Function at 0x41c1a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4c1610
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x4f4de0]
xor eax, esp
mov dword [esp + 0x58], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4f4de0]
xor eax, esp
push eax
lea eax, [esp + 0x70]
mov dword fs:[0], eax
mov eax, dword [esp + 0x84]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0x88]
xor ebx, ebx
dec eax
mov dword [esp + 0x14], ebx
cmp eax, 0x69
ja case.0x41c1fe.5
movzx eax, byte [eax + 0x41c4d0]
jmp dword [eax*4 + 0x41c4a0]
push str.360se
mov ecx, esi
call fcn.004068d0
jmp 0x41c47f
push str.360se6
mov ecx, esi
call fcn.004068d0
jmp 0x41c47f
push str.360chrome
mov ecx, esi
call fcn.004068d0
jmp 0x41c47f
push str.opera
mov ecx, esi
call fcn.004068d0
jmp 0x41c47f
push str.yandex
mov ecx, esi
call fcn.004068d0
jmp 0x41c47f
push str.firefox
mov ecx, esi
call fcn.004068d0
jmp 0x41c47f
push str.googlechrome
mov ecx, esi
call fcn.004068d0
jmp 0x41c47f
push 0x4d8fac
mov ecx, esi
call fcn.004068d0
jmp 0x41c47f
push str.microsoftedge
mov ecx, esi
call fcn.004068d0
jmp 0x41c47f
push str.amigo
mov ecx, esi
call fcn.004068d0
jmp 0x41c47f
push str.opera360e
mov ecx, esi
call fcn.004068d0
jmp 0x41c47f
cmp edi, ebx
je 0x41c461
mov eax, edi
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x41c2d0
sub eax, edx
sar eax, 1
je 0x41c461
mov ebp, 7
xor ecx, ecx
mov dword [esp + 0x68], ebp
mov dword [esp + 0x64], ebx
mov word [esp + 0x54], cx
push edi
mov dword [esp + 0x7c], ebx
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
xor edx, edx
mov ecx, eax
mov dword [esp + 0x30], ebp
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], dx
lea ebp, [ecx + 2]
jmp 0x41c320
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x41c320
sub ecx, ebp
sar ecx, 1
push ecx
push eax
lea ecx, [esp + 0x20]
call fcn.004054b0
mov byte [esp + 0x78], 1
cmp dword [esp + 0x2c], ebx
jne 0x41c357
lea ecx, [esp + 0x18]
mov byte [esp + 0x78], bl
call fcn.00405450
jmp 0x41c403
push edi
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
xor ecx, ecx
mov word [esp + 0x38], cx
mov ebp, 7
mov ecx, eax
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], ebx
lea edi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x41c377
sub ecx, edi
sar ecx, 1
push ecx
push eax
lea ecx, [esp + 0x3c]
call fcn.004054b0
mov byte [esp + 0x78], 2
cmp dword [esp + 0x48], ebx
jne 0x41c3b4
lea ecx, [esp + 0x34]
call fcn.00405450
lea ecx, [esp + 0x18]
mov byte [esp + 0x78], bl
call fcn.00405450
jmp 0x41c403
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x3c]
push edx
lea ecx, [esp + 0x5c]
call fcn.00405ad0
mov edi, 8
cmp dword [esp + 0x4c], edi
jb 0x41c3dd
mov eax, dword [esp + 0x38]
push eax
call fcn.00493cb0
add esp, 4
xor ecx, ecx
mov byte [esp + 0x78], bl
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], cx
cmp dword [esp + 0x30], edi
jb 0x41c403
mov edx, dword [esp + 0x1c]
push edx
call fcn.00493cb0
add esp, 4
cmp dword [esp + 0x64], ebx
je 0x41c450
push str.unkn_
lea ecx, [esp + 0x1c]
call fcn.004068d0
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x84], 3
call fcn.00408260
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00405420
lea ecx, [esp + 0x18]
call fcn.00405450
lea ecx, [esp + 0x50]
call fcn.00405450
jmp 0x41c47f
lea ecx, [esp + 0x50]
mov dword [esp + 0x78], 0xffffffff
call fcn.00405450
push 4
xor edx, edx
mov dword [esi + 0x18], 7
mov dword [esi + 0x14], ebx
push str.unkn
mov ecx, esi
mov word [esi + 4], dx
call fcn.004054b0
mov eax, esi
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.00497941
add esp, 0x68
ret