Function at 0x4058b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xc0
mov edi, dword [ebp + 0x24]
mov esi, dword [ebp + 0x28]
mov edx, dword [ebp + 8]
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], edi
mov ecx, dword [edx]
mov eax, dword [edx + 4]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x28], ecx
mov dword [esp], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov eax, dword [ebp + 0x20]
mov ebx, 6
test eax, eax
js 0x405902
mov ebx, eax
mov eax, edi
or eax, esi
je 0x405911
mov eax, ebx
and eax, 0x400
jmp 0x405937
mov ecx, edi
mov edi, esi
mov esi, ebx
and ebx, 0x400
xor eax, eax
cmp dword [ebp + 0x14], 0
mov dword [esp + 8], ebx
je 0x4059f3
test ebx, ebx
mov ebx, esi
mov esi, edi
mov edi, ecx
jne 0x40593f
mov dword [esp + 8], eax
mov ax, 8
test ebx, 0x10000
mov dword [esp + 4], esi
jne 0x405953
movzx eax, ax
or eax, 0x800
mov dword [esp + 0x88], eax
mov eax, ebx
xor eax, 0xfffffff0
or ebx, 0xf
and ebx, eax
sete cl
cmp dword [esp + 8], 0
setne ch
mov esi, dword [edx + 0x48]
test esi, esi
je 0x405a34
cmp dword [edx + 0x14], 2
jne 0x405a34
mov eax, dword [ebp + 0xc]
cmp dword [ebp + 0x14], 0
je 0x4059a4
test eax, eax
mov eax, dword [esp + 8]
je 0x405a34
cmp dword [ebp + 0x10], 0
jne 0x4059b0
jmp 0x405a34
test eax, eax
mov eax, dword [esp + 8]
je 0x405a34
cmp word [ebp + 0x1c], 0
mov byte [esp + 0x24], cl
setne cl
cmp dword [ebp + 0x18], 0
sete dl
test dl, cl
mov edx, dword [ebp + 8]
jne 0x405a34
cmp ebx, 0xb
jae 0x405a34
mov dword [esp + 8], eax
mov byte [esp + 0xc], ch
mov eax, dword [esi + 0x34]
mov ecx, dword [edx + 0x10]
mov dword [esp + 0x10], eax
test eax, eax
je 0x4059fe
cmp ecx, 0xffffffff
jne 0x405a24
mov dword [edx + 0x1c], 2
jmp 0x405a3b
mov ebx, esi
mov esi, edi
mov edi, ecx
jmp 0x40593f
cmp dword [esp + 4], 0
jne 0x405a15
mov dword [esp + 0x10], 0
cmp ecx, 0xffff
jne 0x405a24
mov dword [esi + 0x34], 1
mov dword [esp + 0x10], 1
mov ecx, edi
or ecx, dword [esp + 4]
mov eax, dword [esp + 8]
je 0x405a45
test eax, eax
jne 0x405a45
mov dword [edx + 0x1c], 0x18
xor eax, eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp + 0xc]
cmp byte [ecx], 0x2f
jne 0x405a56
mov dword [edx + 0x1c], 0x19
jmp 0x405a3b
test eax, eax
je 0x405a6b
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x8c], eax
mov byte [esp + 0xc], 1
jmp 0x405abc
movzx eax, byte [esp + 0x24]
or byte [esp + 0xc], al
mov edi, dword [ebp + 0x14]
push edi
push dword [ebp + 0x10]
push 0
call fcn.00403620
add esp, 0xc
mov dword [esp + 0x8c], eax
mov dword [esp + 4], 0
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], 0
mov eax, 0
cmp edi, 4
setb cl
jb 0x405aaf
mov eax, ebx
or cl, byte [esp + 0xc]
mov byte [esp + 0xc], cl
mov ebx, eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.00408c70
add esp, 4
cmp eax, 0x10000
jb 0x405adb
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x19
jmp 0x405a3b
mov dword [esp + 0x24], eax
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x20]
xor edx, edx
mov ecx, dword [ecx + 0x24]
or ecx, eax
mov ecx, 0
je 0x405b0c
lea ecx, [eax - 2]
inc ecx
mov dword [esp + 0x20], ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
and ecx, dword [esp + 0x20]
sub eax, ecx
and eax, dword [esp + 0x20]
mov ecx, eax
mov dword [esp + 0x1c], ecx
movzx eax, word [ebp + 0x1c]
mov dword [esp + 0x98], eax
add eax, dword [esp + 0x24]
adc edx, 0xffffffff
mov ecx, dword [esi + 4]
mov dword [esp + 0x4c], ecx
add eax, ecx
adc edx, 0
mov ecx, eax
mov dword [esp + 0x20], eax
add eax, 0x4b
adc edx, 0
cmp eax, 1
sbb edx, 0xffffffff
jae 0x405b51
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0xf
jmp 0x405a3b
mov ecx, dword [esp + 0x10]
test ecx, ecx
mov eax, dword [esp + 0x24]
jne 0x405bbd
mov ecx, eax
shr ecx, 0x1f
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x98]
add ecx, dword [ebp + 0x38]
mov edx, 0xffffffff
adc edx, 0
add eax, eax
add ecx, dword [ebp + 0x40]
adc edx, 0
add ecx, eax
adc edx, dword [esp + 0x10]
add ecx, dword [esp + 0x1c]
adc edx, 0
add ecx, dword [esp + 0x4c]
adc edx, 0
mov eax, dword [ebp + 8]
add ecx, dword [eax]
adc edx, dword [eax + 4]
add ecx, 0x72
adc edx, 0
xor ecx, ecx
mov eax, 0xffffffff
cmp edx, eax
mov eax, dword [esp + 0x24]
jae 0x405bbd
mov dword [esi + 0x34], 1
mov ecx, 1
test eax, eax
je 0x405c0b
mov dword [esp + 0x4c], 0
mov dword [esp + 0x10], ecx
mov ecx, eax
xor ecx, 0xfffffffe
mov edx, eax
and edx, 0xfffffffe
lea ecx, [ecx + edx*2]
mov eax, dword [ebp + 0xc]
cmp byte [eax + ecx + 1], 0x2f
mov ecx, dword [esp + 0x10]
jne 0x405c13
cmp dword [ebp + 0x14], 0
jne 0x405bfc
mov dword [esp + 0x4c], 0x10
or edi, dword [esp + 4]
je 0x405c13
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x18
jmp 0x405a3b
mov dword [esp + 0x4c], 0
test ecx, ecx
je 0x405c1c
mov ecx, 0x1c
mov eax, dword [esp + 0x20]
add eax, ecx
add eax, 0x2e
mov edx, dword [esi + 8]
cmp edx, eax
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x3c], esi
jae 0x405c70
mov edi, esi
mov ecx, 1
test edx, edx
je 0x405c40
mov ecx, edx
mov esi, ecx
add ecx, ecx
cmp esi, eax
jb 0x405c40
push esi
push dword [edi + 0xc]
push dword [edi]
mov edi, dword [ebp + 8]
push dword [edi + 0x34]
call dword [edi + 0x30]
add esp, 0x10
test eax, eax
je 0x405ddc
mov edx, dword [esp + 0x3c]
mov dword [edx], eax
mov dword [edx + 8], esi
mov ecx, dword [ebp + 0x14]
mov esi, edx
mov eax, dword [esi + 0x14]
mov edx, dword [esi + 0x18]
inc eax
cmp edx, eax
jae 0x405cb8
mov edi, esi
mov ecx, 1
test edx, edx
je 0x405c88
mov ecx, edx
mov esi, ecx
add ecx, ecx
cmp esi, eax
jb 0x405c88
push esi
push dword [edi + 0x1c]
push dword [edi + 0x10]
mov edi, dword [ebp + 8]
push dword [edi + 0x34]
call dword [edi + 0x30]
add esp, 0x10
test eax, eax
je 0x405ddc
mov edx, dword [esp + 0x3c]
mov dword [edx + 0x10], eax
mov dword [edx + 0x18], esi
mov ecx, dword [ebp + 0x14]
test ecx, ecx
sete cl
xor eax, eax
or cl, byte [esp + 0xc]
jne 0x405ce0
push 0x4df40
push 1
mov eax, dword [ebp + 8]
push dword [eax + 0x34]
call dword [eax + 0x28]
add esp, 0xc
test eax, eax
je 0x405ef9
mov dword [esp + 4], eax
mov ecx, dword [ebp + 8]
mov edi, dword [esp + 0x14]
mov edx, edi
mov esi, dword [esp + 0x1c]
push esi
push dword [esp + 4]
call fcn.004064e0
add esp, 8
test eax, eax
je 0x405de8
cmp dword [esp + 8], 0
setne dl
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
add eax, esi
adc ecx, 0
mov dword [esp + 8], eax
mov dword [esp + 0x28], eax
add edi, esi
mov dword [esp + 0x14], edi
