Function at 0x503f30
Capabilities:
Create thread

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f5d29
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x330
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x314], edi
push ecx
call fcn.0043e540
push 0x270
mov esi, eax
lea eax, [ebp - 0x2d0]
push 0
push eax
call fcn.00420090
add esp, 8
lea ecx, [edi + 0x14a8]
push esi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x226
push 0x2e4
push str.Find_file_objects_for_removal
push str._FindAndListDlg
push ecx
lea ecx, [ebp - 0x2d0]
call fcn.005c6220
push 4
push 0xc
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xff000000
push 0x226
push 0x2e4
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 4], 0
call fcn.005b9530
push 0
lea ecx, [ebp - 0x2d0]
call fcn.005c5730
mov dword [ebp - 0x310], eax
test esi, esi
je 0x504022
push 0
mov edx, esi
mov ecx, eax
call fcn.005d3010
push dword [ebp - 0x310]
mov ecx, dword [edi + 0x14e4]
call fcn.005c6150
push 0x1000
lea ecx, [ebp - 0x2d0]
call fcn.005c4340
push 0
push 0
push 0
push 0x99
mov ecx, edi
call fcn.00436420
mov esi, eax
mov edx, 0x10
mov ecx, esi
call fcn.005d33b0
push eax
lea ecx, [ebp - 0x334]
call fcn.005c6590
mov edx, 0x20
mov ecx, esi
call fcn.005d33b0
push eax
lea ecx, [ebp - 0x330]
call fcn.005c6590
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2d0]
push dword [ebp - 0x334]
push dword [ebp - 0x330]
call fcn.005c4210
push 0xffffff
lea ecx, [ebp - 0x2d0]
call fcn.005c44b0
push 0
call fcn.005c44a0
push ecx
push 0xffffffffffffffff
push 0x20
push 0x20
push 5
push 5
push esi
call fcn.005c0240
movsd xmm1, qword [0x6edb40]
lea ecx, [ebp - 0x2d0]
push 0
push str.Arial
push 1
push 0x190
call fcn.005c42b0
push 0xffffffffffffffff
push 0x10000301
push 0x20
push 0x2a1
push 5
push 0x25
push str.Find_file_objects_for_removal
lea ecx, [ebp - 0x2d0]
call fcn.005c0890
push 0xff000000
push 0x18
push 0x18
push 0xa
push 0x2c6
lea ecx, [ebp - 0x2d0]
call fcn.005c1810
movsd xmm1, qword [0x6edaf8]
lea ecx, [ebp - 0x2d0]
push 0
push str.Arial
push 1
push 0x190
mov dword [ebp - 0x32c], eax
call fcn.005c42b0
push 0
push 0x2001f
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_KillerDelete___Replace_files
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x28], 0
call fcn.005d6a80
xorps xmm0, xmm0
lea ecx, [ebp - 0x24]
movq qword [ebp - 0x24], xmm0
mov dword [ebp - 0x1c], 0
call fcn.005dc5e0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x23a
push 0x34
push 0x14
push str.One_or_more_coma_separated_file_name_search_keywords:_i.e._.exe_firefox_office_img.jpg
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 4
call fcn.005c0890
lea eax, [ebp - 0x24]
push eax
push str.LastSearch
lea ecx, [ebp - 0x28]
call fcn.005d6740
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x23f
push 0x46
push 0xa
lea ecx, [ebp - 0x24]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x2d0]
call fcn.005c0a40
mov dword [ebp - 0x31c], eax
mov ecx, edi
lea eax, [ebp - 0x2d0]
push eax
push str.An_asterisk____matches_any_character_ZERO_OR_MORE_times_r_nA_question_mark_____matches_any_character_ZERO_OR_ONE_time_r_nIf_you_want_an_exact_match__just_dont_use_any_joker
push 0xffffffffffffffff
call fcn.0045b370
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0xf0
push 0x66
push 0x14
push str.Keyword_matching_options:
lea ecx, [ebp - 0x2d0]
call fcn.005c0890
lea ecx, [ebp - 0x2d0]
call fcn.005c60f0
push 0xffffffffffffffff
push 0xaf5030
push 0
lea eax, [ebp - 0x2d0]
push eax
push str.Keyword_matching_is_case_sensitive
push 0
push ecx
push 0x6e
push 0x7d
push 0x14
push str._Case_sensitive
