [rax + r12*2], r15w
jne 0x14009d8d0
test r12, r12
je 0x14009d910
mov edx, 0x3ed
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne case.0x14009b7cb.1027
mov edx, 0x3ed
mov r9d, 0x3ee
mov r8d, r9d
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_CheckRadioButton]
jmp case.0x14009b7cb.1027
mov edx, 0x3ee
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne case.0x14009b7cb.1027
mov edx, 0x3ed
mov r9d, edx
lea r8d, [rdx + 1]
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_CheckRadioButton]
jmp case.0x14009b7cb.1027
mov rcx, rbx
call fcn.1400adb60
mov edx, 0x3ea
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
sete sil
mov edx, 0x404
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rdi, rax
test rax, rax
je 0x14009d9a8
test sil, sil
je 0x14009d97e
movzx edx, sil
jmp 0x14009d99f
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rdi
jne 0x14009d99d
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x28]
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x3ea
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
setne sil
mov edx, 0x3eb
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rdi, rax
test rax, rax
je case.0x14009b7cb.1027
test sil, sil
je 0x14009d845
movzx edx, sil
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableWindow]
jmp case.0x14009b7cb.1027
mov edx, 0x416
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete al
mov byte [rbx + 0x12b], al
jmp case.0x14009b7cb.1027
mov r8d, esi
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.14004be90
nop
lea rcx, [rbx + 0x88]
mov rdx, qword [rsp + 0x60]
call fcn.14004c9f0
mov r8d, 0x3ff
lea rdx, [rsp + 0x68]
mov rcx, rbx
call fcn.14004be90
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140058c90
lea rcx, [rsp + 0x68]
call fcn.14004c240
lea rcx, [rbx + 0xa8]
mov rdx, qword [rsp + 0x60]
call fcn.14004c9f0
mov r8d, 0x413
lea rdx, [rsp + 0x88]
mov rcx, rbx
call fcn.14004be90
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140058c90
lea rcx, [rsp + 0x88]
call fcn.14004c240
lea rcx, [rbx + 0x108]
mov rdx, qword [rsp + 0x60]
call fcn.14004c9f0
mov r8d, 0x410
lea rdx, [rsp + 0x80]
mov rcx, rbx
call fcn.14004be90
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140058c90
lea rcx, [rsp + 0x80]
call fcn.14004c240
lea rcx, [rbx + 0xe0]
mov rdx, qword [rsp + 0x60]
call fcn.14004c9f0
mov edx, 0x3e9
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete al
mov byte [rbx + 0x129], al
mov rdx, qword [rbx + 0x10]
lea rcx, [rsp + 0x960]
call fcn.140071cf0
nop
mov r9, qword [rbx + 0x10]
mov r8d, 0x83
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x960]
call fcn.14004b510
cmp rax, 1
jne 0x14009ddd1
lea rcx, [rsp + 0x810]
call fcn.140066730
nop
lea rcx, [rsp + 0x260]
call fcn.140066630
nop
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x960]
call fcn.14006ac30
mov rdx, rax
lea rcx, [rsp + 0x260]
call fcn.14004c2b0
lea rcx, [rsp + 0x120]
call fcn.14004b2f0
cmp byte [rsp + 0x9d0], 0
je 0x14009dbb5
lea rdx, [rbx + 0x68]
lea rcx, [rsp + 0x1c0]
call fcn.14004aff0
nop
mov edi, 0x100
jmp 0x14009dbce
lea rdx, [0x140162d5c]
lea rcx, [rsp + 0x120]
call fcn.14004c350
mov edi, 0x200
mov rdx, rax
lea rcx, [rsp + 0x2c0]
call fcn.14004c2b0
bt edi, 9
jae 0x14009dbf6
btr edi, 9
lea rcx, [rsp + 0x120]
call fcn.14004b2f0
nop
bt edi, 8
jae 0x14009dc09
lea rcx, [rsp + 0x1c0]
call fcn.14004b2f0
lea rdx, [rbx + 0x88]
lea rcx, [rsp + 0x280]
call fcn.14004ca10
lea rdx, [rbx + 0xa8]
lea rcx, [rsp + 0x2a0]
call fcn.14004ca10
movzx eax, byte [rbx + 0x129]
mov byte [rsp + 0x2e0], al
mov edx, 0x412
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete byte [rsp + 0x2e1]
mov edx, 0x41b
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete byte [rsp + 0x2e2]
mov edx, 0x405
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete byte [rsp + 0x2e3]
mov edx, 0x426
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete byte [rsp + 0x2e4]
mov edx, 0x41d
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete byte [rsp + 0x2e6]
mov edx, 0x3f1
