Function at 0x405ec5
Capabilities:
Create thread
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xbc
push ebx
mov ebx, ecx
push esi
push edi
mov dword [esp + 0x30], ebx
mov ecx, dword [ebx + 0x1c]
mov edi, dword [ebx]
call fcn.0040899e
test eax, eax
jne 0x40698a
mov dword [esp + 0x9c], eax
cmp dword [edi + 0x24], eax
jne 0x406988
mov edx, dword [edi + 0x30]
xor eax, eax
mov esi, dword [edi + 0x34]
inc eax
mov ecx, edx
mov dword [esp + 0x6c], esi
add ecx, eax
mov dword [esp + 0x70], edx
push esi
push edx
mov eax, esi
mov dword [edi + 0x30], ecx
adc eax, 0
lea edx, [esp + 0x28]
xor esi, esi
mov dword [edi + 0x34], eax
push esi
push esi
push esi
push esi
mov ecx, edi
call fcn.00405db3
mov edx, dword [edi + 0x70]
xorps xmm0, xmm0
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x40], esi
mov dword [esp + 0x90], esi
mov dword [esp + 0x74], esi
mov dword [esp + 0x98], esi
mov dword [esp + 0x38], esi
movlpd qword [esp + 0x58], xmm0
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x3c], esi
test eax, eax
jne 0x40640d
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x3c], esi
mov esi, dword [esp + 0x20]
test esi, esi
jne 0x4063fb
mov esi, dword [ebx + 8]
xor edx, edx
mov ebx, dword [edi + 0x64]
sub ebx, dword [edi + 0x60]
movlpd qword [esp + 0x50], xmm0
mov eax, dword [esp + 0x54]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x34], esi
mov dword [esp + 0x3c], edx
mov dword [esp + 0x1c], eax
test esi, esi
jne 0x406003
mov eax, dword [edi]
mov ecx, dword [edi + 0x14]
add eax, 0x10
push eax
push ecx
call dword [ecx]
mov esi, eax
mov dword [esp + 0x34], esi
test esi, esi
je 0x406231
mov ecx, dword [esp + 0x2c]
xor edx, edx
mov dword [esi], edx
test ecx, ecx
je 0x405ffc
mov dword [ecx], esi
jmp 0x406003
mov eax, dword [esp + 0x30]
mov dword [eax + 8], esi
lea eax, [esi + 0x10]
mov dword [esp + 0x84], eax
mov dword [esp + 0x18], eax
test ebx, ebx
je 0x406039
mov eax, dword [edi + 0x60]
add eax, 0x10
mov dword [esp + 0x24], edx
add eax, dword [edi + 0x5c]
mov edx, ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], eax
jmp 0x406149
mov esi, dword [edi]
mov ecx, eax
mov eax, dword [edi + 0xc]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x58], eax
mov dword [esp + 0x10], edx
jmp 0x40608c
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], esi
push edx
push ecx
push eax
call dword [eax]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x4c]
add edx, eax
add ecx, eax
mov dword [esp + 0x10], edx
sub esi, eax
mov dword [esp + 0x48], ecx
cmp dword [esp + 0x14], 0
jne 0x4061ec
test eax, eax
je 0x406090
mov eax, dword [esp + 0x58]
test esi, esi
jne 0x40604e
xor ecx, ecx
mov esi, ecx
mov dword [esp + 0x14], esi
mov ecx, dword [esp + 0x1c]
add ecx, edx
push 0
pop eax
adc dword [esp + 0x24], eax
cmp dword [esp + 0x2c], 0
mov eax, dword [esp + 0x38]
cmove eax, edx
mov dword [esp + 0x1c], ecx
add dword [edi + 0x68], edx
mov dword [esp + 0x38], eax
push 0
pop eax
adc dword [edi + 0x6c], eax
cmp edx, dword [edi]
setne al
mov dword [esp + 0xc], eax
xor eax, eax
inc eax
cmp edx, dword [edi]
je 0x4060d5
mov dword [edi + 0x70], eax
test esi, esi
je 0x4060e9
mov dword [edi + 0x70], eax
mov dword [esp + 0xc], eax