mov esi, dword [esp]
adc esi, 0
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov word [esp + 0x84], 0
movzx eax, byte [esp + 0xc]
xor al, 1
or al, dl
mov byte [esp + 0x20], al
movzx edx, al
shl edx, 3
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0x3c]
cmp dword [eax + 0x34], 0
je 0x405dfd
mov dword [esp], esi
mov eax, 0xfffffffe
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
cmp eax, edi
mov edx, 0
sbb edx, esi
jb 0x405f08
cmp eax, dword [esp + 8]
mov edx, 0
sbb edx, ecx
jb 0x405f08
mov dword [esp + 0x1c], 0
xor eax, eax
mov esi, dword [esp + 8]
jmp 0x405f5d
mov dword [edi + 0x1c], 0x10
jmp 0x405a3b
push dword [esp + 4]
mov eax, dword [ebp + 8]
push dword [eax + 0x34]
call dword [eax + 0x2c]
add esp, 8
jmp 0x405a3b
cmp dword [esp + 0x44], 0
jne 0x406304
test esi, esi
jne 0x406304
mov dword [esp + 0x68], 0x4034b50
movzx eax, byte [esp + 0x20]
test al, al
je 0x405e23
mov al, 0x14
mov dword [esp], esi
mov byte [esp + 0x6c], al
mov edx, dword [esp + 0x88]
movzx eax, dx
mov byte [esp + 0x6e], dl
mov byte [esp + 0x6f], ah
mov edx, dword [esp + 0x10]
mov byte [esp + 0x70], dl
mov dword [esp + 0x71], 0
mov dword [esp + 0x75], 0
mov dword [esp + 0x79], 0
mov dword [esp + 0x7d], 0
mov byte [esp + 0x81], 0
mov eax, dword [esp + 0x24]
mov byte [esp + 0x82], al
mov edi, eax
mov byte [esp + 0x83], ah
mov eax, dword [ebp + 0x38]
mov byte [esp + 0x84], al
mov byte [esp + 0x85], ah
lea edx, [esp + 0x68]
push 0x1e
push edx
push ecx
push dword [esp + 0x14]
mov esi, dword [ebp + 8]
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, 0x1e
jne 0x406105
mov dword [esp + 0x48], ebx
mov ebx, dword [esp + 0x14]
add ebx, 0x1e
mov eax, esi
mov esi, dword [esp]
adc esi, 0
push edi
push dword [ebp + 0xc]
push esi
push ebx
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, edi
jne 0x4060f5
add ebx, edi
adc esi, 0
mov dword [esp], esi
mov dword [esp + 0x1c], 0
mov dword [esp + 8], 0
jmp 0x406073
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x10
jmp 0x405a3b
cmp eax, dword [esp + 8]
mov eax, 0
sbb eax, ecx
jb 0x405f19
xor eax, eax
jmp 0x405f1d
lea eax, [esp + 0x28]
xor edx, edx
mov ecx, 0xfffffffe
cmp ecx, edi
mov ecx, 0
sbb ecx, esi
jb 0x405f36
mov esi, 0
jmp 0x405f3a
lea esi, [esp + 0x40]
jae 0x405f40
lea edx, [esp + 0x30]
lea ecx, [esp + 0xa0]
mov dword [esp + 0x1c], ecx
push eax
push esi
call fcn.00406580
add esp, 8
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 8], eax
mov edx, dword [ebp + 0x38]
lea edi, [eax + edx]
mov dword [esp + 0x68], 0x4034b50
movzx eax, byte [esp + 0x20]
test al, al
je 0x405f7a
mov al, 0x14
mov byte [esp + 0x6c], al
mov byte [esp + 0x6d], 0
movzx edx, word [esp + 0x88]
mov byte [esp + 0x6e], dl
mov byte [esp + 0x6f], dh
mov edx, dword [esp + 0x10]
mov byte [esp + 0x70], dl
mov dword [esp + 0x71], 0
mov dword [esp + 0x75], 0
mov dword [esp + 0x79], 0
mov dword [esp + 0x7d], 0
mov byte [esp + 0x81], 0
mov eax, dword [esp + 0x24]
mov byte [esp + 0x82], al
mov byte [esp + 0x83], ah
mov eax, edi
mov byte [esp + 0x84], al
mov byte [esp + 0x85], ah
lea edx, [esp + 0x68]
push 0x1e
push edx
push ecx
push esi
mov esi, dword [ebp + 8]
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, 0x1e
jne 0x406105
