Function at 0x48818f
Capabilities:
Parse pe header

Disassembly:
mov eax, 0x56e424
call fcn.00524444
sub esp, 0x784
push ebx
or dword [ebp - 0x48], 0xffffffff
push esi
push edi
xor eax, eax
push 0x400
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0x790]
mov esi, ecx
push eax
mov dword [ebp - 0x14], esi
call fcn.00524810
add esp, 0xc
mov ecx, dword [ebp + 0x10]
push 1
pop edi
mov dword [esi + 0x1a24], edi
mov dword [esi + 0x2798], edi
mov eax, dword [esi + 0x2720]
mov eax, dword [eax + ecx*4]
push eax
mov dword [ebp - 0x44], eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov ecx, esi
mov dword [esi + 0x2794], eax
call fcn.005441e0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp + 0xc]
jge 0x489662
mov ebx, 0x3ff
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x390]
push 0
push eax
push dword [ebp + 0xc]
lea eax, [ebp - 0x1c]
mov ecx, esi
push eax
push dword [ebp + 8]
call fcn.004898b8
mov ecx, dword [ebp - 0x390]
movzx eax, cl
dec eax
cmp eax, 0xa5
ja case.0x488247.17
movzx eax, byte [eax + 0x489812]
jmp dword [eax*4 + 0x4896a6]
xor eax, eax
cmp cl, 0x82
sete al
cmp dword [ebp - 0x38c], edi
mov dword [ebp + 0x10], eax
jne 0x4895b2
cmp dword [ebp - 0x384], edi
jne 0x4895b2
push 8
push str.GotoLine
push dword [ebp - 0x388]
call fcn.0052b000
add esp, 0xc
test eax, eax
push dword [ebp + 0x10]
push dword [ebp - 0x360]
jne 0x488296
push edi
jmp 0x488298
push 0
mov ecx, esi
call fcn.004840de
jmp case.0x488247.85
cmp dword [ebp - 0x38c], edi
jne 0x4895b2
cmp dword [ebp - 0x384], edi
jne 0x4895b2
push 9
push str.HexInsert
push dword [ebp - 0x388]
call fcn.0052b000
add esp, 0xc
test eax, eax
jne 0x4882d8
push edi
jmp 0x4882da
push 0
push dword [ebp - 0x360]
mov ecx, esi
call fcn.0048438b
jmp case.0x488247.85
cmp dword [ebp - 0x38c], edi
jl 0x4895b2
xor eax, eax
cmp dword [ebp - 0x384], eax
jne 0x4895b2
xor edi, edi
cmp dword [ebp - 0x38c], eax
mov dword [ebp - 0x18], eax
mov dword [ebp + 0x10], eax
jle 0x4883df
lea esi, [ebp - 0x360]
mov eax, dword [esi]
cmp eax, 5
jb 0x48832a
push 5
pop eax
push eax
lea eax, [ebp - 0x58]
push dword [esi + 8]
push eax
call fcn.005244d0
and byte [ebp - 0x53], 0
lea eax, [ebp - 0x58]
push str.Ctrl
push eax
call fcn.00528430
add esp, 0x14
test eax, eax
jne 0x488391
mov ecx, dword [ebp - 0x14]
push eax
push 0x11
call fcn.00484131
mov eax, dword [esi]
mov ecx, ebx
add eax, 0xfffffffb
sub ecx, edi
cmp eax, ecx
mov dword [ebp - 0x18], 1
jl 0x488371
mov eax, ecx
push eax
mov eax, dword [esi + 8]
add eax, 5
push eax
lea eax, [ebp + edi - 0x790]
push eax
call fcn.005244d0
mov eax, dword [esi]
add esp, 0xc
lea edi, [edi + eax - 5]
jmp 0x4883b3
mov eax, dword [esi]
mov ecx, ebx
sub ecx, edi
cmp eax, ecx
jl 0x48839d
mov eax, ecx
push eax
lea eax, [ebp + edi - 0x790]
push dword [esi + 8]
push eax
call fcn.005244d0
add esp, 0xc
add edi, dword [esi]
mov eax, dword [ebp - 0x38c]
lea ecx, [eax - 1]
cmp dword [ebp + 0x10], ecx
jge 0x4883ca
mov byte [ebp + edi - 0x790], 0x20
inc edi
inc dword [ebp + 0x10]
add esi, 0x30
cmp dword [ebp + 0x10], eax
jl 0x488320
cmp edi, ebx
jb 0x4883df
mov edi, ebx
mov eax, dword [0x61d784]
and byte [ebp + edi - 0x790], 0
mov dword [ebp - 0x34], eax
xor esi, esi
cmp byte [0x5beb78], 0
mov dword [ebp - 4], esi
je 0x488438
mov edi, 0x5beb78