xor eax, eax
mov dword [edi + 0x48], esi
mov dword [esp + 0x14], eax
sub ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x24]
mov eax, esi
sbb eax, dword [esp + 0x28]
mov dword [esp + 0x5c], eax
jne 0x406104
xor eax, eax
inc eax
cmp ecx, eax
jb 0x406145
push dword [esp + 0x6c]
xor eax, eax
lea edx, [esp + 0x24]
push dword [esp + 0x74]
mov ecx, edi
push eax
push eax
push eax
push eax
call fcn.00405db3
mov edx, eax
mov dword [esp + 0x14], edx
test edx, edx
jne 0x40638a
cmp dword [esp + 0x20], eax
jne 0x40638a
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x44], eax
mov dword [esp + 0x28], esi
mov esi, dword [esp + 0x34]
xor eax, eax
mov dword [esp + 0xa8], edx
cmp dword [esp + 0x2c], eax
lea ecx, [esp + 0xa0]
push ecx
mov ecx, dword [esp + 0x34]
sete al
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x10]
push dword [ecx + 4]
mov dword [esp + 0xb4], eax
xor eax, eax
push dword [edi + 0x1c]
inc eax
mov dword [esp + 0xc0], eax
mov eax, dword [edi + 0x18]
call dword [eax]
mov ecx, dword [esp + 0xb0]
xor eax, eax
inc eax
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x3c], eax
xor eax, eax
inc eax
cmp ecx, eax
je 0x406354
test ebx, ebx
je 0x4061f5
push dword [esp + 0xa8]
lea eax, [esi + 0x10]
push dword [esp + 0x1c]
push eax
call fcn.004391a0
mov eax, dword [esp + 0xb4]
add esp, 0xc
add dword [edi + 0x60], eax
mov ecx, dword [esp + 0xb0]
jmp 0x4061fc
mov esi, dword [esp + 0x14]
jmp 0x406098
mov eax, dword [esp + 0xa8]
mov edx, dword [esp + 0xc]
test ecx, ecx
jne 0x406264
test edx, edx
jne 0x406273
cmp eax, dword [esp + 0x10]
jne 0x406243
mov dword [esp + 0x2c], esi
mov esi, dword [esi]
mov dword [esp + 0x34], esi
push ecx
pop edx
test ebx, ebx
je 0x405fce
xor edx, edx
mov ebx, edx
mov dword [edi + 0x60], edx
mov dword [edi + 0x64], edx
jmp 0x405fce
xor esi, esi
inc esi
mov edx, esi
mov dword [esp + 0x74], esi
mov dword [esp + 0xc], edx
jmp 0x40638e
xor eax, eax
mov dword [esp + 0x14], 0xb
mov ebx, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x34], ebx
jmp 0x406462
push 1
cmp ecx, 3
pop esi
cmove edx, esi
mov dword [esp + 0xc], edx
jmp 0x406276
xor esi, esi
inc esi
mov dword [esp + 0x40], esi
mov esi, dword [esp + 0x10]
cmp eax, esi
jne 0x40628f
xor ebx, ebx
mov dword [edi + 0x60], ebx
mov dword [edi + 0x64], ebx
jmp 0x406390
cmp ecx, 3
jne 0x4062cc
add dword [esp + 0x18], eax
xor ecx, ecx
mov edx, dword [esp + 0xc]
sub esi, eax
test ebx, ebx
mov dword [esp + 0x10], esi
push 0
setne cl
sub dword [esp + 0x20], esi
pop ebx
sbb dword [esp + 0x24], ebx
cmp dword [esp + 0x2c], ebx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x38]
cmove ecx, eax
mov dword [esp + 0x38], ecx
jmp 0x40639c
test ebx, ebx
je 0x4062dc
xor ebx, ebx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], ebx
jmp 0x40633c
mov ecx, dword [edi + 0x5c]
test ecx, ecx
jne 0x4062ff
mov eax, dword [edi]
mov ecx, dword [edi + 0x14]
add eax, 0x10
push eax
push ecx
call dword [ecx]
mov ecx, eax
test ecx, ecx
je 0x406304
mov eax, dword [esp + 0xa8]
mov dword [edi + 0x5c], ecx
add ecx, 0x10
jne 0x406313
xor eax, eax
inc eax
mov edx, eax
mov dword [esp + 0x74], eax
mov dword [esp + 0xc], edx
jmp 0x40638e
sub esi, eax
