Function at 0x3428f0eb
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x108c
call fcn.3421e617
mov eax, dword [0x34234fcc]
xor eax, esp
mov dword [esp + 0x1088], eax
mov eax, dword [esp + 0x10a0]
mov edx, dword [0x343e4874]
mov ecx, dword [esp + 0x10a4]
push ebx
mov ebx, dword [esp + 0x109c]
push ebp
push esi
mov esi, dword [esp + 0x10a8]
push edi
mov edi, dword [esp + 0x10a4]
mov dword [esp + 0x30], eax
xor eax, eax
push edx
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x50], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x44], eax
call sub.KERNEL32.dll_EnterCriticalSection
mov ebp, dword [esp + 0x10a0]
push ebp
call fcn.341fe185
cmp eax, 0xffffffff
je 0x3429e7be
shl eax, 7
cmp dword [eax + 0x343f08b0], 0
mov dword [esp + 0x14], eax
ja 0x3429e7d3
mov eax, dword [esp + 0x10b8]
test al, 1
jne 0x3429e7e9
test eax, 0xffffc800
jne 0x3429e807
push edi
call fcn.341f2ad9
add esp, 4
cmp eax, 0x104
jae 0x3429ee80
push esi
call fcn.341f2ad9
add esp, 4
cmp eax, 0x104
jae 0x3429ee80
push 0
lea ecx, [esp + 0x40]
push ecx
push 0x88f8
call fcn.3420afd5
test eax, eax
jl 0x3428f4ef
mov esi, dword [esp + 0x3c]
mov edx, dword [esp + 0x10b8]
mov ecx, dword [esp + 0x38]
shr edx, 2
and edx, 1
or eax, 0xffffffff
mov dword [esi + 0x910], edx
xor edx, edx
mov dword [esi], ecx
mov dword [esi + 0x914], edx
mov dword [esi + 0x918], edx
mov dword [esi + 0x91c], edx
mov dword [esi + 0x88dc], eax
mov dword [esi + 0x88e0], eax
mov dword [esi + 0x88e4], eax
mov dword [esi + 0x88e8], eax
mov dword [esi + 0x88ec], eax
mov dword [esi + 0x88f0], edx
cmp ecx, edx
je 0x3428f257
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x24]
push eax
push 5
push 4
push ebp
mov dword [esp + 0x34], 0xc
call ecx
push 0
push 1
push 0x23
push ebp
call fcn.3428cdf5
mov edx, dword [esp + 0x10b8]
xor eax, eax
push edx
xor ecx, ecx
mov dword [esi + 0x930], eax
mov dword [esi + 0x938], eax
mov dword [esi + 0x934], eax
mov dword [esi + 0x93c], eax
mov dword [esi + 0x954], eax
mov eax, dword [esp + 0x34]
push eax
mov word [esi + 0x958], cx
mov ecx, dword [esp + 0x3c]
push ecx
push ebx
push edi
push esi
mov dword [esi + 4], ebp
mov dword [esi + 0x940], 0xffffffff
call fcn.3428ad25
mov edi, eax
test edi, edi
jl 0x3429e81c
mov eax, dword [esi + 0x10]
cmp eax, 0x30000
jb 0x3428f2fa
cmp dword [esi + 0x14], 0x30000
jb 0x3428f2fa
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x343f0864]
mov ecx, dword [0x343e4cf4]
imul edx, edx, 0x908
cmp dword [edx + ecx + 0x8ec], 0
je 0x3428f2fa
mov dword [esi + 0x930], 1
cmp eax, 0x40000
jb 0x3429e828
push esi
call fcn.3428ac87
mov edi, eax
test edi, edi
jl 0x3428f424
mov edx, dword [esi + 8]
push edx
call fcn.342708f0
test eax, eax
jne 0x3429e868
mov edx, dword [esi + 0x30]
add edx, edx
mov dword [esi + 0x20], edx
mov eax, dword [esp + 0x10b8]
shr eax, 0xd
and eax, 1
push eax
push esi
mov dword [esi + 0x24], 0
call fcn.3428e725
mov edi, eax
test edi, edi
jl 0x3428f424
cmp edi, 0xef5
je 0x3429e8e8
push esi
call fcn.3428b80d
mov edi, eax
test edi, edi
jl 0x3428f424
push 0
push esi
call fcn.3428fa3c
mov edi, eax
test edi, edi
jl 0x3428f424
test dword [esp + 0x10b8], 0x100
jne 0x3428f39e
push esi
call fcn.3428d4f5
mov edi, eax
test edi, edi
jl 0x3428f424
mov ebx, 0xc0000
cmp dword [esi + 0x14], ebx
jb 0x3428f3b1
cmp dword [esi + 0x10], ebx
jb 0x3429e8f5
push 1
push esi
call fcn.3428fa3c
mov edi, eax
test edi, edi
jl 0x3428f424
push esi
call fcn.3428fe34
mov edi, eax
test edi, edi
jl 0x3428f424
push esi
call fcn.3428d8eb
mov edi, eax
test edi, edi
jl 0x3428f424
test dword [esi + 0x1c], 0x1000000
jne 0x3429e940
movzx eax, word [esi + 0x88f6]
test ax, ax
jg 0x3429e97e
mov edx, dword [esi + 8]
push edx
call fcn.342708f0
test eax, eax
jne 0x3429e98e
test dword [esp + 0x10b8], 0x200
jne 0x3428f424
mov ecx, dword [esi + 0xc]
push ecx
push ebp
call fcn.3428d93c
test eax, eax
jge 0x3429ed9a
push esi
call fcn.3428de46
test eax, eax
jl 0x3429edc0
cmp dword [esp + 0x48], 0
jne 0x3429edcf
push esi
call fcn.3428d986
mov eax, dword [esi + 0x88dc]
or ebx, 0xffffffff
cmp eax, ebx
jne 0x3429edea
mov edx, dword [esi + 0x954]
push edx
call fcn.3428d9a0
test edi, edi
jl 0x3428f471
cmp dword [esi + 0x934], 0
jne 0x3429ee11
mov esi, dword [esp + 0x58]
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.34210fa9
push 0
push 0
push 0x23
push ebp
call fcn.3428cdf5
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x3428f4bd
test edi, edi
jl 0x3429ee29
xor eax, eax
lea edx, [esp + 0x24]
push edx
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], 0xc
push 6
push 4
push ebp
call ecx
test edi, edi
jl 0x3429ee32
cmp dword [esp + 0x40], 0
jne 0x3429ee5a
test edi, edi
jl 0x3428f4e1
mov eax, dword [0x343f0848]
cmp eax, ebx
jne 0x3429ee64
mov edx, dword [0x343e4874]
push edx
call fcn.341f2687
mov eax, edi
mov ecx, dword [esp + 0x1098]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.341f1dd1
add esp, 0x108c
ret 0x1c
test edi, edi
jge 0x3428f4c5
jmp 0x3428f4e1
mov eax, dword [0x343e4874]
push eax
call fcn.341f2687
mov eax, 0xfffffbb0
jmp 0x3428f4ef
mov ecx, dword [0x343e4874]
push ecx
call fcn.341f2687
mov eax, 0xfffffbac
jmp 0x3428f4ef
test al, 2
je 0x3428f18d
mov edx, dword [0x343e4874]
push edx
call fcn.341f2687
mov eax, 0xfffffc15
jmp 0x3428f4ef
mov eax, dword [0x343e4874]
push eax
call fcn.341f2687
mov eax, 0xfffffc15
jmp 0x3428f4ef
mov edx, dword [esi + 0x18]
mov dword [esp + 0x4c], edx
jmp 0x3428f43d
cmp dword [esi + 0x14], 0x40000
jb 0x3428f305
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x343f0864]
mov ecx, dword [0x343e4cf4]
imul eax, eax, 0x908
cmp dword [eax + ecx + 0x900], 0
je 0x3428f305
mov dword [esi + 0x938], 1
jmp 0x3428f305
cmp dword [esi + 0x10], 0x30000
mov eax, dword [esi + 0x30]
lea ecx, [eax + eax + 6]
mov dword [esi + 0x20], ecx
jne 0x3428f32e
cmp dword [esi + 0x14], 0x40000
jb 0x3428f32e
mov eax, dword [esi + 8]
push SysReAllocString
push 0x3426bfc4
lea edx, [esp + 0x1c]
push edx
push eax
push ebp
call fcn.34208924
mov edi, eax
test edi, edi
jl 0x3428f424
mov edx, dword [esp + 0x14]
push 0
push 0x28
lea ecx, [esp + 0x64]
push ecx
push edx
push ebp
call fcn.342096c2
mov edi, eax
test edi, edi
jl 0x3428f424
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x7c]
add dword [esi + 0x20], eax
push ecx
push ebp
call fcn.34207940
add dword [esi + 0x20], 5
jmp 0x3428f32e
mov dword [esp + 0x40], 1
jmp 0x3428f35f
push 0x800
lea ecx, [esp + 0x9c]
push ecx
push 0xfffff109
push esi
call fcn.342e4aa0
push 0
push 0x34226634
lea edx, [esp + 0xa0]
push edx
push 0xfffff109
push esi
call fcn.342e4bea
test eax, eax
jge 0x3429e931
mov dword [esi + 0x93c], eax
mov dword [esi + 0x934], 1
jmp 0x3428f3b1
mov eax, dword [esi + 0x14]
test eax, 0xe0000
jne 0x3429e954
mov edi, 0xffffea04
jmp 0x3428f424
cmp dword [esi + 0x10], ebx
jae 0x3429e963
mov edi, 0xffffea04
jmp 0x3428f424
mov eax, dword [esi + 0xc]
push 0x100
push eax
push ebp
call fcn.343092af
mov dword [esi + 0x14], 0xe0000
jmp 0x3428f3e4
mov ecx, dword [esi + 0xc]
push eax
push ecx
push ebp
call fcn.343092af
jmp 0x3428f3f4
or eax, 0xffffffff
mov dword [esp + 0x1c], eax
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x10]
mov dword [esp + 0x14], 0
cmp eax, 0x30000
jne 0x3429e9bc
cmp dword [esi + 0x14], 0x40000
jb 0x3429e9bc
mov dword [esp + 0x14], 1
cmp eax, 0x40000
jne 0x3429ebb7
cmp dword [esi + 0x14], eax
jne 0x3429ebb7
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 4]
push 2
push 0x3426e628
lea eax, [esp + 0x18]
push eax
push ecx
push edx
call fcn.34208924
mov edi, eax
test edi, edi
jl 0x3429eb9c
mov eax, dword [esp + 0x10]
mov ecx, dword [esi + 4]
push 0x3426e458
push 0x3429eeb8
push eax
push ecx
call fcn.34310d36
test eax, eax
jge 0x3429ea25
cmp eax, 0xfffffa1d
je 0x3429eb9a
cmp eax, 0xfffffa1c
je 0x3429eb9a
mov edx, dword [esp + 0x10]
mov eax, dword [esi + 4]
push 0x3426c340
push 0x3429eed0
push edx
push eax
call fcn.34310d36
mov edi, eax
test edi, edi
jl 0x3429eb9c
mov ecx, dword [esp + 0x10]
mov edx, dword [esi + 4]
push 0x3426c320
push 0x3429eee8
push ecx
push edx
call fcn.34310d36
mov edi, eax
test edi, edi
jl 0x3429eb9c
push 0x3c
lea eax, [esp + 0x60]
push 0
push eax
call sub.MSVCR90.dll_memset
mov eax, dword [esp + 0x1c]
add esp, 0xc
lea ecx, [esp + 0x44]
push ecx
mov ecx, dword [esi + 4]
push 0
push 0
lea edx, [esp + 0x68]
push edx
push 0x3426c2d8
push eax
push ecx
mov dword [esp + 0x78], 0x18
mov dword [esp + 0x80], 1
call fcn.3426328a
mov edi, eax
test edi, edi
jl 0x3429eb9c
mov eax, dword [esp + 0x10]
mov ecx, dword [esi + 4]
push 0
push 0x18
lea edx, [esp + 0x64]
push edx
push 0x3426c2c0
push eax
push ecx
call fcn.342066df
mov edi, eax
test edi, edi
jl 0x3429eb9c
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x60]
push 0
push SysReAllocString
push edx
push ebp
call fcn.34209c8c
mov edi, eax
test edi, edi
jl 0x3429eb9c
lea ebx, [ebx]
mov edx, dword [esp + 0x10]
push 0
push 0
lea eax, [esp + 0x5c]
push eax
push 1
lea ecx, [esp + 0x2b]
push ecx
push ebx
push edx
push ebp
call fcn.34206bf8
mov edi, eax
test edi, edi
jl 0x3429eb9c
cmp dword [esp + 0x54], 0
jne 0x3429eb2e
mov byte [esp + 0x1b], 0
mov eax, dword [esp + 0x10]
push 2
push eax
push ebp
call fcn.3420925c
mov edi, eax
test edi, edi
jl 0x3429eb9c
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x10]
push 0
push 0
push 1
lea ecx, [esp + 0x27]
push ecx
push edx
push eax
push ebp
call fcn.3420a01e
mov edi, eax
test edi, edi
jl 0x3429eb9c
mov ecx, dword [esp + 0x10]
push 0
push 0
push 0
push ecx
push ebp
call fcn.3420a15b
mov edi, eax
test edi, edi
jl 0x3429eb9c
mov edx, dword [esp + 0x10]
push 0
push 1
push edx
push ebp
call fcn.34209c8c
mov edi, eax
test edi, edi
jge 0x3429eb00
cmp edi, 0xfffff9bd
jne 0x3429eb9c
xor edi, edi
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x3429ebaf
push eax
mov eax, dword [esi + 4]
push eax
call fcn.34207940
test edi, edi
jl 0x3428f424
mov ecx, dword [esi + 0x24]
mov edx, dword [esi + 0x20]
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], 0xc
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], edx
cmp dword [esp + 0x14], eax
je 0x3429ec3f
mov eax, dword [esi]
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 8]
mov edi, dword [esi + 4]
lea ebx, [esp + 0x24]
push ebx
push eax
push 1
push ecx
push edx
push edi
call dword [0x343f6d48]
mov edi, eax
test edi, edi
jl 0x3429ed7f
mov ecx, dword [esi + 0xc]
push 0x80
push 1
push 1
lea eax, [esp + 0x2f]
push eax
push 0x34227268
push 0
push 0x342265b8
push 0x342265a4
push ecx
push ebp
mov byte [esp + 0x4b], 0
call fcn.3421ce5e
mov edi, eax
test edi, edi
jl 0x3429ed7f
push esi
call fcn.3426d13c
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
push 0x10000002
lea edx, [esp + 0x20]
push edx
push eax
push ecx
push ebp
call fcn.34217d49
mov edi, eax
test edi, edi
jl 0x3429ed7f
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x50]
push edx
push eax
call fcn.3426e4ce
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x1c]
or ecx, 0x100000
push ecx
push edx
call fcn.3431956e
cmp dword [esp + 0x14], 0
je 0x3429ecbb
mov eax, dword [esi]
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
lea edi, [esp + 0x24]
push edi
push eax
mov eax, dword [esp + 0x24]
push 0
push eax
push ecx
push edx
call dword [0x343f6d48]
mov edi, eax
test edi, edi
jl 0x3429ed7f
mov eax, dword [esi]
mov ecx, dword [esi + 4]
lea edx, [esp + 0x24]
push edx
push eax
mov eax, dword [esp + 0x24]
push eax
push ecx
call dword [0x343f6d44]
mov edi, eax
test edi, edi
jl 0x3429ed7f
cmp dword [esi + 0x934], 0
je 0x3429ed7f
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x30]
push ecx
push edx
mov dword [esp + 0x1c], 0
call fcn.3426e4ce
mov eax, dword [esp + 0x30]
or eax, 0x10
push eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x20]
push eax
call fcn.3431956e
mov ecx, dword [esp + 0x1c]
push 0x80
push 0xa
push 2
push 0x343f6dc4
push 0x34227230
push 0
push 0x342265b8
push 0x342265a4
push ecx
push ebp
call fcn.3421ce5e
push 0x80
push 1
push 1
lea edx, [esp + 0x20]
push edx
push 0x34227248
push 0
push 0x342265b8
mov edi, eax
mov eax, dword [esp + 0x38]
push 0x342265a4
push eax
push ebp
call fcn.3421ce5e
cmp dword [esi + 0x934], 0
je 0x3429ed7f
mov dword [esi + 0x934], 0
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
je 0x3428f405
push 0
push eax
push ebp
call fcn.34214fc0
jmp 0x3428f405
mov eax, dword [esi + 0xc]
push 9
push 0
push 0
push eax
push ebp
call dword [0x343f6d50]
test eax, eax
jl 0x3428f424
mov dword [esp + 0x48], 1
jmp 0x3428f424
test edi, edi
jl 0x3428f432
mov edi, eax
jmp 0x3428f432
mov eax, dword [esp + 0x34]
lea edx, [esp + 0x44]
push edx
push 0x3429ee98
push eax
push ebp
call dword [0x343f6d54]
jmp 0x3428f43d
mov ecx, dword [esi + 4]
push eax
push ecx
call fcn.34207940
mov dword [esi + 0x88dc], ebx
mov dword [esi + 0x88e0], ebx
mov dword [esi + 0x88e4], ebx
mov dword [esi + 0x88e8], ebx
jmp 0x3428f454
mov eax, dword [esi + 4]
push eax
call fcn.34207da5
mov edi, 0xed8
mov esi, 1
jmp 0x3428f475
push 0
push 3
jmp 0x3428f4b8
test esi, esi
jne 0x3428f50a
cmp edi, 0xfffffb4f
je 0x3429ee51
mov eax, dword [esp + 0x34]
push eax
call fcn.3430ff4f
jmp 0x3428f50a
mov edi, dword [esp + 0x4c]
jmp 0x3428f50a
mov edi, 0xef5
jmp 0x3428f4d4
mov ecx, dword [0x343f0844]
push 0
push 0
push 0x19
push 0
push 0
push eax
push ecx
call fcn.34261a0b
jmp 0x3428f4e1
mov eax, dword [0x343e4874]
push eax
call fcn.341f2687
mov eax, 0xfffffc01
jmp 0x3428f4ef