Function at 0x438d10
Capabilities:
Enumerate pe sections

Disassembly:
mov eax, 0x1818
call fcn.004e6b50
mov eax, dword [0x519bc0]
xor eax, esp
mov dword [esp + 0x1814], eax
push esi
mov esi, dword [esp + 0x1820]
push edi
push esi
mov edi, ecx
call fcn.0047f4c0
test al, al
jne 0x43921a
movzx eax, word [esi]
push ebx
push ebp
push eax
call sub.USER32.dll_CharUpperW
add eax, 0xffffffc0
cmp eax, 0x1a
ja case.0x438d92.69
jmp dword [eax*4 + 0x439f1c]
xor ecx, ecx
cmp word [esi + 2], 0x2b
sete cl
inc ecx
mov dword [edi + 0xa3ec], ecx
jmp case.0x438d92.78
movzx edx, word [esi + 2]
push edx
call sub.USER32.dll_CharUpperW
add eax, 0xffffffbd
cmp eax, 0x13
ja case.0x438d92.69
movzx eax, byte [eax + 0x439fac]
jmp dword [eax*4 + 0x439f88]
mov byte [edi + 0x6154], 1
jmp case.0x438d92.78
mov byte [edi + 0x73a8], 1
jmp case.0x438d92.78
cmp word [esi + 4], 0x2d
lea eax, [esi + 4]
jne 0x438dce
cmp word [esi + 6], 0
jne 0x438dce
mov byte [edi + 0x61b8], 0
jmp case.0x438d92.78
push 0x80
mov byte [edi + 0x61b8], 1
push eax
add edi, 0x61ba
push edi
call fcn.004694b0
jmp case.0x438d92.78
mov byte [edi + 0x62be], 1
jmp case.0x438d92.78
mov byte [edi + 0x6155], 1
jmp case.0x438d92.78
lea eax, [esi + 4]
sub edi, eax
lea edx, [edi + 0x4028]
nop
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x438e10
jmp case.0x438d92.78
mov byte [edi + 0x62ba], 1
jmp case.0x438d92.78
cmp word [esi + 4], 0
jne case.0x438d92.78
movzx ecx, word [esi + 2]
push ecx
call sub.USER32.dll_CharUpperW
cmp eax, 0x2d
je 0x438e76
cmp eax, 0x4c
je 0x438e67
cmp eax, 0x55
jne case.0x438d92.78
mov dword [edi + 0x618c], 1
jmp case.0x438d92.78
mov dword [edi + 0x618c], 2
jmp case.0x438d92.78
mov byte [edi + 0x6156], 1
jmp case.0x438d92.78
cmp word [esi + 4], 0
jne case.0x438d92.78
movzx edx, word [esi + 2]
push edx
call sub.USER32.dll_CharUpperW
add eax, 0xffffffba
cmp eax, 0x11
ja case.0x438d92.78
movzx eax, byte [eax + 0x439fd8]
jmp dword [eax*4 + 0x439fc0]
mov byte [edi + 0x6185], 1
jmp case.0x438d92.78
mov byte [edi + 0x619d], 1
jmp case.0x438d92.78
mov byte [edi + 0x619e], 1
jmp case.0x438d92.78
mov byte [edi + 0x619e], 1
mov byte [edi + 0x61a1], 1
jmp case.0x438d92.78
mov byte [edi + 0x619e], 1
mov byte [edi + 0x61a2], 1
jmp case.0x438d92.78
movzx ecx, word [esi + 2]
lea ebx, [esi + 2]
push ecx
call sub.USER32.dll_CharUpperW
sub eax, 0x4e
je 0x438f97
sub eax, 2
je 0x438f40
cmp word [ebx], 0x2b
mov ecx, edi
jne 0x438f33
add esi, 4
push esi
call fcn.00438680
or dword [edi + 4], eax
mov byte [edi + 8], 1
jmp case.0x438d92.78
push ebx
call fcn.00438680
or dword [edi], eax
jmp case.0x438d92.78
movzx eax, word [esi + 4]
cmp eax, 0x33
ja case.0x438d92.78
movzx edx, byte [eax + 0x43a000]
jmp dword [edx*4 + 0x439fec]
mov dword [edi + 0x615c], 1
jmp case.0x438d92.78
mov dword [edi + 0x615c], 2
jmp case.0x438d92.78
mov dword [edi + 0x615c], 3
jmp case.0x438d92.78
mov dword [edi + 0x615c], 4
jmp case.0x438d92.78
mov byte [edi + 0x61a3], 1
jmp case.0x438d92.78
cmp word [esi + 2], 0
jne case.0x438d92.69
mov byte [edi + 0x6157], 1
jmp case.0x438d92.78
movzx eax, word [esi + 2]
push eax
call sub.USER32.dll_CharUpperW
cmp eax, 0x50
je 0x439008
cmp eax, 0x54
jne case.0x438d92.69
movzx ecx, word [esi + 4]
push ecx
call sub.USER32.dll_CharUpperW
sub eax, 0x42
je 0x438ff9
sub eax, 1
jne case.0x438d92.69
mov dword [edi + 0x613c], 2
jmp case.0x438d92.78
mov dword [edi + 0x613c], 3
jmp case.0x438d92.78
lea ecx, [edi + 0x512a]
lea eax, [esi + 4]
mov byte [ecx], 1
cmp word [eax], 0
je 0x43904e
push eax
lea ecx, [edi + 0x5028]
call fcn.004669a0
mov eax, esi
lea edx, [eax + 2]
jmp 0x439030
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x439030
sub eax, edx
sar eax, 1
lea edx, [eax + eax]
push edx
push esi
call fcn.00466920
jmp case.0x438d92.78
cmp byte [edi + 0x5128], 0
jne case.0x438d92.78
push ecx
add edi, 0x5028
push edi
call fcn.004797e0
jmp case.0x438d92.78
push 3
push 0x502d7c
lea ebx, [esi + 2]
push ebx
call fcn.0046cb30
test eax, eax
jne 0x4390a7
cmp word [esi + 8], 0
lea eax, [esi + 8]
jne 0x439090
mov eax, 0x502d6c
push 0x800
push eax
add edi, 0x512c
push edi
call fcn.004694b0
jmp case.0x438d92.78
push 0x502d64
push ebx
call fcn.0046cb00
test eax, eax
jne 0x4390c2
mov byte [edi + 0x6130], 1
jmp case.0x438d92.78
push 0x502d5c
push ebx
call fcn.0046cb00
test eax, eax
jne 0x4390e0
mov dword [edi + 0x612c], 1
jmp case.0x438d92.78
push 3
push 0x502d54
push ebx
call fcn.0046cb30
test eax, eax
jne 0x439117
cmp word [esi + 8], 0
lea eax, [esi + 8]
jne 0x439100
mov eax, 0x502d50
push 0x800
push eax
add edi, 0x63a4
push edi
call fcn.004694b0
jmp case.0x438d92.78
push 0x502d48
push ebx
call fcn.0046cb00
test eax, eax
jne 0x439135
mov dword [edi + 0x612c], 3
jmp case.0x438d92.78
movzx eax, word [ebx]
push eax
call sub.USER32.dll_CharUpperW
cmp eax, 0x44
jne 0x4391ad
cmp word [esi + 4], 0
lea eax, [esi + 4]
mov ebp, 2
mov ebx, ebp
je case.0x438d92.78
jmp 0x439160
movzx ecx, word [eax]
push ecx
call sub.USER32.dll_CharUpperW
add eax, 0xffffffbd
cmp eax, 0xe
ja case.0x439178.69
movzx edx, byte [eax + 0x43a048]
jmp dword [edx*4 + 0x43a034]
mov dword [edi + 0x612c], ebp
jmp case.0x439178.69
mov byte [edi + 0x6149], 1
jmp case.0x439178.69
mov byte [edi + 0x614a], 1
jmp case.0x439178.69
mov byte [edi + 0x6148], 1
inc ebx
cmp word [esi + ebx*2], 0
lea eax, [esi + ebx*2]
jne 0x439160
jmp case.0x438d92.78
push 0x502d40
push ebx
call fcn.0046cb00
test eax, eax
jne case.0x438d92.78
mov byte [edi + 0x73a9], 1
jmp case.0x438d92.78
movzx eax, word [esi + 2]
push eax
call sub.USER32.dll_CharUpperW
test eax, eax
je 0x4391e1
cmp eax, 0x42
jne case.0x438d92.78
mov byte [edi + 0x619c], 1
jmp case.0x438d92.78
mov byte [edi + 0x62e0], 1
jmp case.0x438d92.78
push 2
push 0x502d38
lea ecx, [esi + 2]
push ecx
call fcn.0046cb30
test eax, eax
jne case.0x438d92.78
lea edx, [esi + 6]
push edx
mov ecx, 0x531168
call fcn.004483a0
test al, al
jne case.0x438d92.78
push esi
mov ecx, edi
call fcn.00438920
pop ebp
pop ebx
mov ecx, dword [esp + 0x181c]
pop edi
pop esi
xor ecx, esp
call fcn.004e6b3a
add esp, 0x1818
ret 4
movzx eax, word [esi + 2]
push eax
call sub.USER32.dll_CharUpperW
add eax, 0xffffffbf
cmp eax, 0x13
ja case.0x439250.66
movzx ecx, byte [eax + 0x43a074]
jmp dword [ecx*4 + 0x43a058]
movzx eax, word [esi + 4]
test ax, ax
je 0x439270
cmp ax, 0x35
je 0x439270
xor eax, eax
mov byte [edi + 0x619f], al
jmp case.0x438d92.78
mov eax, 1
mov byte [edi + 0x619f], al
jmp case.0x438d92.78
movzx eax, word [esi + 4]
add esi, 4
cmp ax, 0x2d
jne 0x4392b3
lea eax, [edi + 0x62e4]
mov ecx, 0x10
jmp 0x4392a0
mov dword [eax], 3
add eax, 0xc
sub ecx, 1
jne 0x4392a0
jmp case.0x438d92.78
test ax, ax
je case.0x438d92.78
lea esp, [esp]
xor ecx, ecx
movzx edx, ax
push edx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], ecx
lea ebx, [ecx + 1]
lea ebp, [ecx + 8]
call fcn.00469150
test al, al
je 0x439305
push esi
call fcn.0046cdc0
mov dword [esp + 0x14], eax
movzx eax, word [esi]
push eax
call fcn.00469150
test al, al
je 0x439305
movzx ecx, word [esi + 2]
add esi, 2
push ecx
call fcn.00469150
test al, al
jne 0x4392f4
cmp word [esi], 0x3a
jne 0x439344
movzx edx, word [esi + 2]
push edx
call fcn.00469150
test al, al
je 0x439344
add esi, 2
push esi
call fcn.0046cdc0
mov dword [esp + 0x18], eax
movzx eax, word [esi]
push eax
call fcn.00469150
test al, al
je 0x439344
movzx ecx, word [esi + 2]
add esi, 2
push ecx
call fcn.00469150
test al, al
jne 0x439333
movzx eax, word [esi]
push eax
call sub.USER32.dll_CharUpperW
sub eax, 0x41
add esi, 2
cmp eax, 0x13
ja case.0x43935f.66
movzx edx, byte [eax + 0x43a0a8]
jmp dword [edx*4 + 0x43a088]
mov ebp, 7
jmp case.0x43935f.66
mov ebp, ebx
jmp case.0x43935f.66
xor ebp, ebp
jmp case.0x43935f.66
mov ebp, 4
jmp case.0x43935f.66
mov ebp, 5
jmp case.0x43935f.66
mov ebp, 6
jmp case.0x43935f.66
mov ebp, 3
movzx eax, word [esi]
cmp ax, 0x2b
je 0x43939e
cmp ax, 0x2d
jne 0x4393b1
add esi, 2
mov ebx, 2
cmp ax, 0x2b
je 0x4393b1
mov ebx, 3
mov edx, dword [esp + 0x14]
lea ecx, [ebp + ebp*2 + 0x18ba]
lea eax, [ebp + ebp*2]
lea eax, [edi + eax*4]
mov dword [edi + ecx*4], edx
mov ecx, dword [esp + 0x18]
mov dword [eax + 0x62e4], ebx
mov dword [eax + 0x62ec], ecx
movzx eax, word [esi]
test ax, ax
jne 0x4392c0
jmp case.0x438d92.78
lea ebx, [esi + 4]
push ebx
call fcn.0046cdc0
mov dword [edi + 0xc], eax
test eax, eax
jne 0x439411
movzx edx, word [ebx]
push edx
call sub.USER32.dll_CharUpperW
mov ecx, eax
sub ecx, 0x41
mov eax, 0x10000
shl eax, cl
mov dword [edi + 0xc], eax
jmp 0x439459
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x439416
sub eax, edx
sar eax, 1
movzx ecx, word [esi + eax*2 - 2]
push ecx
call sub.USER32.dll_CharUpperW
cmp eax, 0x47
je 0x439450
cmp eax, 0x4b
je 0x439445
mov edx, dword [edi + 0xc]
shl edx, 0x14
mov dword [edi + 0xc], edx
jmp 0x439459
mov eax, dword [edi + 0xc]
shl eax, 0xa
mov dword [edi + 0xc], eax
jmp 0x439459
mov ecx, dword [edi + 0xc]
shl ecx, 0x1e
mov dword [edi + 0xc], ecx
cmp dword [edi + 0xc], 0x40000000
ja 0x43946d
mov ecx, edi
call fcn.00438780
test al, al
jne 0x439474
mov dword [edi + 0xc], 0x400000
mov edx, dword [edi + 0xc]
mov dword [edi + 0x83c4], edx
jmp case.0x438d92.78
add esi, 4
cmp word [esi], 0
jne 0x439490
mov esi, str.7z_ace_arj_bz2_cab_gz_jpeg_jpg_lha_lzh_mp3_rar_taz_tgz_xz_z_zip
push 0x400
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004694b0
cmp word [esp + 0x24], 0
lea esi, [esp + 0x24]
je case.0x438d92.78
add edi, 0xc584
push 0x3b
push esi
call fcn.004e94f5
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x4394cc
xor ecx, ecx
mov word [ebx], cx
cmp word [esi], 0x2e
jne 0x4394d5
add esi, 2
push 0x502cb0
push esi
call fcn.004e9ced
add esp, 8
test eax, eax
jne 0x439504
push esi
lea edx, [esp + 0x828]
push str.._ls
push edx
mov edx, 0x800
call fcn.004a63e0
add esp, 0xc
jmp 0x439517
push 0x800
push esi
lea eax, [esp + 0x82c]
push eax
call fcn.004694b0
lea ecx, [esp + 0x824]
push ecx
mov ecx, edi
call fcn.004698e0
test ebx, ebx
je case.0x438d92.78
cmp word [ebx + 2], 0
lea esi, [ebx + 2]
jne 0x4394b6
jmp case.0x438d92.78
lea edx, [esi + 4]
push edx
call fcn.0046cdc0
mov dword [edi + 0x83b8], eax
cmp eax, 0x20
ja case.0x438d92.69
cmp eax, 1
jb case.0x438d92.69
mov byte [edi + 0x83bc], 1
jmp case.0x438d92.78
movzx eax, word [esi + 2]
add eax, 0xffffffd0
cmp eax, 5
mov dword [edi + 0x6138], eax
jg case.0x438d92.69
test eax, eax
jge case.0x438d92.78
jmp case.0x438d92.69
cmp word [esi + 2], 0
lea ebp, [esi + 2]
je case.0x438d92.78
movzx eax, word [esi]
push eax
call sub.USER32.dll_CharUpperW
lea ebx, [edi + 0xc4cc]
cmp eax, 0x4e
je 0x4395b9
lea ebx, [edi + 0xc470]
cmp word [ebp], 0x40
jne 0x4395ea
push esi
call fcn.00452b90
test al, al
jne 0x4395ea
mov ecx, dword [edi + 0x401c]
push 1
push 1
push 1
push ecx
push 1
push 0
push ebx
add esi, 4
push esi
call fcn.00446780
jmp case.0x438d92.78
push ebp
mov ecx, ebx
call fcn.004698e0
jmp case.0x438d92.78
movzx edx, word [esi + 2]
push edx
call sub.USER32.dll_CharUpperW
cmp eax, 0x57
ja case.0x438d92.69
movzx eax, byte [eax + 0x43a0e8]
jmp dword [eax*4 + 0x43a0bc]
mov dword [edi + 0x6134], 1
jmp case.0x438d92.78
mov dword [edi + 0x6134], 2
jmp case.0x438d92.78
mov dword [edi + 0x6134], 4
jmp case.0x438d92.78
mov byte [edi + 0x62bd], 1
jmp case.0x438d92.78
mov byte [edi + 0x6192], 1
jmp case.0x438d92.78
movzx eax, word [esi + 4]
add esi, 4
sub eax, 0x2d
je 0x43968b
sub eax, 3
je 0x43968b
sub eax, 2
je 0x43967f
mov dword [edi + 0x61a8], 1
jmp 0x439695
mov dword [edi + 0x61a8], 2
jmp 0x439695
mov dword [edi + 0x61a8], 0
push 0x3a
push esi
call fcn.004e94f5
add esp, 8
test eax, eax
je case.0x438d92.78
add eax, 2
push eax
call fcn.0046cc40
mov dword [edi + 0x61b0], eax
mov dword [edi + 0x61b4], edx
jmp case.0x438d92.78
mov byte [edi + 0x6191], 1
movzx ecx, word [esi + 4]
push ecx
call sub.USER32.dll_CharUpperW
cmp eax, 0x41
jne case.0x438d92.78
mov byte [edi + 0x6193], 1
jmp case.0x438d92.78
mov dword [edi + 0x6134], 3
jmp case.0x438d92.78
mov byte [edi + 0x62bc], 1
jmp case.0x438d92.78
mov byte [edi + 0x6190], 1
jmp case.0x438d92.78
cmp word [esi + 2], 0
lea eax, [esi + 2]
jne 0x439731
lea edx, [edi + 0x512a]
push edx
add edi, 0x5028
push edi
call fcn.004797e0
jmp case.0x438d92.78
push eax
lea ecx, [edi + 0x5028]
call fcn.004669a0
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x439742
sub eax, edx
sar eax, 1
add eax, eax
push eax
push esi
call fcn.00466920
jmp case.0x438d92.78
movzx ecx, word [esi + 2]
push ecx
call sub.USER32.dll_CharUpperW
cmp eax, 0x4f
jne case.0x438d92.69
movzx edx, word [esi + 4]
push edx
call sub.USER32.dll_CharUpperW
sub eax, 0
je 0x4397a9
sub eax, 0x2b
je 0x43979a
sub eax, 2
jne case.0x438d92.69
mov dword [edi + 0x2010], eax
jmp case.0x438d92.78
mov dword [edi + 0x2010], 2
jmp case.0x438d92.78
mov dword [edi + 0x2010], 1
jmp case.0x438d92.78
movzx eax, word [esi + 2]
push eax
call sub.USER32.dll_CharUpperW
cmp eax, 0x56
ja case.0x438d92.78
movzx ecx, byte [eax + 0x43a15c]
jmp dword [ecx*4 + 0x43a140]
mov dword [edi + 0x6160], 2
jmp case.0x438d92.78
mov dword [edi + 0x6160], 1
jmp case.0x438d92.78
mov dword [edi + 0x6160], 3
jmp case.0x438d92.78
push 0xfffffffffffffffd
add esi, 4
push esi
mov ecx, edi
call fcn.00438730
mov dword [edi + 0x6140], eax
jmp case.0x438d92.78
push 0xfffffffffffffff6
add esi, 4
push esi
mov ecx, edi
call fcn.00438730
mov dword [edi + 0x6144], eax
jmp case.0x438d92.78
lea ebx, [esi + 4]
push ebx
call fcn.0046cdc0
mov dword [edi + 0x6194], eax
test eax, eax
jl 0x43984e
cmp eax, 0xf
jle 0x439856
push esi
mov ecx, edi
call fcn.00438920
push 0x3a
push ebx
call fcn.004e94f5
add esp, 8
test eax, eax
je 0x43988f
add eax, 2
push eax
call fcn.0046cdc0
cmp eax, 0x3e8
mov dword [edi + 0x6198], eax
jle 0x439883
push esi
mov ecx, edi
call fcn.00438920
mov edx, dword [edi + 0x6198]
push edx
call fcn.00469bd0
mov eax, dword [edi + 0x6194]
push eax
call fcn.00469f30
jmp case.0x438d92.78
push 3
push 0x502c9c
push esi
call fcn.0046cb30
mov ebp, 1
test eax, eax
jne 0x439901
cmp word [esi + 6], ax
lea ebx, [esi + 6]
jne 0x4398c4
mov ebx, str.default.sfx
push ebx
call fcn.004534c0
cmp eax, ebx
jne 0x4398ef
push ebx
call fcn.00445470
test al, al
jne 0x4398ef
push 0
push ebp
push 0x800
lea ecx, [edi + 0x1010]
push ecx
push ebx
call fcn.004538d0
jmp 0x439901
push 0x800
push ebx
lea edx, [edi + 0x1010]
push edx
call fcn.004694b0
movzx eax, word [esi + 2]
lea ebx, [esi + 2]
push eax
call fcn.00469150
test al, al
je 0x43992a
or dword [edi + 0x614c], 2
push ebx
call fcn.0046cdc0
mov dword [edi + 0x6150], eax
jmp case.0x438d92.78
movzx ecx, word [ebx]
push ecx
call sub.USER32.dll_CharUpperW
cmp eax, 0x56
ja case.0x438d92.78
movzx edx, byte [eax + 0x43a1d8]
jmp dword [edx*4 + 0x43a1b4]
or dword [edi + 0x614c], ebp
jmp case.0x438d92.78
mov dword [edi + 0x614c], 0
jmp case.0x438d92.78
or dword [edi + 0x614c], 4
jmp case.0x438d92.78
xor eax, eax
cmp word [esi + 4], 0x2d
setne al
lea eax, [eax*8 + 8]
or dword [edi + 0x614c], eax
jmp case.0x438d92.78
or dword [edi + 0x614c], 8
jmp case.0x438d92.78
movzx ecx, word [esi + 4]
add esi, 4
push ecx
call fcn.00469150
test al, al
je case.0x438d92.78
push esi
call fcn.0046cc40
mov dword [edi + 0x62d0], eax
mov dword [edi + 0x62d4], edx
jmp case.0x438d92.78
movzx edx, word [esi + 4]
add esi, 4
push edx
call fcn.00469150
test al, al
je case.0x438d92.78
push esi
call fcn.0046cc40
mov dword [edi + 0x62d8], eax
mov dword [edi + 0x62dc], edx
jmp case.0x438d92.78
movzx eax, word [esi + 4]
push eax
mov byte [esp + 0x17], 0
call sub.USER32.dll_CharUpperW
cmp eax, 0x41
je 0x439a1c
cmp eax, 0x4f
je 0x439a17
cmp eax, 0x55
jne case.0x438d92.69
lea ebp, [eax - 0x52]
jmp 0x439a1c
mov ebp, 2
cmp word [esi + 6], 0
lea eax, [esi + 6]
jne 0x439a3d
mov dword [edi + 0x4020], ebp
mov dword [edi + 0x401c], ebp
mov dword [edi + 0x4018], ebp
jmp case.0x438d92.78
mov ebx, eax
nop
cmp byte [esp + 0x13], 0
jne case.0x438d92.78
movzx ecx, word [ebx]
push ecx
call sub.USER32.dll_CharUpperW
add eax, 0xffffffbd
cmp eax, 0xf
ja case.0x439a63.68
movzx edx, byte [eax + 0x43a244]
jmp dword [edx*4 + 0x43a230]
mov dword [edi + 0x4018], ebp
jmp 0x439a97
mov dword [edi + 0x401c], ebp
jmp 0x439a97
mov dword [edi + 0x4020], ebp
jmp 0x439a97
mov dword [edi + 0x4024], ebp
jmp 0x439a97
push esi
mov ecx, edi
call fcn.00438920
mov byte [esp + 0x13], 1
add ebx, 2
cmp word [ebx], 0
jne 0x439a40
jmp case.0x438d92.78
movzx eax, word [esi + 2]
push eax
call sub.USER32.dll_CharUpperW
cmp eax, 0x53
ja case.0x438d92.69
movzx ecx, byte [eax + 0x43a27c]
jmp dword [ecx*4 + 0x43a254]
mov dword [edi + 0x6188], 1
jmp case.0x438d92.78
mov dword [edi + 0x6188], 2
jmp case.0x438d92.78
add esi, 4
push esi
lea ecx, [edi + 0x62c0]
call fcn.0046b090
jmp case.0x438d92.78
add esi, 4
push esi
lea ecx, [edi + 0x62c8]
call fcn.0046b090
jmp case.0x438d92.78
add esi, 4
push esi
lea ecx, [edi + 0x62c0]
call fcn.0046afb0
jmp case.0x438d92.78
add esi, 4
push esi
lea ecx, [edi + 0x62c8]
call fcn.0046afb0
jmp case.0x438d92.78
movzx eax, word [esi + 4]
mov ebx, 4
cmp ax, 0x30
jb 0x439bb3
cmp ax, 0x34
ja 0x439bb3
movzx ebx, ax
mov cl, 1
sub ebx, 0x30
cmp ax, 0x2d
jne 0x439b59
xor ebx, ebx
test cl, cl
jne 0x439bcd
cmp ax, 0x2d
je 0x439bcd
cmp ax, 0x2b
je 0x439bcd
test ax, ax
je 0x439bcd
movzx ecx, word [esi + 6]
cmp cx, 0x30
jb 0x439b84
cmp cx, 0x34
ja 0x439b84
movzx ebx, cx
sub ebx, 0x30
cmp cx, 0x2d
jne 0x439b8c
xor ebx, ebx
movzx edx, ax
push edx
call sub.USER32.dll_CharUpperW
sub eax, 0x41
je 0x439bc2
sub eax, 2
je 0x439bb7
sub eax, 0xa
jne case.0x438d92.78
mov dword [edi + 0x73ac], ebx
jmp case.0x438d92.78
xor cl, cl
jmp 0x439b51
mov dword [edi + 0x73b0], ebx
jmp case.0x438d92.78
mov dword [edi + 0x73b4], ebx
jmp case.0x438d92.78
mov dword [edi + 0x73b4], ebx
mov dword [edi + 0x73b0], ebx
mov dword [edi + 0x73ac], ebx
jmp case.0x438d92.78
mov byte [edi + 0x62e1], 0
jmp case.0x438d92.78
mov byte [edi + 0x62e1], 1
jmp case.0x438d92.78
cmp word [esi + 2], 0
jne case.0x438d92.69
mov byte [edi + 0x6158], 1
jmp case.0x438d92.78
movzx eax, word [esi + 2]
push eax
call sub.USER32.dll_CharUpperW
add eax, 0xffffffd3
cmp eax, 0x23
ja case.0x439c2c.46
movzx ecx, byte [eax + 0x43a2e8]
jmp dword [ecx*4 + 0x43a2d0]
mov byte [edi + 0x61a0], 1
jmp case.0x438d92.78
mov byte [edi + 0x61a4], 1
jmp case.0x438d92.78
mov byte [edi + 0x62e2], 1
jmp case.0x438d92.78
movzx edx, word [esi + 4]
push edx
call sub.USER32.dll_CharUpperW
cmp eax, 0x52
jne case.0x438d92.78
add esi, 6
push esi
call fcn.0046cdc0
inc eax
mov dword [edi + 0x73a4], eax
jmp case.0x438d92.78
xor eax, eax
mov dword [edi + 0x6168], eax
mov dword [edi + 0x616c], eax
jmp case.0x438d92.78
xor eax, eax
cmp byte [edi + 0xa3f1], al
jne 0x439cba
lea ecx, [edi + 0x6170]
mov dword [edi + 0x6168], eax
mov dword [edi + 0x616c], eax
call fcn.0042b3a0
mov byte [edi + 0xa3f1], 1
xor ebx, ebx
lea eax, [esi + 2]
xor ebp, ebp
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x18], 1
cmp word [eax], bx
je 0x439d6c
mov dword [esp + 0x14], eax
mov edi, edi
mov eax, dword [esp + 0x14]
movzx ecx, word [eax]
push ecx
call fcn.00469150
test al, al
je 0x439d31
push 0
push 0xa
push ebx
push ebp
call fcn.004e68d0
mov ebx, edx
mov edx, dword [esp + 0x14]
mov ecx, eax
movzx eax, word [edx]
cdq
add ecx, eax
mov eax, dword [esp + 0x20]
push 0
adc ebx, edx
sub ecx, 0x30
push 0xa
mov ebp, ecx
mov ecx, dword [esp + 0x24]
push eax
push ecx
sbb ebx, 0
call fcn.004e68d0
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], edx
jmp 0x439d4b
mov edx, dword [esp + 0x14]
cmp word [edx], 0x2e
jne 0x439d4b
mov dword [esp + 0x1c], 1
mov dword [esp + 0x20], 0
mov eax, dword [esp + 0x18]
inc eax
cmp word [esi + eax*2], 0
mov dword [esp + 0x18], eax
lea eax, [esi + eax*2]
mov dword [esp + 0x14], eax
jne 0x439ce0
mov eax, ebp
or eax, ebx
jne 0x439d78
mov ebp, SysReAllocString
mov ebx, ebp
jmp 0x439e96
mov eax, esi
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x439d80
sub eax, edx
sar eax, 1
movzx eax, word [esi + eax*2 - 2]
add eax, 0xffffffbe
cmp eax, 0x2b
ja case.0x439da7.67
movzx ecx, byte [eax + 0x43a32c]
jmp dword [ecx*4 + 0x43a30c]
test ebx, ebx
jl case.0x439da7.66
jg 0x439dc4
cmp ebp, 0x168
jb case.0x439da7.66
test ebx, ebx
jg case.0x439da7.66
jl 0x439dda
cmp ebp, 0xb40
ja case.0x439da7.66
cmp ebp, 0x4b0
jg 0x439e16
je 0x439e0d
cmp ebp, 0x168
je 0x439e04
cmp ebp, 0x2d0
jne case.0x439da7.66
mov ebp, 0xb2400
xor ebx, ebx
jmp case.0x439da7.66
mov ebp, 0x58800
xor ebx, ebx
jmp case.0x439da7.66
mov ebp, 0x128600
xor ebx, ebx
jmp case.0x439da7.66
cmp ebp, 0x5a0
je 0x439e2f
cmp ebp, 0xb40
jne case.0x439da7.66
mov ebp, 0x2c7c00
xor ebx, ebx
jmp case.0x439da7.66
mov ebp, 0x163e00
xor ebx, ebx
jmp case.0x439da7.66
push 0
push 0x400
jmp 0x439e6c
push 0
push 0x100000
jmp 0x439e6c
push 0
push 0xf4240
jmp 0x439e6c
push 0
push 0x40000000
jmp 0x439e6c
push 0
push 0x3b9aca00
jmp 0x439e6c
push 0
push 0x3e8
push ebx
push ebp
call fcn.004e68d0
mov ebx, edx
mov ebp, eax
mov edx, dword [esp + 0x1c]
or edx, dword [esp + 0x20]
je 0x439e96
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push ebx
push ebp
call fcn.004e9e30
mov ebp, eax
mov ebx, edx
mov edx, dword [edi + 0x6168]
or edx, dword [edi + 0x616c]
jne 0x439eb5
mov dword [edi + 0x6168], ebp
mov dword [edi + 0x616c], ebx
jmp case.0x438d92.78
push ebx
push ebp
lea ecx, [edi + 0x6170]
call fcn.0040e390
jmp case.0x438d92.78
push 0x800
add esi, 2
push esi
add edi, 0x10
push edi
call fcn.004694b0
push 0x800
push edi
call fcn.00452c60
jmp case.0x438d92.78
mov byte [edi + 0x6184], 1
jmp case.0x438d92.78
cmp word [esi + 2], 0
lea eax, [esi + 2]
je case.0x438d92.78
push 0x800
push eax
add edi, 0x3016
push edi
call fcn.004694b0
jmp case.0x438d92.78