sub dword [esp + 0x1c], esi
push 0
pop ebx
sbb dword [esp + 0x24], ebx
add eax, dword [esp + 0x18]
push esi
push eax
push ecx
mov dword [edi + 0x64], esi
mov dword [edi + 0x60], ebx
call fcn.004391a0
mov eax, dword [esp + 0xb4]
add esp, 0xc
mov ecx, dword [esp + 0x38]
mov edx, ebx
cmp dword [esp + 0x2c], 0
mov dword [esp + 0xc], edx
cmove ecx, eax
mov dword [esp + 0x38], ecx
jmp 0x406390
mov dword [esp + 0x98], eax
mov edx, eax
mov dword [esp + 0xc], edx
test ebx, ebx
je 0x406282
push dword [esp + 0x10]
mov eax, dword [esp + 0x88]
push dword [esp + 0x1c]
push eax
call fcn.004391a0
mov edx, dword [esp + 0x18]
add esp, 0xc
jmp 0x406282
mov edx, dword [esp + 0xc]
xor ebx, ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x18], ebx
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x40641d
lea esi, [edi + 0xb0]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [edi + 0x88], ebx
je 0x4063dc
mov eax, dword [esp + 0x6c]
cmp eax, dword [edi + 0x94]
jb 0x4063dc
ja 0x4063d3
mov eax, dword [esp + 0x70]
cmp eax, dword [edi + 0x90]
jbe 0x4063dc
xor eax, eax
inc eax
mov dword [esp + 0x20], eax
jmp 0x4063e0
mov dword [esp + 0x20], ebx
mov eax, dword [edi + 0x9c]
push esi
mov dword [esp + 0x18], eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
jmp 0x40641d
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x1c], ecx
jmp 0x406421
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x1c], ecx
mov esi, dword [esp + 0x20]
xor ecx, ecx
mov ebx, ecx
mov dword [esp + 0x34], ebx
test eax, eax
jne 0x406462
cmp dword [esp + 0x40], ecx
je 0x40645e
test esi, esi
jne 0x406462
mov ecx, dword [esp + 0x30]
mov eax, dword [edi + 0x18]
push dword [ecx + 4]
push dword [edi + 0x1c]
call dword [eax + 4]
mov ebx, eax
mov dword [esp + 0x34], ebx
test ebx, ebx
je 0x40646d
xor eax, eax
mov dword [esp + 0x40], eax
lea edx, [eax + 1]
mov dword [esp + 0xc], edx
test esi, esi
je 0x406471
xor eax, eax
lea edx, [eax + 1]
mov dword [esp + 0xc], edx
jmp 0x406471
mov edx, dword [esp + 0xc]
xor eax, eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x84], eax
test edx, edx
jne 0x406542
mov eax, dword [edi + 0x58]
cmp eax, dword [edi + 0x54]
jae 0x406516
cmp dword [esp + 0x3c], edx
je 0x406516
add eax, 5
imul esi, eax, 0x28
add esi, edi
mov ecx, esi
call fcn.00405d36
test eax, eax
jne 0x4064db
xor ecx, ecx
cmp dword [esi + 0x18], ecx
jne 0x4064ed
lea eax, [esp + 0xc4]
push eax
push ecx
push esi
push fcn.00406a04
push ecx
push ecx
call fcn.0043e015
add esp, 0x18
mov dword [esi + 0x18], eax
test eax, eax
jne 0x4064ed
call fcn.0040896c
test eax, eax
je 0x4064ed
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
test ecx, ecx
jne 0x4064f2
inc dword [edi + 0x58]
jmp 0x406516
mov eax, dword [edi + 0x58]
xor edx, edx
inc edx
cmp eax, edx
jne 0x406513
mov esi, dword [esp + 0x30]
xor eax, eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x40], eax
mov dword [esp + 0x84], ecx
jmp 0x40654d
mov dword [edi + 0x54], eax
mov esi, dword [esp + 0x30]
mov ecx, dword [esi + 4]
inc ecx
cmp ecx, dword [edi + 0x58]
sbb eax, eax
and eax, ecx
add eax, 5
imul eax, eax, 0x28
add eax, edi
mov dword [esp + 0x58], eax
lea ecx, [eax + 0x1c]
call fcn.004089ba
test eax, eax
