Function at 0x405ee0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xc8
mov esi, dword [ebp + 0x24]
mov ebx, dword [ebp + 0x28]
mov edx, dword [ebp + 8]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], esi
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [esp + 0x14], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov eax, dword [ebp + 0x20]
mov edi, 6
test eax, eax
js 0x405f33
mov edi, eax
mov eax, esi
or eax, ebx
je 0x405f43
mov ecx, edi
and ecx, 0x400
jmp 0x405f56
mov eax, edi
and eax, 0x400
xor ecx, ecx
cmp dword [ebp + 0x14], 0
je 0x405f5c
test eax, eax
jne 0x405f5c
mov eax, ecx
mov cx, 8
test edi, 0x10000
mov dword [esp + 0xc], ebx
jne 0x405f71
movzx ecx, cx
or ecx, 0x800
mov dword [esp + 0x90], ecx
mov ecx, edi
and ecx, 0xf
mov dword [esp + 0x1c], ecx
sete byte [esp + 0x18]
test eax, eax
setne cl
mov ebx, dword [edx + 0x48]
mov dword [esp + 4], ebx
test ebx, ebx
je 0x405ff5
cmp dword [edx + 0x14], 2
jne 0x405ff5
cmp dword [ebp + 0x14], 0
setne bl
cmp dword [ebp + 0x10], 0
sete ch
cmp dword [ebp + 0xc], 0
je 0x405ff5
and ch, bl
jne 0x405ff5
cmp word [ebp + 0x1c], 0
je 0x405fee
cmp dword [ebp + 0x18], 0
je 0x405ff5
cmp dword [esp + 0x1c], 0xa
ja 0x405ff5
mov ebx, dword [esp + 4]
mov ebx, dword [ebx + 0x34]
mov edx, dword [edx + 0x10]
test ebx, ebx
je 0x406006
mov dword [esp + 8], ebx
cmp edx, 0xffffffff
mov ebx, dword [ebp + 0x14]
jne 0x406033
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 2
jmp 0x405ffc
cmp dword [esp + 0x1c], 0xb
jb 0x405fc8
mov dword [edx + 0x1c], 0x18
xor eax, eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
cmp dword [esp + 0xc], 0
mov ebx, dword [ebp + 0x14]
jne 0x406020
mov dword [esp + 8], 0
cmp edx, 0xffff
jne 0x406033
mov edx, dword [esp + 4]
mov dword [edx + 0x34], 1
mov dword [esp + 8], 1
mov edx, esi
or edx, dword [esp + 0xc]
je 0x40604b
test eax, eax
jne 0x40604b
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x18
jmp 0x405ffc
mov edx, dword [ebp + 0xc]
cmp byte [edx], 0x2f
mov edx, dword [ebp + 8]
jne 0x40605f
mov dword [edx + 0x1c], 0x19
jmp 0x405ffc
test eax, eax
je 0x406074
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x94], eax
mov byte [esp + 0x2c], 1
jmp 0x4060c0
or byte [esp + 0x18], cl
push ebx
push dword [ebp + 0x10]
push 0
call fcn.00403bf0
add esp, 0xc
mov dword [esp + 0x94], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], 0
mov eax, 0
cmp ebx, 4
setb cl
jb 0x4060b2
mov eax, dword [esp + 0x1c]
or cl, byte [esp + 0x18]
mov byte [esp + 0x2c], cl
mov esi, ebx
mov dword [esp + 0x1c], eax
push dword [ebp + 0xc]
call fcn.00409260
add esp, 4
cmp eax, 0x10000
movzx ecx, word [ebp + 0x1c]
jb 0x4060e5
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x19
jmp 0x405ffc
mov dword [esp + 0x18], eax
movzx eax, cx
mov dword [esp + 0x98], eax
mov dword [esp + 0x28], 0
mov ebx, 0xfffffffe
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x20]
mov edx, dword [ecx + 0x24]
or edx, eax
mov edx, 0
je 0x406120
lea edx, [ebx + eax]
inc edx
mov ecx, dword [ecx]
and ecx, edx
sub eax, ecx
and eax, edx
mov edx, eax
mov dword [esp + 0x24], edx
mov eax, dword [esp + 4]
mov ecx, dword [eax + 4]
