Function at 0x4062f9
Capabilities:
Create thread
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xbc
push ebx
mov ebx, ecx
push esi
push edi
mov dword [esp + 0x30], ebx
mov ecx, dword [ebx + 0x1c]
mov edi, dword [ebx]
call fcn.004077a1
test eax, eax
jne 0x406dbe
mov dword [esp + 0x9c], eax
cmp dword [edi + 0x24], eax
jne 0x406dbc
mov edx, dword [edi + 0x30]
xor eax, eax
mov esi, dword [edi + 0x34]
inc eax
mov ecx, edx
mov dword [esp + 0x6c], esi
add ecx, eax
mov dword [esp + 0x70], edx
push esi
push edx
mov eax, esi
mov dword [edi + 0x30], ecx
adc eax, 0
lea edx, [esp + 0x28]
xor esi, esi
mov dword [edi + 0x34], eax
push esi
push esi
push esi
push esi
mov ecx, edi
call fcn.004061e7
mov edx, dword [edi + 0x70]
xorps xmm0, xmm0
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x40], esi
mov dword [esp + 0x90], esi
mov dword [esp + 0x74], esi
mov dword [esp + 0x98], esi
mov dword [esp + 0x38], esi
movlpd qword [esp + 0x58], xmm0
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x3c], esi
test eax, eax
jne 0x406841
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x3c], esi
mov esi, dword [esp + 0x20]
test esi, esi
jne 0x40682f
mov esi, dword [ebx + 8]
xor edx, edx
mov ebx, dword [edi + 0x64]
sub ebx, dword [edi + 0x60]
movlpd qword [esp + 0x50], xmm0
mov eax, dword [esp + 0x54]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x34], esi
mov dword [esp + 0x3c], edx
mov dword [esp + 0x1c], eax
test esi, esi
jne 0x406437
mov eax, dword [edi]
mov ecx, dword [edi + 0x14]
add eax, 0x10
push eax
push ecx
call dword [ecx]
mov esi, eax
mov dword [esp + 0x34], esi
test esi, esi
je 0x406665
mov ecx, dword [esp + 0x2c]
xor edx, edx
mov dword [esi], edx
test ecx, ecx
je 0x406430
mov dword [ecx], esi
jmp 0x406437
mov eax, dword [esp + 0x30]
mov dword [eax + 8], esi
lea eax, [esi + 0x10]
mov dword [esp + 0x84], eax
mov dword [esp + 0x18], eax
test ebx, ebx
je 0x40646d
mov eax, dword [edi + 0x60]
add eax, 0x10
mov dword [esp + 0x24], edx
add eax, dword [edi + 0x5c]
mov edx, ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], eax
jmp 0x40657d
mov esi, dword [edi]
mov ecx, eax
mov eax, dword [edi + 0xc]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x58], eax
mov dword [esp + 0x10], edx
jmp 0x4064c0
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], esi
push edx
push ecx
push eax
call dword [eax]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x4c]
add edx, eax
add ecx, eax
mov dword [esp + 0x10], edx
sub esi, eax
mov dword [esp + 0x48], ecx
cmp dword [esp + 0x14], 0
jne 0x406620
test eax, eax
je 0x4064c4
mov eax, dword [esp + 0x58]
test esi, esi
jne 0x406482
xor ecx, ecx
mov esi, ecx
mov dword [esp + 0x14], esi
mov ecx, dword [esp + 0x1c]
add ecx, edx
push 0
pop eax
adc dword [esp + 0x24], eax
cmp dword [esp + 0x2c], 0
mov eax, dword [esp + 0x38]
cmove eax, edx
mov dword [esp + 0x1c], ecx
add dword [edi + 0x68], edx
mov dword [esp + 0x38], eax
push 0
pop eax
adc dword [edi + 0x6c], eax
cmp edx, dword [edi]
setne al
mov dword [esp + 0xc], eax
xor eax, eax
inc eax
cmp edx, dword [edi]
je 0x406509
mov dword [edi + 0x70], eax
test esi, esi
je 0x40651d
mov dword [edi + 0x70], eax
mov dword [esp + 0xc], eax
