Function at 0x4062b9
Capabilities:
Create thread
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xbc
push ebx
mov ebx, ecx
push esi
push edi
mov dword [esp + 0x30], ebx
mov ecx, dword [ebx + 0x1c]
mov edi, dword [ebx]
call fcn.00407761
test eax, eax
jne 0x406d7e
mov dword [esp + 0x9c], eax
cmp dword [edi + 0x24], eax
jne 0x406d7c
mov edx, dword [edi + 0x30]
xor eax, eax
mov esi, dword [edi + 0x34]
inc eax
mov ecx, edx
mov dword [esp + 0x6c], esi
add ecx, eax
mov dword [esp + 0x70], edx
push esi
push edx
mov eax, esi
mov dword [edi + 0x30], ecx
adc eax, 0
lea edx, [esp + 0x28]
xor esi, esi
mov dword [edi + 0x34], eax
push esi
push esi
push esi
push esi
mov ecx, edi
call fcn.004061a7
mov edx, dword [edi + 0x70]
xorps xmm0, xmm0
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x40], esi
mov dword [esp + 0x90], esi
mov dword [esp + 0x74], esi
mov dword [esp + 0x98], esi
mov dword [esp + 0x38], esi
movlpd qword [esp + 0x58], xmm0
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x3c], esi
test eax, eax
jne 0x406801
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x3c], esi
mov esi, dword [esp + 0x20]
test esi, esi
jne 0x4067ef
mov esi, dword [ebx + 8]
xor edx, edx
mov ebx, dword [edi + 0x64]
sub ebx, dword [edi + 0x60]
movlpd qword [esp + 0x50], xmm0
mov eax, dword [esp + 0x54]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x34], esi
mov dword [esp + 0x3c], edx
mov dword [esp + 0x1c], eax
test esi, esi
jne 0x4063f7
mov eax, dword [edi]
mov ecx, dword [edi + 0x14]
add eax, 0x10
push eax
push ecx
call dword [ecx]
mov esi, eax
mov dword [esp + 0x34], esi
test esi, esi
je 0x406625
mov ecx, dword [esp + 0x2c]
xor edx, edx
mov dword [esi], edx
test ecx, ecx
je 0x4063f0
mov dword [ecx], esi
jmp 0x4063f7
mov eax, dword [esp + 0x30]
mov dword [eax + 8], esi
lea eax, [esi + 0x10]
mov dword [esp + 0x84], eax
mov dword [esp + 0x18], eax
test ebx, ebx
je 0x40642d
mov eax, dword [edi + 0x60]
add eax, 0x10
mov dword [esp + 0x24], edx
add eax, dword [edi + 0x5c]
mov edx, ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], eax
jmp 0x40653d
mov esi, dword [edi]
mov ecx, eax
mov eax, dword [edi + 0xc]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x58], eax
mov dword [esp + 0x10], edx
jmp 0x406480
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], esi
push edx
push ecx
push eax
call dword [eax]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x4c]
add edx, eax
add ecx, eax
mov dword [esp + 0x10], edx
sub esi, eax
mov dword [esp + 0x48], ecx
cmp dword [esp + 0x14], 0
jne 0x4065e0
test eax, eax
je 0x406484
mov eax, dword [esp + 0x58]
test esi, esi
jne 0x406442
xor ecx, ecx
mov esi, ecx
mov dword [esp + 0x14], esi
mov ecx, dword [esp + 0x1c]
add ecx, edx
push 0
pop eax
adc dword [esp + 0x24], eax
cmp dword [esp + 0x2c], 0
mov eax, dword [esp + 0x38]
cmove eax, edx
mov dword [esp + 0x1c], ecx
add dword [edi + 0x68], edx
mov dword [esp + 0x38], eax
push 0
pop eax
adc dword [edi + 0x6c], eax
cmp edx, dword [edi]
setne al
mov dword [esp + 0xc], eax
xor eax, eax
inc eax
cmp edx, dword [edi]
je 0x4064c9
mov dword [edi + 0x70], eax
test esi, esi
je 0x4064dd
mov dword [edi + 0x70], eax
mov dword [esp + 0xc], eax
