Function at 0x4183a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x490019
mov eax, dword fs:[0]
push eax
sub esp, 0x43c
mov eax, dword [0x4b0650]
xor eax, esp
mov dword [esp + 0x438], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4b0650]
xor eax, esp
push eax
lea eax, [esp + 0x450]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x2c], esi
push 0x11c
xor ebx, ebx
lea eax, [esp + 0x134]
push ebx
push eax
call fcn.00477c40
add esp, 0xc
lea ecx, [esp + 0x130]
push ecx
mov dword [esp + 0x134], 0x11c
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
movzx edx, word [esp + 0x246]
movzx eax, word [esp + 0x244]
mov ecx, dword [esp + 0x138]
push edx
mov edx, dword [esp + 0x138]
push eax
push ecx
push edx
lea eax, [esp + 0x25c]
push str.OS_d._d._d._d
push eax
call fcn.00479bac
add esp, 0x18
cmp byte [esi + 0xa589], bl
lea ecx, [esp + 0x24c]
je 0x418463
push ecx
push str._sx64_
mov edx, ecx
push edx
jmp 0x418471
lea eax, [esp + 0x24c]
push eax
push str._sx86_
push ecx
call fcn.00479bac
mov edi, 0xf
lea eax, [esp + 0x258]
add esp, 0xc
mov dword [esp + 0x12c], edi
mov dword [esp + 0x128], ebx
mov byte [esp + 0x118], bl
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4184a0
sub eax, edx
push eax
lea edx, [esp + 0x250]
push edx
lea ecx, [esp + 0x11c]
call fcn.00404100
push 0x12
push str.SOFTWARECyberLink
lea ecx, [esp + 0xe4]
mov dword [esp + 0x460], ebx
mov dword [esp + 0xfc], edi
mov dword [esp + 0xf8], ebx
mov byte [esp + 0xe8], bl
call fcn.00404100
push ebx
push 0x494702
lea ecx, [esp + 0xc8]
mov byte [esp + 0x460], 1
mov dword [esp + 0xe0], edi
mov dword [esp + 0xdc], ebx
mov byte [esp + 0xcc], bl
call fcn.00404100
lea eax, [esp + 0xc0]
push eax
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x44], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x108]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [esp + 0x488], 2
mov byte [ecx + 4], bl
call fcn.00403fb0
mov ecx, esi
call fcn.004171f0
cmp dword [esp + 0xd4], ebx
je 0x418578
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x120]
call fcn.00415720
cmp byte [esi + 0xa589], bl
je 0x418620
push ebx
push 0x494702
lea ecx, [esp + 0x90]
mov dword [esp + 0xa8], edi
mov dword [esp + 0xa4], ebx
mov byte [esp + 0x94], bl
call fcn.00404100
lea ecx, [esp + 0x88]
push ecx
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x44], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x108]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [esp + 0x488], 3
mov byte [ecx + 4], bl
call fcn.00403fb0
mov ecx, esi
call fcn.004171f0
cmp dword [esp + 0x9c], ebx
je 0x418606
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0x120]
call fcn.00415720
cmp dword [esp + 0xa0], 0x10
jb 0x418620
mov ecx, dword [esp + 0x8c]
push ecx
call fcn.00477a90
add esp, 4
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
lea edx, [esp + 0x34]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x13c]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push eax
mov byte [esp + 0x484], 4
mov byte [ecx + 4], bl
call fcn.00403fb0
mov ecx, esi
call fcn.00416950
push ebx
push 0x492aa0
lea ecx, [esp + 0x58]
mov dword [esp + 0x70], 7
mov dword [esp + 0x6c], ebx
mov word [esp + 0x5c], bx
call fcn.00415c80
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x64]
cmp eax, ecx
mov byte [esp + 0x458], 5
ja 0x4186a4
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x58]
call fcn.00414930
jmp 0x4186b1
sub eax, ecx
push ebx
push eax
lea ecx, [esp + 0x58]
call fcn.00415bd0
mov edx, dword [esp + 0x68]
cmp edx, 8
mov eax, dword [esp + 0x54]
jb 0x4189f9
cmp eax, ebx
mov edi, eax
mov dword [esp + 0x28], edi
je 0x4186ef
cmp edx, 8
mov ecx, eax
jae 0x4186d7
lea ecx, [esp + 0x54]
cmp ecx, edi
ja 0x4186ef
cmp edx, 8
jae 0x4186e4
lea eax, [esp + 0x54]
mov ecx, dword [esp + 0x64]
lea edx, [eax + ecx*2]
cmp edi, edx
jbe 0x4186f4
call fcn.004789ce
mov edx, dword [esp + 0x4c]
cmp edx, 0x10
mov ecx, dword [esp + 0x38]
mov eax, ecx
jae 0x418707
lea eax, [esp + 0x38]
mov edi, dword [esp + 0x48]
lea ebp, [eax + edi]
cmp ebp, ebx
je 0x418732
cmp edx, 0x10
mov eax, ecx
jae 0x41871d
lea eax, [esp + 0x38]
cmp eax, ebp
ja 0x418732
cmp edx, 0x10
mov eax, ecx
jae 0x41872c
lea eax, [esp + 0x38]
add eax, edi
cmp ebp, eax
jbe 0x41873f
call fcn.004789ce
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x38]
cmp edx, 0x10
jb 0x418a06
cmp ecx, ebx
mov edi, ecx
je 0x418772
cmp edx, 0x10
mov eax, ecx
jae 0x418759
lea eax, [esp + 0x38]
cmp eax, edi
ja 0x418772
cmp edx, 0x10
mov eax, ecx
jae 0x418768
lea eax, [esp + 0x38]
mov ecx, dword [esp + 0x48]
add eax, ecx
cmp edi, eax
jbe 0x418777
call fcn.004789ce
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x2c]
mov byte [esp + 0x20], bl
mov edx, dword [esp + 0x20]
push edx
mov edx, dword [esp + 0x2c]
push eax
push ecx
push edx
lea eax, [esp + 0x60]
push eax
push ebp
lea eax, [esp + 0x38]
push edi
push eax
call fcn.00415510
add esp, 0x20
push 5
push str.CLAP_
lea ecx, [esp + 0x74]
mov dword [esp + 0x8c], 7
mov dword [esp + 0x88], ebx
mov word [esp + 0x78], bx
call fcn.00415c80
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x58]
push ecx
lea ecx, [esp + 0x78]
mov byte [esp + 0x464], 6
call fcn.00415910
cmp dword [esp + 0x84], 8
mov eax, dword [esp + 0x70]
jae 0x4187f5
lea eax, [esp + 0x70]
push eax
call fcn.00401030
add esp, 4
push 0x33
mov edi, 0xf
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
lea ecx, [esp + 0x100]
mov dword [esp + 0x118], edi
mov dword [esp + 0x114], ebx
mov byte [esp + 0x104], bl
call fcn.00404100
lea ecx, [esp + 0x14]
mov byte [esp + 0x458], 7
call fcn.00414b20
mov dword [esp + 0x18], eax
mov byte [eax + 0x45], 1
mov eax, dword [esp + 0x18]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x18]
mov dword [eax], eax
mov eax, dword [esp + 0x18]
mov dword [eax + 8], eax
mov dword [esp + 0x1c], ebx
mov edx, dword [esp + 0x18]
mov eax, dword [edx + 4]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x45c], 8
call fcn.00417750
mov eax, dword [esp + 0x18]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x14]
push ecx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], ebx
mov dword [eax], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x44], esp
push 0xffffffffffffffff
mov dword [eax + 8], eax
push ebx
lea edx, [esp + 0x124]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.00403fb0
mov ecx, esi
call fcn.00417c70
cmp byte [esi + 0xa589], bl
je 0x418949
push ebx
push 0x494702
lea ecx, [esp + 0x90]
mov dword [esp + 0xa8], edi
mov dword [esp + 0xa4], ebx
mov byte [esp + 0x94], bl
call fcn.00404100
lea eax, [esp + 0x14]
push eax
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x44], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x124]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [esp + 0x488], 9
mov byte [ecx + 4], bl
call fcn.00403fb0
mov ecx, esi
call fcn.00417c70
cmp dword [esp + 0xa0], 0x10
mov byte [esp + 0x458], 8
jb 0x418949
mov eax, dword [esp + 0x8c]
push eax
call fcn.00477a90
add esp, 4
push ebx
push 0x494702
lea ecx, [esp + 0xac]
mov dword [esp + 0xc4], edi
mov dword [esp + 0xc0], ebx
mov byte [esp + 0xb0], bl
call fcn.00404100
cmp dword [esp + 0x1c], ebx
mov byte [esp + 0x458], 0xa
je 0x418a0f
mov ecx, dword [esp + 0x18]
mov edi, dword [ecx]
lea esi, [esp + 0x14]
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], esi
cmp esi, ebx
mov ebp, dword [esp + 0x18]
je 0x4189a4
lea edx, [esp + 0x14]
cmp esi, edx
je 0x4189a9
call fcn.004789ce
cmp edi, ebp
je 0x418a22
cmp esi, ebx
jne 0x4189b6
call fcn.004789ce
cmp edi, dword [esi + 4]
jne 0x4189c0
call fcn.004789ce
push 0xffffffffffffffff
push ebx
add edi, 0x28
push edi
lea ecx, [esp + 0xb0]
call fcn.00415720
push 1
push 0x4983c0
lea ecx, [esp + 0xac]
call fcn.00415820
lea ecx, [esp + 0x20]
call fcn.00413f40
mov edi, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
jmp 0x418994
lea edi, [esp + 0x54]
mov dword [esp + 0x28], edi
jmp 0x4186cc
lea edi, [esp + 0x38]
jmp 0x41874e
push 0xa
push str.No_OtherAP
lea ecx, [esp + 0xac]
call fcn.00415820
lea ecx, [esp + 0x34]
call fcn.004155e0
lea eax, [esp + 0x34]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0xcc]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.00403fb0
mov ecx, dword [esp + 0x4c]
call fcn.00416950
lea ecx, [esp + 0x50]
call fcn.00415680
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x64]
cmp eax, ecx
ja 0x418a82
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x58]
call fcn.00414930
jmp 0x418a8f
sub eax, ecx
push ebx
push eax
lea ecx, [esp + 0x58]
call fcn.00415bd0
mov edx, dword [esp + 0x68]
cmp edx, 8
mov eax, dword [esp + 0x54]
jb 0x418d6f
cmp eax, ebx
mov esi, eax
mov dword [esp + 0x28], esi
je 0x418acd
cmp edx, 8
mov ecx, eax
jae 0x418ab5
lea ecx, [esp + 0x54]
cmp ecx, esi
ja 0x418acd
cmp edx, 8
jae 0x418ac2
lea eax, [esp + 0x54]
mov ecx, dword [esp + 0x64]
lea edx, [eax + ecx*2]
cmp esi, edx
jbe 0x418ad2
call fcn.004789ce
mov edx, dword [esp + 0x4c]
cmp edx, 0x10
mov ecx, dword [esp + 0x38]
mov eax, ecx
jae 0x418ae5
lea eax, [esp + 0x38]
mov ebp, dword [esp + 0x48]
lea edi, [eax + ebp]
cmp edi, ebx
je 0x418b10
cmp edx, 0x10
mov eax, ecx
jae 0x418afb
