Function at 0x44f742
Capabilities:
Contain obfuscated stackstrings
Create process on windows

Disassembly:
push ebp
lea ebp, [esp - 0xdcc]
sub esp, 0xdcc
push 0xffffffffffffffff
push 0x4dc6f9
mov eax, dword fs:[0]
push eax
sub esp, 0x16c
mov eax, dword [0x5021c0]
xor eax, ebp
mov dword [ebp + 0xdc8], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x44], edi
mov ecx, dword [ebp + 0xdd4]
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x70], ebx
cmp ecx, 0x3e8
jg 0x44c7eb
je 0x44c755
sub ecx, 1
je case.0x44c801.1049
sub ecx, 1
jne case.0x44c801.1003
cmp byte [0x507a10], bl
je 0x44c56d
push ecx
push ecx
push str.escclose
push str.settings
call fcn.00426590
mov byte [ebp - 0x15], al
jmp 0x44c6a0
xor eax, eax
lea ecx, [ebp + 0xba8]
push 0x1c
push str.SoftwaregrepWinNP3escclose
mov dword [ebp + 0xba8], eax
mov dword [ebp + 0xbac], eax
mov dword [ebp + 0xbb0], eax
mov dword [ebp + 0xbb4], eax
mov dword [ebp + 0xbb8], eax
mov dword [ebp + 0xbbc], eax
call fcn.00403450
sub esp, 0xc
mov dword [ebp - 4], 0x1b
lea eax, [ebp + 0xba8]
mov dword [ebp - 0x14], 0x40
lea ecx, [ebp + 0x9e0]
push eax
call fcn.00418ec0
mov dword [ebp + 0xa24], 0
mov dword [ebp + 0xa28], 0
mov dword [ebp + 0xa30], 0
mov dword [ebp + 0xa34], 0
mov dword [ebp + 0xa38], 0xffffffff
mov dword [ebp + 0xa3c], 0
mov dword [ebp + method.CRegTypedBase_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t____class_CRegStdBase_.virtual_0], vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov dword [ebp - 4], 0x1c
mov ebx, 0xc0
mov al, byte [ebp + 0xa20]
mov dword [ebp - 0x14], ebx
test al, al
je 0x44c68a
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov esi, eax
cmp edx, dword [ebp + 0xa34]
jb 0x44c669
mov eax, dword [ebp + 0xa30]
ja 0x44c643
cmp esi, eax
jb 0x44c669
mov ecx, dword [ebp + 0xa38]
add ecx, eax
mov eax, dword [ebp + 0xa3c]
adc eax, dword [ebp + 0xa34]
cmp edx, eax
jb 0x44c661
ja 0x44c669
cmp esi, ecx
ja 0x44c669
mov al, byte [ebp + 0xa20]
jmp 0x44c671
xor al, al
mov byte [ebp + 0xa20], al
test al, al
je 0x44c68a
cmp byte [ebp + 0xa21], 0
jne 0x44c68a
mov dword [ebp + 0xa18], 0
jmp 0x44c695
lea ecx, [ebp + 0x9e0]
call fcn.00426a60
cmp dword [ebp + 0xa24], 0
setne byte [ebp - 0x15]
test bl, bl
jns 0x44c6c0
lea ecx, [ebp + 0xa00]
and ebx, 0xffffff7f
call fcn.004027a0
lea ecx, [ebp + 0x9e8]
call fcn.004027a0
mov dword [ebp - 4], 0xffffffff
test bl, 0x40
je 0x44c6d7
lea ecx, [ebp + 0xba8]
call fcn.004027a0
cmp byte [ebp - 0x15], 0
je case.0x44c801.1003
mov al, byte [0x507a2f]
test al, al
je 0x44c6f8
mov al, 1
mov ecx, 0x507a32
xchg byte [ecx], al
jmp case.0x44c801.1003
mov ecx, edi
call fcn.00456ff0
cmp byte [edi + 0x114], 0
jne 0x44c734
lea ecx, [edi + 0x1d4]
call fcn.00416800
lea ecx, [edi + 0x27c]
call fcn.00416800
lea ecx, [edi + 0x2d0]
call fcn.00416800
lea ecx, [edi + 0x324]
call fcn.00416800
cmp byte [edi + 0x20], 0
je 0x44c745
mov byte [edi + 0x21], 1
mov dword [edi + 0x24], 2
push 2
push dword [edi + 8]
call dword [sym.imp.USER32.dll_EndDialog]
jmp case.0x44c801.1003
cmp dword [ebp + 0xdd8], 0x300
jne case.0x44c801.1003
mov ecx, dword [edi + 0x2c8]
xor eax, eax
mov dword [ebp - 0x20], eax
test ecx, ecx
je 0x44c781
mov eax, dword [ecx]
lea edx, [ebp - 0x20]
push edx
push ecx
call dword [eax + 0x18]
mov eax, dword [ebp - 0x20]
test eax, 0x100
je 0x44c7c0
mov ecx, dword [edi + 0x2c8]
test ecx, ecx
je 0x44c7c0
mov eax, dword [ecx]
push 0x21
push ecx
call dword [eax + 0x14]
mov ecx, dword [edi + 0x2c4]
test ecx, ecx
je 0x44c7b0
lea eax, [edi + 0x2b0]
push eax
call fcn.00401d50
mov ecx, dword [edi + 0x2cc]
test ecx, ecx
je 0x44c7c0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x10]
mov ecx, edi
call fcn.0045dd60
test eax, eax
mov ecx, edi
setg bl
push ebx
push 0x3fd
call fcn.004030b0
push ebx
push 0x41a
mov ecx, edi
call fcn.004030b0
jmp case.0x44c801.1003
lea eax, [ecx - 0x3e9]
cmp eax, 0x58
ja case.0x44c801.1003
movzx eax, byte [eax + 0x45076c]
jmp dword [eax*4 + 0x450704]
mov al, byte [0x507a2e]
test al, al
je 0x44c836
mov al, 1
mov ecx, 0x507a32
xchg byte [ecx], al
push 0
push 3
push 0x410
push 0x430
push dword [edi + 8]
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
jmp case.0x44c801.1003
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push 1
push dword [edi + 8]
call ebx
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, edi
call fcn.00456ff0
test al, al
je case.0x44c801.1003
xor eax, eax
lea ecx, [ebp + 0xb78]
push 2
push 0x4eb9d8
mov dword [ebp + 0xb78], eax
mov dword [ebp + 0xb7c], eax
mov dword [ebp + 0xb80], eax
mov dword [ebp + 0xb84], eax
mov dword [ebp + 0xb88], eax
mov dword [ebp + 0xb8c], eax
call fcn.00403450
lea edx, [ebp + 0xb78]
lea ecx, [edi + 0x3c]
call fcn.00441850
mov ecx, dword [ebp + 0xb8c]
cmp ecx, 7
jbe 0x44c8df
mov edx, dword [ebp + 0xb78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44c8d5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4506c8
push ecx
push edx
call fcn.004accfd
add esp, 8
xor eax, eax
lea ecx, [ebp + 0xba8]
push 1
push 0x4ebe50
mov dword [ebp + 0xba8], eax
mov dword [ebp + 0xbac], eax
mov dword [ebp + 0xbb0], eax
mov dword [ebp + 0xbb4], eax
mov dword [ebp + 0xbb8], eax
mov dword [ebp + 0xbbc], eax
call fcn.00403450
xor eax, eax
mov dword [ebp - 4], 0
push 1
push 0x4ecc00
lea ecx, [ebp + 0xb78]
mov dword [ebp + 0xb78], eax
mov dword [ebp + 0xb7c], eax
mov dword [ebp + 0xb80], eax
mov dword [ebp + 0xb84], eax
mov dword [ebp + 0xb88], eax
mov dword [ebp + 0xb8c], eax
call fcn.00403450
lea eax, [ebp + 0xba8]
mov byte [ebp - 4], 1
push eax
lea edx, [ebp + 0xb78]
lea ecx, [edi + 0x3c]
call fcn.00403c70
mov byte [ebp - 4], 0
add esp, 4
mov ecx, dword [ebp + 0xb8c]
cmp ecx, 7
jbe 0x44c9b6
mov edx, dword [ebp + 0xb78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44c9ac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4506cd
push ecx
push edx
call fcn.004accfd
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp + 0xbbc]
cmp ecx, 7
jbe 0x44c9fd
mov edx, dword [ebp + 0xba8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44c9f3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4506cd
push ecx
push edx
call fcn.004accfd
add esp, 8
cmp dword [edi + 0x50], 7
lea eax, [edi + 0x3c]
jbe 0x44ca08
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
je 0x44cb3a
call fcn.00411ad0
mov edx, dword [edi + 4]
lea ecx, [ebp + 0xad0]
push 0x98
mov esi, eax
call fcn.0041fc20
push esi
lea edx, [ebp + 0xad0]
mov dword [ebp - 4], 2
lea ecx, [ebp + 0xb78]
call fcn.004108d0
add esp, 8
mov byte [ebp - 4], 3
lea eax, [ebp + 0xb78]
cmp dword [ebp + 0xb8c], 7
mov dword [ebp - 0x28], eax
jbe 0x44ca6c
mov eax, dword [ebp + 0xb78]
mov dword [ebp - 0x28], eax
call fcn.00411ad0
mov edx, dword [edi + 4]
lea ecx, [ebp + 0xb48]
push 0x99
mov esi, eax
call fcn.0041fc20
push esi
lea edx, [ebp + 0xb48]
mov byte [ebp - 4], 4
lea ecx, [ebp + 0xba8]
call fcn.004108d0
add esp, 8
lea esi, [ebp + 0xba8]
cmp dword [ebp + 0xbbc], 7
jbe 0x44cab4
mov esi, dword [ebp + 0xba8]
mov eax, dword [ebp - 0x28]
mov dword [ebp + 0xba0], eax
lea eax, [ebp + 0xb98]
push eax
push 0
push 0x1503
push 0x3f4
push dword [edi + 8]
mov dword [ebp + 0xb98], 0x10
mov dword [ebp + 0xb9c], esi
mov dword [ebp + 0xba4], 3
call ebx
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x44cb09
push 0x10
push esi
push dword [ebp - 0x28]
push dword [edi + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp + 0xba8]
call fcn.004027a0
lea ecx, [ebp + 0xb48]
call fcn.004027a0
lea ecx, [ebp + 0xb78]
call fcn.004027a0
lea ecx, [ebp + 0xad0]
call fcn.004027a0
jmp case.0x44c801.1003
mov dword [ebp + 0xadc], 0
mov dword [ebp + 0xae0], 0
mov dword [ebp + 0xae4], 0
push ecx
push 0x4ec558
push 1
lea edx, [edi + 0x3c]
mov dword [ebp - 4], 5
lea ecx, [ebp + 0xadc]
call fcn.004059a0
mov ebx, dword [ebp + 0xadc]
add esp, 0xc
mov dword [ebp - 0x24], ebx
cmp ebx, dword [ebp + 0xae0]
je 0x44cbb3
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
nop
cmp dword [ebx + 0x14], 7
mov eax, ebx
jbe 0x44cb9a
mov eax, dword [ebx]
push eax
call esi
test eax, eax
je 0x44cd33
add ebx, 0x18
mov dword [ebp - 0x24], ebx
cmp ebx, dword [ebp + 0xae0]
jne 0x44cb90
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x28], ebx
cmp dword [ebp + 0xdd4], 0x43d
jne 0x44cc27
mov eax, dword [edi + 0x11c]
cmp eax, dword [edi + 0x120]
je 0x44cc27
cmp dword [edi + 0x50], 7
lea ecx, [edi + 0x3c]
jbe 0x44cbdf
mov ecx, dword [edi + 0x3c]
xor eax, eax
mov dword [edi + 0x4c], 0
mov word [ecx], ax
mov eax, dword [edi + 0x120]
mov esi, dword [edi + 0x11c]
mov dword [ebp - 0x1c], eax
cmp esi, eax
je 0x44cc27
mov edi, edi
cmp dword [edi + 0x4c], 0
je 0x44cc13
push 0x4ec558
lea ecx, [edi + 0x3c]
call fcn.00405930
push esi
lea ecx, [edi + 0x3c]
call fcn.00404a00
add esi, 0x68
cmp esi, dword [ebp - 0x1c]
jne 0x44cc00
mov ebx, dword [ebp - 0x28]
mov dword [ebp + 0xb9c], 0
mov dword [ebp + 0xba0], 0
mov dword [ebp + 0xba4], 0
push ecx
push 0x4ec558
push 1
lea edx, [edi + 0x3c]
mov byte [ebp - 4], 0xa
lea ecx, [ebp + 0xb9c]
call fcn.004059a0
mov esi, dword [ebp + 0xb9c]
add esp, 0xc
cmp esi, dword [ebp + 0xba0]
je 0x44cc94
cmp dword [esi + 0x14], 7
mov eax, esi
jbe 0x44cc7a
mov eax, dword [esi]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44cef4
add esi, 0x18
cmp esi, dword [ebp + 0xba0]
jne 0x44cc70
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0x43e
push dword [edi + 8]
mov dword [edi + 0x140], 0
mov dword [edi + 0x13c], 0
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [edi + 0x11c]
mov edx, dword [edi + 0x120]
cmp ecx, edx
je 0x44cce6
push ecx
call fcn.00463ec0
mov eax, dword [edi + 0x11c]
add esp, 4
mov dword [edi + 0x120], eax
mov eax, dword [edi + 0x128]
lea ecx, [edi + 0x128]
cmp eax, dword [ecx + 4]
je 0x44ccfa
mov dword [ecx + 4], eax
mov eax, dword [ecx + 8]
sub eax, dword [ecx]
sar eax, 3
mov dword [ebp - 0x1c], 0x7a120
cmp eax, 0x7a120
jae 0x44cd19
lea eax, [ebp - 0x1c]
push eax
call fcn.00463dd0