xor eax, eax
mov ebx, dword [esp + 0x98]
mov edx, dword [esp + 0x18]
add ebx, edx
setb al
mov dword [esp + 0x8c], ecx
add ebx, ecx
adc eax, 0
mov ecx, ebx
mov dword [esp + 0x44], ebx
add ecx, 0x4a
adc eax, 0
mov ebx, 0xfffffffe
cmp ebx, ecx
sbb dword [esp + 0x28], eax
jae 0x406171
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0xf
jmp 0x405ffc
cmp dword [esp + 8], 0
mov ecx, dword [ebp + 8]
jne 0x406216
mov ebx, dword [ecx + 4]
mov ecx, dword [ecx]
add ecx, dword [esp + 0x24]
adc ebx, 0
add ecx, 0x1e
adc ebx, 0
mov edx, ecx
and edx, dword [esp + 0x18]
mov eax, edx
shr eax, 0x1f
add edx, edx
xor ecx, dword [esp + 0x18]
add ecx, dword [esp + 0x18]
adc ebx, 0
add ecx, edx
adc ebx, eax
add ecx, 0x2e
adc ebx, 0
mov dword [esp + 0x28], ebx
mov ebx, ecx
mov eax, dword [esp + 0x98]
and ebx, eax
add ebx, ebx
xor ecx, eax
mov dword [esp + 8], 0
mov edx, dword [ebp + 0x38]
add edx, dword [ebp + 0x40]
mov eax, 0
adc eax, 0xffffffff
add edx, dword [esp + 0x8c]
adc eax, 0
add edx, ecx
adc eax, dword [esp + 0x28]
add edx, ebx
adc eax, 0
add edx, 0x26
mov edx, dword [esp + 0x18]
mov ecx, dword [ebp + 8]
adc eax, 0
cmp eax, 0xffffffff
je 0x406216
mov eax, dword [esp + 4]
mov dword [eax + 0x34], 1
mov dword [esp + 8], 1
test edx, edx
mov ebx, dword [ebp + 0x14]
je 0x40624d
mov dword [esp + 0x28], 0
mov eax, dword [ebp + 0xc]
cmp byte [edx + eax - 1], 0x2f
jne 0x406255
test ebx, ebx
jne 0x406241
mov dword [esp + 0x28], 0x10
or esi, dword [esp + 0xc]
je 0x406255
mov dword [ecx + 0x1c], 0x18
jmp 0x405ffc
mov dword [esp + 0x28], 0
mov eax, dword [esp + 8]
test eax, eax
je 0x406262
mov eax, 0x1c
mov ecx, dword [esp + 0x44]
add eax, ecx
add eax, 0x2e
mov ecx, dword [esp + 4]
mov edx, dword [ecx + 8]
cmp edx, eax
jae 0x4062b3
mov ecx, 1
test edx, edx
je 0x406281
mov ecx, edx
mov esi, ecx
add ecx, ecx
cmp esi, eax
jb 0x406281
push esi
mov eax, dword [esp + 8]
push dword [eax + 0xc]
push dword [eax]
mov ebx, dword [ebp + 8]
push dword [ebx + 0x34]
call dword [ebx + 0x30]
add esp, 0x10
test eax, eax
je 0x406436
mov ecx, dword [esp + 4]
mov dword [ecx], eax
mov dword [ecx + 8], esi
mov ebx, dword [ebp + 0x14]
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x18]
inc eax
cmp edx, eax
jae 0x4062fd
mov ecx, 1
test edx, edx
je 0x4062c9
mov ecx, edx
mov esi, ecx
add ecx, ecx
cmp esi, eax
jb 0x4062c9
push esi
mov eax, dword [esp + 8]
push dword [eax + 0x1c]
push dword [eax + 0x10]
mov ebx, dword [ebp + 8]
push dword [ebx + 0x34]
call dword [ebx + 0x30]
add esp, 0x10
test eax, eax
je 0x406436
mov ecx, dword [esp + 4]
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x18], esi
mov ebx, dword [ebp + 0x14]
test ebx, ebx
sete cl
xor eax, eax
or cl, byte [esp + 0x2c]
jne 0x406325
push 0x4df40
push 1
mov eax, dword [ebp + 8]
push dword [eax + 0x34]
call dword [eax + 0x28]
add esp, 0xc
test eax, eax
je 0x406546
mov dword [esp + 0xc], eax
mov ecx, dword [ebp + 8]
mov ebx, dword [esp + 0x14]
mov edx, ebx
mov esi, dword [esp + 0x24]
push esi
push dword [esp + 0x14]
call fcn.00406b30
add esp, 8
test eax, eax
je 0x406442
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
add eax, esi
adc ecx, 0
add ebx, esi
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
mov esi, dword [esp + 0x10]
adc esi, 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov word [esp + 0x88], 0
cmp byte [esp + 0x2c], 0
je 0x4063d6
mov edx, edi
xor edx, 0xfffffbff
or edi, 0x400
test edi, edx
je 0x406568
mov dx, 8
mov dword [esp + 0x44], edx
mov dl, 0x14
mov eax, dword [esp + 4]
cmp dword [eax + 0x34], 0
je 0x406457
mov dword [esp + 0x24], edx
mov dword [esp + 0x10], esi
mov edi, dword [esp + 0x38]
mov esi, dword [esp + 0x3c]
mov dword [esp + 4], 0
mov ebx, 0xfffffffe
cmp ebx, edi
mov edx, 0
sbb edx, esi
jb 0x406555
xor edx, edx
cmp ebx, dword [esp + 8]
sbb edx, ecx
jb 0x406555
xor eax, eax
mov edi, dword [ebp + 0x38]
mov esi, dword [esp + 8]
mov ebx, dword [esp + 0x24]
jmp 0x4065c0
mov dword [ebx + 0x1c], 0x10
jmp 0x405ffc
push dword [esp + 0xc]
mov eax, dword [ebp + 8]
push dword [eax + 0x34]
call dword [eax + 0x2c]
add esp, 8
jmp 0x405ffc
cmp dword [esp + 0x4c], 0
jne 0x406942
test esi, esi
jne 0x406942
mov dword [esp + 0x10], esi
mov dword [esp + 0x6c], 0x4034b50
mov byte [esp + 0x70], dl
mov ebx, dword [esp + 0x90]
movzx edx, bx
mov byte [esp + 0x72], bl
mov byte [esp + 0x73], dh
mov edx, dword [esp + 0x44]
mov byte [esp + 0x74], dl
mov dword [esp + 0x75], 0
mov dword [esp + 0x79], 0
mov dword [esp + 0x7d], 0
mov dword [esp + 0x81], 0
mov byte [esp + 0x85], 0
mov ebx, dword [esp + 0x18]
mov byte [esp + 0x86], bl
mov byte [esp + 0x87], bh
mov edx, dword [ebp + 0x38]
mov byte [esp + 0x88], dl
mov byte [esp + 0x89], dh
lea edx, [esp + 0x6c]
push 0x1e
push edx
push ecx
push dword [esp + 0x14]
mov esi, dword [ebp + 8]
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, 0x1e
jne 0x406752
mov edi, dword [esp + 0x14]
add edi, 0x1e
mov eax, esi
mov esi, dword [esp + 0x10]
adc esi, 0
push ebx
push dword [ebp + 0xc]
push esi
push edi
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, ebx
jne 0x406742
add edi, ebx
adc esi, 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov ebx, edi
jmp 0x4066bc
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x10
jmp 0x405ffc
xor edx, edx
cmp ebx, dword [esp + 8]
mov eax, 0
sbb eax, ecx
jb 0x406577
xor eax, eax
jmp 0x40657b
xor edx, edx
mov dword [esp + 0x44], 0
jmp 0x4063e0
lea eax, [esp + 0x30]
mov ecx, 0xfffffffe
cmp ecx, edi
mov ecx, 0
sbb ecx, esi
mov edi, dword [ebp + 0x38]
mov ebx, dword [esp + 0x24]
jb 0x406599
mov esi, 0
jmp 0x40659d
lea esi, [esp + 0x48]
jae 0x4065a3
lea edx, [esp + 0x38]
lea ecx, [esp + 0xa8]
mov dword [esp + 4], ecx
push eax
push esi
call fcn.00406bd0
add esp, 8
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x6c], 0x4034b50
mov byte [esp + 0x70], bl
mov byte [esp + 0x71], 0
movzx edx, word [esp + 0x90]
mov byte [esp + 0x72], dl
mov byte [esp + 0x73], dh
mov dword [esp + 8], eax
lea edx, [eax + edi]
mov ebx, dword [esp + 0x44]
mov byte [esp + 0x74], bl
mov dword [esp + 0x75], 0
mov dword [esp + 0x79], 0
mov dword [esp + 0x7d], 0
mov dword [esp + 0x81], 0
mov byte [esp + 0x85], 0
mov ebx, dword [esp + 0x18]
mov byte [esp + 0x86], bl
mov byte [esp + 0x87], bh
mov byte [esp + 0x88], dl
mov byte [esp + 0x89], dh
lea edx, [esp + 0x6c]
push 0x1e
push edx
push ecx
push esi
mov esi, dword [ebp + 8]
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, 0x1e
jne 0x406752
mov edi, dword [esp + 0x14]
add edi, 0x1e
mov eax, esi
mov esi, dword [esp + 0x10]
adc esi, 0
push ebx
push dword [ebp + 0xc]
push esi
push edi
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, ebx
jne 0x406742
add edi, ebx
adc esi, 0
cmp dword [esp + 4], 0
mov ebx, edi
je 0x4066b4
lea eax, [esp + 0xa8]
mov edi, dword [esp + 8]
push edi
push eax
push esi
push ebx
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, edi
jne 0x4066e8
add ebx, edi
adc esi, 0
jmp 0x4066bc
mov dword [esp + 4], 0
mov edi, dword [ebp + 0x38]
test edi, edi
je 0x4066f7
push edi
push dword [ebp + 0x34]
push esi
push ebx
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, edi
jne 0x4066e8
add ebx, edi
mov dword [esp + 0x14], ebx
adc esi, 0
mov dword [esp + 0x10], esi
jmp 0x4066ff
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x13
jmp 0x405ffc
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ebx
cmp byte [esp + 0x2c], 0
je 0x40675e
mov esi, dword [ebp + 0x14]
push esi
push dword [ebp + 0x10]
push dword [esp + 0x18]
push dword [esp + 0x20]
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x406742
mov eax, dword [ebp + 0x14]
add dword [esp + 0x14], eax
adc dword [esp + 0x10], 0
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], 0
jmp 0x406823
push dword [esp + 0xc]
mov esi, dword [ebp + 8]
push dword [esi + 0x34]
call dword [esi + 0x2c]
add esp, 8
mov dword [esi + 0x1c], 0x13
jmp 0x405ffc
cmp dword [ebp + 0x14], 0
je 0x406823
mov eax, dword [ebp + 8]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x64], 0
mov dword [esp + 0x60], 0
mov eax, dword [esp + 0x1c]
mov ecx, eax
cmp eax, 0xa
jl 0x40679f
mov ecx, 0xa
xor eax, eax
mov edx, dword [esp + 0x1c]
cmp edx, 4
setl al
shl eax, 0xe
or eax, dword [ecx*4 + 0x43da58]
test edx, edx
jne 0x4067be
or eax, 0x80000
lea ecx, [esp + 0x50]
push eax
push ecx
push 0x406c40
mov esi, dword [esp + 0x18]
push esi
call fcn.004051e0
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xa4], eax
lea eax, [esp + 0xa4]
push 4
push 0
push 0
push eax
push dword [ebp + 0x10]
push esi
call fcn.00403cb0
add esp, 0x18
cmp eax, 1
jne 0x406922
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x10], eax
push dword [esp + 0xc]
mov eax, dword [ebp + 8]
push dword [eax + 0x34]
call dword [eax + 0x2c]
add esp, 8
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
mov esi, ecx
mov dword [esp + 0x1c], eax
or ecx, eax
je 0x406a3b
mov dword [esp + 0x50], 0x8074b50
mov edx, dword [esp + 0x94]
mov byte [esp + 0x54], dl
mov byte [esp + 0x55], dh
mov ecx, edx
shr ecx, 0x10
mov byte [esp + 0x56], cl
mov ecx, edx
shr ecx, 0x18
mov byte [esp + 0x57], cl
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
cmp dword [esp + 4], 0
je 0x40693e
mov byte [esp + 0x58], cl
mov byte [esp + 0x59], ch
mov ebx, ecx
shr ebx, 0x10
mov byte [esp + 0x5a], bl
mov ebx, edx
shr ebx, 0x10
shr ecx, 0x18
mov byte [esp + 0x5b], cl
mov ecx, edx
shr ecx, 0x18
mov byte [esp + 0x5c], dl
mov byte [esp + 0x5d], dh
mov byte [esp + 0x5e], bl
mov byte [esp + 0x5f], cl
mov edx, esi
mov byte [esp + 0x60], dl
mov byte [esp + 0x61], dh
mov ecx, esi
shr ecx, 0x10
mov byte [esp + 0x62], cl
mov ecx, esi
shr ecx, 0x18
mov byte [esp + 0x63], cl
mov dword [esp + 0x24], 0x38
mov dword [esp + 0xa0], 0x30
mov ecx, 0x28
mov dword [esp + 0xc], 0x18
mov dword [esp + 0x2c], 0x17
mov eax, dword [esp + 0x1c]
mov edx, eax
mov byte [esp + 0x23], al
mov dword [esp + 0x8c], 0x16
mov dword [esp + 0x9c], 0x15
mov edi, 0x14
jmp 0x40699e
push dword [esp + 0xc]
mov esi, dword [ebp + 8]
push dword [esi + 0x34]
call dword [esi + 0x2c]
add esp, 8
mov dword [esi + 0x1c], 0xc
jmp 0x405ffc
test edx, edx
je 0x406951
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x1d
jmp 0x405ffc
mov dword [esp + 0x58], ecx
mov dword [esp + 0x24], 0x18
mov dword [esp + 0xa0], 0x10
mov ecx, 8
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x8c], 0xe
mov edx, esi
mov byte [esp + 0x23], dl
mov dword [esp + 0x9c], 0xd
mov edi, 0xc
mov dword [esp + 0xc], 0x10
mov edx, esi
mov ebx, dword [esp + 0x1c]
shrd edx, ebx, cl
shr ebx, cl
movzx eax, byte [esp + 0x23]
mov byte [esp + edi + 0x50], al
test cl, 0x20
jne 0x4069b9
mov ebx, edx
mov edx, esi
mov ecx, dword [esp + 0xa0]
mov eax, dword [esp + 0x1c]
shrd edx, eax, cl
mov edi, dword [esp + 0x9c]
mov byte [esp + edi + 0x50], bl
mov ebx, eax
shr ebx, cl
test cl, 0x20
jne 0x4069df
mov ebx, edx
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
shrd esi, eax, cl
mov edx, esi
mov esi, dword [esp + 0x8c]
mov byte [esp + esi + 0x50], bl
shr eax, cl
test cl, 0x20
jne 0x406a00
mov eax, edx
mov ecx, dword [esp + 0x2c]
mov byte [esp + ecx + 0x50], al
lea eax, [esp + 0x50]
mov esi, dword [esp + 0xc]
push esi
push eax
push dword [esp + 0x18]
push dword [esp + 0x20]
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x405ffc
mov eax, dword [esp + 0xc]
add dword [esp + 0x14], eax
adc dword [esp + 0x10], 0
cmp dword [esp + 4], 0
je 0x406a9a
xor edx, edx
mov eax, 0xfffffffe
cmp eax, dword [esp + 0x30]
mov eax, 0
sbb eax, dword [esp + 0x34]
jb 0x406a5c
xor eax, eax
jmp 0x406a60
lea eax, [esp + 0x30]
mov ecx, 0xfffffffe
cmp ecx, dword [esp + 0x38]
mov ecx, 0
sbb ecx, dword [esp + 0x3c]
jb 0x406a7b
mov edi, 0
jmp 0x406a7f
lea edi, [esp + 0x48]
jae 0x406a85
lea edx, [esp + 0x38]
lea ecx, [esp + 0xa8]
push eax
push edi
call fcn.00406bd0
add esp, 8
mov dword [esp + 8], eax
movzx ebx, word [esp + 0x90]
movzx esi, word [esp + 0x44]
movzx eax, word [esp + 8]
movzx edi, word [esp + 0x18]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
push dword [ebp + 0x40]
push dword [ebp + 0x3c]
push dword [esp + 0x30]
push dword [esp + 0x40]
push dword [esp + 0x40]
push 0
push 0
push ebx
push esi
push dword [esp + 0xb8]
push dword [esp + 0x74]
push dword [esp + 0x74]
push dword [esp + 0x6c]
push dword [esp + 0x6c]
push dword [esp + 0xd0]
push dword [ebp + 0x18]
push eax
push dword [esp + 0x48]
push edi
call fcn.00406c90
add esp, 0x4c
test eax, eax
je 0x405ffc
mov eax, dword [ebp + 8]
inc dword [eax + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [eax], ecx
mov ecx, dword [esp + 0x10]
mov dword [eax + 4], ecx
mov eax, 1
jmp 0x405ffe