Function at 0x4113f9
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x48c264
call fcn.0046e054
sub esp, 0x204
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [esi + 0x160]
push eax
call edi
lea eax, [esi + 0x178]
push eax
call edi
lea eax, [esi + 0x190]
push eax
call edi
call fcn.0042b09a
push 0xc
call fcn.00480aeb
pop ecx
mov dword [ebp - 0x10], eax
xor ebx, ebx
cmp eax, ebx
mov dword [ebp - 4], ebx
je 0x411451
mov ecx, eax
call fcn.0042af47
jmp 0x411453
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov dword [esi], eax
mov dword [ebp - 0x10], 0xff
mov edi, 0x5102c4
mov eax, dword [edi]
cmp eax, ebx
je 0x411476
push dword [ebp - 0x10]
mov ecx, dword [esi]
push eax
call fcn.0042af77
dec dword [ebp - 0x10]
sub edi, 4
cmp edi, 0x50fec8
jge 0x411465
push 8
call fcn.00480aeb
pop ecx
mov dword [ebp - 0x10], eax
push 1
cmp eax, ebx
pop edi
mov dword [ebp - 4], edi
je 0x4114a2
mov ecx, eax
call fcn.004104e9
jmp 0x4114a4
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0xc
mov dword [esi + 4], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 2
je 0x4114ca
call fcn.0042af47
jmp 0x4114cc
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 8], eax
call fcn.00480aeb
pop ecx
mov dword [ebp - 0x10], eax
cmp eax, ebx
mov dword [ebp - 4], 3
je 0x4114f3
push edi
mov ecx, eax
call fcn.00428ff4
jmp 0x4114f5
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0xc], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 4
je 0x41151c
push edi
call fcn.00428ff4
jmp 0x41151e
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x10], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 5
je 0x411545
push ebx
call fcn.00428ff4
jmp 0x411547
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x14], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 6
je 0x41156e
push edi
call fcn.00428ff4
jmp 0x411570
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x18], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 7
je 0x411597
push edi
call fcn.00428ff4
jmp 0x411599
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x1c], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 8
je 0x4115bf
call fcn.00428946
jmp 0x4115c1
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x20], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 9
je 0x4115e8
push edi
call fcn.00428ff4
jmp 0x4115ea
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x24], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0xa
je 0x411610
call fcn.00428946
jmp 0x411612
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x28], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0xb
je 0x411639
push edi
call fcn.00428ff4
jmp 0x41163b
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x2c], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0xc
je 0x411662
push edi
call fcn.00428ff4
jmp 0x411664
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 4
mov dword [esi + 0x30], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0xd
je 0x41168a
call fcn.00411244
jmp 0x41168c
xor eax, eax
mov dword [esi + 0x34], eax
mov dword [esi + 0x3c], 0x264
mov dword [esi + 0x40], 0x318
mov dword [esi + 0x48], ebx
mov dword [esi + 0x44], ebx
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x40]
or dword [ebp - 4], 0xffffffff
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], edi
mov dword [esi + 0x58], ebx
mov dword [esi + 0x5c], ebx
mov dword [esi + 0x60], edi
