Function at 0x414e04
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x4b8100
call fcn.0047f6fc
sub esp, 0x204
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [sym.imp.KERNEL32.DLL_InitializeCriticalSection]
lea eax, [esi + 0x160]
push eax
call edi
lea eax, [esi + 0x178]
push eax
call edi
lea eax, [esi + 0x190]
push eax
call edi
call fcn.0042c0f5
push 0xc
call fcn.004a2b48
pop ecx
mov dword [ebp - 0x10], eax
xor ebx, ebx
cmp eax, ebx
mov dword [ebp - 4], ebx
je 0x414e5c
mov ecx, eax
call fcn.0042bf4b
jmp 0x414e5e
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov dword [esi], eax
mov dword [ebp - 0x10], 0xff
mov edi, 0x4f3a80
mov eax, dword [edi]
cmp eax, ebx
je 0x414e81
push dword [ebp - 0x10]
mov ecx, dword [esi]
push eax
call fcn.0042bfa7
dec dword [ebp - 0x10]
sub edi, 4
cmp edi, 0x4f3684
jge 0x414e70
push 8
call fcn.004a2b48
pop ecx
mov dword [ebp - 0x10], eax
push 1
cmp eax, ebx
pop edi
mov dword [ebp - 4], edi
je 0x414ead
mov ecx, eax
call fcn.0041b247
jmp 0x414eaf
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0xc
mov dword [esi + 4], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 2
je 0x414ed5
call fcn.0042bf4b
jmp 0x414ed7
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 8], eax
call fcn.004a2b48
pop ecx
mov dword [ebp - 0x10], eax
cmp eax, ebx
mov dword [ebp - 4], 3
je 0x414efe
push edi
mov ecx, eax
call fcn.00429d40
jmp 0x414f00
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0xc], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 4
je 0x414f27
push edi
call fcn.00429d40
jmp 0x414f29
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x10], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 5
je 0x414f50
push ebx
call fcn.00429d40
jmp 0x414f52
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x14], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 6
je 0x414f79
push edi
call fcn.00429d40
jmp 0x414f7b
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x18], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 7
je 0x414fa2
push edi
call fcn.00429d40
jmp 0x414fa4
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x1c], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 8
je 0x414fca
call fcn.00428b03
jmp 0x414fcc
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x20], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 9
je 0x414ff3
push edi
call fcn.00429d40
jmp 0x414ff5
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x24], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0xa
je 0x41501b
call fcn.00428b03
jmp 0x41501d
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x28], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0xb
je 0x415044
push edi
call fcn.00429d40
jmp 0x415046
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x2c], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0xc
je 0x41506d
push edi
call fcn.00429d40
jmp 0x41506f
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 4
mov dword [esi + 0x30], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0xd
je 0x415095
call fcn.004145fd
jmp 0x415097
xor eax, eax
mov dword [esi + 0x34], eax
mov dword [esi + 0x3c], 0x264
mov dword [esi + 0x40], 0x318
mov dword [esi + 0x48], ebx
mov dword [esi + 0x44], ebx
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x40]
or dword [ebp - 4], 0xffffffff
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], edi
mov dword [esi + 0x58], ebx
mov dword [esi + 0x5c], ebx
mov dword [esi + 0x60], edi
mov dword [esi + 0x64], edi
mov dword [esi + 0x68], ebx
mov dword [esi + 0x6c], 2
push 0x10
mov dword [esi + 0x38], ebx
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0xe
je 0x4150fa
push edi
call fcn.00429d40
jmp 0x4150fc
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x70], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0xf
je 0x415122
call fcn.00428b03
jmp 0x415124
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x74], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x10
je 0x41514a
call fcn.00428b03
jmp 0x41514c
xor eax, eax
mov dword [esi + 0x78], eax
mov dword [esi + 0x7c], edi
mov dword [esi + 0x80], edi
mov dword [esi + 0x84], edi
mov dword [esi + 0x88], edi
mov dword [esi + 0x8c], ebx
mov dword [esi + 0x90], ebx
mov dword [esi + 0x94], ebx
mov dword [esi + 0x98], ebx
mov dword [esi + 0x9c], edi
fldz
mov dword [esi + 0xa0], ebx
or dword [ebp - 4], 0xffffffff
fstp qword [esi + 0xa8]
fld qword [0x4bcea8]
push 8
fstp qword [esi + 0xb0]
mov dword [esi + 0xb8], ebx
mov dword [esi + 0xbc], 0x1312d00
mov dword [esi + 0xc0], ebx
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x11
je 0x4151da
push str.Latin1
call fcn.0041b32d
jmp 0x4151dc
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov dword [esi + 0xc4], eax
mov dword [esi + 0xc8], edi
push 8
mov dword [esi + 0xcc], edi
mov dword [esi + 0xd0], edi
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x12
je 0x41521c
push 0x4eed88
call fcn.0041b32d
jmp 0x41521e
xor eax, eax
fld1
or dword [ebp - 4], 0xffffffff
or dword [esi + 0xf8], 0xffffffff
fstp qword [esi + 0x100]
fldz
or dword [esi + 0xfc], 0xffffffff
mov ecx, esi
fstp qword [esi + 0x108]
fld1
mov dword [esi + 0xd4], eax
mov dword [esi + 0xd8], ebx
fstp qword [esi + 0x110]
fldz
mov dword [esi + 0xdc], edi
mov dword [esi + 0xe0], ebx
fstp qword [esi + 0x118]
mov dword [esi + 0xe4], edi
mov dword [esi + 0xe8], edi
mov dword [esi + 0xec], ebx
mov dword [esi + 0xf0], edi
mov dword [esi + 0xf4], ebx
mov dword [esi + 0x120], edi
mov dword [esi + 0x124], ebx
mov dword [esi + 0x128], ebx
mov dword [esi + 0x12c], ebx
mov dword [esi + 0x130], ebx
mov dword [esi + 0x134], edi
mov dword [esi + 0x138], ebx
mov dword [esi + 0x13c], edi
mov dword [esi + 0x140], edi
call fcn.00415749
push 8
mov dword [esi + 0x148], ebx
mov dword [esi + 0x14c], ebx
call fcn.004a2b48
pop ecx
mov dword [ebp - 0x10], eax
cmp eax, ebx
mov dword [ebp - 4], 0x13
je 0x4152f0
push 4
mov ecx, eax
call fcn.0042be35
jmp 0x4152f2
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 8
mov dword [esi + 0x150], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x14
je 0x41531d
push 4
call fcn.0042be35
jmp 0x41531f
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x154], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x15
je 0x415348
call fcn.00429c75
jmp 0x41534a
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x10
mov dword [esi + 0x158], eax
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x16
je 0x415373
call fcn.0042ae71
jmp 0x415375
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov dword [esi + 0x15c], eax
mov eax, dword [0x4d66a4]
cmp eax, ebx
je 0x4153ab
mov dword [ebp - 0x10], 0x4d66a4
mov ecx, dword [ebp - 0x10]
push dword [ecx - 4]
mov ecx, dword [esi + 8]
push eax
call fcn.0042bfa7
add dword [ebp - 0x10], 8
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
cmp eax, ebx
jne 0x41538f
push 0x38
call fcn.004a2b48
pop ecx
mov dword [ebp - 0x10], eax
cmp eax, ebx
mov dword [ebp - 4], 0x17
je 0x4153d7
push 0x3c
push 0x4deb38
push ebx
push str.Latin1
mov ecx, eax
call fcn.00429a13
jmp 0x4153d9
xor eax, eax
mov ecx, dword [eax]
or dword [ebp - 4], 0xffffffff
push eax
push ecx
mov ecx, dword [esi + 0x14]
call fcn.00429dd0
push 0x38
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x18
je 0x415418
push 0x83
push 0x4deef8
push ebx
push str.ASCII7
call fcn.00429a13
jmp 0x41541a
xor eax, eax
mov ecx, dword [eax]
or dword [ebp - 4], 0xffffffff
push eax
push ecx
mov ecx, dword [esi + 0x14]
call fcn.00429dd0
push 0x38
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x19
je 0x415456
push 0x79
push 0x4df728
push ebx
push str.Symbol
call fcn.00429a13
jmp 0x415458
xor eax, eax
mov ecx, dword [eax]
or dword [ebp - 4], 0xffffffff
push eax
push ecx
mov ecx, dword [esi + 0x14]
call fcn.00429dd0
push 0x38
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x1a
je 0x415494
push 0x1e
push 0x4dfeb8
push ebx
push str.ZapfDingbats
call fcn.00429a13
jmp 0x415496
xor eax, eax
mov ecx, dword [eax]
or dword [ebp - 4], 0xffffffff
push eax
push ecx
mov ecx, dword [esi + 0x14]
call fcn.00429dd0
push 0x38
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x1b
je 0x4154d0
push 0x41565e
push edi
push str.UTF_8
call fcn.00429a82
jmp 0x4154d2
xor eax, eax
mov ecx, dword [eax]
or dword [ebp - 4], 0xffffffff
push eax
push ecx
mov ecx, dword [esi + 0x14]
call fcn.00429dd0
push 0x38
call fcn.004a2b48
pop ecx
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x1c
je 0x41550c
push 0x415721
push edi
push str.UCS_2
call fcn.00429a82
jmp 0x41550e
xor eax, eax
mov ecx, dword [eax]
or dword [ebp - 4], 0xffffffff
push eax
push ecx
mov ecx, dword [esi + 0x14]
call fcn.00429dd0
mov edi, dword [ebp + 8]
cmp edi, ebx
je 0x415581
cmp byte [edi], bl
je 0x415581
push 8
call fcn.004a2b48
pop ecx
mov dword [ebp + 8], eax
cmp eax, ebx
mov dword [ebp - 4], 0x1d
je 0x41554b
push edi
mov ecx, eax
call fcn.0041b32d
mov edi, eax
jmp 0x41554d
xor edi, edi
mov eax, dword [edi + 4]
or dword [ebp - 4], 0xffffffff
push 0x4d55d4
push eax
mov dword [ebp + 8], edi
call fcn.004806aa
pop ecx
cmp eax, ebx
pop ecx
mov dword [ebp - 0x10], eax
jne 0x415625
cmp edi, ebx
je 0x415581
mov ecx, edi
call fcn.0041b553
push edi
call fcn.004a2b71
pop ecx
push str.pdfrc
call fcn.00428d83
push eax
call fcn.00428e5d
mov edi, eax
push 0x4d55d4
mov eax, dword [edi + 4]
push eax
call fcn.004806aa
add esp, 0x10
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x415625
cmp edi, ebx
je 0x4155bd
mov ecx, edi
call fcn.0041b553
push edi
call fcn.004a2b71
pop ecx
mov edi, 0x200
lea eax, [ebp - 0x210]
push edi
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameA]
cmp eax, ebx
jle 0x4155d9
cmp eax, edi
jb 0x4155df
mov byte [ebp - 0x210], bl
lea eax, [ebp - 0x210]
push eax
call fcn.00428efa
mov edi, eax
mov dword [esp], str.pdfrc
push edi
call fcn.00428e5d
mov eax, dword [edi + 4]
push 0x4d55d4
push eax
call fcn.004806aa
add esp, 0x10
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x415625
cmp edi, ebx
je 0x41564b
mov ecx, edi
call fcn.0041b553
push edi
call fcn.004a2b71
jmp 0x41564a
push dword [ebp - 0x10]
mov ecx, esi
push edi
call fcn.004163bf
cmp edi, ebx
je 0x415642
mov ecx, edi
call fcn.0041b553
push edi
call fcn.004a2b71
pop ecx
push dword [ebp - 0x10]
call fcn.00480572
pop ecx
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4