xor eax, eax
mov dword [edi + 0x48], esi
mov dword [esp + 0x14], eax
sub ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x24]
mov eax, esi
sbb eax, dword [esp + 0x28]
mov dword [esp + 0x5c], eax
jne 0x406538
xor eax, eax
inc eax
cmp ecx, eax
jb 0x406579
push dword [esp + 0x6c]
xor eax, eax
lea edx, [esp + 0x24]
push dword [esp + 0x74]
mov ecx, edi
push eax
push eax
push eax
push eax
call fcn.004061e7
mov edx, eax
mov dword [esp + 0x14], edx
test edx, edx
jne 0x4067be
cmp dword [esp + 0x20], eax
jne 0x4067be
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x44], eax
mov dword [esp + 0x28], esi
mov esi, dword [esp + 0x34]
xor eax, eax
mov dword [esp + 0xa8], edx
cmp dword [esp + 0x2c], eax
lea ecx, [esp + 0xa0]
push ecx
mov ecx, dword [esp + 0x34]
sete al
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x10]
push dword [ecx + 4]
mov dword [esp + 0xb4], eax
xor eax, eax
push dword [edi + 0x1c]
inc eax
mov dword [esp + 0xc0], eax
mov eax, dword [edi + 0x18]
call dword [eax]
mov ecx, dword [esp + 0xb0]
xor eax, eax
inc eax
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x3c], eax
xor eax, eax
inc eax
cmp ecx, eax
je 0x406788
test ebx, ebx
je 0x406629
push dword [esp + 0xa8]
lea eax, [esi + 0x10]
push dword [esp + 0x1c]
push eax
call fcn.0042e160
mov eax, dword [esp + 0xb4]
add esp, 0xc
add dword [edi + 0x60], eax
mov ecx, dword [esp + 0xb0]
jmp 0x406630
mov esi, dword [esp + 0x14]
jmp 0x4064cc
mov eax, dword [esp + 0xa8]
mov edx, dword [esp + 0xc]
test ecx, ecx
jne 0x406698
test edx, edx
jne 0x4066a7
cmp eax, dword [esp + 0x10]
jne 0x406677
mov dword [esp + 0x2c], esi
mov esi, dword [esi]
mov dword [esp + 0x34], esi
push ecx
pop edx
test ebx, ebx
je 0x406402
xor edx, edx
mov ebx, edx
mov dword [edi + 0x60], edx
mov dword [edi + 0x64], edx
jmp 0x406402
xor esi, esi
inc esi
mov edx, esi
mov dword [esp + 0x74], esi
mov dword [esp + 0xc], edx
jmp 0x4067c2
xor eax, eax
mov dword [esp + 0x14], 0xb
mov ebx, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x34], ebx
jmp 0x406896
push 1
cmp ecx, 3
pop esi
cmove edx, esi
mov dword [esp + 0xc], edx
jmp 0x4066aa
xor esi, esi
inc esi
mov dword [esp + 0x40], esi
mov esi, dword [esp + 0x10]
cmp eax, esi
jne 0x4066c3
xor ebx, ebx
mov dword [edi + 0x60], ebx
mov dword [edi + 0x64], ebx
jmp 0x4067c4
cmp ecx, 3
jne 0x406700
add dword [esp + 0x18], eax
xor ecx, ecx
mov edx, dword [esp + 0xc]
sub esi, eax
test ebx, ebx
mov dword [esp + 0x10], esi
push 0
setne cl
sub dword [esp + 0x20], esi
pop ebx
sbb dword [esp + 0x24], ebx
cmp dword [esp + 0x2c], ebx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x38]
cmove ecx, eax
mov dword [esp + 0x38], ecx
jmp 0x4067d0
test ebx, ebx
je 0x406710
xor ebx, ebx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], ebx
jmp 0x406770
mov ecx, dword [edi + 0x5c]
test ecx, ecx
jne 0x406733
mov eax, dword [edi]
mov ecx, dword [edi + 0x14]
add eax, 0x10
push eax
push ecx
call dword [ecx]
mov ecx, eax
test ecx, ecx
je 0x406738
mov eax, dword [esp + 0xa8]
mov dword [edi + 0x5c], ecx
add ecx, 0x10
jne 0x406747
xor eax, eax
inc eax
mov edx, eax
mov dword [esp + 0x74], eax
mov dword [esp + 0xc], edx
jmp 0x4067c2
sub esi, eax