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete byte [rsp + 0x2e8]
mov edx, 0x3f3
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete byte [rsp + 0x2e9]
mov edx, 0x444
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete byte [rsp + 0x2ea]
mov edx, 0x3f2
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete byte [rsp + 0x2eb]
mov edx, 0x41a
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete byte [rsp + 0x2ec]
lea rdx, [rbx + 0x108]
lea rcx, [rsp + 0x2f0]
call fcn.14004ca10
lea rdx, [rbx + 0xe0]
lea rcx, [rsp + 0x310]
call fcn.14004ca10
mov edx, 0x416
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
sete byte [rsp + 0x330]
lea rcx, [rsp + 0x810]
call fcn.140066a00
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x810]
call fcn.140066a80
lea rcx, [rsp + 0x810]
call fcn.140066a40
nop
lea rcx, [rsp + 0x260]
call fcn.1400666e0
nop
lea rcx, [rsp + 0x810]
call fcn.140066790
nop
lea rcx, [rsp + 0x960]
call fcn.140071e00
nop
lea rcx, [rsp + 0x60]
call fcn.14004c240
jmp case.0x14009b7cb.1027
mov rcx, qword [rbx + 0x58]
test rcx, rcx
jne 0x14009de1c
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.1400b3520
mov rdx, rax
lea rcx, [rbx + 0x58]
call fcn.1400b34e0
lea rcx, [rsp + 0x68]
call fcn.140057d80
jmp 0x14009de21
call fcn.14006be40
mov r9, qword [rbx + 0x10]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbx + 0x58]
call fcn.14004b6c0
jmp case.0x14009b7cb.1027
mov rcx, rbx
call fcn.14009fea0
xorps xmm0, xmm0
movups xmmword [rsp + 0xd68], xmm0
mov qword [rsp + 0xd78], r15
mov qword [rsp + 0xd80], r15
mov r8d, 0xe
lea rdx, str.FillResultList
lea rcx, [rsp + 0xd68]
call fcn.14004c390
lea rcx, [rsp + 0xd60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
nop
mov edx, 0x7f8a
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
lea rcx, [rsp + 0x78]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, dword [rsp + 0x7c]
mov ecx, dword [rsp + 0x78]
call qword [sym.imp.USER32.dll_SetCursorPos]
mov edx, 0x423
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov edi, eax
mov edx, 0x3f6
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rsi, rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xb]
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
cmp edi, 1
jne 0x14009df18
mov rcx, qword [rbx + 0x188]
sub rcx, qword [rbx + 0x180]
movabs rax, 0x4924924924924925
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
jmp 0x14009df2a
mov rdx, qword [rbx + 0x1a0]
sub rdx, qword [rbx + 0x198]
sar rdx, 3
mov r9d, 3
mov r8, rdx
mov edx, 0x102f
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
call fcn.1400ae580
xor r9d, r9d
mov r13d, 1
mov r8d, r13d
lea edx, [r9 + 0xb]
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
lea rcx, [rsp + 0x78]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, dword [rsp + 0x7c]
mov ecx, dword [rsp + 0x78]
call qword [sym.imp.USER32.dll_SetCursorPos]
mov r9d, 0x485
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.USER32.dll_RedrawWindow]
nop
lea rcx, [rsp + 0xd60]
call fcn.140091780
jmp 0x14009f8da
mov rdx, qword [rbx + 0x10]
lea rcx, [rsp + 0xa30]
call fcn.1400e0be0
nop
mov r9, qword [rbx + 0x10]
mov r8d, 0x8a
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0xa30]
call fcn.14004b510
cmp byte [0x14018c2e4], 0
je 0x14009e006
xor r9d, r9d
lea r8, str.backupinfolder
lea rdx, str.settings
call fcn.140071220
jmp 0x14009e024
lea rcx, [rbx + 0x10a0]
call fcn.1400715a0
lea rcx, [rbx + 0x10a0]
call fcn.140071400
cmp dword [rax], 0
setne al
mov ecx, 0x148
mov byte [rbx + rcx], al
call fcn.1400e81c0
call fcn.1400e81c0
mov edi, dword [rax + 0x108]
call fcn.1400e81c0
lea r8, [rax + 0xc8]
mov r9d, edi
mov rdx, qword [rbx + 0x10]
call fcn.1400e8850
call fcn.14005b9c0
mov rdx, qword [rbx + 0x10]
mov rcx, rax
call fcn.14005acd0
nop
lea rcx, [rsp + 0xa30]
call fcn.1400e0f20
jmp case.0x14009b7cb.1027
mov r13d, 0x3ff
cmp r14d, 0x425
cmove r13d, esi
mov dword [rsp + 0x58], r13d
mov edx, r13d
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
lea esi, [rax + 1]
