Function at 0x438900
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52d726
mov eax, dword fs:[0]
push eax
mov eax, 0x4184
call fcn.004efea0
mov eax, dword [0x566148]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
xor ebx, ebx
lea eax, [ebp - 0x4178]
mov dword [ebp - 0x4180], edi
mov dword [ebp - 0x417c], ebx
call fcn.00438870
mov eax, dword [edi + 0xc]
mov eax, dword [eax + 0x48]
push eax
lea esi, [ebp - 0x4188]
call fcn.004c50b0
mov dword [ebp - 4], ebx
mov ecx, dword [edi + 0x30]
add ecx, 8
push ecx
lea edx, [ebp - 0x4178]
push edx
call fcn.00438200
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x4188]
push eax
call fcn.004c5000
mov eax, dword [edi + 0x70]
lea esi, [ebx + 4]
cmp eax, ebx
je 0x4389a6
mov eax, dword [eax]
mov edx, dword [eax]
mov ecx, eax
cmp byte [edi + 0x3b], bl
je 0x4389d6
mov eax, dword [edx + 8]
call eax
cmp al, bl
je 0x4389f2
lea ecx, [ebp - 0x417c]
push ecx
lea edx, [edi + 0x68]
lea ecx, [ebp - 0x4178]
call fcn.0043f520
mov esi, eax
add esp, 4
cmp esi, 4
je 0x4389f2
mov edx, dword [edi + 0x30]
mov al, byte [edx]
test al, al
jne 0x438a04
mov ecx, dword [edi + 0x30]
mov byte [ecx], 1
jmp 0x438a00
mov eax, dword [edx + 4]
call eax
cmp eax, ebx
jl 0x4389a6
cmp eax, 1
jle 0x4389f2
cmp eax, 2
jne 0x4389a6
mov dword [edi + 4], 0xa
jmp 0x4389a6
mov edx, dword [edi + 0x30]
mov al, byte [edx]
test al, al
je 0x438a04
mov ecx, dword [edi + 0x30]
mov byte [ecx], bl
mov byte [edi + 0x36], 1
mov dword [edi + 4], 0xa
mov byte [edi + 0x3b], bl
cmp esi, 4
ja case.0x438a17.2
jmp dword [esi*4 + 0x438bd0]
call fcn.00437c00
mov edx, dword [edi + 0xc]
mov eax, dword [edx + 0x48]
push eax
lea esi, [ebp - 0x4184]
call fcn.004c50b0
mov ecx, dword [edi + 0x30]
mov edx, dword [ecx + 4]
cmp edx, dword [ebp - 0x417c]
je 0x438a69
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0x417c]
mov edx, dword [edi + 0x30]
cmp ecx, eax
setb cl
mov dword [edx + 4], eax
mov byte [edi + 0x36], 1
cmp cl, bl
je 0x438a69
mov eax, edi
call fcn.00439300
mov eax, dword [ebp - 0x4184]
push eax
call fcn.004c5000
jmp case.0x438a17.2
lea ecx, [ebp - 0x4190]
push ecx
lea eax, [edi + 0x18]
mov dword [ebp - 0x4190], 0x2000001d
mov dword [ebp - 0x418c], ebx
call fcn.004cba10
jmp case.0x438a17.2
mov ecx, 0x3f7
lea esi, [ebp - 0x9c]
call fcn.00429340
mov dword [ebp - 4], 1
cmp dword [eax + 0x14], 8
jb 0x438abd
mov eax, dword [eax]
mov edi, dword [ebp - 0x4180]
mov ebx, eax
call fcn.00439360
cmp dword [ebp - 0x88], 8
jb case.0x438a17.2
mov edx, dword [ebp - 0x9c]
push edx
jmp 0x438ba9
mov ecx, 0x3f9
lea esi, [ebp - 0x80]
call fcn.00429340
mov edi, eax
mov ecx, 0x3f7
lea esi, [ebp - 0x48]
mov dword [ebp - 4], 2
call fcn.00429340
mov ecx, eax
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 3
call fcn.0043a7a0
mov ecx, eax
mov eax, edi
lea edi, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.0043a910
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 8
jb 0x438b30
mov eax, dword [eax]
mov edi, dword [ebp - 0x4180]
mov ebx, eax
call fcn.00439360
mov esi, 8
cmp dword [ebp - 0x18], esi
jb 0x438b53
mov eax, dword [ebp - 0x2c]
push eax
call fcn.004e895a
add esp, 4
xor edi, edi
xor ecx, ecx
mov ebx, 7
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], edi
mov word [ebp - 0x2c], cx
cmp dword [ebp - 0x50], esi
jb 0x438b77
mov edx, dword [ebp - 0x64]
push edx
call fcn.004e895a
add esp, 4
xor eax, eax
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x54], edi
mov word [ebp - 0x64], ax
cmp dword [ebp - 0x34], esi
jb 0x438b94
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004e895a
add esp, 4
xor edx, edx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], edi
mov word [ebp - 0x48], dx
cmp dword [ebp - 0x6c], esi
jb case.0x438a17.2
mov eax, dword [ebp - 0x80]
push eax
call fcn.004e895a
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e8965
mov esp, ebp
pop ebp
ret