push dword [edi + 4]
lea ecx, [ebp - 0x34]
call fcn.00545796
lea eax, [ebp - 0x790]
push eax
push dword [ebp - 0x34]
call fcn.00528430
pop ecx
test eax, eax
pop ecx
je 0x48842d
add edi, 8
inc esi
cmp byte [edi], 0
jne 0x488402
jmp 0x488438
movzx eax, byte [esi*8 + 0x5beb78]
mov dword [ebp - 0x60], eax
mov al, byte [esi*8 + 0x5beb78]
test al, al
je 0x488462
cmp al, 8
push 0
jne 0x488455
mov ecx, dword [ebp - 0x14]
push 8
call fcn.004842af
jmp 0x48846b
push dword [ebp - 0x60]
mov ecx, dword [ebp - 0x14]
call fcn.00484131
jmp 0x48846b
push 1
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x18], 0
je 0x48847d
mov ecx, dword [ebp - 0x14]
push 0
push 0x11
call fcn.0048423a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
jmp 0x488cd7
cmp dword [ebp - 0x38c], edi
jne 0x4895b2
cmp dword [ebp - 0x384], edi
jne 0x4895b2
push dword [ebp - 0x360]
mov ecx, esi
call fcn.00483fd2
jmp case.0x488247.85
or dword [ebp - 0x80], 0xffffffff
push 6
xor edx, edx
mov dword [ebp - 0x84], edi
pop ecx
xor eax, eax
cmp dword [ebp - 0x38c], edx
lea edi, [ebp - 0x7c]
mov dword [ebp + 0x10], edx
mov dword [ebp - 0x24], edx
rep stosd dword es:[edi], eax
jle 0x4885ec
lea esi, [ebp - 0x360]
lea edi, [ebp - 0x84]
cmp dword [esi - 0x24], 1
jne 0x4884fd
mov eax, dword [esi]
or dword [ebp + 0x10], 8
mov dword [edi], eax
add edi, 4
jmp 0x4885d7
mov eax, dword [esi]
cmp eax, ebx
jb 0x488505
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [esi + 8]
push eax
call fcn.005244d0
mov eax, dword [esi]
add esp, 0xc
cmp eax, ebx
jb 0x488520
mov eax, ebx
and byte [ebp + eax - 0x790], 0
lea eax, [ebp - 0x790]
push str.SortDes
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488548
or dword [ebp + 0x10], 4
jmp 0x4885d7
lea eax, [ebp - 0x790]
push str.IgnoreCase
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488565
or dword [ebp + 0x10], 1
jmp 0x4885d7
lea eax, [ebp - 0x790]
push str.RemoveDup
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488582
or dword [ebp + 0x10], 2
jmp 0x4885d7
lea eax, [ebp - 0x790]
push str.Numeric
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x48859f
or dword [ebp + 0x10], 0x40
jmp 0x4885d7
lea eax, [ebp - 0x790]
push str.Locale
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x4885bc
or byte [ebp + 0x10], 0x80
jmp 0x4885d7
lea eax, [ebp - 0x790]
push str.AlternateMethod
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x4885d7
or dword [ebp + 0x10], 0x20
inc dword [ebp - 0x24]
add esi, 0x30
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x38c]
jl 0x4884e7
push dword [ebp - 0x68]
mov ecx, dword [ebp - 0x14]
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
push dword [ebp - 0x80]
push dword [ebp - 0x84]
push dword [ebp + 0x10]
call fcn.00484007
jmp case.0x488247.85
xor esi, esi
cmp dword [ebp - 0x360], esi
jle case.0x488247.85
mov eax, dword [ebp - 0x358]
mov al, byte [eax + esi]
cmp al, 0xa
je 0x488640
mov ecx, dword [ebp - 0x14]
push 0
movzx eax, al
push eax
call fcn.004842af
inc esi
cmp esi, dword [ebp - 0x360]
jl 0x488625
jmp case.0x488247.85
mov dword [ebp + 0x10], edi
xor edi, edi
cmp dword [ebp - 0x38c], edi
jle 0x4887a4
lea esi, [ebp - 0x360]
cmp dword [esi - 0x24], 0
jne 0x48878b
mov eax, dword [esi]
cmp eax, ebx
jb 0x488677