mov ecx, edi
call fcn.0045fc60
push ecx
push 0xaf5030
push ecx
mov dword [ebp - 0x328], eax
lea eax, [ebp - 0x2d0]
push eax
push str.Match_only_file_names__skip_folders
push 0
push ecx
push 0x6e
push 0x7d
push 0x96
push str._Match_files
mov ecx, edi
call fcn.0045fbe0
push ecx
mov dword [ebp - 0x320], eax
push 0xaf5030
push ecx
lea eax, [ebp - 0x2d0]
push eax
push str.Match_only_folder_names__skip_files
push 0
push ecx
push 0x6e
push 0x7d
push 0x118
push str._Match_folders
mov ecx, edi
call fcn.0045fbe0
push ecx
push 0xaf5030
push ecx
mov dword [ebp - 0x324], eax
lea eax, [ebp - 0x2d0]
push eax
push str.Match_both_files_and_folders_in_the_search
push 0
push ecx
push 0x64
push 0x7d
push 0x19a
push str._Match_both
mov ecx, edi
call fcn.0045fbe0
mov esi, eax
lea eax, [ebp - 0x2d0]
push eax
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Start_searching_for_the_selected_files_now
push 0x23
push 0x8c
push 0x46
push 0x24e
push 0x99
push str.Find_now_
call fcn.0045fd50
mov dword [ebp - 0x318], eax
lea ecx, [ebp - 0x28]
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push eax
push str.LastKMOptions
call fcn.005d66b0
mov ecx, dword [ebp - 0x18]
test cl, 0x10
je 0x50432c
mov esi, dword [ebp - 0x320]
jmp 0x504337
test cl, 0x20
je 0x504337
mov esi, dword [ebp - 0x324]
lea eax, [ebp - 0x2d0]
push 4
push esi
mov ecx, eax
call fcn.005bd3f0
test byte [ebp - 0x18], 0x40
je 0x504360
push 4
push dword [ebp - 0x328]
lea ecx, [ebp - 0x2d0]
call fcn.005bd3f0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x190
push 0x96
push 0x14
push str.Where_do_you_want_to_look_in_
lea ecx, [ebp - 0x2d0]
call fcn.005c0890
lea eax, [ebp - 0x24]
push eax
push str.LastSearchRoot
lea ecx, [ebp - 0x28]
call fcn.005d6740
push 0
push ecx
lea ecx, [ebp - 0x24]
call fcn.005da0a0
mov ecx, eax
call fcn.005dbc20
sub esp, 8
lea ecx, [ebp - 0x2d0]
push 0xffffffffffffffff
push 0x19
push 0x1f4
push 0xaa
push 0xa
push 0x62439c
call fcn.005c1650
mov esi, eax
mov ecx, edi
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x304], esi
push eax
push str.Drop_down_the_list_or_press_Browse_to_select_a_different_location
push 0xffffffffffffffff
call fcn.0045b370
xorps xmm0, xmm0
lea ecx, [ebp - 0x2f4]
push 0x1a
movlpd qword [ebp - 0x2f4], xmm0
call fcn.00403c80
mov byte [ebp - 4], 5
mov edx, 3
mov ecx, dword [ebp - 0x2f4]
push 2
call fcn.00598220
mov dword [ebp - 0x308], eax
test eax, eax
jle 0x50444b
mov edi, dword [ebp - 0x2f4]
push 1
mov ecx, edi
call fcn.005dc190
push eax
push esi
lea ecx, [ebp - 0x2d0]
call fcn.005bcd30
add edi, 0xc
sub dword [ebp - 0x308], 1
jne 0x504423
mov edi, dword [ebp - 0x314]
push 1
push str.Browse_and_select
push esi
lea ecx, [ebp - 0x2d0]
call fcn.005bcd30
mov eax, dword [ebp - 0x2f4]
test eax, eax
je 0x50449e
push fcn.005dc430
lea esi, [eax - 4]
mov byte [ebp - 4], 6
push dword [esi]
push 0xc
push eax
call fcn.0041e45b
mov eax, dword [esi]
lea eax, [eax + eax*2]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.0041e1c8
mov esi, dword [ebp - 0x304]
add esp, 8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x2f4], 0
call fcn.005dc190
mov ecx, eax
call fcn.005e1200
test al, al
je 0x5044cf
lea ecx, [ebp - 0x24]
call fcn.005dc190
jmp 0x5044db
push ecx
lea ecx, [edi + 0x1290]
call fcn.0057c4e0
push 4
push eax
push esi
lea ecx, [ebp - 0x2d0]
call fcn.005bcd30
lea eax, [ebp - 0x2e0]
push eax
push esi
lea ecx, [ebp - 0x2d0]
call fcn.005c5730
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
push ecx
push 0xffffffffffffffff
push dword [ebp - 0x2d4]
lea ecx, [ebp - 0x2d0]
push 0x46
push 0xaa
push 0x203
push str.Browse...
