Function at 0x405d20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xc8
mov esi, dword [ebp + 0x24]
mov ebx, dword [ebp + 0x28]
mov edx, dword [ebp + 8]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], esi
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov eax, dword [ebp + 0x20]
mov edi, 6
test eax, eax
js 0x405d73
mov edi, eax
mov eax, esi
or eax, ebx
je 0x405e2f
mov ax, 8
test edi, 0x10000
jne 0x405d91
movzx eax, ax
or eax, 0x800
mov dword [esp + 0x94], eax
mov eax, edi
xor eax, 0xfffffff0
mov ecx, edi
or ecx, 0xf
and ecx, eax
mov dword [esp + 0x18], ecx
sete al
mov ecx, dword [edx + 0x48]
mov dword [esp + 4], ecx
test ecx, ecx
je 0x405e96
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x14], 2
jne 0x405e96
cmp dword [ebp + 0x14], 0
setne cl
cmp dword [ebp + 0x10], 0
sete dl
cmp dword [ebp + 0xc], 0
je 0x405e96
and dl, cl
jne 0x405e96
cmp word [ebp + 0x1c], 0
setne cl
cmp dword [ebp + 0x18], 0
sete dl
test dl, cl
jne 0x405e96
cmp dword [esp + 0x18], 0xb
jae 0x405e96
mov ecx, dword [esp + 4]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov dword [esp + 0x24], ecx
test ecx, ecx
je 0x405e5f
cmp edx, 0xffffffff
jne 0x405e86
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 2
jmp 0x405ea0
cmp dword [ebp + 0x14], 0
je 0x405e4c
mov eax, edi
xor eax, 0xfffffbff
mov ecx, edi
or ecx, 0x400
test ecx, eax
je 0x405d7d
xor eax, eax
test edi, 0x10000
jne 0x405d91
jmp 0x405d89
test ebx, ebx
jne 0x405e73
mov dword [esp + 0x24], 0
cmp edx, 0xffff
jne 0x405e86
mov ecx, dword [esp + 4]
mov dword [ecx + 0x34], 1
mov dword [esp + 0x24], 1
mov ecx, esi
or ecx, ebx
je 0x405eaa
mov ecx, edi
and ecx, 0x400
jne 0x405eaa
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x18
xor eax, eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp + 0xc]
cmp byte [ecx], 0x2f
je 0x405f29
mov ecx, edi
shr ecx, 0xa
and ecx, 1
or cl, al
mov dword [esp + 0x20], ecx
test edi, 0x400
jne 0x405f0d
mov esi, dword [ebp + 0x14]
push esi
push dword [ebp + 0x10]
push 0
call fcn.00403b30
add esp, 0xc
mov dword [esp + 0x98], eax
xor ebx, ebx
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], 0
mov ecx, 0
cmp esi, 4
setb al
jb 0x405eff
mov ecx, dword [esp + 0x18]
or al, byte [esp + 0x20]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], eax
jmp 0x405f17
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x98], eax
push dword [ebp + 0xc]
call fcn.00409040
add esp, 4
cmp eax, 0x10000
jb 0x405f38
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x19
jmp 0x405ea0
mov dword [esp + 0x2c], eax
movzx eax, word [ebp + 0x1c]
mov dword [esp + 0x90], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x20]
mov eax, dword [ecx + 0x24]
or eax, edx
je 0x405f65
lea eax, [edx - 1]
mov ecx, dword [ecx]
and ecx, eax
sub edx, ecx
and edx, eax
mov dword [esp + 0x14], edx
jmp 0x405f6d
mov dword [esp + 0x14], 0
mov eax, dword [esp + 4]
mov eax, dword [eax + 4]
xor ecx, ecx
mov dword [esp + 0x28], eax
add eax, 0x2e
setb cl
mov edx, eax
and edx, dword [esp + 0x2c]
mov dword [esp + 8], edx
shr dword [esp + 8], 0x1f
add edx, edx
xor eax, dword [esp + 0x2c]
add eax, dword [esp + 0x90]
adc ecx, 0xffffffff
add eax, edx