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [esi + 8]
push eax
call fcn.005244d0
mov eax, dword [esi]
add esp, 0xc
cmp eax, ebx
jb 0x488692
mov eax, ebx
and byte [ebp + eax - 0x790], 0
lea eax, [ebp - 0x790]
push 0x5c6ca4
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x4886ba
or dword [ebp + 0x10], 2
jmp 0x488769
lea eax, [ebp - 0x790]
push 0x5c6c40
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x4886da
or byte [ebp + 0x11], 0x10
jmp 0x488769
lea eax, [ebp - 0x790]
push str.RegExp
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x4886f7
or dword [ebp + 0x10], 4
jmp 0x488769
lea eax, [ebp - 0x790]
push 0x5c6c78
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488714
or dword [ebp + 0x10], 8
jmp 0x488769
lea eax, [ebp - 0x790]
push 0x5c7810
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488731
and dword [ebp + 0x10], 0xfffffffe
jmp 0x488769
lea eax, [ebp - 0x790]
push str.Select
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x48874e
or byte [ebp + 0x10], 0x80
jmp 0x488769
lea eax, [ebp - 0x790]
push str.Ascii
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488769
or dword [ebp + 0x10], 0x10
mov eax, dword [ebp - 0x38c]
dec eax
cmp edi, eax
jne 0x488794
lea eax, [ebp - 0x790]
push eax
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 0x1948]
call fcn.0053ecd8
jmp 0x488794
push 1
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], eax
inc edi
add esi, 0x30
cmp edi, dword [ebp - 0x38c]
jl 0x488665
cmp dword [ebp - 0x38c], 1
jl 0x48958f
lea eax, [ebp - 0x390]
push 0
push eax
mov ecx, dword [ebp - 0x14]
push dword [ebp + 0xc]
mov esi, dword [ebp - 0x1c]
lea eax, [ebp - 0x1c]
push eax
push dword [ebp + 8]
call fcn.004898b8
cmp dword [ebp - 0x390], 0x52
jne 0x4888bf
xor edi, edi
cmp dword [ebp - 0x38c], edi
jle 0x488882
lea esi, [ebp - 0x360]
cmp dword [esi - 0x24], 0
jne 0x488872
mov eax, dword [esi]
cmp eax, ebx
jb 0x4887fe
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [esi + 8]
push eax
call fcn.005244d0
mov eax, dword [esi]
add esp, 0xc
cmp eax, ebx
jb 0x488819
mov eax, ebx
and byte [ebp + eax - 0x790], 0
lea eax, [ebp - 0x790]
push 0x5c77fc
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x48883c
or dword [ebp + 0x10], 0x20
lea eax, [ebp - 0x790]
push str.AllFiles
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488857
or byte [ebp + 0x11], 2
lea eax, [ebp - 0x790]
push str.SelectText
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488872
or byte [ebp + 0x11], 1
inc edi
add esi, 0x30
cmp edi, dword [ebp - 0x38c]
jl 0x4887f0
push 1
pop eax
cmp dword [ebp - 0x38c], eax
jl 0x4888b4
lea ecx, [edi + edi*2]
shl ecx, 4
cmp dword [ebp + ecx - 0x3b4], 0
jne 0x4888b4
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x790]
push eax
push dword [ebp + 0x10]
call fcn.00484566
jmp 0x48958f
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], eax
jmp 0x48958f
or dword [ebp + 0x10], 0x40
mov dword [ebp - 0x1c], esi
jmp 0x48889d
mov eax, dword [0x61d784]
xor esi, esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x30], eax
push 0xb
push str.ReplInFiles
push dword [ebp - 0x388]
mov byte [ebp - 4], 4
mov dword [ebp + 0x10], esi
mov dword [ebp - 0x3c], esi
call fcn.0052b000
add esp, 0xc
test eax, eax
jne 0x488907
mov dword [ebp - 0x3c], edi
cmp dword [ebp - 0x38c], esi
mov dword [ebp - 0x40], esi
jle 0x488c84
lea eax, [ebp - 0x360]
mov dword [ebp - 0x24], eax
mov esi, dword [ebp - 0x24]
cmp dword [esi - 0x24], 0
jne 0x488c5f
mov eax, dword [esi]
cmp eax, ebx
jb 0x488934
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [esi + 8]
push eax
call fcn.005244d0
mov eax, dword [esi]
add esp, 0xc
cmp eax, ebx
jb 0x48894f
mov eax, ebx
and byte [ebp + eax - 0x790], 0
lea eax, [ebp - 0x790]
push 0x5c6ca4
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488977
or dword [ebp + 0x10], 4
jmp 0x488c68
lea eax, [ebp - 0x790]
push str.RegExp
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488997
or dword [ebp + 0x10], 8
jmp 0x488c68
lea eax, [ebp - 0x790]
push 0x5c6c78
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x4889b7
or dword [ebp + 0x10], 0x10
jmp 0x488c68
lea eax, [ebp - 0x790]
push 0x5c6c40
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x4889d7
or byte [ebp + 0x10], 0x80
jmp 0x488c68
lea eax, [ebp - 0x790]
push str.Recursive
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x4889f7
or dword [ebp + 0x10], 1
jmp 0x488c68
lea eax, [ebp - 0x790]
push str.OutputWin
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488a17
or dword [ebp + 0x10], 2
jmp 0x488c68
lea eax, [ebp - 0x790]
push 0x5c77bc
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488a37
or dword [ebp + 0x10], 0x20
jmp 0x488c68
lea eax, [ebp - 0x790]
push str.Unicode
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488a57
or dword [ebp + 0x10], 0x40
jmp 0x488c68
lea eax, [ebp - 0x790]
push str.ProjFiles
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488a77
or byte [ebp + 0x11], 4
jmp 0x488c68
lea eax, [ebp - 0x790]
push str.OpenFiles
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488a97
or byte [ebp + 0x11], 2
jmp 0x488c68
mov eax, dword [ebp - 0x38]
inc dword [ebp - 0x38]
test eax, eax
jne 0x488c68
lea eax, [ebp - 0x790]
lea ecx, [ebp - 0x2c]
push eax
call fcn.0053ecd8
mov edi, 0x5b85bc
lea ecx, [ebp - 0x2c]
push edi
call fcn.0053aa84
mov esi, eax
cmp esi, 0xffffffff
je 0x488b7b
lea eax, [ebp - 0x4c]
push esi
push eax
lea ecx, [ebp - 0x2c]
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0053ec88
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 4
call fcn.0053eb4f
lea eax, [ebp + esi - 0x78f]
lea ecx, [ebp - 0x20]
push eax
call fcn.0053ecd8
push edi
lea ecx, [ebp - 0x20]
inc esi
call fcn.0053aa84
cmp eax, 0xffffffff
je 0x488b77
lea esi, [esi + eax + 1]
inc eax
push eax
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x20]
call fcn.0053a8b5
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 6
call fcn.0053ec88
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 4
call fcn.0053eb4f
push edi
lea ecx, [ebp - 0x20]
call fcn.0053aa84
mov edi, eax
cmp edi, 0xffffffff
je 0x488b77
lea eax, [ebp - 0x64]
push edi
push eax
lea ecx, [ebp - 0x20]
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 7
call fcn.0053ec88
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 4
call fcn.0053eb4f
lea esi, [esi + edi + 1]
test esi, esi
jne 0x488b8a
lea eax, [ebp - 0x790]
push eax
call fcn.00525390
pop ecx
mov esi, eax
mov eax, dword [ebp - 0x24]
push 1
mov ecx, dword [ebp - 0x14]
mov eax, dword [eax + 4]
lea eax, [eax + esi + 1]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x1c]
push dword [ebp + 0xc]
push eax
push dword [ebp + 8]
call fcn.004898b8
mov eax, dword [ebp - 0x360]
cmp eax, ebx
jb 0x488bbe
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [ebp - 0x358]
push eax
call fcn.005244d0
mov eax, dword [ebp - 0x360]
add esp, 0xc
cmp eax, ebx
jb 0x488be0
mov eax, ebx
and byte [ebp + eax - 0x790], 0
lea eax, [ebp - 0x790]
push eax
lea ecx, [ebp - 0x18]
call fcn.0053ecd8
cmp dword [ebp - 0x3c], 0
je 0x488c68
lea eax, [ebp - 0x390]
push 1
push eax
mov ecx, dword [ebp - 0x14]
push dword [ebp + 0xc]
lea eax, [ebp - 0x1c]
push eax
push dword [ebp + 8]
call fcn.004898b8
mov eax, dword [ebp - 0x360]
cmp eax, ebx
jb 0x488c24
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [ebp - 0x358]
push eax
call fcn.005244d0
mov eax, dword [ebp - 0x360]
add esp, 0xc
cmp eax, ebx
jb 0x488c46
mov eax, ebx
and byte [ebp + eax - 0x790], 0
lea eax, [ebp - 0x790]
push eax
lea ecx, [ebp - 0x30]
call fcn.0053ecd8
jmp 0x488c68
push 1
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x40]
add dword [ebp - 0x24], 0x30
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x38c]
jl 0x48891f
cmp dword [ebp - 0x28], 0
jne 0x488cac
cmp dword [ebp - 0x38c], 1
jl 0x488cac
mov eax, dword [ebp - 0x3c]
push dword [ebp - 0x2c]
neg eax
push dword [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
sbb eax, eax
and eax, dword [ebp - 0x30]
push eax
push dword [ebp - 0x18]
push dword [ebp + 0x10]
call fcn.0048460e
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 3
call fcn.0053eb4f
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call fcn.0053eb4f
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.0053eb4f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.0053eb4f
jmp 0x48958f
cmp dword [ebp - 0x38c], edi
jne 0x488d75
cmp dword [ebp - 0x384], 0
jne 0x488d75
push 6
push str.SaveAs
push dword [ebp - 0x388]
call fcn.0052b000
add esp, 0xc
test eax, eax
jne case.0x488247.85
mov eax, dword [ebp - 0x360]
cmp eax, ebx
jb 0x488d1f
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [ebp - 0x358]
push eax
call fcn.005244d0
mov eax, dword [ebp - 0x360]
add esp, 0xc
test eax, eax
jne 0x488d45
and byte [ebp - 0x790], al
cmp byte [ebp - 0x790], 0
jne 0x488d5e
and byte [ebp - 0x78f], 0
mov byte [ebp - 0x790], 0x20
jmp 0x488d6c
cmp eax, ebx
jb 0x488d64
mov eax, ebx
and byte [ebp + eax - 0x790], 0
lea eax, [ebp - 0x790]
push eax
jmp 0x488d97
push 4
push str.Save
push dword [ebp - 0x388]
call fcn.0052b000
add esp, 0xc
test eax, eax
jne 0x4895b2
push 0x622c94
mov ecx, esi
call fcn.00484810
jmp case.0x488247.85
cmp dword [ebp - 0x38c], edi
jne 0x4895b2
cmp dword [ebp - 0x384], 0
jne 0x4895b2
mov eax, dword [ebp - 0x360]
cmp eax, ebx
jb 0x488dc8
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [ebp - 0x358]
push eax
call fcn.005244d0
mov eax, dword [ebp - 0x360]
add esp, 0xc
cmp eax, ebx
jb 0x488dea
mov eax, ebx
and byte [ebp + eax - 0x790], 0
lea eax, [ebp - 0x790]
push eax
mov ecx, esi
call fcn.00484732
jmp case.0x488247.85
push 0x6b
jmp 0x48951d
push 0x90
jmp 0x48951d
push 0x53
jmp 0x48951d
push 0x85
jmp 0x48951d
push 0x4f
jmp 0x48951d
push 0x84
jmp 0x48951d
push 0x50
jmp 0x48951d
push 0x4c
jmp 0x48951d
push 0x4e
jmp 0x48951d
push 0x48
jmp 0x48951d
push 0x41
jmp 0x48951d
push 0x45
jmp 0x48951d
push 0x5a
jmp 0x48951d
push 0x49
jmp 0x48951d
push 0x56
jmp 0x48951d
push 0
push 0
push edi
jmp 0x48901e
push 0
push edi
push 0
jmp 0x48901e
push edi
jmp 0x488e83
push edi
push 0
jmp 0x488e84
push 0x6e
jmp 0x48951d
push 0x70
jmp 0x48951d
push 0x68
jmp 0x48951d
push 0x6f
jmp 0x48951d
push 0x86
jmp 0x48951d
push 0x87
jmp 0x48951d
push 0x54
jmp 0x48951d
push 0x61
jmp 0x48951d
push 0x57
jmp 0x48951d
push 0x77
jmp 0x48951d
push 0x58
jmp 0x48951d
push 0x78
jmp 0x48951d
push 0x6c
jmp 0x48951d
push 0x6d
jmp 0x48951d
push 0x4a
jmp 0x48951d
push 0x64
jmp 0x48951d
push 0x62
jmp 0x48951d
push 0x75
jmp 0x48951d
cmp dword [ebp - 0x38c], edi
jne 0x488faa
cmp dword [ebp - 0x384], 0
jne 0x488faa
mov eax, dword [ebp - 0x360]
cmp eax, ebx
jb 0x488f38
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [ebp - 0x358]
push eax
call fcn.005244d0
mov eax, dword [ebp - 0x360]
add esp, 0xc
cmp eax, ebx
jb 0x488f5a
mov eax, ebx
and byte [ebp + eax - 0x790], 0
lea eax, [ebp - 0x790]
push str.NoSave
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488f7c
push eax
jmp 0x488f94
lea eax, [ebp - 0x790]
push str.Save
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x488fa0
push edi
mov ecx, esi
call fcn.00484b29
jmp case.0x488247.85
push 0x8d
jmp 0x48951d
push 0x63
jmp 0x48951d
push 0x51
jmp 0x48951d
push 0x29
jmp 0x48951d
push 0x30
jmp 0x48951d
push 0x31
jmp 0x48951d
push 0x32
jmp 0x48951d
push 0x33
jmp 0x48951d
push 0x34
jmp 0x48951d
push 0x35
jmp 0x48951d
push 4
jmp 0x48951d
push 5
jmp 0x48951d
push 6
jmp 0x48951d
push edi
jmp 0x48951d
push 2
jmp 0x48951d
push 3
jmp 0x48951d
push 0xc
jmp 0x48951d
xor eax, eax
push eax
push eax
push eax
mov ecx, esi
call fcn.004843f4
jmp case.0x488247.85
cmp dword [ebp - 0x38c], edi
jne 0x4895b2
cmp dword [ebp - 0x384], edi
jne 0x4895b2
push dword [ebp - 0x360]
mov ecx, esi
call fcn.004844fa
jmp case.0x488247.85
cmp dword [ebp - 0x38c], edi
jne 0x4895b2
cmp dword [ebp - 0x384], 0
jne 0x4895b2
mov eax, dword [ebp - 0x360]
cmp eax, ebx
jb 0x489079
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [ebp - 0x358]
push eax
call fcn.005244d0
mov eax, dword [ebp - 0x360]
add esp, 0xc
cmp eax, ebx
jb 0x48909b
mov eax, ebx
and byte [ebp + eax - 0x790], 0
xor eax, eax
push eax
push eax
push eax
push eax
lea eax, [ebp - 0x790]
push eax
push 7
jmp 0x489212
cmp dword [ebp - 0x38c], 2
jl 0x4895b2
and dword [ebp - 0x18], 0
and dword [ebp + 0x10], 0
cmp dword [ebp - 0x38c], 3
jl 0x489148
cmp dword [ebp - 0x324], 0
jne 0x489148
mov eax, dword [ebp - 0x300]
cmp eax, ebx
jb 0x4890ea
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [ebp - 0x2f8]
push eax
call fcn.005244d0
mov eax, dword [ebp - 0x300]
add esp, 0xc
cmp eax, ebx
jb 0x48910c
mov eax, ebx
and byte [ebp + eax - 0x790], 0
lea eax, [ebp - 0x790]
push str.LeadingZero
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x48912e
mov dword [ebp - 0x18], edi
lea eax, [ebp - 0x790]
push 0x5c7308
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x489148
mov dword [ebp + 0x10], edi
cmp dword [ebp - 0x38c], 4
jl 0x4891c4
cmp dword [ebp - 0x2f4], 0
jne 0x4891c4
mov eax, dword [ebp - 0x2d0]
cmp eax, ebx
jb 0x489166
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [ebp - 0x2c8]
push eax
call fcn.005244d0
mov eax, dword [ebp - 0x2d0]
add esp, 0xc
cmp eax, ebx
jb 0x489188
mov eax, ebx
and byte [ebp + eax - 0x790], 0
lea eax, [ebp - 0x790]
push str.LeadingZero
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x4891aa
mov dword [ebp - 0x18], edi
lea eax, [ebp - 0x790]
push 0x5c7308
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x4891c4
mov dword [ebp + 0x10], edi
push dword [ebp + 0x10]
push dword [ebp - 0x18]
push dword [ebp - 0x330]
push dword [ebp - 0x360]
push 0
push 8
jmp 0x489212
cmp dword [ebp - 0x38c], edi
jne 0x4895b2
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0x360]
push eax
push 9
jmp 0x489212
cmp dword [ebp - 0x38c], edi
jne 0x4895b2
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0x360]
push eax
push 0xa
mov ecx, esi
call fcn.004848a8
jmp case.0x488247.85
cmp dword [ebp - 0x38c], edi
mov dword [ebp - 0x18], edi
jne 0x489239
xor eax, eax
cmp dword [ebp - 0x384], eax
jne 0x4895b2
jmp 0x489266
cmp dword [ebp - 0x38c], 2
jne case.0x488247.85
cmp dword [ebp - 0x384], edi
jne 0x489257
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x354], 0
jne case.0x488247.85
mov eax, edi
lea eax, [eax + eax*2]
or dword [ebp + 0x10], 0xffffffff
shl eax, 4
mov ecx, dword [ebp + eax - 0x360]
lea esi, [ebp + eax - 0x360]
cmp ecx, ebx
jb 0x489284
mov ecx, ebx
push ecx
push dword [ebp + eax - 0x358]
lea eax, [ebp - 0x790]
push eax
call fcn.005244d0
mov esi, dword [esi]
add esp, 0xc
cmp esi, ebx
jb 0x4892a3
mov esi, ebx
and byte [ebp + esi - 0x790], 0
mov eax, dword [ebp - 0x14]
xor esi, esi
cmp dword [eax + 0x2774], esi
jle case.0x488247.85
mov edi, eax
mov eax, dword [edi + 0x2748]
push dword [eax + esi*4]
lea eax, [ebp - 0x790]
push eax
call fcn.00528430
pop ecx
test eax, eax
pop ecx
jne 0x4892e6
mov eax, dword [edi + 0x2770]
movzx eax, word [eax + esi*2]
mov dword [ebp + 0x10], eax
inc esi
cmp esi, dword [edi + 0x2774]
jl 0x4892be
mov ecx, dword [ebp + 0x10]
cmp ecx, 0xffffffff
je case.0x488247.85
mov eax, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
mov edx, dword [eax + 0x2794]
mov byte [edx], 0x4d
mov edx, dword [eax + 0x2794]
mov dword [edx + 4], esi
mov edx, dword [eax + 0x2794]
mov dword [edx + 8], ecx
add dword [eax + 0x2794], 0x18
inc dword [eax + 0x278c]
jmp case.0x488247.85
cmp dword [ebp - 0x38c], edi
jne 0x4895b2
cmp dword [ebp - 0x384], 0
jne 0x4895b2
mov eax, dword [ebp - 0x360]
cmp eax, ebx
jb 0x489353
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [ebp - 0x358]
push eax
call fcn.005244d0
mov eax, dword [ebp - 0x360]
add esp, 0xc
cmp eax, ebx
jb 0x489375
mov eax, ebx
and byte [ebp + eax - 0x790], 0
lea eax, [ebp - 0x790]
push eax
mov ecx, esi
call fcn.004847a1
jmp case.0x488247.85
push 0xe
jmp 0x48951d
push 0xf
jmp 0x48951d
push 0x93
jmp 0x48951d
cmp dword [ebp - 0x38c], edi
jne 0x4895b2
cmp dword [ebp - 0x384], 0
jne 0x4893f5
mov eax, dword [ebp - 0x360]
cmp eax, ebx
jb 0x4893c9
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [ebp - 0x358]
push eax
call fcn.005244d0
mov eax, dword [ebp - 0x360]
add esp, 0xc
cmp eax, ebx
jb 0x4893eb
mov eax, ebx
and byte [ebp + eax - 0x790], 0
jmp 0x489408
mov al, byte [ebp - 0x360]
and byte [ebp - 0x78f], 0
mov byte [ebp - 0x790], al
cmp byte [ebp - 0x390], 0x10
jne 0x489415
push 0
jmp 0x489416
push edi
lea eax, [ebp - 0x790]
mov ecx, esi
push eax
call fcn.00484a32
jmp case.0x488247.85
cmp dword [ebp - 0x38c], 0
jne 0x489439
and dword [ebp - 0x360], 0
push dword [ebp - 0x360]
mov ecx, esi
call fcn.004849d1
jmp case.0x488247.85
push 0x13
jmp 0x48951d
push 0
jmp 0x489457
push edi
push dword [ebp - 0x360]
mov ecx, esi
call fcn.0048498b
jmp case.0x488247.85
push 0x15
jmp 0x48951d
push 0x16
jmp 0x48951d
push 0x17
jmp 0x48951d
push 0x18
jmp 0x48951d
cmp dword [ebp - 0x38c], edi
jne 0x4895b2
cmp dword [ebp - 0x384], 0
jne 0x4895b2
mov eax, dword [ebp - 0x360]
cmp eax, ebx
jb 0x4894aa
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [ebp - 0x358]
push eax
call fcn.005244d0
mov eax, dword [ebp - 0x360]
add esp, 0xc
cmp eax, ebx
jb 0x4894cc
mov eax, ebx
and byte [ebp + eax - 0x790], 0
lea eax, [ebp - 0x790]
push eax
mov ecx, esi
movzx eax, byte [ebp - 0x390]
push eax
call fcn.00484ab7
jmp case.0x488247.85
cmp dword [ebp - 0x38c], 0
jne 0x4894ff
and dword [ebp - 0x360], 0
push dword [ebp - 0x360]
mov ecx, esi
call fcn.00484a06
jmp case.0x488247.85
push 0x88
jmp 0x48951d
push 0x89
mov ecx, esi
call fcn.00484530
jmp case.0x488247.85
cmp dword [ebp - 0x38c], edi
jne 0x4895b2
cmp dword [ebp - 0x384], 0
jne 0x4895b2
mov eax, dword [ebp - 0x360]
cmp eax, ebx
jb 0x489547
mov eax, ebx
push eax
lea eax, [ebp - 0x790]
push dword [ebp - 0x358]
push eax
call fcn.005244d0
mov eax, dword [ebp - 0x360]
add esp, 0xc
cmp eax, ebx
jb 0x489569
mov eax, ebx
and byte [ebp + eax - 0x790], 0
lea eax, [ebp - 0x790]
push eax
mov ecx, esi
movzx eax, byte [ebp - 0x390]
push eax
call fcn.00484ab7
jmp case.0x488247.85
push ecx
jmp 0x48951d
mov dword [ebp - 0x28], edi
cmp dword [ebp - 0x28], 0
jne 0x4895b5
cmp dword [ebp - 0x10], 0
jne 0x4895b5
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp + 0xc]
jge 0x48965f
mov esi, dword [ebp - 0x14]
push 1
pop edi
jmp 0x48820e
mov dword [ebp - 0x10], edi
mov esi, dword [ebp - 0x50]
xor edi, edi
xor eax, eax
mov ecx, dword [ebp + 8]
mov cl, byte [esi + ecx]
cmp cl, 0xd
je 0x4895df
cmp cl, 0xa
je 0x4895df
test cl, cl
je 0x4895df
mov byte [ebp + eax - 0x790], cl
inc esi
inc eax
cmp eax, ebx
jb 0x4895bc
jmp 0x4895e7
and byte [ebp + eax - 0x790], 0
and byte [ebp + eax - 0x790], 0
cmp dword [ebp - 0x10], edi
mov eax, dword [0x61d784]
je 0x489629
mov dword [ebp + 0xc], eax
push 0x71
lea ecx, [ebp + 0xc]
mov dword [ebp - 4], 8
call fcn.00545796
mov ecx, dword [ebp - 0x14]
push edi
push dword [ebp + 0xc]
lea eax, [ebp - 0x790]
push eax
call fcn.0054239a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
jmp 0x489657
mov dword [ebp + 8], eax
push 0x72
lea ecx, [ebp + 8]
mov dword [ebp - 4], 9
call fcn.00545796
mov ecx, dword [ebp - 0x14]
push edi
push dword [ebp + 8]
lea eax, [ebp - 0x790]
push eax
call fcn.0054239a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0053eb4f
mov dword [ebp - 0x48], esi
mov esi, dword [ebp - 0x14]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [esi + 0x278c]
push 0
inc eax
lea eax, [eax + eax*2]
shl eax, 3
push eax
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_GlobalReAlloc]
and dword [esi + 0x2798], 0
mov ecx, esi
call fcn.005441f5
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x48]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0x10