je 0x406546
jmp 0x40698a
mov esi, dword [esp + 0x30]
mov eax, dword [esp + 0x40]
xor edx, edx
inc edx
cmp dword [esp + 0x14], 0
xorps xmm0, xmm0
movlpd qword [esp + 0x50], xmm0
movlpd qword [esp + 0x78], xmm0
movlpd qword [esp + 0x60], xmm0
movlpd qword [esp + 0x88], xmm0
jne 0x406707
test eax, eax
je 0x406707
test ebx, ebx
jne 0x406707
mov ebx, dword [esi + 8]
mov eax, edx
mov esi, dword [esp + 0x54]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x60]
mov dword [esp + 0x44], esi
mov esi, dword [esp + 0x50]
mov dword [esp + 0x3c], esi
mov esi, dword [esp + 0x7c]
mov dword [esp + 0x4c], esi
mov esi, dword [esp + 0x78]
mov dword [esp + 0x48], esi
mov dword [esp + 0x2c], ebx
test eax, eax
je 0x4065c1
mov esi, dword [esp + 0x38]
jmp 0x4065e4
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
sub ebx, edx
mov esi, dword [edi]
sbb eax, ecx
cmp dword [esp + 0x9c], eax
jb 0x4065e0
ja 0x4065de
cmp esi, ebx
jbe 0x4065e0
mov esi, ebx
mov ebx, dword [esp + 0x2c]
add edx, esi
mov dword [esp + 0x78], 1
push 0
pop eax
adc ecx, eax
mov dword [esp + 0x60], edx
mov dword [esp + 0x64], ecx
cmp edx, dword [esp + 0x1c]
jne 0x406608
cmp ecx, dword [esp + 0x24]
jne 0x406608
inc eax
mov ecx, dword [edi + 0x18]
lea edx, [esp + 0x78]
push edx
lea edx, [esp + 0x8c]
push edx
lea edx, [esp + 0x68]
push edx
push eax
push esi
lea eax, [ebx + 0x10]
push eax
mov eax, dword [esp + 0x48]
push dword [eax + 4]
push dword [edi + 0x1c]
call dword [ecx + 8]
mov dword [esp + 0x34], eax
test eax, eax
jne 0x4066f6
cmp dword [esp + 0x78], eax
jne 0x406727
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
cmp edx, dword [esp + 0x1c]
jne 0x40665e
cmp ecx, dword [esp + 0x24]
je 0x406727
mov esi, dword [esp + 0x88]
mov eax, edx
sub eax, dword [esp + 0x3c]
mov ebx, ecx
sbb ebx, dword [esp + 0x44]
sub esi, dword [esp + 0x48]
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0x8c]
sbb ebx, dword [esp + 0x4c]
cmp dword [esp + 0x50], 0
ja 0x40669b
jb 0x406692
cmp eax, 1
jae 0x40669b
test ebx, ebx
jne 0x40669b
cmp esi, 1
jb 0x4066e9
push dword [esp + 0x6c]
lea edx, [esp + 0x24]
mov ecx, edi
push dword [esp + 0x74]
push ebx
push esi
push dword [esp + 0x60]
push eax
call fcn.00405db3
mov dword [esp + 0x14], eax
test eax, eax
jne 0x406727
cmp dword [esp + 0x20], eax
jne 0x406727
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x3c], edx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x4c], eax
mov ebx, dword [esp + 0x2c]
xor eax, eax
mov ebx, dword [ebx]
jmp 0x4065b3
push dword [esp + 0x6c]
mov ecx, edi
push dword [esp + 0x74]
call fcn.00405e6d
jmp 0x406727
mov eax, dword [esp + 0x54]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 0x20]
call fcn.0040899e
test eax, eax
jne 0x40698a
mov ebx, dword [esp + 0x90]
xor edx, edx
xor ecx, ecx
mov esi, edx
inc ecx
mov dword [esp + 0x78], esi
mov dword [esp + 0x50], ecx
cmp dword [edi + 0x24], edx
jne 0x406988
cmp dword [edi + 0x50], edx
je 0x406767
mov eax, ecx
mov dword [esp + 0x20], eax
jmp 0x4067c7
mov eax, dword [esp + 0x34]
test eax, eax
je 0x406784
mov dword [edi + 0x50], ecx
cmp eax, 2
mov ecx, dword [esp + 0x74]
push 1
mov dword [edi + 0x4c], eax
pop eax
cmove ecx, eax
jmp 0x406788