movsxd rcx, esi
mov eax, 2
mul rcx
mov rdi, rax
mov r12, 0xffffffffffffffff
cmovo rdi, r12
mov rcx, rdi
call fcn.140114b30
mov r14, rax
mov qword [rsp + 0x90], rax
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.140118720
mov qword [rsp + 0x88], r14
mov r9d, esi
mov r8, r14
mov edx, r13d
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x1b0], r15
mov qword [rsp + 0x1b8], r15
mov r8, r12
nop word [rax + rax]
inc r8
cmp word [r14 + r8*2], 0
jne 0x14009e120
mov rdx, r14
lea rcx, [rsp + 0x1a0]
call fcn.14004c390
nop
mov esi, dword [rsp + 0x70]
cmp esi, 0x425
jne 0x14009e164
lea rdx, [0x140168040]
lea rcx, [rsp + 0x100]
call fcn.140075e40
mov rcx, rax
lea edi, [rsi - 0x25]
jmp 0x14009e180
lea rdx, [0x140168078]
lea rcx, [rsp + 0xf0]
call fcn.140075e40
mov rcx, rax
mov edi, 0x800
mov dword [rsp + 0x50], edi
mov rax, qword [rcx + 8]
test rax, rax
je 0x14009e195
lock inc dword [rax + 8]
mov edi, dword [rsp + 0x50]
mov rax, qword [rcx]
mov qword [rsp + 0xb8], rax
mov rax, qword [rcx + 8]
mov qword [rsp + 0xc0], rax
bt edi, 0xb
jae 0x14009e1c8
btr edi, 0xb
mov dword [rsp + 0x50], edi
lea rcx, [rsp + 0xf0]
call fcn.140075df0
nop
bt edi, 0xa
jae 0x14009e1db
lea rcx, [rsp + 0x100]
call fcn.140075df0
mov dword [rsp + 0x20], 0x2000000
lea r9, str._r_n
lea r8, [rsp + 0xb8]
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x920]
call fcn.1400b3570
mov rdi, rax
lea rax, [rsp + 0x1a0]
cmp rax, rdi
je 0x14009e2a7
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 8
jb 0x14009e263
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009e25e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009f936
call fcn.14011460c
mov qword [rsp + 0x1b0], r15
mov qword [rsp + 0x1b8], 7
mov word [rsp + 0x1a0], r15w
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x1a0], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x1b0], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rsp + 0x920]
call fcn.14004b2f0
nop
mov rcx, qword [rsp + 0xc0]
test rcx, rcx
je 0x14009e2fa
mov eax, r12d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14009e2fa
mov rdi, qword [rsp + 0xc0]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], r12d
cmp r12d, 1
jne 0x14009e2fa
mov rcx, qword [rsp + 0xc0]
mov rax, qword [rcx]
call qword [rax + 8]
nop
jmp 0x14009e318
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x528], r15
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x530], xmm0
mov word [rsp + 0x550], 0
mov qword [rsp + 0x558], r15
mov qword [rsp + 0x560], r15
movaps xmmword [rsp + 0x540], xmm0
lea rdi, vtable.CMultiLineEditDlg.0
mov qword [rsp + 0x520], rdi
mov qword [rsp + 0x568], rax
movups xmmword [rsp + 0x570], xmm0
mov qword [rsp + 0x580], r15
mov qword [rsp + 0x588], 7
mov word [rsp + 0x570], r15w
mov dword [rsp + 0x590], r15d
mov qword [rsp + 0x598], r15
movdqa xmmword [rsp + 0x5a0], xmm0
mov qword [rsp + 0x5b0], r15
mov qword [rsp + 0x5e0], r15
mov byte [rsp + 0x5e8], 1
movups xmmword [rsp + 0x5b8], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x5c8], xmm1
mov qword [rsp + 0x5d8], r15
lea rdx, [rsp + 0x1a0]
cmp qword [rsp + 0x1b8], 8
cmovae rdx, qword [rsp + 0x1a0]
mov r8, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x570]
call fcn.14004ca40
mov rcx, qword [rbx + 8]
mov byte [rsp + 0x550], 0
mov qword [rsp + 0x528], rcx
lea rax, [rsp + 0x520]
mov qword [rsp + 0x20], rax
lea r9, [0x14004b980]
mov r8, qword [rbx + 0x10]
mov edx, 0x89
call qword [sym.imp.USER32.dll_DialogBoxParamW]
cmp rax, 1
jne 0x14009e52c
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x520]
call fcn.14006ac30
nop
lea rdx, str._r_n
lea rcx, [rsp + 0x180]
call fcn.140075e40
nop
mov dword [rsp + 0x20], 0x2000000
lea r8, [rsp + 0x180]
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x120]
cmp esi, 0x425
jne 0x14009e4ab
lea r9, str.__:_n_r_n_n_r_
call fcn.1400b3570
jmp 0x14009e4b7
lea r9, [0x140168078]
call fcn.1400b3570
mov rdx, rax
lea rcx, [rsp + 0x160]
call fcn.14004c2b0
lea rcx, [rsp + 0x120]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x180]
call fcn.140075df0
nop
jmp 0x14009e501
lea rcx, [rsp + 0x160]
call fcn.14004b370
mov r8, rax
mov edx, r13d
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
nop
lea rcx, [rsp + 0x160]
call fcn.14004b2f0
mov edx, r13d
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetFocus]
nop
mov qword [rsp + 0x520], rdi
lea rcx, [rsp + 0x598]
call fcn.140050230
lea rcx, [rsp + 0x570]
call fcn.14004b2f0
mov rcx, qword [rsp + 0x538]
test rcx, rcx
je 0x14009e580
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [rsp + 0x538], r15
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 8
jb 0x14009e5c8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009e5c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009f93c
call fcn.14011460c
mov qword [rsp + 0x1b0], r15
mov qword [rsp + 0x1b8], 7
mov word [rsp + 0x1a0], r15w
mov rcx, r14
call fcn.14011460c
jmp case.0x14009b7cb.1027
lea rcx, [rbx + 0x4b0]
mov edx, 0x121
call fcn.14004a790
mov edx, 0x3f4
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetFocus]
mov qword [rsp + 0x20], r15
mov edx, 0x3f4
mov r9d, 0x28
mov r8d, 0x100
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
jmp case.0x14009b7cb.1027
lea rcx, [rbx + 0x318]
mov edx, 0x121
call fcn.14004a790
mov edx, 0x413
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetFocus]
mov qword [rsp + 0x20], r15
mov edx, 0x413
mov r9d, 0x28
mov r8d, 0x100
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
jmp case.0x14009b7cb.1027
lea rcx, [rbx + 0x290]
mov edx, 0x121
call fcn.14004a790
mov edx, 0x410
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetFocus]
mov qword [rsp + 0x20], r15
mov edx, 0x410
mov r9d, 0x28
mov r8d, 0x100
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
jmp case.0x14009b7cb.1027
cmp r8d, 0x300
jne case.0x14009b7cb.1027
lea rcx, [rbx + 0x290]
call fcn.14004a7e0
bt eax, 8
jae case.0x14009b7cb.1027
mov edx, 0x21
lea rcx, [rbx + 0x290]
call fcn.14004a790
jmp case.0x14009b7cb.1027
cmp r8d, 0x300
jne case.0x14009b7cb.1027
lea rcx, [rbx + 0x318]
call fcn.14004a7e0
bt eax, 8
jae case.0x14009b7cb.1027
mov edx, 0x21
lea rcx, [rbx + 0x318]
call fcn.14004a790
jmp case.0x14009b7cb.1027
cmp r8d, 0x300
jne case.0x14009b7cb.1027
lea rcx, [rbx + 0x428]
call fcn.14004a7e0
bt eax, 8
jae case.0x14009b7cb.1027
mov edx, 0x21
lea rcx, [rbx + 0x428]
call fcn.14004a790
jmp case.0x14009b7cb.1027
lea rcx, [rsp + 0x1e0]
call fcn.14005f560
nop
mov qword [rsp + 0x60], r15
lea rcx, [rsp + 0x60]
call fcn.1400afe20
mov ecx, eax
call fcn.1400aeaa0
test al, al
jne 0x14009f87b
lea rcx, [rsp + 0x60]
call fcn.1400afdb0
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x50]
lea rdx, [rsp + 0x98]
mov rcx, rax
call rdi
mov ecx, eax
call fcn.1400aeaa0
test al, al
jne 0x14009f87b
lea rcx, [rsp + 0x60]
call fcn.1400afdb0
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x48]
mov edx, dword [rsp + 0x98]
or edx, 0x42
mov rcx, rax
call rdi
mov ecx, eax
call fcn.1400aeaa0
test al, al
jne 0x14009f87b
lea rcx, [rsp + 0x60]
call fcn.1400afdb0
mov r14, rax
mov rcx, qword [rax]
mov rsi, qword [rcx + 0x88]
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0xa4
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x1c0]
call fcn.14006add0
nop
mov r8, rax
lea rdx, [rsp + 0x120]
mov rcx, rdi
call fcn.14005ac80
nop
mov rcx, rax
call fcn.14004b370
mov rdx, rax
mov rcx, r14
call rsi
mov edi, eax
lea rcx, [rsp + 0x120]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x1c0]
call fcn.14004b2f0
mov ecx, edi
call fcn.1400aeaa0
test al, al
jne 0x14009f87b
lea rax, str.Text_files
mov qword [rsp + 0x220], rax
lea rax, str..txt__.lst
mov qword [rsp + 0x228], rax
lea rax, str.All_types
mov qword [rsp + 0x230], rax
lea rax, [0x1401631b8]
mov qword [rsp + 0x238], rax
lea rcx, [rsp + 0x60]
call fcn.1400afdb0
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x20]
lea r8, [rsp + 0x220]
mov edx, 2
mov rcx, rax
call rdi
mov ecx, eax
call fcn.1400aeaa0
test al, al
jne 0x14009f87b
lea rcx, [rsp + 0x60]
call fcn.1400afdb0
mov rcx, qword [rax]
