Function at 0x405870
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xc0
mov ebx, dword [ebp + 0x24]
mov edi, dword [ebp + 0x28]
mov edx, dword [ebp + 8]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], ebx
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [esp + 0x10], eax
mov dword [esp + 0x30], eax
mov dword [esp + 4], ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov ecx, dword [ebp + 0x20]
mov eax, 6
test ecx, ecx
js 0x4058c3
mov eax, ecx
mov ecx, ebx
or ecx, edi
je 0x4058cf
mov cx, 8
jmp 0x4058ef
cmp dword [ebp + 0x14], 0
je 0x4058ed
mov ecx, eax
xor ecx, 0xfffffbff
mov esi, edx
mov edx, eax
or edx, 0x400
test edx, ecx
mov edx, esi
je 0x4058c9
xor ecx, ecx
test eax, 0x10000
mov dword [esp + 0x4c], ebx
jne 0x405903
movzx ecx, cx
or ecx, 0x800
mov esi, eax
and esi, 0xf
sete byte [esp + 0x1c]
mov ebx, dword [edx + 0x48]
mov dword [esp + 8], ebx
test ebx, ebx
je 0x4059ce
cmp dword [edx + 0x14], 2
jne 0x4059ce
mov dword [esp + 0x14], esi
mov esi, dword [ebp + 0xc]
cmp dword [ebp + 0x14], 0
je 0x40594a
test esi, esi
mov esi, dword [esp + 0x14]
je 0x4059ce
cmp dword [ebp + 0x10], 0
jne 0x405952
jmp 0x4059ce
test esi, esi
mov esi, dword [esp + 0x14]
je 0x4059ce
cmp word [ebp + 0x1c], 0
mov dword [esp + 0x90], ecx
setne cl
cmp dword [ebp + 0x18], 0
sete dl
test dl, cl
mov edx, dword [ebp + 8]
jne 0x4059ce
cmp esi, 0xb
jae 0x4059ce
mov ecx, dword [esp + 8]
mov ebx, dword [ecx + 0x34]
mov ecx, dword [edx + 0x10]
test ebx, ebx
je 0x405995
mov dword [esp], ebx
cmp ecx, 0xffffffff
mov ebx, edi
jne 0x4059bc
mov dword [edx + 0x1c], 2
jmp 0x4059d5
mov ebx, edi
test edi, edi
jne 0x4059aa
mov dword [esp], 0
cmp ecx, 0xffff
jne 0x4059bc
mov ecx, dword [esp + 8]
mov dword [ecx + 0x34], 1
mov dword [esp], 1
mov ecx, dword [esp + 0x4c]
or ecx, ebx
je 0x4059df
mov ecx, eax
and ecx, 0x400
jne 0x4059df
mov dword [edx + 0x1c], 0x18
xor eax, eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp + 0xc]
cmp byte [ecx], 0x2f
jne 0x4059f0
mov dword [edx + 0x1c], 0x19
jmp 0x4059d5
mov edx, eax
shr edx, 0xa
and edx, 1
test eax, 0x400
mov dword [esp + 0x2c], edx
je 0x405a14
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x8c], eax
mov byte [esp + 0x28], 1
jmp 0x405a63
or byte [esp + 0x1c], dl
mov esi, dword [ebp + 0x14]
push esi
push dword [ebp + 0x10]
push 0
call fcn.00403630
add esp, 0xc
mov dword [esp + 0x8c], eax
xor ebx, ebx
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], 0
mov eax, 0
cmp esi, 4
setb cl
jb 0x405a4f
mov eax, dword [esp + 0x14]
or cl, byte [esp + 0x1c]
mov byte [esp + 0x28], cl
mov edi, dword [ebp + 0x14]
mov dword [esp + 0x4c], edi
mov esi, eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.00408d70
add esp, 4
cmp eax, 0x10000
jb 0x405a82
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x19
jmp 0x4059d5
mov dword [esp + 0xc], ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x1c], eax
movzx ebx, word [ebp + 0x1c]
mov dword [esp + 0x88], 0
mov esi, 0xfffffffe
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x20]
mov edx, dword [ecx + 0x24]
or edx, eax
mov edi, 0
je 0x405ac2
lea edx, [esi + eax]
inc edx
mov ecx, dword [ecx]
and ecx, edx
sub eax, ecx
