Function at 0x416950
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x416f93
sub esp, 0x5c
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
nop
inc dword [ecx + 0x7c]
mov ecx, dword [eax + 0x18]
test byte [eax], al
mov eax, dword fs:[0x14]
mov eax, dword [eax]
cmp dword [ecx], eax
je 0x4169bf
mov edx, dword [ecx + 0x7c]
cmp edx, 1
jg 0x4169bf
mov ebx, dword [ecx + 0x78]
test ebx, ebx
jne 0x4169bf
nop
lea ebx, [edx - 1]
mov dword [ecx + 0x7c], ebx
cmp edx, 1
jne 0x4169e7
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x4169e7
mov dword [eax + 8], 0xfffffade
jmp 0x4169e7
nop
mov edx, dword [ecx + 0x7c]
lea ebx, [edx - 1]
mov dword [ecx + 0x7c], ebx
cmp edx, 1
jne 0x4169dd
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x4169dd
mov dword [eax + 8], 0xfffffade
add esp, 0x5c
ret
inc dword [0xb836ac]
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x64]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0xc], ebx
call fcn.004167d0
movzx eax, byte [esp + 0x10]
test al, al
jne 0x416a18
xor eax, eax
jmp 0x416a24
call fcn.00424a00
cmp dword [esp], 0xffffffff
setne al
test al, al
jne 0x4169e1
lea eax, [0xb83c18]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.00449b60
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x64]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0xc], ebx
call fcn.004167d0
movzx eax, byte [esp + 0x10]
test al, al
je 0x416b85
mov eax, dword [esp + 0x60]
cmp eax, 2
sete cl
mov byte [0xb83c2c], cl
mov ecx, dword [0xbaaa18]
cmp ecx, 1
jne 0x416a9e
mov ecx, 1
jmp 0x416aac
cmp ecx, 2
jne 0x416aaa
mov ecx, 2
jmp 0x416aac
xor ecx, ecx
mov dword [esp + 0x20], ecx
lea eax, [0xb4c560]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.00449b60
lea eax, [0xb4c580]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.00449b60
movzx eax, byte [0xb8eac8]
test al, al
je 0x416b6d
nop
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov eax, dword [0xb8eaf8]
mov ecx, dword [0xb8eafc]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], ecx
mov byte [esp], 7
mov dword [esp + 4], 3
lea eax, [esp + 0x40]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.00455b50
mov eax, dword [0xb8eaf8]
add eax, 1
mov ecx, dword [0xb8eafc]
mov dword [0xb8eaf8], eax
adc ecx, 0
mov dword [0xb8eafc], ecx
mov eax, dword [0xb832b8]
mov dword [esp + 0x50], eax
mov ecx, dword [0xb832bc]
mov dword [esp + 0x34], ecx
xor edx, edx
jmp 0x416bb4
nop
lea eax, [0xb83c18]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00449e70
add esp, 0x5c
ret
mov ebx, dword [esp + 0x30]
lea edx, [ebx + 1]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x34]
cmp edx, ecx
jge 0x416be9
mov dword [esp + 0x30], edx
mov ecx, dword [eax + edx*4]
mov dword [esp + 0x48], ecx
mov ebx, dword [ecx + 0x30]
test byte [ebx], al
add ebx, 0x24c
mov dword [esp], ebx
call fcn.00401fc0
mov eax, dword [esp + 4]
mov ecx, dword [0xb8a520]
cmp ecx, eax
je 0x416ba5
jmp 0x416edc
call fcn.004189c0
lea eax, [0x962238]
mov dword [esp], eax
call fcn.00461fa0
mov eax, dword [0xbaa4f8]
mov dword [0xb83c58], eax
mov dword [0xb83c5c], eax
mov ecx, dword [0xbaa514]
cmp ecx, eax
jge 0x416c1e
mov dword [0xb83c58], ecx
lea eax, [0xbab280]
mov dword [esp], eax
call fcn.00402200
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [0xb83c94], eax
mov dword [0xb83c90], ecx
mov dword [0xb83c80], 0
mov dword [0xb83c84], 0
mov eax, dword [esp + 0x20]
mov dword [0xb83c28], eax
call fcn.004643d0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], ecx
mov dword [0xb83c64], eax
mov dword [0xb83c60], ecx
mov dword [0xb83c8c], eax
mov dword [0xb83c88], ecx
movzx eax, byte [0xb8eac8]
test al, al
je 0x416cdf
nop
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 1
mov dword [esp + 0x44], 0
mov byte [esp], 9
mov dword [esp + 4], 0xffffffff
lea eax, [esp + 0x40]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.00455b50
lea eax, [0x962308]
mov dword [esp], eax
call fcn.00461fa0
lea eax, [0x96223c]
mov dword [esp], eax
call fcn.00461fa0
call fcn.00419a50
inc dword [0xb83c54]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, dword [0xbaa4f8]
lea ebx, [0xbab200]
mov dword [esp], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x60]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x1c], eax
call fcn.0041ed10
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
lea edx, [0xbaaac0]
mov dword [esp], edx
mov byte [esp + 4], 1
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
call fcn.0041a090
mov eax, dword [esp + 0x20]
test eax, eax
je 0x416d82
mov byte [esp], 0
call fcn.00445db0
lea eax, [0xbaa4f4]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004021d0
mov eax, dword [0xbaa4f4]
cmp eax, 1
jne 0x416daa
mov eax, 1
jmp 0x416db0
cmp eax, 2
sete al
mov byte [0xbaa824], al
test al, al
je 0x416dc1
mov eax, 1
jmp 0x416dc8
movzx eax, byte [0xbaa825]
mov byte [0xbaa820], al
nop
mov dword [0xb83bd8], 0xffffffff
mov dword [0xb83be4], 0xffffffff
call fcn.0041ae20
call fcn.0041eb90
lea eax, [0xbaa4ec]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004021d0
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
nop
inc dword [ecx + 0x7c]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
lea ecx, [0x416fa0]
mov dword [esp + 0x54], ecx
lea ecx, [esp + 0x38]
mov dword [esp + 0x58], ecx
lea ecx, [esp + 0x54]
mov dword [esp], ecx
call fcn.00461fa0
lea eax, [0xb4c580]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00449e70
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x4c]
mov edx, dword [ecx + 0x7c]
lea ebx, [edx - 1]
mov dword [ecx + 0x7c], ebx
cmp edx, 1
jne 0x416ea6
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x416e9e
mov dword [eax + 8], 0xfffffade
mov eax, dword [esp + 0x20]
test eax, eax
jmp 0x416eac
mov eax, dword [esp + 0x20]
test eax, eax
jmp 0x416eac
mov eax, dword [esp + 0x20]
test eax, eax
je 0x416ebc
lea eax, [0x96224c]
mov dword [esp], eax
call fcn.00461f40
nop
lea eax, [0xb83c18]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00449e70
add esp, 0x5c
ret
mov dword [esp + 0x24], eax
mov dword [esp + 0x2c], ecx
mov eax, dword [esp + 0x48]
mov eax, dword [eax]
mov dword [esp + 0x28], eax
call fcn.00439360
lea eax, [0x7309a0]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00439c40
mov eax, dword [esp + 0x28]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00439a40
lea eax, [0x72fe85]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00439c40
mov dword [esp + 4], 0
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.004398e0
lea eax, [0x731255]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.00439c40
mov dword [esp + 4], 0
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.004398e0
call fcn.00439580
call fcn.004393d0
lea eax, [0x7351a0]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.00437760
nop
call fcn.004620b0
jmp fcn.00416950