push 0x507a7c
call fcn.00495b97
add esp, 4
test eax, eax
jne 0x4506d2
jmp 0x44d023
call fcn.00411ad0
mov edx, dword [edi + 4]
lea ecx, [ebp + 0xb48]
push 0xa0
mov esi, eax
call fcn.0041fc20
push esi
lea edx, [ebp + 0xb48]
mov byte [ebp - 4], 6
lea ecx, [ebp + 0xa58]
call fcn.004108d0
mov ebx, 0x80000000
add esp, 8
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x14], ebx
lea ecx, [ebp + 0xb48]
mov byte [ebp - 4], 8
call fcn.004027a0
mov eax, dword [ebp - 0x24]
cmp dword [eax + 0x14], 7
jbe 0x44cd8b
mov eax, dword [eax]
cmp dword [ebp + 0xa6c], 7
lea ecx, [ebp + 0xa58]
jbe 0x44cda0
mov ecx, dword [ebp + 0xa58]
push eax
push ecx
lea eax, [ebp + 0xae8]
push eax
call fcn.00419200
mov esi, eax
add esp, 0xc
lea eax, [ebp + 0xa58]
cmp eax, esi
je 0x44ce0c
mov ecx, eax
call fcn.004027a0
mov ecx, dword [esi]
mov dword [ebp + 0xa58], ecx
mov ecx, dword [esi + 4]
mov dword [ebp + 0xa5c], ecx
mov eax, dword [esi + 8]
mov dword [ebp + 0xa60], eax
mov eax, dword [esi + 0xc]
mov dword [ebp + 0xa64], eax
mov eax, dword [esi + 0x10]
mov dword [ebp + 0xa68], eax
mov eax, dword [esi + 0x14]
mov dword [ebp + 0xa6c], eax
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp + 0xae8]
call fcn.004027a0
cmp dword [ebp + 0xa6c], 7
lea eax, [ebp + 0xa58]
mov dword [ebp - 0x24], eax
jbe 0x44ce32
mov eax, dword [ebp + 0xa58]
mov dword [ebp - 0x24], eax
call fcn.00411ad0
mov edx, dword [edi + 4]
lea ecx, [ebp + 0xb48]
push 0x99
mov esi, eax
call fcn.0041fc20
push esi
lea edx, [ebp + 0xb48]
mov byte [ebp - 4], 9
lea ecx, [ebp + 0xb60]
call fcn.004108d0
add esp, 8
lea eax, [ebp + 0xb60]
cmp dword [ebp + 0xb74], 7
mov dword [ebp - 0x40], eax
jbe 0x44ce80
mov eax, dword [ebp + 0xb60]
mov dword [ebp - 0x40], eax
mov esi, dword [ebp - 0x24]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1503
push 0x3f4
push dword [edi + 8]
mov dword [ebp - 0x68], 0x10
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x5c], 3
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x44ceca
push 0x10
push dword [ebp - 0x40]
push esi
push dword [edi + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp + 0xb60]
call fcn.004027a0
lea ecx, [ebp + 0xb48]
call fcn.004027a0
lea ecx, [ebp + 0xa58]
mov byte [ebp - 4], 5
call fcn.004027a0
jmp 0x44cbb9
call fcn.00411ad0
mov edx, dword [edi + 4]
lea ecx, [ebp + 0xba8]
push 0xa0
mov esi, eax
call fcn.0041fc20
push esi
lea edx, [ebp + 0xba8]
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0xb18]
call fcn.004108d0
add esp, 8
mov byte [ebp - 4], 0xc
lea ebx, [ebp + 0xb18]
cmp dword [ebp + 0xb2c], 7
jbe 0x44cf40
mov ebx, dword [ebp + 0xb18]
call fcn.00411ad0
mov edx, dword [edi + 4]
lea ecx, [ebp + 0xb48]
push 0x99
mov esi, eax
call fcn.0041fc20
push esi
lea edx, [ebp + 0xb48]
mov byte [ebp - 4], 0xd
lea ecx, [ebp + 0xb60]
call fcn.004108d0
add esp, 8
lea esi, [ebp + 0xb60]
cmp dword [ebp + 0xb74], 7
jbe 0x44cf88
mov esi, dword [ebp + 0xb60]
lea eax, [ebp + 0xb08]
mov dword [ebp + 0xb08], 0x10
push eax
push 0
push 0x1503
push 0x3f4
push dword [edi + 8]
mov dword [ebp + 0xb0c], esi
mov dword [ebp + 0xb10], ebx
mov dword [ebp + 0xb14], 3
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x44cfdc
push 0x10
push esi
push ebx
push dword [edi + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp + 0xb60]
call fcn.004027a0
lea ecx, [ebp + 0xb48]
call fcn.004027a0
lea ecx, [ebp + 0xb18]
call fcn.004027a0
lea ecx, [ebp + 0xba8]
call fcn.004027a0
lea ecx, [ebp + 0xb9c]
call fcn.004020e0
lea ecx, [ebp + 0xadc]
call fcn.004020e0
jmp case.0x44c801.1003
cmp dword [0x507aa8], 0x7fffffff
je 0x4506d9
mov ecx, dword [0x507aac]
mov dword [ebp - 0x24], ecx
mov eax, dword [ecx + 4]
cmp byte [eax + 0xd], 0
jne 0x44d08b
mov edi, eax
jmp 0x44d050
push dword [edi + 8]
mov ecx, 0x507aac
push 0x507aac
call fcn.00419cb0
mov esi, edi
mov edi, dword [edi]
lea ecx, [esi + 0x10]
call fcn.004027a0
push 0x28
push esi
call fcn.004accfd
add esp, 8
cmp byte [edi + 0xd], 0
je 0x44d050
mov edi, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x24]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ecx + 4], ecx
mov dword [ecx], ecx
mov dword [ecx + 8], ecx
push 0x507a7c
mov dword [0x507ab0], 0
call fcn.00495bbc
add esp, 4
push 0x3f6
push dword [edi + 8]
call esi
push 0
push 0
push 0x102f
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x423
push dword [edi + 8]
call esi
mov dword [ebp - 0x24], eax
test eax, eax
je 0x44d0fa
call dword [sym.imp.USER32.dll_GetFocus]
cmp eax, dword [ebp - 0x24]
jne 0x44d0ef
push 0
push 0
push 0x28
push dword [edi + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push dword [ebp - 0x24]
call dword [sym.imp.USER32.dll_EnableWindow]
push 0x424
push dword [edi + 8]
call esi
mov esi, eax
test esi, esi
je 0x44d12c
call dword [sym.imp.USER32.dll_GetFocus]
cmp eax, esi
jne 0x44d123
push 0
push 0
push 0x28
push dword [edi + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
cmp dword [edi + 0xa4], 7
lea eax, [edi + 0x90]
jbe 0x44d13d
mov eax, dword [eax]
push eax
lea ecx, [edi + 0x1d4]
call fcn.004160a0
mov ecx, dword [edi + 0x21c]
test ecx, ecx
je 0x44d15f
lea eax, [edi + 0x208]
push eax
call fcn.00401d50
mov ecx, dword [edi + 0x224]
test ecx, ecx
je 0x44d16f
mov eax, dword [ecx]
push ecx
call dword [eax + 0x10]
cmp dword [edi + 0xc0], 7
lea eax, [edi + 0xac]
jbe 0x44d180
mov eax, dword [eax]
push eax
lea ecx, [edi + 0x228]
call fcn.004160a0
mov ecx, dword [edi + 0x270]
test ecx, ecx
je 0x44d1a2
lea eax, [edi + 0x25c]
push eax
call fcn.00401d50
mov ecx, dword [edi + 0x278]
test ecx, ecx
je 0x44d1b2
mov eax, dword [ecx]
push ecx
call dword [eax + 0x10]
cmp dword [edi + 0x68], 7
lea eax, [edi + 0x54]
jbe 0x44d1bd
mov eax, dword [eax]
push eax
lea ecx, [edi + 0x27c]
call fcn.004160a0
mov ecx, dword [edi + 0x2c4]
test ecx, ecx
je 0x44d1df
lea eax, [edi + 0x2b0]
push eax
call fcn.00401d50
mov ecx, dword [edi + 0x2cc]
test ecx, ecx
je 0x44d1ef
mov eax, dword [ecx]
push ecx
call dword [eax + 0x10]
cmp dword [edi + 0x80], 7
lea eax, [edi + 0x6c]
jbe 0x44d1fd
mov eax, dword [eax]
push eax
lea ecx, [edi + 0x2d0]
call fcn.004160a0
mov ecx, dword [edi + 0x318]
test ecx, ecx
je 0x44d21f
lea eax, [edi + 0x304]
push eax
call fcn.00401d50
mov ecx, dword [edi + 0x320]
test ecx, ecx
je 0x44d22f
mov eax, dword [ecx]
push ecx
call dword [eax + 0x10]
cmp dword [edi + 0x50], 7
lea eax, [edi + 0x3c]
jbe 0x44d23a
mov eax, dword [eax]
push eax
lea ecx, [edi + 0x324]
call fcn.004160a0
mov ecx, dword [edi + 0x36c]
test ecx, ecx
je 0x44d25c
lea eax, [edi + 0x358]
push eax
call fcn.00401d50
mov ecx, dword [edi + 0x374]
test ecx, ecx
je 0x44d26c
mov eax, dword [ecx]
push ecx
call dword [eax + 0x10]
cmp byte [edi + 0x114], 0
jne 0x44d2a1
lea ecx, [edi + 0x1d4]
call fcn.00416800
lea ecx, [edi + 0x27c]
call fcn.00416800
lea ecx, [edi + 0x2d0]
call fcn.00416800
lea ecx, [edi + 0x324]
call fcn.00416800
mov ecx, dword [ebp + 0xdd4]
cmp ecx, 0x419
sete al
mov byte [edi + 0x115], al
jne 0x44d66a
cmp byte [edi + 0xe6], 0
jne 0x44d66a
cmp byte [edi + 0x116], 0
jne 0x44d2dc
cmp dword [edi + 0x7c], 0
jne 0x44d66a
cmp byte [0x507a10], 0
je 0x44d2ff
push ecx
push 0
push str.nowarnifnobackup
push str.settings
call fcn.00426590
movzx esi, al
jmp 0x44d422
xor eax, eax
lea ecx, [ebp + 0xba8]
push 0x24
push str.SoftwaregrepWinNP3_nowarnifnobackup
mov dword [ebp + 0xba8], eax
mov dword [ebp + 0xbac], eax
mov dword [ebp + 0xbb0], eax
mov dword [ebp + 0xbb4], eax
mov dword [ebp + 0xbb8], eax
mov dword [ebp + 0xbbc], eax
call fcn.00403450
sub esp, 0xc
mov byte [ebp - 4], 0xe
lea eax, [ebp + 0xba8]
or ebx, 1
lea ecx, [ebp + 0xa70]
mov dword [ebp - 0x14], ebx
push eax
call fcn.00418ec0
mov dword [ebp + 0xab4], 0
mov dword [ebp + 0xab8], 0
mov dword [ebp + 0xac0], 0
mov dword [ebp + 0xac4], 0
mov dword [ebp + 0xac8], 0xffffffff
mov dword [ebp + 0xacc], 0
mov dword [ebp + method.CRegTypedBase_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t____class_CRegStdBase_.virtual_0], vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov dword [ebp - 4], 0xf
or ebx, 2
cmp byte [ebp + 0xab0], 0
mov dword [ebp - 0x14], ebx
je 0x44d411
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov esi, eax
cmp edx, dword [ebp + 0xac4]
jb 0x44d3ec
mov eax, dword [ebp + 0xac0]
ja 0x44d3ce
cmp esi, eax
jb 0x44d3ec
mov ecx, dword [ebp + 0xac8]
add ecx, eax
mov eax, dword [ebp + 0xacc]
adc eax, dword [ebp + 0xac4]
cmp edx, eax
jb 0x44d3f3
ja 0x44d3ec
cmp esi, ecx
jbe 0x44d3f3
mov byte [ebp + 0xab0], 0
cmp byte [ebp + 0xab0], 0
je 0x44d411
cmp byte [ebp + 0xab1], 0
jne 0x44d411
mov dword [ebp + 0xaa8], 0
jmp 0x44d41c
lea ecx, [ebp + 0xa70]
call fcn.00426a60
mov esi, dword [ebp + 0xab4]
test bl, 2
je 0x44d443
and ebx, 0xfffffffd
lea ecx, [ebp + 0xa90]
mov dword [ebp - 0x14], ebx
call fcn.004027a0
lea ecx, [ebp + 0xa78]
call fcn.004027a0
mov dword [ebp - 4], 0xa
test bl, 1
je 0x44d460
and ebx, 0xfffffffe
lea ecx, [ebp + 0xba8]
mov dword [ebp - 0x14], ebx
call fcn.004027a0
test esi, esi
jne 0x44d66a
cmp dword [edi + 0x7c], esi
jne 0x44d4d3
call fcn.00411ad0
mov edx, dword [edi + 4]
lea ecx, [ebp + 0xb78]
push 0x7d
mov esi, eax
call fcn.0041fc20
mov byte [ebp - 4], 0x10
lea edx, [ebp + 0xb78]
or ebx, 4
lea ecx, [ebp + 0xba8]
push esi
mov dword [ebp - 0x14], ebx
call fcn.004108d0
add esp, 8
or ebx, 0x40000000
mov dword [ebp - 4], 0x11
lea ecx, [ebp + 0xba8]
or ebx, 8
mov dword [ebp - 0x28], ecx
cmp dword [ebp + 0xbbc], 7
mov dword [ebp - 0x14], ebx
jbe 0x44d4e4
mov ecx, dword [ebp + 0xba8]
mov dword [ebp - 0x28], ecx
jmp 0x44d4e4
cmp dword [edi + 0x80], 7
lea eax, [edi + 0x6c]
jbe 0x44d4e1
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
cmp dword [edi + 0x68], 7
lea eax, [edi + 0x54]
mov dword [ebp - 0x24], eax
jbe 0x44d4f5
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
call fcn.00411ad0
mov edx, dword [edi + 4]
lea ecx, [ebp + 0xb48]
push 0x7c
mov esi, eax
call fcn.0041fc20
push esi
lea edx, [ebp + 0xb48]
mov dword [ebp - 4], 0x12