mov rdi, qword [rcx + 0xb0]
lea rdx, [0x140165720]
mov rcx, rax
call rdi
mov ecx, eax
call fcn.1400aeaa0
test al, al
jne 0x14009f87b
lea rcx, [rsp + 0x60]
call fcn.1400afdb0
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x78]
lea rdx, str.gw_search_results.txt
mov rcx, rax
call rdi
mov ecx, eax
call fcn.1400aeaa0
test al, al
jne 0x14009f87b
mov qword [rsp + 0x78], r15
lea rcx, [rsp + 0x78]
call fcn.1400afdd0
mov r8, rax
lea rcx, [rsp + 0x60]
call fcn.1400b35f0
test eax, eax
js 0x14009ed7a
cmp byte [0x14018c2e4], 0
je 0x14009e9a7
xor r9d, r9d
lea r8, str.paths
lea rdx, str.export
call fcn.140071220
movzx edi, al
jmp 0x14009e9fc
lea rdx, str.SoftwaregrepWinNP3export_paths
lea rcx, [rsp + 0x140]
call fcn.14004c350
nop
mov dword [rsp + 0x50], 0x1000
xor r8d, r8d
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x810]
call fcn.1400713b0
nop
mov r12d, 0x3000
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x50], r12d
mov rcx, rax
call fcn.140071400
cmp dword [rax], 0
setne dil
mov dword [rsp + 0x70], edi
bt r12d, 0xd
jae 0x14009ea24
btr r12d, 0xd
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x50], r12d
lea rcx, [rsp + 0x810]
call fcn.14005f9e0
nop
bt r12d, 0xc
jae 0x14009ea47
btr r12d, 0xc
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x50], r12d
lea rcx, [rsp + 0x140]
call fcn.14004b2f0
cmp byte [0x14018c2e4], 0
je 0x14009ea6c
xor r9d, r9d
lea r8, str.linenumbers
lea rdx, str.export
call fcn.140071220
movzx r14d, al
jmp 0x14009eac2
lea rdx, str.SoftwaregrepWinNP3export_linenumbers
lea rcx, [rsp + 0x140]
call fcn.14004c350
nop
bts r12d, 0xe
mov dword [rsp + 0x50], r12d
xor r8d, r8d
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x810]
call fcn.1400713b0
nop
bts r12d, 0xf
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x50], r12d
mov rcx, rax
call fcn.140071400
cmp dword [rax], 0
setne r14b
mov byte [rsp + 0x55], r14b
bt r12d, 0xf
jae 0x14009eaeb
btr r12d, 0xf
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x50], r12d
lea rcx, [rsp + 0x810]
call fcn.14005f9e0
nop
bt r12d, 0xe
jae 0x14009eb0e
btr r12d, 0xe
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x50], r12d
lea rcx, [rsp + 0x140]
call fcn.14004b2f0
cmp byte [0x14018c2e4], 0
je 0x14009eb32
xor r9d, r9d
lea r8, str.linecontent
lea rdx, str.export
call fcn.140071220
movzx esi, al
jmp 0x14009eb88
lea rdx, str.SoftwaregrepWinNP3export_linecontent
lea rcx, [rsp + 0x140]
call fcn.14004c350
nop
bts r12d, 0x10
mov dword [rsp + 0x50], r12d
xor r8d, r8d
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x810]
call fcn.1400713b0
nop
bts r12d, 0x11
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x50], r12d
mov rcx, rax
call fcn.140071400
cmp dword [rax], 0
setne sil
mov byte [rsp + 0x54], sil
bt r12d, 0x11
jae 0x14009ebb1
btr r12d, 0x11
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x50], r12d
lea rcx, [rsp + 0x810]
call fcn.14005f9e0
nop
bt r12d, 0x10
jae 0x14009ebd4
btr r12d, 0x10
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x50], r12d
lea rcx, [rsp + 0x140]
call fcn.14004b2f0
test dil, dil
jne 0x14009ebf5
test r14b, r14b
jne 0x14009ebf5
movzx edi, dil
mov r13d, 1
test sil, sil
cmove edi, r13d
mov dword [rsp + 0x70], edi
jmp 0x14009ebfb
mov r13d, 1
lea rcx, [rsp + 0x78]
call fcn.1400afdb0
mov r14, rax
mov rcx, qword [rax]
mov rsi, qword [rcx + 0x40]
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0xa5
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x1c0]
call fcn.14006add0
nop
mov r8, rax
lea rdx, [rsp + 0x120]
mov rcx, rdi
call fcn.14005ac80
nop
mov rcx, rax
call fcn.14004b370
movzx r9d, byte [rsp + 0x70]
mov r8, rax
mov edx, 0x65
mov rcx, r14
call rsi
nop
lea rcx, [rsp + 0x120]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x1c0]
call fcn.14004b2f0
lea rcx, [rsp + 0x78]
call fcn.1400afdb0
mov r14, rax
mov rcx, qword [rax]
mov rsi, qword [rcx + 0x40]
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0xa6
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x1c0]
call fcn.14006add0
nop
mov r8, rax
lea rdx, [rsp + 0x120]
mov rcx, rdi
call fcn.14005ac80
nop
mov rcx, rax
call fcn.14004b370
movzx r9d, byte [rsp + 0x55]
mov r8, rax
mov edx, 0x66
mov rcx, r14
call rsi
nop
lea rcx, [rsp + 0x120]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x1c0]
call fcn.14004b2f0
lea rcx, [rsp + 0x78]
call fcn.1400afdb0
mov r14, rax
mov rcx, qword [rax]
mov rsi, qword [rcx + 0x40]
call fcn.14005b9c0
mov rdi, rax
mov r8d, 0xa7
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x1c0]
call fcn.14006add0
nop
mov r8, rax
lea rdx, [rsp + 0x120]
mov rcx, rdi
call fcn.14005ac80
nop
mov rcx, rax
call fcn.14004b370
movzx r9d, byte [rsp + 0x54]
mov r8, rax
mov edx, 0x67
mov rcx, r14
call rsi
nop
lea rcx, [rsp + 0x120]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x1c0]
call fcn.14004b2f0
jmp 0x14009ed80
mov r13d, 1
lea rcx, [rsp + 0x60]
call fcn.1400afdb0
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x18]
mov rdx, qword [rbx + 0x10]
mov rcx, rax
call rdi
cmp eax, 0x800704c7
je 0x14009f856
mov ecx, eax
call fcn.1400aeaa0
test al, al
jne 0x14009f856
mov qword [rsp + 0x88], r15
lea rcx, [rsp + 0x60]
call fcn.1400afdb0
mov rsi, rax
mov rcx, qword [rax]
mov rdi, qword [rcx + 0xa0]
lea rcx, [rsp + 0x88]
call fcn.1400afdd0
mov rdx, rax
mov rcx, rsi
call rdi
mov ecx, eax
call fcn.1400aeaa0
test al, al
jne 0x14009f848
mov qword [rsp + 0x68], r15
lea rcx, [rsp + 0x88]
call fcn.1400afdb0
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x28]
lea r8, [rsp + 0x68]
mov edx, 0x80058000
mov rcx, rax
call rdi
mov ecx, eax
call fcn.1400aeaa0
test al, al
jne 0x14009f848
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x240]
call fcn.14004c350
nop
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov byte [rsp + 0x56], 1
mov byte [rsp + 0x54], 0
xor dil, dil
mov byte [rsp + 0x55], dil
mov qword [rsp + 0x80], r15
lea rcx, [rsp + 0x80]
call fcn.1400afdd0
mov r8, rax
lea rcx, [rsp + 0x60]
call fcn.1400b35f0
test eax, eax
js 0x14009ef45
mov dword [rsp + 0x70], r15d
lea rcx, [rsp + 0x80]
call fcn.1400afdb0
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x88]
lea r8, [rsp + 0x70]
mov edx, 0x65
mov rcx, rax
call rdi
cmp dword [rsp + 0x70], 0
setne sil
mov byte [rsp + 0x56], sil
lea rcx, [rsp + 0x80]
call fcn.1400afdb0
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x88]
lea r8, [rsp + 0x70]
mov edx, 0x66
mov rcx, rax
call rdi
cmp dword [rsp + 0x70], 0
setne r14b
mov byte [rsp + 0x54], r14b
lea rcx, [rsp + 0x80]
call fcn.1400afdb0
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x88]
lea r8, [rsp + 0x70]
mov edx, 0x67
mov rcx, rax
call rdi
cmp dword [rsp + 0x70], 0
setne dil
mov byte [rsp + 0x55], dil
test r14b, r14b
jne 0x14009eff5
test dil, dil
jne 0x14009eff5
test sil, sil
jne 0x14009ef45
mov byte [rsp + 0x56], 1
mov dil, 1
cmp qword [rsp + 0x250], 0
je 0x14009f82c
lea rcx, [rsp + 0xa30]
call fcn.1400afcb0
nop
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0xa30]
call fcn.1400afa40
cmp qword [rsp + 0xab8], 0
je 0x14009f81e
test dil, dil
je 0x14009effd
mov rdi, qword [rbx + 0x180]
mov rbx, qword [rbx + 0x188]
cmp rdi, rbx
je 0x14009f287
nop word [rax + rax]
mov rdx, rdi
lea rcx, [rsp + 0x120]
call fcn.140065bf0
nop
mov rdx, rax
lea rcx, [rsp + 0xa30]
call fcn.1400b3620
mov rcx, rax
call fcn.1400b3640
nop
lea rcx, [rsp + 0x120]
call fcn.140058590
add rdi, 0x70
cmp rdi, rbx
jne 0x14009efb0
jmp 0x14009f287
xor dil, dil
jmp 0x14009ef48
mov rsi, qword [rbx + 0x180]
mov rax, qword [rbx + 0x188]
mov qword [rsp + 0x70], rax
cmp rsi, rax
je 0x14009f287
movzx r13d, byte [rsp + 0x55]
movzx r12d, byte [rsp + 0x54]
nop word [rax + rax]
mov r14, r15
mov rax, qword [rsi + 0x30]
sub rax, qword [rsi + 0x28]
sar rax, 2
test rax, rax
je 0x14009f26d
mov rbx, r15
mov qword [rsp + 0x90], rbx
movzx r15d, byte [rsp + 0x56]
nop dword [rax]
xor dil, dil
test r15b, r15b
je 0x14009f138
mov rdx, rsi
lea rcx, [rsp + 0x140]
call fcn.140065bf0
nop
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x140]
call fcn.1400630f0
mov rbx, qword [rax]
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x140]
call fcn.1400630d0
mov rdi, qword [rax]
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x140]
call fcn.1400630f0
mov r9, rbx
mov r8, rdi
mov rdx, qword [rax]
lea rcx, [rsp + 0x180]
call fcn.1400b36e0
lea rdx, str.file:__
lea rcx, [rsp + 0x120]
call fcn.140054b10
nop
mov rdx, rax
lea rcx, [rsp + 0xa30]
call fcn.1400b3620
nop
lea rcx, [rsp + 0x120]
call fcn.140058590
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0xa30]
call fcn.1400b3620
mov dil, 1
lea rcx, [rsp + 0x140]
call fcn.140058590
mov rbx, qword [rsp + 0x90]
test r12b, r12b
je 0x14009f18f
test dil, dil
je 0x14009f151
mov dl, 0x2a
lea rcx, [rsp + 0xa30]
call fcn.1400b3820
mov rax, qword [rsi + 0x28]
mov r8d, dword [rax + r14*4]
lea rdx, [0x140168298]
lea rcx, [rsp + 0x120]
call fcn.140062d20
nop
mov rdx, rax
lea rcx, [rsp + 0xa30]
call fcn.1400b3620
nop
lea rcx, [rsp + 0x120]
call fcn.140058590
mov dil, 1
test r13b, r13b
je 0x14009f239
test dil, dil
je 0x14009f1ac
mov dl, 0x2a
lea rcx, [rsp + 0xa30]
call fcn.1400b3820
mov rdx, qword [rsi + 0x40]
add rdx, rbx
lea rcx, [rsp + 0x140]
call fcn.14004aff0
nop
lea rdx, [0x14016800c]
lea rcx, [rsp + 0x180]
call fcn.14004c350
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x140]
call fcn.140091370
lea rcx, [rsp + 0x180]
call fcn.14004b2f0
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x120]
call fcn.140065bf0
nop
mov rdx, rax
lea rcx, [rsp + 0xa30]
call fcn.1400b3620
nop
lea rcx, [rsp + 0x120]
call fcn.140058590
nop
lea rcx, [rsp + 0x140]
call fcn.14004b2f0
lea rcx, [rsp + 0xa30]
call fcn.1400b3640
inc r14
add rbx, 0x20
mov qword [rsp + 0x90], rbx
mov rax, qword [rsi + 0x30]
sub rax, qword [rsi + 0x28]
sar rax, 2
cmp r14, rax
jb 0x14009f060
xor r15d, r15d
add rsi, 0x70
cmp rsi, qword [rsp + 0x70]
jne 0x14009f030
mov r12d, dword [rsp + 0x58]
mov r13d, 1
lea rcx, [rsp + 0xa30]
call fcn.1400af9a0
cmp byte [0x14018c2e4], 0
je 0x14009f2ed
movzx r9d, byte [rsp + 0x56]
lea r8, str.paths
lea rdx, str.export
call fcn.1400b29b0
movzx r9d, byte [rsp + 0x54]
lea r8, str.linenumbers
lea rdx, str.export
call fcn.1400b29b0
movzx r9d, byte [rsp + 0x55]
lea r8, str.linecontent
lea rdx, str.export
call fcn.1400b29b0
jmp 0x14009f3fe
lea rdx, str.SoftwaregrepWinNP3export_paths
lea rcx, [rsp + 0x140]
call fcn.14004c350
nop
xor r8d, r8d
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x810]
call fcn.1400713b0
nop
lea rcx, [rsp + 0x140]
call fcn.14004b2f0
lea rdx, str.SoftwaregrepWinNP3export_linenumbers
lea rcx, [rsp + 0x180]
call fcn.14004c350
nop
xor r8d, r8d
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x960]
call fcn.1400713b0
nop
lea rcx, [rsp + 0x180]
call fcn.14004b2f0
lea rdx, str.SoftwaregrepWinNP3export_linecontent
lea rcx, [rsp + 0x1c0]
call fcn.14004c350
nop
xor r8d, r8d
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x260]
call fcn.1400713b0
nop
lea rcx, [rsp + 0x1c0]
call fcn.14004b2f0
movzx edx, byte [rsp + 0x56]
lea rcx, [rsp + 0x810]
call fcn.1400b1140
movzx edx, byte [rsp + 0x54]
lea rcx, [rsp + 0x960]
call fcn.1400b1140
movzx edx, byte [rsp + 0x55]
lea rcx, [rsp + 0x260]
call fcn.1400b1140
nop
lea rcx, [rsp + 0x260]
call fcn.14005f9e0
nop
lea rcx, [rsp + 0x960]
call fcn.14005f9e0
nop
lea rcx, [rsp + 0x810]
call fcn.14005f9e0
cmp byte [0x14018c2e4], 0
je 0x14009f443
lea r9, [0x140162d5c]
lea r8, str.editorcmd
lea rdx, str.global
lea rcx, [0x14018c350]
call fcn.140060ab0
mov rdx, rax
lea rcx, [rsp + 0xd60]
call fcn.14004c350
nop
bts r12d, 0x12
jmp 0x14009f4c6
lea rdx, [0x140162d5c]
lea rcx, [rsp + 0x140]
call fcn.14004c350
nop
bts r12d, 0x13
mov dword [rsp + 0x50], r12d
lea rdx, str.SoftwaregrepWinNP3editorcmd
lea rcx, [rsp + 0x1c0]
call fcn.14004c350
nop
bts r12d, 0x14
mov dword [rsp + 0x50], r12d
lea r8, [rsp + 0x140]
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x810]
call fcn.1400611f0
nop
bts r12d, 0x15
mov dword [rsp + 0x50], r12d
mov rcx, rax
call fcn.140061260
mov rdx, rax
lea rcx, [rsp + 0x940]
call fcn.14004aff0
bts r12d, 0x16
mov rdx, rax
lea rcx, [rsp + 0x160]
call fcn.14004b180
nop
bt r12d, 0x16
jae 0x14009f4f1
btr r12d, 0x16
lea rcx, [rsp + 0x940]
call fcn.14004b2f0
nop
bt r12d, 0x15
jae 0x14009f50b
btr r12d, 0x15
lea rcx, [rsp + 0x810]
call fcn.14005f9a0
nop
bt r12d, 0x14
jae 0x14009f525
btr r12d, 0x14
lea rcx, [rsp + 0x1c0]
call fcn.14004b2f0
nop
bt r12d, 0x13
jae 0x14009f53f
btr r12d, 0x13
lea rcx, [rsp + 0x140]
call fcn.14004b2f0
nop
bt r12d, 0x12
jae 0x14009f553
lea rcx, [rsp + 0xd60]
call fcn.14004b2f0
cmp qword [rsp + 0x170], 0
je 0x14009f78f
lea rdx, [0x1401682b4]
lea rcx, [rsp + 0x120]
call fcn.14004c350
nop
lea rdx, str._mode_
lea rcx, [rsp + 0x140]
call fcn.14004c350
nop
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x160]
call fcn.140062f00
nop
lea rcx, [rsp + 0x140]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x120]
call fcn.14004b2f0
lea rdx, [0x140162d5c]
lea rcx, [rsp + 0x140]
call fcn.14004c350
nop
lea rdx, str._pattern_
lea rcx, [rsp + 0x120]
call fcn.14004c350
nop
lea r8, [rsp + 0x140]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x160]
call fcn.140062f00
nop
lea rcx, [rsp + 0x120]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x140]
call fcn.14004b2f0
lea rdx, [0x14016562c]
lea rcx, [rsp + 0x140]
call fcn.14004c350
nop
lea rdx, str._line_
lea rcx, [rsp + 0x120]
call fcn.14004c350
nop
lea r8, [rsp + 0x140]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x160]
call fcn.140062f00
nop
lea rcx, [rsp + 0x120]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x140]
call fcn.14004b2f0
lea rcx, [rsp + 0x240]
call fcn.14004b370
mov rdx, rax
lea rcx, [rsp + 0x140]
call fcn.14004c350
nop
lea rdx, str._path_
lea rcx, [rsp + 0x120]
call fcn.14004c350
nop
lea r8, [rsp + 0x140]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x160]
call fcn.140062f00
nop
lea rcx, [rsp + 0x120]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x140]
call fcn.14004b2f0
lea rdi, [rsp + 0x260]
xor eax, eax
mov ecx, 0x68
rep stosb byte [rdi], al
mov dword [rsp + 0x260], 0x68
lea rdi, [rsp + 0x180]
mov ecx, 0x18
rep stosb byte [rdi], al
lea rcx, [rsp + 0x160]
call fcn.14004b370
mov rdx, rax
lea rax, [rsp + 0x180]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x260]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov rcx, qword [rsp + 0x188]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14009f810
xorps xmm0, xmm0
movups xmmword [rsp + 0x260], xmm0
movups xmmword [rsp + 0x270], xmm0
movups xmmword [rsp + 0x280], xmm0
movups xmmword [rsp + 0x290], xmm0
movups xmmword [rsp + 0x2a0], xmm0
movups xmmword [rsp + 0x2b0], xmm0
movups xmmword [rsp + 0x2c0], xmm0
mov dword [rsp + 0x260], 0x70
lea rax, str.open
mov qword [rsp + 0x270], rax
lea rcx, [rsp + 0x240]
call fcn.14004b370
mov qword [rsp + 0x278], rax
mov dword [rsp + 0x290], r13d
lea rcx, [rsp + 0x260]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
nop
lea rcx, [rsp + 0x160]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0xa30]
call fcn.14009fa10
nop
lea rcx, [rsp + 0x80]
call fcn.1400afe00
nop
lea rcx, [rsp + 0x240]
call fcn.14004b2f0
nop
lea rcx, [rsp + 0x88]
call fcn.1400afe00
nop
lea rcx, [rsp + 0x78]
call fcn.1400afe00
nop
lea rcx, [rsp + 0x60]
call fcn.1400afe00
nop
lea rcx, [rsp + 0x1e0]
call fcn.14005f8b0
jmp 0x14009f8da
lea rcx, [rsp + 0x60]
call fcn.1400afe00
nop
lea rcx, [rsp + 0x1e0]
call fcn.14005f8b0
jmp case.0x14009b7cb.1027
mov edx, 0x41d
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je case.0x14009b7cb.1027
mov edx, 0x41e
jmp 0x14009f8c7
mov edx, 0x41e
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je case.0x14009b7cb.1027
mov edx, 0x41d
xor r8d, r8d
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.USER32.dll_CheckDlgButton]
mov r13d, 1
mov rax, r13
mov rcx, qword [rsp + 0xd88]
xor rcx, rsp
call fcn.1401145b0
lea r11, [rsp + 0xd90]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
mov ecx, eax
call fcn.1400ecad0
nop
call fcn.14011c9a4
int3
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
nop
call fcn.14011c9a4
int3