mov dword [esi + 0x64], edi
mov dword [esi + 0x68], ebx
mov dword [esi + 0x6c], 2
push 0x10
mov dword [esi + 0x38], ebx
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0xe
je 0x4116ef
push edi
call fcn.00428ff4
jmp 0x4116f1
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x70], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0xf
je 0x411717
call fcn.00428946
jmp 0x411719
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x74], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x10
je 0x41173f
call fcn.00428946
jmp 0x411741
xor eax, eax
mov dword [esi + 0x78], eax
mov dword [esi + 0x7c], edi
mov dword [esi + 0x80], edi
mov dword [esi + 0x84], edi
mov dword [esi + 0x88], edi
mov dword [esi + 0x8c], ebx
mov dword [esi + 0x90], ebx
mov dword [esi + 0x94], ebx
mov dword [esi + 0x98], ebx
mov dword [esi + 0x9c], edi
fldz
mov dword [esi + 0xa0], ebx
or dword [ebp - 4], 0xffffffff
fstp qword [esi + 0xa8]
fld qword [0x48fe18]
push 8
fstp qword [esi + 0xb0]
mov dword [esi + 0xb8], ebx
mov dword [esi + 0xbc], 0x1312d00
mov dword [esi + 0xc0], ebx
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x11
je 0x4117cf
push str.Latin1
call fcn.004105cf
jmp 0x4117d1
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov dword [esi + 0xc4], eax
mov dword [esi + 0xc8], edi
push 8
mov dword [esi + 0xcc], edi
mov dword [esi + 0xd0], edi
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x12
je 0x411811
push 0x50a61c
call fcn.004105cf
jmp 0x411813
xor eax, eax
fld1
or dword [ebp - 4], 0xffffffff
or dword [esi + 0xf8], 0xffffffff
fstp qword [esi + 0x100]
fldz
or dword [esi + 0xfc], 0xffffffff
mov ecx, esi
fstp qword [esi + 0x108]
fld1
mov dword [esi + 0xd4], eax
mov dword [esi + 0xd8], ebx
fstp qword [esi + 0x110]
fldz
mov dword [esi + 0xdc], edi
mov dword [esi + 0xe0], ebx
fstp qword [esi + 0x118]
mov dword [esi + 0xe4], edi
mov dword [esi + 0xe8], edi
mov dword [esi + 0xec], ebx
mov dword [esi + 0xf0], edi
mov dword [esi + 0xf4], ebx
mov dword [esi + 0x120], edi
mov dword [esi + 0x124], ebx
mov dword [esi + 0x128], ebx
mov dword [esi + 0x12c], ebx
mov dword [esi + 0x130], ebx
mov dword [esi + 0x134], edi
mov dword [esi + 0x138], ebx
mov dword [esi + 0x13c], edi
mov dword [esi + 0x140], edi
call fcn.00411d3e
push 8
mov dword [esi + 0x148], ebx
mov dword [esi + 0x14c], ebx
call fcn.00480aeb
pop ecx
mov dword [ebp - 0x10], eax
cmp eax, ebx
mov dword [ebp - 4], 0x13
je 0x4118e5
push 4
mov ecx, eax
call fcn.0042ae5b
jmp 0x4118e7
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 8
mov dword [esi + 0x150], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x14
je 0x411912
push 4
call fcn.0042ae5b
jmp 0x411914
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x154], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x15
je 0x41193d
call fcn.00428fe7
jmp 0x41193f
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x158], eax
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x16
je 0x411968
call fcn.00428fe7
jmp 0x41196a
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov dword [esi + 0x15c], eax
mov eax, dword [0x4f1ff4]
cmp eax, ebx
je 0x4119a0
mov dword [ebp - 0x10], 0x4f1ff4
mov ecx, dword [ebp - 0x10]
push dword [ecx - 4]
mov ecx, dword [esi + 8]
push eax
call fcn.0042af77
add dword [ebp - 0x10], 8
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
cmp eax, ebx
jne 0x411984
push 0x38
call fcn.00480aeb
pop ecx
mov dword [ebp - 0x10], eax
cmp eax, ebx
mov dword [ebp - 4], 0x17
je 0x4119cc
push 0x3c
push 0x4fa488
push ebx
push str.Latin1
mov ecx, eax
call fcn.00428f0a
jmp 0x4119ce
xor eax, eax
mov ecx, dword [eax]
or dword [ebp - 4], 0xffffffff
push eax
push ecx
mov ecx, dword [esi + 0x14]
call fcn.00429084
push 0x38
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x18
je 0x411a0d
push 0x83
push 0x4fa848
push ebx
push str.ASCII7
call fcn.00428f0a
jmp 0x411a0f
xor eax, eax
mov ecx, dword [eax]
or dword [ebp - 4], 0xffffffff
push eax
push ecx
mov ecx, dword [esi + 0x14]
call fcn.00429084
push 0x38
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x19
je 0x411a4b
push 0x79
push 0x4fb078
push ebx
push str.Symbol
call fcn.00428f0a
jmp 0x411a4d
xor eax, eax
mov ecx, dword [eax]
or dword [ebp - 4], 0xffffffff
push eax
push ecx
mov ecx, dword [esi + 0x14]
call fcn.00429084
push 0x38
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x1a
je 0x411a89
push 0x1e
push 0x4fb808
push ebx
push str.ZapfDingbats
call fcn.00428f0a
jmp 0x411a8b
xor eax, eax
mov ecx, dword [eax]
or dword [ebp - 4], 0xffffffff
push eax
push ecx
mov ecx, dword [esi + 0x14]
call fcn.00429084
push 0x38
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x1b
je 0x411ac5
push 0x411c53
push edi
push str.UTF_8
call fcn.00428f79
jmp 0x411ac7
xor eax, eax
mov ecx, dword [eax]
or dword [ebp - 4], 0xffffffff
push eax
push ecx
mov ecx, dword [esi + 0x14]
call fcn.00429084
push 0x38
call fcn.00480aeb
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x1c
je 0x411b01
push 0x411d16
push edi
push str.UCS_2
call fcn.00428f79
jmp 0x411b03
xor eax, eax
mov ecx, dword [eax]
or dword [ebp - 4], 0xffffffff
push eax
push ecx
mov ecx, dword [esi + 0x14]
call fcn.00429084
mov edi, dword [ebp + 8]
cmp edi, ebx
je 0x411b76
cmp byte [edi], bl
je 0x411b76
push 8
call fcn.00480aeb
pop ecx
mov dword [ebp + 8], eax
cmp eax, ebx
mov dword [ebp - 4], 0x1d
je 0x411b40
push edi
mov ecx, eax
call fcn.004105cf
mov edi, eax
jmp 0x411b42
xor edi, edi
mov eax, dword [edi + 4]
or dword [ebp - 4], 0xffffffff
push 0x4ffc00
push eax
mov dword [ebp + 8], edi
call fcn.0046cf74
pop ecx
cmp eax, ebx
pop ecx
mov dword [ebp - 0x10], eax
jne 0x411c1a
cmp edi, ebx
je 0x411b76
mov ecx, edi
call fcn.00410735
push edi
call fcn.00480b14
pop ecx
push str.pdfrc
call fcn.00428a87
push eax
call fcn.00428aed
mov edi, eax
push 0x4ffc00
mov eax, dword [edi + 4]
push eax
call fcn.0046cf74
add esp, 0x10
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x411c1a
cmp edi, ebx
je 0x411bb2
mov ecx, edi
call fcn.00410735
push edi
call fcn.00480b14
pop ecx
mov edi, 0x200
lea eax, [ebp - 0x210]
push edi
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
cmp eax, ebx
jle 0x411bce
cmp eax, edi
jb 0x411bd4
mov byte [ebp - 0x210], bl
lea eax, [ebp - 0x210]
push eax
call fcn.00428b8a
mov edi, eax
mov dword [esp], str.pdfrc
push edi
call fcn.00428aed
mov eax, dword [edi + 4]
push 0x4ffc00
push eax
call fcn.0046cf74
add esp, 0x10
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x411c1a
cmp edi, ebx
je 0x411c40
mov ecx, edi
call fcn.00410735
push edi
call fcn.00480b14
jmp 0x411c3f
push dword [ebp - 0x10]
mov ecx, esi
push edi
call fcn.004129b4
cmp edi, ebx
je 0x411c37
mov ecx, edi
call fcn.00410735
push edi
call fcn.00480b14
pop ecx
push dword [ebp - 0x10]
call fcn.0046ce8b
pop ecx
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4