Function at 0x416950
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x416f93
sub esp, 0x5c
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
nop
inc dword [ecx + 0x7c]
mov ecx, dword [eax + 0x18]
test byte [eax], al
mov eax, dword fs:[0x14]
mov eax, dword [eax]
cmp dword [ecx], eax
je 0x4169bf
mov edx, dword [ecx + 0x7c]
cmp edx, 1
jg 0x4169bf
mov ebx, dword [ecx + 0x78]
test ebx, ebx
jne 0x4169bf
nop
lea ebx, [edx - 1]
mov dword [ecx + 0x7c], ebx
cmp edx, 1
jne 0x4169e7
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x4169e7
mov dword [eax + 8], 0xfffffade
jmp 0x4169e7
nop
mov edx, dword [ecx + 0x7c]
lea ebx, [edx - 1]
mov dword [ecx + 0x7c], ebx
cmp edx, 1
jne 0x4169dd
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x4169dd
mov dword [eax + 8], 0xfffffade
add esp, 0x5c
ret
inc dword [0xbc180c]
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x64]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0xc], ebx
call fcn.004167d0
movzx eax, byte [esp + 0x10]
test al, al
jne 0x416a18
xor eax, eax
jmp 0x416a24
call fcn.00424a00
cmp dword [esp], 0xffffffff
setne al
test al, al
jne 0x4169e1
lea eax, [0xbc1cb8]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.00449c10
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x64]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0xc], ebx
call fcn.004167d0
movzx eax, byte [esp + 0x10]
test al, al
je 0x416b85
mov eax, dword [esp + 0x60]
cmp eax, 2
sete cl
mov byte [0xbc1ccc], cl
mov ecx, dword [0xbe8818]
cmp ecx, 1
jne 0x416a9e
mov ecx, 1
jmp 0x416aac
cmp ecx, 2
jne 0x416aaa
mov ecx, 2
jmp 0x416aac
xor ecx, ecx
mov dword [esp + 0x20], ecx
lea eax, [0xb8b1e8]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.00449c10
lea eax, [0xb8b208]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.00449c10
movzx eax, byte [0xbcc948]
test al, al
je 0x416b6d
nop
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov eax, dword [0xbcc978]
mov ecx, dword [0xbcc97c]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], ecx
mov byte [esp], 7
mov dword [esp + 4], 3
lea eax, [esp + 0x40]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.00455880
mov eax, dword [0xbcc978]
add eax, 1
mov ecx, dword [0xbcc97c]
mov dword [0xbcc978], eax
adc ecx, 0
mov dword [0xbcc97c], ecx
mov eax, dword [0xbc1438]
mov dword [esp + 0x50], eax
mov ecx, dword [0xbc143c]
mov dword [esp + 0x34], ecx
xor edx, edx
jmp 0x416bb4
nop
lea eax, [0xbc1cb8]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00449f20
add esp, 0x5c
ret
mov ebx, dword [esp + 0x30]
lea edx, [ebx + 1]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x34]
cmp edx, ecx
jge 0x416be9
mov dword [esp + 0x30], edx
mov ecx, dword [eax + edx*4]
mov dword [esp + 0x48], ecx
mov ebx, dword [ecx + 0x30]
test byte [ebx], al
add ebx, 0x24c
mov dword [esp], ebx
call fcn.00401fc0
mov eax, dword [esp + 4]
mov ecx, dword [0xbc83a0]
cmp ecx, eax
je 0x416ba5
jmp 0x416edc
call fcn.004189c0
lea eax, [0xa03e80]
mov dword [esp], eax
call fcn.00461840
mov eax, dword [0xbe8360]
mov dword [0xbc1cf8], eax
mov dword [0xbc1cfc], eax
mov ecx, dword [0xbe837c]
cmp ecx, eax
jge 0x416c1e
mov dword [0xbc1cf8], ecx
lea eax, [0xbe9080]
mov dword [esp], eax
call fcn.00402200
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [0xbc1d34], eax
mov dword [0xbc1d30], ecx
mov dword [0xbc1d20], 0
mov dword [0xbc1d24], 0
mov eax, dword [esp + 0x20]
mov dword [0xbc1cc8], eax
call fcn.00463c80
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], ecx
mov dword [0xbc1d04], eax
mov dword [0xbc1d00], ecx
mov dword [0xbc1d2c], eax
mov dword [0xbc1d28], ecx
movzx eax, byte [0xbcc948]
test al, al
je 0x416cdf
nop
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 1
mov dword [esp + 0x44], 0
mov byte [esp], 9
mov dword [esp + 4], 0xffffffff
lea eax, [esp + 0x40]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.00455880
lea eax, [0xa03f48]
mov dword [esp], eax
call fcn.00461840
lea eax, [0xa03e84]
mov dword [esp], eax
call fcn.00461840
call fcn.00419a50
inc dword [0xbc1cf4]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, dword [0xbe8360]
lea ebx, [0xbe9000]
mov dword [esp], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x60]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x1c], eax
call fcn.0041ed10
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
lea edx, [0xbe88c0]
mov dword [esp], edx
mov byte [esp + 4], 1
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
call fcn.0041a090
mov eax, dword [esp + 0x20]
test eax, eax
je 0x416d82
mov byte [esp], 0
call fcn.00445e60
lea eax, [0xbe835c]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004021d0
mov eax, dword [0xbe835c]
cmp eax, 1
jne 0x416daa
mov eax, 1
jmp 0x416db0
cmp eax, 2
sete al
mov byte [0xbe8674], al
test al, al
je 0x416dc1
mov eax, 1
jmp 0x416dc8
movzx eax, byte [0xbe8675]
mov byte [0xbe8670], al
nop
mov dword [0xbc1c78], 0xffffffff
mov dword [0xbc1c84], 0xffffffff
call fcn.0041ae20
call fcn.0041eb90
lea eax, [0xbe8354]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004021d0
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
nop
inc dword [ecx + 0x7c]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
lea ecx, [0x416fa0]
mov dword [esp + 0x54], ecx
lea ecx, [esp + 0x38]
mov dword [esp + 0x58], ecx
lea ecx, [esp + 0x54]
mov dword [esp], ecx
call fcn.00461840
lea eax, [0xb8b208]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00449f20
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x4c]
mov edx, dword [ecx + 0x7c]
lea ebx, [edx - 1]
mov dword [ecx + 0x7c], ebx
cmp edx, 1
jne 0x416ea6
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x416e9e
mov dword [eax + 8], 0xfffffade
mov eax, dword [esp + 0x20]
test eax, eax
jmp 0x416eac
mov eax, dword [esp + 0x20]
test eax, eax
jmp 0x416eac
mov eax, dword [esp + 0x20]
test eax, eax
je 0x416ebc
lea eax, [0xa03e90]
mov dword [esp], eax
call fcn.004617e0
nop
lea eax, [0xbc1cb8]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00449f20
add esp, 0x5c
ret
mov dword [esp + 0x24], eax
mov dword [esp + 0x2c], ecx
mov eax, dword [esp + 0x48]
mov eax, dword [eax]
mov dword [esp + 0x28], eax
call fcn.00439410
lea eax, [0x689e76]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00439cf0
mov eax, dword [esp + 0x28]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00439af0
lea eax, [0x6894c4]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00439cf0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.00439990
lea eax, [0x68a4e4]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.00439cf0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.00439990
call fcn.00439630
call fcn.00439480
lea eax, [0x68d4ce]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.00437810
nop
call fcn.00461950
jmp fcn.00416950