sub dword [esp + 0x1c], esi
push 0
pop ebx
sbb dword [esp + 0x24], ebx
add eax, dword [esp + 0x18]
push esi
push eax
push ecx
mov dword [edi + 0x64], esi
mov dword [edi + 0x60], ebx
call fcn.0042e160
mov eax, dword [esp + 0xb4]
add esp, 0xc
mov ecx, dword [esp + 0x38]
mov edx, ebx
cmp dword [esp + 0x2c], 0
mov dword [esp + 0xc], edx
cmove ecx, eax
mov dword [esp + 0x38], ecx
jmp 0x4067c4
mov dword [esp + 0x98], eax
mov edx, eax
mov dword [esp + 0xc], edx
test ebx, ebx
je 0x4066b6
push dword [esp + 0x10]
mov eax, dword [esp + 0x88]
push dword [esp + 0x1c]
push eax
call fcn.0042e160
mov edx, dword [esp + 0x18]
add esp, 0xc
jmp 0x4066b6
mov edx, dword [esp + 0xc]
xor ebx, ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x18], ebx
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x406851
lea esi, [edi + 0xb0]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [edi + 0x88], ebx
je 0x406810
mov eax, dword [esp + 0x6c]
cmp eax, dword [edi + 0x94]
jb 0x406810
ja 0x406807
mov eax, dword [esp + 0x70]
cmp eax, dword [edi + 0x90]
jbe 0x406810
xor eax, eax
inc eax
mov dword [esp + 0x20], eax
jmp 0x406814
mov dword [esp + 0x20], ebx
mov eax, dword [edi + 0x9c]
push esi
mov dword [esp + 0x18], eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
jmp 0x406851
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x1c], ecx
jmp 0x406855
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x1c], ecx
mov esi, dword [esp + 0x20]
xor ecx, ecx
mov ebx, ecx
mov dword [esp + 0x34], ebx
test eax, eax
jne 0x406896
cmp dword [esp + 0x40], ecx
je 0x406892
test esi, esi
jne 0x406896
mov ecx, dword [esp + 0x30]
mov eax, dword [edi + 0x18]
push dword [ecx + 4]
push dword [edi + 0x1c]
call dword [eax + 4]
mov ebx, eax
mov dword [esp + 0x34], ebx
test ebx, ebx
je 0x4068a1
xor eax, eax
mov dword [esp + 0x40], eax
lea edx, [eax + 1]
mov dword [esp + 0xc], edx
test esi, esi
je 0x4068a5
xor eax, eax
lea edx, [eax + 1]
mov dword [esp + 0xc], edx
jmp 0x4068a5
mov edx, dword [esp + 0xc]
xor eax, eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x84], eax
test edx, edx
jne 0x406976
mov eax, dword [edi + 0x58]
cmp eax, dword [edi + 0x54]
jae 0x40694a
cmp dword [esp + 0x3c], edx
je 0x40694a
add eax, 5
imul esi, eax, 0x28
add esi, edi
mov ecx, esi
call fcn.0040616a
test eax, eax
jne 0x40690f
xor ecx, ecx
cmp dword [esi + 0x18], ecx
jne 0x406921
lea eax, [esp + 0xc4]
push eax
push ecx
push esi
push fcn.00406e38
push ecx
push ecx
call fcn.00432fe5
add esp, 0x18
mov dword [esi + 0x18], eax
test eax, eax
jne 0x406921
call fcn.0040776f
test eax, eax
je 0x406921
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
test ecx, ecx
jne 0x406926
inc dword [edi + 0x58]
jmp 0x40694a
mov eax, dword [edi + 0x58]
xor edx, edx
inc edx
cmp eax, edx
jne 0x406947
mov esi, dword [esp + 0x30]
xor eax, eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x40], eax
mov dword [esp + 0x84], ecx
jmp 0x406981
mov dword [edi + 0x54], eax
mov esi, dword [esp + 0x30]
mov ecx, dword [esi + 4]
inc ecx
cmp ecx, dword [edi + 0x58]
sbb eax, eax
and eax, ecx
add eax, 5
imul eax, eax, 0x28
add eax, edi
mov dword [esp + 0x58], eax
lea ecx, [eax + 0x1c]
call fcn.004077bd
test eax, eax
je 0x40697a
jmp 0x406dbe
mov esi, dword [esp + 0x30]
mov eax, dword [esp + 0x40]
xor edx, edx
inc edx
cmp dword [esp + 0x14], 0
xorps xmm0, xmm0
movlpd qword [esp + 0x50], xmm0
movlpd qword [esp + 0x78], xmm0
movlpd qword [esp + 0x60], xmm0
movlpd qword [esp + 0x88], xmm0
jne 0x406b3b
test eax, eax
je 0x406b3b
test ebx, ebx
jne 0x406b3b
mov ebx, dword [esi + 8]
mov eax, edx
mov esi, dword [esp + 0x54]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x60]
mov dword [esp + 0x44], esi
mov esi, dword [esp + 0x50]
mov dword [esp + 0x3c], esi
mov esi, dword [esp + 0x7c]
mov dword [esp + 0x4c], esi
mov esi, dword [esp + 0x78]
mov dword [esp + 0x48], esi
mov dword [esp + 0x2c], ebx
test eax, eax
je 0x4069f5
mov esi, dword [esp + 0x38]
jmp 0x406a18
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
sub ebx, edx
mov esi, dword [edi]
sbb eax, ecx
cmp dword [esp + 0x9c], eax
jb 0x406a14
ja 0x406a12
cmp esi, ebx
jbe 0x406a14
mov esi, ebx
mov ebx, dword [esp + 0x2c]
add edx, esi
mov dword [esp + 0x78], 1
push 0
pop eax
adc ecx, eax
mov dword [esp + 0x60], edx
mov dword [esp + 0x64], ecx
cmp edx, dword [esp + 0x1c]
jne 0x406a3c
cmp ecx, dword [esp + 0x24]
jne 0x406a3c
inc eax
mov ecx, dword [edi + 0x18]
lea edx, [esp + 0x78]
push edx
lea edx, [esp + 0x8c]
push edx
lea edx, [esp + 0x68]
push edx
push eax
push esi
lea eax, [ebx + 0x10]
push eax
mov eax, dword [esp + 0x48]
push dword [eax + 4]
push dword [edi + 0x1c]
call dword [ecx + 8]
mov dword [esp + 0x34], eax
test eax, eax
jne 0x406b2a
cmp dword [esp + 0x78], eax
jne 0x406b5b
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
cmp edx, dword [esp + 0x1c]
jne 0x406a92
cmp ecx, dword [esp + 0x24]
je 0x406b5b
mov esi, dword [esp + 0x88]
mov eax, edx
sub eax, dword [esp + 0x3c]
mov ebx, ecx
sbb ebx, dword [esp + 0x44]
sub esi, dword [esp + 0x48]
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0x8c]
sbb ebx, dword [esp + 0x4c]
cmp dword [esp + 0x50], 0
ja 0x406acf
jb 0x406ac6
cmp eax, 1
jae 0x406acf
test ebx, ebx
jne 0x406acf
cmp esi, 1
jb 0x406b1d
push dword [esp + 0x6c]
lea edx, [esp + 0x24]
mov ecx, edi
push dword [esp + 0x74]
push ebx
push esi
push dword [esp + 0x60]
push eax
call fcn.004061e7
mov dword [esp + 0x14], eax
test eax, eax
jne 0x406b5b
cmp dword [esp + 0x20], eax
jne 0x406b5b
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x3c], edx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x4c], eax
mov ebx, dword [esp + 0x2c]
xor eax, eax
mov ebx, dword [ebx]
jmp 0x4069e7
push dword [esp + 0x6c]
mov ecx, edi
push dword [esp + 0x74]
call fcn.004062a1
jmp 0x406b5b
mov eax, dword [esp + 0x54]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 0x20]
call fcn.004077a1
test eax, eax
jne 0x406dbe
mov ebx, dword [esp + 0x90]
xor edx, edx
xor ecx, ecx
mov esi, edx
inc ecx
mov dword [esp + 0x78], esi
mov dword [esp + 0x50], ecx
cmp dword [edi + 0x24], edx
jne 0x406dbc
cmp dword [edi + 0x50], edx
je 0x406b9b
mov eax, ecx
mov dword [esp + 0x20], eax
jmp 0x406bfb
mov eax, dword [esp + 0x34]
test eax, eax
je 0x406bb8
mov dword [edi + 0x50], ecx
cmp eax, 2
mov ecx, dword [esp + 0x74]
push 1
mov dword [edi + 0x4c], eax
pop eax
cmove ecx, eax
jmp 0x406bbc
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x84]
test eax, eax
je 0x406bd2
xor ebx, ebx
mov dword [edi + 0x40], eax
inc ebx
mov dword [edi + 0x50], ebx
mov ebx, edx
test ecx, ecx
je 0x406be3
xor ecx, ecx
mov ebx, edx
inc ecx
mov dword [edi + 0x50], ecx
mov dword [edi + 0x38], ecx
jmp 0x406be6
xor ecx, ecx
inc ecx
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x98], edx
je 0x406bfb
mov dword [edi + 0x50], ecx
mov ebx, edx
mov dword [edi + 0x3c], ecx
cmp dword [esp + 0x40], edx
je 0x406c56
test eax, eax
je 0x406c17
xorps xmm0, xmm0
movlpd qword [esp + 0x60], xmm0
movlpd qword [esp + 0x88], xmm0
mov esi, dword [esp + 0x60]
sub esi, dword [esp + 0x3c]
mov edx, dword [esp + 0x64]
sbb edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x88]
sub ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x8c]
sbb eax, dword [esp + 0x4c]
push eax
push ecx
push edx
push esi
lea ecx, [edi + 0x98]
call fcn.00406109
mov esi, dword [esp + 0x78]
mov dword [esp + 0x14], eax
jmp 0x406c5a
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
xor ecx, ecx
test edx, edx
sete cl
cmp dword [esp + 0x90], 0
mov dword [esp + 0x94], ecx
je 0x406cfc
test eax, eax
jne 0x406c8d
test ebx, ebx
je 0x406c8d
cmp dword [esp + 0x20], eax
jne 0x406c8d
lea ecx, [eax + 1]
jmp 0x406c91
xor eax, eax
mov ecx, eax
mov ebx, dword [esp + 0x30]
lea edx, [esp + 0x50]
mov eax, dword [edi + 0x18]
push edx
lea edx, [esp + 0x98]
push edx
push dword [esp + 0x30]
push dword [esp + 0x1c]
push dword [esp + 0x28]
push ecx
push dword [ebx + 4]
push dword [edi + 0x1c]
call dword [eax + 0xc]
mov dword [esp + 0x14], eax
test eax, eax
je 0x406ccd
xor eax, eax
inc eax
mov esi, eax
mov dword [edi + 0x50], eax
jmp 0x406ce0
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xc]
test ecx, ecx
jne 0x406d04
test edx, edx
jne 0x406d04
push dword [esp + 0x6c]
mov ecx, edi
push dword [esp + 0x74]
call fcn.004062a1
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xc]
jmp 0x406d00
mov ebx, dword [esp + 0x30]
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x50], 0
je 0x406d6f
cmp dword [esp + 0x40], 0
je 0x406d35
test eax, eax
jne 0x406d35
cmp dword [edi + 0x50], eax
jne 0x406d37
cmp dword [esp + 0x34], eax
jne 0x406d37
cmp dword [esp + 0x20], eax
jne 0x406d37
cmp dword [edi + 0x84], eax
jne 0x406d48
test esi, esi
je 0x406d6f
jmp 0x406d37
xor eax, eax
cmp dword [edi + 0x84], eax
jne 0x406d48
mov eax, dword [ebx + 4]
mov dword [edi + 0x80], eax
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x24]
or eax, esi
jne 0x406d58
test edx, edx
jne 0x406d7c
mov eax, dword [esp + 0x38]
mov dword [ebx + 0xc], eax
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], esi
inc dword [edi + 0x84]
test edx, edx
jne 0x406d7c
mov ecx, dword [esp + 0x58]
add ecx, 0x20
jmp 0x406da2
test ecx, ecx
je 0x406d91
lea ecx, [edi + 0xe8]
call fcn.004077bd
test eax, eax
jne 0x406dbe
jmp 0x406d9c
xor eax, eax
cmp dword [ebx + 4], eax
je 0x406dbc
inc eax
mov dword [edi + 0x24], eax
lea ecx, [edi + 0xe4]
call fcn.004077bd
test eax, eax
jne 0x406dbe
mov ecx, dword [ebx + 0x1c]
call fcn.004077a1
test eax, eax
jne 0x406dbe
jmp 0x406327
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret