Function at 0x438360
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4798f2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24c
push ebx
push ebp
mov ebp, ecx
xor ebx, ebx
push esi
push edi
mov dword [esp + 0x38], ebp
mov dword [esp + 0xb8], 0x47d174
mov word [esp + 0xbc], 0xffff
mov word [esp + 0xbe], bx
mov dword [esp + 0x264], ebx
mov edi, 0x48bf4c
mov esi, 0x48bf44
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x48bbf4
call fcn.00447db0
mov ecx, dword [0x4987f0]
call fcn.004580d0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x48bf3c
call fcn.00447db0
mov ecx, dword [0x4987f0]
call fcn.00458310
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x48bf34
call fcn.00447db0
mov ecx, dword [0x4987f0]
call fcn.00458310
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x48bf2c
call fcn.00447db0
mov ecx, dword [0x4987f0]
call fcn.00458310
mov ecx, dword [0x4987f0]
lea eax, [esp + 0xb8]
push eax
call fcn.00458450
cmp ax, 0xffff
je 0x4390c3
movsx eax, word [esp + 0xbc]
sub eax, ebx
je 0x438eaa
dec eax
je 0x438c15
dec eax
jne 0x4383b5
push 6
push 0x48bf2c
lea ecx, [esp + 0xb8]
call fcn.00447db0
mov cl, byte [esp + 0x13]
mov dword [esp + 0x90], ebx
mov byte [esp + 0x8c], cl
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dl, byte [esp + 0x13]
mov dword [esp + 0x20], ebx
mov byte [esp + 0x1c], dl
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
push 6
push 0x48bf24
lea ecx, [esp + 0x4c]
mov byte [esp + 0x26c], 0x11
call fcn.00447db0
push ebx
lea ecx, [esp + 0x34]
mov byte [esp + 0x268], 0x12
call fcn.00447d40
mov eax, 0x48bf1c
mov byte [esp + 0x264], 0x13
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], eax
mov eax, 0x48bf14
mov dword [esp + 0xc8], 0x48bf0c
mov dword [esp + 0xf4], eax
mov dword [esp + 0xf8], eax
mov eax, 0x48bf04
mov dword [esp + 0xcc], 0x48befc
mov dword [esp + 0xfc], eax
mov dword [esp + 0x100], eax
mov eax, 0x48bef4
mov dword [esp + 0xd0], 0x48beec
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], eax
mov eax, 0x48bee4
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], eax
mov eax, 0x48bedc
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], eax
mov eax, 0x48bed4
mov dword [esp + 0xd4], 0x48becc
mov dword [esp + 0xd8], 0x48bec4
mov dword [esp + 0xdc], 0x48bebc
mov dword [esp + 0xe0], 0x48beb4
mov dword [esp + 0xe4], 0x48beac
mov dword [esp + 0xe8], 0x48bea4
mov dword [esp + 0xec], 0x48be9c
mov dword [esp + 0xf0], 0x48be94
mov dword [esp + 0x104], 0x48be8c
mov dword [esp + 0x108], 0x48be84
mov dword [esp + 0x10c], edi
mov dword [esp + 0x110], edi
mov dword [esp + 0x114], edi
mov dword [esp + 0x118], edi
mov dword [esp + 0x11c], edi
mov dword [esp + 0x120], edi
mov dword [esp + 0x130], esi
mov dword [esp + 0x134], esi
mov dword [esp + 0x138], esi
mov dword [esp + 0x13c], esi
mov dword [esp + 0x140], esi
mov dword [esp + 0x144], esi
mov dword [esp + 0x164], 0x48be7c
mov dword [esp + 0x168], 0x48be74
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], eax
mov eax, 0x48be6c
mov dword [esp + 0x174], 0x48be64
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], eax
mov eax, 0x48be5c
mov dword [esp + 0x178], 0x48be54
mov dword [esp + 0x17c], 0x48be4c
mov dword [esp + 0x180], 0x48be44
mov dword [esp + 0x184], 0x48be3c
mov dword [esp + 0x188], 0x48be34
mov dword [esp + 0x18c], 0x48be2c
mov dword [esp + 0x190], 0x48be24
mov dword [esp + 0x194], 0x48be1c
mov dword [esp + 0x198], 0x48be14
mov dword [esp + 0x19c], 0x48be0c
mov dword [esp + 0x1a0], 0x48be04
mov dword [esp + 0x1a4], 0x48bdfc
mov dword [esp + 0x1a8], 0x48bdf4
mov dword [esp + 0x1ac], 0x48bdec
mov dword [esp + 0x1b0], 0x48bde4
mov dword [esp + 0x1b4], 0x48bddc
mov dword [esp + 0x1b8], 0x48bdd4
mov dword [esp + 0x1bc], 0x48bdcc
mov dword [esp + 0x1c0], 0x48bdc4
mov dword [esp + 0x1c4], 0x48bdbc
mov dword [esp + 0x1c8], 0x48bdb4
mov dword [esp + 0x1cc], 0x48bdac
mov dword [esp + 0x1d0], 0x48bda4
mov dword [esp + 0x1d4], 0x48bd9c
mov dword [esp + 0x1d8], 0x48bd94
mov dword [esp + 0x1dc], 0x48bd8c
mov dword [esp + 0x1e0], 0x48bd84
mov dword [esp + 0x1e4], 0x48bd7c
mov dword [esp + 0x1e8], 0x48bd74
mov dword [esp + 0x1ec], 0x48bd6c
mov dword [esp + 0x1f0], 0x48bd64
mov dword [esp + 0x1f4], 0x48bd5c
mov dword [esp + 0x1f8], 0x48bd54
mov dword [esp + 0x1fc], 0x48bd4c
mov dword [esp + 0x200], 0x48bd44
mov dword [esp + 0x204], 0x48bd3c
mov dword [esp + 0x208], 0x48bd34
mov dword [esp + 0x20c], 0x48bd2c
mov dword [esp + 0x210], 0x48bd24
mov dword [esp + 0x214], 0x48bd1c
mov dword [esp + 0x218], 0x48bd14
mov dword [esp + 0x224], eax
mov dword [esp + 0x228], eax
mov dword [esp + 0x22c], eax
mov dword [esp + 0x230], eax
mov dword [esp + 0x234], 0x48bd0c
mov dword [esp + 0x238], 0x48bd04
mov dword [esp + 0x23c], 0x48bcfc
mov dword [esp + 0x240], 0x48bcf4
mov dword [esp + 0x244], 0x48bcec
mov dword [esp + 0x248], 0x48bce4
mov dword [esp + 0x24c], 0x48bcdc
mov dword [esp + 0x250], 0x48bcd4
mov dword [esp + 0x254], 0x48bccc
mov dword [esp + 0x258], 0x48bcc4
mov byte [esp + 0x54], bl
lea ebp, [esp + 0xc0]
mov eax, dword [esp + 0x54]
lea ecx, [esp + 0x44]
push eax
push 5
call fcn.00448120
mov edx, dword [esp + 0x94]
lea ecx, [esp + 0x44]
push ecx
push 1
push edx
lea ecx, [esp + 0x98]
call fcn.004054d0
mov eax, dword [ebp]
push 7
push eax
lea ecx, [esp + 0x38]
call fcn.00448270
lea ecx, [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x3c]
call fcn.004376d0
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
sub edx, eax
mov dword [esp + 0x34], eax
sar edx, 2
cmp edx, 1
jae 0x438a33
lea ecx, [esp + 0x1c]
call fcn.0040fd10
cmp eax, 1
jbe 0x438975
lea ecx, [esp + 0x1c]
call fcn.0040fd10
mov dword [esp + 0x2c], eax
jmp 0x43897d
mov dword [esp + 0x2c], 1
lea ecx, [esp + 0x1c]
call fcn.0040fd10
add eax, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
jns 0x438992
xor eax, eax
shl eax, 2
push eax
call fcn.0046a462
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x2c], eax
push eax
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.0040ff90
lea ecx, [esp + 0x30]
mov dword [esp + 0x40], eax
push ecx
push 1
push eax
lea ecx, [esp + 0x28]
call fcn.0040ffd0
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x34]
add edx, 4
push edx
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.0040ff90
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
push edx
push eax
lea ecx, [esp + 0x24]
call fcn.0040fea0
mov ecx, dword [esp + 0x20]
push ecx
call fcn.00469f00
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x18]
add esp, 4
lea ecx, [edx + eax*4]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x1c]
call fcn.0040fd10
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x20], ecx
lea edx, [ecx + eax*4 + 4]
mov dword [esp + 0x24], edx
jmp 0x438ac5
xor cl, cl
cmp cl, 1
jae 0x438a88
lea edx, [eax + 4]
lea ecx, [esp + 0x1c]
push edx
push eax
push eax
call fcn.0040ff90
mov edx, dword [esp + 0x34]
lea eax, [esp + 0x30]
push eax
mov eax, dword [esp + 0x28]
mov ecx, eax
sub ecx, edx
mov edx, 1
sar ecx, 2
sub edx, ecx
lea ecx, [esp + 0x20]
push edx
push eax
call fcn.0040ffd0
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x34]
lea eax, [esp + 0x30]
push eax
push ecx
push edx
call fcn.00405b10
add esp, 0xc
jmp 0x438ac0
push eax
push eax
add eax, 0xfffffffc
lea ecx, [esp + 0x24]
push eax
call fcn.0040ff90
mov eax, dword [esp + 0x24]
push eax
add eax, 0xfffffffc
push eax
mov eax, dword [esp + 0x3c]
push eax
call fcn.00405b50
mov eax, dword [esp + 0x40]
lea ecx, [esp + 0x3c]
push ecx
lea edx, [eax + 4]
push edx
push eax
call fcn.00405b10
add esp, 0x18
add dword [esp + 0x24], 4
mov al, byte [esp + 0x54]
add ebp, 4
inc al
cmp al, 0x66
mov byte [esp + 0x54], al
jbe 0x4388f6
push 0x43e850
lea eax, [esp + 0x20]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00429690
sub esp, 0x10
lea edx, [esp + 0xb0]
mov ecx, esp
mov dword [esp + 0x64], esp
push edx
mov byte [esp + 0x28c], 0x14
call fcn.00429690
push ecx
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
mov byte [esp + 0x290], 0x15
call fcn.00447d20
mov ecx, dword [esp + 0x60]
mov byte [esp + 0x28c], 0x13
call fcn.004390e0
lea ecx, [esp + 0x30]
mov byte [esp + 0x264], 0x12
call fcn.00447e50
lea ecx, [esp + 0x44]
mov byte [esp + 0x264], 0x11
call fcn.00447e50
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
cmp eax, ecx
mov byte [esp + 0x264], 0x10
mov dword [esp + 0x14], ecx
mov ebp, eax
je 0x438b8f
mov ecx, ebp
call fcn.00447e50
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x438b79
mov eax, dword [esp + 0x20]
push eax
call fcn.00469f00
mov eax, dword [esp + 0x98]
mov ebp, dword [esp + 0x94]
add esp, 4
cmp ebp, eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x264], 0xf
mov dword [esp + 0x14], eax
je 0x438bdb
mov ecx, ebp
call fcn.00447e50
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x438bc2
mov ebp, dword [esp + 0x90]
push ebp
call fcn.00469f00
add esp, 4
lea ecx, [esp + 0xb0]
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov byte [esp + 0x264], bl
call fcn.00447e50
mov ebp, dword [esp + 0x38]
jmp 0x4383b5
push 6
push 0x48bf34
lea ecx, [esp + 0xbc]
call fcn.00447db0
mov cl, byte [esp + 0x13]
mov dword [esp + 0x80], ebx
mov byte [esp + 0x7c], cl
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov dl, byte [esp + 0x13]
mov dword [esp + 0x70], ebx
mov byte [esp + 0x6c], dl
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
push 6
push 0x48bcbc
lea ecx, [esp + 0x54]
mov byte [esp + 0x26c], 0xa
call fcn.00447db0
push ebx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x268], 0xb
call fcn.00447d40
xor al, al
mov byte [esp + 0x264], 0xc
mov byte [esp + 0x3c], al
jmp 0x438c97
mov al, byte [esp + 0x3c]
cmp al, bl
ja 0x438ca4
push 6
push 0x48bcb4
jmp 0x438d0a
cmp al, 1
ja 0x438cb1
push 6
push 0x48bcac
jmp 0x438d0a
cmp al, 2
ja 0x438cbe
push 6
push 0x48bca4
jmp 0x438d0a
cmp al, 0x19
ja 0x438ccb
push 6
push 0x48bc9c
jmp 0x438d0a
cmp al, 0x1d
ja 0x438cd8
push 6
push 0x48bc94
jmp 0x438d0a
cmp al, 0x1e
ja 0x438ce5
push 6
push 0x48bc8c
jmp 0x438d0a
cmp al, 0x1f
ja 0x438cf2
push 6
push 0x48bc84
jmp 0x438d0a
cmp al, 0x20
ja 0x438cff
push 6
push 0x48bc7c
jmp 0x438d0a
cmp al, 0x21
ja 0x438d13
push 6
push 0x48bc74
lea ecx, [esp + 0x20]
call fcn.00448270
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x4c]
push eax
push 5
call fcn.00448120
mov edx, dword [esp + 0x84]
lea ecx, [esp + 0x4c]
push ecx
push 1
push edx
lea ecx, [esp + 0x88]
call fcn.004054d0
lea eax, [esp + 0x18]
mov ecx, ebp
push eax
call fcn.004376d0
mov edx, dword [esp + 0x74]
lea ecx, [esp + 0x18]
push ecx
push 1
push edx
lea ecx, [esp + 0x78]
call fcn.004054d0
mov al, byte [esp + 0x3c]
inc al
cmp al, 0x21
mov byte [esp + 0x3c], al
jbe 0x438c93
push 0x43deb0
lea eax, [esp + 0x70]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00429690
sub esp, 0x10
lea edx, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x64], esp
push edx
mov byte [esp + 0x28c], 0xd
call fcn.00429690
