Function at 0x14006de40
Capabilities:
Check if file exists
Check mutex on windows
Delete registry key
Enumerate gui resources

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x21320]
mov eax, 0x21420
call fcn.140115240
sub rsp, rax
mov rax, qword [0x140185220]
xor rax, rsp
mov qword [rbp + 0x21310], rax
mov rbx, r8
mov qword [rsp + 0x68], rcx
mov r15, rcx
mov qword [rsp + 0x58], rbx
lea r14, [0x140162d5c]
xor r12d, r12d
mov rcx, r14
mov dword [rsp + 0x38], r12d
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
lea r8, str.6473AA76_0EAE_4C96_8C99_AFDFEFFE42B5
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
xor sil, sil
mov qword [rbp - 0x80], rax
test rax, rax
je 0x14006dec3
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x14006dec6
mov sil, 1
lea r8, str.6473AA76_0EAE_4C96_8C99_AFDFEFFE42B6
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
xor dil, dil
mov qword [0x14018c308], rax
test rax, rax
je 0x14006def3
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x14006def6
mov dil, 1
xor ecx, ecx
mov qword [0x14018c310], r15
call qword [sym.imp.ole32.dll_OleInitialize]
mov edx, 2
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x60], 8
mov dword [rsp + 0x64], 0xd2ff
call qword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov r9d, 0x80
mov qword [0x14018c300], r12
lea rax, [0x14018c300]
mov r8d, r9d
mov edx, 0x8d
mov qword [rsp + 0x20], rax
mov rcx, r15
call qword [sym.imp.COMCTL32.dll_Ordinal_381]
lea rcx, str.Riched20.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
movdqa xmm1, xmmword [0x140169d90]
xorps xmm0, xmm0
mov qword [rsp + 0x78], rax
mov ecx, 0x60
lea rax, vtable.CCmdLineParser.0
mov qword [rbp - 0x28], r12
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x58], rax
movdqu xmmword [rbp - 0x40], xmm1
mov word [rbp - 0x50], r12w
call fcn.1401145d0
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x30], rax
test rbx, rbx
je 0x14006dfc1
mov rdx, rbx
lea rcx, [rbp - 0x58]
call fcn.14004d070
lea r8, str.register
mov qword [rsp + 0x21468], r13
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rbp - 0x30]
cmp qword [rsp + 0x30], rax
jne 0x140070fb8
lea r8, str.unregister
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rbp - 0x30]
cmp qword [rsp + 0x30], rax
jne 0x140070f52
lea r8, str.deregister
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rbp - 0x30]
cmp qword [rsp + 0x30], rax
jne 0x140070f52
xor r15d, r15d
mov qword [rsp + 0x48], r15
lea ebx, [r15 + 0x14]
test sil, sil
je 0x14006e111
lea r8, [0x140164738]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rbp - 0x30]
cmp qword [rsp + 0x30], rax
jne 0x14006e111
nop
lea rdx, [rsp + 0x48]
lea rcx, [0x14006dd80]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
je 0x14006e0ea
test dil, dil
je 0x14006e0d3
xor dil, dil
mov rax, qword [0x14018c308]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea r8, str.6473AA76_0EAE_4C96_8C99_AFDFEFFE42B6
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x14018c308], rax
test rax, rax
je 0x14006e095
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x14006e08e
lea rdx, [rsp + 0x48]
mov qword [rsp + 0x48], r15
lea rcx, [0x14006dd80]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rax, qword [rsp + 0x48]
test rax, rax
jne 0x14006e102
lea ecx, [rax + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rsp + 0x48]
dec ebx
test rax, rax
jne 0x14006e111
test ebx, ebx
jne 0x14006e070
lea rcx, [rbp + 0xc0]
call fcn.14005f210
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.14005ee00
lea rcx, [rbp + 0xc0]
call fcn.14004b2f0
lea rcx, [rbp + 0xc0]
call fcn.14005f210
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.14005f130
lea rcx, [rbp + 0xc0]
call fcn.14004b2f0
cmp qword [rbp + 0xf8], 8
lea rcx, [rbp + 0xe0]
lea rdx, str.portable
cmovae rcx, qword [rbp + 0xe0]
call fcn.140117c94
test rax, rax
jne 0x14006e1cf
lea r8, str.portable
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rbp - 0x30]
cmp qword [rsp + 0x30], rax
jne 0x14006e1cf
cmp qword [rbp + 0xf8], 8
lea rcx, [rbp + 0xe0]
lea rdx, [0x140164758]
cmovae rcx, qword [rbp + 0xe0]
call fcn.140117c94
test rax, rax
je 0x14006e1d1
mov al, 1
cmp qword [rbp + 0xb8], 8
lea rdx, [rbp + 0xa0]
mov r8, qword [rbp + 0xb0]
lea r15, [0x140186020]
cmovae rdx, qword [rbp + 0xa0]
mov rcx, r15
mov byte [0x14018c2e4], al
call fcn.14004ca40
lea rdx, str.grepwinNP3.ini
mov rcx, r15
call fcn.14004ef90
lea r8, str.inipath
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
mov r13, 0xffffffffffffffff
cmp rax, qword [rbp - 0x30]
je 0x14006e29c
cmp qword [rax + 0x50], 0
je 0x14006e29c
lea r8, str.inipath
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
jne 0x14006e267
xor edi, edi
mov edx, edi
jmp 0x14006e277
cmp qword [rax + 0x58], 8
lea rdx, [rax + 0x40]
jb 0x14006e275
mov rdx, qword [rdx]
xor edi, edi
mov r8, r13
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14006e280
mov rcx, r15
call fcn.14004ca40
mov byte [0x14018c2e4], 1
jmp 0x14006e29e
xor edi, edi
lea rcx, [rbp + 0xc0]
call fcn.14005f560
cmp qword [rbp + 0xb8], 8
lea rcx, [rbp + 0xa0]
cmovae rcx, qword [rbp + 0xa0]
call fcn.14012c738
cmp byte [0x14018c2e4], r12b
mov ebx, 1
je 0x14006e3f8
cmp qword [0x140186038], 8
mov rcx, r15
cmovae rcx, qword [0x140186020]
call qword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
je 0x14006e3ba
xor edx, edx
lea rcx, [rbp + 0x21100]
mov r8d, 0x208
call fcn.140118720
cmp qword [rbp + 0xb8], 8
lea r8, [rbp + 0xa0]
lea rax, [rbp + 0x21100]
mov edx, 0x104
cmovae r8, qword [rbp + 0xa0]
lea rcx, [rbp + 0x21100]
sub r8, rax
nop word [rax + rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x14006e362
movzx eax, word [rcx + r8]
test ax, ax
je 0x14006e362
mov word [rcx], ax
add rcx, 2
sub rdx, rbx
jne 0x14006e340
test rdx, rdx
lea rax, [rcx - 2]
mov rdx, r15
cmovne rax, rcx
cmp qword [0x140186038], 8
lea rcx, [rbp + 0x21100]
cmovae rdx, qword [0x140186020]
mov word [rax], di
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
lea rax, [rbp + 0x21100]
mov r8, r13
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14006e3a0
lea rdx, [rbp + 0x21100]
mov rcx, r15
call fcn.14004ca40
cmp qword [0x14018c350], 0
lea rcx, [0x14018c350]
movzx eax, byte [0x14018c390]
mov rdx, r15
cmove eax, ebx
mov word [0x14018c392], bx
cmp qword [0x140186038], 8
mov byte [0x14018c390], al
cmovae rdx, qword [0x140186020]
call fcn.140068520
cmp qword [rsp + 0x48], 0
lea rcx, str.searchfor
lea rbx, str.searchpath
mov esi, 0xffffffff
je 0x14006ec6b
mov r8, rcx
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x14006e47a
cmp qword [rax + 0x50], 0
je 0x14006e47a
lea r8, str.searchfor
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
jne 0x14006e463
xor esi, esi
mov edi, esi
jmp 0x14006e534
cmp qword [rax + 0x58], 8
lea rdi, [rax + 0x40]
jb 0x14006e532
mov rdi, qword [rdi]
jmp 0x14006e532
cmp byte [0x14018c2e4], r12b
je 0x14006e52f
lea rax, str.global
xor esi, esi
lea r8, [rbp]
mov qword [rbp], rax
lea rdx, [rbp + 0x60]
mov qword [rbp + 8], rsi
lea rcx, [0x14018c370]
mov dword [rbp + 0x10], esi
call fcn.140061e00
mov rbx, qword [rbp + 0x70]
cmp byte [rbx + 0x19], sil
jne 0x14006e4d3
lea r8, [rbx + 0x20]
lea rdx, [rbp]
call fcn.140061ed0
test al, al
jne 0x14006e4d3
mov rax, qword [0x14018c370]
jmp 0x14006e4dd
mov rax, qword [0x14018c370]
mov rbx, rax
cmp rbx, rax
jne 0x14006e4ee
mov rdi, r14
lea rbx, str.searchpath
jmp 0x14006e534
lea rax, str.searchfor
mov qword [rbp + 0x68], rsi
lea r8, [rbp + 0x60]
mov qword [rbp + 0x60], rax
lea rdx, [rsp + 0x30]
mov dword [rbp + 0x70], esi
lea rcx, [rbx + 0x38]
call fcn.140061350
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbx + 0x38]
lea rbx, str.searchpath
jne 0x14006e529
mov rdi, r14
jmp 0x14006e534
mov rdi, qword [rax + 0x38]
jmp 0x14006e534
mov rdi, r14
xor esi, esi
mov r8, rbx
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x14006e5e3
cmp qword [rax + 0x50], 0
je 0x14006e5e3
mov r8, rbx
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
jne 0x14006e580
mov rdx, rsi
jmp 0x14006e58e
cmp qword [rax + 0x58], 8
lea rdx, [rax + 0x40]
jb 0x14006e58e
mov rdx, qword [rdx]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x20], xmm0
mov r8, r13
movdqu xmmword [rbp + 0x30], xmm1
inc r8
cmp word [rdx + r8*2], 0
jne 0x14006e5a0
lea rcx, [rbp + 0x20]
call fcn.14004c390
lea rax, [rbp + 0x20]
mov ebx, esi
movups xmm0, xmmword [rax]
lea rcx, [rbp + 0x20]
movups xmm1, xmmword [rax + 0x10]
mov word [rbp + 0x20], si
movups xmmword [rbp + 0x40], xmm0
movdqa xmm0, xmmword [0x140169d90]
movdqu xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x50], xmm1
jmp 0x14006e7ef
cmp byte [0x14018c2e4], r12b
je 0x14006e6ca
lea rax, str.global
mov qword [rbp + 8], rsi
lea r8, [rbp]
mov qword [rbp], rax
lea rdx, [rbp + 0x60]
mov dword [rbp + 0x10], esi
lea rcx, [0x14018c370]
call fcn.140061e00
mov rbx, qword [rbp + 0x70]
cmp byte [rbx + 0x19], r12b
jne 0x14006e63a
lea r8, [rbx + 0x20]
lea rdx, [rbp]
call fcn.140061ed0
test al, al
jne 0x14006e63a
mov rax, qword [0x14018c370]
jmp 0x14006e644
mov rax, qword [0x14018c370]
mov rbx, rax
cmp rbx, rax
jne 0x14006e64e
mov rdx, r14
jmp 0x14006e684
lea rax, str.searchpath
mov qword [rbp + 0x68], rsi
lea r8, [rbp + 0x60]
mov qword [rbp + 0x60], rax
lea rdx, [rsp + 0x30]
mov dword [rbp + 0x70], esi
lea rcx, [rbx + 0x38]
call fcn.140061350
mov rax, qword [rsp + 0x30]
mov rdx, r14
cmp rax, qword [rbx + 0x38]
je 0x14006e684
mov rdx, qword [rax + 0x38]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x60], xmm0
mov r8, r13
movdqu xmmword [rbp + 0x70], xmm1
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14006e6a0
lea rcx, [rbp + 0x60]
call fcn.14004c390
lea rax, [rbp + 0x60]
mov ebx, 0xa
lea rcx, [rbp + 0x70]
lea rdx, [rbp + 0x78]
jmp 0x14006e786
cmp qword [rbp + 0xd8], 8
lea r15, [rbp + 0xc0]
mov r14, qword [rbp + 0xd0]
movabs rsi, 0x7ffffffffffffffe
cmovae r15, qword [rbp + 0xc0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
cmp r14, rsi
ja 0x140071054
cmp r14, 8
jae 0x14006e71e
movups xmm0, xmmword [r15]
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x60], 7
movups xmmword [rbp - 0x78], xmm0
jmp 0x14006e765
mov rax, r14
or rax, 7
cmp rax, rsi
ja 0x14006e739
mov ebx, 0xa
mov rsi, rax
cmp rax, rbx
cmovb rsi, rbx
lea rdx, [rsi + 1]
lea rcx, [rbp - 0x78]
call fcn.14004b1e0
lea r8, [r14*2 + 2]
mov qword [rbp - 0x78], rax
mov rdx, r15
mov qword [rbp - 0x68], r14
mov rcx, rax
mov qword [rbp - 0x60], rsi
call fcn.140118050
lea rax, [rbp - 0x78]
mov ebx, 0xc
lea rcx, [rbp - 0x68]
xor esi, esi
lea rdx, [rbp - 0x60]
lea r14, [0x140162d5c]
lea r15, [0x140186020]
movups xmm0, xmmword [rax]
and ebx, 0xfffffff7
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm1
mov qword [rcx], rsi
lea rcx, [rbp - 0x20]
mov qword [rdx], 7
mov word [rax], si
lea rax, [rbp - 0x20]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov word [rbp - 0x20], si
movups xmmword [rbp + 0x40], xmm0
movdqa xmm0, xmmword [0x140169d90]
movdqu xmmword [rbp - 0x10], xmm0
movups xmmword [rbp + 0x50], xmm1
call fcn.14004b2f0
test bl, 4
je 0x14006e7e3
and ebx, 0xfffffffb
lea rcx, [rbp - 0x78]
call fcn.14004b2f0
test bl, 2
je 0x14006e7f4
and ebx, 0xfffffffd
lea rcx, [rbp + 0x60]
call fcn.14004b2f0
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x20]
call fcn.14006d500
mov rsi, rax
lea rax, [rbp + 0x40]
cmp rax, rsi
je 0x14006e87e
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x14006e84d
mov rcx, qword [rbp + 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e848
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007105a
call fcn.14011460c
movdqa xmm0, xmmword [0x140169d90]
xor eax, eax
movdqu xmmword [rbp + 0x50], xmm0
mov word [rbp + 0x40], ax
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rsi + 0x10], rax
mov qword [rsi + 0x18], 7
mov word [rsi], ax
lea rcx, [rbp - 0x20]
call fcn.14004b2f0
xorps xmm0, xmm0
lea rdx, [0x140163810]
xorps xmm1, xmm1
lea rcx, [rbp - 0x78]
mov esi, 1
mov r8d, esi
movups xmmword [rbp - 0x78], xmm0
movdqu xmmword [rbp - 0x68], xmm1
call fcn.14004c390
xorps xmm0, xmm0
lea rdx, [0x1401647a4]
xorps xmm1, xmm1
lea rcx, [rbp - 0x20]
mov r8d, esi
movups xmmword [rbp - 0x20], xmm0
movdqu xmmword [rbp - 0x10], xmm1
call fcn.14004c390
lea r8, [rbp - 0x78]
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x40]
call fcn.140062f00
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x14006e921
mov rcx, qword [rbp - 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e91c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071060
call fcn.14011460c
lea rcx, [rbp - 0x78]
call fcn.14004b2f0
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x20]
call fcn.14006d500
mov rsi, rax
lea rax, [rbp + 0x40]
cmp rax, rsi
je 0x14006e9b4
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x14006e983
mov rcx, qword [rbp + 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e97e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071066
call fcn.14011460c
movdqa xmm0, xmmword [0x140169d90]
xor eax, eax
movdqu xmmword [rbp + 0x50], xmm0
mov word [rbp + 0x40], ax
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rsi + 0x10], rax
mov qword [rsi + 0x18], 7
mov word [rsi], ax
lea rcx, [rbp - 0x20]
call fcn.14004b2f0
cmp byte [0x14018c2e4], r12b
je 0x14006e9ed
mov r9b, 1
lea r8, [0x1401647a8]
lea rdx, str.global
call fcn.140071220
movzx esi, al
test bl, 0x20
je 0x14006eac3
jmp 0x14006eaab
xorps xmm0, xmm0
lea rdx, str.SoftwaregrepWinNP3onlyone
xorps xmm1, xmm1
lea rcx, [rbp - 0x20]
mov r8d, 0x1b
movups xmmword [rbp - 0x20], xmm0
movdqu xmmword [rbp - 0x10], xmm1
call fcn.14004c390
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x21100]
call fcn.1400627c0
xor ebx, ebx
mov eax, 0xffffffff
mov qword [rbp + 0x21170], rax
lea rax, vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov qword [rbp + 0x21100], rax
mov qword [rbp + 0x21160], rbx
mov qword [rbp + 0x21168], rbx
cmp byte [rbp + 0x21158], bl
je 0x14006ea90
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rdx, qword [rbp + 0x21168]
cmp rax, rdx
jb 0x14006ea8a
add rdx, qword [rbp + 0x21170]
cmp rax, rdx
ja 0x14006ea8a
cmp byte [rbp + 0x21158], bl
je 0x14006ea90
cmp byte [rbp + 0x21159], bl
jne 0x14006ea90
mov dword [rbp + 0x21150], ebx
jmp 0x14006ea9c
mov byte [rbp + 0x21158], bl
lea rcx, [rbp + 0x21100]
call fcn.1400715a0
cmp dword [rbp + 0x21160], ebx
mov ebx, 0x30
setne sil
lea rcx, [rbp + 0x21130]
call fcn.14004b2f0
lea rcx, [rbp + 0x21110]
call fcn.14004b2f0
test bl, 0x10
je 0x14006eb08
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x14006eb08
mov rcx, qword [rbp - 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006eb03
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007106c
call fcn.14011460c
mov edx, dword [0x14018c3a8]
xor r9d, r9d
mov rcx, qword [rsp + 0x48]
lea r8d, [r9 + 1]
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
setne bl
test rax, rax
jne 0x14006eb34
test sil, sil
je 0x14006ec5b
xor edx, edx
lea rcx, [rbp + 0x100]
mov r8d, 0x21000
call fcn.140118720
lea rax, [rbp + 0x100]
mov edx, 0x400
sub rdi, rax
lea rcx, [rbp + 0x100]
nop
lea rax, [rdx + 0x7ffffbfe]
test rax, rax
je 0x14006eb82
movzx eax, word [rdi + rcx]
test ax, ax
je 0x14006eb82
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14006eb60
test rdx, rdx
lea rax, [rcx - 2]
lea r8, [rbp + 0x40]
mov edx, 0x10400
cmovne rax, rcx
xor edi, edi
cmp qword [rbp + 0x58], 8
lea rcx, [rbp + 0x900]
cmovae r8, qword [rbp + 0x40]
mov word [rax], di
lea rax, [rbp + 0x900]
sub r8, rax
nop word [rax + rax]
lea rax, [rdx + 0x7ffefbfe]
test rax, rax
je 0x14006ebe3
movzx eax, word [r8 + rcx]
test ax, ax
je 0x14006ebe3
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14006ebc0
test rdx, rdx
mov qword [rbp + 8], 0x21000
lea rax, [rcx - 2]
mov qword [rbp], 0x1267
cmovne rax, rcx
mov word [rax], di
lea rax, [rbp + 0x100]
mov qword [rbp + 0x10], rax
test bl, bl
je 0x14006ec2c
mov edx, dword [0x14018c3a8]
xor r9d, r9d
mov rcx, qword [rsp + 0x48]
xor r8d, r8d
call qword [sym.imp.USER32.dll_SendMessageW]
xor r8d, r8d
jmp 0x14006ec37
test sil, sil
je 0x14006ec4b
mov r8d, 1
mov rcx, qword [rsp + 0x48]
lea r9, [rbp]
mov edx, 0x4a
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov r12b, 1
jmp 0x14006ec5d
xor edi, edi
lea rcx, [rbp + 0x40]
call fcn.14004b2f0
mov esi, 0xffffffff
test r12b, r12b
jne 0x140070f08
xor r12d, r12d
mov dword [rbp + 0x60], 1
xor r8d, r8d
mov qword [rbp + 0x68], r12
lea rdx, [rbp + 0x60]
mov qword [rbp + 0x70], r12
lea rcx, [rsp + 0x70]
call qword [sym.imp.gdiplus.dll_GdiplusStartup]
cmp byte [0x14018c2e4], r12b
je 0x14006eee1
lea rax, str.global
mov qword [rbp + 8], r12
lea r8, [rbp]
mov qword [rbp], rax
lea rdx, [rbp + 0x20]
mov dword [rbp + 0x10], r12d
lea rcx, [0x14018c370]
call fcn.140061e00
mov rbx, qword [rbp + 0x30]
cmp byte [rbx + 0x19], r12b
jne 0x14006ecf0
lea r8, [rbx + 0x20]
lea rdx, [rbp]
call fcn.140061ed0
test al, al
jne 0x14006ecf0
mov rax, qword [0x14018c370]
jmp 0x14006ecfa
mov rax, qword [0x14018c370]
mov rbx, rax
cmp rbx, rax
jne 0x14006ed04
mov rdx, r14
jmp 0x14006ed3b
lea rax, str.languagefile
mov qword [rbp + 8], r12
lea r8, [rbp]
mov qword [rbp], rax
lea rdx, [rsp + 0x30]
mov dword [rbp + 0x10], r12d
lea rcx, [rbx + 0x38]
call fcn.140061350
mov rax, qword [rsp + 0x30]
mov rdx, r14
cmp rax, qword [rbx + 0x38]
je 0x14006ed3b
mov rdx, qword [rax + 0x38]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x78], xmm0
mov r8, r13
movdqu xmmword [rbp - 0x68], xmm1
nop dword [rax]
inc r8
cmp word [rdx + r8*2], r12w
jne 0x14006ed50
lea rcx, [rbp - 0x78]
call fcn.14004c390
cmp qword [rbp - 0x60], 8
lea rcx, [rbp - 0x78]
cmovae rcx, qword [rbp - 0x78]
call qword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
je 0x14006ee88
xor edx, edx
lea rcx, [rbp + 0x21100]
mov r8d, 0x208
call fcn.140118720
mov r8d, 0x104
lea rdx, [rbp + 0x21100]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rbp + 0x21100]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
cmp qword [rbp - 0x60], 8
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x21100]
cmovae rdx, qword [rbp - 0x78]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
xor edx, edx
lea rcx, [rbp + 0x100]
mov r8d, 0x208
call fcn.140118720
lea rdx, [rbp + 0x21100]
lea rcx, [rbp + 0x100]
call qword [sym.imp.SHLWAPI.dll_PathCanonicalizeW]
call fcn.14005b9c0
xorps xmm0, xmm0
xorps xmm1, xmm1
mov rbx, rax
mov r8, r13
movups xmmword [rbp - 0x20], xmm0
lea rax, [rbp + 0x100]
movdqu xmmword [rbp - 0x10], xmm1
nop dword [rax]
inc r8
cmp word [rax + r8*2], r12w
jne 0x14006ee20
lea rdx, [rbp + 0x100]
lea rcx, [rbp - 0x20]
call fcn.14004c390
lea rdx, [rbp - 0x20]
mov rcx, rbx
call fcn.1400595a0
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x14006ee99
mov rcx, qword [rbp - 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ee81
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071072
call fcn.14011460c
jmp 0x14006ee99
call fcn.14005b9c0
lea rdx, [rbp - 0x78]
mov rcx, rax
call fcn.1400595a0
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x14006f0c1
mov rcx, qword [rbp - 0x78]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f0bc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007104e
jmp 0x14006f0bc
call fcn.14005b9c0
xorps xmm0, xmm0
lea rcx, [rbp + 0x20]
xorps xmm1, xmm1
xor r8d, r8d
mov rdx, r14
mov rbx, rax
movups xmmword [rbp + 0x20], xmm0
movdqu xmmword [rbp + 0x30], xmm1
call fcn.14004c390
xorps xmm0, xmm0
lea rdx, str.SoftwaregrepWinNP3languagefile
xorps xmm1, xmm1
lea rcx, [rbp - 0x78]
mov r8d, 0x20
movups xmmword [rbp - 0x78], xmm0
movdqu xmmword [rbp - 0x68], xmm1
call fcn.14004c390
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x21100]
call fcn.1400627c0
lea rax, vtable.CRegTypedBase_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t____class_CRegStdBase_.0
lea rdx, [rbp + 0x20]
mov qword [rbp + 0x21100], rax
lea rcx, [rbp + 0x21160]
call fcn.14004aff0
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x21180]
call fcn.14004aff0
lea rax, vtable.CRegStringCommon_class_CRegStdBase_.0
mov qword [rbp + 0x211a0], r12
mov qword [rbp + 0x21100], rax
mov qword [rbp + 0x211a8], rsi
cmp byte [rbp + 0x21158], r12b
je 0x14006efcf
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rdx, qword [rbp + 0x211a0]
cmp rax, rdx
jb 0x14006efc8
add rdx, qword [rbp + 0x211a8]
cmp rax, rdx
ja 0x14006efc8
cmp byte [rbp + 0x21158], r12b
je 0x14006efcf
cmp byte [rbp + 0x21159], r12b
jne 0x14006efcf
mov dword [rbp + 0x21150], r12d
jmp 0x14006efdb
mov byte [rbp + 0x21158], r12b
lea rcx, [rbp + 0x21100]
call fcn.140061a30
lea rdx, [rbp + 0x21160]
lea rcx, [rbp - 0x20]
call fcn.14004aff0
mov rdx, rax
mov rcx, rbx
call fcn.1400595a0
lea rcx, [rbp - 0x20]
call fcn.14004b2f0
lea rcx, [rbp + 0x21180]
call fcn.14004b2f0
lea rcx, [rbp + 0x21160]
call fcn.14004b2f0
lea rcx, [rbp + 0x21130]
call fcn.14004b2f0
lea rcx, [rbp + 0x21110]
call fcn.14004b2f0
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x14006f06f
mov rcx, qword [rbp - 0x78]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f06a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071078
call fcn.14011460c
mov rdx, qword [rbp + 0x38]
movdqa xmm0, xmmword [0x140169d90]
mov word [rbp - 0x78], r12w
movdqu xmmword [rbp - 0x68], xmm0
cmp rdx, 8
jb 0x14006f0c1
mov rcx, qword [rbp + 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f0bc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071078
call fcn.14011460c
lea r8, str.about
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rbp - 0x30]
cmp qword [rsp + 0x30], rax
jne 0x140070e00
lea r8, [0x140164864]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rbp - 0x30]
cmp qword [rsp + 0x30], rax
jne 0x140070e00
lea r8, [0x140164868]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rbp - 0x30]
cmp qword [rsp + 0x30], rax
jne 0x140070e00
xor edx, edx
lea rcx, [rbp + 0x100]
call fcn.140094b80
lea r8, str.searchini
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
mov edi, 3
cmp rax, qword [rbp - 0x30]
je 0x140070014
cmp qword [rax + 0x50], r12
je 0x140070014
lea r8, str.searchini
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
jne 0x14006f193
mov rdx, r12
jmp 0x14006f1a1
cmp qword [rax + 0x58], 8
lea rdx, [rax + 0x40]
jb 0x14006f1a1
mov rdx, qword [rdx]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x20], xmm0
mov r8, r13
movdqu xmmword [rbp - 0x10], xmm1
inc r8
cmp word [rdx + r8*2], r12w
jne 0x14006f1b3
lea rcx, [rbp - 0x20]
call fcn.14004c390
mov ecx, 0x48
mov qword [rbp + 0x21100], r12
mov qword [rbp + 0x21108], r12
mov qword [rbp + 0x21110], r12
mov word [rbp + 0x21118], r12w
mov qword [rbp + 0x21128], r12
call fcn.1401145d0
mov ecx, 0x28
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x21120], rax
mov qword [rbp + 0x21138], r12
call fcn.1401145d0
mov esi, 1
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x21100]
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbp + 0x21130], rax
xor al, al
cmp qword [rbp + 0x21100], r12
mov byte [rbp + 0x21145], al
movzx eax, al
cmove eax, esi
mov dword [rbp + 0x21141], 0x10000
cmp qword [rbp - 8], 8
mov dword [rbp + 0x21148], r12d
cmovae rdx, qword [rbp - 0x20]
mov byte [rbp + 0x21140], al
call fcn.140068520
movdqa xmm1, xmmword [0x140169d90]
lea r8, str.name
xorps xmm0, xmm0
lea rdx, [rsp + 0x30]
movups xmmword [rbp - 0x78], xmm0
lea rcx, [rbp - 0x58]
mov word [rbp - 0x78], r12w
movdqu xmmword [rbp - 0x68], xmm1
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x14006f2d1
cmp qword [rax + 0x50], r12
je 0x14006f2d1
lea rdx, str.name
lea rcx, [rbp - 0x58]
call fcn.14004df20
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.14004c9f0
cmp qword [rbp - 0x60], 8
lea rax, [rbp - 0x78]
jb 0x14006f2e9
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x14006f3e0
lea r8, [rbp]
mov qword [rbp], rax
lea rdx, [rbp + 0x20]
mov qword [rbp + 8], r12
lea rcx, [rbp + 0x21120]
mov dword [rbp + 0x10], r12d
call fcn.140061e00
mov rbx, qword [rbp + 0x30]
cmp byte [rbx + 0x19], r12b
jne 0x14006f32d
lea r8, [rbx + 0x20]
lea rdx, [rbp]
call fcn.140061ed0
test al, al
jne 0x14006f32d
mov rax, qword [rbp + 0x21120]
jmp 0x14006f337
mov rax, qword [rbp + 0x21120]
mov rbx, rax
cmp rbx, rax
je 0x14006f3e0
lea rdi, str.searchpath
mov qword [rbp + 8], r12
lea r8, [rbp]
mov qword [rbp], rdi
lea rdx, [rsp + 0x30]
mov dword [rbp + 0x10], r12d
lea rcx, [rbx + 0x38]
call fcn.140061350
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbx + 0x38]
je 0x14006f3db
cmp qword [rax + 0x38], r12
je 0x14006f3db
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea rcx, [rbp + 0x21100]
xor r9d, r9d
mov r8, rdi
call fcn.140060ab0
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14004c350
lea rdx, [rbp + 0x20]
lea rcx, [rbp]
call fcn.14006d500
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14004c2b0
lea rcx, [rbp]
call fcn.14004b2f0
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x100]
call fcn.1400a9b40
lea rcx, [rbp + 0x20]
call fcn.14004b2f0
mov edi, 3
lea rcx, [rbp - 0x78]
call fcn.14004b370
lea rbx, str.searchfor
mov rdx, rax
mov r8, rbx
lea rcx, [rbp + 0x21100]
xor r9d, r9d
call fcn.140060ab0
test rax, rax
je 0x14006f44d
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea rcx, [rbp + 0x21100]
xor r9d, r9d
mov r8, rbx
call fcn.140060ab0
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14004c350
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x100]
call fcn.14006d400
lea rcx, [rbp + 0x20]
call fcn.14004b2f0
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.filemaskregex
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006f4bf
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.filemaskregex
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14004c350
movzx r8d, sil
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x100]
call fcn.14006d420
lea rcx, [rbp + 0x20]
call fcn.14004b2f0
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.filemask
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006f530
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.filemask
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14004c350
xor r8d, r8d
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x100]
call fcn.14006d420
lea rcx, [rbp + 0x20]
call fcn.14004b2f0
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.direxcluderegex
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
lea rcx, [rbp - 0x78]
test rax, rax
je 0x14006f569
call fcn.14004b370
lea r8, str.direxcluderegex
jmp 0x14006f59c
call fcn.14004b370
mov rdx, rax
lea r8, str.filemaskexclude
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006f5d3
lea rcx, [rbp - 0x78]
call fcn.14004b370
lea r8, str.filemaskexclude
xor r9d, r9d
lea rcx, [rbp + 0x21100]
mov rdx, rax
call fcn.140060ab0
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14004c350
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x100]
call fcn.14006d470
lea rcx, [rbp + 0x20]
call fcn.14004b2f0
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.replacewith
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006f641
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.replacewith
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14004c350
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x100]
call fcn.14006d4b0
lea rcx, [rbp + 0x20]
call fcn.14004b2f0
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.preset
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006f6af
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.preset
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14004c350
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x100]
call fcn.1400a9c80
lea rcx, [rbp + 0x20]
call fcn.14004b2f0
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x140164940]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006f719
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x140164940]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x252], sil
setne al
mov byte [rbp + 0x251], al
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x140164950]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006f783
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x140164950]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x254], sil
sete al
mov byte [rbp + 0x253], al
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x140164954]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006f7f4
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x140164954]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x247], sil
mov byte [rbp + 0x276], r12b
sete al
mov byte [rbp + 0x246], al
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.keepfiledate
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006f85e
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.keepfiledate
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x24d], sil
sete al
mov byte [rbp + 0x24c], al
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.wholewords
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006f8c8
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.wholewords
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x24d], sil
sete al
mov byte [rbp + 0x24c], al
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.utf8
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006f932
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.utf8
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov word [rbp + 0x24f], si
sete al
mov byte [rbp + 0x24e], al
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.binary
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006f99e
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.binary
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov word [rbp + 0x24e], 0x100
sete al
mov byte [rbp + 0x250], al
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x140164958]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006fa62
lea rcx, [rbp - 0x78]
mov ebx, r12d
call fcn.14004b370
mov rdx, rax
lea r8, str.sizecmp
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006fa1f
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.sizecmp
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
call fcn.14011e280
mov ebx, eax
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x140164958]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
call fcn.14011e280
movsxd rdx, eax
lea rcx, [rbp + 0x100]
mov r8d, ebx
call fcn.14006d4d0
lea rbx, str.searchfor
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.shulb
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006facc
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.shulb
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x23d], sil
sete al
mov byte [rbp + 0x23c], al
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x14016497c]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006fb36
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x14016497c]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x23f], sil
sete al
mov byte [rbp + 0x23e], al
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x140164980]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006fba0
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x140164980]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x241], sil
sete al
mov byte [rbp + 0x240], al
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x140164984]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006fc0a
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x140164984]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x243], sil
sete al
mov byte [rbp + 0x242], al
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x140164988]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006fc74
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, [0x140164988]
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x245], sil
sete al
mov byte [rbp + 0x244], al
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.regex
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
lea rcx, [rbp - 0x78]
test rax, rax
je 0x14006fcde
call fcn.14004b370
mov rdx, rax
lea r8, str.regex
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x22a], sil
sete byte [rbp + 0x229]
jmp 0x14006fd06
call fcn.14004b370
mov rdx, rax
lea rcx, [rbp + 0x21100]
xor r9d, r9d
mov r8, rbx
call fcn.140060ab0
test rax, rax
je 0x14006fd06
mov word [rbp + 0x229], 0x101
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.execute
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
jne 0x14006fd54
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.executesearch
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006fd5a
mov dword [rbp + 0x258], esi
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.executereplace
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov ecx, dword [rbp + 0x258]
test rax, rax
mov eax, 2
cmovne ecx, eax
mov dword [rbp + 0x258], ecx
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.executecapture
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov ecx, dword [rbp + 0x258]
test rax, rax
cmovne ecx, edi
mov dword [rbp + 0x258], ecx
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.closedialog
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
movzx ecx, byte [rbp + 0x257]
test rax, rax
cmovne ecx, esi
mov byte [rbp + 0x257], cl
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.content
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006fe2c
mov word [rbp + 0x277], 0x101
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.datelimit
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006fff6
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.date1
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006fff6
lea rcx, [rbp - 0x78]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x3c], r12d
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r12d
call fcn.14004b370
mov rdx, rax
lea r8, str.date1
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x40]
mov rcx, rax
lea r8, [rsp + 0x3c]
lea rdx, str._4d:_2d:_2d
call fcn.14006d330
movzx eax, word [rsp + 0x3c]
lea rdx, [rsp + 0x30]
xorps xmm0, xmm0
lea rcx, [rbp]
movups xmmword [rbp], xmm0
mov word [rbp], ax
movzx eax, word [rsp + 0x40]
mov word [rbp + 2], ax
movzx eax, word [rsp + 0x38]
mov word [rbp + 6], ax
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.date2
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
test rax, rax
je 0x14006ffa7
lea rcx, [rbp - 0x78]
call fcn.14004b370
mov rdx, rax
lea r8, str.date2
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x40]
mov rcx, rax
lea r8, [rsp + 0x3c]
lea rdx, str._4d:_2d:_2d
call fcn.14006d330
movzx eax, word [rsp + 0x3c]
lea rdx, [rsp + 0x50]
mov word [rbp], ax
lea rcx, [rbp]
movzx eax, word [rsp + 0x40]
mov word [rbp + 2], ax
movzx eax, word [rsp + 0x38]
mov word [rbp + 6], ax
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov rdi, qword [rsp + 0x50]
lea rcx, [rbp - 0x78]
mov rbx, qword [rsp + 0x30]
call fcn.14004b370
mov rdx, rax
lea r8, str.datelimit
xor r9d, r9d
lea rcx, [rbp + 0x21100]
call fcn.140060ab0
mov rcx, rax
call fcn.14011e280
mov dword [rbp + 0x25c], eax
mov byte [rbp + 0x260], sil
mov qword [rbp + 0x264], rbx
mov qword [rbp + 0x26c], rdi
lea rcx, [rbp - 0x78]
call fcn.14004b2f0
lea rcx, [rbp + 0x21100]
call fcn.1400684b0
lea rcx, [rbp - 0x20]
call fcn.14004b2f0
lea rbx, str.searchpath
mov r8, rbx
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x14007004b
cmp qword [rax + 0x50], r12
je 0x14007004b
mov rdx, rbx
lea rcx, [rbp - 0x58]
call fcn.14004df20
jmp 0x140070075
cmp byte [0x14018c2e4], r12b
je 0x140070072
lea rdi, str.global
mov r9, r14
mov rdx, rdi
lea rcx, [0x14018c350]
mov r8, rbx
call fcn.140060ab0
jmp 0x14007007c
mov rax, r14
lea rdi, str.global
xorps xmm0, xmm0
mov qword [rbp + 0x90], r12
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x98], r12
mov r8, r13
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], r12w
jne 0x1400700a0
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.14004c390
lea rdx, [rbp + 0x80]
lea rcx, [rbp - 0x20]
call fcn.14006d500
mov rbx, rax
lea rax, [rbp + 0x80]
cmp rax, rbx
je 0x140070161
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x140070122
mov rcx, qword [rbp + 0x80]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007011d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007107e
call fcn.14011460c
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], r12w
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x90], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 7
mov word [rbx], r12w
lea rcx, [rbp - 0x20]
call fcn.14004b2f0
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x100]
call fcn.1400a9b40
cmp qword [rbp + 0x90], r12
lea rbx, str.searchfor
mov r8, rbx
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
setne sil
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x1400701bf
cmp qword [rax + 0x50], r12
je 0x1400701bf
mov rdx, rbx
lea rcx, [rbp - 0x58]
call fcn.14004df20
jmp 0x1400701e2
cmp byte [0x14018c2e4], r12b
je 0x1400701df
mov r9, r14
lea rcx, [0x14018c350]
mov r8, rbx
mov rdx, rdi
call fcn.140060ab0
jmp 0x1400701e2
mov rax, r14
xorps xmm0, xmm0
mov qword [rbp - 0x68], r12
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x60], r12
mov r8, r13
inc r8
cmp word [rax + r8*2], r12w
jne 0x1400701f4
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.14004c390
cmp qword [rbp - 0x60], 8
lea rdx, [rbp - 0x78]
mov r8, qword [rbp - 0x68]
lea rcx, [rbp + 0x188]
cmovae rdx, qword [rbp - 0x78]
call fcn.14004ca40
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x140070268
mov rcx, qword [rbp - 0x78]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070263
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071048
call fcn.14011460c
lea r8, str.filemaskregex
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rbp - 0x30]
cmp qword [rsp + 0x30], rax
je 0x1400702da
lea rdx, str.filemaskregex
lea rcx, [rbp - 0x58]
call fcn.14004df20
test rax, rax
je 0x1400702af
lea rdx, str.filemaskregex
lea rcx, [rbp - 0x58]
call fcn.14004df20
jmp 0x1400702b2
mov rax, r14
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14004c350
mov r8b, 1
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x100]
call fcn.14006d420
lea rcx, [rbp - 0x20]
call fcn.14004b2f0
lea r8, str.filemask
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rbp - 0x30]
cmp qword [rsp + 0x30], rax
je 0x14007034c
lea rdx, str.filemask
lea rcx, [rbp - 0x58]
call fcn.14004df20
test rax, rax
je 0x140070321
lea rdx, str.filemask
lea rcx, [rbp - 0x58]
call fcn.14004df20
jmp 0x140070324
mov rax, r14
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14004c350
xor r8d, r8d
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x100]
call fcn.14006d420
lea rcx, [rbp - 0x20]
call fcn.14004b2f0
lea r8, str.direxcluderegex
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rbp - 0x30]
lea rcx, [rbp - 0x58]
cmp qword [rsp + 0x30], rax
jne 0x1400703a7
lea rdx, str.filemaskexclude
call fcn.14004dec0
test eax, eax
je 0x1400703f2
lea rdx, str.filemaskexclude
lea rcx, [rbp - 0x58]
call fcn.14004df20
test rax, rax
je 0x1400703ca
lea rdx, str.filemaskexclude
lea rcx, [rbp - 0x58]
call fcn.14004df20
jmp 0x1400703cd
lea rdx, str.direxcluderegex
call fcn.14004df20
test rax, rax
je 0x1400703ca
lea rdx, str.direxcluderegex
lea rcx, [rbp - 0x58]
call fcn.14004df20
jmp 0x1400703cd
mov rax, r14
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14004c350
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x100]
call fcn.14006d470
lea rcx, [rbp - 0x20]
call fcn.14004b2f0
lea r8, str.replacewith
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rbp - 0x30]
cmp qword [rsp + 0x30], rax
je 0x14007045f
lea rdx, str.replacewith
lea rcx, [rbp - 0x58]
call fcn.14004df20
test rax, rax
je 0x14007043a
lea rdx, str.replacewith
lea rcx, [rbp - 0x58]
call fcn.14004df20
mov r14, rax
mov rdx, r14
lea rcx, [rbp - 0x20]
call fcn.14004c350
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x100]
call fcn.14006d4b0
lea rcx, [rbp - 0x20]
call fcn.14004b2f0
lea r8, str.preset
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x1400704ba
cmp qword [rax + 0x50], r12
je 0x1400704ba
lea rdx, str.preset
lea rcx, [rbp - 0x58]
call fcn.14004df20
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14004c350
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x100]
call fcn.1400a9c80
lea rcx, [rbp - 0x20]
call fcn.14004b2f0
lea r8, [0x140164940]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x140070511
cmp qword [rax + 0x50], r12
je 0x140070511
lea rdx, [0x140164940]
lea rcx, [rbp - 0x58]
call fcn.14004df20
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x252], 1
setne al
mov byte [rbp + 0x251], al
lea r8, [0x140164950]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x140070568
cmp qword [rax + 0x50], r12
je 0x140070568
lea rdx, [0x140164950]
lea rcx, [rbp - 0x58]
call fcn.14004df20
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x254], 1
sete al
mov byte [rbp + 0x253], al
lea r8, [0x140164954]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x1400705c6
cmp qword [rax + 0x50], r12
je 0x1400705c6
lea rdx, [0x140164954]
lea rcx, [rbp - 0x58]
call fcn.14004df20
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x247], 1
mov byte [rbp + 0x276], r12b
sete al
mov byte [rbp + 0x246], al
lea r8, str.keepfiledate
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x14007061d
cmp qword [rax + 0x50], r12
je 0x14007061d
lea rdx, str.keepfiledate
lea rcx, [rbp - 0x58]
call fcn.14004df20
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x24d], 1
sete al
mov byte [rbp + 0x24c], al
lea r8, str.wholewords
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x140070676
cmp qword [rax + 0x50], r12
je 0x140070676
lea rdx, str.wholewords
lea rcx, [rbp - 0x58]
call fcn.14004df20
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x24d], 1
sete al
mov byte [rbp + 0x24c], al
jmp 0x140070693
lea rdx, str.wholewords
lea rcx, [rbp - 0x58]
call fcn.14004dec0
test eax, eax
je 0x140070693
mov word [rbp + 0x24c], 0x101
lea r8, str.utf8
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x1400706ec
cmp qword [rax + 0x50], r12
je 0x1400706ec
lea rdx, str.utf8
lea rcx, [rbp - 0x58]
call fcn.14004df20
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov word [rbp + 0x24f], 1
sete al
mov byte [rbp + 0x24e], al
lea r8, str.binary
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x140070745
cmp qword [rax + 0x50], r12
je 0x140070745
lea rdx, str.binary
lea rcx, [rbp - 0x58]
call fcn.14004df20
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov word [rbp + 0x24e], 0x100
sete al
mov byte [rbp + 0x250], al
lea r8, [0x140164958]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x1400707bd
cmp qword [rax + 0x50], r12
je 0x1400707bd
lea rdx, str.sizecmp
mov ebx, r12d
lea rcx, [rbp - 0x58]
call fcn.14004def0
test eax, eax
je 0x140070794
lea rdx, str.sizecmp
lea rcx, [rbp - 0x58]
call fcn.14004df60
mov ebx, eax
lea rdx, [0x140164958]
lea rcx, [rbp - 0x58]
call fcn.14004df60
movsxd rdx, eax
lea rcx, [rbp + 0x100]
mov r8d, ebx
call fcn.14006d4d0
lea rbx, str.searchfor
lea r8, str.shulb
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x140070814
cmp qword [rax + 0x50], r12
je 0x140070814
lea rdx, str.shulb
lea rcx, [rbp - 0x58]
call fcn.14004df20
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x23d], 1
sete al
mov byte [rbp + 0x23c], al
lea r8, [0x14016497c]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x14007086b
cmp qword [rax + 0x50], r12
je 0x14007086b
lea rdx, [0x14016497c]
lea rcx, [rbp - 0x58]
call fcn.14004df20
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x23f], 1
sete al
mov byte [rbp + 0x23e], al
lea r8, [0x140164980]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x1400708c2
cmp qword [rax + 0x50], r12
je 0x1400708c2
lea rdx, [0x140164980]
lea rcx, [rbp - 0x58]
call fcn.14004df20
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x241], 1
sete al
mov byte [rbp + 0x240], al
lea r8, [0x140164984]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x140070919
cmp qword [rax + 0x50], r12
je 0x140070919
lea rdx, [0x140164984]
lea rcx, [rbp - 0x58]
call fcn.14004df20
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x243], 1
sete al
mov byte [rbp + 0x242], al
lea r8, [0x140164988]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x140070970
cmp qword [rax + 0x50], r12
je 0x140070970
lea rdx, [0x140164988]
lea rcx, [rbp - 0x58]
call fcn.14004df20
mov rcx, rax
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x245], 1
sete al
mov byte [rbp + 0x244], al
lea r8, str.regex
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x1400709e7
cmp qword [rax + 0x50], r12
je 0x1400709e7
lea r8, str.regex
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
jne 0x1400709bb
mov rcx, r12
jmp 0x1400709c9
cmp qword [rax + 0x58], 8
lea rcx, [rax + 0x40]
jb 0x1400709c9
mov rcx, qword [rcx]
lea rdx, [0x140164948]
call fcn.14011e7e4
test eax, eax
mov byte [rbp + 0x22a], 1
sete byte [rbp + 0x229]
jmp 0x140070a00
mov rdx, rbx
lea rcx, [rbp - 0x58]
call fcn.14004def0
test eax, eax
je 0x140070a00
mov word [rbp + 0x229], 0x101
lea r8, str.execute
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rbp - 0x30]
cmp qword [rsp + 0x30], rax
jne 0x140070a40
lea r8, str.executesearch
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rbp - 0x30]
cmp qword [rsp + 0x30], rax
je 0x140070a4f
mov r14d, 1
mov dword [rbp + 0x258], r14d
jmp 0x140070a55
mov r14d, 1
lea r8, str.executereplace
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov ecx, dword [rbp + 0x258]
lea r8, str.executecapture
mov rax, qword [rbp - 0x30]
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x30], rax
mov eax, 2
cmovne ecx, eax
mov dword [rbp + 0x258], ecx
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov ecx, dword [rbp + 0x258]
lea r8, str.closedialog
mov rax, qword [rbp - 0x30]
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x30], rax
mov eax, 3
cmovne ecx, eax
mov dword [rbp + 0x258], ecx
lea rcx, [rbp - 0x58]
call fcn.14004dc80
movzx ecx, byte [rbp + 0x257]
lea r8, str.content
mov rax, qword [rbp - 0x30]
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x30], rax
cmovne ecx, r14d
mov byte [rbp + 0x257], cl
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rbp - 0x30]
cmp qword [rsp + 0x30], rax
je 0x140070b11
mov word [rbp + 0x277], 0x101
lea r8, str.datelimit
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
mov rax, qword [rsp + 0x30]
cmp rax, qword [rbp - 0x30]
je 0x140070c7a
cmp qword [rax + 0x50], r12
je 0x140070c7a
lea rdx, str.date1
lea rcx, [rbp - 0x58]
call fcn.14004def0
test eax, eax
je 0x140070c7a
lea rdx, str.date1
mov qword [rsp + 0x50], r12
lea rcx, [rbp - 0x58]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x38], r12d
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x3c], r12d
call fcn.14004df20
lea rcx, [rsp + 0x3c]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x40]
mov rcx, rax
lea r8, [rsp + 0x38]
lea rdx, str._4d:_2d:_2d
call fcn.14006d330
movzx eax, word [rsp + 0x38]
lea rdx, [rsp + 0x50]
xorps xmm0, xmm0
lea rcx, [rbp]
movups xmmword [rbp], xmm0
mov word [rbp], ax
movzx eax, word [rsp + 0x40]
mov word [rbp + 2], ax
movzx eax, word [rsp + 0x3c]
mov word [rbp + 6], ax
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea rdx, str.date2
lea rcx, [rbp - 0x58]
call fcn.14004def0
test eax, eax
je 0x140070c45
lea rdx, str.date2
lea rcx, [rbp - 0x58]
call fcn.14004df20
lea rcx, [rsp + 0x3c]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x40]
mov rcx, rax
lea r8, [rsp + 0x38]
lea rdx, str._4d:_2d:_2d
call fcn.14006d330
movzx eax, word [rsp + 0x38]
lea rdx, [rsp + 0x30]
mov word [rbp], ax
lea rcx, [rbp]
movzx eax, word [rsp + 0x40]
mov word [rbp + 2], ax
movzx eax, word [rsp + 0x3c]
mov word [rbp + 6], ax
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov rdi, qword [rsp + 0x30]
lea rdx, str.datelimit
mov rbx, qword [rsp + 0x50]
lea rcx, [rbp - 0x58]
call fcn.14004df60
mov dword [rbp + 0x25c], eax
mov byte [rbp + 0x260], 1
mov qword [rbp + 0x264], rbx
mov qword [rbp + 0x26c], rdi
test sil, sil
jne 0x140070d33
mov rdi, qword [rsp + 0x58]
nop dword [rax + rax]
cmp word [rdi + r13*2 + 2], r12w
lea r13, [r13 + 1]
jne 0x140070c90
lea rdx, [r13 + 1]
lea rcx, [rsp + 0x30]
call fcn.14004c250
mov rbx, qword [rsp + 0x30]
lea rdx, [r13 + 1]
mov rcx, rbx
mov r8, rdi
call fcn.14011ca1c
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea rcx, [rbp - 0x20]
test eax, eax
je 0x140070ce2
mov rdx, rbx
call fcn.14004c350
jmp 0x140070cee
lea rdx, [rbp + 0xc0]
call fcn.14004aff0
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x78]
call fcn.14006d500
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14004c2b0
lea rcx, [rbp - 0x78]
call fcn.14004b2f0
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x100]
call fcn.1400a9b40
lea rcx, [rbp - 0x20]
call fcn.14004b2f0
lea rcx, [rsp + 0x30]
call fcn.14004c240
lea r8, str.nosavesettings
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x58]
call fcn.14004dc80
movzx ecx, byte [rbp + 0x274]
mov rax, qword [rbp - 0x30]
cmp qword [rsp + 0x58], rax
cmovne ecx, r14d
mov byte [rbp + 0x274], cl
mov ecx, 0x8001
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
mov rdx, qword [rsp + 0x68]
lea rcx, [rbp + 0x100]
mov r8d, 0x81
mov dword [rsp + 0x20], 0x88
call fcn.14004b550
mov rdx, qword [rbp + 0x98]
mov rdi, rax
cmp rdx, 8
jb 0x140070dd5
mov rcx, qword [rbp + 0x80]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070dd0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071048
call fcn.14011460c
lea rcx, [rbp + 0x100]
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], r12w
call fcn.140096890
jmp 0x140070ed0
mov rcx, qword [0x14018c308]
test rcx, rcx
je 0x140070e12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rsp + 0x68]
lea rsi, vtable.CAboutDlg.0
xorps xmm0, xmm0
mov qword [rbp + 0x21100], rsi
lea rbx, vtable.CHyperLink.0
movdqa xmmword [rbp + 0x21110], xmm0
mov r8d, 0x87
movaps xmmword [rbp + 0x21120], xmm0
lea rcx, [rbp + 0x21100]
mov qword [rbp + 0x21158], rbx
movdqa xmmword [rbp + 0x21170], xmm0
mov qword [rbp + 0x21108], r12
mov word [rbp + 0x21130], r12w
mov qword [rbp + 0x21138], r12
mov qword [rbp + 0x21140], r12
mov qword [rbp + 0x21148], r12
mov dword [rbp + 0x21150], r12d
mov qword [rbp + 0x21168], r12
mov qword [rbp + 0x21160], r12
mov dword [rsp + 0x20], r12d
call fcn.14004b550
mov rcx, qword [rbp + 0x21160]
mov edi, eax
mov qword [rbp + 0x21100], rsi
mov qword [rbp + 0x21158], rbx
test rcx, rcx
je 0x140070ebe
call fcn.14011460c
mov rcx, qword [rbp + 0x21118]
test rcx, rcx
je 0x140070ed0
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp byte [0x14018c2e4], r12b
je 0x140070efb
cmp qword [0x140186038], 8
lea rcx, [0x14018c350]
mov r8b, 1
cmovae r15, qword [0x140186020]
mov rdx, r15
call fcn.140068660
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.gdiplus.dll_GdiplusShutdown]
jmp 0x140070f0b
xor r12d, r12d
call qword [sym.imp.ole32.dll_CoUninitialize]
call qword [sym.imp.ole32.dll_OleUninitialize]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xc0]
call fcn.14004b2f0
lea rcx, [rbp + 0xe0]
call fcn.14004b2f0
lea rcx, [rbp + 0xa0]
call fcn.14004b2f0
jmp 0x140070fc2
lea rdx, str.SoftwareClassesDirectory_shellgrepWinNP3
mov rcx, 0xffffffff80000001
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea rdx, str.SoftwareClassesDirectoryBackground_shellgrepWinNP3
mov rcx, 0xffffffff80000001
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea rdx, str.SoftwareClassesFolder_shellgrepWinNP3
mov rcx, 0xffffffff80000001
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea rdx, str.SoftwareClassesDrive_shellgrepWinNP3
mov rcx, 0xffffffff80000001
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea rdx, str.SoftwareClasses_shellgrepWinNP3
mov rcx, 0xffffffff80000001
call qword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
jmp 0x140070fbf
mov cl, 1
call fcn.14006d780
mov edi, r12d
mov rbx, qword [rbp - 0x30]
lea rax, vtable.CCmdLineParser.0
mov qword [rbp - 0x58], rax
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x30]
mov r8, qword [rbx + 8]
call fcn.14004e860
mov qword [rbx + 8], rbx
lea rdx, [rbp - 0x30]
mov qword [rbx], rbx
lea rcx, [rbp - 0x30]
mov qword [rbx + 0x10], rbx
mov r8, qword [rbp - 0x30]
mov qword [rbp - 0x28], r12
mov r8, qword [r8 + 8]
call fcn.14004e860
mov rcx, qword [rbp - 0x30]
mov edx, 0x60
call fcn.14011460c
lea rcx, [rbp - 0x50]
call fcn.14004b2f0
mov r13, qword [rsp + 0x21468]
mov eax, edi
mov rcx, qword [rbp + 0x21310]
xor rcx, rsp
call fcn.1401145b0
add rsp, 0x21420
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14011c9a4
int3
call fcn.14011c9a4
int3
call fcn.14004b290
int3
call fcn.14011c9a4
int3
call fcn.14011c9a4
int3
call fcn.14011c9a4
int3
call fcn.14011c9a4
int3
call fcn.14011c9a4
int3
call fcn.14011c9a4
int3
call fcn.14011c9a4
int3