mov edi, dword [esp + 0x14]
add edi, 0x1e
mov eax, dword [esp]
adc eax, 0
mov ecx, esi
mov esi, dword [esp + 0x24]
push esi
push dword [ebp + 0xc]
mov dword [esp + 8], eax
push eax
push edi
push dword [ecx + 0x44]
call dword [ecx + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x4060f5
add edi, esi
mov esi, dword [esp]
adc esi, 0
cmp dword [esp + 0x1c], 0
mov ecx, edi
mov dword [esp + 0x48], ebx
je 0x406077
lea eax, [esp + 0xa0]
mov edi, dword [esp + 8]
push edi
push eax
push esi
push ecx
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
mov ebx, ecx
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, edi
jne 0x406111
add ebx, edi
adc esi, 0
mov dword [esp], esi
mov ecx, ebx
jmp 0x406082
mov dword [esp], esi
mov dword [esp + 0x1c], 0
mov eax, dword [ebp + 0x38]
test eax, eax
je 0x4060b2
push eax
push dword [ebp + 0x34]
mov edi, dword [esp + 8]
push edi
push ecx
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
mov esi, ecx
call dword [eax + 0x3c]
mov ecx, dword [ebp + 0x38]
add esp, 0x14
cmp eax, ecx
jne 0x406111
add esi, ecx
adc edi, 0
mov dword [esp], edi
mov ecx, esi
cmp byte [esp + 0xc], 0
mov esi, dword [ebp + 0x14]
mov dword [esp + 0x14], ecx
je 0x406120
push esi
push dword [ebp + 0x10]
push dword [esp + 8]
push ecx
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x4060f5
mov eax, dword [ebp + 0x14]
add dword [esp + 0x14], eax
adc dword [esp], 0
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], 0
jmp 0x4061e8
push dword [esp + 4]
mov esi, dword [ebp + 8]
push dword [esi + 0x34]
call dword [esi + 0x2c]
add esp, 8
mov dword [esi + 0x1c], 0x13
jmp 0x405a3b
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x13
jmp 0x405a3b
test esi, esi
je 0x4061e8
mov eax, dword [esp + 0x48]
mov ecx, eax
mov edx, eax
cmp eax, 0xa
jb 0x40613a
mov ecx, 0xa
test edx, edx
jns 0x406143
mov ecx, 6
xor eax, eax
cmp edx, 4
setl al
shl eax, 0xe
or eax, dword [ecx*4 + 0x43da58]
mov ecx, dword [ebp + 8]
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x58], ecx
mov ecx, dword [esp]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x64], 0
mov dword [esp + 0x60], 0
test edx, edx
jne 0x406184
or eax, 0x80000
lea ecx, [esp + 0x50]
push eax
push ecx
push 0x4065f0
mov esi, dword [esp + 0x10]
push esi
call fcn.00404bd0
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x9c]
push 4
push 0
push 0
push eax
push dword [ebp + 0x10]
push esi
call fcn.00403700
add esp, 0x18
cmp eax, 1
jne 0x4062e4
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
push dword [esp + 4]
mov eax, dword [ebp + 8]
push dword [eax + 0x34]
call dword [eax + 0x2c]
add esp, 8
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
mov esi, ecx
mov dword [esp + 4], eax
or ecx, eax
je 0x4063f6
mov dword [esp + 0x50], 0x8074b50
mov edx, dword [esp + 0x8c]
mov byte [esp + 0x54], dl
mov byte [esp + 0x55], dh
mov ecx, edx
shr ecx, 0x10
mov byte [esp + 0x56], cl
mov ecx, edx
shr ecx, 0x18
mov byte [esp + 0x57], cl
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
cmp dword [esp + 0x1c], 0
je 0x406300
mov byte [esp + 0x58], cl
mov byte [esp + 0x59], ch
mov ebx, ecx
shr ebx, 0x10
mov byte [esp + 0x5a], bl
mov ebx, edx
shr ebx, 0x10
shr ecx, 0x18
mov byte [esp + 0x5b], cl