lea ecx, [ebp + 0xb60]
call fcn.004108d0
or ebx, 0x10000000
add esp, 8
mov dword [ebp - 0x14], ebx
mov byte [ebp - 4], 0x13
lea eax, [ebp + 0xb60]
cmp dword [ebp + 0xb74], 7
jbe 0x44d54a
mov eax, dword [ebp + 0xb60]
push dword [ebp - 0x28]
push dword [ebp - 0x24]
push eax
lea eax, [ebp + 0xb18]
push eax
call fcn.00419200
add esp, 0x10
lea ecx, [ebp + 0xb60]
call fcn.004027a0
lea ecx, [ebp + 0xb48]
call fcn.004027a0
test bl, 8
je 0x44d58c
and ebx, 0xfffffff7
lea ecx, [ebp + 0xba8]
mov dword [ebp - 0x14], ebx
call fcn.004027a0
mov dword [ebp - 4], 0xa
test bl, 4
je 0x44d5a9
and ebx, 0xfffffffb
lea ecx, [ebp + 0xb78]
mov dword [ebp - 0x14], ebx
call fcn.004027a0
cmp dword [ebp + 0xb2c], 7
lea eax, [ebp + 0xb18]
jbe 0x44d5be
mov eax, dword [ebp + 0xb18]
push 0x24
push 0x4f02bc
push eax
push dword [edi + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp + 0xb18]
cmp eax, 6
je 0x44d665
call fcn.004027a0
mov edi, dword [ebp + 0xb9c]
test edi, edi
je 0x44d655
mov ebx, dword [ebp + 0xba0]
mov esi, edi
cmp esi, ebx
je 0x44d60e
lea esp, [esp]
mov ecx, esi
call fcn.004027a0
add esi, 0x18
cmp esi, ebx
jne 0x44d600
mov ecx, dword [ebp + 0xba4]
mov eax, 0x2aaaaaab
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, edi
shl ecx, 3
cmp ecx, 0x1000
jb 0x44d64b
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4506ea
push ecx
push edi
call fcn.004accfd
add esp, 8
lea ecx, [ebp + 0xadc]
call fcn.004020e0
jmp case.0x44c801.1003
call fcn.004027a0
cmp byte [edi + 0x115], 0
je 0x44d7ea
cmp byte [edi + 0xee], 0
je 0x44d7ea
push 0x41d
lea eax, [ebp - 0x44]
mov ecx, edi
push eax
call fcn.00403140
mov byte [ebp - 4], 0x14
call fcn.00411ad0
mov edx, dword [edi + 4]
lea ecx, [ebp + 0xb48]
push 0xac
mov esi, eax
call fcn.0041fc20
push esi
lea edx, [ebp + 0xb48]
mov byte [ebp - 4], 0x15
lea ecx, [ebp + 0xb60]
call fcn.004108d0
or ebx, 0x8000000
add esp, 8
mov dword [ebp - 0x14], ebx
mov byte [ebp - 4], 0x16
lea eax, [ebp + 0xb60]
cmp dword [ebp + 0xb74], 7
jbe 0x44d6ed
mov eax, dword [ebp + 0xb60]
mov esi, dword [ebp - 0x44]
push esi
push eax
lea eax, [ebp + 0xb18]
push eax
call fcn.00419200
add esp, 0xc
lea ecx, [ebp + 0xb60]
call fcn.004027a0
lea ecx, [ebp + 0xb48]
mov byte [ebp - 4], 0x14
call fcn.004027a0
cmp dword [ebp + 0xb2c], 7
lea eax, [ebp + 0xb18]
jbe 0x44d730
mov eax, dword [ebp + 0xb18]
push 0x134
push 0x4f02bc
push eax
push dword [edi + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp + 0xb18]
cmp eax, 6
je 0x44d7d4
call fcn.004027a0
test esi, esi
je 0x44d765
push esi
call fcn.004ad06e
add esp, 4
mov edi, dword [ebp + 0xb9c]
test edi, edi
je 0x44d655
mov ebx, dword [ebp + 0xba0]
mov esi, edi
cmp esi, ebx
je 0x44d78e
nop
mov ecx, esi
call fcn.004027a0
add esi, 0x18
cmp esi, ebx
jne 0x44d780
mov ecx, dword [ebp + 0xba4]
mov eax, 0x2aaaaaab
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, edi
shl ecx, 3
cmp ecx, 0x1000
jb 0x44d64b
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4506ef
jmp 0x44d64b
call fcn.004027a0
mov byte [ebp - 4], 0xa
test esi, esi
je 0x44d7ea
push esi
call fcn.004ad06e
add esp, 4
push 0x10
mov byte [edi + 0x116], 1
call dword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov ecx, 0x507a33
and al, 1
xchg byte [ecx], al
mov eax, dword [ebp + 0xdd4]
cmp eax, 0x43c
jne 0x44d81f
mov al, 1
xchg byte [ecx], al
mov byte [edi + 0xf5], 0
jmp 0x44d83f
mov byte [edi + 0xf5], 0
cmp eax, 0x441
jne 0x44d83f
mov byte [edi + 0xf5], 1
xor al, al
xchg byte [ecx], al
mov byte [edi + 0x115], 0
cmp byte [edi + 0x115], 0
je 0x44d8aa
lea eax, [edi + 0x6c]
push eax
lea eax, [ebp + 0xae8]
push eax
call fcn.0045f050
mov esi, eax
lea ecx, [edi + 0x6c]
cmp ecx, esi
je 0x44d89f
call fcn.004027a0
mov ecx, dword [esi]
mov dword [edi + 0x6c], ecx
mov ecx, dword [esi + 4]
mov dword [edi + 0x70], ecx
mov eax, dword [esi + 8]
mov dword [edi + 0x74], eax
mov eax, dword [esi + 0xc]
mov dword [edi + 0x78], eax
mov eax, dword [esi + 0x10]
mov dword [edi + 0x7c], eax
mov eax, dword [esi + 0x14]
mov dword [edi + 0x80], eax
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp + 0xae8]
call fcn.004027a0
cmp dword [edi + 0x64], 0
je 0x44d8bc
mov al, byte [0x507a33]
mov ebx, dword [ebp - 0x14]
test al, al
je 0x44d8e2
push 0x423
push 0x424
push 0x423
push dword [edi + 8]
call dword [sym.imp.USER32.dll_CheckRadioButton]
mov ecx, edi
mov byte [edi + 0x117], 0
call fcn.00450b80
mov al, 1
mov ecx, 0x507a2e
xchg byte [ecx], al
xor al, al
mov ecx, 0x507a32
xchg byte [ecx], al
call fcn.00411ad0
mov edx, dword [edi + 4]
lea ecx, [ebp + 0xb48]
push 0x7e
mov esi, eax
call fcn.0041fc20
push esi
lea edx, [ebp + 0xb48]
mov byte [ebp - 4], 0x17
lea ecx, [ebp + 0xb60]
call fcn.004108d0
add esp, 8
lea eax, [ebp + 0xb60]
or ebx, 0x1000000
cmp dword [ebp + 0xb74], 7
jbe 0x44d93f
mov eax, dword [ebp + 0xb60]
push eax
push 1
push dword [edi + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
lea ecx, [ebp + 0xb60]
call fcn.004027a0
lea ecx, [ebp + 0xb48]
mov byte [ebp - 4], 0xa
call fcn.004027a0
call fcn.00411ad0
mov edx, dword [edi + 4]
lea ecx, [ebp + 0xb48]
push 0x7e
mov esi, eax
call fcn.0041fc20
push esi
lea edx, [ebp + 0xb48]
mov byte [ebp - 4], 0x18
lea ecx, [ebp + 0xb60]
call fcn.004108d0
add esp, 8
lea eax, [ebp + 0xb60]
or ebx, 0x800000
cmp dword [ebp + 0xb74], 7
jbe 0x44d9b0
mov eax, dword [ebp + 0xb60]
push eax
push 1
push dword [edi + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
lea ecx, [ebp + 0xb60]
call fcn.004027a0
lea ecx, [ebp + 0xb48]
mov byte [ebp - 4], 0xa
call fcn.004027a0
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 5
push 0x430
push dword [edi + 8]
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 1
push 0x40a
push 0x430
push dword [edi + 8]
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov ecx, dword [edi + 0x38]
test ecx, ecx
je 0x44da18
mov eax, dword [ecx]
push 1
push dword [edi + 8]
push ecx
call dword [eax + 0x28]
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0
push eax
push 0
push edi
push 0x45a3f0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x44da42
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x44da7a
mov al, 1
mov ecx, 0x507a32
xchg byte [ecx], al
xor al, al
mov ecx, 0x507a2e
xchg byte [ecx], al
push 0
push 0x430
push dword [edi + 8]
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 1
push 0x42f
push dword [edi + 8]
call esi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
call fcn.00495ea9
shl eax, 2
cmp byte [0x507a10], 0
mov dword [ebp - 0x1c], eax
je 0x44daa4
push ecx
push eax
push str.MaxNumOfWorker
push str.global
call fcn.00461ed0
jmp 0x44dbcb
xor eax, eax
lea ecx, [ebp + 0xba8]
push 0x22
push str.SoftwaregrepWinNP3MaxNumOfWorker
mov dword [ebp + 0xba8], eax
mov dword [ebp + 0xbac], eax
mov dword [ebp + 0xbb0], eax
mov dword [ebp + 0xbb4], eax
mov dword [ebp + 0xbb8], eax
mov dword [ebp + 0xbbc], eax
call fcn.00403450
sub esp, 0xc
mov byte [ebp - 4], 0x19
lea eax, [ebp + 0xba8]
or ebx, 0x10
lea ecx, [ebp + 0xa70]
mov dword [ebp - 0x14], ebx
push eax
call fcn.00418ec0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + 0xab4], eax
mov dword [ebp + 0xab8], eax
mov dword [ebp + 0xac0], 0
mov dword [ebp + 0xac4], 0
mov dword [ebp + 0xac8], 0xffffffff
mov dword [ebp + 0xacc], 0
mov dword [ebp + method.CRegTypedBase_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t____class_CRegStdBase_.virtual_0], vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov dword [ebp - 4], 0x1a
or ebx, 0x20
mov al, byte [ebp + 0xab0]
mov dword [ebp - 0x14], ebx
test al, al
je 0x44dbba
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, eax
mov dword [ebp - 0x1c], ecx
cmp edx, dword [ebp + 0xac4]
jb 0x44db99
mov eax, dword [ebp + 0xac0]
ja 0x44db72
cmp ecx, eax
jb 0x44db99
mov ecx, dword [ebp + 0xac8]
add ecx, eax
mov eax, dword [ebp + 0xacc]
adc eax, dword [ebp + 0xac4]
cmp edx, eax
jb 0x44db91
ja 0x44db99
cmp dword [ebp - 0x1c], ecx
ja 0x44db99
mov al, byte [ebp + 0xab0]
jmp 0x44dba1
xor al, al
mov byte [ebp + 0xab0], al
test al, al
je 0x44dbba
cmp byte [ebp + 0xab1], 0
jne 0x44dbba
mov dword [ebp + 0xaa8], 0
jmp 0x44dbc5
lea ecx, [ebp + 0xa70]
call fcn.00426a60
mov eax, dword [ebp + 0xab4]
mov dword [ebp - 0x24], eax
test bl, 0x20
je 0x44dbec
lea ecx, [ebp + 0xa90]
and ebx, 0xffffffdf
call fcn.004027a0
lea ecx, [ebp + 0xa78]
call fcn.004027a0
test bl, 0x10
je 0x44dc31
mov ecx, dword [ebp + 0xbbc]
cmp ecx, 7
jbe 0x44dc31
mov edx, dword [ebp + 0xba8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44dc27
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4506f4
push ecx
push edx
call fcn.004accfd
add esp, 8
cmp dword [ebp - 0x24], 1
jbe 0x44d008
mov al, 1
mov ebx, 0x507a2f
xchg byte [ebx], al
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0
push eax
push 0
push edi
push 0x45a550
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x44dc71
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x44d008
mov al, 1
mov ecx, 0x507a32
xchg byte [ecx], al
push 0
push 0
push 0x8004
push dword [edi + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
xor al, al
xchg byte [ebx], al
push 0
push 0x430
push dword [edi + 8]
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 1
push 0x42f
push dword [edi + 8]
call esi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x44d008
mov esi, dword [sym.imp.USER32.dll_IsDlgButtonChecked]
push 0x439
push dword [edi + 8]
call esi
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
dec eax
neg eax
sbb eax, eax
and eax, 0xfffffffb
add eax, 5
push eax
push 0x43b
push dword [edi + 8]
call ebx
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x436
push dword [edi + 8]
call esi
neg eax
push 0x43a
push dword [edi + 8]
sbb esi, esi
and esi, 0xfffffffb
add esi, 5
call ebx
push esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.0x44c801.1003
push 0x3e8
lea eax, [ebp - 0x54]
mov ecx, edi
push eax
call fcn.00403140
mov dword [ebp - 4], 0x1d
mov esi, dword [ebp - 0x54]
mov ecx, esi