call fcn.005c1a50
push 0xffffffffffffffff
push 0xaf5030
push 0
mov dword [ebp - 0x338], eax
lea eax, [ebp - 0x2d0]
push eax
push 0x62439c
push 0
push ecx
push 0x82
push 0x6e
push 0x258
push str._Check_all_none
mov ecx, edi
call fcn.0045fc60
mov dword [ebp - 0x308], eax
lea eax, [ebp - 0x2d0]
push eax
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Remove_the_ticked_items_from_the_list
push 0x1e
push 0x8c
push 0x82
push 0x24e
push 0x72
push str.Clear_checked
call fcn.0045fd50
mov dword [ebp - 0x33c], eax
lea eax, [ebp - 0x2d0]
push eax
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Add_the_selected_items_to_the_removal_list
push 0x1e
push 0x8c
push 0xa5
push 0x24e
push 0x7a
push str.Add_checked
call fcn.0045fd50
push 0
push str.Add_the_ticked_items_to_the_removal_list
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x340], eax
call fcn.0045b370
push 0x10024
push 0x1080000d
push 0x154
push 0x2d0
push 0xc8
push 0xa
push 0x627824
push str.__Path_n__Last_modified
lea ecx, [ebp - 0x2d0]
call fcn.005c0620
mov esi, eax
push 0x226
push 0
push 0x101e
push 0xffffffffffffffff
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 0x30c], esi
call fcn.005befd0
push 0x96
push 1
push 0x101e
push 0xffffffffffffffff
lea ecx, [ebp - 0x2d0]
call fcn.005befd0
push 1
push esi
lea ecx, [ebp - 0x2d0]
call fcn.005ba360
sub esp, 8
lea ecx, [ebp - 0x2d0]
push 0xf
push esi
call fcn.005ba470
push 0x100000
lea eax, [ebp - 0x2ec]
mov dword [ebp - 0x2ec], 0
push eax
push 0
push 0
push 3
push 0x62786c
call dword [sym.imp.SHELL32.dll_SHDefExtractIconW]
push 0x10
push dword [ebp - 0x2ec]
lea ecx, [ebp - 0x2d0]
push 1
push esi
call fcn.005be460
mov eax, dword [ebp - 0x2ec]
test eax, eax
je 0x5046be
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
push 0
push str.Double_click_an_item_to_open_its_location
push 0xffffffffffffffff
mov ecx, edi
call fcn.0045b370
push dword [ebp - 0x318]
lea ecx, [ebp - 0x2d0]
call fcn.005c4370
push 7
push 5
lea ecx, [ebp - 0x2d0]
call fcn.005c3f80
push 0
mov ecx, edi
call fcn.004771c0
test eax, eax
je 0x5050a4
nop
mov eax, dword [edi + 0x14a8]
lea ecx, [edi + 0x14a8]
cmp eax, 0xfffffffa
je 0x5050fc
lea edx, [ebp - 0x2d0]
cmp dword [edi + 0x14d8], edx
jne 0x505093
cmp eax, dword [ebp - 0x32c]
je 0x5050fc
cmp eax, 0xffffffbe
jne 0x5047e1
mov ecx, dword [ebp - 0x304]
cmp dword [edi + 0x14b4], ecx
jne 0x504831
push 0
push 0
push 0x157
push ecx
mov ecx, edx
call fcn.005befd0
test eax, eax
je 0x504798
mov esi, dword [ebp - 0x304]
