Function at 0x405d20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xc0
mov edi, dword [ebp + 0x24]
mov esi, dword [ebp + 0x28]
mov ecx, dword [ebp + 8]
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], edi
mov edx, dword [ecx]
mov eax, dword [ecx + 4]
mov dword [esp + 0x28], edx
mov dword [esp + 8], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov eax, dword [ebp + 0x20]
mov ebx, 6
test eax, eax
js 0x405d6f
mov ebx, eax
mov dword [esp + 0x10], edx
mov eax, edi
mov edx, ebx
or eax, esi
je 0x405d84
mov eax, ebx
and eax, 0x400
jmp 0x405d96
and ebx, 0x400
xor eax, eax
cmp dword [ebp + 0x14], 0
je 0x405d9c
test ebx, ebx
jne 0x405d9c
mov ebx, eax
mov ax, 8
test edx, 0x10000
jne 0x405dac
movzx eax, ax
or eax, 0x800
mov dword [esp + 0x90], eax
and edx, 0xf
mov dword [esp + 0x1c], edx
sete ah
test ebx, ebx
setne al
mov ecx, dword [ecx + 0x48]
mov dword [esp + 4], ecx
test ecx, ecx
je 0x405e67
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x14], 2
jne 0x405e67
cmp dword [ebp + 0x14], 0
sete cl
cmp dword [ebp + 0x10], 0
setne dl
cmp dword [ebp + 0xc], 0
je 0x405e67
or dl, cl
je 0x405e67
cmp word [ebp + 0x1c], 0
setne cl
cmp dword [ebp + 0x18], 0
sete dl
test dl, cl
jne 0x405e67
cmp dword [esp + 0x1c], 0xb
jae 0x405e67
mov ecx, dword [esp + 4]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov dword [esp + 0x14], ecx
test ecx, ecx
je 0x405e36
cmp edx, 0xffffffff
jne 0x405e5d
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 2
jmp 0x405e71
test esi, esi
jne 0x405e4a
mov dword [esp + 0x14], 0
cmp edx, 0xffff
jne 0x405e5d
mov ecx, dword [esp + 4]
mov dword [ecx + 0x34], 1
mov dword [esp + 0x14], 1
mov ecx, edi
or ecx, esi
je 0x405e7b
test ebx, ebx
jne 0x405e7b
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x18
xor eax, eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp + 0xc]
cmp byte [ecx], 0x2f
je 0x405eea
or ah, al
mov byte [esp + 0x20], ah
test ebx, ebx
je 0x405e99
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x94], eax
jmp 0x405ed8
mov edi, dword [ebp + 0x14]
push edi
push dword [ebp + 0x10]
push 0
call fcn.00403af0
add esp, 0xc
mov dword [esp + 0x94], eax
xor esi, esi
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], 0
mov eax, 0
cmp edi, 4
setb cl
jb 0x405ed0
mov eax, dword [esp + 0x1c]
or byte [esp + 0x20], cl
mov dword [esp + 0x1c], eax
push dword [ebp + 0xc]
call fcn.00409230
add esp, 4
cmp eax, 0x10000
jb 0x405ef9
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x19
jmp 0x405e71
mov dword [esp + 0x24], eax
movzx eax, word [ebp + 0x1c]
mov dword [esp + 0x98], eax
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x20]
mov edx, dword [ecx + 0x24]
or edx, eax
mov edx, 0
je 0x405f29
mov edx, ecx
lea ecx, [eax - 1]
mov edx, dword [edx]
and edx, ecx
sub eax, edx
and eax, ecx
mov edx, eax
mov dword [esp + 0x40], edx
mov eax, dword [esp + 4]
mov eax, dword [eax + 4]
xor edx, edx
mov ecx, dword [esp + 0x24]
add ecx, dword [esp + 0x98]
setb dl
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], eax
add ecx, eax
mov dword [esp + 0xc], edx
adc edx, 0
mov dword [esp], edx
mov edx, 0xfffffffe
add edx, 0xffffffb6
mov eax, 0
