Function at 0x4385d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x98d270]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x438c78
sub esp, 0x50
mov ecx, dword [esp + 0x54]
test ecx, ecx
je 0x4385f7
mov eax, ecx
mov ecx, dword [esp + 0x58]
jmp 0x438630
lea eax, [0x98d840]
mov dword [esp], eax
call fcn.00402c30
cmp dword [esp + 4], 1
je 0x43861a
lea eax, [0x6cf5a0]
lea ecx, [0x98d0c0]
jmp 0x438630
mov eax, dword [0x95d79c]
mov dword [esp], eax
call fcn.00449530
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x18], eax
mov dword [esp + 0x30], ecx
mov edx, dword [0x98d270]
mov edx, dword fs:[edx]
mov edx, dword [edx]
mov ebx, dword [edx + 0x18]
cmp dword [ebx + 0x50], edx
jne 0x438c1e
mov ebp, dword [ebx + 0x6c]
test ebp, ebp
jne 0x438bc5
mov dword [esp + 0x24], edx
mov ebp, dword [ebx + 0x78]
test ebp, ebp
jne 0x438b0a
mov ebx, dword [ebx + 0x7c]
test ebx, ebx
jne 0x438ab1
lea edi, [esp + 0x34]
mov ebx, eax
xor eax, eax
call fcn.00468c29
mov dword [esp + 0x38], ebx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x3c], ecx
mov ecx, dword [edx + 0x10]
mov dword [esp + 0x40], ecx
mov ecx, dword [0x98d4e0]
test ecx, ecx
je 0x4386af
call fcn.004689a0
lea eax, [esp + 0x34]
mov dword [edi], eax
mov ecx, dword [edx + 0x10]
mov dword [edi + 4], ecx
lea eax, [esp + 0x34]
mov dword [edx + 0x10], eax
nop
lea eax, [0x98d174]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00402cc0
lea eax, [esp + 0x54]
mov ecx, dword [esp + 0x24]
mov dword [esp], ecx
mov edx, dword [esp + 0x50]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00437ed0
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x43892c
movzx edx, byte [ecx]
test dl, dl
je 0x438776
mov edx, dword [ecx + 0x10]
test edx, edx
je 0x43870a
mov byte [edx + 0x19], 1
mov edx, dword [0x98d4e0]
test edx, edx
je 0x43871e
mov edx, dword [ecx + 0x10]
call fcn.00468990
mov dword [edi], edx
mov dword [ecx + 0x10], 0
movzx edx, byte [ecx + 2]
test dl, dl
jne 0x438776
mov edx, dword [0x98d4e0]
test edx, edx
je 0x438741
mov edx, dword [ecx + 0xc]
call fcn.00468990
mov dword [edi], edx
mov dword [ecx + 0xc], 0
mov edx, dword [0x98d4e0]
mov ebx, dword [ecx + 0x14]
test edx, edx
je 0x438762
call fcn.004689a0
mov dword [edi], ebx
mov edx, dword [eax + 0x14]
mov dword [edi + 4], edx
mov dword [eax + 0x14], ebx
mov dword [esp], ecx
call fcn.00437840
mov edx, dword [esp + 0x24]
jmp 0x4386e9
mov byte [ecx], 1
mov edx, dword [0x98d4e0]
test edx, edx
je 0x438794
call fcn.004689a0
lea edx, [esp + 0x34]
mov dword [edi], edx
mov ebx, dword [ecx + 0x10]
mov dword [edi + 4], ebx
mov dword [esp + 0x2c], ecx
lea edx, [esp + 0x34]
mov dword [ecx + 0x10], edx
movzx edx, byte [ecx + 2]
test dl, dl
je 0x4387f8
mov dword [esp], ecx
call fcn.00438210
movzx eax, byte [esp + 4]
test al, al
je 0x4387f2
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 0x10]
movzx edx, byte [edx + 0x18]
test dl, dl
jne 0x438818
mov byte [esp + 0xe], al
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00437ed0
movzx eax, byte [esp + 0xe]
mov ecx, dword [esp + 0x2c]
jmp 0x438818
mov ecx, dword [esp + 0x2c]
jmp 0x438818
call fcn.00438c90
mov eax, dword [esp]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x2c]
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
call ecx
mov ecx, dword [esp + 0x2c]
mov eax, 1
mov dword [esp + 0x34], 0
mov edx, dword [esp + 0x24]
cmp dword [edx + 0x14], ecx
jne 0x438a9b
mov ebx, dword [0x98d4e0]
test ebx, ebx
je 0x438841
mov ebx, dword [ecx + 0x10]
call fcn.00468990
mov dword [edi], ebx
mov byte [esp + 0xf], al
mov dword [ecx + 0x10], 0
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx + 8]
mov dword [esp + 0x10], ebp
mov dword [esp + 0x1c], ebx
test al, al
je 0x4388b3
mov esi, dword [0x98d4e0]
test esi, esi
je 0x438872
mov esi, dword [ecx + 0xc]
call fcn.00468990
mov dword [edi], esi
mov dword [ecx + 0xc], 0
mov esi, dword [0x98d4e0]
mov edi, dword [ecx + 0x14]
test esi, esi
je 0x438897
mov esi, edi
call fcn.004689a0
mov dword [edi], esi
mov ebp, dword [edx + 0x14]
mov dword [edi + 4], ebp
mov edi, esi
mov dword [edx + 0x14], edi
mov dword [esp], ecx
call fcn.00437840
movzx eax, byte [esp + 0xf]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x10]
movzx ecx, byte [esp + 0x4c]
test cl, cl
je 0x4386e9
mov ecx, dword [0x98d4e0]
mov esi, dword [esp + 0x40]
test ecx, ecx
je 0x4388db
call fcn.004689a0
mov dword [edi], esi
mov ecx, dword [edx + 0x10]
mov dword [edi + 4], ecx
mov dword [edx + 0x10], esi
test esi, esi
je 0x4388f6
movzx ecx, byte [esi + 0x1a]
test cl, cl
je 0x4388f6
movzx ecx, byte [esi + 0x19]
test cl, cl
jne 0x438a65
nop
lea eax, [0x98d174]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call fcn.00402cc0
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x14]
movzx edx, byte [esp + 0xf]
test dl, dl
je 0x438921
xor edx, edx
jmp 0x438956
mov edx, dword [ecx + 0x14]
mov ebx, ecx
mov ecx, edx
mov edx, ebx
jmp 0x438956
mov ecx, dword [eax + 0x10]
mov dword [esp], ecx
call fcn.00437c70
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x10]
mov dword [esp], eax
call fcn.004390c0
xor eax, eax
mov dword [eax], 0
add esp, 0x50
ret
mov edx, ecx
mov ecx, ebx
test ecx, ecx
je 0x4389cf
movzx ebx, byte [ecx]
test bl, bl
jne 0x4389cf
movzx ebx, byte [ecx + 2]
test bl, bl
jne 0x43896e
mov ebx, dword [ecx + 0x14]
jmp 0x438952
mov dword [esp + 0x20], edx
test edx, edx
je 0x438995
mov ebx, dword [0x98d4e0]
mov ebp, dword [ecx + 0x14]
test ebx, ebx
je 0x438990
call fcn.004689a0
mov dword [edi], ebp
mov ebx, dword [edx + 0x14]
mov dword [edi + 4], ebx
mov dword [edx + 0x14], ebp
jmp 0x4389b2
mov ebx, dword [0x98d4e0]
mov ebp, dword [ecx + 0x14]
test ebx, ebx
je 0x4389af
call fcn.004689a0
mov dword [edi], ebp
mov ebx, dword [eax + 0x14]
mov dword [edi + 4], ebx
mov dword [eax + 0x14], ebp
mov eax, dword [ecx + 0x14]
mov dword [esp + 0x28], eax
mov dword [esp], ecx
call fcn.00437840
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
jmp 0x438952
mov ecx, dword [0x98d4e0]
mov edx, dword [esp + 0x40]
test ecx, ecx
je 0x4389ea
call fcn.004689a0
mov dword [edi], edx
mov ecx, dword [eax + 0x10]
mov dword [edi + 4], ecx
mov dword [eax + 0x10], edx
jmp 0x4389f2
mov dword [eax + 0x10], ecx
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x438a59
movzx edx, byte [ecx + 0x19]
test dl, dl
je 0x438a1d
mov edx, dword [0x98d4e0]
mov ecx, dword [ecx + 0xc]
test edx, edx
je 0x4389ef
call fcn.004689a0
mov dword [edi], ecx
mov edx, dword [eax + 0x10]
mov dword [edi + 4], edx
jmp 0x4389ef
test ecx, ecx
je 0x438a59
mov ecx, dword [esp + 0x1c]
mov dword [eax + 0x98], ecx
mov ecx, dword [esp + 0x10]
mov dword [eax + 0x9c], ecx
lea eax, [0x7285e8]
mov dword [esp], eax
call fcn.00467440
lea eax, [0x70f751]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00438cf0
mov dword [eax + 0x88], 0
jmp 0x438a21
mov eax, dword [esi + 0x14]
mov dword [edx + 0x98], eax
mov eax, dword [esi + 0x10]
mov dword [edx + 0x9c], eax
lea eax, [0x7285e8]
mov dword [esp], eax
call fcn.00467440
lea eax, [0x714b88]
mov dword [esp], eax
mov dword [esp + 4], 0x18
call fcn.00438cf0
lea eax, str.bad_defer_entry_in_panicbypassed_recovery_failedstack_trace_unavailable_nbindm_in_unexpected_GOOSrunqsteal:_runq_overflowdouble_traceGCSweepStartunknown_address_protocolinvalid_address_checksumcould_not_decode:__v:__wRemoveExpiredAllocationsjson:_unsupported_type:_unsupported_bool_value:_AllocateAndInitializeSidBuildSecurityDescriptorWAssignProcessToJobObjectGenerateConsoleCtrlEventGetMaximumProcessorCountGetNamedPipeHandleStateWSetConsoleCursorPositionSetDefaultDllDirectoriesNtQuerySystemInformationSetupDiCreateDeviceInfoWSetupDiGetSelectedDeviceSetupDiSetSelectedDeviceGetWindowThreadProcessId116415321826934814453125582076609134674072265625reflect.Value.SetComplexx509:_malformed_validityexec:_Stdout_already_setsha2_256_trunc254_paddedunexpected_mantissa_baseunexpected_exponent_basedigest_size_is_too_large_s_s_is_unsupported_typeinvalid_pattern_syntax:_flate:_maxBits_too_largeidna:_disallowed_rune__Uaddress_string_too_shortresource_length_too_longunpacking_Question.ClassstreamSafe_was_not_resetGODEBUG_sys_cpu:_value_____required_CPU_feature_n2006_01_02T15:04:05Z07:00South_Sudan_Standard_TimeUS_Mountain_Standard_TimeMiddle_East_Standard_TimeTransbaikal_Standard_TimeW._Mongolia_Standard_TimeAfghanistan_Standard_TimeNorth_Korea_Standard_TimeUlaanbaatar_Standard_TimeVladivostok_Standard_TimeAUS_Central_Standard_TimeAUS_Eastern_Standard_TimeKaliningrad_Standard_TimeNew_Zealand_Standard_Timeresource_deadlock_avoidedoperation_now_in_progressno_buffer_space_availableno_such_device_or_addresssocket_type_not_supportedinvalid_cross_device_linkGetFinalPathNameByHandleWGetQueuedCompletionStatusUpdateProcThreadAttributearray_index_out_of_bounds__________.____ARM_Thumb_2_little_endianMIPS_little_endian_WCE_v2__Contents_are_null_bytesLPSAFEARRAY_UserUnmarshalGetRecordInfoFromTypeInfogoroutine_profile_cleanupchansend:_spurious_wakeupruntimelock:_lock_countbad_system_huge_page_sizearena_already_initialized_to_unused_region_of_span_bytes_failed_with_errnoruntime:_VirtualAlloc_of__sched_gomaxprocs:threadsremaining_pointer_buffersslice_bounds_out_of_range_cgo_thread_start_missingallgadd:_bad_status_Gidleruntime:_program_exceeds_startm:_p_has_runnable_gsstoplockedm:_not_runnablereleasep:_invalid_p_statecheckdead:_no_p_for_timercheckdead:_no_m_for_timerunknown_sigtramp_callbackunexpected_fault