Function at 0x420310
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5ac867
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x69e298]
xor eax, esp
push eax
lea eax, [esp + 0x50]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x60]
lea edi, [esi + 0x10]
xor ebx, ebx
mov ecx, edi
mov dword [esi], vtable.SceneADV::Impl.0
mov dword [esi + 8], eax
mov dword [esi + 0xc], ebx
call fcn.0041bbc0
lea ecx, [esi + 0xc0]
mov dword [esp + 0x58], ebx
call fcn.004177e0
fldz
mov dword [esi + 0xe8], ebx
fstp qword [esi + 0xe0]
mov dword [esi + 0xec], ebx
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x64]
lea ecx, [esi + 0xf0]
push eax
mov byte [esp + 0x60], 2
call fcn.004c1970
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x64]
lea ecx, [esi + 0x110]
push eax
mov byte [esp + 0x60], 3
call fcn.00417ad0
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x64]
lea ecx, [esi + 0x130]
push eax
mov byte [esp + 0x60], 4
call fcn.00417ad0
mov dword [esi + 0x150], ebx
mov dword [esi + 0x154], ebx
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x64]
lea ecx, [esi + 0x160]
push eax
mov byte [esp + 0x60], 6
call fcn.00417b60
lea ecx, [esi + 0x180]
mov byte [esp + 0x58], 7
call fcn.0040a0f0
lea ecx, [esi + 0x2a0]
mov byte [esp + 0x58], 8
call fcn.00417710
lea ecx, [esi + 0x2bc]
mov byte [esp + 0x58], 9
call fcn.0040fe30
lea ecx, [esi + 0x2d8]
mov byte [esp + 0x58], 0xa
mov dword [esi + 0x2d0], ebx
call fcn.004b0fb0
lea ecx, [esi + 0x358]
mov byte [esp + 0x58], 0xb
call fcn.004e5100
lea ecx, [esi + 0x370]
mov byte [esp + 0x58], 0xc
call fcn.0041fc10
lea ecx, [esi + 0x630]
mov byte [esp + 0x58], 0xd
call fcn.0041fe40
lea ecx, [esi + 0x1528]
mov byte [esp + 0x58], 0xe
call fcn.0041fff0
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x64]
lea ecx, [esi + 0x16e0]
push eax
mov byte [esp + 0x60], 0xf
call fcn.00417b60
lea ecx, [esi + 0x1700]
mov byte [esp + 0x58], 0x10
call fcn.0041a650
fld1
mov al, 1
mov byte [esi + 0x1728], al
mov byte [esi + 0x172c], al
mov byte [esi + 0x1729], bl
mov byte [esi + 0x172a], bl
mov byte [esi + 0x172b], bl
mov byte [esi + 0x172d], bl
mov byte [esi + 0x172e], bl
mov byte [esi + 0x172f], bl
mov byte [esi + 0x1730], bl
mov byte [esi + 0x1731], bl
mov dword [esi + 0x1734], ebx
mov dword [esi + 0x1738], ebx
mov byte [esi + 0x173c], bl
lea edx, [esp + 0x60]
mov dword [esi + 0x1748], ebx
mov dword [esi + 0x174c], ebx
fstp dword [esi + 0x1754]
push edx
lea eax, [esp + 0x64]
lea ecx, [esi + 0x175c]
push eax
mov byte [esp + 0x60], 0x11
mov dword [esi + 0x1750], 0xffffffff
mov byte [esi + 0x1758], bl
call fcn.00417bf0
mov ebp, dword [str.main]
mov eax, ebp
mov byte [esp + 0x58], 0x12
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x1c], bl
lea ecx, [eax + 1]
mov edi, edi
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x420550
sub eax, ecx
push eax
push ebp
lea ecx, [esp + 0x20]
call fcn.00401db0
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x38]
push edx
mov byte [esp + 0x60], 0x13
call fcn.00495c50
add esp, 8
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
mov byte [esp + 0x64], 0x14
call fcn.00406e60
cmp dword [esp + 0x4c], 4
jb 0x42059f
mov eax, dword [esp + 0x38]
push eax
call fcn.0058984a
add esp, 4
cmp dword [esp + 0x30], 0x10
mov dword [esp + 0x4c], 3
mov dword [esp + 0x48], ebx
mov dword [esp + 0x38], ebx
jb 0x4205c3
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.0058984a
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x48
ret 4