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x84]
test eax, eax
je 0x40679e
xor ebx, ebx
mov dword [edi + 0x40], eax
inc ebx
mov dword [edi + 0x50], ebx
mov ebx, edx
test ecx, ecx
je 0x4067af
xor ecx, ecx
mov ebx, edx
inc ecx
mov dword [edi + 0x50], ecx
mov dword [edi + 0x38], ecx
jmp 0x4067b2
xor ecx, ecx
inc ecx
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x98], edx
je 0x4067c7
mov dword [edi + 0x50], ecx
mov ebx, edx
mov dword [edi + 0x3c], ecx
cmp dword [esp + 0x40], edx
je 0x406822
test eax, eax
je 0x4067e3
xorps xmm0, xmm0
movlpd qword [esp + 0x60], xmm0
movlpd qword [esp + 0x88], xmm0
mov esi, dword [esp + 0x60]
sub esi, dword [esp + 0x3c]
mov edx, dword [esp + 0x64]
sbb edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x88]
sub ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x8c]
sbb eax, dword [esp + 0x4c]
push eax
push ecx
push edx
push esi
lea ecx, [edi + 0x98]
call fcn.00405cd5
mov esi, dword [esp + 0x78]
mov dword [esp + 0x14], eax
jmp 0x406826
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
xor ecx, ecx
test edx, edx
sete cl
cmp dword [esp + 0x90], 0
mov dword [esp + 0x94], ecx
je 0x4068c8
test eax, eax
jne 0x406859
test ebx, ebx
je 0x406859
cmp dword [esp + 0x20], eax
jne 0x406859
lea ecx, [eax + 1]
jmp 0x40685d
xor eax, eax
mov ecx, eax
mov ebx, dword [esp + 0x30]
lea edx, [esp + 0x50]
mov eax, dword [edi + 0x18]
push edx
lea edx, [esp + 0x98]
push edx
push dword [esp + 0x30]
push dword [esp + 0x1c]
push dword [esp + 0x28]
push ecx
push dword [ebx + 4]
push dword [edi + 0x1c]
call dword [eax + 0xc]
mov dword [esp + 0x14], eax
test eax, eax
je 0x406899
xor eax, eax
inc eax
mov esi, eax
mov dword [edi + 0x50], eax
jmp 0x4068ac
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xc]
test ecx, ecx
jne 0x4068d0
test edx, edx
jne 0x4068d0
push dword [esp + 0x6c]
mov ecx, edi
push dword [esp + 0x74]
call fcn.00405e6d
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xc]
jmp 0x4068cc
mov ebx, dword [esp + 0x30]
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x50], 0
je 0x40693b
cmp dword [esp + 0x40], 0
je 0x406901
test eax, eax
jne 0x406901
cmp dword [edi + 0x50], eax
jne 0x406903
cmp dword [esp + 0x34], eax
jne 0x406903
cmp dword [esp + 0x20], eax
jne 0x406903
cmp dword [edi + 0x84], eax
jne 0x406914
test esi, esi
je 0x40693b
jmp 0x406903
xor eax, eax
cmp dword [edi + 0x84], eax
jne 0x406914
mov eax, dword [ebx + 4]
mov dword [edi + 0x80], eax
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x24]
or eax, esi
jne 0x406924
test edx, edx
jne 0x406948
mov eax, dword [esp + 0x38]
mov dword [ebx + 0xc], eax
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], esi
inc dword [edi + 0x84]
test edx, edx
jne 0x406948
mov ecx, dword [esp + 0x58]
add ecx, 0x20
jmp 0x40696e
test ecx, ecx
je 0x40695d
lea ecx, [edi + 0xe8]
call fcn.004089ba
test eax, eax
jne 0x40698a
jmp 0x406968
xor eax, eax
cmp dword [ebx + 4], eax
je 0x406988
inc eax
mov dword [edi + 0x24], eax
lea ecx, [edi + 0xe4]
call fcn.004089ba
test eax, eax
jne 0x40698a
mov ecx, dword [ebx + 0x1c]
call fcn.0040899e
test eax, eax
jne 0x40698a
jmp 0x405ef3
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret