Function at 0x4140b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x484de6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x204
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov edi, dword [sym.imp.KERNEL32.DLL_InitializeCriticalSection]
lea eax, [esi + 0x114]
push eax
call edi
lea ecx, [esi + 0x12c]
push ecx
call edi
lea edx, [esi + 0x144]
push edx
call edi
call fcn.00426a50
push 0xc
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x21c], ebx
je 0x41411b
mov ecx, eax
call fcn.00426870
jmp 0x41411d
xor eax, eax
mov dword [esp + 0x21c], 0xffffffff
mov dword [esi], eax
mov ebp, 0xff
mov edi, 0x4a0c70
mov eax, dword [edi]
cmp eax, ebx
je 0x414143
mov ecx, dword [esi]
push ebp
push eax
call fcn.004268b0
sub edi, 4
dec ebp
cmp edi, 0x4a0874
jge 0x414134
push 8
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 1
je 0x414175
mov ecx, eax
call fcn.004188b0
jmp 0x414177
xor eax, eax
or ebp, 0xffffffff
push 0xc
mov dword [esp + 0x220], ebp
mov dword [esi + 4], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
mov edi, 2
cmp eax, ebx
mov dword [esp + 0x21c], edi
je 0x4141ab
mov ecx, eax
call fcn.00426870
jmp 0x4141ad
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 8], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 3
je 0x4141df
push 1
mov ecx, eax
call fcn.004241d0
jmp 0x4141e1
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0xc], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 4
je 0x414213
push 1
mov ecx, eax
call fcn.004241d0
jmp 0x414215
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x10], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 5
je 0x414246
push ebx
mov ecx, eax
call fcn.004241d0
jmp 0x414248
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x14], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 6
je 0x41427a
push 1
mov ecx, eax
call fcn.004241d0
jmp 0x41427c
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x18], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 7
je 0x4142ae
push 1
mov ecx, eax
call fcn.004241d0
jmp 0x4142b0
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x1c], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 8
je 0x4142e0
mov ecx, eax
call fcn.00423c30
jmp 0x4142e2
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x20], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 9
je 0x414313
push ebx
mov ecx, eax
call fcn.004241d0
jmp 0x414315
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x24], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0xa
je 0x414346
push ebx
mov ecx, eax
call fcn.004241d0
jmp 0x414348
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x2c], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0xb
je 0x414379
push ebx
mov ecx, eax
call fcn.004241d0
jmp 0x41437b
xor eax, eax
mov dword [esi + 0x30], eax
mov dword [esi + 0x38], 0x264
mov dword [esi + 0x3c], 0x318
mov dword [esi + 0x44], ebx
mov dword [esi + 0x40], ebx
mov eax, dword [esi + 0x38]
mov dword [esi + 0x48], eax
mov ecx, dword [esi + 0x3c]
mov eax, 1
mov dword [esi + 0x4c], ecx
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], ebx
mov dword [esi + 0x58], eax
mov dword [esi + 0x5c], eax
mov dword [esi + 0x60], ebx
mov dword [esi + 0x64], edi
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x34], ebx
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0xc
je 0x4143e6
push ebx
mov ecx, eax
call fcn.004241d0
jmp 0x4143e8
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x68], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0xd
je 0x414418
mov ecx, eax
call fcn.00423c30
jmp 0x41441a
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x6c], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0xe
je 0x41444a
mov ecx, eax
call fcn.00423c30
jmp 0x41444c
xor eax, eax
mov edi, 1
mov dword [esi + 0x70], eax
mov dword [esi + 0x74], edi
mov dword [esi + 0x78], edi
mov dword [esi + 0x7c], edi
mov dword [esi + 0x80], edi
push 8
mov dword [esp + 0x220], ebp
mov dword [esi + 0x84], ebx
mov dword [esi + 0x88], ebx
mov dword [esi + 0x8c], ebx
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0xf
je 0x4144a7
push str.Latin1
mov ecx, eax
call fcn.004188e0
jmp 0x4144a9
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x90], eax
mov dword [esi + 0x94], edi
mov dword [esi + 0x98], edi
mov dword [esi + 0x9c], ebx
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x10
je 0x4144ee
mov ecx, eax
call fcn.00423c30
jmp 0x4144f0
xor eax, eax
push 8
mov dword [esp + 0x220], ebp
mov dword [esi + 0xa0], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x11
je 0x414528
push 0x49dde8
mov ecx, eax
call fcn.004188e0
jmp 0x41452a
xor eax, eax
mov dword [esi + 0xa4], eax
mov eax, 0x3ff00000