xor eax, eax
mov dword [edi + 0x48], esi
mov dword [esp + 0x14], eax
sub ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x24]
mov eax, esi
sbb eax, dword [esp + 0x28]
mov dword [esp + 0x5c], eax
jne 0x4064f8
xor eax, eax
inc eax
cmp ecx, eax
jb 0x406539
push dword [esp + 0x6c]
xor eax, eax
lea edx, [esp + 0x24]
push dword [esp + 0x74]
mov ecx, edi
push eax
push eax
push eax
push eax
call fcn.004061a7
mov edx, eax
mov dword [esp + 0x14], edx
test edx, edx
jne 0x40677e
cmp dword [esp + 0x20], eax
jne 0x40677e
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x44], eax
mov dword [esp + 0x28], esi
mov esi, dword [esp + 0x34]
xor eax, eax
mov dword [esp + 0xa8], edx
cmp dword [esp + 0x2c], eax
lea ecx, [esp + 0xa0]
push ecx
mov ecx, dword [esp + 0x34]
sete al
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x10]
push dword [ecx + 4]
mov dword [esp + 0xb4], eax
xor eax, eax
push dword [edi + 0x1c]
inc eax
mov dword [esp + 0xc0], eax
mov eax, dword [edi + 0x18]
call dword [eax]
mov ecx, dword [esp + 0xb0]
xor eax, eax
inc eax
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x3c], eax
xor eax, eax
inc eax
cmp ecx, eax
je 0x406748
test ebx, ebx
je 0x4065e9
push dword [esp + 0xa8]
lea eax, [esi + 0x10]
push dword [esp + 0x1c]
push eax
call fcn.00434bb0
mov eax, dword [esp + 0xb4]
add esp, 0xc
add dword [edi + 0x60], eax
mov ecx, dword [esp + 0xb0]
jmp 0x4065f0
mov esi, dword [esp + 0x14]
jmp 0x40648c
mov eax, dword [esp + 0xa8]
mov edx, dword [esp + 0xc]
test ecx, ecx
jne 0x406658
test edx, edx
jne 0x406667
cmp eax, dword [esp + 0x10]
jne 0x406637
mov dword [esp + 0x2c], esi
mov esi, dword [esi]
mov dword [esp + 0x34], esi
push ecx
pop edx
test ebx, ebx
je 0x4063c2
xor edx, edx
mov ebx, edx
mov dword [edi + 0x60], edx
mov dword [edi + 0x64], edx
jmp 0x4063c2
xor esi, esi
inc esi
mov edx, esi
mov dword [esp + 0x74], esi
mov dword [esp + 0xc], edx
jmp 0x406782
xor eax, eax
mov dword [esp + 0x14], 0xb
mov ebx, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x34], ebx
jmp 0x406856
push 1
cmp ecx, 3
pop esi
cmove edx, esi
mov dword [esp + 0xc], edx
jmp 0x40666a
xor esi, esi
inc esi
mov dword [esp + 0x40], esi
mov esi, dword [esp + 0x10]
cmp eax, esi
jne 0x406683
xor ebx, ebx
mov dword [edi + 0x60], ebx
mov dword [edi + 0x64], ebx
jmp 0x406784
cmp ecx, 3
jne 0x4066c0
add dword [esp + 0x18], eax
xor ecx, ecx
mov edx, dword [esp + 0xc]
sub esi, eax
test ebx, ebx
mov dword [esp + 0x10], esi
push 0
setne cl
sub dword [esp + 0x20], esi
pop ebx
sbb dword [esp + 0x24], ebx
cmp dword [esp + 0x2c], ebx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x38]
cmove ecx, eax
mov dword [esp + 0x38], ecx
jmp 0x406790
test ebx, ebx
je 0x4066d0
xor ebx, ebx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], ebx
jmp 0x406730
mov ecx, dword [edi + 0x5c]
test ecx, ecx
jne 0x4066f3
mov eax, dword [edi]
mov ecx, dword [edi + 0x14]
add eax, 0x10
push eax
push ecx
call dword [ecx]
mov ecx, eax
test ecx, ecx
je 0x4066f8
mov eax, dword [esp + 0xa8]
mov dword [edi + 0x5c], ecx
add ecx, 0x10
jne 0x406707
xor eax, eax
inc eax
mov edx, eax
mov dword [esp + 0x74], eax
mov dword [esp + 0xc], edx
jmp 0x406782
sub esi, eax
sub dword [esp + 0x1c], esi
push 0
pop ebx
sbb dword [esp + 0x24], ebx
add eax, dword [esp + 0x18]
push esi
push eax
push ecx
mov dword [edi + 0x64], esi
mov dword [edi + 0x60], ebx
call fcn.00434bb0
mov eax, dword [esp + 0xb4]
add esp, 0xc
mov ecx, dword [esp + 0x38]
mov edx, ebx
cmp dword [esp + 0x2c], 0
mov dword [esp + 0xc], edx
cmove ecx, eax
mov dword [esp + 0x38], ecx
jmp 0x406784
mov dword [esp + 0x98], eax
mov edx, eax
mov dword [esp + 0xc], edx
test ebx, ebx
je 0x406676
push dword [esp + 0x10]
mov eax, dword [esp + 0x88]
push dword [esp + 0x1c]
push eax
call fcn.00434bb0
mov edx, dword [esp + 0x18]
add esp, 0xc
jmp 0x406676
mov edx, dword [esp + 0xc]
xor ebx, ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x18], ebx
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x406811
lea esi, [edi + 0xb0]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [edi + 0x88], ebx
je 0x4067d0
mov eax, dword [esp + 0x6c]
cmp eax, dword [edi + 0x94]
jb 0x4067d0
ja 0x4067c7
mov eax, dword [esp + 0x70]
cmp eax, dword [edi + 0x90]
jbe 0x4067d0
xor eax, eax
inc eax
mov dword [esp + 0x20], eax
jmp 0x4067d4
mov dword [esp + 0x20], ebx
mov eax, dword [edi + 0x9c]
push esi
mov dword [esp + 0x18], eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
jmp 0x406811
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x1c], ecx
jmp 0x406815
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x1c], ecx
mov esi, dword [esp + 0x20]
xor ecx, ecx
mov ebx, ecx
mov dword [esp + 0x34], ebx
test eax, eax
jne 0x406856
cmp dword [esp + 0x40], ecx
je 0x406852
test esi, esi
jne 0x406856
mov ecx, dword [esp + 0x30]
mov eax, dword [edi + 0x18]
push dword [ecx + 4]
push dword [edi + 0x1c]
call dword [eax + 4]
mov ebx, eax
mov dword [esp + 0x34], ebx
test ebx, ebx
je 0x406861
xor eax, eax
mov dword [esp + 0x40], eax
lea edx, [eax + 1]
mov dword [esp + 0xc], edx
test esi, esi
je 0x406865
xor eax, eax
lea edx, [eax + 1]
mov dword [esp + 0xc], edx
jmp 0x406865
mov edx, dword [esp + 0xc]
xor eax, eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x84], eax
test edx, edx
jne 0x406936
mov eax, dword [edi + 0x58]
cmp eax, dword [edi + 0x54]
jae 0x40690a
cmp dword [esp + 0x3c], edx
je 0x40690a
add eax, 5
imul esi, eax, 0x28
add esi, edi
mov ecx, esi
call fcn.0040612a
test eax, eax
jne 0x4068cf
xor ecx, ecx
cmp dword [esi + 0x18], ecx
jne 0x4068e1
lea eax, [esp + 0xc4]
push eax
push ecx
push esi
push fcn.00406df8
push ecx
push ecx
call fcn.00439a05
add esp, 0x18
mov dword [esi + 0x18], eax
test eax, eax
jne 0x4068e1
call fcn.0040772f
test eax, eax
je 0x4068e1
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
test ecx, ecx
jne 0x4068e6
inc dword [edi + 0x58]
jmp 0x40690a
mov eax, dword [edi + 0x58]
xor edx, edx
inc edx
cmp eax, edx
jne 0x406907
mov esi, dword [esp + 0x30]
xor eax, eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x40], eax
mov dword [esp + 0x84], ecx
jmp 0x406941
mov dword [edi + 0x54], eax
mov esi, dword [esp + 0x30]
mov ecx, dword [esi + 4]
inc ecx
cmp ecx, dword [edi + 0x58]
sbb eax, eax
and eax, ecx
add eax, 5
imul eax, eax, 0x28
add eax, edi
mov dword [esp + 0x58], eax
lea ecx, [eax + 0x1c]
call fcn.0040777d
test eax, eax
je 0x40693a
jmp 0x406d7e
mov esi, dword [esp + 0x30]
mov eax, dword [esp + 0x40]
xor edx, edx
inc edx
cmp dword [esp + 0x14], 0
xorps xmm0, xmm0
movlpd qword [esp + 0x50], xmm0
movlpd qword [esp + 0x78], xmm0
movlpd qword [esp + 0x60], xmm0
movlpd qword [esp + 0x88], xmm0
jne 0x406afb
test eax, eax
je 0x406afb
test ebx, ebx
jne 0x406afb
mov ebx, dword [esi + 8]
mov eax, edx
mov esi, dword [esp + 0x54]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x60]
mov dword [esp + 0x44], esi
mov esi, dword [esp + 0x50]
mov dword [esp + 0x3c], esi
mov esi, dword [esp + 0x7c]
mov dword [esp + 0x4c], esi
mov esi, dword [esp + 0x78]
mov dword [esp + 0x48], esi
mov dword [esp + 0x2c], ebx
test eax, eax
je 0x4069b5
mov esi, dword [esp + 0x38]
jmp 0x4069d8
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
sub ebx, edx
mov esi, dword [edi]
sbb eax, ecx
cmp dword [esp + 0x9c], eax
jb 0x4069d4
ja 0x4069d2
cmp esi, ebx
jbe 0x4069d4
mov esi, ebx
mov ebx, dword [esp + 0x2c]
add edx, esi
mov dword [esp + 0x78], 1
push 0
pop eax
adc ecx, eax
mov dword [esp + 0x60], edx
mov dword [esp + 0x64], ecx
cmp edx, dword [esp + 0x1c]
jne 0x4069fc
cmp ecx, dword [esp + 0x24]
jne 0x4069fc
inc eax
mov ecx, dword [edi + 0x18]
lea edx, [esp + 0x78]
push edx
lea edx, [esp + 0x8c]
push edx
lea edx, [esp + 0x68]
push edx
push eax
push esi
lea eax, [ebx + 0x10]
push eax
mov eax, dword [esp + 0x48]
push dword [eax + 4]
push dword [edi + 0x1c]
call dword [ecx + 8]
mov dword [esp + 0x34], eax
test eax, eax
jne 0x406aea
cmp dword [esp + 0x78], eax
jne 0x406b1b
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
cmp edx, dword [esp + 0x1c]
jne 0x406a52
cmp ecx, dword [esp + 0x24]
je 0x406b1b
mov esi, dword [esp + 0x88]
mov eax, edx
sub eax, dword [esp + 0x3c]
mov ebx, ecx
sbb ebx, dword [esp + 0x44]
sub esi, dword [esp + 0x48]
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0x8c]
sbb ebx, dword [esp + 0x4c]
cmp dword [esp + 0x50], 0
ja 0x406a8f
jb 0x406a86
cmp eax, 1
jae 0x406a8f
test ebx, ebx
jne 0x406a8f
cmp esi, 1
jb 0x406add
push dword [esp + 0x6c]
lea edx, [esp + 0x24]
mov ecx, edi
push dword [esp + 0x74]
push ebx
push esi
push dword [esp + 0x60]
push eax
call fcn.004061a7
mov dword [esp + 0x14], eax
test eax, eax
jne 0x406b1b
cmp dword [esp + 0x20], eax
jne 0x406b1b
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x3c], edx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x4c], eax
mov ebx, dword [esp + 0x2c]
xor eax, eax
mov ebx, dword [ebx]
jmp 0x4069a7
push dword [esp + 0x6c]
mov ecx, edi
push dword [esp + 0x74]
call fcn.00406261
jmp 0x406b1b
mov eax, dword [esp + 0x54]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 0x20]
call fcn.00407761
test eax, eax
jne 0x406d7e
mov ebx, dword [esp + 0x90]
xor edx, edx
xor ecx, ecx
mov esi, edx
inc ecx
mov dword [esp + 0x78], esi
mov dword [esp + 0x50], ecx
cmp dword [edi + 0x24], edx
jne 0x406d7c
cmp dword [edi + 0x50], edx
je 0x406b5b
mov eax, ecx
mov dword [esp + 0x20], eax
jmp 0x406bbb
mov eax, dword [esp + 0x34]
test eax, eax
je 0x406b78
mov dword [edi + 0x50], ecx
cmp eax, 2
mov ecx, dword [esp + 0x74]
push 1
mov dword [edi + 0x4c], eax
pop eax
cmove ecx, eax
jmp 0x406b7c
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x84]
test eax, eax
je 0x406b92
xor ebx, ebx
mov dword [edi + 0x40], eax
inc ebx
mov dword [edi + 0x50], ebx
mov ebx, edx
test ecx, ecx
je 0x406ba3
xor ecx, ecx
mov ebx, edx
inc ecx
mov dword [edi + 0x50], ecx
mov dword [edi + 0x38], ecx
jmp 0x406ba6
xor ecx, ecx
inc ecx
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x98], edx
je 0x406bbb
mov dword [edi + 0x50], ecx
mov ebx, edx
mov dword [edi + 0x3c], ecx
cmp dword [esp + 0x40], edx
je 0x406c16
test eax, eax
je 0x406bd7
xorps xmm0, xmm0
movlpd qword [esp + 0x60], xmm0
movlpd qword [esp + 0x88], xmm0
mov esi, dword [esp + 0x60]
sub esi, dword [esp + 0x3c]
mov edx, dword [esp + 0x64]
sbb edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x88]
sub ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x8c]
sbb eax, dword [esp + 0x4c]
push eax
push ecx
push edx
push esi
lea ecx, [edi + 0x98]
call fcn.004060c9
mov esi, dword [esp + 0x78]
mov dword [esp + 0x14], eax
jmp 0x406c1a
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
xor ecx, ecx
test edx, edx
sete cl
cmp dword [esp + 0x90], 0
mov dword [esp + 0x94], ecx
je 0x406cbc
test eax, eax
jne 0x406c4d
test ebx, ebx
je 0x406c4d
cmp dword [esp + 0x20], eax
jne 0x406c4d
lea ecx, [eax + 1]
jmp 0x406c51
xor eax, eax
mov ecx, eax
mov ebx, dword [esp + 0x30]
lea edx, [esp + 0x50]
mov eax, dword [edi + 0x18]
push edx
lea edx, [esp + 0x98]
push edx
push dword [esp + 0x30]
push dword [esp + 0x1c]
push dword [esp + 0x28]
push ecx
push dword [ebx + 4]
push dword [edi + 0x1c]
call dword [eax + 0xc]
mov dword [esp + 0x14], eax
test eax, eax
je 0x406c8d
xor eax, eax
inc eax
mov esi, eax
mov dword [edi + 0x50], eax
jmp 0x406ca0
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xc]
test ecx, ecx
jne 0x406cc4
test edx, edx
jne 0x406cc4
push dword [esp + 0x6c]
mov ecx, edi
push dword [esp + 0x74]
call fcn.00406261
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xc]
jmp 0x406cc0
mov ebx, dword [esp + 0x30]
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x50], 0
je 0x406d2f
cmp dword [esp + 0x40], 0
je 0x406cf5
test eax, eax
jne 0x406cf5
cmp dword [edi + 0x50], eax
jne 0x406cf7
cmp dword [esp + 0x34], eax
jne 0x406cf7
cmp dword [esp + 0x20], eax
jne 0x406cf7
cmp dword [edi + 0x84], eax
jne 0x406d08
test esi, esi
je 0x406d2f
jmp 0x406cf7
xor eax, eax
cmp dword [edi + 0x84], eax
jne 0x406d08
mov eax, dword [ebx + 4]
mov dword [edi + 0x80], eax
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x24]
or eax, esi
jne 0x406d18
test edx, edx
jne 0x406d3c
mov eax, dword [esp + 0x38]
mov dword [ebx + 0xc], eax
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], esi
inc dword [edi + 0x84]
test edx, edx
jne 0x406d3c
mov ecx, dword [esp + 0x58]
add ecx, 0x20
jmp 0x406d62
test ecx, ecx
je 0x406d51
lea ecx, [edi + 0xe8]
call fcn.0040777d
test eax, eax
jne 0x406d7e
jmp 0x406d5c
xor eax, eax
cmp dword [ebx + 4], eax
je 0x406d7c
inc eax
mov dword [edi + 0x24], eax
lea ecx, [edi + 0xe4]
call fcn.0040777d
test eax, eax
jne 0x406d7e
mov ecx, dword [ebx + 0x1c]
call fcn.00407761
test eax, eax
jne 0x406d7e
jmp 0x4062e7
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret