Function at 0x4bef40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x56e676
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x204
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [esi + 0x114]
push eax
call edi
lea ecx, [esi + 0x12c]
push ecx
call edi
lea edx, [esi + 0x144]
push edx
call edi
call fcn.004e8460
push 0xc
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x21c], ebx
je 0x4befab
mov ecx, eax
call fcn.004e8200
jmp 0x4befad
xor eax, eax
mov dword [esp + 0x21c], 0xffffffff
mov dword [esi], eax
mov ebp, 0xff
mov edi, 0x5d35f8
mov eax, dword [edi]
cmp eax, ebx
je 0x4befd3
mov ecx, dword [esi]
push ebp
push eax
call fcn.004e8280
sub edi, 4
dec ebp
cmp edi, 0x5d31fc
jge 0x4befc4
push 8
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 1
je 0x4bf005
mov ecx, eax
call fcn.004c42d0
jmp 0x4bf007
xor eax, eax
or ebp, 0xffffffff
push 0xc
mov dword [esp + 0x220], ebp
mov dword [esi + 4], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
mov edi, 2
cmp eax, ebx
mov dword [esp + 0x21c], edi
je 0x4bf03b
mov ecx, eax
call fcn.004e8200
jmp 0x4bf03d
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 8], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 3
je 0x4bf06f
push 1
mov ecx, eax
call fcn.004e6ce0
jmp 0x4bf071
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0xc], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 4
je 0x4bf0a3
push 1
mov ecx, eax
call fcn.004e6ce0
jmp 0x4bf0a5
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x10], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 5
je 0x4bf0d6
push ebx
mov ecx, eax
call fcn.004e6ce0
jmp 0x4bf0d8
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x14], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 6
je 0x4bf10a
push 1
mov ecx, eax
call fcn.004e6ce0
jmp 0x4bf10c
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x18], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 7
je 0x4bf13e
push 1
mov ecx, eax
call fcn.004e6ce0
jmp 0x4bf140
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x1c], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 8
je 0x4bf170
mov ecx, eax
call fcn.004e43a0
jmp 0x4bf172
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x20], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 9
je 0x4bf1a3
push ebx
mov ecx, eax
call fcn.004e6ce0
jmp 0x4bf1a5
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x24], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0xa
je 0x4bf1d6
push ebx
mov ecx, eax
call fcn.004e6ce0
jmp 0x4bf1d8
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x2c], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0xb
je 0x4bf209
push ebx
mov ecx, eax
call fcn.004e6ce0
jmp 0x4bf20b
xor eax, eax
mov dword [esi + 0x30], eax
mov dword [esi + 0x38], 0x264
mov dword [esi + 0x3c], 0x318
mov dword [esi + 0x44], ebx
mov dword [esi + 0x40], ebx
mov eax, dword [esi + 0x38]
mov dword [esi + 0x48], eax
mov ecx, dword [esi + 0x3c]
mov eax, 1
mov dword [esi + 0x4c], ecx
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], ebx
mov dword [esi + 0x58], eax
mov dword [esi + 0x5c], eax
mov dword [esi + 0x60], ebx
mov dword [esi + 0x64], edi
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x34], ebx
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0xc
je 0x4bf276
push ebx
mov ecx, eax
call fcn.004e6ce0
jmp 0x4bf278
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x68], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0xd
je 0x4bf2a8
mov ecx, eax
call fcn.004e43a0
jmp 0x4bf2aa
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x6c], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0xe
je 0x4bf2da
mov ecx, eax
call fcn.004e43a0
jmp 0x4bf2dc
xor eax, eax
mov edi, 1
mov dword [esi + 0x70], eax
mov dword [esi + 0x74], edi
mov dword [esi + 0x78], edi
mov dword [esi + 0x7c], edi
mov dword [esi + 0x80], edi
push 8
mov dword [esp + 0x220], ebp
mov dword [esi + 0x84], ebx
mov dword [esi + 0x88], ebx
mov dword [esi + 0x8c], ebx
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0xf
je 0x4bf337
push 0x5d0f98
mov ecx, eax
call fcn.004c4300
jmp 0x4bf339
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x90], eax
mov dword [esi + 0x94], edi
mov dword [esi + 0x98], edi
mov dword [esi + 0x9c], ebx
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x10
je 0x4bf37e
mov ecx, eax
call fcn.004e43a0
jmp 0x4bf380
xor eax, eax
push 8
mov dword [esp + 0x220], ebp
mov dword [esi + 0xa0], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x11
je 0x4bf3b8
push 0x5d0f94
mov ecx, eax
call fcn.004c4300
jmp 0x4bf3ba
xor eax, eax
mov dword [esi + 0xa4], eax
mov eax, 0x3ff00000
mov dword [esi + 0xd0], ebx
mov dword [esi + 0xd8], ebx