_address_missing_stack_in_newstackbad_status_in_shrinkstackmissing_traceGCSweepStartunexpected_key_value_typeExpandEnvironmentStringsWGetDealProviderCollateraljson:_Unexpected_key_typereflect.Value.OverflowIntjson:_unsupported_value:_GetSecurityDescriptorDaclGetSecurityDescriptorSaclGetSidIdentifierAuthorityInitiateSystemShutdownExWIsValidSecurityDescriptorSetSecurityDescriptorDaclSetSecurityDescriptorSaclFindNextVolumeMountPointWFindVolumeMountPointCloseQueryInformationJobObjectNtQueryInformationProcessSetupDiCallClassInstallerSetupDiGetDevicePropertyWSetupDiGetSelectedDriverWSetupDiSetSelectedDriverW_with_too_many_arguments_inconsistent_poll.fdMutex2910383045673370361328125reflect:_Bits_of_nil_Typereflect.Value.SetMapIndexx509:_invalid_RDNSequencex509:_invalid_RSA_modulusx509:_malformed_extensionx509:_malformed_signatureunknown_Go_type_for_sliceexplicit_tag_has_no_childinvalid_object_identifierGODEBUG:_can_not_enable__uvarint:_buffer_too_smallposeidon_bls12_381_a2_fc1context_deadline_exceededunexpected_value_type:__vexpect___or_n__but_found_expect__or_n__but_found_expect_t_or_f__but_found_net_url:_invalid_userinfotext_plain__charsetutf_8strict_transport_securityno_answer_from_DNS_serverno_suitable_address_foundunexpected___in_addressunexpected___in_addressInvalid_base58_digit___q_IPv4_field_has_value__255blake2b:_invalid_key_sizeblake2s:_invalid_key_size:_day_of_year_out_of_rangeSouth_Africa_Standard_TimeSaint_Pierre_Standard_TimeNewfoundland_Standard_TimeCentral_Asia_Standard_TimeEkaterinburg_Standard_TimeE._Australia_Standard_TimeW._Australia_Standard_TimeBougainville_Standard_TimeLine_Islands_Standard_TimeWest_Pacific_Standard_TimeGetSystemDefaultLocaleNameGetFileInformationByHandleinvalid_argument_to_Int63ninvalid_argument_to_Int
mov dword [esp], eax
mov dword [esp + 4], 0x18
call fcn.00438cf0
call fcn.0043aa20
lea eax, [0x70b847]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.0043b2a0
call fcn.0043aa80
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.00407560
call fcn.0043aa20
call fcn.0043ac30
call fcn.0043aa80
lea eax, [0x7119fd]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.00438cf0
call fcn.0043aa20
lea eax, [0x70b847]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.0043b2a0
call fcn.0043aa80
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.00407560
call fcn.0043aa20
call fcn.0043ac30
call fcn.0043aa80
call fcn.0043aa20
lea eax, [0x7123a1]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.0043b2a0
call fcn.0043aa80
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x18]
mov ecx, dword [eax + 0x74]
mov dword [esp + 0x30], ecx
mov eax, dword [eax + 0x78]
mov dword [esp + 0x14], eax
call fcn.0043aa20
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 4], eax
call fcn.0043b2a0
call fcn.0043aa80
call fcn.0043aa20
call fcn.0043ac30
call fcn.0043aa80
lea eax, str.panic_during_preemptoffnanotime_returning_zerofatal:_morestack_on_g0_nthe_current_g_is_not_g0schedule:_holding_locksinvalid_m__lockedInt__procresize:_invalid_argspan_has_no_free_stacksstack_growth_after_forkshrinkstack_at_bad_timereflect.methodValueCall_invalid_reflect.Value_unknown_address_networkinvalid_address_payloadGetDealClientCollateraljson:_cannot_unmarshal__into_Go_value_of_type_unexpected_map_key_typeGetSidSubAuthorityCountQueryServiceLockStatusWRegNotifyChangeKeyValueSetKernelObjectSecurityDeleteVolumeMountPointWGetActiveProcessorCountGetLogicalDriveStringsWSetInformationJobObjectSetNamedPipeHandleStateSetProcessPriorityBoostNtSetInformationProcessDestroyEnvironmentBlockGetFileVersionInfoSizeW23283064365386962890625reflect.Value.Interfacereflect.Value.NumMethodinvalid_PrintableStringx509:_malformed_UTCTimex509:_invalid_key_usagex509:_malformed_versionasn1:_structure_error:_truncated_tag_or_length___missing_CPU_support_nHAMT_node_was_malformedalready_in_capture_modeleading_zero_is_invalidmissing_digit_after_dotobject_not_ended_with_unexpected_end_of_inputstringModeNumberDecodermissing_protocol_schemeinvalid_URI_for_requestunexpected_address_typemissing_port_in_addresspattern_bits_too_long:_no_such_hash_registeredtoo_many_pointers___10_segment_length_too_longunpacking_Question.Nameunpacking_Question.Typeskipping_Question_ClassP224_point_not_on_curveP256_point_not_on_curveP384_point_not_on_curveP521_point_not_on_curveinvalid_scalar_encodingSA_Pacific_Standard_TimeSA_Eastern_Standard_TimeUS_Eastern_Standard_TimeSA_Western_Standard_TimeMontevideo_Standard_TimeMagallanes_Standard_TimePacific_SA_Standard_TimeAzerbaijan_Standard_TimeBangladesh_Standard_TimeNorth_Asia_Standard_TimeCape_Verde_Standard_TimeGetUserDefaultLocaleNameinvalid_argument_to_Intnfloating_point_exceptionconnection_reset_by_peerlevel_2_not_synchronizedlink_number_out_of_rangeout_of_streams_resourcesfunction_not_implementedstructure_needs_cleaningnot_supported_by_windowsCertFreeCertificateChainCreateToolhelp32SnapshotGetUserProfileDirectoryW_06X__04X__04X__04X__XWindows_boot_applicationWSAWaitForMultipleEventsWSAAsyncGetProtoByNumberVariantTimeToDosDateTimeDosDateTimeToVariantTimeSafeArrayAllocDescriptorOleCreatePictureIndirectUnRegisterTypeLibForUserhash_of_unhashable_type_span_has_no_free_objectsruntime:_found_obj_at__runtime:_VirtualFree_of__cgo_go_to_c_calls:calls_gc_heap_objects:objects_sched_latencies:secondsqueuefinalizer_during_GCupdate_during_transitionruntime:_markroot_index_cant_scan_our_own_stackgcDrainN_phase_incorrectpageAlloc:_out_of_memoryruntime:_p.searchAddr__range_partially_overlapsGetSystemTimeAsFileTime
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.00438cf0
call fcn.0043aa20
lea eax, [0x70b847]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.0043b2a0
call fcn.0043aa80
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.00407560
call fcn.0043aa20
call fcn.0043ac30
call fcn.0043aa80
lea eax, [0x7119ea]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.00438cf0
call fcn.0043aa20
lea eax, [0x70b847]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.0043b2a0
call fcn.0043aa80
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.00407560
call fcn.0043aa20
call fcn.0043ac30
call fcn.0043aa80
lea eax, [0x712d61]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00438cf0
nop
call fcn.00467590
jmp fcn.004385d0