Function at 0x416101
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov edx, 0x14
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x416107
call fcn.00431180
mov edx, dword [esp + 0x5c]
lea ecx, [esp]
call fcn.00418060
mov edx, dword [esp + 0x60]
lea ecx, [esp + 4]
call fcn.00418060
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], 0xa
push 0
push dword [esp + 0x5c]
call sub.USER32.dll_EnableWindow
mov ebx, dword [esp + 0x74]
and ebx, ebx
jne 0x41618d
movsx ebx, word [0x43a172]
and ebx, ebx
jge 0x416181
movsx ebx, word [0x43a172]
dec ebx
mov dword [esp + 0x74], ebx
jmp 0x41618d
movsx ebx, word [0x43a172]
inc ebx
mov dword [esp + 0x74], ebx
push dword [esp + 0x74]
push dword [0x43a060]
push 0xffffffff
call fcn.004304d5
mov dword [esp + 0x20], eax
push dword [esp + 0x20]
call fcn.004304eb
mov dword [esp + 0x24], eax
push dword [esp + 0x58]
push 0x90c00002
mov eax, 0x434028
push eax
push 0xffff0001
push 0x190
push 0
push 0
push 0xffffffff
call fcn.004265e6
mov dword [0x43a01c], eax
push dword [esp + 4]
push 0
push 0
push 0x14
push 0x3c
push 0xffffffff
call fcn.00420669
mov dword [esp + 0x30], eax
push dword [esp + 0x24]
push dword [esp + 0x34]
call fcn.0041d838
push dword [0x439fe8]
push dword [0x43a01c]
call fcn.00426d7f
push dword [0x439fec]
push 1
push dword [esp + 0x38]
call fcn.00420689
push dword [0x439fe8]
push 2
push dword [esp + 0x38]
call fcn.00420689
push 1
push dword [esp + 0x34]
call fcn.00423fb5
mov dword [esp + 0x48], eax
push 1
push dword [esp + 0x34]
call fcn.0041d625
mov dword [esp + 0x4c], eax
mov ebx, dword [esp + 0x48]
cmp ebx, 0x15e
jge 0x416288
mov dword [esp + 0x48], 0x15e
mov ebx, dword [esp + 0x4c]
cmp ebx, 0x20
jge 0x416299
mov dword [esp + 0x4c], 0x20
mov ebx, dword [esp + 0x4c]
add ebx, 0x55
push ebx
mov ebx, dword [esp + 0x4c]
add ebx, 0x4b
push ebx
push 0xffff0001
push 0xffff0001
push dword [0x43a01c]
call fcn.00426b88
push dword [esp + 0x4c]
push dword [esp + 0x4c]
push 0xffff0001
push 0xffff0001
push dword [esp + 0x40]
call fcn.0041d539
push 0x2d
mov ebx, dword [esp + 0x4c]
add ebx, 0x4b
push ebx
push dword [0x43a01c]
call fcn.00426e4d
mov ebx, eax
add ebx, 0xffffffd3
push ebx
push 0
push 0xffffffff
call fcn.00423c4b
mov dword [esp + 0x34], eax
push dword [0x43a01c]
call fcn.00426ea2
mov dword [esp - 4], eax
fild dword [esp - 4]
fdiv qword [0x437bc0]
sub esp, 8
fstp qword [esp]
call fcn.0041cf00
mov dword [esp + 0x18], eax
push dword [esp + 0x64]
mov ebx, 4
cmp ebx, dword [esp]
jne 0x416466
push edx
call fcn.00430fa0
pop edx
push eax
push edx
call fcn.00430fa0
pop edx
push eax
push 0x435754
push 0x81c8
call fcn.00405eba
call fcn.004311e0
push 0x19
push 0x5a
push dword [esp + 0x30]
push dword [esp + 0x30]
push 0xffffffff
call fcn.00418342
add dword [esp + 0x14], edx
call fcn.004212b6
call fcn.00418360
mov dword [esp + 0x40], eax
push edx
call fcn.00430fa0
pop edx
push eax
push edx
call fcn.00430fa0
pop edx
push eax
push 0x435754
push 0x81d0
call fcn.00405eba
call fcn.004311e0
push 0x19
push 0x5a
push dword [esp + 0x30]
mov ebx, dword [esp + 0x30]
add ebx, 0x64
push ebx
push 0xffffffff
call fcn.00418342
add dword [esp + 0x14], edx
call fcn.004212b6
call fcn.00418360
mov dword [esp + 0x44], eax
push dword [esp + 0x6c]
mov ebx, 6
cmp ebx, dword [esp]
jne 0x416404
mov eax, dword [esp + 0x44]
mov dword [esp + 0x40], eax
jmp 0x41640c
mov eax, dword [esp + 0x48]
mov dword [esp + 0x40], eax
pop eax
push 0
push 0x59
push dword [0x43a01c]
call fcn.00426eb0
push 1
push 0x4e
push dword [0x43a01c]
call fcn.00426eb0
push 0
push 0x40059
push dword [0x43a01c]
call fcn.00426eb0
push 1
push 0x4004e
push dword [0x43a01c]
call fcn.00426eb0
jmp 0x41668b
mov ebx, 3
cmp ebx, dword [esp]
jne 0x416618
push edx
call fcn.00430fa0
pop edx
push eax
push edx
call fcn.00430fa0
pop edx
push eax
push 0x435754
push 0x81c8
call fcn.00405eba
call fcn.004311e0
push 0x19
push 0x5a
push dword [esp + 0x30]
mov ebx, dword [esp + 0x30]
add ebx, 0xffffff6f
push ebx
push 0xffffffff
call fcn.00418342
add dword [esp + 0x14], edx
call fcn.004212b6
call fcn.00418360
mov dword [esp + 0x40], eax
push edx
call fcn.00430fa0
pop edx
push eax
push edx
call fcn.00430fa0
pop edx
push eax
push 0x435754
push 0x81d0
call fcn.00405eba
call fcn.004311e0
push 0x19
push 0x5a
push dword [esp + 0x30]
mov ebx, dword [esp + 0x30]
add ebx, 0xffffffd3
push ebx
push 0xffffffff
call fcn.00418342
add dword [esp + 0x14], edx
call fcn.004212b6
call fcn.00418360
mov dword [esp + 0x44], eax
push edx
call fcn.00430fa0
pop edx
push eax
push edx
call fcn.00430fa0
pop edx
push eax
push 0x435754
push 0x81cc
call fcn.00405eba
call fcn.004311e0
push 0x19
push 0x5a
push dword [esp + 0x30]
mov ebx, dword [esp + 0x30]
add ebx, 0x37
push ebx
push 0xffffffff
call fcn.00418342
add dword [esp + 0x14], edx
call fcn.004212b6
call fcn.00418360
mov dword [esp + 0x48], eax
push dword [esp + 0x6c]
mov ebx, 6
cmp ebx, dword [esp]
jne 0x416591
mov eax, dword [esp + 0x44]
mov dword [esp + 0x40], eax
jmp 0x4165c1
mov ebx, 7
cmp ebx, dword [esp]
jne 0x4165a5
mov eax, dword [esp + 0x48]
mov dword [esp + 0x40], eax
jmp 0x4165c1
mov ebx, 2
cmp ebx, dword [esp]
jne 0x4165b9
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x40], eax
jmp 0x4165c1
mov eax, dword [esp + 0x44]
mov dword [esp + 0x40], eax
pop eax
push 0
push 0x59
push dword [0x43a01c]
call fcn.00426eb0
push 1
push 0x4e
push dword [0x43a01c]
call fcn.00426eb0
push 0
push 0x40059
push dword [0x43a01c]
call fcn.00426eb0
push 1
push 0x4004e
push dword [0x43a01c]
call fcn.00426eb0
jmp 0x41668b
push edx
call fcn.00430fa0
pop edx
push eax
push edx
call fcn.00430fa0
pop edx
push eax
push 0x435754
push 0x81c9
call fcn.00405eba
call fcn.004311e0
push 0x19
push 0x5a
push dword [esp + 0x30]
mov ebx, dword [esp + 0x30]
add ebx, 0xffffffd3
push ebx
push 0xffffffff
call fcn.00418342
add dword [esp + 0x14], edx
call fcn.004212b6
call fcn.00418360
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x3c], eax
push 0
push 0xd
push dword [0x43a01c]
call fcn.00426eb0
pop eax
call fcn.00422dbd
push edx
call fcn.00430fa0
pop edx
push eax
push edx
call fcn.00430fa0
pop edx
push eax
push dword [esp + 0x40]
call fcn.0041d36c
lea eax, [esp + 0xc]
push eax
call fcn.00430fe0
push dword [esp]
push dword [0x43a01c]
call fcn.00426fb9
push 1
push dword [0x43a01c]
call fcn.00426fe2
push 2
push 0
push dword [0x43a01c]
call fcn.00426964
push 0x30
call sub.USER32.dll_MessageBeep
push edx
call fcn.00430fa0
pop edx
push eax
push 0x20
call fcn.00410409
push eax
push dword [esp + 0x78]
mov edx, dword [0x439f6c]
push edx
call fcn.00430fa0
pop edx
push eax
push edx
call fcn.00431070
mov edx, str.Shell32.dll
push edx
call fcn.00431070
call fcn.00418342
add dword [esp], edx
call fcn.0041267f
call fcn.00418360
mov dword [esp + 0x2c], eax
push dword [esp + 0x2c]
push 0x20
push 0x20
push 0x14
push 0xf
push 0xffffffff
call fcn.0042481d
mov dword [esp + 0x28], eax
push dword [esp + 0x2c]
call sub.USER32.dll_DestroyIcon
cmp dword [esp + 0x6c], 0
je 0x416803
push edx
call fcn.00430fa0
pop edx
push eax
mov edx, dword [esp + 0xc]
push edx
call fcn.00430fa0
pop edx
push eax
push edx
call fcn.00431070
mov edx, 0x43424c
push edx
call fcn.00431070
push edx
call fcn.00430fa0
pop edx
push eax
push edx
call fcn.00430fa0
pop edx
push eax
mov eax, dword [esp + 0x7c]
cdq
push edx
push eax
call fcn.0042f7e0
pop eax
mov edx, 0x4343c4
push edx
call fcn.00431070
call fcn.004311e0
push dword [esp + 0x40]
call fcn.00418342
add dword [esp + 4], edx
call fcn.0041d6cf
call fcn.00418360
mov ebx, dword [esp + 0x6c]
imul ebx, ebx, 0x3e8
mov dword [esp + 0x6c], ebx
push 0x3e8
push 0x2bc
push dword [0x43a01c]
call fcn.00427029
push dword [esp + 0x38]
call fcn.00424865
push 0
push 0x30002
push 0x128
push dword [0x43a01c]
call fcn.00426948
push eax
call sub.USER32.dll_SendMessageW
call fcn.00426b80
push eax
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x416849
mov dword [esp + 0x10], 1
jmp 0x4169d7
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x416882
call fcn.00429db7
push eax
mov ebx, dword [esp + 0x44]
cmp ebx, dword [esp]
je 0x416874
mov ebx, dword [esp + 0x48]
cmp ebx, dword [esp]
je 0x416874
mov ebx, dword [esp + 0x4c]
cmp ebx, dword [esp]
jne 0x41687c
mov dword [esp + 0x14], 2
pop eax
jmp 0x4169d7
mov ebx, 0x3336
cmp ebx, dword [esp]
jne 0x416974
call fcn.00429df3
push eax
mov ebx, 0x2bc
cmp ebx, dword [esp]
jne 0x416971
add dword [esp + 0x18], 0x3e8
push edx
call fcn.00430fa0
pop edx
push eax
mov edx, dword [esp + 0x14]
push edx
call fcn.00430fa0
pop edx
push eax
push edx
call fcn.00431070
mov edx, 0x43424c
push edx
call fcn.00431070
push edx
call fcn.00430fa0
pop edx
push eax
push edx
call fcn.00430fa0
pop edx
push eax
mov eax, dword [esp + 0x84]
cdq
push edx
push eax
mov eax, dword [esp + 0x30]
cdq
sub dword [esp], eax
sbb dword [esp + 4], edx
push 0
push 0x3e8
push dword [esp + 0xc]
push dword [esp + 0xc]
call fcn.00418070
mov dword [esp], eax
mov dword [esp + 4], edx
pop eax
pop edx
push edx
push eax
call fcn.0042f7e0
pop eax
mov edx, 0x4343c4
push edx
call fcn.00431070
call fcn.004311e0
push dword [esp + 0x48]
call fcn.00418342
add dword [esp + 4], edx
call fcn.0041d6cf
call fcn.00418360
mov ebx, dword [esp + 0x18]
cmp ebx, dword [esp + 0x74]
jl 0x416971
mov dword [esp + 0x14], 3
push 0x2bc
push dword [0x43a01c]
call fcn.00427058
push dword [esp + 0x40]
call fcn.00424865
pop eax
jmp 0x4169d7
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x4169d7
call fcn.00429dd5
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x41699e
push dword [esp + 0x44]
call fcn.00424865
mov dword [esp + 0x14], 2
jmp 0x4169d6
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4169bb
push dword [esp + 0x48]
call fcn.00424865
mov dword [esp + 0x14], 2
jmp 0x4169d6
mov ebx, 2
cmp ebx, dword [esp]
jne 0x4169d6
push dword [esp + 0x4c]
call fcn.00424865
mov dword [esp + 0x14], 2
pop eax
pop eax
cmp dword [esp + 0xc], 0
je 0x41682c
call fcn.004248a0
push eax
mov ebx, dword [esp + 0x40]
cmp ebx, dword [esp]
jne 0x416a0e
mov ebx, dword [esp + 0x68]
and ebx, ebx
jne 0x416a04
mov dword [esp + 0x18], 0
jmp 0x416a0c
mov dword [esp + 0x18], 6
jmp 0x416a32
mov ebx, dword [esp + 0x44]
cmp ebx, dword [esp]
jne 0x416a21
mov dword [esp + 0x18], 7
jmp 0x416a32
mov ebx, dword [esp + 0x48]
cmp ebx, dword [esp]
jne 0x416a32
mov dword [esp + 0x18], 2
pop eax
mov ebx, dword [esp + 0xc]
cmp ebx, 1
jne 0x416a44
mov dword [esp + 0x14], 2
push 0xffffffff
push dword [0x43a01c]
call fcn.0042707a
push dword [esp + 0x20]
call fcn.004303bf
push dword [esp + 0x34]
call fcn.004249e1
push dword [esp + 0x30]
call fcn.004249e1
push dword [esp + 0x28]
call fcn.004249e1
push dword [0x43a01c]
call fcn.004264bb
push 1
push dword [esp + 0x5c]
call sub.USER32.dll_EnableWindow
mov eax, dword [esp + 0x14]
jmp 0x416a99
push dword [esp]
call fcn.00431240
push dword [esp + 4]
call fcn.00431240
push dword [esp + 8]
call fcn.00431240
add esp, 0x50
pop ebx
ret 0x20