adc ecx, dword [esp + 8]
add eax, 0x1d
adc ecx, 0
cmp eax, 1
sbb ecx, 0xffffffff
jae 0x405fc2
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0xf
jmp 0x405ea0
mov ecx, dword [esp + 0x24]
test ecx, ecx
mov eax, dword [ebp + 8]
jne 0x40605c
mov ecx, dword [eax + 4]
mov eax, dword [eax]
add eax, dword [esp + 0x14]
adc ecx, 0
mov dword [esp + 0x24], ecx
lea ecx, [eax + eax]
and ecx, 0x3c
mov dword [esp + 8], ecx
xor eax, 0x1e
mov dword [esp + 0x44], eax
mov edx, dword [esp + 0x2c]
mov eax, edx
shr eax, 0x1f
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x90]
add ecx, dword [ebp + 0x38]
mov eax, 0xffffffff
adc eax, 0
add ecx, dword [ebp + 0x40]
adc eax, 0
add edx, edx
add ecx, edx
adc eax, dword [esp + 0x8c]
add ecx, dword [esp + 0x28]
adc eax, 0
add ecx, dword [esp + 0x44]
adc eax, dword [esp + 0x24]
add ecx, dword [esp + 8]
mov edx, 0xffffffff
adc eax, 0
add ecx, 0x54
adc eax, 0
xor ecx, ecx
cmp eax, edx
jae 0x40605c
mov ecx, dword [esp + 4]
mov dword [ecx + 0x34], 1
mov ecx, 1
mov edx, dword [esp + 0x2c]
test edx, edx
je 0x406095
mov dword [esp + 0x24], 0
mov eax, ecx
mov ecx, dword [ebp + 0xc]
cmp byte [edx + ecx - 1], 0x2f
mov ecx, eax
jne 0x40609d
cmp dword [ebp + 0x14], 0
jne 0x405e96
mov dword [esp + 0x24], 0x10
or esi, ebx
je 0x40609d
jmp 0x405e96
mov dword [esp + 0x24], 0
test ecx, ecx
je 0x4060a6
mov ecx, 0x1c
mov eax, dword [esp + 0x90]
add eax, edx
mov edx, dword [esp + 0x28]
add edx, eax
lea eax, [ecx + edx]
add eax, 0x2e
mov ebx, dword [esp + 4]
mov edx, dword [ebx + 8]
cmp edx, eax
mov esi, dword [esp + 0x14]
jae 0x406104
mov ecx, 1
test edx, edx
je 0x4060d5
mov ecx, edx
mov esi, ecx
add ecx, ecx
cmp esi, eax
jb 0x4060d5
push esi
push dword [ebx + 0xc]
push dword [ebx]
mov ebx, dword [ebp + 8]
push dword [ebx + 0x34]
call dword [ebx + 0x30]
add esp, 0x10
test eax, eax
je 0x40626d
mov ebx, dword [esp + 4]
mov dword [ebx], eax
mov dword [ebx + 8], esi
mov esi, dword [esp + 0x14]
mov eax, dword [ebx + 0x14]
mov edx, dword [ebx + 0x18]
inc eax
cmp edx, eax
jae 0x40614b
mov ecx, 1
test edx, edx
je 0x40611a
mov ecx, edx
mov esi, ecx
add ecx, ecx
cmp esi, eax
jb 0x40611a
push esi
push dword [ebx + 0x1c]
push dword [ebx + 0x10]
mov ebx, dword [ebp + 8]
push dword [ebx + 0x34]
call dword [ebx + 0x30]
add esp, 0x10
test eax, eax
je 0x40626d
mov ecx, dword [esp + 4]
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x18], esi
mov esi, dword [esp + 0x14]
xor edx, edx
cmp dword [ebp + 0x14], 0
mov ecx, dword [ebp + 8]
je 0x40617e
mov eax, dword [esp + 0x20]
xor al, 1
je 0x40617e
push 0x4df40
push 1
push dword [ecx + 0x34]
mov eax, dword [ebp + 8]
call dword [eax + 0x28]
mov ecx, dword [ebp + 8]
add esp, 0xc
mov edx, eax
test eax, eax
je 0x4062c3
mov dword [esp + 8], edx
mov ebx, dword [esp + 0xc]
mov edx, ebx
push esi
mov dword [esp + 0x18], esi
mov esi, dword [esp + 0x14]
push esi
call fcn.00406990
add esp, 8
test eax, eax
je 0x406279
test edi, 0x400
sete dl
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
mov eax, dword [esp + 0x14]
add edi, eax
adc ecx, 0
mov dword [esp + 0x30], edi
add ebx, eax
adc esi, 0
mov dword [esp + 0x10], esi
mov dword [esp + 0x34], ecx
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov word [esp + 0x88], 0
and dl, byte [esp + 0x20]
mov byte [esp + 0x28], dl
xor dl, 1
movzx edx, dl
shl edx, 3
mov dword [esp + 0x14], edx
mov eax, dword [esp + 4]
cmp dword [eax + 0x34], 0
je 0x40628e
mov dword [esp + 0xc], ebx
mov eax, 0xfffffffe
mov ebx, dword [esp + 0x38]
mov esi, dword [esp + 0x3c]
cmp eax, ebx
mov edx, 0
sbb edx, esi
jb 0x4062cf
cmp eax, edi
mov edx, 0
sbb edx, ecx
jb 0x4062cf
mov dword [esp + 4], 0
xor eax, eax
mov ebx, dword [ebp + 0x38]
jmp 0x406328
mov dword [ebx + 0x1c], 0x10
jmp 0x405ea0
push dword [esp + 8]
mov eax, dword [ebp + 8]
push dword [eax + 0x34]
call dword [eax + 0x2c]
add esp, 8
jmp 0x405ea0
cmp dword [esp + 0x4c], 0
mov eax, dword [esp + 0x10]
jne 0x4067ac
test eax, eax
jne 0x4067ac
mov dword [esp + 0x6c], 0x4034b50
cmp byte [esp + 0x28], 0
mov dword [esp + 0xc], ebx
jne 0x406438
mov dl, 0x14
jmp 0x40643a
mov dword [ecx + 0x1c], 0x10
jmp 0x405ea0
mov edx, 0xfffffffe
cmp eax, edi
mov eax, 0
sbb eax, ecx
jb 0x4062e3
xor eax, eax
jmp 0x4062e7
lea eax, [esp + 0x30]
cmp edx, ebx
mov ecx, 0
sbb ecx, esi
jb 0x4062f9
mov esi, 0
jmp 0x4062fd
lea esi, [esp + 0x48]
mov ebx, dword [ebp + 0x38]
mov edx, 0
jae 0x40630b
lea edx, [esp + 0x38]
lea ecx, [esp + 0xa8]
mov dword [esp + 4], ecx
push eax
push esi
call fcn.00406a40
add esp, 8
mov edi, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x44], eax
lea edx, [eax + ebx]
mov dword [esp + 0x6c], 0x4034b50
cmp byte [esp + 0x28], 0
jne 0x406342
mov bl, 0x14
jmp 0x406344
xor ebx, ebx
mov byte [esp + 0x70], bl
mov byte [esp + 0x71], 0
movzx ebx, word [esp + 0x94]
mov byte [esp + 0x72], bl
mov byte [esp + 0x73], bh
mov ebx, dword [esp + 0x14]
mov byte [esp + 0x74], bl
mov dword [esp + 0x75], 0
mov dword [esp + 0x79], 0
mov dword [esp + 0x7d], 0
mov dword [esp + 0x81], 0
mov byte [esp + 0x85], 0
mov ebx, dword [esp + 0x2c]
mov byte [esp + 0x86], bl
mov byte [esp + 0x87], bh
mov byte [esp + 0x88], dl
mov byte [esp + 0x89], dh
lea edx, [esp + 0x6c]
push 0x1e
push edx
push ecx
push edi
mov esi, dword [ebp + 8]
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, 0x1e
jne 0x4065a4
mov edi, dword [esp + 0xc]
add edi, 0x1e
mov eax, esi
mov esi, dword [esp + 0x10]
adc esi, 0
push ebx
push dword [ebp + 0xc]
push esi
push edi
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, ebx
jne 0x406594
add edi, ebx
adc esi, 0
cmp dword [esp + 4], 0
mov ecx, esi
je 0x406504
lea eax, [esp + 0xa8]
mov esi, dword [esp + 0x44]
push esi
push eax
push ecx
push edi
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
mov ebx, ecx
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x40653a
add edi, esi
adc ebx, 0
mov ecx, ebx
jmp 0x40650c
xor edx, edx
mov byte [esp + 0x70], dl
mov edx, dword [esp + 0x94]
movzx eax, dx
mov byte [esp + 0x72], dl
mov byte [esp + 0x73], ah
mov edx, dword [esp + 0x14]
mov byte [esp + 0x74], dl
mov dword [esp + 0x75], 0
mov dword [esp + 0x79], 0
mov dword [esp + 0x7d], 0
mov dword [esp + 0x81], 0
mov byte [esp + 0x85], 0
mov ebx, dword [esp + 0x2c]
mov byte [esp + 0x86], bl
mov byte [esp + 0x87], bh
mov eax, dword [ebp + 0x38]
mov byte [esp + 0x88], al
mov byte [esp + 0x89], ah
lea edx, [esp + 0x6c]
push 0x1e
push edx
push ecx
push edi
mov esi, dword [ebp + 8]
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, 0x1e
jne 0x4065a4
mov edi, dword [esp + 0xc]
add edi, 0x1e
mov eax, esi
mov esi, dword [esp + 0x10]
adc esi, 0
push ebx
push dword [ebp + 0xc]
push esi
push edi
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, ebx
jne 0x406594
add edi, ebx
adc esi, 0
mov dword [esp + 4], 0
mov dword [esp + 0x44], 0
mov ecx, esi
jmp 0x40650c
mov dword [esp + 4], 0
mov esi, dword [ebp + 0x38]
test esi, esi
je 0x406549
push esi
push dword [ebp + 0x34]
push ecx
push edi
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
mov ebx, ecx
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x40653a
add edi, esi
mov dword [esp + 0xc], edi
adc ebx, 0
mov dword [esp + 0x10], ebx
jmp 0x406551
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x13
jmp 0x405ea0
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], edi
cmp byte [esp + 0x20], 0
je 0x4065b0
mov esi, dword [ebp + 0x14]
push esi
push dword [ebp + 0x10]
push dword [esp + 0x18]
push dword [esp + 0x18]
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x406594
mov eax, dword [ebp + 0x14]
add dword [esp + 0xc], eax
adc dword [esp + 0x10], 0
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], 0
jmp 0x40668d
push dword [esp + 8]
mov esi, dword [ebp + 8]
push dword [esi + 0x34]
call dword [esi + 0x2c]
add esp, 8
mov dword [esi + 0x1c], 0x13
jmp 0x405ea0
cmp dword [ebp + 0x14], 0
je 0x40668d
mov ecx, dword [esp + 0x18]
mov eax, ecx
cmp ecx, 0xa
jl 0x4065ca
mov eax, 0xa
cmp dword [esp + 0x18], 0
jns 0x4065d6
mov eax, 6
mov ecx, dword [ebp + 8]
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x58], ecx
mov ecx, dword [eax*4 + 0x43d978]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x5c], eax
xor eax, eax
mov edx, dword [esp + 0x18]
cmp edx, 4
setl al
shl eax, 0xe
or eax, ecx
mov dword [esp + 0x64], 0
mov dword [esp + 0x60], 0
test edx, edx
jne 0x406628
not ecx
or ecx, 0xfff7ffff
add eax, ecx
add eax, 0x80001
lea ecx, [esp + 0x50]
push eax
push ecx
push 0x405eb0
mov esi, dword [esp + 0x14]
push esi
call fcn.00405080
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xa4], eax
lea eax, [esp + 0xa4]
push 4
push 0
push 0
push eax
push dword [ebp + 0x10]
push esi
call fcn.00403bf0
add esp, 0x18
cmp eax, 1
jne 0x40678c
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x10], eax
push dword [esp + 8]
mov eax, dword [ebp + 8]
push dword [eax + 0x34]
call dword [eax + 0x2c]
add esp, 8
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
mov esi, ecx
mov dword [esp + 0x18], eax
or ecx, eax
je 0x4068a5
mov dword [esp + 0x50], 0x8074b50
mov edx, dword [esp + 0x98]
mov byte [esp + 0x54], dl
mov byte [esp + 0x55], dh
mov ecx, edx
shr ecx, 0x10
mov byte [esp + 0x56], cl
mov ecx, edx
shr ecx, 0x18
mov byte [esp + 0x57], cl
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
cmp dword [esp + 4], 0
je 0x4067a8
mov byte [esp + 0x58], cl
mov byte [esp + 0x59], ch
mov ebx, ecx
shr ebx, 0x10
mov byte [esp + 0x5a], bl
mov ebx, edx
shr ebx, 0x10
shr ecx, 0x18
mov byte [esp + 0x5b], cl
mov ecx, edx
shr ecx, 0x18
mov byte [esp + 0x5c], dl
mov byte [esp + 0x5d], dh
mov byte [esp + 0x5e], bl
mov byte [esp + 0x5f], cl
mov edx, esi
mov byte [esp + 0x60], dl
mov byte [esp + 0x61], dh
mov ecx, esi
shr ecx, 0x10
mov byte [esp + 0x62], cl
mov ecx, esi
shr ecx, 0x18
mov byte [esp + 0x63], cl
mov dword [esp + 0x28], 0x38
mov dword [esp + 0xa0], 0x30
mov ecx, 0x28
mov dword [esp + 0x20], 0x18
mov dword [esp + 8], 0x17
mov eax, dword [esp + 0x18]
mov edx, eax
mov byte [esp + 0x1f], al
mov dword [esp + 0x8c], 0x16
mov dword [esp + 0x9c], 0x15
mov edi, 0x14
jmp 0x406808
push dword [esp + 8]
mov esi, dword [ebp + 8]
push dword [esi + 0x34]
call dword [esi + 0x2c]
add esp, 8
mov dword [esi + 0x1c], 0xc
jmp 0x405ea0
test edx, edx
je 0x4067bb
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x1d
jmp 0x405ea0
mov dword [esp + 0x58], ecx
mov dword [esp + 0x28], 0x18
mov dword [esp + 0xa0], 0x10
mov ecx, 8
mov dword [esp + 8], 0xf
mov dword [esp + 0x8c], 0xe
mov edx, esi
mov byte [esp + 0x1f], dl
mov dword [esp + 0x9c], 0xd
mov edi, 0xc
mov dword [esp + 0x20], 0x10
mov edx, esi
mov ebx, dword [esp + 0x18]
shrd edx, ebx, cl
shr ebx, cl
movzx eax, byte [esp + 0x1f]
mov byte [esp + edi + 0x50], al
test cl, 0x20
jne 0x406823
mov ebx, edx
mov edx, esi
mov ecx, dword [esp + 0xa0]
mov eax, dword [esp + 0x18]
shrd edx, eax, cl
mov edi, dword [esp + 0x9c]
mov byte [esp + edi + 0x50], bl
mov ebx, eax
shr ebx, cl
test cl, 0x20
jne 0x406849
mov ebx, edx
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x18]
shrd esi, eax, cl
mov edx, esi
mov esi, dword [esp + 0x8c]
mov byte [esp + esi + 0x50], bl
shr eax, cl
test cl, 0x20
jne 0x40686a
mov eax, edx
mov ecx, dword [esp + 8]
mov byte [esp + ecx + 0x50], al
lea eax, [esp + 0x50]
mov esi, dword [esp + 0x20]
push esi
push eax
push dword [esp + 0x18]
push dword [esp + 0x18]
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x405ea0
mov eax, dword [esp + 0x20]
add dword [esp + 0xc], eax
adc dword [esp + 0x10], 0
cmp dword [esp + 4], 0
je 0x4068ff
xor edx, edx
mov ecx, 0xfffffffe
cmp ecx, dword [esp + 0x30]
mov eax, 0
sbb eax, dword [esp + 0x34]
jb 0x4068c6
xor eax, eax
jmp 0x4068ca
lea eax, [esp + 0x30]
cmp ecx, dword [esp + 0x38]
mov ecx, 0
sbb ecx, dword [esp + 0x3c]
jb 0x4068e0
mov edi, 0
jmp 0x4068e4
lea edi, [esp + 0x48]
jae 0x4068ea
lea edx, [esp + 0x38]
lea ecx, [esp + 0xa8]
push eax
push edi
call fcn.00406a40
add esp, 8
mov dword [esp + 0x44], eax
movzx ebx, word [esp + 0x94]
movzx esi, word [esp + 0x14]
movzx eax, word [esp + 0x44]
movzx edi, word [esp + 0x2c]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
push dword [ebp + 0x40]
push dword [ebp + 0x3c]
push dword [esp + 0x2c]
push dword [esp + 0x40]
push dword [esp + 0x40]
push 0
push ebx
push esi
push dword [esp + 0xb8]
push dword [esp + 0x70]
push dword [esp + 0x70]
push dword [esp + 0x68]
push dword [esp + 0x68]
push dword [esp + 0xc4]
push dword [ebp + 0x18]
push eax
push dword [esp + 0x44]
push edi
call fcn.00406b00
add esp, 0x48
test eax, eax
je 0x405ea0
mov eax, dword [ebp + 8]
inc dword [eax + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [eax], ecx
mov ecx, dword [esp + 0x10]
mov dword [eax + 4], ecx
mov eax, 1
jmp 0x405ea2