Function at 0x424aa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x479820
mov eax, dword fs:[0]
push eax
sub esp, 0x298
mov eax, dword [0x4947a0]
xor eax, esp
mov dword [esp + 0x290], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4947a0]
xor eax, esp
push eax
lea eax, [esp + 0x2ac]
mov dword fs:[0], eax
mov eax, dword [esp + 0x2bc]
mov dword [esp + 0x54], eax
xor ebx, ebx
mov dword [esp + 0x2b4], ebx
mov esi, 0xf
mov dword [esp + 0x150], esi
mov dword [esp + 0x14c], ebx
mov byte [esp + 0x13c], bl
mov dword [esp + 0x1a4], esi
mov dword [esp + 0x1a0], ebx
mov byte [esp + 0x190], bl
mov byte [esp + 0x2b4], 2
push 1
push 0x483354
lea ecx, [esp + 0x124]
mov dword [esp + 0x13c], esi
mov dword [esp + 0x138], ebx
mov byte [esp + 0x128], bl
call fcn.00401bf0
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x2c8]
mov byte [esp + 0x2bc], 3
push ecx
lea ecx, [esp + 0x160]
mov dword [esp + 0x178], esi
mov dword [esp + 0x174], ebx
mov byte [esp + 0x164], bl
call fcn.00401910
push 0xffffffffffffffff
mov byte [esp + 0x2b8], 4
push ebx
lea edx, [esp + 0x2c8]
push edx
lea ecx, [esp + 0x17c]
mov dword [esp + 0x194], esi
mov dword [esp + 0x190], ebx
mov byte [esp + 0x180], bl
call fcn.00401910
mov byte [esp + 0x2b4], 5
mov eax, dword [esp + 0x120]
mov edi, 0x10
cmp dword [esp + 0x134], edi
jae 0x424bda
lea eax, [esp + 0x120]
mov ecx, dword [esp + 0x130]
push ecx
push eax
lea edx, [esp + 0x15c]
push edx
xor eax, eax
call fcn.004057e0
mov ebp, eax
cmp ebp, 0xffffffff
je 0x424e73
lea ecx, [ecx]
push ebp
xor ecx, ecx
lea esi, [esp + 0x1c8]
lea edx, [esp + 0x158]
call fcn.0040cf20
push 3
xor ecx, ecx
lea esi, [esp + 0x1ac]
lea edx, [esp + 0x1c8]
mov byte [esp + 0x2b8], 6
call fcn.0040cf20
mov esi, dword [eax + 0x14]
mov ecx, esi
cmp ecx, esi
jae 0x424c3e
mov ecx, esi
cmp esi, 3
jb 0x424c4a
mov ecx, 3
cmp dword [eax + 0x18], edi
jb 0x424c54
mov edx, dword [eax + 4]
jmp 0x424c57
lea edx, [eax + 4]
mov eax, ecx
mov ecx, 0x4846b8
call fcn.00401d10
cmp eax, ebx
jne 0x424c7b
cmp esi, 3
jae 0x424c71
or eax, 0xffffffff
jmp 0x424c79
xor eax, eax
cmp esi, 3
setne al
cmp eax, ebx
sete byte [esp + 0x1b]
mov byte [esp + 0x2b4], 6
cmp dword [esp + 0x1c0], edi
jb 0x424ca1
mov eax, dword [esp + 0x1ac]
push eax
call fcn.004396bc
add esp, 4
lea esi, [esp + 0x1a8]
lea edx, [esp + 0x1c4]
cmp byte [esp + 0x1b], bl
je 0x424cfb
push 0xffffffffffffffff
mov ecx, 3
call fcn.0040cf20
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x144]
mov byte [esp + 0x2c0], 8
call fcn.00401910
mov byte [esp + 0x2b4], 6
cmp dword [esp + 0x1c0], edi
jb 0x424dc9
mov ecx, dword [esp + 0x1ac]
push ecx
jmp 0x424dc1
push 3
xor ecx, ecx
call fcn.0040cf20
mov esi, dword [eax + 0x14]
mov ecx, esi
cmp ecx, esi
jae 0x424d0d
mov ecx, esi
cmp esi, 3
jb 0x424d19
mov ecx, 3
cmp dword [eax + 0x18], edi
jb 0x424d23
mov edx, dword [eax + 4]
jmp 0x424d26
lea edx, [eax + 4]
mov eax, ecx
mov ecx, 0x4846bc
call fcn.00401d10
cmp eax, ebx
jne 0x424d4a
cmp esi, 3
jae 0x424d40
or eax, 0xffffffff
jmp 0x424d48
xor eax, eax
cmp esi, 3
setne al
cmp eax, ebx
sete byte [esp + 0x1b]
mov byte [esp + 0x2b4], 6
cmp dword [esp + 0x1c0], edi
jb 0x424d70
mov edx, dword [esp + 0x1ac]
push edx
call fcn.004396bc
add esp, 4
cmp byte [esp + 0x1b], bl
je 0x424dc9
push 0xffffffffffffffff
mov ecx, 3
lea esi, [esp + 0x1ac]
lea edx, [esp + 0x1c8]
call fcn.0040cf20
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x198]
mov byte [esp + 0x2c0], 0xa
call fcn.00401910
mov byte [esp + 0x2b4], 6
cmp dword [esp + 0x1c0], edi
jb 0x424dc9
mov eax, dword [esp + 0x1ac]
push eax
call fcn.004396bc
add esp, 4
mov ecx, dword [esp + 0x130]
push 0xffffffffffffffff
add ecx, ebp
