Function at 0x463dd3
Capabilities:
Parse pe header

Disassembly:
mov eax, 0x4c0e3c
call fcn.00483820
sub esp, 0x5f4
push ebx
or dword [ebp - 0x2c], 0xffffffff
push esi
push edi
xor eax, eax
push 0x400
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0x600]
mov ebx, ecx
push eax
call fcn.004843d0
add esp, 0xc
mov ecx, dword [ebp + 0x10]
push 1
pop edi
mov dword [ebx + 0xee6], edi
mov dword [ebx + 0xfae], edi
mov eax, dword [ebx + 0xf36]
mov eax, dword [eax + ecx*4]
push eax
mov dword [ebp - 0x28], eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov ecx, ebx
mov dword [ebx + 0xfaa], eax
call fcn.0049b2b0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp + 0xc]
jge 0x464b78
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x1c]
push dword [ebp + 0xc]
mov ecx, ebx
mov esi, 0x3ff
push eax
push dword [ebp + 8]
call fcn.00464d7a
movzx eax, byte [ebp - 0x200]
dec eax
cmp eax, 0x82
ja case.0x463e84.17
movzx eax, byte [eax + 0x464cf7]
jmp dword [eax*4 + 0x464bbb]
xor eax, eax
cmp byte [ebp - 0x200], 0x82
sete al
cmp dword [ebp - 0x1fc], edi
mov esi, eax
jne 0x464aca
cmp dword [ebp - 0x1f4], edi
jne 0x464aca
push 8
push str.GotoLine
push dword [ebp - 0x1f8]
call fcn.00487a70
add esp, 0xc
test eax, eax
push esi
push dword [ebp - 0x1d0]
jne 0x463ed4
push edi
jmp 0x463ed6
push 0
mov ecx, ebx
call fcn.00460e78
jmp case.0x463e84.85
cmp dword [ebp - 0x1fc], edi
jne 0x464aca
cmp dword [ebp - 0x1f4], edi
jne 0x464aca
push 9
push str.HexInsert
push dword [ebp - 0x1f8]
call fcn.00487a70
add esp, 0xc
test eax, eax
jne 0x463f16
push edi
jmp 0x463f18
push 0
push dword [ebp - 0x1d0]
mov ecx, ebx
call fcn.00461096
jmp case.0x463e84.85
cmp dword [ebp - 0x1fc], edi
jl 0x464aca
xor eax, eax
cmp dword [ebp - 0x1f4], eax
jne 0x464aca
xor edi, edi
cmp dword [ebp - 0x1fc], eax
mov dword [ebp - 0x14], eax
mov dword [ebp + 0x10], eax
jle 0x464029
lea esi, [ebp - 0x1d0]
mov eax, dword [esi]
cmp eax, 5
jb 0x463f68
push 5
pop eax
push eax
lea eax, [ebp - 0x38]
push dword [esi + 4]
push eax
call fcn.00483fe0
and byte [ebp - 0x33], 0
lea eax, [ebp - 0x38]
push 0x4e9530
push eax
call fcn.00485250
add esp, 0x14
test eax, eax
jne 0x463fd1
push eax
push 0x11
mov ecx, ebx
call fcn.00460ecb
mov eax, dword [esi]
mov ecx, 0x3ff
add eax, 0xfffffffb
sub ecx, edi
cmp eax, ecx
mov dword [ebp - 0x14], 1
jl 0x463fb1
mov eax, ecx
push eax
mov eax, dword [esi + 4]
add eax, 5
push eax
lea eax, [ebp + edi - 0x600]
push eax
call fcn.00483fe0
mov eax, dword [esi]
add esp, 0xc
lea edi, [edi + eax - 5]
jmp 0x463ff6
mov eax, dword [esi]
mov ecx, 0x3ff
sub ecx, edi
cmp eax, ecx
jl 0x463fe0
mov eax, ecx
push eax
lea eax, [ebp + edi - 0x600]
push dword [esi + 4]
push eax
call fcn.00483fe0
add esp, 0xc
add edi, dword [esi]
mov eax, dword [ebp - 0x1fc]
lea ecx, [eax - 1]
cmp dword [ebp + 0x10], ecx
jge 0x46400d
mov byte [ebp + edi - 0x600], 0x20
inc edi
inc dword [ebp + 0x10]
add esi, 0x2c
cmp dword [ebp + 0x10], eax
jl 0x463f5e
cmp edi, 0x3ff
jb 0x464029
mov edi, 0x3ff
mov eax, dword [0x4eec8c]
and byte [ebp + edi - 0x600], 0
mov dword [ebp - 0x24], eax
xor esi, esi
cmp byte [0x4e92e0], 0
mov dword [ebp - 4], esi
je 0x464085
mov edi, 0x4e92e0
push dword [edi + 2]
lea ecx, [ebp - 0x24]
call fcn.0049be1e
lea eax, [ebp - 0x600]
push eax
push dword [ebp - 0x24]
call fcn.00485250
pop ecx
test eax, eax
pop ecx
je 0x464077
add edi, 6
inc esi
cmp byte [edi], 0
jne 0x46404c
jmp 0x464085
lea eax, [esi + esi*2]
movzx eax, byte [eax*2 + 0x4e92e0]
mov dword [ebp - 0x3c], eax
lea eax, [esi + esi*2]
mov al, byte [eax*2 + 0x4e92e0]
test al, al
je 0x4640b0
cmp al, 8
push 0
jne 0x4640a4
push 8
mov ecx, ebx
call fcn.00460fcd
jmp 0x4640b9
push dword [ebp - 0x3c]
mov ecx, ebx
call fcn.00460ecb
jmp 0x4640b9
push 1
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x14], 0
je 0x4640ca
push 0
push 0x11
mov ecx, ebx
call fcn.00460f58
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0049b7ff
jmp 0x464aaa
cmp dword [ebp - 0x1fc], edi
jne 0x464aca
cmp dword [ebp - 0x1f4], edi
jne 0x464aca
push dword [ebp - 0x1d0]
mov ecx, ebx
call fcn.00460e0b
jmp case.0x463e84.85
xor eax, eax
cmp dword [ebp - 0x1fc], eax
mov dword [ebp + 0x10], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
jle 0x4641d0
lea esi, [ebp - 0x1d0]
cmp dword [esi - 0x24], 1
jne 0x464136
mov eax, dword [esi]
or dword [ebp + 0x10], 8
mov dword [ebp - 0x18], eax
jmp 0x4641bb
mov eax, dword [esi]
mov edi, 0x3ff
cmp eax, edi
jb 0x464143
mov eax, edi
push eax
lea eax, [ebp - 0x600]
push dword [esi + 4]
push eax
call fcn.00483fe0
mov eax, dword [esi]
add esp, 0xc
cmp eax, edi
jb 0x46415e
mov eax, edi
and byte [ebp + eax - 0x600], 0
lea eax, [ebp - 0x600]
push str.SortDes
push eax
call fcn.00485250
pop ecx
test eax, eax
pop ecx
jne 0x464183
or dword [ebp + 0x10], 4
jmp 0x4641bb
lea eax, [ebp - 0x600]
push str.IgnoreCase
push eax
call fcn.00485250
pop ecx
test eax, eax
pop ecx
jne 0x4641a0
or dword [ebp + 0x10], 1
jmp 0x4641bb
lea eax, [ebp - 0x600]
push str.RemoveDup
push eax
call fcn.00485250
pop ecx
test eax, eax
pop ecx
jne 0x4641bb
or dword [ebp + 0x10], 2
inc dword [ebp - 0x14]
add esi, 0x2c
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x1fc]
jl 0x464122
push dword [ebp + 0x10]
mov ecx, ebx
push dword [ebp - 0x18]
call fcn.00460e40
jmp case.0x463e84.85
xor esi, esi
cmp dword [ebp - 0x1d0], esi
jle case.0x463e84.85
mov eax, dword [ebp - 0x1cc]
mov al, byte [eax + esi]
cmp al, 0xa
je 0x46420a
movzx eax, al
push 0
push eax
mov ecx, ebx
call fcn.00460fcd
inc esi
cmp esi, dword [ebp - 0x1d0]
jl 0x4641f0
jmp case.0x463e84.85
and dword [ebp - 0x18], 0
cmp dword [ebp - 0x1fc], 0
mov dword [ebp + 0x10], edi
jle 0x464340
lea eax, [ebp - 0x1d0]
mov dword [ebp - 0x14], eax
jmp 0x46423a
mov eax, dword [ebp - 0x14]
cmp dword [eax - 0x24], 0
jne 0x464324
mov eax, dword [eax]
cmp eax, esi
jb 0x46424c
mov eax, esi
push eax
mov eax, dword [ebp - 0x14]
push dword [eax + 4]
lea eax, [ebp - 0x600]
push eax
call fcn.00483fe0
mov eax, dword [ebp - 0x14]
add esp, 0xc
mov eax, dword [eax]
cmp eax, esi
jb 0x46426d
mov eax, esi
and byte [ebp + eax - 0x600], 0
lea eax, [ebp - 0x600]
push 0x4ed678
push eax
call fcn.00485250
pop ecx
test eax, eax
pop ecx
jne 0x464292
or dword [ebp + 0x10], 2
jmp 0x464304
lea eax, [ebp - 0x600]
push 0x4edd68
push eax
call fcn.00485250
pop ecx
test eax, eax
pop ecx
jne 0x4642af
or dword [ebp + 0x10], 4
jmp 0x464304
lea eax, [ebp - 0x600]
push 0x4ed64c
push eax
call fcn.00485250
pop ecx
test eax, eax
pop ecx
jne 0x4642cc
or dword [ebp + 0x10], 8
jmp 0x464304
lea eax, [ebp - 0x600]
push 0x4edd64
push eax
call fcn.00485250
pop ecx
test eax, eax
pop ecx
jne 0x4642e9
and dword [ebp + 0x10], 0xfffffffe
jmp 0x464304
lea eax, [ebp - 0x600]
push str.Select
push eax
call fcn.00485250
pop ecx
test eax, eax
pop ecx
jne 0x464304
or byte [ebp + 0x10], 0x80
mov eax, dword [ebp - 0x1fc]
dec eax
cmp dword [ebp - 0x18], eax
jne 0x46432a
lea eax, [ebp - 0x600]
lea ecx, [ebx + 0xe1a]
push eax
call fcn.0049b93c
jmp 0x46432a
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x10], edi
inc dword [ebp - 0x18]
add dword [ebp - 0x14], 0x2c
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1fc]
jl 0x464237
cmp dword [ebp - 0x1fc], edi
jl 0x464aaa
lea eax, [ebp - 0x200]
mov esi, dword [ebp - 0x1c]
push eax
lea eax, [ebp - 0x1c]
push dword [ebp + 0xc]
mov ecx, ebx
push eax
push dword [ebp + 8]
call fcn.00464d7a
cmp dword [ebp - 0x200], 0x52
jne 0x464465
xor ecx, ecx
cmp dword [ebp - 0x1fc], ecx
mov dword [ebp - 0x18], ecx
jle 0x46442c
lea esi, [ebp - 0x1d0]
cmp dword [esi - 0x24], 0
jne 0x464416
mov eax, dword [esi]
mov edi, 0x3ff
cmp eax, edi
jb 0x4643a2
mov eax, edi
push eax
lea eax, [ebp - 0x600]
push dword [esi + 4]
push eax
call fcn.00483fe0
mov eax, dword [esi]
add esp, 0xc
cmp eax, edi
jb 0x4643bd
mov eax, edi
and byte [ebp + eax - 0x600], 0
lea eax, [ebp - 0x600]
push 0x4edd58
push eax
call fcn.00485250
pop ecx
test eax, eax
pop ecx
jne 0x4643e0
or dword [ebp + 0x10], 0x20
lea eax, [ebp - 0x600]
push str.AllFiles
push eax
call fcn.00485250
pop ecx
test eax, eax
pop ecx
jne 0x4643fb
or byte [ebp + 0x11], 2
lea eax, [ebp - 0x600]
push str.SelectText
push eax
call fcn.00485250
pop ecx
test eax, eax
pop ecx
jne 0x464416
or byte [ebp + 0x11], 1
mov ecx, dword [ebp - 0x18]
add esi, 0x2c
inc ecx
cmp ecx, dword [ebp - 0x1fc]
mov dword [ebp - 0x18], ecx
jl 0x46438b
push 1
pop eax
cmp dword [ebp - 0x1fc], eax
jl 0x46445a
imul ecx, ecx, 0x2c
cmp dword [ebp + ecx - 0x220], 0
jne 0x46445a
lea eax, [ebp - 0x600]
mov ecx, ebx
push eax
push dword [ebp + 0x10]
call fcn.0046126b
jmp 0x464aaa
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], eax
jmp 0x464aaa
or dword [ebp + 0x10], 0x40
mov dword [ebp - 0x1c], esi
jmp 0x464444
cmp dword [ebp - 0x1fc], edi
jne 0x4644fa
cmp dword [ebp - 0x1f4], 0
jne 0x4644fa
push 6
push 0x4ea448
push dword [ebp - 0x1f8]
call fcn.00487a70
add esp, 0xc
test eax, eax
jne case.0x463e84.85
mov eax, dword [ebp - 0x1d0]
cmp eax, esi
jb 0x4644ac
mov eax, esi
push eax
lea eax, [ebp - 0x600]
push dword [ebp - 0x1cc]
push eax
call fcn.00483fe0
add esp, 0xc
cmp byte [ebp - 0x600], 0
jne 0x4644db
and byte [ebp - 0x5ff], 0
mov byte [ebp - 0x600], 0x20
jmp 0x4644f1
cmp dword [ebp - 0x1d0], esi
jae 0x4644e9
mov esi, dword [ebp - 0x1d0]
and byte [ebp + esi - 0x600], 0
lea eax, [ebp - 0x600]
push eax
jmp 0x46451c
push 4
push 0x4edc34
push dword [ebp - 0x1f8]
call fcn.00487a70
add esp, 0xc
test eax, eax
jne 0x464aca
push 0x4f1070
mov ecx, ebx
call fcn.004613f1
jmp case.0x463e84.85
cmp dword [ebp - 0x1fc], edi
jne 0x464aca
cmp dword [ebp - 0x1f4], 0
jne 0x464aca
mov eax, dword [ebp - 0x1d0]
cmp eax, esi
jb 0x46454d
mov eax, esi
push eax
lea eax, [ebp - 0x600]
push dword [ebp - 0x1cc]
push eax
call fcn.00483fe0
add esp, 0xc
cmp dword [ebp - 0x1d0], esi
jae 0x464571
mov esi, dword [ebp - 0x1d0]
and byte [ebp + esi - 0x600], 0
lea eax, [ebp - 0x600]
push eax
mov ecx, ebx
call fcn.00461313
jmp case.0x463e84.85
push 0x6b
jmp 0x464a13
push 0x53
jmp 0x464a13
push 0x4f
jmp 0x464a13
push 0x50
jmp 0x464a13
push 0x4c
jmp 0x464a13
push 0x4e
jmp 0x464a13
push 0x48
jmp 0x464a13
push 0x41
jmp 0x464a13
push 0x45
jmp 0x464a13
push 0x5a
jmp 0x464a13
push 0x49
jmp 0x464a13
push 0x56
jmp 0x464a13
push 0
push 0
push edi
jmp 0x4646e0
push 0
push edi
push 0
jmp 0x4646e0
push edi
jmp 0x4645ec
push edi
push 0
jmp 0x4645ed
push 0x6e
jmp 0x464a13
push 0x70
jmp 0x464a13
push 0x68
jmp 0x464a13
push 0x6f
jmp 0x464a13
push 0x54
jmp 0x464a13
push 0x61
jmp 0x464a13
push 0x57
jmp 0x464a13
push 0x77
jmp 0x464a13
push 0x58
jmp 0x464a13
push 0x78
jmp 0x464a13
push 0x6c
jmp 0x464a13
push 0x6d
jmp 0x464a13
push 0x4a
jmp 0x464a13
push 0x64
jmp 0x464a13
push 0x62
jmp 0x464a13
push 0x75
jmp 0x464a13
push 0x63
jmp 0x464a13
push 0x51
jmp 0x464a13
push 0x29
jmp 0x464a13
push 0x30
jmp 0x464a13
push 0x31
jmp 0x464a13
push 0x32
jmp 0x464a13
push 0x33
jmp 0x464a13
push 0x34
jmp 0x464a13
push 0x35
jmp 0x464a13
push 4
jmp 0x464a13
push 5
jmp 0x464a13
push 6
jmp 0x464a13
push edi
jmp 0x464a13
push 2
jmp 0x464a13
push 3
jmp 0x464a13
push 0xc
jmp 0x464a13
xor eax, eax
push eax
push eax
push eax
mov ecx, ebx
call fcn.004610ff
jmp case.0x463e84.85
cmp dword [ebp - 0x1fc], edi
jne 0x464aca
cmp dword [ebp - 0x1f4], edi
jne 0x464aca
push dword [ebp - 0x1d0]
mov ecx, ebx
call fcn.00461205
jmp case.0x463e84.85
cmp dword [ebp - 0x1fc], edi
jne 0x464aca
cmp dword [ebp - 0x1f4], 0
jne 0x464aca
mov eax, dword [ebp - 0x1d0]
cmp eax, esi
jb 0x46473b
mov eax, esi
push eax
lea eax, [ebp - 0x600]
push dword [ebp - 0x1cc]
push eax
call fcn.00483fe0
add esp, 0xc
cmp dword [ebp - 0x1d0], esi
jae 0x46475f
mov esi, dword [ebp - 0x1d0]
and byte [ebp + esi - 0x600], 0
xor eax, eax
push eax
push eax
push eax
lea eax, [ebp - 0x600]
push eax
push 7
jmp 0x4647d7
cmp dword [ebp - 0x1fc], 2
jl 0x464aca
xor eax, eax
cmp dword [ebp - 0x1fc], 2
setg al
push eax
push dword [ebp - 0x1a4]
push dword [ebp - 0x1d0]
push 0
push 8
jmp 0x4647d7
cmp dword [ebp - 0x1fc], edi
jne 0x464aca
xor eax, eax
push eax
push eax
push dword [ebp - 0x1d0]
push eax
push 9
jmp 0x4647d7
cmp dword [ebp - 0x1fc], edi
jne 0x464aca
xor eax, eax
push eax
push eax
push dword [ebp - 0x1d0]
push eax
push 0xa
mov ecx, ebx
call fcn.00461489
jmp case.0x463e84.85
cmp dword [ebp - 0x1fc], edi
mov dword [ebp - 0x14], edi
jne 0x4647fe
xor eax, eax
cmp dword [ebp - 0x1f4], eax
jne 0x464aca
jmp 0x46482b
cmp dword [ebp - 0x1fc], 2
jne case.0x463e84.85
cmp dword [ebp - 0x1f4], edi
jne 0x46481c
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x1c8], 0
jne case.0x463e84.85
mov eax, edi
imul eax, eax, 0x2c
mov ecx, dword [ebp + eax - 0x1d0]
or dword [ebp + 0x10], 0xffffffff
lea esi, [ebp + eax - 0x1d0]
mov edi, 0x3ff
cmp ecx, edi
jb 0x46484b
mov ecx, edi
push ecx
push dword [ebp + eax - 0x1cc]
lea eax, [ebp - 0x600]
push eax
call fcn.00483fe0
mov esi, dword [esi]
add esp, 0xc
cmp esi, edi
jb 0x46486a
mov esi, edi
and byte [ebp + esi - 0x600], 0
xor esi, esi
cmp dword [ebx + 0xf8a], esi
jle case.0x463e84.85
mov eax, dword [ebx + 0xf5e]
push dword [eax + esi*4]
lea eax, [ebp - 0x600]
push eax
call fcn.00485250
pop ecx
test eax, eax
pop ecx
jne 0x4648a8
mov eax, dword [ebx + 0xf86]
movzx eax, word [eax + esi*2]
mov dword [ebp + 0x10], eax
inc esi
cmp esi, dword [ebx + 0xf8a]
jl 0x464880
mov eax, dword [ebp + 0x10]
cmp eax, 0xffffffff
je case.0x463e84.85
mov ecx, dword [ebx + 0xfaa]
mov edx, dword [ebp - 0x14]
mov byte [ecx], 0x4d
mov ecx, dword [ebx + 0xfaa]
mov dword [ecx + 2], edx
mov ecx, dword [ebx + 0xfaa]
mov dword [ecx + 6], eax
add dword [ebx + 0xfaa], 0x12
inc dword [ebx + 0xfa2]
jmp case.0x463e84.85
cmp dword [ebp - 0x1fc], edi
jne 0x464aca
cmp dword [ebp - 0x1f4], 0
jne 0x464aca
mov eax, dword [ebp - 0x1d0]
cmp eax, esi
jb 0x464912
mov eax, esi
push eax
lea eax, [ebp - 0x600]
push dword [ebp - 0x1cc]
push eax
call fcn.00483fe0
add esp, 0xc
cmp dword [ebp - 0x1d0], esi
jae 0x464936
mov esi, dword [ebp - 0x1d0]
and byte [ebp + esi - 0x600], 0
lea eax, [ebp - 0x600]
push eax
mov ecx, ebx
call fcn.00461382
jmp case.0x463e84.85
push 0xe
jmp 0x464a13
push 0xf
jmp 0x464a13
cmp dword [ebp - 0x1fc], edi
jne 0x464aca
cmp dword [ebp - 0x1f4], 0
jne 0x4649ae
mov eax, dword [ebp - 0x1d0]
cmp eax, esi
jb 0x464980
mov eax, esi
push eax
lea eax, [ebp - 0x600]
push dword [ebp - 0x1cc]
push eax
call fcn.00483fe0
add esp, 0xc
cmp dword [ebp - 0x1d0], esi
jae 0x4649a4
mov esi, dword [ebp - 0x1d0]
and byte [ebp + esi - 0x600], 0
jmp 0x4649ba
mov al, byte [ebp - 0x1d0]
mov byte [ebp - 0x600], al
lea eax, [ebp - 0x600]
mov ecx, ebx
push eax
call fcn.004615cb
jmp case.0x463e84.85
cmp dword [ebp - 0x1fc], 0
jne 0x4649dd
and dword [ebp - 0x1d0], 0
push dword [ebp - 0x1d0]
mov ecx, ebx
call fcn.0046156a
jmp case.0x463e84.85
push 0x13
jmp 0x464a13
push dword [ebp - 0x1d0]
mov ecx, ebx
call fcn.00461535
jmp case.0x463e84.85
push 0x15
jmp 0x464a13
push 0x16
jmp 0x464a13
push 0x17
jmp 0x464a13
push 0x18
mov ecx, ebx
call fcn.0046123b
jmp case.0x463e84.85
cmp dword [ebp - 0x1fc], edi
jne 0x464aca
cmp dword [ebp - 0x1f4], 0
jne 0x464aca
mov eax, dword [ebp - 0x1d0]
cmp eax, esi
jb 0x464a44
mov eax, esi
push eax
lea eax, [ebp - 0x600]
push dword [ebp - 0x1cc]
push eax
call fcn.00483fe0
add esp, 0xc
cmp dword [ebp - 0x1d0], esi
jae 0x464a68
mov esi, dword [ebp - 0x1d0]
and byte [ebp + esi - 0x600], 0
lea eax, [ebp - 0x600]
push eax
mov ecx, ebx
movzx eax, byte [ebp - 0x200]
push eax
call fcn.0046163a
jmp case.0x463e84.85
cmp dword [ebp - 0x1fc], 0
jne 0x464a98
and dword [ebp - 0x1d0], 0
push dword [ebp - 0x1d0]
mov ecx, ebx
call fcn.0046159f
jmp case.0x463e84.85
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], 0
jne 0x464acd
cmp dword [ebp - 0x10], 0
jne 0x464acd
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp + 0xc]
jge 0x464b78
push 1
pop edi
jmp 0x463e4a
mov dword [ebp - 0x10], edi
mov esi, dword [ebp - 0x30]
xor edi, edi
xor eax, eax
mov ecx, dword [ebp + 8]
mov cl, byte [esi + ecx]
cmp cl, 0xd
je 0x464afa
cmp cl, 0xa
je 0x464afa
test cl, cl
je 0x464afa
mov byte [ebp + eax - 0x600], cl
inc esi
inc eax
cmp eax, 0x3ff
jb 0x464ad4
jmp 0x464b02
and byte [ebp + eax - 0x600], 0
and byte [ebp + eax - 0x600], 0
cmp dword [ebp - 0x10], edi
mov eax, dword [0x4eec8c]
je 0x464b43
mov dword [ebp + 0xc], eax
push 0x71
lea ecx, [ebp + 0xc]
mov dword [ebp - 4], 1
call fcn.0049be1e
push edi
lea eax, [ebp - 0x600]
push dword [ebp + 0xc]
mov ecx, ebx
push eax
call fcn.004995e0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
jmp 0x464b70
mov dword [ebp + 8], eax
push 0x72
lea ecx, [ebp + 8]
mov dword [ebp - 4], 2
call fcn.0049be1e
push edi
lea eax, [ebp - 0x600]
push dword [ebp + 8]
mov ecx, ebx
push eax
call fcn.004995e0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0049b7ff
mov dword [ebp - 0x2c], esi
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [ebx + 0xfa2]
push 0
inc eax
lea eax, [eax + eax*8]
shl eax, 1
push eax
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_GlobalReAlloc]
and dword [ebx + 0xfae], 0
mov ecx, ebx
call fcn.0049b2c5
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x2c]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0x10