and eax, edx
mov edi, eax
mov eax, dword [esp + 8]
mov ecx, dword [eax + 4]
xor edx, edx
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x20], ecx
add eax, ecx
setb dl
add eax, 0x2e
adc edx, 0
lea ecx, [eax + eax]
and ecx, 0x38
xor eax, 0x1c
add eax, ebx
adc edx, 0
add eax, ecx
adc edx, 0
cmp esi, eax
sbb dword [esp + 0x88], edx
jae 0x405b0b
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0xf
jmp 0x4059d5
cmp dword [esp], 0
jne 0x405b6d
mov eax, dword [esp + 0x1c]
mov ecx, eax
shr ecx, 0x1f
mov esi, ecx
mov dword [esp], 0
mov edx, ebx
add edx, dword [ebp + 0x38]
mov ecx, 0
adc ecx, 0xffffffff
add edx, dword [ebp + 0x40]
adc ecx, 0
add eax, eax
add edx, eax
adc ecx, esi
add edx, edi
adc ecx, 0
add edx, dword [esp + 0x20]
adc ecx, 0
mov eax, dword [ebp + 8]
add edx, dword [eax]
adc ecx, dword [eax + 4]
add edx, 0x72
adc ecx, 0
cmp ecx, 0xffffffff
je 0x405b6d
mov eax, dword [esp + 8]
mov dword [eax + 0x34], 1
mov dword [esp], 1
mov dword [esp + 0x88], 0
mov edx, dword [esp + 0x1c]
test edx, edx
je 0x405bb4
mov eax, dword [ebp + 0xc]
cmp byte [edx + eax - 1], 0x2f
mov ecx, dword [ebp + 8]
jne 0x405bb7
cmp dword [ebp + 0x14], 0
jne 0x405ba8
mov dword [esp + 0x88], 0x10
mov eax, dword [esp + 0x4c]
or eax, dword [esp + 0xc]
je 0x405bb7
mov dword [ecx + 0x1c], 0x18
jmp 0x4059d5
mov ecx, dword [ebp + 8]
mov esi, dword [esp]
test esi, esi
je 0x405bc3
mov esi, 0x1c
mov dword [esp + 0x4c], ebx
lea eax, [ebx + edx]
mov edx, dword [esp + 0x20]
add edx, eax
lea eax, [esi + edx]
add eax, 0x2e
mov esi, dword [esp + 8]
mov edx, dword [esi + 8]
cmp edx, eax
mov dword [esp + 0x24], edi
jae 0x405c33
mov edi, 1
test edx, edx
je 0x405c0a
mov edi, edx
jmp 0x405c0a
mov ecx, edi
and ecx, 2
mov edx, edi
or edi, 2
imul edi, ecx
xor ecx, 2
and edx, 0xfffffffd
imul edx, ecx
add edi, edx
cmp edi, eax
jb 0x405bf2
push edi
push dword [esi + 0xc]
push dword [esi]
mov ebx, dword [ebp + 8]
push dword [ebx + 0x34]
call dword [ebx + 0x30]
add esp, 0x10
test eax, eax
je 0x405dab
mov dword [esi], eax
mov dword [esi + 8], edi
mov ecx, ebx
mov edi, dword [esp + 0x24]
mov eax, dword [esi + 0x14]
mov edx, dword [esi + 0x18]
inc eax
cmp edx, eax
jae 0x405c8e
mov edi, 1
test edx, edx
je 0x405c63
mov edi, edx
jmp 0x405c63
mov ecx, edi
and ecx, 2
mov edx, edi
or edi, 2
imul edi, ecx
xor ecx, 2
and edx, 0xfffffffd
imul edx, ecx
add edi, edx
cmp edi, eax
jb 0x405c4b
push edi
push dword [esi + 0x1c]
push dword [esi + 0x10]
mov ebx, dword [ebp + 8]
push dword [ebx + 0x34]
call dword [ebx + 0x30]
add esp, 0x10
test eax, eax
je 0x405dab
mov dword [esi + 0x10], eax
mov dword [esi + 0x18], edi
mov ecx, ebx
mov edi, dword [esp + 0x24]
movzx ebx, byte [esp + 0x28]
xor bl, 1
xor eax, eax
cmp dword [ebp + 0x14], 0
je 0x405cc0
test bl, bl
je 0x405cc0
push 0x4df40
push 1
push dword [ecx + 0x34]
mov eax, dword [ebp + 8]
call dword [eax + 0x28]
mov ecx, dword [ebp + 8]
add esp, 0xc
test eax, eax
je 0x405ec2
mov byte [esp + 0x20], bl
mov dword [esp + 0xc], eax
mov esi, edi
mov edi, dword [esp + 0x10]
mov edx, edi
push esi
mov ebx, dword [esp + 8]
push ebx
call fcn.004064a0
add esp, 8
test eax, eax
je 0x405db7
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
add eax, esi
adc ecx, 0
add edi, esi
mov dword [esp], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
adc ebx, 0
mov dword [esp + 4], ebx
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov word [esp + 0x84], 0
mov eax, dword [esp + 0x2c]
or al, byte [esp + 0x20]
mov dword [esp + 0x2c], eax
movzx edx, al
shl edx, 3
mov dword [esp + 0x20], edx
mov eax, dword [esp + 8]
cmp dword [eax + 0x34], 0
je 0x405dcc
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov ebx, 0xfffffffe
cmp ebx, edi
mov esi, 0
sbb esi, edx
jb 0x405ece
xor esi, esi
cmp ebx, dword [esp]
sbb esi, ecx
jb 0x405ece
mov dword [esp + 8], 0
mov ebx, dword [ebp + 0x38]
xor eax, eax
jmp 0x405f23
mov dword [ebx + 0x1c], 0x10
jmp 0x4059d5
push dword [esp + 0xc]
mov eax, dword [ebp + 8]
push dword [eax + 0x34]
call dword [eax + 0x2c]
add esp, 8
jmp 0x4059d5
cmp dword [esp + 0x44], 0
mov eax, dword [esp + 4]
jne 0x4062b8
test eax, eax
jne 0x4062b8
mov dword [esp + 0x68], 0x4034b50
mov eax, dword [esp + 0x2c]
test al, al
je 0x405df5
mov al, 0x14
mov byte [esp + 0x6c], al
mov edx, dword [esp + 0x90]
movzx eax, dx
mov byte [esp + 0x6e], dl
mov byte [esp + 0x6f], ah
mov edx, dword [esp + 0x20]
mov byte [esp + 0x70], dl
mov dword [esp + 0x71], 0
mov dword [esp + 0x75], 0
mov dword [esp + 0x79], 0
mov dword [esp + 0x7d], 0
mov byte [esp + 0x81], 0
mov ebx, dword [esp + 0x1c]
mov byte [esp + 0x82], bl
mov byte [esp + 0x83], bh
mov edx, dword [ebp + 0x38]
mov byte [esp + 0x84], dl
mov byte [esp + 0x85], dh
lea edx, [esp + 0x68]
push 0x1e
push edx
push ecx
push dword [esp + 0xc]
mov esi, dword [ebp + 8]
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, 0x1e
jne 0x406037
add edi, 0x1e
mov eax, dword [esp + 4]
adc eax, 0
push ebx
push dword [ebp + 0xc]
mov dword [esp + 0xc], eax
push eax
push edi
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, ebx
jne 0x40602a
add edi, ebx
mov ebx, dword [esp + 4]
adc ebx, 0
mov dword [esp + 0x24], 0
mov dword [esp + 8], 0
jmp 0x406025
mov dword [ecx + 0x1c], 0x10
jmp 0x4059d5
xor esi, esi
cmp ebx, edi
mov edi, 0
sbb edi, edx
jb 0x405ee2
mov edx, 0
jmp 0x405ee6
lea edx, [esp + 0x38]
jb 0x405eec
xor edi, edi
jmp 0x405ef0
lea edi, [esp + 0x40]
cmp ebx, dword [esp]
mov eax, 0
sbb eax, ecx
jae 0x405f00
lea esi, [esp + 0x30]
mov ebx, dword [ebp + 0x38]
lea ecx, [esp + 0xa0]
mov dword [esp + 8], ecx
push esi
push edi
call fcn.00406540
add esp, 8
mov ecx, dword [esp + 0x30]
mov dword [esp], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x24], eax
lea edx, [eax + ebx]
mov dword [esp + 0x68], 0x4034b50
mov eax, dword [esp + 0x2c]
test al, al
mov edi, dword [esp + 0x10]
je 0x405f40
mov al, 0x14
mov byte [esp + 0x6c], al
mov byte [esp + 0x6d], 0
movzx ebx, word [esp + 0x90]
mov byte [esp + 0x6e], bl
mov byte [esp + 0x6f], bh
mov ebx, dword [esp + 0x20]
mov byte [esp + 0x70], bl
mov dword [esp + 0x71], 0
mov dword [esp + 0x75], 0
mov dword [esp + 0x79], 0
mov dword [esp + 0x7d], 0
mov byte [esp + 0x81], 0
mov ebx, dword [esp + 0x1c]
mov byte [esp + 0x82], bl
mov byte [esp + 0x83], bh
mov byte [esp + 0x84], dl
mov byte [esp + 0x85], dh
lea edx, [esp + 0x68]
push 0x1e
push edx
push ecx
push dword [esp + 0xc]
mov esi, dword [ebp + 8]
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, 0x1e
jne 0x406037
add edi, 0x1e
mov eax, edi
mov edi, dword [esp + 4]
adc edi, 0
push ebx
push dword [ebp + 0xc]
push edi
mov dword [esp + 0x1c], eax
push eax
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, ebx
jne 0x40602a
mov ecx, dword [esp + 0x10]
add ecx, ebx
adc edi, 0
cmp dword [esp + 8], 0
mov ebx, edi
je 0x406043
lea eax, [esp + 0xa0]
mov esi, dword [esp + 0x24]
push esi
push eax
push ebx
push ecx
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
mov edi, ecx
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x4060ba
add edi, esi
adc ebx, 0
mov esi, dword [ebp + 0x38]
jmp 0x406050
push dword [esp + 0xc]
push dword [esi + 0x34]
call dword [esi + 0x2c]
add esp, 8
mov dword [esi + 0x1c], 0x13
jmp 0x4059d5
mov dword [esp + 8], 0
mov esi, dword [ebp + 0x38]
mov edi, ecx
test esi, esi
je 0x40606f
push esi
push dword [ebp + 0x34]
push ebx
push edi
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x4060ba
add edi, esi
adc ebx, 0
movzx eax, byte [esp + 0x28]
test al, al
mov dword [esp + 0x10], edi
mov dword [esp + 4], ebx
je 0x4060c9
mov esi, dword [ebp + 0x14]
push esi
push dword [ebp + 0x10]
push ebx
push edi
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x40628c
mov eax, dword [ebp + 0x14]
add dword [esp + 0x10], eax
adc dword [esp + 4], 0
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], 0
jmp 0x40618e
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x13
jmp 0x4059d5
cmp dword [ebp + 0x14], 0
je 0x40618e
mov eax, dword [ebp + 8]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 4]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x64], 0
mov dword [esp + 0x60], 0
mov eax, dword [esp + 0x14]
mov ecx, eax
cmp eax, 0xa
jb 0x40610a
mov ecx, 0xa
xor eax, eax
mov edx, dword [esp + 0x14]
cmp edx, 4
setl al
shl eax, 0xe
or eax, dword [ecx*4 + 0x43aa58]
test edx, edx
jne 0x406129
or eax, 0x80000
lea ecx, [esp + 0x50]
push eax
push ecx
push 0x4065b0
mov esi, dword [esp + 0x18]
push esi
call fcn.00404b80
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x9c]
push 4
push 0
push 0
push eax
push dword [ebp + 0x10]
push esi
call fcn.004036e0
add esp, 0x18
cmp eax, 1
jne 0x406298
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
push dword [esp + 0xc]
mov eax, dword [ebp + 8]
push dword [eax + 0x34]
call dword [eax + 0x2c]
add esp, 8
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
mov esi, ecx
mov dword [esp + 0x14], eax
or ecx, eax
je 0x4063a8
mov dword [esp + 0x50], 0x8074b50
mov edx, dword [esp + 0x8c]
mov byte [esp + 0x54], dl
mov byte [esp + 0x55], dh
mov ecx, edx
shr ecx, 0x10
mov byte [esp + 0x56], cl
mov ecx, edx
shr ecx, 0x18
mov byte [esp + 0x57], cl
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
cmp dword [esp + 8], 0
je 0x4062b4
mov byte [esp + 0x58], cl
mov byte [esp + 0x59], ch
mov ebx, ecx
shr ebx, 0x10
mov byte [esp + 0x5a], bl
mov ebx, edx
shr ebx, 0x10
shr ecx, 0x18
mov byte [esp + 0x5b], cl
mov ecx, edx
shr ecx, 0x18
mov byte [esp + 0x5c], dl
mov byte [esp + 0x5d], dh
mov byte [esp + 0x5e], bl
mov byte [esp + 0x5f], cl
mov edx, esi
mov byte [esp + 0x60], dl
mov byte [esp + 0x61], dh
mov ecx, esi
shr ecx, 0x10
mov byte [esp + 0x62], cl
mov ecx, esi
shr ecx, 0x18
mov byte [esp + 0x63], cl
mov dword [esp + 0x28], 0x38
mov dword [esp + 0x98], 0x30
mov ecx, 0x28
mov dword [esp], 0x18
mov dword [esp + 0x2c], 0x17
mov eax, dword [esp + 0x14]
mov edx, eax
mov byte [esp + 0x1b], al
mov dword [esp + 0xc], 0x16
mov dword [esp + 0x94], 0x15
mov edi, 0x14
jmp 0x406310
push dword [esp + 0xc]
mov esi, dword [ebp + 8]
jmp 0x40602e
push dword [esp + 0xc]
mov esi, dword [ebp + 8]
push dword [esi + 0x34]
call dword [esi + 0x2c]
add esp, 8
mov dword [esi + 0x1c], 0xc
jmp 0x4059d5
test edx, edx
je 0x4062c7
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x1d
jmp 0x4059d5
mov dword [esp + 0x58], ecx
mov dword [esp + 0x28], 0x18
mov dword [esp + 0x98], 0x10
mov ecx, 8
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0xc], 0xe
mov edx, esi
mov byte [esp + 0x1b], dl
mov dword [esp + 0x94], 0xd
mov edi, 0xc
mov dword [esp], 0x10
mov edx, esi
mov ebx, dword [esp + 0x14]
shrd edx, ebx, cl
shr ebx, cl
movzx eax, byte [esp + 0x1b]
mov byte [esp + edi + 0x50], al
test cl, 0x20
jne 0x40632b
mov ebx, edx
mov edx, esi
mov ecx, dword [esp + 0x98]
mov eax, dword [esp + 0x14]
shrd edx, eax, cl
mov edi, dword [esp + 0x94]
mov byte [esp + edi + 0x50], bl
mov ebx, eax
shr ebx, cl
test cl, 0x20
jne 0x406351
mov ebx, edx
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x14]
shrd esi, eax, cl
mov edx, esi
mov esi, dword [esp + 0xc]
mov byte [esp + esi + 0x50], bl
shr eax, cl
test cl, 0x20
jne 0x40636f
mov eax, edx
mov ecx, dword [esp + 0x2c]
mov byte [esp + ecx + 0x50], al
lea eax, [esp + 0x50]
mov esi, dword [esp]
push esi
push eax
push dword [esp + 0xc]
push dword [esp + 0x1c]
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x4059d5
mov eax, dword [esp]
add dword [esp + 0x10], eax
adc dword [esp + 4], 0
cmp dword [esp + 8], 0
je 0x406407
xor edx, edx
mov eax, 0xfffffffe
cmp eax, dword [esp + 0x30]
mov eax, 0
sbb eax, dword [esp + 0x34]
jb 0x4063c9
xor eax, eax
jmp 0x4063cd
lea eax, [esp + 0x30]
mov ecx, 0xfffffffe
cmp ecx, dword [esp + 0x38]
mov ecx, 0
sbb ecx, dword [esp + 0x3c]
jb 0x4063e8
mov edi, 0
jmp 0x4063ec
lea edi, [esp + 0x40]
jae 0x4063f2
lea edx, [esp + 0x38]
lea ecx, [esp + 0xa0]
push eax
push edi
call fcn.00406540
add esp, 8
mov dword [esp + 0x24], eax
movzx ebx, word [esp + 0x90]
movzx esi, word [esp + 0x20]
movzx eax, word [esp + 0x24]
movzx edi, word [esp + 0x1c]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
push dword [ebp + 0x40]
push dword [ebp + 0x3c]
push dword [esp + 0x90]
push dword [esp + 0x40]
push dword [esp + 0x40]
push 0
push 0
push ebx
push esi
push dword [esp + 0xb0]
push dword [esp + 0x6c]
push dword [esp + 0x6c]
push dword [esp + 0x6c]
push dword [esp + 0x6c]
push dword [esp + 0x84]
push dword [ebp + 0x18]
push eax
push dword [esp + 0x4c]
push edi
call fcn.00406600
add esp, 0x4c
test eax, eax
je 0x4059d5
mov eax, dword [ebp + 8]
inc dword [eax + 0x10]
mov ecx, dword [esp + 0x10]
mov dword [eax], ecx
mov ecx, dword [esp + 4]
mov dword [eax + 4], ecx
mov eax, 1
jmp 0x4059d7