Function at 0x438480
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x52b502
mov eax, dword fs:[0]
push eax
sub esp, 0x410
mov eax, dword [0x59c6b8]
xor eax, esp
mov dword [esp + 0x40c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x59c6b8]
xor eax, esp
push eax
lea eax, [esp + 0x424]
mov dword fs:[0], eax
mov eax, dword [esp + 0x434]
mov edi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov esi, ecx
lea ecx, [esi + 0x160]
push ecx
mov dword [esp + 0x20], eax
call edi
lea edx, [esi + 0x178]
push edx
call edi
lea eax, [esi + 0x190]
push eax
call edi
call fcn.004084f0
push 0xc
call fcn.00511699
add esp, 4
mov dword [esp + 0x18], eax
xor ebx, ebx
mov dword [esp + 0x42c], ebx
cmp eax, ebx
je 0x438512
mov ecx, eax
call fcn.0044d020
jmp 0x438514
xor eax, eax
or ebp, 0xffffffff
mov dword [esp + 0x42c], ebp
mov dword [esi], eax
mov edi, 0xff
mov eax, dword [edi*4 + 0x583fe8]
cmp eax, ebx
je 0x438539
mov ecx, dword [esi]
push edi
push eax
call fcn.0044d0a0
dec edi
jns 0x438525
push 8
call fcn.00511699
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x42c], 1
cmp eax, ebx
je 0x438562
mov ecx, eax
call fcn.004a1c60
jmp 0x438564
xor eax, eax
push 0xc
mov dword [esp + 0x430], ebp
mov dword [esi + 4], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x42c], 2
cmp eax, ebx
je 0x438594
mov ecx, eax
call fcn.0044d020
jmp 0x438596
xor eax, eax
push 0x10
mov dword [esp + 0x430], ebp
mov dword [esi + 8], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x42c], 3
cmp eax, ebx
je 0x4385c8
push 1
mov ecx, eax
call fcn.004a3c80
jmp 0x4385ca
xor eax, eax
push 0x10
mov dword [esp + 0x430], ebp
mov dword [esi + 0xc], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x42c], 4
cmp eax, ebx
je 0x4385fc
push 1
mov ecx, eax
call fcn.004a3c80
jmp 0x4385fe
xor eax, eax
push 0x10
mov dword [esp + 0x430], ebp
mov dword [esi + 0x10], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x42c], 5
cmp eax, ebx
je 0x43862f
push ebx
mov ecx, eax
call fcn.004a3c80
jmp 0x438631
xor eax, eax
push 0x10
mov dword [esp + 0x430], ebp
mov dword [esi + 0x14], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x42c], 6
cmp eax, ebx
je 0x438663
push 1
mov ecx, eax
call fcn.004a3c80
jmp 0x438665
xor eax, eax
push 0x10
mov dword [esp + 0x430], ebp
mov dword [esi + 0x18], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x42c], 7
cmp eax, ebx
je 0x438697
push 1
mov ecx, eax
call fcn.004a3c80
jmp 0x438699
xor eax, eax
push 0x10
mov dword [esp + 0x430], ebp
mov dword [esi + 0x1c], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x42c], 8
cmp eax, ebx
je 0x4386c9
mov ecx, eax
call fcn.004a31d0
jmp 0x4386cb
xor eax, eax
push 0x10
mov dword [esp + 0x430], ebp
mov dword [esi + 0x20], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x42c], 9
cmp eax, ebx
je 0x4386fd
push 1
mov ecx, eax
call fcn.004a3c80
jmp 0x4386ff
xor eax, eax
push 0x10
mov dword [esp + 0x430], ebp
mov dword [esi + 0x24], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x42c], 0xa
cmp eax, ebx
je 0x43872f
mov ecx, eax
call fcn.004a31d0
jmp 0x438731
xor eax, eax
push 0x10
mov dword [esp + 0x430], ebp
mov dword [esi + 0x28], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x42c], 0xb
cmp eax, ebx
je 0x438763
push 1
mov ecx, eax
call fcn.004a3c80
jmp 0x438765
xor eax, eax
push 0x10
mov dword [esp + 0x430], ebp
mov dword [esi + 0x2c], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x42c], 0xc
cmp eax, ebx
je 0x438797
push 1
mov ecx, eax
call fcn.004a3c80
jmp 0x438799
xor eax, eax
push 4
mov dword [esp + 0x430], ebp
mov dword [esi + 0x30], eax
call fcn.00511699
mov edi, eax
add esp, 4
mov dword [esp + 0x18], edi
mov dword [esp + 0x42c], 0xd
cmp edi, ebx
je 0x4387f1
push 0x10
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x42c], 0xe
cmp eax, ebx
je 0x4387e9
mov ecx, eax
call fcn.004a31d0
mov dword [edi], eax
mov eax, edi
jmp 0x4387f3
xor eax, eax
mov dword [edi], eax
mov eax, edi
jmp 0x4387f3
xor eax, eax
mov dword [esi + 0x34], eax
mov ecx, 0x264
mov eax, 0x318
mov edi, 1
push 0x10
mov dword [esp + 0x430], ebp
mov dword [esi + 0x3c], ecx
mov dword [esi + 0x40], eax
mov dword [esi + 0x48], ebx
mov dword [esi + 0x44], ebx
mov dword [esi + 0x4c], ecx
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], edi
mov dword [esi + 0x58], ebx
mov dword [esi + 0x5c], ebx
mov dword [esi + 0x60], edi
mov dword [esi + 0x64], edi
mov dword [esi + 0x68], ebx
mov dword [esi + 0x6c], 2
mov dword [esi + 0x38], ebx
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0xf
cmp eax, ebx
je 0x438861
push edi
mov ecx, eax
call fcn.004a3c80
jmp 0x438863
xor eax, eax
push 0x10
mov dword [esp + 0x430], ebp
mov dword [esi + 0x70], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0x10
cmp eax, ebx
je 0x438893
mov ecx, eax
call fcn.004a31d0
jmp 0x438895
xor eax, eax
push 0x10
mov dword [esp + 0x430], ebp
mov dword [esi + 0x74], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0x11
cmp eax, ebx
je 0x4388c5
mov ecx, eax
call fcn.004a31d0
jmp 0x4388c7
xor eax, eax
fldz
push 8
fstp qword [esi + 0xa8]
mov dword [esp + 0x430], ebp
fld qword [0x5445f0]
mov dword [esi + 0x78], eax
fstp qword [esi + 0xb0]
mov dword [esi + 0x7c], edi
mov dword [esi + 0x80], edi
mov dword [esi + 0x84], edi
mov dword [esi + 0x88], edi
mov dword [esi + 0x8c], ebx
mov dword [esi + 0x90], ebx
mov dword [esi + 0x94], ebx
mov dword [esi + 0x98], ebx
mov dword [esi + 0x9c], edi
mov dword [esi + 0xa0], ebx
mov dword [esi + 0xb8], ebx
mov dword [esi + 0xbc], 0x1312d00
mov dword [esi + 0xc0], ebx
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0x12
cmp eax, ebx
je 0x43895f
push str.Latin1
mov ecx, eax
call fcn.004a1c90
jmp 0x438961
xor eax, eax
push 8
mov dword [esp + 0x430], ebp
mov dword [esi + 0xc4], eax
mov dword [esi + 0xc8], edi
mov dword [esi + 0xcc], edi
mov dword [esi + 0xd0], edi
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0x13
cmp eax, ebx
je 0x4389ab
push 0x5445e0
mov ecx, eax
call fcn.004a1c90
jmp 0x4389ad
xor eax, eax
fld1
mov ecx, esi
fst qword [esi + 0x100]
mov dword [esp + 0x42c], ebp
fldz
mov dword [esi + 0xd4], eax
fst qword [esi + 0x108]
mov dword [esi + 0xd8], ebx
fstp qword [esi + 0x118]
mov dword [esi + 0xdc], edi
mov dword [esi + 0xe0], ebx
mov dword [esi + 0xe4], edi
mov dword [esi + 0xe8], edi
fstp qword [esi + 0x110]
mov dword [esi + 0xec], ebx
mov dword [esi + 0xf0], edi
mov dword [esi + 0xf4], ebx
mov dword [esi + 0xf8], ebp
mov dword [esi + 0xfc], ebp
mov dword [esi + 0x120], edi
mov dword [esi + 0x124], ebx
mov dword [esi + 0x128], ebx
mov dword [esi + 0x12c], ebx
mov dword [esi + 0x130], ebx
mov dword [esi + 0x134], edi
mov dword [esi + 0x138], ebx
mov dword [esi + 0x13c], edi
mov dword [esi + 0x140], edi
call fcn.00434000
push 8
mov dword [esi + 0x148], ebx
mov dword [esi + 0x14c], ebx
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0x14
cmp eax, ebx
je 0x438a83
push 4
mov ecx, eax
call fcn.0040a040
jmp 0x438a85
xor eax, eax
push 8
mov dword [esp + 0x430], ebp
mov dword [esi + 0x150], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0x15
cmp eax, ebx
je 0x438aba
push 4
mov ecx, eax
call fcn.0040a040
jmp 0x438abc
xor eax, eax
push 0x10
mov dword [esp + 0x430], ebp
mov dword [esi + 0x154], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0x16
cmp eax, ebx
je 0x438aef
mov ecx, eax
call fcn.0040b580
jmp 0x438af1
xor eax, eax
push 0x10
mov dword [esp + 0x430], ebp
mov dword [esi + 0x158], eax
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0x17
cmp eax, ebx
je 0x438b24
mov ecx, eax
call fcn.0040b580
jmp 0x438b26
xor eax, eax
mov dword [esi + 0x15c], eax
mov ecx, dword [0x58917c]
xor edi, edi
mov dword [esp + 0x42c], ebp
cmp ecx, ebx
je 0x438b63
xor eax, eax
mov edx, dword [eax + 0x589178]
push edx
push ecx
mov ecx, dword [esi + 8]
call fcn.0044d0a0
inc edi
lea eax, [edi*8]
mov ecx, dword [eax + 0x58917c]
cmp ecx, ebx
jne 0x438b41
push 0x38
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0x18
cmp eax, ebx
je 0x438b96
push 0x3c
push 0x591610
push ebx
push str.Latin1
mov ecx, eax
call fcn.00474270
jmp 0x438b98
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x434], ebp
call fcn.004a3fd0
push 0x38
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0x19
cmp eax, ebx
je 0x438be1
push 0x83
push 0x5919d0
push ebx
push str.ASCII7
mov ecx, eax
call fcn.00474270
jmp 0x438be3
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x434], ebp
call fcn.004a3fd0
push 0x38
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0x1a
cmp eax, ebx
je 0x438c29
push 0x79
push 0x592200
push ebx
push str.Symbol
mov ecx, eax
call fcn.00474270
jmp 0x438c2b
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x434], ebp
call fcn.004a3fd0
push 0x38
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0x1b
cmp eax, ebx
je 0x438c71
push 0x1e
push 0x592990
push ebx
push str.ZapfDingbats
mov ecx, eax
call fcn.00474270
jmp 0x438c73
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x434], ebp
call fcn.004a3fd0
push 0x38
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0x1c
cmp eax, ebx
je 0x438cb8
push 0x4337c0
push 1
push 0x5445d0
mov ecx, eax
call fcn.00474310
jmp 0x438cba
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x434], ebp
call fcn.004a3fd0
push 0x38
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0x1d
cmp eax, ebx
je 0x438cff
push 0x433890
push 1
push str.UCS_2
mov ecx, eax
call fcn.00474310
jmp 0x438d01
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x434], ebp
call fcn.004a3fd0
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x438d81
cmp byte [eax], bl
je 0x438d81
push 8
call fcn.00511699
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x42c], 0x1e
cmp eax, ebx
je 0x438d4d
mov ecx, dword [esp + 0x1c]
push ecx
mov ecx, eax
call fcn.004a1c90
mov edi, eax
jmp 0x438d4f
xor edi, edi
mov eax, dword [edi + 4]
push 0x532d68
push eax
mov dword [esp + 0x434], ebp
call fcn.00513e32
mov ebp, eax
add esp, 8
cmp ebp, ebx
jne 0x438e1a
mov ecx, edi
call fcn.004a1da0
push edi
call fcn.0051163f
add esp, 4
push str.xpdfrc
call fcn.004a33d0
push eax
call fcn.004a3b90
mov edi, eax
mov eax, dword [edi + 4]
push 0x532d68
push eax
call fcn.00513e32
mov ebp, eax
add esp, 0x10
cmp ebp, ebx
jne 0x438e1a
mov ecx, edi
call fcn.004a1da0
push edi
call fcn.0051163f
add esp, 4
push 0x200
lea edx, [esp + 0x24]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
cmp eax, ebx
jle 0x438dd6
cmp eax, 0x200
jb 0x438dda
mov byte [esp + 0x20], bl
lea eax, [esp + 0x20]
push eax
call fcn.004a3480
mov edi, eax
push str.xpdfrc
push edi
call fcn.004a3b90
mov eax, dword [edi + 4]
push 0x532d68
push eax
call fcn.00513e32
mov ebp, eax
add esp, 0x14
cmp ebp, ebx
jne 0x438e1a
mov ecx, edi
call fcn.004a1da0
push edi
call fcn.0051163f
add esp, 4
jmp 0x438e82
push ebp
lea ecx, [esp + 0x224]
push 0x1ff
push ecx
mov ebx, 1
call fcn.004a3ad0
add esp, 0xc
test eax, eax
je 0x438e6c
lea esp, [esp]
push ebx
push edi
lea edx, [esp + 0x228]
push edx
mov ecx, esi
call fcn.004396b0
push ebp
lea eax, [esp + 0x224]
push 0x1ff
push eax
inc ebx
call fcn.004a3ad0
add esp, 0xc
test eax, eax
jne 0x438e40
mov ecx, edi
call fcn.004a1da0
push edi
call fcn.0051163f
push ebp
call fcn.005126eb
add esp, 8
mov eax, esi
mov ecx, dword [esp + 0x424]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x40c]
xor ecx, esp
call fcn.00511afd
add esp, 0x41c
ret 4