mov dword [esi + 0xd0], ebx
mov dword [esi + 0xd8], ebx
mov dword [esi + 0xe0], ebx
mov ecx, esi
mov dword [esp + 0x21c], ebp
mov dword [esi + 0xa8], ebx
mov dword [esi + 0xac], edi
mov dword [esi + 0xb0], edi
mov dword [esi + 0xb4], edi
mov dword [esi + 0xb8], edi
mov dword [esi + 0xbc], edi
mov dword [esi + 0xc0], ebx
mov dword [esi + 0xc4], ebp
mov dword [esi + 0xc8], ebp
mov dword [esi + 0xd4], eax
mov dword [esi + 0xdc], ebx
mov dword [esi + 0xe4], eax
mov dword [esi + 0xe8], ebx
mov dword [esi + 0xec], ebx
mov dword [esi + 0xf0], edi
mov dword [esi + 0xf4], ebx
call fcn.00414ad0
push 8
mov dword [esi + 0xfc], ebx
mov dword [esi + 0x100], ebx
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x12
je 0x4145e9
push 4
mov ecx, eax
call fcn.00426760
jmp 0x4145eb
xor eax, eax
push 8
mov dword [esp + 0x220], ebp
mov dword [esi + 0x104], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x13
je 0x414620
push 4
mov ecx, eax
call fcn.00426760
jmp 0x414622
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x108], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x14
je 0x414655
mov ecx, eax
call fcn.00425460
jmp 0x414657
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x10c], eax
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x15
je 0x41468a
mov ecx, eax
call fcn.00425460
jmp 0x41468c
xor eax, eax
mov dword [esi + 0x110], eax
mov dword [esi + 0x28], ebx
mov eax, dword [0x4976dc]
mov dword [esp + 0x21c], ebp
cmp eax, ebx
je 0x4146c1
mov edi, 0x4976dc
mov edx, dword [edi - 4]
mov ecx, dword [esi + 8]
push edx
push eax
call fcn.004268b0
mov eax, dword [edi + 8]
add edi, 8
cmp eax, ebx
jne 0x4146aa
push 0x38
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x16
je 0x4146f4
push 0x3a
push 0x4998b8
push ebx
push str.Latin1
mov ecx, eax
call fcn.004240a0
jmp 0x4146f6
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x224], ebp
call fcn.00424220
push 0x38
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x17
je 0x41473f
push 0x81
push 0x499c58
push ebx
push str.ASCII7
mov ecx, eax
call fcn.004240a0
jmp 0x414741
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x224], ebp
call fcn.00424220
push 0x38
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x18
je 0x414787
push 0x79
push 0x49a468
push ebx
push str.Symbol
mov ecx, eax
call fcn.004240a0
jmp 0x414789
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x224], ebp
call fcn.00424220
push 0x38
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x19
je 0x4147cf
push 0x1e
push 0x49abf8
push ebx
push str.ZapfDingbats
mov ecx, eax
call fcn.004240a0
jmp 0x4147d1
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x224], ebp
call fcn.00424220
push 0x38
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x1a
je 0x414816
push 0x4149d0
push 1
push str.UTF_8
mov ecx, eax
call fcn.00424140
jmp 0x414818
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x224], ebp
call fcn.00424220
push 0x38
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x1b
je 0x41485d
push 0x414aa0
push 1
push str.UCS_2
mov ecx, eax
call fcn.00424140
jmp 0x41485f
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x224], ebp
call fcn.00424220
mov edi, dword [esp + 0x224]
cmp edi, ebx
je 0x4148e6
cmp byte [edi], bl
je 0x4148e6
push 8
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x1c
je 0x4148aa
push edi
mov ecx, eax
call fcn.004188e0
mov edi, eax
jmp 0x4148ac
xor edi, edi
mov eax, dword [edi + 4]
push 0x49b634
push eax
mov dword [esp + 0x224], 0xffffffff
call fcn.00465963
mov ebp, eax
add esp, 8
cmp ebp, ebx
jne 0x414984
cmp edi, ebx
je 0x4148e6
mov ecx, edi
call fcn.00418a20
push edi
call fcn.0047c305
add esp, 4
push 0x49ddcc
call fcn.00423d60
push eax
call fcn.00423e10
mov edi, eax
push 0x49b634
mov eax, dword [edi + 4]
push eax
call fcn.00465963
mov ebp, eax
add esp, 0x10
cmp ebp, ebx
jne 0x414984
cmp edi, ebx
je 0x414923
mov ecx, edi
call fcn.00418a20
push edi
call fcn.0047c305
add esp, 4
lea eax, [esp + 0x14]
push 0x200
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameA]
cmp eax, ebx
jle 0x41493f
cmp eax, 0x200
jb 0x414943
mov byte [esp + 0x14], bl
lea ecx, [esp + 0x14]
push ecx
call fcn.00423ee0
mov edi, eax
push 0x49ddcc
push edi
call fcn.00423e10
mov eax, dword [edi + 4]
push 0x49b634
push eax
call fcn.00465963
mov ebp, eax
add esp, 0x14
cmp ebp, ebx
jne 0x414984
cmp edi, ebx
je 0x4149aa
mov ecx, edi
call fcn.00418a20
push edi
call fcn.0047c305
jmp 0x4149a7
push ebp
push edi
mov ecx, esi
call fcn.004158d0
cmp edi, ebx
je 0x4149a1
mov ecx, edi
call fcn.00418a20
push edi
call fcn.0047c305
add esp, 4
push ebp
call fcn.004658b5
add esp, 4
mov ecx, dword [esp + 0x214]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x210
ret 4