mov dword [esi + 0xe0], ebx
mov ecx, esi
mov dword [esp + 0x21c], ebp
mov dword [esi + 0xa8], ebx
mov dword [esi + 0xac], edi
mov dword [esi + 0xb0], edi
mov dword [esi + 0xb4], edi
mov dword [esi + 0xb8], edi
mov dword [esi + 0xbc], edi
mov dword [esi + 0xc0], ebx
mov dword [esi + 0xc4], ebp
mov dword [esi + 0xc8], ebp
mov dword [esi + 0xd4], eax
mov dword [esi + 0xdc], ebx
mov dword [esi + 0xe4], eax
mov dword [esi + 0xe8], ebx
mov dword [esi + 0xec], ebx
mov dword [esi + 0xf0], edi
mov dword [esi + 0xf4], ebx
call fcn.004bf960
push 8
mov dword [esi + 0xfc], ebx
mov dword [esi + 0x100], ebx
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x12
je 0x4bf479
push 4
mov ecx, eax
call fcn.004c8010
jmp 0x4bf47b
xor eax, eax
push 8
mov dword [esp + 0x220], ebp
mov dword [esi + 0x104], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x13
je 0x4bf4b0
push 4
mov ecx, eax
call fcn.004c8010
jmp 0x4bf4b2
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x108], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x14
je 0x4bf4e5
mov ecx, eax
call fcn.004e6ca0
jmp 0x4bf4e7
xor eax, eax
push 0x10
mov dword [esp + 0x220], ebp
mov dword [esi + 0x10c], eax
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x15
je 0x4bf51a
mov ecx, eax
call fcn.004e6ca0
jmp 0x4bf51c
xor eax, eax
mov dword [esi + 0x110], eax
mov dword [esi + 0x28], ebx
mov eax, dword [0x5ca8f4]
mov dword [esp + 0x21c], ebp
cmp eax, ebx
je 0x4bf551
mov edi, 0x5ca8f4
mov edx, dword [edi - 4]
mov ecx, dword [esi + 8]
push edx
push eax
call fcn.004e8280
mov eax, dword [edi + 8]
add edi, 8
cmp eax, ebx
jne 0x4bf53a
push 0x38
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x16
je 0x4bf584
push 0x3a
push 0x5ccad0
push ebx
push 0x5d0f98
mov ecx, eax
call fcn.004e6ad0
jmp 0x4bf586
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x224], ebp
call fcn.004e6da0
push 0x38
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x17
je 0x4bf5cf
push 0x81
push 0x5cce70
push ebx
push 0x5d0f8c
mov ecx, eax
call fcn.004e6ad0
jmp 0x4bf5d1
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x224], ebp
call fcn.004e6da0
push 0x38
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x18
je 0x4bf617
push 0x79
push 0x5cd680
push ebx
push 0x5c7328
mov ecx, eax
call fcn.004e6ad0
jmp 0x4bf619
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x224], ebp
call fcn.004e6da0
push 0x38
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x19
je 0x4bf65f
push 0x1e
push 0x5cde10
push ebx
push 0x5ce0e4
mov ecx, eax
call fcn.004e6ad0
jmp 0x4bf661
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x224], ebp
call fcn.004e6da0
push 0x38
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x1a
je 0x4bf6a6
push 0x4bf860
push 1
push 0x5c03dc
mov ecx, eax
call fcn.004e6b70
jmp 0x4bf6a8
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x224], ebp
call fcn.004e6da0
push 0x38
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x1b
je 0x4bf6ed
push 0x4bf930
push 1
push 0x5d0f84
mov ecx, eax
call fcn.004e6b70
jmp 0x4bf6ef
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x224], ebp
call fcn.004e6da0
mov edi, dword [esp + 0x224]
cmp edi, ebx
je 0x4bf776
cmp byte [edi], bl
je 0x4bf776
push 8
call fcn.0055d252
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x21c], 0x1c
je 0x4bf73a
push edi
mov ecx, eax
call fcn.004c4300
mov edi, eax
jmp 0x4bf73c
xor edi, edi
mov eax, dword [edi + 4]
push 0x5bc294
push eax
mov dword [esp + 0x224], 0xffffffff
call fcn.00502a9a
mov ebp, eax
add esp, 8
cmp ebp, ebx
jne 0x4bf814
cmp edi, ebx
je 0x4bf776
mov ecx, edi
call fcn.004c44b0
push edi
call fcn.0055d27b
add esp, 4
push 0x5d0f7c
call fcn.004cda90
push eax
call fcn.004cdb40
mov edi, eax
push 0x5bc294
mov eax, dword [edi + 4]
push eax
call fcn.00502a9a
mov ebp, eax
add esp, 0x10
cmp ebp, ebx
jne 0x4bf814
cmp edi, ebx
je 0x4bf7b3
mov ecx, edi
call fcn.004c44b0
push edi
call fcn.0055d27b
add esp, 4
lea eax, [esp + 0x14]
push 0x200
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
cmp eax, ebx
jle 0x4bf7cf
cmp eax, 0x200
jb 0x4bf7d3
mov byte [esp + 0x14], bl
lea ecx, [esp + 0x14]
push ecx
call fcn.004cdc10
mov edi, eax
push 0x5d0f7c
push edi
call fcn.004cdb40
mov eax, dword [edi + 4]
push 0x5bc294
push eax
call fcn.00502a9a
mov ebp, eax
add esp, 0x14
cmp ebp, ebx
jne 0x4bf814
cmp edi, ebx
je 0x4bf83a
mov ecx, edi
call fcn.004c44b0
push edi
call fcn.0055d27b
jmp 0x4bf837
push ebp
push edi
mov ecx, esi
call fcn.004c0760
cmp edi, ebx
je 0x4bf831
mov ecx, edi
call fcn.004c44b0
push edi
call fcn.0055d27b
add esp, 4
push ebp
call fcn.005029b1
add esp, 4
mov ecx, dword [esp + 0x214]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x210
ret 4