Function at 0x416840
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0xf40b4c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x416e3d
sub esp, 0x5c
mov eax, dword [0xf40b4c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
nop
inc dword [ecx + 0x7c]
mov ecx, dword [0xf40b4c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
mov eax, dword [eax + 0x18]
cmp dword [eax], ecx
je 0x4168a7
mov edx, dword [eax + 0x7c]
cmp edx, 1
jg 0x4168a7
mov ebx, dword [eax + 0x78]
test ebx, ebx
jne 0x4168a7
lea ebx, [edx - 1]
nop
mov dword [eax + 0x7c], ebx
cmp edx, 1
jne 0x4168cf
movzx eax, byte [ecx + 0x65]
test al, al
je 0x4168cf
mov dword [ecx + 8], 0xfffffade
jmp 0x4168cf
mov edx, dword [eax + 0x7c]
lea ebx, [edx - 1]
nop
mov dword [eax + 0x7c], ebx
cmp edx, 1
jne 0x4168c5
movzx eax, byte [ecx + 0x65]
test al, al
je 0x4168c5
mov dword [ecx + 8], 0xfffffade
add esp, 0x5c
ret
inc dword [0xf1bf2c]
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x64]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0xc], ebx
call fcn.004166d0
movzx eax, byte [esp + 0x10]
test al, al
jne 0x416900
xor eax, eax
jmp 0x41690c
call fcn.004244e0
cmp dword [esp], 0xffffffff
setne al
test al, al
jne 0x4168c9
nop
lea eax, [0xf1c238]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov byte [esp + 0x10], 0x12
call fcn.00448400
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x64]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0xc], ebx
call fcn.004166d0
movzx eax, byte [esp + 0x10]
test al, al
je 0x416a82
mov eax, dword [0xf40edc]
cmp eax, 1
jne 0x41697c
mov eax, 1
jmp 0x41698a
cmp eax, 2
jne 0x416988
mov eax, 2
jmp 0x41698a
xor eax, eax
mov dword [esp + 0x24], eax
lea ecx, [0xf0d2b0]
mov dword [esp], ecx
mov byte [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov byte [esp + 0x10], 0x12
call fcn.00448400
nop
lea eax, [0xf0d2ac]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov byte [esp + 0x10], 0x12
call fcn.00448400
mov eax, dword [esp + 0x60]
cmp eax, 2
sete cl
mov byte [0xf1c24c], cl
movzx ecx, byte [0xf250c4]
test cl, cl
je 0x416a6a
nop
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov eax, dword [0xf25104]
mov ecx, dword [0xf25108]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], ecx
mov byte [esp], 7
mov dword [esp + 4], 3
lea eax, [esp + 0x40]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.00454100
mov eax, dword [0xf25104]
mov ecx, dword [0xf25108]
add eax, 1
mov dword [0xf25104], eax
adc ecx, 0
mov dword [0xf25108], ecx
mov eax, dword [esp + 0x60]
mov ecx, dword [0xf1bde8]
mov dword [esp + 0x50], ecx
mov edx, dword [0xf1bdec]
mov dword [esp + 0x34], edx
xor ebx, ebx
jmp 0x416ab5
nop
lea eax, [0xf1c238]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00448770
add esp, 0x5c
ret
mov ebp, dword [esp + 0x30]
lea ebx, [ebp + 1]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x34]
cmp ebx, edx
jge 0x416aea
mov dword [esp + 0x30], ebx
mov eax, dword [ecx + ebx*4]
mov dword [esp + 0x48], eax
mov edx, dword [eax + 0x30]
test byte [edx], al
add edx, 0x24c
mov dword [esp], edx
call fcn.004028b0
mov eax, dword [0xf20ad0]
mov ecx, dword [esp + 4]
cmp ecx, eax
je 0x416aa2
jmp 0x416d86
call fcn.00418490
lea eax, [0xe7dcd0]
mov dword [esp], eax
call fcn.004616d0
mov eax, dword [0xf40b0c]
mov dword [0xf1c270], eax
mov dword [0xf1c274], eax
mov ecx, dword [0xf40b10]
cmp ecx, eax
jge 0x416b1f
mov dword [0xf1c270], ecx
lea eax, [0xf41328]
mov dword [esp], eax
call fcn.00402b20
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [0xf1c2ac], eax
mov dword [0xf1c2a8], ecx
mov dword [0xf1c298], 0
mov dword [0xf1c29c], 0
mov eax, dword [esp + 0x24]
mov dword [0xf1c248], eax
call fcn.004638c0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], ecx
mov dword [0xf1c27c], eax
mov dword [0xf1c278], ecx
mov dword [0xf1c2a4], eax
mov dword [0xf1c2a0], ecx
lea eax, [0xe7dcd8]
mov dword [esp], eax
call fcn.004616d0
lea eax, [0xe7dcdc]
mov dword [esp], eax
call fcn.004616d0
call fcn.00419410
nop
lea eax, [0xf1c26c]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00402a20
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, dword [0xf40b0c]
lea ebx, [0xf412c0]
mov dword [esp], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x60]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x1c], eax
call fcn.0041e470
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
lea edx, [0xf40e00]
mov dword [esp], edx
mov byte [esp + 4], 1
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
call fcn.004199d0
mov eax, dword [esp + 0x24]
test eax, eax
je 0x416c3f
mov byte [esp], 0
call fcn.00445750
nop
lea eax, [0xf40a7c]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00402af0
mov eax, dword [0xf40a7c]
cmp eax, 1
jne 0x416c68
mov eax, 1
jmp 0x416c6e
cmp eax, 2
sete al
mov byte [0xf40c84], al
mov byte [0xf40c80], al
nop
mov dword [0xf1c1f8], 0xffffffff
mov dword [0xf1c204], 0xffffffff
call fcn.0041a750
call fcn.0041e320
lea eax, [0xf40a80]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00402af0
mov eax, dword [0xf40b4c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
nop
inc dword [ecx + 0x7c]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
lea ecx, [0x416e50]
mov dword [esp + 0x54], ecx
lea ecx, [esp + 0x38]
mov dword [esp + 0x58], ecx
lea ecx, [esp + 0x54]
mov dword [esp], ecx
call fcn.004616d0
nop
lea eax, [0xf0d2ac]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00448770
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax + 0x7c]
lea edx, [ecx - 1]
nop
mov ebx, dword [0xf40b4c]
mov ebx, dword fs:[ebx]
mov ebx, dword [ebx]
mov dword [eax + 0x7c], edx
cmp ecx, 1
jne 0x416d4f
movzx eax, byte [ebx + 0x65]
test al, al
je 0x416d47
mov dword [ebx + 8], 0xfffffade
mov eax, dword [esp + 0x24]
test eax, eax
jmp 0x416d55
mov eax, dword [esp + 0x24]
test eax, eax
jmp 0x416d55
mov eax, dword [esp + 0x24]
test eax, eax
je 0x416d66
nop
lea eax, [0xe7dce8]
mov dword [esp], eax
call fcn.00461670
nop
lea eax, [0xf1c238]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00448770
add esp, 0x5c
ret
mov dword [esp + 0x20], ecx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x48]
mov eax, dword [eax]
mov dword [esp + 0x28], eax
call fcn.00438350
lea eax, [0x4ce1e9]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00438bd0
mov eax, dword [esp + 0x28]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004389f0
lea eax, [0x4cde0d]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00438bd0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.004388b0
lea eax, [0x4cea7a]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.00438bd0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.004388b0
call fcn.00438560
call fcn.004383b0
lea eax, [0x4d0e30]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.00436aa0
nop
call fcn.004617c0
jmp fcn.00416840