nop dword [eax]
push 0
mov ecx, edi
call fcn.004771c0
push 0
push 0
push 0x157
push esi
lea ecx, [ebp - 0x2d0]
call fcn.005befd0
test eax, eax
jne 0x504770
mov esi, dword [ebp - 0x30c]
push dword [ebp - 0x304]
lea ecx, [ebp - 0x2d0]
call fcn.005bc230
push eax
lea ecx, [ebp - 0x24]
call fcn.005dc1c0
push str.Browse_and_select
lea ecx, [ebp - 0x24]
call fcn.005dc480
test al, al
jne 0x505093
push 2
push 0x62439c
push dword [ebp - 0x304]
lea ecx, [ebp - 0x2d0]
call fcn.005bcd30
jmp 0x50483f
cmp eax, 0xfffffff2
jne 0x504837
cmp dword [edi + 0x14b4], esi
jne 0x504837
push 2
push 0xffffffffffffffff
push esi
lea ecx, [ebp - 0x2d0]
call fcn.005bb4c0
test eax, eax
js 0x505093
push 0
push eax
push esi
lea ecx, [ebp - 0x2d0]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x24]
call fcn.005dc1c0
lea ecx, [ebp - 0x24]
call fcn.005dc190
push eax
call fcn.0043bf00
jmp 0x505093
lea ecx, [edi + 0x14a8]
cmp eax, dword [ebp - 0x338]
jne 0x504887
push dword [ebp - 0x310]
push 0
push 1
push ecx
lea ecx, [ebp - 0x24]
call fcn.005dc400
mov edx, str.Select_root_directory_for_the_scan
mov ecx, eax
call fcn.005e1b00
test al, al
je 0x505093
push 4
lea ecx, [ebp - 0x24]
call fcn.005dc190
push eax
push dword [ebp - 0x304]
lea ecx, [ebp - 0x2d0]
call fcn.005bcd30
jmp 0x505093
mov edx, dword [ebp - 0x308]
cmp eax, edx
jne 0x5048be
push 4
push edx
lea ecx, [ebp - 0x2d0]
call fcn.005bc500
push ecx
test eax, eax
lea ecx, [ebp - 0x2d0]
push 0xffffffffffffffff
setne al
push 0
movzx eax, al
push eax
push esi
call fcn.005bba40
jmp 0x505093
cmp eax, dword [ebp - 0x33c]
jne 0x50498f
xorps xmm0, xmm0
lea ecx, [ebp - 0x2d0]
push esi
movlpd qword [ebp - 0x2e8], xmm0
call fcn.005bb7f0
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], 0
mov byte [ebp - 4], 7
test eax, eax
je 0x504b17
cmp dword [eax], 0
je 0x504b17
push 0
push 0
push 0xb
push esi
lea ecx, [ebp - 0x2d0]
call fcn.005befd0
mov ecx, dword [ebp - 0x2e8]
mov eax, dword [ecx]
test eax, eax
jle 0x504952
mov edi, eax
nop word [eax + eax]
push 0
push dword [ecx + edi*4]
lea ecx, [ebp - 0x2d0]
push esi
call fcn.005bb970
mov ecx, dword [ebp - 0x2e8]
dec edi
test edi, edi
jg 0x504930
mov edi, dword [ebp - 0x314]
push 0
push 1
push 0xb
push esi
lea ecx, [ebp - 0x2d0]
call fcn.005befd0
mov eax, dword [ebp - 0x308]
lea ecx, [ebp - 0x2d0]
push 8
push eax
call fcn.005bd3f0
mov byte [ebp - 4], 5
push dword [ebp - 0x2e8]
call fcn.0041e1c3
add esp, 4
jmp 0x505093
mov edx, dword [ebp - 0x340]
cmp eax, edx
jne 0x504b31
xorps xmm0, xmm0
lea ecx, [ebp - 0x2d0]
push esi
movlpd qword [ebp - 0x2e8], xmm0
call fcn.005bb7f0
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], 0
mov byte [ebp - 4], 8
test eax, eax
je 0x504b17
cmp dword [eax], 0
je 0x504b17
push 1
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0
push 0x62781c
lea ecx, [ebp - 0x34]
movq qword [ebp - 0x34], xmm0
call fcn.005dc570
push 0
push 0
push 0xb
push esi
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 9
call fcn.005befd0
mov ecx, dword [ebp - 0x2e8]
mov eax, dword [ecx]
mov dword [ebp - 0x2fc], eax
test eax, eax
jle 0x504ab9
jmp 0x504a2b
mov ecx, dword [ebp - 0x2e8]
push 0
push dword [ecx + eax*4]
lea ecx, [ebp - 0x2d0]
push esi
call fcn.005bb510
push eax
lea ecx, [ebp - 0x24]
call fcn.005dc1c0
lea ecx, [ebp - 0x24]
call fcn.005dc3a0
test eax, eax
je 0x504a78
sub esp, 0xc
lea ecx, [ebp - 0x24]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.005dc190
push eax
push 0x62781c
lea ecx, [ebp - 0x34]
call fcn.005da510
mov eax, dword [ebp - 0x2fc]
mov ecx, dword [ebp - 0x2e8]
push 0
push dword [ecx + eax*4]
lea ecx, [ebp - 0x2d0]
push esi
call fcn.005bb970
push 0
push 1
mov ecx, edi
call fcn.0043d720
test eax, eax
jne 0x504ab9
mov eax, dword [ebp - 0x2fc]
dec eax
mov dword [ebp - 0x2fc], eax
test eax, eax
jg 0x504a25
push 0
push 1
push 0xb
push esi
lea ecx, [ebp - 0x2d0]
call fcn.005befd0
push 1
lea ecx, [ebp - 0x34]
call fcn.005dc190
mov ecx, dword [edi + 0x14e4]
push eax
push dword [ebx + 8]
call fcn.005bcd30
mov eax, dword [ebp - 0x308]
lea ecx, [ebp - 0x2d0]
push 8
push eax
call fcn.005bd3f0
lea ecx, [ebp - 0x34]
call fcn.005dc430
mov byte [ebp - 4], 5
push dword [ebp - 0x2e8]
call fcn.0041e1c3
add esp, 4
jmp 0x505093
mov byte [ebp - 4], 5
test eax, eax
je 0x505093
push eax
call fcn.0041e1c3
add esp, 4
jmp 0x505093
mov eax, dword [ebp - 0x318]
cmp dword [ecx], eax
jne 0x505093
push 0xd
push 0
push edx
push dword [ebp - 0x31c]
xorps xmm0, xmm0
lea eax, [ebp - 0x2d0]
push eax
lea ecx, [ebp - 0x5c]
movups xmmword [ebp - 0x5c], xmm0
movups xmmword [ebp - 0x4c], xmm0
call fcn.005b8800
push dword [ebp - 0x31c]
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0xa
call fcn.005bc230
push eax
lea ecx, [ebp - 0x24]
call fcn.005dc1c0
lea ecx, [ebp - 0x24]
call fcn.005dbeb0
test al, al
je 0x504bb7
sub esp, 8
lea eax, [ebp - 0x2d0]
mov ecx, edi
push 0x8c
push 0x190
push 0
push eax
push 4
push str.You_did_not_specify_a_valid_search_keyword._r_nPlease_indicate_one_or_more_coma_separated_keywords.
call fcn.0043e2e0
jmp 0x505087
push 0
lea ecx, [ebp - 0x24]
call fcn.005dc190
push eax
push 1
push str.LastSearch
lea ecx, [ebp - 0x28]
call fcn.005d5f20
push 0x30
call fcn.0041e3d6
mov dword [ebp - 0x300], eax
add esp, 4
add eax, 0x20
mov ecx, eax
mov dword [ebp - 0x2fc], eax
call fcn.005dc5e0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x2e4], eax
mov dword [eax + 0x2c], 0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2d0]
mov dword [eax], edi
push 4
push dword [ebp - 0x320]
mov dword [eax + 4], ecx
mov byte [eax + 8], 0
mov dword [ebp - 0x18], 0
call fcn.005bc500
test eax, eax
je 0x504c35
or dword [ebp - 0x18], 0x10
jmp 0x504c50
push 4
push dword [ebp - 0x324]
lea ecx, [ebp - 0x2d0]
call fcn.005bc500
test eax, eax
je 0x504c50
or dword [ebp - 0x18], 0x20
push 4
push dword [ebp - 0x328]
lea ecx, [ebp - 0x2d0]
call fcn.005bc500
test eax, eax
je 0x504c6b
or dword [ebp - 0x18], 0x40
push 0
lea eax, [ebp - 0x18]
push eax
push 4
push str.LastKMOptions
lea ecx, [ebp - 0x28]
call fcn.005d5f20
mov ecx, dword [ebp - 0x300]
mov eax, dword [ebp - 0x18]
push dword [ebp - 0x304]
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], esi
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x1c], 0
lea ecx, [ebp - 0x2d0]
call fcn.005bc230
mov ecx, dword [ebp - 0x2fc]
push eax
call fcn.005dc1c0
push 0
push ecx
mov ecx, dword [ebp - 0x2fc]
call fcn.005da0a0
mov ecx, eax
call fcn.005dbc20
mov ecx, dword [ebp - 0x2fc]
call fcn.005dbeb0
test al, al
jne 0x505027
call fcn.005dc190
mov ecx, eax
call fcn.005e1200
test al, al
je 0x505027
mov esi, dword [ebp - 0x300]
push 0
lea ecx, [esi + 0x20]
call fcn.005dc190
push eax
push 1
push str.LastSearchRoot
lea ecx, [ebp - 0x28]
call fcn.005d5f20
push 0
push 0
push 0x62794c
push 0x624514
lea ecx, [ebp - 0x24]
call fcn.005d99c0
mov ecx, eax
call fcn.005da270
push 0
push 0
push 0x627970
push 0x6249f8
lea ecx, [ebp - 0x24]
call fcn.005da270
push 0
push 0
push 0x627978
push 0x627960
lea ecx, [ebp - 0x24]
call fcn.005da270
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x677874
lea ecx, [ebp - 0x24]
call fcn.005dc190
push eax
push 0x673b7c
lea ecx, [ebp - 0x24]
call fcn.005dc200
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x24]
shr eax, 3
not eax
and eax, 8
mov dword [ebp - 0x2f8], eax
call fcn.005dc190
mov ecx, dword [esi + 0x2c]
mov dword [ebp - 0x2fc], eax
test ecx, ecx
je 0x504dc1
push ecx
call fcn.00418a90
mov eax, dword [ebp - 0x2fc]
add esp, 4
push 0
lea ecx, [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x3c]
push ecx
push dword [ebp - 0x2f8]
push 0xffffffffffffffff
push eax
call fcn.00418af0
add esp, 0x10
mov dword [esi + 0x2c], eax
lea eax, [ebp - 0x2d0]
mov ecx, edi
push 0x46
push 0x1c2
push eax
push str.Searching_for_file_system_items_using_the_selected_filters...
call fcn.0043da60
sub esp, 8
lea ecx, [edi + 0x14f0]
push 1
push str.Cancel
push 0
push 0xffffffffffffffba
call fcn.005b66e0
mov ecx, eax
call fcn.005b64a0
mov ecx, eax
call fcn.005b62b0
push 0
push 0
push esi
push 0x469b60
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
mov eax, 0xffffffff
test esi, esi
cmove esi, eax
mov dword [ebp - 0x2f8], esi
xor edx, edx
mov byte [ebp - 4], 0xc
mov ecx, esi
call fcn.005cca30
test al, al
je 0x504f10
nop dword [eax + eax]
push 0
push 0
mov ecx, edi
call fcn.0043d720
mov eax, dword [ebp - 0x300]
cmp byte [eax + 8], 0
jne 0x504eff
cmp byte [edi + 0x11c8], 0
jne 0x504efb
cmp byte [edi + 0x11c9], 0
jne 0x504efb
lea ecx, [ebp - 0x2d0]
cmp dword [edi + 0x14d8], ecx
jne 0x504eff
mov edx, dword [ebp - 0x32c]
cmp dword [edi + 0x14a8], edx
je 0x504efb
cmp dword [edi + 0x14a8], 0xfffffff2
jne 0x504eff
mov eax, dword [ebp - 0x30c]
cmp dword [edi + 0x14b4], eax
jne 0x504eff
push 2
push 0xffffffffffffffff
push eax
call fcn.005bb4c0
test eax, eax
js 0x504eff
push 0
push eax
push dword [ebp - 0x30c]
lea ecx, [ebp - 0x2d0]
call fcn.005bb510
push eax
lea ecx, [ebp - 0x24]
call fcn.005dc1c0
lea ecx, [ebp - 0x24]
call fcn.005dc190
push eax
call fcn.0043bf00
jmp 0x504eff
mov byte [eax + 8], 1
xor edx, edx
mov ecx, esi
call fcn.005cca30
test al, al
jne 0x504e60
push 2
lea ecx, [edi + 0x14f0]
call fcn.005b6250
mov eax, dword [ebp - 0x300]
mov ecx, dword [eax + 0x18]
mov eax, dword [eax + 0x1c]
test ecx, ecx
jne 0x504f42
test eax, eax
jne 0x504f42
push 1
push str.No_file_objects_were
lea ecx, [ebp - 0x24]
call fcn.005dc260
jmp 0x504f88
cmp ecx, 1
jne 0x504f5b
test eax, eax
jne 0x504f5b
push ecx
push str.One_file_object_was
lea ecx, [ebp - 0x24]
call fcn.005dc260
jmp 0x504f88
push eax
push ecx
lea ecx, [ebp - 0x24]
call fcn.005db3f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str._file_objects_were
lea ecx, [ebp - 0x24]
call fcn.005da780
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str._found_with_the_selected_filters
lea ecx, [ebp - 0x24]
call fcn.005da780
sub esp, 8
lea eax, [ebp - 0x2d0]
lea ecx, [ebp - 0x24]
push 0x8c
push 0x190
push 0
push eax
push 4
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0043e2e0
cmp esi, 0xffffffff
je 0x504fe3
test esi, esi
je 0x504fe3
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x300]
mov eax, dword [esi + 0x2c]
test eax, eax
je 0x504ff9
push eax
call fcn.00418a90
add esp, 4
lea ecx, [esi + 0x20]
mov dword [esi + 0x2c], 0
call fcn.005dc430
push 0x30
push esi
call fcn.0041e7c1
add esp, 8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5c]
call fcn.005b8790
mov esi, dword [ebp - 0x30c]
jmp 0x505093
sub esp, 8
lea eax, [ebp - 0x2d0]
mov ecx, edi
push 0x8c
push 0x190
push 0
push eax
push 4
push str.The_root_directory_is_not_valid._r_nPlease_indicate_a_valid_root_location_to_search_in.
call fcn.0043e2e0
mov eax, dword [ebp - 0x300]
mov ecx, dword [eax + 0x2c]
test ecx, ecx
je 0x505067
push ecx
call fcn.00418a90
mov eax, dword [ebp - 0x300]
add esp, 4
lea ecx, [eax + 0x20]
mov dword [eax + 0x2c], 0
call fcn.005dc430
mov eax, dword [ebp - 0x300]
push 0x30
push eax
call fcn.0041e7c1
add esp, 8
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 5
call fcn.005b8790
push 0
mov ecx, edi
call fcn.004771c0
test eax, eax
jne 0x504700
mov esi, 1
lea ecx, [ebp - 0x24]
call fcn.005dc430
lea ecx, [ebp - 0x28]
call fcn.005d69e0
lea ecx, [ebp - 0x330]
call fcn.005c6580
lea ecx, [ebp - 0x334]
call fcn.005c6580
lea ecx, [ebp - 0x2d0]
call fcn.005c1c60
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
or esi, 0xffffffff
jmp 0x5050a9