adc eax, 0xffffffff
mov dword [esp + 0x44], ecx
cmp edx, ecx
sbb eax, dword [esp]
jae 0x405f88
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0xf
jmp 0x405e71
mov ecx, dword [esp + 0x14]
test ecx, ecx
mov eax, dword [ebp + 8]
jne 0x406042
mov edx, dword [eax + 4]
mov ecx, dword [eax]
add ecx, dword [esp + 0x40]
adc edx, 0
add ecx, 0x1e
adc edx, 0
mov dword [esp + 0x14], edx
mov eax, ecx
and eax, dword [esp + 0x24]
mov edx, eax
shr edx, 0x1f
mov dword [esp], edx
add eax, eax
mov dword [esp + 0x84], eax
xor ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x88]
add edx, ecx
mov eax, dword [esp + 0xc]
adc eax, dword [esp + 0x14]
add edx, dword [esp + 0x84]
adc eax, dword [esp]
add edx, 0x2e
adc eax, 0
mov dword [esp + 0xc], eax
mov ecx, edx
and ecx, dword [ebp + 0x38]
mov eax, ecx
shr eax, 0x1f
mov dword [esp + 0x14], eax
add ecx, ecx
mov dword [esp], ecx
xor edx, dword [ebp + 0x38]
mov eax, dword [esp + 0x8c]
add eax, dword [ebp + 0x40]
mov ecx, 0
adc ecx, 0xffffffff
add eax, edx
adc ecx, dword [esp + 0xc]
add eax, dword [esp]
adc ecx, dword [esp + 0x14]
add eax, 0x26
adc ecx, 0
cmp ecx, 0xffffffff
mov ecx, 0
je 0x406042
mov ecx, dword [esp + 4]
mov dword [ecx + 0x34], 1
mov ecx, 1
cmp dword [esp + 0x24], 0
je 0x40607e
mov dword [esp + 0x14], 0
mov eax, ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [esp + 0x24]
cmp byte [edx + ecx - 1], 0x2f
mov ecx, eax
jne 0x406086
cmp dword [ebp + 0x14], 0
jne 0x405e67
mov dword [esp + 0x14], 0x10
or edi, esi
je 0x406086
jmp 0x405e67
mov dword [esp + 0x14], 0
test ecx, ecx
je 0x40608f
mov ecx, 0x1c
mov eax, dword [esp + 0x44]
add eax, ecx
add eax, 0x2e
mov edi, dword [esp + 4]
mov edx, dword [edi + 8]
cmp edx, eax
jae 0x4060d9
mov ecx, 1
test edx, edx
je 0x4060ae
mov ecx, edx
mov esi, ecx
add ecx, ecx
cmp esi, eax
jb 0x4060ae
push esi
push dword [edi + 0xc]
push dword [edi]
mov edi, dword [ebp + 8]
push dword [edi + 0x34]
call dword [edi + 0x30]
add esp, 0x10
test eax, eax
je 0x40622e
mov edi, dword [esp + 4]
mov dword [edi], eax
mov dword [edi + 8], esi
mov eax, dword [edi + 0x14]
mov edx, dword [edi + 0x18]
inc eax
cmp edx, eax
jae 0x40611c
mov ecx, 1
test edx, edx
je 0x4060ef
mov ecx, edx
mov esi, ecx
add ecx, ecx
cmp esi, eax
jb 0x4060ef
push esi
push dword [edi + 0x1c]
push dword [edi + 0x10]
mov edi, dword [ebp + 8]
push dword [edi + 0x34]
call dword [edi + 0x30]
add esp, 0x10
test eax, eax
je 0x40622e
mov ecx, dword [esp + 4]
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x18], esi
cmp dword [ebp + 0x14], 0
sete cl
xor eax, eax
or cl, byte [esp + 0x20]
jne 0x406146
push 0x4df40
push 1
mov eax, dword [ebp + 8]
push dword [eax + 0x34]
call dword [eax + 0x28]
add esp, 0xc
test eax, eax
je 0x40627c
mov dword [esp], eax
mov ecx, dword [ebp + 8]
mov edi, dword [esp + 0x10]
mov edx, edi
mov esi, dword [esp + 0x40]
push esi
push dword [esp + 0xc]
call fcn.00406940
add esp, 8
test eax, eax
je 0x40623a
test ebx, ebx
sete bl
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
add eax, esi
adc ecx, 0
mov dword [esp + 0xc], eax
mov dword [esp + 0x28], eax
add edi, esi
mov dword [esp + 0x10], edi
mov esi, dword [esp + 8]
adc esi, 0
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov word [esp + 0x80], 0
and bl, byte [esp + 0x20]
mov edx, ebx
xor dl, 1
movzx edx, dl
shl edx, 3
mov dword [esp + 0x44], edx
mov eax, dword [esp + 4]
cmp dword [eax + 0x34], 0
je 0x40624e
mov dword [esp + 8], esi
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
mov dword [esp + 4], 0
mov eax, 0xfffffffe
cmp eax, edi
mov edx, 0
sbb edx, esi
jb 0x40628b
xor edx, edx
cmp eax, dword [esp + 0xc]
sbb edx, ecx
jb 0x40628b
xor eax, eax
mov esi, dword [esp + 0xc]
jmp 0x4062e0
mov dword [edi + 0x1c], 0x10
jmp 0x405e71
push dword [esp]
mov eax, dword [ebp + 8]
push dword [eax + 0x34]
call dword [eax + 0x2c]
add esp, 8
jmp 0x405e71
cmp dword [esp + 0x3c], 0
jne 0x406753
test esi, esi
jne 0x406753
mov dword [esp + 0x64], 0x4034b50
test bl, bl
mov dword [esp + 8], esi
jne 0x4063eb
mov dl, 0x14
jmp 0x4063ed
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x10
jmp 0x405e71
xor edx, edx
cmp eax, dword [esp + 0xc]
mov eax, 0
sbb eax, ecx
jb 0x40629e
xor eax, eax
jmp 0x4062a2
lea eax, [esp + 0x28]
mov ecx, 0xfffffffe
cmp ecx, edi
mov ecx, 0
sbb ecx, esi
jb 0x4062b9
mov esi, 0
jmp 0x4062bd
lea esi, [esp + 0x38]
jae 0x4062c3
lea edx, [esp + 0x30]
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
push eax
push esi
call fcn.004069e0
add esp, 8
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov edx, dword [ebp + 0x38]
add edx, eax
mov dword [esp + 0x64], 0x4034b50
test bl, bl
mov dword [esp + 0xc], eax
jne 0x4062f9
mov bl, 0x14
jmp 0x4062fb
xor ebx, ebx
mov byte [esp + 0x68], bl
mov byte [esp + 0x69], 0
movzx ebx, word [esp + 0x90]
mov byte [esp + 0x6a], bl
mov byte [esp + 0x6b], bh
mov ebx, dword [esp + 0x44]
mov byte [esp + 0x6c], bl
mov dword [esp + 0x6d], 0
mov dword [esp + 0x71], 0
mov dword [esp + 0x75], 0
mov dword [esp + 0x79], 0
mov byte [esp + 0x7d], 0
mov ebx, dword [esp + 0x24]
mov byte [esp + 0x7e], bl
mov byte [esp + 0x7f], bh
mov byte [esp + 0x80], dl
mov byte [esp + 0x81], dh
lea edx, [esp + 0x64]
push 0x1e
push edx
push ecx
push esi
mov esi, dword [ebp + 8]
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, 0x1e
jne 0x406558
mov edi, dword [esp + 0x10]
add edi, 0x1e
mov eax, esi
mov esi, dword [esp + 8]
adc esi, 0
push ebx
push dword [ebp + 0xc]
push esi
push edi
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, ebx
jne 0x406549
add edi, ebx
adc esi, 0
cmp dword [esp + 4], 0
mov ebx, edi
je 0x4064af
lea eax, [esp + 0xa0]
mov edi, dword [esp + 0xc]
push edi
push eax
push esi
push ebx
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, edi
jne 0x4064ef
mov eax, ebx
and eax, edi
mov ecx, eax
shr ecx, 0x1f
add eax, eax
xor ebx, edi
add ebx, eax
adc esi, ecx
jmp 0x4064b7
xor edx, edx
mov eax, dword [esp + 0xc]
mov byte [esp + 0x68], dl
mov ebx, dword [esp + 0x90]
movzx edx, bx
mov byte [esp + 0x6a], bl
mov byte [esp + 0x6b], dh
mov edx, dword [esp + 0x44]
mov byte [esp + 0x6c], dl
mov dword [esp + 0x6d], 0
mov dword [esp + 0x71], 0
mov dword [esp + 0x75], 0
mov dword [esp + 0x79], 0
mov byte [esp + 0x7d], 0
mov ebx, dword [esp + 0x24]
mov byte [esp + 0x7e], bl
mov byte [esp + 0x7f], bh