mov ecx, edx
shr ecx, 0x18
mov byte [esp + 0x5c], dl
mov byte [esp + 0x5d], dh
mov byte [esp + 0x5e], bl
mov byte [esp + 0x5f], cl
mov edx, esi
mov byte [esp + 0x60], dl
mov byte [esp + 0x61], dh
mov ecx, esi
shr ecx, 0x10
mov byte [esp + 0x62], cl
mov ecx, esi
shr ecx, 0x18
mov byte [esp + 0x63], cl
mov dword [esp + 0x3c], 0x38
mov dword [esp + 0x94], 0x30
mov ecx, 0x28
mov dword [esp + 0xc], 0x18
mov dword [esp + 0x20], 0x17
mov eax, dword [esp + 4]
mov edx, eax
mov byte [esp + 0x1b], al
mov dword [esp + 0x48], 0x16
mov dword [esp + 0x90], 0x15
mov edi, 0x14
jmp 0x40635d
push dword [esp + 4]
mov esi, dword [ebp + 8]
push dword [esi + 0x34]
call dword [esi + 0x2c]
add esp, 8
mov dword [esi + 0x1c], 0xc
jmp 0x405a3b
test edx, edx
je 0x406313
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x1d
jmp 0x405a3b
mov dword [esp + 0x58], ecx
mov dword [esp + 0x3c], 0x18
mov dword [esp + 0x94], 0x10
mov ecx, 8
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x48], 0xe
mov edx, esi
mov byte [esp + 0x1b], dl
mov dword [esp + 0x90], 0xd
mov edi, 0xc
mov dword [esp + 0xc], 0x10
mov edx, esi
mov ebx, dword [esp + 4]
shrd edx, ebx, cl
shr ebx, cl
movzx eax, byte [esp + 0x1b]
mov byte [esp + edi + 0x50], al
test cl, 0x20
jne 0x406378
mov ebx, edx
mov edx, esi
mov ecx, dword [esp + 0x94]
mov eax, dword [esp + 4]
shrd edx, eax, cl
mov edi, dword [esp + 0x90]
mov byte [esp + edi + 0x50], bl
mov ebx, eax
shr ebx, cl
test cl, 0x20
jne 0x40639e
mov ebx, edx
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 4]
shrd esi, eax, cl
mov edx, esi
mov esi, dword [esp + 0x48]
mov byte [esp + esi + 0x50], bl
shr eax, cl
test cl, 0x20
jne 0x4063bc
mov eax, edx
mov ecx, dword [esp + 0x20]
mov byte [esp + ecx + 0x50], al
lea eax, [esp + 0x50]
mov esi, dword [esp + 0xc]
push esi
push eax
push dword [esp + 8]
push dword [esp + 0x20]
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x405a3b
mov eax, dword [esp + 0xc]
add dword [esp + 0x14], eax
adc dword [esp], 0
cmp dword [esp + 0x1c], 0
je 0x406450
xor edx, edx
mov ecx, 0xfffffffe
cmp ecx, dword [esp + 0x28]
mov eax, 0
sbb eax, dword [esp + 0x2c]
jb 0x406417
xor eax, eax
jmp 0x40641b
lea eax, [esp + 0x28]
cmp ecx, dword [esp + 0x30]
mov ecx, 0
sbb ecx, dword [esp + 0x34]
jb 0x406431
mov edi, 0
jmp 0x406435
lea edi, [esp + 0x40]
jae 0x40643b
lea edx, [esp + 0x30]
lea ecx, [esp + 0xa0]
push eax
push edi
call fcn.00406580
add esp, 8
mov dword [esp + 8], eax
movzx ebx, word [esp + 0x88]
movzx esi, word [esp + 0x10]
movzx eax, word [esp + 8]
movzx edi, word [esp + 0x24]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
push dword [ebp + 0x40]
push dword [ebp + 0x3c]
push dword [esp + 0x54]
push dword [esp + 0x38]
push dword [esp + 0x38]
push 0
push ebx
push esi
push dword [esp + 0xac]
push dword [esp + 0x68]
push dword [esp + 0x68]
push dword [esp + 0x60]
push dword [esp + 0x60]
push dword [esp + 0xcc]
push dword [ebp + 0x18]
push eax
push dword [esp + 0x5c]
push edi
call fcn.00406640
add esp, 0x48
test eax, eax
je 0x405a3b
mov eax, dword [ebp + 8]
inc dword [eax + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [eax], ecx
mov ecx, dword [esp]
mov dword [eax + 4], ecx
mov eax, 1
jmp 0x405a3d