lea edx, [ecx + 2]
jmp 0x44dd40
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44dd40
sub ecx, edx
lea ebx, [edi + 0x54]
sar ecx, 1
push ecx
push esi
mov ecx, ebx
call fcn.00403a40
push 0x3ff
lea eax, [ebp - 0x1c]
mov ecx, edi
push eax
call fcn.00403140
lea ecx, [ebp - 0x54]
cmp ecx, eax
je 0x44dd8e
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, esi
mov esi, ecx
mov dword [ebp - 0x54], esi
test eax, eax
je 0x44dd8e
push eax
call fcn.004ad06e
add esp, 4
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x44dd9e
push eax
call fcn.004ad06e
add esp, 4
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44dda3
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [edi + 0x6c]
call fcn.00403a40
mov ecx, edi
call fcn.00456ff0
push dword [edi + 8]
lea ecx, [ebp + 0x628]
call fcn.00428c90
mov byte [ebp - 4], 0x1e
lea ecx, [ebp + 0x674]
mov al, byte [edi + 0xf1]
mov byte [ebp + 0x655], al
mov al, byte [edi + 0xf3]
mov byte [ebp + 0x654], al
lea eax, [edi + 0x6c]
cmp ecx, eax
je 0x44de12
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x44de05
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp + 0x674]
call fcn.00403a40
lea eax, [ebp + 0x65c]
cmp eax, ebx
je 0x44de34
cmp dword [ebx + 0x14], 7
mov eax, dword [ebx + 0x10]
jbe 0x44de27
mov ebx, dword [ebx]
push eax
push ebx
lea ecx, [ebp + 0x65c]
call fcn.00403a40
mov eax, dword [edi + 4]
lea ecx, [ebp + 0x628]
push ecx
push 0x402c40
push dword [edi + 8]
mov byte [ebp + 0x648], 0
push 0x82
push eax
mov dword [ebp + 0x62c], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne 0x44dedc
lea eax, [ebp + 0xae8]
push eax
lea ecx, [ebp + 0x628]
call fcn.004429e0
push eax
lea ecx, [edi + 0x54]
call fcn.004033c0
lea ecx, [ebp + 0xae8]
call fcn.004027a0
lea eax, [ebp + 0xae8]
push eax
lea ecx, [ebp + 0x628]
call fcn.00442a00
lea ecx, [edi + 0x6c]
push eax
call fcn.004033c0
lea ecx, [ebp + 0xae8]
call fcn.004027a0
lea ecx, [edi + 0x54]
call fcn.00402810
mov ebx, dword [sym.imp.USER32.dll_SetDlgItemTextW]
push eax
push 0x3e8
push dword [edi + 8]
call ebx
lea ecx, [edi + 0x6c]
call fcn.00402810
push eax
push 0x3ff
push dword [edi + 8]
call ebx
mov eax, dword [ebp + 0x6ac]
mov dword [ebp + method.CRegexTestDlg.virtual_0], vtable.CRegexTestDlg.0
cmp eax, dword [ebp + 0x6b0]
je 0x44defa
mov dword [ebp + 0x6b0], eax
lea ecx, [ebp + 0x6ac]
call fcn.004070f0
lea ecx, [ebp + 0x68c]
call fcn.004027a0
lea ecx, [ebp + 0x674]
call fcn.004027a0
lea ecx, [ebp + 0x65c]
call fcn.004027a0
mov eax, dword [ebp + 0x634]
test eax, eax
je 0x44df41
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp + 0x634], 0
test esi, esi
je case.0x44c801.1003
push esi
call fcn.004ad06e
add esp, 4
jmp case.0x44c801.1003
mov ecx, edi
call fcn.0045eda0
jmp case.0x44c801.1003
push 0x3f4
lea eax, [ebp - 0x1c]
mov ecx, edi
push eax
call fcn.00403140
mov dword [ebp - 4], 0x1f
mov edx, dword [eax]
xor eax, eax
mov ecx, edx
mov dword [ebp + 0xb90], eax
mov dword [ebp + 0xb94], eax
mov dword [ebp + 0xb98], eax
mov dword [ebp + 0xb9c], eax
mov dword [ebp + 0xba0], eax
lea esi, [ecx + 2]
mov dword [ebp + 0xba4], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44dfa7
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp + 0xb90]
call fcn.00403450
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x44dfd7
push eax
call fcn.004ad06e
add esp, 4
xor eax, eax
lea ecx, [ebp + 0xb78]
push 2
push 0x4f0390
mov dword [ebp + 0xb78], eax
mov dword [ebp + 0xb7c], eax
mov dword [ebp + 0xb80], eax
mov dword [ebp + 0xb84], eax
mov dword [ebp + 0xb88], eax
mov dword [ebp + 0xb8c], eax
call fcn.00403450
xor eax, eax
mov byte [ebp - 4], 0x22
push 1
push 0x4ec558
lea ecx, [ebp + 0xba8]
mov dword [ebp + 0xba8], eax
mov dword [ebp + 0xbac], eax
mov dword [ebp + 0xbb0], eax
mov dword [ebp + 0xbb4], eax
mov dword [ebp + 0xbb8], eax
mov dword [ebp + 0xbbc], eax
call fcn.00403450
lea eax, [ebp + 0xb78]
mov byte [ebp - 4], 0x23
push eax
lea edx, [ebp + 0xba8]
lea ecx, [ebp + 0xb90]
call fcn.00403c70
mov byte [ebp - 4], 0x22
add esp, 4
mov ecx, dword [ebp + 0xbbc]
cmp ecx, 7
jbe 0x44e0ae
mov edx, dword [ebp + 0xba8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e0a4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4506f9
push ecx
push edx
call fcn.004accfd
add esp, 8
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp + 0xb8c]
cmp ecx, 7
jbe 0x44e0f2
mov edx, dword [ebp + 0xb78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e0e8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4506f9
push ecx
push edx
call fcn.004accfd
add esp, 8
push dword [edi + 8]
lea ecx, [ebp + 0x8f4]
call fcn.00426af0
mov byte [ebp - 4], 0x24
lea eax, [ebp + 0xb90]
cmp dword [ebp + 0xba4], 7
jbe 0x44e119
mov eax, dword [ebp + 0xb90]
push dword [ebp + 0xba0]
lea ecx, [ebp + 0x924]
push eax
call fcn.00403a40
mov eax, dword [edi + 4]
lea ecx, [ebp + 0x8f4]
push ecx
push 0x402c40
push dword [edi + 8]
mov byte [ebp + 0x914], 0
push 0x89
push eax
mov dword [ebp + 0x8f8], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne 0x44e1f3
lea eax, [ebp + 0xb48]
push eax
lea ecx, [ebp + 0x8f4]
call fcn.0041fc00
push 0x4ec558
lea ecx, [ebp + 0xb18]
mov byte [ebp - 4], 0x25
call fcn.00403410
push 0x4f0390
lea ecx, [ebp + 0xb60]
mov byte [ebp - 4], 0x26
call fcn.00403410
lea eax, [ebp + 0xb18]
mov byte [ebp - 4], 0x27
push eax
lea edx, [ebp + 0xb60]
lea ecx, [ebp + 0xb48]
call fcn.00403c70
add esp, 4
lea ecx, [ebp + 0xb60]
call fcn.004027a0
lea ecx, [ebp + 0xb18]
call fcn.004027a0
lea ecx, [ebp + 0xb48]
call fcn.00402810
push eax
push 0x3f4
push dword [edi + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
lea ecx, [ebp + 0xb48]
call fcn.004027a0
push 0x3f4
push dword [edi + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp + 0x944]
mov dword [ebp + method.CMultiLineEditDlg.virtual_0], vtable.CMultiLineEditDlg.0
cmp eax, dword [ebp + 0x948]
je 0x44e226
mov dword [ebp + 0x948], eax
lea ecx, [ebp + 0x944]
call fcn.004070f0
lea ecx, [ebp + 0x924]
call fcn.004027a0
mov eax, dword [ebp + 0x900]
test eax, eax
je 0x44e257
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp + 0x900], 0
mov ecx, dword [ebp + 0xba4]
cmp ecx, 7
jbe case.0x44c801.1003
mov edx, dword [ebp + 0xb90]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e291
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4506f9
push ecx
push edx
call fcn.004accfd
add esp, 8
jmp case.0x44c801.1003
mov dword [ebp], ebx
lea eax, [ebp + 0x194]
mov dword [ebp + 0x324], ebx
mov ecx, 0x190
mov byte [eax], bl
lea eax, [eax + 1]
sub ecx, 1
jne 0x44e2b4
mov ecx, 0x190
lea eax, [ebp + 4]
mov byte [eax], bl
lea eax, [eax + 1]
sub ecx, 1
jne 0x44e2c6
mov ecx, 0x190
mov eax, 0x507860
lea ebx, [ebx]
mov byte [eax], bl
lea eax, [eax + 1]
sub ecx, 1
jne 0x44e2e0
push 0x3f4
lea eax, [ebp - 0x20]
mov ecx, edi
push eax
call fcn.00403140
mov dword [ebp - 4], 0x28
mov esi, dword [ebp - 0x20]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x44e32d
push 0x4ec558
push esi
call fcn.004af6aa
add esp, 8
test eax, eax
je 0x44e328
xor ecx, ecx
mov word [eax], cx
jmp 0x44e32d
xor eax, eax
mov word [esi], ax
push 0x4f0398
push esi
call fcn.004af6aa
add esp, 8
test eax, eax
je 0x44e3f5
call fcn.00411ad0
push 0x98
push dword [edi + 4]
lea ecx, [ebp + 0x9b0]
mov esi, eax
call fcn.0041fdb0
push eax
lea eax, [ebp + 0x998]
mov byte [ebp - 4], 0x29
push eax
mov ecx, esi
call fcn.00410840
mov ecx, eax
mov byte [ebp - 4], 0x2a
call fcn.00402810
mov ebx, eax
call fcn.00411ad0
push 0x99
push dword [edi + 4]
lea ecx, [ebp + 0x9c8]
mov esi, eax
call fcn.0041fdb0
push eax
lea eax, [ebp + 0xae8]
mov byte [ebp - 4], 0x2b
push eax
mov ecx, esi
call fcn.00410840
mov ecx, eax
call fcn.00402810
push ecx
push ebx
push eax
push ecx
mov ecx, edi
call fcn.004031b0
lea ecx, [ebp + 0xae8]
call fcn.004027a0
lea ecx, [ebp + 0x9c8]
call fcn.004027a0
lea ecx, [ebp + 0x998]
call fcn.004027a0
lea ecx, [ebp + 0x9b0]
call fcn.004027a0
lea ecx, [ebp - 0x20]
call fcn.004033b0
jmp case.0x44c801.1003
mov dword [ebp + 0xb9c], 0
mov dword [ebp + 0xba0], 0
mov dword [ebp + 0xba4], 0
mov byte [ebp - 4], 0x2c
call fcn.00411ad0
push 0x7f
push dword [edi + 4]
lea ecx, [ebp + 0x9c8]
mov ebx, eax
call fcn.0041fdb0
push eax
lea eax, [ebp + 0xae8]
mov byte [ebp - 4], 0x2d
push eax
mov ecx, ebx
call fcn.00410840
mov ecx, eax
call fcn.00402810
push eax
lea ecx, [ebp]
call fcn.00403980
lea ecx, [ebp + 0xae8]
call fcn.004027a0
lea ecx, [ebp + 0x9c8]
mov byte [ebp - 4], 0x2c
call fcn.004027a0
mov ebx, dword [edi + 8]
lea eax, [edi + 0x3c]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004024d0
lea eax, [ebp + 0xb9c]
push eax
push ebx
lea ecx, [ebp]
call fcn.00403520
cmp eax, 2
jne 0x44e565
lea ecx, [ebp + 0xa40]
call fcn.00403500
mov byte [ebp - 4], 0x2e
mov ebx, dword [ebp + 0xb9c]
mov eax, dword [ebp + 0xba0]
cmp ebx, eax
je 0x44e50e
jmp 0x44e4c0
cmp dword [ebp + 0xa50], 0
lea ecx, [ebp + 0xa40]
jne 0x44e4eb
cmp ecx, ebx
je 0x44e507
push dword [ebx + 0x10]
mov ecx, ebx
call fcn.00402810
push eax
lea ecx, [ebp + 0xa40]
call fcn.00403a40
jmp 0x44e501
push 0x4ec558
call fcn.00405900
push ebx
lea ecx, [ebp + 0xa40]
call fcn.00404a00
mov eax, dword [ebp + 0xba0]
add ebx, 0x18
cmp ebx, eax
jne 0x44e4c0
cmp dword [ebp + 0xa54], 7
lea eax, [ebp + 0xa40]
jbe 0x44e523
mov eax, dword [ebp + 0xa40]
push eax
push 0x3f4
push dword [edi + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
lea ecx, [edi + 0x3c]
lea eax, [ebp + 0xa40]
cmp ecx, eax
je 0x44e55a
cmp dword [ebp + 0xa54], 7
jbe 0x44e54e
mov eax, dword [ebp + 0xa40]
push dword [ebp + 0xa50]
push eax
call fcn.00403a40
lea ecx, [ebp + 0xa40]
call fcn.004027a0
lea ecx, [ebp + 0xb9c]
call fcn.004020e0
jmp 0x44df41
cmp dword [ebp + 0xdd8], 0x300
jne case.0x44c801.1003
lea ecx, [edi + 0x324]
call fcn.00401d20
test eax, 0x100
je 0x44e5a4
push 0x21
lea ecx, [edi + 0x324]
call fcn.00401ce0
push 0x3e8
mov ecx, edi
call fcn.00403120
mov dword [ebp - 0x1c], eax
mov ecx, edi
push 0x3f4
lea eax, [ebp - 0x20]
push eax
call fcn.00403140
mov esi, dword [ebp - 0x20]
push esi
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
setne bl
mov byte [ebp - 0x38], bl
test eax, eax
jne 0x44e5ed
push 0x7c
push esi
call fcn.004af5d8
add esp, 8
test eax, eax
je 0x44e5ed
mov bl, 1
mov byte [ebp - 0x38], bl
push 0x3f3
push dword [edi + 8]
mov byte [ebp - 0x24], bl
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov ebx, dword [ebp - 0x38]
mov ecx, edi
push ebx
push 0x3ed
mov dword [ebp - 0x28], eax
call fcn.004030b0
push ebx
push 0x3ee
mov ecx, edi
call fcn.004030b0
test bl, bl
je 0x44e63b
cmp byte [edi + 0xc8], 0
jne 0x44e63b
push 1
push 0x3ef
mov ecx, edi
call fcn.004030b0
jmp 0x44e64f
push 0
push 0x3ef
mov ecx, edi
call fcn.004030b0
cmp byte [ebp - 0x38], 0
je 0x44e65c
cmp byte [edi + 0xc8], 0
jne 0x44e65c
mov al, 1
jmp 0x44e65e
xor al, al
push eax
push 0x3f0
mov ecx, edi
call fcn.004030b0
push ebx
push 0x3f1
mov ecx, edi
call fcn.004030b0
push ebx
push 0x3f2
mov ecx, edi
call fcn.004030b0
push ebx
push 0x3f3
mov ecx, edi
call fcn.004030b0
push ebx
push 0x444
mov ecx, edi
call fcn.004030b0
cmp byte [ebp - 0x38], 0
je 0x44e774
cmp dword [ebp - 0x1c], 0
jle 0x44e774
push 1
push 0x41a
mov ecx, edi
call fcn.004030b0
push dword [ebp - 0x24]
mov ecx, edi
push 0x410
call fcn.004030b0
mov eax, 1
push eax
push 0x413
mov ecx, edi
call fcn.004030b0
push ebx
push 0x416
mov ecx, edi
call fcn.004030b0
push ebx
push 0x418
mov ecx, edi
call fcn.004030b0
push 0xc8
lea eax, [ebp + 0x8b8]
push 0
push eax
call fcn.004affe0
add esp, 0xc
lea eax, [ebp + 0x8b8]
push 0
push 0x28
push esi
push eax
call dword [sym.imp.SHLWAPI.dll_PathCompactPathExW]
push 0x208
lea eax, [ebp + 0xbc0]
push 0
push eax
call fcn.004affe0
lea eax, [ebp + 0x8b8]
push eax
push str.grepWinNP3_:__s
lea eax, [ebp + 0xbc0]
push 0x104
push eax
call fcn.00418e70
add esp, 0x1c
lea eax, [ebp + 0xbc0]
push eax
push dword [edi + 8]
call dword [sym.imp.USER32.dll_SetWindowTextW]
lea ecx, [ebp - 0x20]
call fcn.004033b0
jmp case.0x44c801.1003
push 0
push 0x41a
mov ecx, edi
call fcn.004030b0
push ebx
push 0x410
mov ecx, edi
call fcn.004030b0
cmp byte [ebp - 0x38], 0
jne 0x44e6d0
cmp dword [ebp - 0x28], 1
je 0x44e6d0
xor al, al
jmp 0x44e6d5
cmp dword [ebp + 0xdd8], ebx
jne case.0x44c801.1003
push 0x3f4
lea eax, [ebp - 0x20]
mov ecx, edi
push eax
call fcn.00403140
push 0x3f3
push dword [edi + 8]
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov esi, dword [ebp - 0x20]
mov ebx, eax
push esi
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x44e7fc
push 0x7c
push esi
call fcn.004af5d8
add esp, 8
test eax, eax
jne 0x44e7fc
cmp ebx, 1
je 0x44e7fc
xor al, al
jmp 0x44e7fe
mov al, 1
push eax
push 0x413
mov ecx, edi
call fcn.004030b0
lea ecx, [ebp - 0x20]
call fcn.004033b0
jmp case.0x44c801.1003
push 0x3ed
push dword [edi + 8]
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
setne al
sete cl
movzx eax, al
push eax
mov byte [edi + 0xc8], cl
mov ecx, edi
push 0x3ef
call fcn.004030b0
cmp byte [edi + 0xc8], bl
mov ecx, edi
sete al
movzx eax, al
push eax
push 0x3f0
call fcn.004030b0
jmp case.0x44c801.1003
cmp dword [ebp + 0xdd8], 0x300
jne case.0x44c801.1003
xor eax, eax
push 0x14
mov dword [ebp + 0xa18], eax
mov dword [ebp + 0xa1c], eax
mov dword [ebp + 0xa20], eax
mov dword [ebp + 0xa24], eax
mov dword [ebp + 0xa28], eax
mov dword [ebp + 0xa2c], eax
mov dword [ebp + 0xa30], eax
mov dword [ebp + 0xa34], eax
mov dword [ebp + 0xa38], eax
mov dword [ebp + 0xa3c], eax
lea eax, [ebp + 0xa18]
push eax
push 0x3f0
push dword [edi + 8]
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
lea ecx, [ebp + 0xa18]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44e8d1
mov eax, dword [edi + 8]
sub ecx, edx
sar ecx, 1
je 0x44e901
push 0x3ed
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne case.0x44c801.1003
push 0x3ee
jmp 0x44e91b
push 0x3ee
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne case.0x44c801.1003
push 0x3ed
push 0x3ee
push 0x3ed
push dword [edi + 8]
call dword [sym.imp.USER32.dll_CheckRadioButton]
jmp case.0x44c801.1003
mov ecx, edi
call fcn.0045dd60
mov esi, dword [sym.imp.USER32.dll_IsDlgButtonChecked]
push 0x3ea
push dword [edi + 8]
call esi
test eax, eax
mov ecx, edi
sete al
movzx eax, al
push eax
push 0x404
call fcn.004030b0
push 0x3ea
push dword [edi + 8]
call esi
test eax, eax
mov ecx, edi
setne al
movzx eax, al
push eax
push 0x3eb
call fcn.004030b0
jmp case.0x44c801.1003
push 0x3e8
lea eax, [ebp - 0x4c]
mov ecx, edi
push eax
call fcn.00403140
mov dword [ebp - 4], 0x2f
mov esi, dword [ebp - 0x4c]
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44e9a2
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [edi + 0x54]
call fcn.00403a40
push 0x3ff
lea eax, [ebp - 0x1c]
mov ecx, edi
push eax
call fcn.00403140
lea ecx, [ebp - 0x4c]
cmp ecx, eax
je 0x44e9ee
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, esi
mov esi, ecx
mov dword [ebp - 0x4c], esi
test eax, eax
je 0x44e9ee
push eax
call fcn.004ad06e
add esp, 4
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x44e9fe
push eax
call fcn.004ad06e
add esp, 4
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44ea03
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [edi + 0x6c]
call fcn.00403a40
push 0x413
lea eax, [ebp - 0x1c]
mov ecx, edi
push eax
call fcn.00403140
lea ecx, [ebp - 0x4c]
cmp ecx, eax
je 0x44ea4f
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, esi
mov esi, ecx
mov dword [ebp - 0x4c], esi
test eax, eax
je 0x44ea4f
push eax
call fcn.004ad06e
add esp, 4
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x44ea5f
push eax
call fcn.004ad06e
add esp, 4
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44ea64
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [edi + 0xac]
call fcn.00403a40
push 0x410
lea eax, [ebp - 0x1c]
mov ecx, edi
push eax
call fcn.00403140
lea ecx, [ebp - 0x4c]
cmp ecx, eax
je 0x44eab3
mov ecx, dword [eax]
mov dword [eax], 0
mov eax, esi
mov esi, ecx
mov dword [ebp - 0x4c], esi
test eax, eax
je 0x44eab3
push eax
call fcn.004ad06e
add esp, 4
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x44eac3
push eax
call fcn.004ad06e
add esp, 4
mov ecx, esi
lea edx, [ecx + 2]
jmp 0x44ead0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44ead0
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [edi + 0x90]
call fcn.00403a40
push 0x3e9
push dword [edi + 8]
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
push dword [edi + 8]
cmp eax, 1
lea ecx, [ebp + 0x9f0]
sete al
mov byte [edi + 0xc5], al
call fcn.00427110
push ecx
mov byte [ebp - 4], 0x30
mov eax, dword [edi + 4]
push 0x402c40
push dword [edi + 8]
mov byte [ebp + 0xa10], 0
push 0x83
push eax
mov dword [ebp + 0x9f4], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne 0x44ed6a
lea ecx, [ebp + 0xa84]
call fcn.0041c330
lea ecx, [ebp + 0x8dc]
call fcn.0041c220
lea eax, [ebp + 0xae8]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp + 0x9f0]
call fcn.0041fc00
push eax
lea ecx, [ebp + 0x8dc]
call fcn.004033c0
lea ecx, [ebp + 0xae8]
call fcn.004027a0
cmp byte [ebp + 0xa38], 0
je 0x44eba8
lea eax, [edi + 0x3c]
push eax
lea ecx, [ebp + 0x9c8]
call fcn.004024d0
mov ebx, 0x100
jmp 0x44ebbd
push 0x4eb5ac
lea ecx, [ebp + 0xae8]
call fcn.00403410
mov ebx, 0x200
push eax
lea ecx, [ebp + 0x924]
call fcn.004033c0
test ebx, 0x200
je 0x44ebe2
lea ecx, [ebp + 0xae8]
and ebx, 0xfffffdff
call fcn.004027a0
mov dword [ebp - 4], 0x32
test ebx, 0x100
je 0x44ebfc
lea ecx, [ebp + 0x9c8]
call fcn.004027a0
lea eax, [edi + 0x54]
push eax
lea ecx, [ebp + 0x8f4]
call fcn.004039f0
lea eax, [edi + 0x6c]
push eax
lea ecx, [ebp + 0x90c]
call fcn.004039f0
mov al, byte [edi + 0xc5]
mov ebx, dword [sym.imp.USER32.dll_IsDlgButtonChecked]
push 0x412
push dword [edi + 8]
mov byte [ebp + 0x93c], al
call ebx
push 0x41b
push dword [edi + 8]
cmp eax, 1
sete byte [ebp + 0x93d]
call ebx
push 0x405
push dword [edi + 8]
cmp eax, 1
sete byte [ebp + 0x93e]
call ebx
push 0x426
push dword [edi + 8]
cmp eax, 1
sete byte [ebp + 0x93f]
call ebx
push 0x41d
push dword [edi + 8]
cmp eax, 1
sete byte [ebp + 0x940]
call ebx
push 0x3f1
push dword [edi + 8]
cmp eax, 1
sete byte [ebp + 0x942]
call ebx
push 0x3f3
push dword [edi + 8]
cmp eax, 1
sete byte [ebp + 0x944]
call ebx
push 0x444
push dword [edi + 8]
cmp eax, 1
sete byte [ebp + 0x945]
call ebx
push 0x3f2
push dword [edi + 8]
cmp eax, 1
sete byte [ebp + 0x946]
call ebx
push 0x41a
push dword [edi + 8]
cmp eax, 1
sete byte [ebp + 0x947]
call ebx
cmp eax, 1
lea ecx, [ebp + 0x94c]
lea eax, [edi + 0xac]
push eax
sete byte [ebp + 0x948]
call fcn.004039f0
lea eax, [edi + 0x90]
push eax
lea ecx, [ebp + 0x964]
call fcn.004039f0
push 0x416
push dword [edi + 8]
call ebx
cmp eax, 1
lea ecx, [ebp + 0xa84]
sete byte [ebp + 0x97c]
call fcn.0041c620
lea eax, [ebp + 0x8dc]
push eax
lea ecx, [ebp + 0xa84]
call fcn.0041c690
lea ecx, [ebp + 0xa84]
call fcn.0041c660
lea ecx, [ebp + 0x8dc]
call fcn.0041c2f0
lea ecx, [ebp + 0xa84]
call fcn.0041c3d0
lea ecx, [ebp + 0xa20]
mov dword [ebp + method.CNameDlg.virtual_0], vtable.CNameDlg.0
call fcn.004027a0
mov eax, dword [ebp + 0x9fc]
test eax, eax
je 0x44df41
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp + 0x9fc], 0
jmp 0x44df41
mov ecx, dword [edi + 0x34]
test ecx, ecx
jne 0x44edc7
mov edx, edi
lea ecx, [ebp - 0x1c]
call fcn.004629e0
push eax
lea ecx, [edi + 0x34]
call fcn.00462a50
lea ecx, [ebp - 0x1c]
call fcn.0040de10
jmp 0x44edcc
call fcn.00420de0
mov esi, dword [edi + 0x34]
mov edx, dword [edi + 8]
mov ecx, dword [edi + 4]
mov eax, dword [esi + 8]
test eax, eax
jne 0x44edf5
push esi
push 0x402c40
push edx
push 0x84
push ecx
mov dword [esi + 4], ecx
call dword [sym.imp.USER32.dll_CreateDialogParamW]
mov dword [esi + 8], eax
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [esi + 8]
call dword [sym.imp.USER32.dll_SetFocus]
jmp case.0x44c801.1003
mov ecx, edi
call fcn.00450b80
xor eax, eax
lea ecx, [ebp + 0xa28]
push 0xe
push str.FillResultList
mov dword [ebp + 0xa28], eax
mov dword [ebp + 0xa2c], eax
mov dword [ebp + 0xa30], eax
mov dword [ebp + 0xa34], eax
mov dword [ebp + 0xa38], eax
mov dword [ebp + 0xa3c], eax
call fcn.00403450
lea eax, [ebp + 0xa20]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
push 0x7f8a
push 0
mov dword [ebp - 4], 0x34
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
lea eax, [ebp + 0xba0]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [ebp + 0xba4]
push dword [ebp + 0xba0]
call dword [sym.imp.USER32.dll_SetCursorPos]
push 0x423
push dword [edi + 8]
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
push 0x3f6
push dword [edi + 8]
mov esi, eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0
mov ebx, eax
push 0xb
push ebx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp esi, 1
jne 0x44eee3
mov ecx, dword [edi + 0x120]
mov eax, 0x4ec4ec4f
sub ecx, dword [edi + 0x11c]
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
jmp 0x44eef2
mov eax, dword [edi + 0x12c]
sub eax, dword [edi + 0x128]
sar eax, 3
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 3
push eax
push 0x102f
push ebx
call esi
mov ecx, edi
call fcn.0045e8c0
push 0
push 1
push 0xb
push ebx
call esi
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
lea eax, [ebp + 0xba0]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [ebp + 0xba4]
push dword [ebp + 0xba0]
call dword [sym.imp.USER32.dll_SetCursorPos]
push 0x485
push 0
push 0
push ebx
call dword [sym.imp.USER32.dll_RedrawWindow]
lea ecx, [ebp + 0xa20]
call fcn.00441cb0
jmp case.0x44c801.1003
push dword [edi + 8]
lea ecx, [ebp + 0x808]
call fcn.00489d70
lea ecx, [ebp + 0x808]
mov dword [ebp - 4], 0x35
mov eax, dword [edi + 4]
push ecx
push 0x402c40
push dword [edi + 8]
mov byte [ebp + 0x828], 0
push 0x8a
push eax
mov dword [ebp + 0x80c], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp byte [0x507a10], 0
je 0x44efc3
push ecx
push 0
push str.backupinfolder
push str.settings
call fcn.00426590
jmp 0x44efdf
lea ecx, [edi + 0xc60]
call fcn.00426a60
lea ecx, [edi + 0xc60]
call fcn.004267b0
cmp dword [eax], 0
setne al
mov byte [edi + 0xe8], al
call fcn.00491660
call fcn.00491660
mov esi, dword [eax + 0xd0]
call fcn.00491660
push esi
add eax, 0x90
push eax
push dword [edi + 8]
call fcn.00491de0
call fcn.00411ad0
push dword [edi + 8]
mov ecx, eax
call fcn.00410960
lea ecx, [ebp + 0x808]
call fcn.0048a0f0
jmp case.0x44c801.1003
lea ebx, [ecx - 0x425]
mov ecx, edi
neg ebx
lea eax, [ebp - 0x20]
sbb ebx, ebx
and ebx, 0x17
add ebx, 0x3e8
push ebx
push eax
mov dword [ebp - 0x48], ebx
call fcn.00403140
mov dword [ebp - 4], 0x36
xor eax, eax
mov esi, dword [ebp - 0x20]
mov ecx, esi
mov dword [ebp + 0xb30], eax
mov dword [ebp + 0xb34], eax
mov dword [ebp + 0xb38], eax
mov dword [ebp + 0xb3c], eax
lea edx, [ecx + 2]
mov dword [ebp + 0xb40], eax
mov dword [ebp + 0xb44], eax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44f080
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp + 0xb30]
call fcn.00403450
cmp dword [ebp + 0xdd4], 0x425
jne 0x44f0fb
mov dword [ebp + 0xae0], 0
mov dword [ebp + 0xae4], 0
push 0
push 0x4f03f4
push 0x4f03c0
lea ecx, [ebp + 0xae0]
mov byte [ebp - 4], 0x39
call fcn.0042a940
mov edx, dword [ebp + 0xba4]
mov eax, 0x400
mov dword [ebp - 0x28], eax
mov ecx, 0x400
mov eax, dword [ebp + 0xae0]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0xae4]
jmp 0x44f146
mov dword [ebp + 0xba0], 0
mov dword [ebp + 0xba4], 0
push 0
push 0x4f0404
push 0x4f03f8
lea ecx, [ebp + 0xba0]
mov dword [ebp - 4], 0x3b
call fcn.0042a940
mov eax, dword [ebp + 0xba0]
mov ecx, 0x800
mov edx, dword [ebp + 0xba4]
mov dword [ebp - 0x24], eax
mov eax, edx
mov dword [ebp - 0x28], ecx
test eax, eax
je 0x44f14e
lock inc dword [eax + 4]
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], eax
mov dword [ebp - 4], 0x3c
mov edi, dword [ebp - 0x44]
test ecx, 0x800
je 0x44f1a1
and ecx, 0xfffff7ff
mov dword [ebp - 0x28], ecx
test edx, edx
je 0x44f1a1
or ecx, 0xffffffff
mov eax, ecx
lock xadd dword [edx + 4], eax
jne 0x44f1a4
mov eax, dword [edx]
mov ecx, edx
call dword [eax]
mov edx, dword [ebp + 0xba4]
or ecx, 0xffffffff
mov eax, ecx
lock xadd dword [edx + 8], eax
jne 0x44f1a4
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 4]
or ecx, 0xffffffff
test dword [ebp - 0x28], 0x400
je 0x44f1db
mov edx, dword [ebp + 0xae4]
test edx, edx
je 0x44f1db
mov eax, ecx
lock xadd dword [edx + 4], eax
jne 0x44f1db
mov eax, dword [edx]
mov ecx, edx
call dword [eax]
mov ecx, dword [ebp + 0xae4]
or eax, 0xffffffff
lock xadd dword [ecx + 8], eax
jne 0x44f1db
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x3e
lea edx, [ebp + 0xb30]
mov ecx, dword [ebp + 0xb30]
xor eax, eax
cmp dword [ebp + 0xb44], 7
mov dword [ebp + 0xb00], eax
mov dword [ebp + 0xb04], eax
mov dword [ebp + 0xb08], eax
mov dword [ebp + 0xb0c], eax
mov dword [ebp + 0xb10], eax
mov dword [ebp + 0xb14], 7
mov word [ebp + 0xb00], ax
mov dword [ebp - 0x70], 8
jbe 0x44f22e
mov edx, ecx
mov eax, dword [ebp + 0xb40]
lea edx, [edx + eax*2]
lea eax, [ebp + 0xb30]
jbe 0x44f241
mov eax, ecx
push 0x2000000
push str._r_n
push edx
push eax
lea eax, [ebp + 0xb00]
push eax
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x58]
call fcn.00465ce0
add esp, 0x14
lea ecx, [ebp + 0xb30]
call fcn.004027a0
mov eax, dword [ebp + 0xb00]
lea ecx, [ebp + 0xb00]
mov dword [ebp + 0xb30], eax
mov eax, dword [ebp + 0xb04]
mov dword [ebp + 0xb34], eax
mov eax, dword [ebp + 0xb08]
mov dword [ebp + 0xb38], eax
mov eax, dword [ebp + 0xb0c]
mov dword [ebp + 0xb3c], eax
mov eax, dword [ebp + 0xb10]
mov dword [ebp + 0xb40], eax
mov eax, dword [ebp + 0xb14]
mov dword [ebp + 0xb44], eax
xor eax, eax
mov dword [ebp + 0xb10], 0
mov dword [ebp + 0xb14], 7
mov word [ebp + 0xb00], ax
call fcn.004027a0
mov ecx, dword [ebp - 0x5c]
test ecx, ecx
je 0x44f304
or eax, 0xffffffff
lock xadd dword [ecx + 4], eax
jne 0x44f304
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x5c]
or eax, 0xffffffff
lock xadd dword [ecx + 8], eax
jne 0x44f304
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0x37
jmp 0x44f323
push dword [edi + 8]
lea ecx, [ebp + 0x8f4]
call fcn.00426af0
mov byte [ebp - 4], 0x40
lea eax, [ebp + 0xb30]
cmp dword [ebp + 0xb44], 7
jbe 0x44f34a
mov eax, dword [ebp + 0xb30]
push dword [ebp + 0xb40]
lea ecx, [ebp + 0x924]
push eax
call fcn.00403a40
mov eax, dword [edi + 4]
lea ecx, [ebp + 0x8f4]
push ecx
push 0x402c40
push dword [edi + 8]
mov byte [ebp + 0x914], 0
push 0x89
push eax
mov dword [ebp + 0x8f8], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne 0x44f48e
lea eax, [ebp + 0x924]
push eax
lea ecx, [ebp + 0xba8]
call fcn.004024d0
mov dword [ebp + 0xba0], 0
mov dword [ebp + 0xba4], 0
push 0
push 0x4f0410
push str._r_n
lea ecx, [ebp + 0xba0]
mov byte [ebp - 4], 0x43
call fcn.0042a940
cmp dword [ebp + 0xdd4], 0x425
lea eax, [ebp + 0xba0]
mov byte [ebp - 4], 0x44
lea edx, [ebp + 0xba8]
push 0x2000000
lea ecx, [ebp + 0xae8]
jne 0x44f3ff
push str.__:_n_r_n_n_r_
jmp 0x44f404
push 0x4f03f8
push eax
call fcn.00462a80
add esp, 0xc
lea ecx, [ebp + 0xba8]
push eax
call fcn.004033c0
lea ecx, [ebp + 0xae8]
call fcn.004027a0
mov ecx, dword [ebp + 0xba4]
test ecx, ecx
je 0x44f463
or eax, 0xffffffff
lock xadd dword [ecx + 4], eax
jne 0x44f463
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp + 0xba4]
or eax, 0xffffffff
lock xadd dword [ecx + 8], eax
dec eax
jne 0x44f463
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x44f463
cmp dword [ebp + 0xbbc], 7
lea eax, [ebp + 0xba8]
jbe 0x44f478
mov eax, dword [ebp + 0xba8]
push eax
push ebx
push dword [edi + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
lea ecx, [ebp + 0xba8]
call fcn.004027a0
push ebx
push dword [edi + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp + 0x944]
mov dword [ebp + method.CMultiLineEditDlg.virtual_0], vtable.CMultiLineEditDlg.0
cmp eax, dword [ebp + 0x948]
je 0x44f4bd
mov dword [ebp + 0x948], eax
lea ecx, [ebp + 0x944]
call fcn.004070f0
lea ecx, [ebp + 0x924]
call fcn.004027a0
mov eax, dword [ebp + 0x900]
test eax, eax
je 0x44f4ee
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp + 0x900], 0
mov ecx, dword [ebp + 0xb44]
cmp ecx, 7
jbe 0x44f52e
mov edx, dword [ebp + 0xb30]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44f524
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4506fe
push ecx
push edx
call fcn.004accfd
add esp, 8
xor eax, eax
mov dword [ebp + 0xb40], 0
mov dword [ebp + 0xb44], 7
mov word [ebp + 0xb30], ax
jmp 0x44df41
mov ecx, dword [edi + 0x370]
test ecx, ecx
je 0x44f58b
mov eax, dword [ecx]
push 0x121
push ecx
call dword [eax + 0x14]
mov ecx, dword [edi + 0x36c]
test ecx, ecx
je 0x44f57b
lea eax, [edi + 0x358]
push eax
call fcn.00401d50
mov ecx, dword [edi + 0x374]
test ecx, ecx
je 0x44f58b
mov eax, dword [ecx]
push ecx
call dword [eax + 0x10]
push 0x3f4
push dword [edi + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
push 0
push 0x28
push 0x100
push 0x3f4
push dword [edi + 8]
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
jmp case.0x44c801.1003
mov ecx, dword [edi + 0x274]
test ecx, ecx
je 0x44f5f7
mov eax, dword [ecx]
push 0x121
push ecx
call dword [eax + 0x14]
mov ecx, dword [edi + 0x270]
test ecx, ecx
je 0x44f5e7
lea eax, [edi + 0x25c]
push eax
call fcn.00401d50
mov ecx, dword [edi + 0x278]
test ecx, ecx
je 0x44f5f7
mov eax, dword [ecx]
push ecx
call dword [eax + 0x10]
push 0x413
push dword [edi + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
push 0
push 0x28
push 0x100
push 0x413
push dword [edi + 8]
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
jmp case.0x44c801.1003
mov ecx, dword [edi + 0x220]
test ecx, ecx
je 0x44f663
mov eax, dword [ecx]
push 0x121
push ecx
call dword [eax + 0x14]
mov ecx, dword [edi + 0x21c]
test ecx, ecx
je 0x44f653
lea eax, [edi + 0x208]
push eax
call fcn.00401d50
mov ecx, dword [edi + 0x224]
test ecx, ecx
je 0x44f663
mov eax, dword [ecx]
push ecx
call dword [eax + 0x10]
push 0x410
push dword [edi + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
push 0
push 0x28
push 0x100
push 0x410
push dword [edi + 8]
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
jmp case.0x44c801.1003
cmp dword [ebp + 0xdd8], 0x300
jne case.0x44c801.1003
lea ecx, [edi + 0x1d4]
call fcn.00401d20
test eax, 0x100
je 0x44f6c3
push 0x21
lea ecx, [edi + 0x1d4]
call fcn.00401ce0
mov ecx, edi
call fcn.0045dd60
jmp case.0x44c801.1003
cmp dword [ebp + 0xdd8], 0x300
jne case.0x44c801.1003
lea ecx, [edi + 0x228]
call fcn.00401d20
test eax, 0x100
je 0x44f6fe
push 0x21
lea ecx, [edi + 0x228]
call fcn.00401ce0
mov ecx, edi
call fcn.0045dd60
jmp case.0x44c801.1003
cmp dword [ebp + 0xdd8], 0x300
jne case.0x44c801.1003
lea ecx, [edi + 0x2d0]
call fcn.00401d20
test eax, 0x100
je case.0x44c801.1003
push 0x21
lea ecx, [edi + 0x2d0]
call fcn.00401ce0
jmp case.0x44c801.1003
lea ecx, [ebp + 0xb48]
call fcn.00415cb0
mov dword [ebp - 4], 0x46
mov dword [ebp - 0x30], 0
lea eax, [ebp - 0x30]
push eax
push 0x4ef3cc
push 1
push 0
push 0x4e27b0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x44f77e
mov dword [ebp - 0x30], 0
mov ecx, eax
mov byte [ebp - 4], 0x47
call fcn.0045ec40
test al, al
jne 0x45064c
lea ecx, [ebp - 0x30]
call fcn.0045fcb0
lea edx, [ebp - 0x6c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov ecx, eax
call fcn.0045ec40
test al, al
jne 0x45064c
lea ecx, [ebp - 0x30]
call fcn.0045fcb0
mov ecx, dword [eax]
mov edx, dword [ecx + 0x24]
mov ecx, dword [ebp - 0x6c]
or ecx, 0x42
push ecx
push eax
call edx
mov ecx, eax
call fcn.0045ec40
test al, al
jne 0x45064c
lea ecx, [ebp - 0x30]
call fcn.0045fcb0
mov dword [ebp - 0x1c], eax
mov ecx, dword [eax]
mov ebx, dword [ecx + 0x44]
call fcn.00411ad0
push 0xa4
push dword [edi + 4]
lea ecx, [ebp + 0x5b0]
mov esi, eax
call fcn.0041fdb0
push eax
lea eax, [ebp + 0x5e0]
mov byte [ebp - 4], 0x4a
push eax
mov ecx, esi
call fcn.00410840
mov ecx, eax
mov byte [ebp - 4], 0x4b
call fcn.00402810
push eax
push dword [ebp - 0x1c]
call ebx
lea ecx, [ebp + 0x5e0]
mov esi, eax
call fcn.004027a0
lea ecx, [ebp + 0x5b0]
mov byte [ebp - 4], 0x47
call fcn.004027a0
mov ecx, esi
call fcn.0045ec40
test al, al
jne 0x45064c
lea ecx, [ebp - 0x30]
mov dword [ebp + 0xb08], str.Text_files
mov dword [ebp + 0xb0c], str..txt__.lst
mov dword [ebp + 0xb10], str.All_types
mov dword [ebp + 0xb14], 0x4eb9d0
call fcn.0045fcb0
lea edx, [ebp + 0xb08]
push edx
push 2
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov ecx, eax
call fcn.0045ec40
test al, al
jne 0x45064c
lea ecx, [ebp - 0x30]
call fcn.0045fcb0
push 0x4ed9d4
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov ecx, eax
call fcn.0045ec40
test al, al
jne 0x45064c
lea ecx, [ebp - 0x30]
call fcn.0045fcb0
push str.gw_search_results.txt
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov ecx, eax
call fcn.0045ec40
test al, al
jne 0x45064c
mov dword [ebp - 0x38], 0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x4c
call fcn.0045fcd0
push eax
push ecx
lea ecx, [ebp - 0x30]
call fcn.00462b20
test eax, eax
js 0x44fc99
cmp byte [0x507a10], 0
je 0x44f92b
push ecx
push 0
push str.paths
push str.export
call fcn.00426590
mov ebx, dword [ebp - 0x3c]
mov byte [ebp - 0x29], al
jmp 0x44f97d
push str.SoftwaregrepWinNP3export_paths
lea ecx, [ebp + 0x7c0]
call fcn.00403410
sub esp, 0xc
mov byte [ebp - 4], 0x4d
lea eax, [ebp + 0x7c0]
mov dword [ebp - 0x14], 0x1000
lea ecx, [ebp + 0x3e8]
push 0
push eax
call fcn.00426760
mov dword [ebp - 4], 0x4e
mov ebx, 0x3000
mov ecx, eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x14], ebx
call fcn.004267b0
cmp dword [eax], 0
setne byte [ebp - 0x29]
test ebx, 0x2000
je 0x44f99c
and ebx, 0xffffdfff
lea ecx, [ebp + 0x3e8]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x14], ebx
call fcn.00416040
mov dword [ebp - 4], 0x4c
test ebx, 0x1000
je 0x44f9c2
and ebx, 0xffffefff
lea ecx, [ebp + 0x7c0]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x14], ebx
call fcn.004027a0
cmp byte [0x507a10], 0
je 0x44f9e2
push ecx
push 0
push str.linenumbers
push str.export
call fcn.00426590
mov byte [ebp - 0x31], al
jmp 0x44fa37
push str.SoftwaregrepWinNP3export_linenumbers
lea ecx, [ebp + 0x760]
call fcn.00403410
sub esp, 0xc
mov byte [ebp - 4], 0x4f
lea eax, [ebp + 0x760]
or ebx, 0x4000
lea ecx, [ebp + 0x388]
mov dword [ebp - 0x14], ebx
push 0
push eax
call fcn.00426760
mov dword [ebp - 4], 0x50
or ebx, 0x8000
mov ecx, eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x14], ebx
call fcn.004267b0
cmp dword [eax], 0
setne byte [ebp - 0x31]
test ebx, 0x8000
je 0x44fa56
and ebx, 0xffff7fff
lea ecx, [ebp + 0x388]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x14], ebx
call fcn.00416040
mov dword [ebp - 4], 0x4c
test ebx, 0x4000
je 0x44fa7c
and ebx, 0xffffbfff
lea ecx, [ebp + 0x760]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x14], ebx
call fcn.004027a0
cmp byte [0x507a10], 0
je 0x44fa9c
push ecx
push 0
push str.linecontent
push str.export
call fcn.00426590
mov byte [ebp - 0x15], al
jmp 0x44faf1
push str.SoftwaregrepWinNP3export_linecontent
lea ecx, [ebp + 0x748]
call fcn.00403410
sub esp, 0xc
mov byte [ebp - 4], 0x51
lea eax, [ebp + 0x748]
or ebx, 0x10000
lea ecx, [ebp + 0x328]
mov dword [ebp - 0x14], ebx
push 0
push eax
call fcn.00426760
mov dword [ebp - 4], 0x52
or ebx, 0x20000
mov ecx, eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x14], ebx
call fcn.004267b0
cmp dword [eax], 0
setne byte [ebp - 0x15]
test ebx, 0x20000
je 0x44fb10
and ebx, 0xfffdffff
lea ecx, [ebp + 0x328]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x14], ebx
call fcn.00416040
mov dword [ebp - 4], 0x4c
test ebx, 0x10000
je 0x44fb36
and ebx, 0xfffeffff
lea ecx, [ebp + 0x748]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x14], ebx
call fcn.004027a0
cmp byte [ebp - 0x29], 0
jne 0x44fb4c
cmp byte [ebp - 0x31], 0
jne 0x44fb4c
cmp byte [ebp - 0x15], 0
jne 0x44fb4c
mov byte [ebp - 0x29], 1
lea ecx, [ebp - 0x38]
call fcn.0045fcb0
mov dword [ebp - 0x1c], eax
mov ecx, dword [eax]
mov ebx, dword [ecx + 0x20]
call fcn.00411ad0
push 0xa5
push dword [edi + 4]
lea ecx, [ebp + 0x598]
mov esi, eax
call fcn.0041fdb0
push eax
lea eax, [ebp + 0x5c8]
mov byte [ebp - 4], 0x53
push eax
mov ecx, esi
call fcn.00410840
mov ecx, eax
mov byte [ebp - 4], 0x54
call fcn.00402810
movzx ecx, byte [ebp - 0x29]
push ecx
push eax
push 0x65
push dword [ebp - 0x1c]
call ebx
lea ecx, [ebp + 0x5c8]
call fcn.004027a0
lea ecx, [ebp + 0x598]
mov byte [ebp - 4], 0x4c
call fcn.004027a0
lea ecx, [ebp - 0x38]
call fcn.0045fcb0
mov dword [ebp - 0x1c], eax
mov ecx, dword [eax]
mov ebx, dword [ecx + 0x20]
call fcn.00411ad0
push 0xa6
push dword [edi + 4]
lea ecx, [ebp + 0x550]
mov esi, eax
call fcn.0041fdb0
push eax
lea eax, [ebp + 0x568]
mov byte [ebp - 4], 0x55
push eax
mov ecx, esi
call fcn.00410840
mov ecx, eax
mov byte [ebp - 4], 0x56
call fcn.00402810
movzx ecx, byte [ebp - 0x31]
push ecx
push eax
push 0x66
push dword [ebp - 0x1c]
call ebx
lea ecx, [ebp + 0x568]
call fcn.004027a0
lea ecx, [ebp + 0x550]
mov byte [ebp - 4], 0x4c
call fcn.004027a0
lea ecx, [ebp - 0x38]
call fcn.0045fcb0
mov dword [ebp - 0x1c], eax
mov ecx, dword [eax]
mov ebx, dword [ecx + 0x20]
call fcn.00411ad0
push 0xa7
push dword [edi + 4]
lea ecx, [ebp + 0x520]
mov esi, eax
call fcn.0041fdb0
push eax
mov byte [ebp - 4], 0x57
lea eax, [ebp + 0x538]
push eax
mov ecx, esi
call fcn.00410840
mov ecx, eax
mov byte [ebp - 4], 0x58
call fcn.00402810
movzx ecx, byte [ebp - 0x15]
push ecx
push eax
push 0x67
push dword [ebp - 0x1c]
call ebx
lea ecx, [ebp + 0x538]
call fcn.004027a0
lea ecx, [ebp + 0x520]
mov byte [ebp - 4], 0x4c
call fcn.004027a0
lea ecx, [ebp - 0x30]
call fcn.0045fcb0
push dword [edi + 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x800704c7
je 0x450644
mov ecx, eax
call fcn.0045ec40
test al, al
jne 0x450644
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x59
call fcn.0045fcb0
mov ebx, eax
mov ecx, dword [ebx]
mov esi, dword [ecx + 0x50]
lea ecx, [ebp - 0x28]
call fcn.0045fcd0
push eax
push ebx
call esi
mov ecx, eax
call fcn.0045ec40
test al, al
jne 0x45063c
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x24], 0
call fcn.0045fcb0
lea edx, [ebp - 0x24]
push edx
push 0x80058000
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov ecx, eax
call fcn.0045ec40
test al, al
jne 0x45063c
push dword [ebp - 0x24]
lea ecx, [ebp + 0xb60]
call fcn.00403410
push dword [ebp - 0x24]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
xor bh, bh
mov dword [ebp - 0x40], 0
mov bl, 1
mov byte [ebp - 0x48], bh
mov byte [ebp - 0x44], bl
mov byte [ebp - 0x20], bh
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x5b
call fcn.0045fcd0
push eax
push ecx
lea ecx, [ebp - 0x30]
call fcn.00462b20
test eax, eax
js 0x44fdce
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x50], 0
call fcn.0045fcb0
lea edx, [ebp - 0x50]
push edx
push 0x65
mov ecx, dword [eax]
push eax
call dword [ecx + 0x44]
cmp dword [ebp - 0x50], 0
lea ecx, [ebp - 0x40]
setne bl
mov byte [ebp - 0x44], bl
call fcn.0045fcb0
lea edx, [ebp - 0x50]
push edx
push 0x66
mov ecx, dword [eax]
push eax
call dword [ecx + 0x44]
cmp dword [ebp - 0x50], 0
lea ecx, [ebp - 0x40]
setne bh
mov byte [ebp - 0x48], bh
call fcn.0045fcb0
lea edx, [ebp - 0x50]
push edx
push 0x67
mov ecx, dword [eax]
push eax
call dword [ecx + 0x44]
cmp dword [ebp - 0x50], 0
setne al
mov byte [ebp - 0x20], al
jmp 0x44fdd1
mov al, byte [ebp - 0x20]
test bh, bh
jne 0x44fde5
test al, al
jne 0x44fde5
test bl, bl
jne 0x44fde1
mov byte [ebp - 0x44], 1
mov bl, 1
jmp 0x44fde7
xor bl, bl
cmp dword [ebp + 0xb70], 0
je 0x450629
push ecx
lea ecx, [ebp - 0x134]
call fcn.0045fb70
sub esp, 8
mov byte [ebp - 4], 0x5c
lea eax, [ebp + 0xb60]
lea ecx, [ebp - 0x134]
push eax
call fcn.0045f970
cmp dword [ebp - 0xe4], 0
je 0x45061e
test bl, bl
je 0x44fe83
mov esi, dword [edi + 0x11c]
mov edi, dword [edi + 0x120]
cmp esi, edi
je 0x4500af
mov edi, edi
push ecx
mov edx, esi
lea ecx, [ebp + 0x980]
call fcn.0041ba20
mov edx, eax
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x134]
call fcn.00462b90
push eax
call fcn.00462bb0
add esp, 8
mov byte [ebp - 4], 0x5c
lea ecx, [ebp + 0x980]
call fcn.0040e8d0
add esi, 0x68
cmp esi, edi
jne 0x44fe40
jmp 0x4500af
mov eax, dword [edi + 0x120]
mov ebx, dword [edi + 0x11c]
mov dword [ebp - 0x58], eax
cmp ebx, eax
je 0x4500ac
lea ebx, [ebx]
mov eax, dword [ebx + 0x24]
xor esi, esi
sub eax, dword [ebx + 0x20]
sar eax, 2
mov dword [ebp - 0x1c], esi
test eax, eax
je 0x4500a0
jmp 0x44fec0
xor al, al
cmp byte [ebp - 0x44], al
je 0x44ff89
push ecx
mov edx, ebx
lea ecx, [ebp + 0xba8]
call fcn.0041ba20
add esp, 4
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0x5e
push eax
lea ecx, [ebp + 0xba8]
call fcn.00419570
lea ecx, [ebp + 0xba8]
mov edi, dword [eax]
lea eax, [ebp - 0x5c]
push eax
call fcn.00419550
lea ecx, [ebp + 0xba8]
mov esi, dword [eax]
lea eax, [ebp + 0xae4]
push eax
call fcn.00419570
push dword [ebp + 0xae4]
lea ecx, [ebp + 0xba4]
push edi
push esi
push dword [eax]
call fcn.00462c60
add esp, 0x10
lea ecx, [ebp + 0x610]
push str.file:__
call fcn.0040b700
mov edx, eax
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x134]
call fcn.00462b90
lea ecx, [ebp + 0x610]
mov byte [ebp - 4], 0x5e
call fcn.0040e8d0
lea edx, [ebp + 0xba8]
lea ecx, [ebp - 0x134]
call fcn.00462b90
lea ecx, [ebp + 0xba8]
mov byte [ebp - 0x15], 1
mov byte [ebp - 4], 0x5c
call fcn.0040e8d0
mov esi, dword [ebp - 0x1c]
mov al, byte [ebp - 0x15]
cmp byte [ebp - 0x48], 0
je 0x44ffdc
test al, al
je 0x44ffa0
mov dl, 0x2a
lea ecx, [ebp - 0x134]
call fcn.00462c90
mov eax, dword [ebx + 0x20]
push dword [eax + esi*4]
lea eax, [ebp + 0x5f8]
push 0x4f05f8
push eax
call fcn.004192c0
add esp, 0xc
mov edx, eax
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x134]
call fcn.00462b90
lea ecx, [ebp + 0x5f8]
mov byte [ebp - 4], 0x5c
call fcn.0040e8d0
mov al, 1
cmp byte [ebp - 0x20], 0
je 0x45007c
test al, al
je 0x44fff7
mov dl, 0x2a
lea ecx, [ebp - 0x134]
call fcn.00462c90
push esi
lea ecx, [ebx + 0x2c]
call fcn.004020c0
push eax
lea ecx, [ebp + 0xb78]
call fcn.004024d0
push 0x4f0390
lea ecx, [ebp + 0x980]
mov byte [ebp - 4], 0x61
call fcn.00403410
lea edx, [ebp + 0x980]
lea ecx, [ebp + 0xb78]
call fcn.00441850
lea ecx, [ebp + 0x980]
call fcn.004027a0
push ecx
lea edx, [ebp + 0xb78]
lea ecx, [ebp + 0x580]
call fcn.0041ba20
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x134]
call fcn.00462b90
lea ecx, [ebp + 0x580]
call fcn.0040e8d0
lea ecx, [ebp + 0xb78]
mov byte [ebp - 4], 0x5c
call fcn.004027a0
lea eax, [ebp - 0x134]
push eax
call fcn.00462bb0
mov eax, dword [ebx + 0x24]
inc esi
sub eax, dword [ebx + 0x20]
add esp, 4
sar eax, 2
mov dword [ebp - 0x1c], esi
cmp esi, eax
jb 0x44fec0
add ebx, 0x68
cmp ebx, dword [ebp - 0x58]
jne 0x44fea0
mov bh, byte [ebp - 0x48]
lea ecx, [ebp - 0x134]
call fcn.0045f930
cmp byte [0x507a10], 0
je 0x450107
sub esp, 8
push dword [ebp - 0x44]
push str.paths
push str.export
call fcn.00462030
sub esp, 8
push dword [ebp - 0x48]
push str.linenumbers
push str.export
call fcn.00462030
sub esp, 8
push dword [ebp - 0x20]
push str.linecontent
push str.export
call fcn.00462030
jmp 0x45020d
push str.SoftwaregrepWinNP3export_paths
lea ecx, [ebp + 0x778]
call fcn.00403410
sub esp, 0xc
mov byte [ebp - 4], 0x63
lea eax, [ebp + 0x778]
lea ecx, [ebp + 0x4a8]
push 0
push eax
call fcn.00426760
lea ecx, [ebp + 0x778]
mov byte [ebp - 4], 0x65
call fcn.004027a0
push str.SoftwaregrepWinNP3export_linenumbers
lea ecx, [ebp + 0x7a8]
call fcn.00403410
sub esp, 0xc
mov byte [ebp - 4], 0x66
lea eax, [ebp + 0x7a8]
lea ecx, [ebp + 0x448]
push 0
push eax
call fcn.00426760
lea ecx, [ebp + 0x7a8]
mov byte [ebp - 4], 0x68
call fcn.004027a0
push str.SoftwaregrepWinNP3export_linecontent
lea ecx, [ebp + 0x7d8]
call fcn.00403410
sub esp, 0xc
mov byte [ebp - 4], 0x69
lea eax, [ebp + 0x7d8]
lea ecx, [ebp + 0xa70]
push 0
push eax
call fcn.00426760
lea ecx, [ebp + 0x7d8]
mov byte [ebp - 4], 0x6b
call fcn.004027a0
xor eax, eax
lea ecx, [ebp + 0x4a8]
cmp byte [ebp - 0x44], al
setne al
push eax
call fcn.00460e60
movzx eax, bh
lea ecx, [ebp + 0x448]
push eax
call fcn.00460e60
movzx eax, byte [ebp - 0x20]
lea ecx, [ebp + 0xa70]
push eax
call fcn.00460e60
lea ecx, [ebp + 0xa70]
call fcn.00416040
lea ecx, [ebp + 0x448]
call fcn.00416040
lea ecx, [ebp + 0x4a8]
mov byte [ebp - 4], 0x5c
call fcn.00416040
cmp byte [0x507a10], 0
je 0x45024a
push ecx
push 0x4eb5ac
push 0x4f05fc
push str.global
mov ecx, 0x507a38
call fcn.00417300
push eax
lea ecx, [ebp + 0xa28]
call fcn.00403410
mov ebx, dword [ebp - 0x3c]
or ebx, 0x40000
jmp 0x4502d2
push 0x4eb5ac
lea ecx, [ebp + 0x6e8]
call fcn.00403410
mov dword [ebp - 4], 0x6d
lea ecx, [ebp + 0x7f0]
mov ebx, dword [ebp - 0x3c]
or ebx, 0x80000
push str.SoftwaregrepWinNP3editorcmd
mov dword [ebp - 0x14], ebx
call fcn.00403410
sub esp, 0xc
mov dword [ebp - 4], 0x6e
lea eax, [ebp + 0x6e8]
or ebx, 0x100000
lea ecx, [ebp + 0x8f8]
mov dword [ebp - 0x14], ebx
push eax
lea eax, [ebp + 0x7f0]
push eax
call fcn.00417840
mov dword [ebp - 4], 0x6f
or ebx, 0x200000
mov ecx, eax
mov dword [ebp - 0x14], ebx
call fcn.004178e0
push eax
lea ecx, [ebp + 0x508]
call fcn.004024d0
or ebx, 0x400000
push eax
lea ecx, [ebp + 0xb18]
mov dword [ebp - 0x14], ebx
call fcn.004025d0
mov dword [ebp - 4], 0x70
test ebx, 0x400000
je 0x450304
and ebx, 0xffbfffff
lea ecx, [ebp + 0x508]
mov dword [ebp - 0x14], ebx
call fcn.004027a0
test ebx, 0x200000
je 0x450320
and ebx, 0xffdfffff
lea ecx, [ebp + 0x8f8]
mov dword [ebp - 0x14], ebx
call fcn.00416010
test ebx, 0x100000
je 0x45033c
and ebx, 0xffefffff
lea ecx, [ebp + 0x7f0]
mov dword [ebp - 0x14], ebx
call fcn.004027a0
test ebx, 0x80000
je 0x450358
and ebx, 0xfff7ffff
lea ecx, [ebp + 0x6e8]
mov dword [ebp - 0x14], ebx
call fcn.004027a0
mov byte [ebp - 4], 0x74
test ebx, 0x40000
je 0x450378
and ebx, 0xfffbffff
lea ecx, [ebp + 0xa28]
mov dword [ebp - 0x14], ebx
call fcn.004027a0
cmp dword [ebp + 0xb28], 0
je 0x450569
push 0x4f0610
lea ecx, [ebp + 0x790]
call fcn.00403410
push str._mode_
lea ecx, [ebp + 0x700]
mov byte [ebp - 4], 0x75
call fcn.00403410
lea eax, [ebp + 0x790]
mov byte [ebp - 4], 0x76
push eax
lea edx, [ebp + 0x700]
lea ecx, [ebp + 0xb18]
call fcn.00403c70
add esp, 4
lea ecx, [ebp + 0x700]
call fcn.004027a0
lea ecx, [ebp + 0x790]
mov byte [ebp - 4], 0x74
call fcn.004027a0
push 0x4eb5ac
lea ecx, [ebp + 0x730]
call fcn.00403410
push str._pattern_
lea ecx, [ebp + 0x718]
mov byte [ebp - 4], 0x77
call fcn.00403410
lea eax, [ebp + 0x730]
mov byte [ebp - 4], 0x78
push eax
lea edx, [ebp + 0x718]
lea ecx, [ebp + 0xb18]
call fcn.00403c70
add esp, 4
lea ecx, [ebp + 0x718]
call fcn.004027a0
lea ecx, [ebp + 0x730]
mov byte [ebp - 4], 0x74
call fcn.004027a0
push 0x4ed8f4
lea ecx, [ebp + 0x998]
call fcn.00403410
push str._line_
lea ecx, [ebp + 0x9b0]
mov byte [ebp - 4], 0x79
call fcn.00403410
lea eax, [ebp + 0x998]
mov byte [ebp - 4], 0x7a
push eax
lea edx, [ebp + 0x9b0]
lea ecx, [ebp + 0xb18]
call fcn.00403c70
add esp, 4
lea ecx, [ebp + 0x9b0]
call fcn.004027a0
lea ecx, [ebp + 0x998]
mov byte [ebp - 4], 0x74
call fcn.004027a0
lea ecx, [ebp + 0xb60]
call fcn.00402810
push eax
lea ecx, [ebp + 0xae8]
call fcn.00403410
push str._path_
lea ecx, [ebp + 0x9c8]
mov byte [ebp - 4], 0x7b
call fcn.00403410
lea eax, [ebp + 0xae8]
mov byte [ebp - 4], 0x7c
push eax
lea edx, [ebp + 0x9c8]
lea ecx, [ebp + 0xb18]
call fcn.00403c70
add esp, 4
lea ecx, [ebp + 0x9c8]
call fcn.004027a0
lea ecx, [ebp + 0xae8]
call fcn.004027a0
mov ecx, 0x44
lea eax, [ebp - 0x178]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x450507
mov dword [ebp - 0x178], 0x44
lea eax, [ebp - 0x80]
mov ecx, 0x10
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x450524
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x178]
push eax
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
lea ecx, [ebp + 0xb18]
call fcn.00402810
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
push dword [ebp - 0x7c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x80]
call esi
jmp 0x450613
lea ecx, [ebp + 0xb60]
mov dword [ebp + 0xa98], 0
mov dword [ebp + 0xa9c], 0
mov dword [ebp + 0xaa8], 0
mov dword [ebp + 0xaac], 0
mov dword [ebp + 0xab4], 0
mov dword [ebp + 0xab8], 0
mov dword [ebp + 0xabc], 0
mov dword [ebp + 0xac0], 0
mov dword [ebp + 0xac4], 0
mov dword [ebp + 0xac8], 0
mov dword [ebp + 0xacc], 0
mov dword [ebp + 0xa94], 0x3c
mov dword [ebp + 0xaa0], str.open
call fcn.00402810
mov dword [ebp + 0xaa4], eax
lea eax, [ebp + 0xa94]
push eax
mov dword [ebp + 0xab0], 1
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
lea ecx, [ebp + 0xb18]
call fcn.004027a0
lea ecx, [ebp - 0x134]
call fcn.004507d0
lea ecx, [ebp - 0x40]
call fcn.0045fd30
lea ecx, [ebp + 0xb60]
call fcn.004027a0
lea ecx, [ebp - 0x28]
call fcn.0045fd30
lea ecx, [ebp - 0x38]
call fcn.0045fd30
lea ecx, [ebp - 0x30]
call fcn.0045fd30
lea ecx, [ebp + 0xb48]
call fcn.00415f20
jmp case.0x44c801.1003
push 0x41d
push dword [edi + 8]
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je case.0x44c801.1003
push 0
push 0x41e
jmp 0x450695
push 0x41e
push dword [edi + 8]
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je case.0x44c801.1003
push 0
push 0x41d
push dword [edi + 8]
call dword [sym.imp.USER32.dll_CheckDlgButton]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xdc8]
xor ecx, ebp
call fcn.004accbf
lea esp, [ebp + 0xdcc]
pop ebp
ret 8
call fcn.004b306f
call fcn.004b306f
push 5
call fcn.00495b16
push 6
mov dword [0x507aa8], 0x7ffffffe
call fcn.00495b16
call fcn.004b306f
call fcn.004b306f
call fcn.004b306f
call fcn.004b306f
call fcn.004b306f
nop
xor ebp, ecx
inc esp
add byte [eax], bl
call 0xe8a80752
inc esp
add byte [edx + 0x750044e7], ch
in eax, 0x44
add byte [eax - 0x7cffbb1e], ah
jmp 0xede80766