mov edx, dword [ebp + 0x38]
mov byte [esp + 0x80], dl
mov byte [esp + 0x81], dh
lea edx, [esp + 0x64]
push 0x1e
push edx
push ecx
push eax
mov esi, dword [ebp + 8]
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, 0x1e
jne 0x406558
mov edi, dword [esp + 0x10]
add edi, 0x1e
mov eax, esi
mov esi, dword [esp + 8]
adc esi, 0
push ebx
push dword [ebp + 0xc]
push esi
push edi
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, ebx
jne 0x406549
add edi, ebx
adc esi, 0
mov dword [esp + 4], 0
mov dword [esp + 0xc], 0
mov ebx, edi
jmp 0x4064b7
mov dword [esp + 4], 0
mov edi, dword [ebp + 0x38]
test edi, edi
je 0x4064fe
push edi
push dword [ebp + 0x34]
push esi
push ebx
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, edi
jne 0x4064ef
mov eax, ebx
and eax, edi
mov ecx, eax
shr ecx, 0x1f
add eax, eax
xor ebx, edi
add ebx, eax
mov dword [esp + 0x10], ebx
adc esi, ecx
mov dword [esp + 8], esi
jmp 0x406506
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x13
jmp 0x405e71
mov dword [esp + 8], esi
mov dword [esp + 0x10], ebx
cmp byte [esp + 0x20], 0
je 0x406564
mov esi, dword [ebp + 0x14]
push esi
push dword [ebp + 0x10]
push dword [esp + 0x10]
push dword [esp + 0x1c]
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x406549
mov eax, dword [ebp + 0x14]
add dword [esp + 0x10], eax
adc dword [esp + 8], 0
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], 0
jmp 0x406637
push dword [esp]
mov esi, dword [ebp + 8]
push dword [esi + 0x34]
call dword [esi + 0x2c]
add esp, 8
mov dword [esi + 0x1c], 0x13
jmp 0x405e71
cmp dword [ebp + 0x14], 0
je 0x406637
mov eax, dword [ebp + 8]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x54], eax
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov eax, dword [esp + 0x1c]
mov ecx, eax
cmp eax, 0xa
jb 0x4065a5
mov ecx, 0xa
xor eax, eax
mov edx, dword [esp + 0x1c]
cmp edx, 4
setl al
shl eax, 0xe
or eax, dword [ecx*4 + 0x43da58]
test edx, edx
jne 0x4065d2
mov ecx, eax
xor ecx, 0x80000
add ecx, eax
and eax, 0xfff7ffff
sub ecx, eax
mov eax, ecx
lea ecx, [esp + 0x48]
push eax
push ecx
push 0x406a50
mov esi, dword [esp + 0xc]
push esi
call fcn.00405060
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x9c]
push 4
push 0
push 0
push eax
push dword [ebp + 0x10]
push esi
call fcn.00403ba0
add esp, 0x18
cmp eax, 1
jne 0x406734
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
push dword [esp]
mov eax, dword [ebp + 8]
push dword [eax + 0x34]
call dword [eax + 0x2c]
add esp, 8
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
mov esi, ecx
mov dword [esp + 0x1c], eax
or ecx, eax
je 0x40684a
mov dword [esp + 0x48], 0x8074b50
mov edx, dword [esp + 0x94]
mov byte [esp + 0x4c], dl
mov byte [esp + 0x4d], dh
mov ecx, edx
shr ecx, 0x10
mov byte [esp + 0x4e], cl
mov ecx, edx
shr ecx, 0x18
mov byte [esp + 0x4f], cl
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
cmp dword [esp + 4], 0
je 0x40674f
mov byte [esp + 0x50], cl
mov byte [esp + 0x51], ch
mov ebx, ecx
shr ebx, 0x10
mov byte [esp + 0x52], bl
mov ebx, edx
shr ebx, 0x10
shr ecx, 0x18
mov byte [esp + 0x53], cl
mov ecx, edx
shr ecx, 0x18
mov byte [esp + 0x54], dl
mov byte [esp + 0x55], dh
mov byte [esp + 0x56], bl
mov byte [esp + 0x57], cl
mov edx, esi
mov byte [esp + 0x58], dl
mov byte [esp + 0x59], dh
mov ecx, esi
shr ecx, 0x10
mov byte [esp + 0x5a], cl
mov ecx, esi
shr ecx, 0x18
mov byte [esp + 0x5b], cl
mov dword [esp + 0x40], 0x38
mov dword [esp + 0x88], 0x30
mov ecx, 0x28
mov dword [esp + 0x20], 0x18
mov dword [esp], 0x17
mov eax, dword [esp + 0x1c]
mov edx, eax
mov byte [esp + 0x1b], al
mov dword [esp + 0x8c], 0x16
mov dword [esp + 0x84], 0x15
mov edi, 0x14
jmp 0x4067ae
push dword [esp]
mov esi, dword [ebp + 8]
push dword [esi + 0x34]
call dword [esi + 0x2c]
add esp, 8
mov dword [esi + 0x1c], 0xc
jmp 0x405e71
test edx, edx
je 0x406762
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x1d
jmp 0x405e71
mov dword [esp + 0x50], ecx
mov dword [esp + 0x40], 0x18
mov dword [esp + 0x88], 0x10
mov ecx, 8
mov dword [esp], 0xf
mov dword [esp + 0x8c], 0xe
mov edx, esi
mov byte [esp + 0x1b], dl
mov dword [esp + 0x84], 0xd
mov edi, 0xc
mov dword [esp + 0x20], 0x10
mov edx, esi
mov ebx, dword [esp + 0x1c]
shrd edx, ebx, cl
shr ebx, cl
movzx eax, byte [esp + 0x1b]
mov byte [esp + edi + 0x48], al
test cl, 0x20
jne 0x4067c9
mov ebx, edx
mov edx, esi
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x1c]
shrd edx, eax, cl
mov edi, dword [esp + 0x84]
mov byte [esp + edi + 0x48], bl
mov ebx, eax
shr ebx, cl
test cl, 0x20
jne 0x4067ef
mov ebx, edx
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x1c]
shrd esi, eax, cl
mov edx, esi
mov esi, dword [esp + 0x8c]
mov byte [esp + esi + 0x48], bl
shr eax, cl
test cl, 0x20
jne 0x406810
mov eax, edx
mov ecx, dword [esp]
mov byte [esp + ecx + 0x48], al
lea eax, [esp + 0x48]
mov esi, dword [esp + 0x20]
push esi
push eax
push dword [esp + 0x10]
push dword [esp + 0x1c]
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x405e71
mov eax, dword [esp + 0x20]
add dword [esp + 0x10], eax
adc dword [esp + 8], 0
cmp dword [esp + 4], 0
je 0x4068a9
xor edx, edx
mov eax, 0xfffffffe
cmp eax, dword [esp + 0x28]
mov eax, 0
sbb eax, dword [esp + 0x2c]
jb 0x40686b
xor eax, eax
jmp 0x40686f
lea eax, [esp + 0x28]
mov ecx, 0xfffffffe
cmp ecx, dword [esp + 0x30]
mov ecx, 0
sbb ecx, dword [esp + 0x34]
jb 0x40688a
mov edi, 0
jmp 0x40688e
lea edi, [esp + 0x38]
jae 0x406894
lea edx, [esp + 0x30]
lea ecx, [esp + 0xa0]
push eax
push edi
call fcn.004069e0
add esp, 8
mov dword [esp + 0xc], eax
movzx ebx, word [esp + 0x90]
movzx esi, word [esp + 0x44]
movzx eax, word [esp + 0xc]
movzx edi, word [esp + 0x24]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
push dword [ebp + 0x40]
push dword [ebp + 0x3c]
push dword [esp + 0x1c]
push dword [esp + 0x38]
push dword [esp + 0x38]
push 0
push 0
push ebx
push esi
push dword [esp + 0xb8]
push dword [esp + 0x64]
push dword [esp + 0x64]
push dword [esp + 0x64]
push dword [esp + 0x64]
push dword [esp + 0xd0]
push dword [ebp + 0x18]
push eax
push dword [esp + 0x48]
push edi
call fcn.00406aa0
add esp, 0x4c
test eax, eax
je 0x405e71
mov eax, dword [ebp + 8]
inc dword [eax + 0x10]
mov ecx, dword [esp + 0x10]
mov dword [eax], ecx
mov ecx, dword [esp + 8]
mov dword [eax + 4], ecx
mov eax, 1
jmp 0x405e73