lea esi, [esp + 0x1ac]
lea edx, [esp + 0x158]
call fcn.0040cf20
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x160]
mov byte [esp + 0x2c0], 0xb
call fcn.00401910
cmp dword [esp + 0x1c0], edi
jb 0x424e18
mov edx, dword [esp + 0x1ac]
push edx
call fcn.004396bc
add esp, 4
mov eax, dword [esp + 0x120]
cmp dword [esp + 0x134], edi
jae 0x424e2f
lea eax, [esp + 0x120]
mov ecx, dword [esp + 0x130]
push ecx
push eax
lea edx, [esp + 0x15c]
push edx
xor eax, eax
call fcn.004057e0
mov byte [esp + 0x2b4], 5
mov ebp, eax
cmp dword [esp + 0x1dc], edi
jb 0x424e6a
mov eax, dword [esp + 0x1c8]
push eax
call fcn.004396bc
add esp, 4
cmp ebp, 0xffffffff
jne 0x424c00
mov dword [esp + 0x48], ebx
mov dword [esp + 0x24], ebx
mov ecx, dword [esp + 0x54]
push ecx
mov byte [esp + 0x2b8], 0xc
call fcn.004325d0
mov esi, eax
mov dword [esp + 0x58], esi
cmp esi, ebx
je 0x424e9f
mov edx, dword [esi]
mov eax, dword [edx + 4]
push esi
call eax
mov byte [esp + 0x2b4], 0xd
cmp esi, ebx
je 0x425984
mov eax, dword [esi]
mov edx, dword [eax]
lea ecx, [esp + 0x24]
push ecx
push 0x48238c
push esi
call edx
cmp eax, ebx
jl 0x425974
cmp dword [esp + 0x24], ebx
je 0x425974
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x2b4], 0xe
mov eax, dword [esi]
mov edx, dword [eax + 0x38]
lea ecx, [esp + 0x2c]
push ecx
push esi
call edx
cmp eax, ebx
mov eax, dword [esp + 0x2c]
jl 0x425833
cmp eax, ebx
je 0x425833
mov ecx, dword [eax]
lea edx, [esp + 0x48]
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
cmp eax, ebx
jge 0x424fa1
mov byte [esp + 0x2b4], 0xd
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x424f2c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [esp + 0x2b4], 0xc
mov eax, dword [esi]
mov ecx, dword [eax + 8]
push esi
call ecx
mov byte [esp + 0x2b4], 5
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x424f54
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
lea ecx, [esp + 0x170]
call fcn.00401df0
lea ecx, [esp + 0x154]
call fcn.00401df0
lea ecx, [esp + 0x11c]
call fcn.00401df0
lea ecx, [esp + 0x18c]
call fcn.00401df0
lea ecx, [esp + 0x138]
call fcn.00401df0
lea ecx, [esp + 0x2c0]
call fcn.00401df0
jmp 0x425aa0
cmp dword [esp + 0x48], ebx
mov dword [esp + 0x40], ebx
jle 0x4257e6
nop
mov dword [esp + 0x28], ebx
lea ecx, [esp + 0x5c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov ecx, dword [esp + 0x40]
mov edx, 3
mov word [esp + 0x7c], dx
mov dword [esp + 0x84], ecx
mov byte [esp + 0x2b4], 0x11
mov edi, dword [esp + 0x5c]
mov edx, dword [esp + 0x2c]
mov esi, dword [edx]
lea eax, [esp + 0x28]
push eax
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esp + 0x74]
mov dword [eax + 4], edi
mov edi, dword [esp + 0x78]
mov dword [eax + 8], edi
mov edi, dword [esp + 0x7c]
mov dword [eax + 0xc], edi
mov edi, dword [esp + 0x90]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esp + 0xa4]
mov dword [eax + 4], edi
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xac]
push edx
mov edx, dword [esi + 0x2c]
mov dword [eax + 0xc], ecx
call edx
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [esp + 0x7c]
push eax
call edi
lea ecx, [esp + 0x5c]
push ecx
mov byte [esp + 0x2b8], 0xf
call edi
cmp esi, ebx
jge 0x425075
mov byte [esp + 0x2b4], 0xe
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x4257d3
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x4257d3
mov ecx, dword [esp + 0x28]
xor eax, eax
mov dword [esp + 0x20], eax
cmp ecx, ebx
je 0x425098
mov edx, dword [ecx]
lea eax, [esp + 0x20]
push eax
push 0x484bb4
push ecx
mov ecx, dword [edx]
call ecx
mov eax, dword [esp + 0x20]
mov byte [esp + 0x2b4], 0x12
lea ecx, [esp + 0x4c]
mov dword [esp + 0x44], ebx
mov edx, dword [eax]