lea eax, [esp + 0x38]
cmp eax, edi
ja 0x418b10
cmp edx, 0x10
mov eax, ecx
jae 0x418b0a
lea eax, [esp + 0x38]
add eax, ebp
cmp edi, eax
jbe 0x418b21
call fcn.004789ce
mov edx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x48]
mov ecx, dword [esp + 0x38]
cmp edx, 0x10
jb 0x418d7c
cmp ecx, ebx
mov esi, ecx
je 0x418b50
cmp edx, 0x10
mov eax, ecx
jae 0x418b3b
lea eax, [esp + 0x38]
cmp eax, esi
ja 0x418b50
cmp edx, 0x10
mov eax, ecx
jae 0x418b4a
lea eax, [esp + 0x38]
add ebp, eax
cmp esi, ebp
jbe 0x418b55
call fcn.004789ce
mov byte [esp + 0x2c], bl
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
push eax
push ecx
lea eax, [esp + 0x60]
push eax
push edi
lea edx, [esp + 0x44]
push esi
push edx
call fcn.00415510
add esp, 0x20
lea ecx, [esp + 0x6c]
call fcn.00415680
push 5
push 0x498478
lea ecx, [esp + 0x74]
call fcn.00415a20
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x78]
call fcn.00415910
cmp dword [esp + 0x84], 8
mov eax, dword [esp + 0x70]
jae 0x418bbd
lea eax, [esp + 0x70]
push eax
call fcn.00401030
mov edi, 0x10
add esp, 4
cmp dword [esp + 0xbc], edi
jb 0x418be4
mov ecx, dword [esp + 0xa8]
push ecx
call fcn.00477a90
add esp, 4
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x18]
mov ebp, 0xf
push ecx
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xc0], ebx
mov byte [esp + 0xb0], bl
mov edx, dword [eax]
push edx
mov esi, ecx
push esi
lea edx, [esp + 0x3c]
push edx
mov byte [esp + 0x46c], 7
call fcn.00417a70
mov eax, dword [esp + 0x18]
push eax
call fcn.00477a90
add esp, 4
cmp dword [esp + 0x110], edi
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
jb 0x418c4e
mov ecx, dword [esp + 0xfc]
push ecx
call fcn.00477a90
add esp, 4
cmp dword [esp + 0x84], 8
mov dword [esp + 0x110], ebp
mov dword [esp + 0x10c], ebx
mov byte [esp + 0xfc], bl
jb 0x418c7a
mov edx, dword [esp + 0x70]
push edx
call fcn.00477a90
add esp, 4
cmp dword [esp + 0x68], 8
mov esi, 7
mov dword [esp + 0x84], esi
mov dword [esp + 0x80], ebx
mov word [esp + 0x70], bx
jb 0x418ca6
mov eax, dword [esp + 0x54]
push eax
call fcn.00477a90
add esp, 4
cmp dword [esp + 0x4c], edi
mov dword [esp + 0x68], esi
mov dword [esp + 0x64], ebx
mov word [esp + 0x54], bx
jb 0x418cc6
mov ecx, dword [esp + 0x38]
push ecx
call fcn.00477a90
add esp, 4
cmp dword [esp + 0xd8], edi
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
jb 0x418ceb
mov edx, dword [esp + 0xc4]
push edx
call fcn.00477a90
add esp, 4
cmp dword [esp + 0xf4], edi
mov dword [esp + 0xd8], ebp
mov dword [esp + 0xd4], ebx
mov byte [esp + 0xc4], bl
jb 0x418d19
mov eax, dword [esp + 0xe0]
push eax
call fcn.00477a90
add esp, 4
cmp dword [esp + 0x12c], edi
mov dword [esp + 0xf4], ebp
mov dword [esp + 0xf0], ebx
mov byte [esp + 0xe0], bl
jb 0x418d47
mov ecx, dword [esp + 0x118]
push ecx
call fcn.00477a90
add esp, 4
mov ecx, dword [esp + 0x450]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x438]
xor ecx, esp
call fcn.00477bf8
add esp, 0x448
ret
lea esi, [esp + 0x54]
mov dword [esp + 0x28], esi
jmp 0x418aaa
lea esi, [esp + 0x38]
jmp 0x418b30