push ecx
lea eax, [esp + 0xdc]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
mov byte [esp + 0x290], 0xe
call fcn.00447d20
mov ecx, ebp
mov byte [esp + 0x28c], 0xc
call fcn.004390e0
lea ecx, [esp + 0x18]
mov byte [esp + 0x264], 0xb
call fcn.00447e50
lea ecx, [esp + 0x4c]
mov byte [esp + 0x264], 0xa
call fcn.00447e50
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x70]
cmp eax, ecx
mov byte [esp + 0x264], 9
mov dword [esp + 0x14], ecx
mov ebp, eax
je 0x438e24
mov ecx, ebp
call fcn.00447e50
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x438e0e
mov eax, dword [esp + 0x70]
push eax
call fcn.00469f00
mov eax, dword [esp + 0x88]
mov ebp, dword [esp + 0x84]
add esp, 4
cmp ebp, eax
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov byte [esp + 0x264], 8
mov dword [esp + 0x14], eax
je 0x438e70
mov ecx, ebp
call fcn.00447e50
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x438e57
mov ebp, dword [esp + 0x80]
push ebp
call fcn.00469f00
add esp, 4
lea ecx, [esp + 0xb4]
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov byte [esp + 0x264], bl
call fcn.00447e50
mov ebp, dword [esp + 0x38]
jmp 0x4383b5
push 6
push 0x48bf3c
lea ecx, [esp + 0xb4]
call fcn.00447db0
mov cl, byte [esp + 0x13]
mov dword [esp + 0x60], ebx
mov byte [esp + 0x5c], cl
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dl, byte [esp + 0x13]
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x9c], dl
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
push 6
push 0x48bc6c
lea ecx, [esp + 0x60]
mov byte [esp + 0x26c], 3
call fcn.00447db0
push 6
push 0x48bc64
lea ecx, [esp + 0x50]
mov byte [esp + 0x26c], 4
call fcn.00447db0
lea eax, [esp + 0x48]
mov ecx, ebp
push eax
mov byte [esp + 0x268], 5
call fcn.004376d0
mov byte [esp + 0x50], bl
mov ecx, dword [esp + 0x50]
push ecx
push 5
lea ecx, [esp + 0x60]
call fcn.00448120
mov eax, dword [esp + 0x64]
lea edx, [esp + 0x58]
push edx
push 1
push eax
lea ecx, [esp + 0x68]
call fcn.004054d0
mov edx, dword [esp + 0xa4]
lea ecx, [esp + 0x48]
push ecx
push 1
push edx
lea ecx, [esp + 0xa8]
call fcn.004054d0
mov al, byte [esp + 0x50]
inc al
cmp al, 0x77
mov byte [esp + 0x50], al
jbe 0x438f39
push 0x439a20
lea eax, [esp + 0xa0]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00429690
sub esp, 0x10
lea edx, [esp + 0x80]
mov ecx, esp
mov dword [esp + 0x64], esp
push edx
mov byte [esp + 0x28c], 6
call fcn.00429690
push ecx
lea eax, [esp + 0xd4]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
mov byte [esp + 0x290], 7
call fcn.00447d20
mov ecx, ebp
mov byte [esp + 0x28c], 5
call fcn.004390e0
lea ecx, [esp + 0x48]
mov byte [esp + 0x264], 4
call fcn.00447e50
lea ecx, [esp + 0x58]
mov byte [esp + 0x264], 3
call fcn.00447e50
mov ecx, dword [esp + 0xa4]
mov eax, dword [esp + 0xa0]
cmp eax, ecx
mov byte [esp + 0x264], 2
mov dword [esp + 0x14], ecx
mov ebp, eax
je 0x439046
mov ecx, ebp
call fcn.00447e50
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x43902d
mov eax, dword [esp + 0xa0]
push eax
call fcn.00469f00
mov eax, dword [esp + 0x68]
mov ebp, dword [esp + 0x64]
add esp, 4
cmp ebp, eax
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x264], 1
mov dword [esp + 0x14], eax
je 0x439092
mov ecx, ebp
call fcn.00447e50
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x43907c
mov ebp, dword [esp + 0x60]
push ebp
call fcn.00469f00
add esp, 4
lea ecx, [esp + 0xac]
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov byte [esp + 0x264], bl
call fcn.00447e50
mov ebp, dword [esp + 0x38]
jmp 0x4383b5
mov ecx, dword [esp + 0x25c]
pop edi
pop esi
pop ebp
xor ax, ax
mov dword fs:[0], ecx
pop ebx
add esp, 0x258
ret