Function at 0x4382f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x7c3e14]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x438998
sub esp, 0x50
mov ecx, dword [esp + 0x54]
test ecx, ecx
je 0x438317
mov eax, ecx
mov ecx, dword [esp + 0x58]
jmp 0x438350
lea eax, [0x7c4320]
mov dword [esp], eax
call fcn.00402a70
cmp dword [esp + 4], 1
je 0x43833a
lea eax, [0x5e7720]
lea ecx, [0x7c3cc0]
jmp 0x438350
mov eax, dword [0x7926d8]
mov dword [esp], eax
call fcn.00448f50
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x18], eax
mov dword [esp + 0x30], ecx
mov edx, dword [0x7c3e14]
mov edx, dword fs:[edx]
mov edx, dword [edx]
mov ebx, dword [edx + 0x18]
cmp dword [ebx + 0x50], edx
jne 0x43893e
mov ebp, dword [ebx + 0x6c]
test ebp, ebp
jne 0x4388e5
mov dword [esp + 0x24], edx
mov ebp, dword [ebx + 0x78]
test ebp, ebp
jne 0x43882a
mov ebx, dword [ebx + 0x7c]
test ebx, ebx
jne 0x4387d1
lea edi, [esp + 0x34]
mov ebx, eax
xor eax, eax
call fcn.00468609
mov dword [esp + 0x38], ebx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x3c], ecx
mov ecx, dword [edx + 0x10]
mov dword [esp + 0x40], ecx
mov ecx, dword [0x7c3fa0]
test ecx, ecx
je 0x4383cf
call fcn.00468410
lea eax, [esp + 0x34]
mov dword [edi], eax
mov ecx, dword [edx + 0x10]
mov dword [edi + 4], ecx
lea eax, [esp + 0x34]
mov dword [edx + 0x10], eax
nop
lea eax, [0x7c3d68]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00402b00
lea eax, [esp + 0x54]
mov ecx, dword [esp + 0x24]
mov dword [esp], ecx
mov edx, dword [esp + 0x50]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00437bf0
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x43864c
movzx edx, byte [ecx]
test dl, dl
je 0x438496
mov edx, dword [ecx + 0x10]
test edx, edx
je 0x43842a
mov byte [edx + 0x19], 1
mov edx, dword [0x7c3fa0]
test edx, edx
je 0x43843e
mov edx, dword [ecx + 0x10]
call fcn.00468400
mov dword [edi], edx
mov dword [ecx + 0x10], 0
movzx edx, byte [ecx + 2]
test dl, dl
jne 0x438496
mov edx, dword [0x7c3fa0]
test edx, edx
je 0x438461
mov edx, dword [ecx + 0xc]
call fcn.00468400
mov dword [edi], edx
mov dword [ecx + 0xc], 0
mov edx, dword [0x7c3fa0]
mov ebx, dword [ecx + 0x14]
test edx, edx
je 0x438482
call fcn.00468410
mov dword [edi], ebx
mov edx, dword [eax + 0x14]
mov dword [edi + 4], edx
mov dword [eax + 0x14], ebx
mov dword [esp], ecx
call fcn.00437560
mov edx, dword [esp + 0x24]
jmp 0x438409
mov byte [ecx], 1
mov edx, dword [0x7c3fa0]
test edx, edx
je 0x4384b4
call fcn.00468410
lea edx, [esp + 0x34]
mov dword [edi], edx
mov ebx, dword [ecx + 0x10]
mov dword [edi + 4], ebx
mov dword [esp + 0x2c], ecx
lea edx, [esp + 0x34]
mov dword [ecx + 0x10], edx
movzx edx, byte [ecx + 2]
test dl, dl
je 0x438518
mov dword [esp], ecx
call fcn.00437f30
movzx eax, byte [esp + 4]
test al, al
je 0x438512
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 0x10]
movzx edx, byte [edx + 0x18]
test dl, dl
jne 0x438538
mov byte [esp + 0xe], al
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00437bf0
movzx eax, byte [esp + 0xe]
mov ecx, dword [esp + 0x2c]
jmp 0x438538
mov ecx, dword [esp + 0x2c]
jmp 0x438538
call fcn.004389b0
mov eax, dword [esp]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x2c]
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
call ecx
mov ecx, dword [esp + 0x2c]
mov eax, 1
mov dword [esp + 0x34], 0
mov edx, dword [esp + 0x24]
cmp dword [edx + 0x14], ecx
jne 0x4387bb
mov ebx, dword [0x7c3fa0]
test ebx, ebx
je 0x438561
mov ebx, dword [ecx + 0x10]
call fcn.00468400
mov dword [edi], ebx
mov byte [esp + 0xf], al
mov dword [ecx + 0x10], 0
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx + 8]
mov dword [esp + 0x10], ebp
mov dword [esp + 0x1c], ebx
test al, al
je 0x4385d3
mov esi, dword [0x7c3fa0]
test esi, esi
je 0x438592
mov esi, dword [ecx + 0xc]
call fcn.00468400
mov dword [edi], esi
mov dword [ecx + 0xc], 0
mov esi, dword [0x7c3fa0]
mov edi, dword [ecx + 0x14]
test esi, esi
je 0x4385b7
mov esi, edi
call fcn.00468410
mov dword [edi], esi
mov ebp, dword [edx + 0x14]
mov dword [edi + 4], ebp
mov edi, esi
mov dword [edx + 0x14], edi
mov dword [esp], ecx
call fcn.00437560
movzx eax, byte [esp + 0xf]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x10]
movzx ecx, byte [esp + 0x4c]
test cl, cl
je 0x438409
mov ecx, dword [0x7c3fa0]
mov esi, dword [esp + 0x40]
test ecx, ecx
je 0x4385fb
call fcn.00468410
mov dword [edi], esi
mov ecx, dword [edx + 0x10]
mov dword [edi + 4], ecx
mov dword [edx + 0x10], esi
test esi, esi
je 0x438616
movzx ecx, byte [esi + 0x1a]
test cl, cl
je 0x438616
movzx ecx, byte [esi + 0x19]
test cl, cl
jne 0x438785
nop
lea eax, [0x7c3d68]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call fcn.00402b00
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x14]
movzx edx, byte [esp + 0xf]
test dl, dl
je 0x438641
xor edx, edx
jmp 0x438676
mov edx, dword [ecx + 0x14]
mov ebx, ecx
mov ecx, edx
mov edx, ebx
jmp 0x438676
mov ecx, dword [eax + 0x10]
mov dword [esp], ecx
call fcn.00437990
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x10]
mov dword [esp], eax
call fcn.00438de0
xor eax, eax
mov dword [eax], 0
add esp, 0x50
ret
mov edx, ecx
mov ecx, ebx
test ecx, ecx
je 0x4386ef
movzx ebx, byte [ecx]
test bl, bl
jne 0x4386ef
movzx ebx, byte [ecx + 2]
test bl, bl
jne 0x43868e
mov ebx, dword [ecx + 0x14]
jmp 0x438672
mov dword [esp + 0x20], edx
test edx, edx
je 0x4386b5
mov ebx, dword [0x7c3fa0]
mov ebp, dword [ecx + 0x14]
test ebx, ebx
je 0x4386b0
call fcn.00468410
mov dword [edi], ebp
mov ebx, dword [edx + 0x14]
mov dword [edi + 4], ebx
mov dword [edx + 0x14], ebp
jmp 0x4386d2
mov ebx, dword [0x7c3fa0]
mov ebp, dword [ecx + 0x14]
test ebx, ebx
je 0x4386cf
call fcn.00468410
mov dword [edi], ebp
mov ebx, dword [eax + 0x14]
mov dword [edi + 4], ebx
mov dword [eax + 0x14], ebp
mov eax, dword [ecx + 0x14]
mov dword [esp + 0x28], eax
mov dword [esp], ecx
call fcn.00437560
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
jmp 0x438672
mov ecx, dword [0x7c3fa0]
mov edx, dword [esp + 0x40]
test ecx, ecx
je 0x43870a
call fcn.00468410
mov dword [edi], edx
mov ecx, dword [eax + 0x10]
mov dword [edi + 4], ecx
mov dword [eax + 0x10], edx
jmp 0x438712
mov dword [eax + 0x10], ecx
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x438779
movzx edx, byte [ecx + 0x19]
test dl, dl
je 0x43873d
mov edx, dword [0x7c3fa0]
mov ecx, dword [ecx + 0xc]
test edx, edx
je 0x43870f
call fcn.00468410
mov dword [edi], ecx
mov edx, dword [eax + 0x10]
mov dword [edi + 4], edx
jmp 0x43870f
test ecx, ecx
je 0x438779
mov ecx, dword [esp + 0x1c]
mov dword [eax + 0x98], ecx
mov ecx, dword [esp + 0x10]
mov dword [eax + 0x9c], ecx
lea eax, [0x62166c]
mov dword [esp], eax
call fcn.00466eb0
lea eax, [0x60d7e0]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00438a10
mov dword [eax + 0x88], 0
jmp 0x438741
mov eax, dword [esi + 0x14]
mov dword [edx + 0x98], eax
mov eax, dword [esi + 0x10]
mov dword [edx + 0x9c], eax
lea eax, [0x62166c]
mov dword [esp], eax
call fcn.00466eb0
lea eax, [0x611d32]
mov dword [esp], eax
mov dword [esp + 4], 0x18
call fcn.00438a10
lea eax, str.bad_defer_entry_in_panicbypassed_recovery_failedstack_trace_unavailable_nbindm_in_unexpected_GOOSrunqsteal:_runq_overflowdouble_traceGCSweepStartfloating_point_exceptionconnection_reset_by_peerlevel_2_not_synchronizedlink_number_out_of_rangeout_of_streams_resourcesfunction_not_implementedstructure_needs_cleaningnot_supported_by_windowsCertFreeCertificateChainCreateToolhelp32SnapshotGetUserProfileDirectoryWSA_Pacific_Standard_TimeSA_Eastern_Standard_TimeUS_Eastern_Standard_TimeSA_Western_Standard_TimeMontevideo_Standard_TimeMagallanes_Standard_TimePacific_SA_Standard_TimeAzerbaijan_Standard_TimeBangladesh_Standard_TimeNorth_Asia_Standard_TimeCape_Verde_Standard_Timeduplicate__TAG_directiveread_handler_must_be_setexceeded_max_depth_of__dwhile_scanning_an_anchorAllocateAndInitializeSidBuildSecurityDescriptorWAssignProcessToJobObjectGenerateConsoleCtrlEventGetMaximumProcessorCountGetNamedPipeHandleStateWSetConsoleCursorPositionSetDefaultDllDirectoriesNtQuerySystemInformationSetupDiCreateDeviceInfoWSetupDiGetSelectedDeviceSetupDiSetSelectedDeviceGetWindowThreadProcessIdresult_must_be_a_pointer_s:_unsupported_type:__sSafeArrayAllocDescriptorflate:_maxBits_too_largeidna:_disallowed_rune__Uaddress_string_too_shortresource_length_too_longunpacking_Question.Classinvalid_pattern_syntax:_streamSafe_was_not_resetjson:_Unexpected_key_typereflect.Value.OverflowIntjson:_unsupported_value:_not_at_beginning_of_valueCannot_load_portapps.jsonCannot_load_configurationCannot_write_portapp_prevreflect:_Bits_of_nil_Typereflect.Value.SetMapIndex2910383045673370361328125goroutine_profile_cleanupchansend:_spurious_wakeupruntimelock:_lock_countbad_system_huge_page_sizearena_already_initialized_to_unused_region_of_span_bytes_failed_with_errnoruntime:_VirtualAlloc_of__sched_gomaxprocs:threadsremaining_pointer_buffersslice_bounds_out_of_range_cgo_thread_start_missingallgadd:_bad_status_Gidleruntime:_program_exceeds_startm:_p_has_runnable_gsstoplockedm:_not_runnablereleasep:_invalid_p_statecheckdead:_no_p_for_timercheckdead:_no_m_for_timerunknown_sigtramp_callbackunexpected_fault_address_missing_stack_in_newstackbad_status_in_shrinkstackmissing_traceGCSweepStartresource_deadlock_avoidedoperation_now_in_progressno_buffer_space_availableno_such_device_or_addresssocket_type_not_supportedinvalid_cross_device_linkGetFinalPathNameByHandleWGetQueuedCompletionStatusUpdateProcThreadAttributeinconsistent_poll.fdMutex2006_01_02T15:04:05Z07:00South_Sudan_Standard_TimeUS_Mountain_Standard_TimeMiddle_East_Standard_TimeTransbaikal_Standard_TimeW._Mongolia_Standard_TimeAfghanistan_Standard_TimeNorth_Korea_Standard_TimeUlaanbaatar_Standard_TimeVladivostok_Standard_TimeAUS_Central_Standard_TimeAUS_Eastern_Standard_TimeKaliningrad_Standard_TimeNew_Zealand_Standard_Time2006_1_2_15:4:5.999999999while_parsing_a_flow_nodedid_not_find_expected_keyinvalid_Unicode_characterdid_not_find_expected__GetSecurityDescriptorDaclGetSecurityDescriptorSaclGetSidIdentifierAuthorityInitiateSystemShutdownExWIsValidSecurityDescriptorSetSecurityDescriptorDaclSetSecurityDescriptorSaclExpandEnvironmentStringsWFindNextVolumeMountPointWFindVolumeMountPointCloseQueryInformationJobObjectNtQueryInformationProcessSetupDiCallClassInstallerSetupDiGetDevicePropertyWSetupDiGetSelectedDriverWSetupDiSetSelectedDriverW_with_too_many_arguments__d_error_s__decoding:_n_n_s_s_has_invalid_keys:__s_s_has_unset_fields:__scontext_deadline_exceededunexpected_key_value_typeWindowsGetStringRawBuffertext_plain__charsetutf_8strict_transport_securityGODEBUG:_can_not_enable__no_answer_from_DNS_serverno_suitable_address_foundunexpected___in_addressunexpected___in_addressCreateConsoleScreenBuffernet_url:_invalid_userinfoIPv4_field_has_value__255USE_PINNED_UPDATE_MANIFESTCannot_remove_registry_keyreflect.Value.OverflowUintencountered_a_cycle_via__sGetFileInformationByHandleCannot_get_Windows_version_using_unaddressable_valueunknown_ABI_parameter_kind1455191522836685180664062572759576141834259033203125all_goroutines_stack_tracenotewakeup___double_wakeuppersistentalloc:_size__0_gc_cycles_total:gc_cyclesnegative
mov dword [esp], eax
mov dword [esp + 4], 0x18
call fcn.00438a10
call fcn.0043a440
lea eax, [0x60aeb5]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.0043acc0
call fcn.0043a4a0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.00407490
call fcn.0043a440
call fcn.0043a650
call fcn.0043a4a0
lea eax, [0x60f35e]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.00438a10
call fcn.0043a440
lea eax, [0x60aeb5]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.0043acc0
call fcn.0043a4a0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.00407490
call fcn.0043a440
call fcn.0043a650
call fcn.0043a4a0
call fcn.0043a440
lea eax, [0x60fc07]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.0043acc0
call fcn.0043a4a0
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x18]
mov ecx, dword [eax + 0x74]
mov dword [esp + 0x30], ecx
mov eax, dword [eax + 0x78]
mov dword [esp + 0x14], eax
call fcn.0043a440
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 4], eax
call fcn.0043acc0
call fcn.0043a4a0
call fcn.0043a440
call fcn.0043a650
call fcn.0043a4a0
lea eax, str.panic_during_preemptoffnanotime_returning_zerofatal:_morestack_on_g0_nthe_current_g_is_not_g0schedule:_holding_locksinvalid_m__lockedInt__procresize:_invalid_argspan_has_no_free_stacksstack_growth_after_forkshrinkstack_at_bad_timereflect.methodValueCalldevice_or_resource_busyinterrupted_system_callno_space_left_on_deviceoperation_not_supportedoperation_not_permittedCertGetCertificateChainFreeEnvironmentStringsWGetEnvironmentVariableWGetSystemTimeAsFileTimeSetEnvironmentVariableWtime:_invalid_duration___not_found_in_registryE._Africa_Standard_TimeTocantins_Standard_TimeArgentina_Standard_TimeVenezuela_Standard_TimeGreenland_Standard_TimeSri_Lanka_Standard_TimeWest_Bank_Standard_TimeQyzylorda_Standard_TimeSingapore_Standard_TimeWest_Asia_Standard_TimeGreenwich_Standard_TimeLord_Howe_Standard_TimeAstrakhan_Standard_TimeW._Europe_Standard_TimeE._Europe_Standard_TimeVolgograd_Standard_TimeMauritius_Standard_TimeMarquesas_Standard_TimeDestroyEnvironmentBlockunknown_character_widthwhile_scanning_an_aliascannot_decode_event:__sGetSidSubAuthorityCountQueryServiceLockStatusWRegNotifyChangeKeyValueSetKernelObjectSecurityDeleteVolumeMountPointWGetActiveProcessorCountGetLogicalDriveStringsWSetInformationJobObjectSetNamedPipeHandleStateSetProcessPriorityBoostNtSetInformationProcessGetFileVersionInfoSizeWerror_decoding__s:__sVariantTimeToSystemTimeSafeArrayCreateVectorEx___missing_CPU_support_nflate:_internal_error:_unexpected_address_typemissing_port_in_addressSetConsoleTextAttributemissing_protocol_schemeinvalid_URI_for_requestinvalid_escape_sequencetoo_many_pointers___10_segment_length_too_longunpacking_Question.Nameunpacking_Question.Typeskipping_Question_Classpattern_bits_too_long:_json:_unsupported_type:_Cannot_load_portapp_prev116415321826934814453125582076609134674072265625hash_of_unhashable_type_span_has_no_free_objectsruntime:_found_obj_at__runtime:_VirtualFree_of__cgo_go_to_c_calls:calls_gc_heap_objects:objects_sched_latencies:secondsqueuefinalizer_during_GCupdate_during_transitionruntime:_markroot_index_cant_scan_our_own_stackgcDrainN_phase_incorrectpageAlloc:_out_of_memoryruntime:_p.searchAddr__range_partially_overlapsGetSystemTimeAsFileTime
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.00438a10
call fcn.0043a440
lea eax, [0x60aeb5]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.0043acc0
call fcn.0043a4a0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.00407490
call fcn.0043a440
call fcn.0043a650
call fcn.0043a4a0
lea eax, [0x60f34b]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.00438a10
call fcn.0043a440
lea eax, [0x60aeb5]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.0043acc0
call fcn.0043a4a0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.00407490
call fcn.0043a440
call fcn.0043a650
call fcn.0043a4a0
lea eax, [0x610375]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00438a10
nop
call fcn.00467000
jmp fcn.004382f0