mov edx, dword [edx + 0x4c]
push ecx
push eax
call edx
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
lea edx, [esp + 0x50]
push edx
push eax
mov eax, dword [ecx + 0x20]
call eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push eax
mov eax, dword [ecx + 0x6c]
call eax
cmp eax, ebx
jge 0x425110
mov byte [esp + 0x2b4], 0xf
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x4250ef
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [esp + 0x2b4], 0xe
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x4257d3
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x4257d3
mov ebx, dword [esp + 0x4c]
lea esi, [esp + 0x218]
call fcn.0040eac0
mov byte [esp + 0x2b4], 0x13
mov ebx, dword [esp + 0x50]
lea esi, [esp + 0x1e0]
call fcn.0040eac0
mov byte [esp + 0x2b4], 0x14
mov eax, dword [esp + 0x4c]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push eax
call esi
mov ecx, dword [esp + 0x50]
push ecx
call esi
lea ebx, [esp + 0xcc]
lea edi, [esp + 0x218]
call fcn.0040ce40
lea ebx, [esp + 0xc4]
mov esi, eax
call fcn.0040ce90
lea ebx, [esp + 0xd4]
mov ebp, eax
call fcn.0040ce40
mov edx, dword [esi + 4]
mov ecx, dword [esi]
push edx
mov edx, dword [ebp + 4]
push ecx
mov ecx, dword [ebp]
push edx
mov edx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push edx
push eax
lea ecx, [esp + 0xfc]
push fcn.0045ea02
push ecx
call fcn.0040d9f0
add esp, 0x20
lea ebx, [esp + 0xf4]
lea edi, [esp + 0x1e0]
call fcn.0040ce40
lea ebx, [esp + 0x104]
mov esi, eax
call fcn.0040ce90
lea ebx, [esp + 0x114]
mov ebp, eax
call fcn.0040ce40
mov edx, dword [esi + 4]
mov ecx, dword [esi]
push edx
mov edx, dword [ebp + 4]
push ecx
mov ecx, dword [ebp]
push edx
mov edx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push edx
push eax
lea ecx, [esp + 0xd4]
push fcn.0045ea02
push ecx
call fcn.0040d9f0
add esp, 0x20
lea ebx, [esp + 0x10c]
lea edi, [esp + 0x138]
call fcn.0040ce40
lea ebx, [esp + 0xdc]
mov esi, eax
call fcn.0040ce90
lea ebx, [esp + 0xfc]
mov ebp, eax
call fcn.0040ce40
mov edx, dword [esi + 4]
mov ecx, dword [esi]
push edx
mov edx, dword [ebp + 4]
push ecx
mov ecx, dword [ebp]
push edx
mov edx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push edx
push eax
lea ecx, [esp + 0x104]
push fcn.0045ea02
push ecx
call fcn.0040d9f0
add esp, 0x20
cmp dword [esp + 0x14c], 0
jbe 0x42527e
mov eax, edi
lea edx, [esp + 0x218]
call fcn.0040d990
test al, al
jne 0x4252a7
cmp dword [esp + 0x1f4], 0
jbe 0x425789
lea eax, [esp + 0x138]
lea edx, [esp + 0x1e0]
call fcn.0040d990
test al, al
je 0x425789
lea edx, [esp + 0x1c4]
push edx
call fcn.0041ac00
sub esp, 0x1c
mov bl, 0x15
mov byte [esp + 0x2d0], bl
mov ecx, esp
mov dword [esp + 0x58], esp
push 0x4833bc
call fcn.00401cd0
lea eax, [esp + 0x1e0]
push eax
sub esp, 0x1c
mov byte [esp + 0x2f0], 0x16
mov ecx, esp
mov dword [esp + 0x70], esp
push 0x4846bc
call fcn.00401cd0
sub esp, 0x1c
mov byte [esp + 0x30c], 0x17
lea edx, [esp + 0x1c8]
mov ecx, esp
mov dword [esp + 0x88], esp
push edx
call fcn.00406900
mov byte [esp + 0x30c], bl
call fcn.004102a0
add esp, 0x58
cmp dword [esp + 0x44], 0
mov dword [esp + 0x3c], 0
jle 0x42577d
jmp 0x425340
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [esp + 0x1c], 0
lea eax, [esp + 0x8c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov ecx, 3
mov word [esp + 0x6c], cx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x74], ecx
mov byte [esp + 0x2b4], 0x1a
mov ebp, dword [esp + 0x8c]
mov edx, dword [esp + 0x20]
mov esi, dword [edx]
lea eax, [esp + 0x1c]
push eax
sub esp, 0x10
mov eax, esp
mov dword [eax], ebp
mov ebp, dword [esp + 0xa4]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0xa8]
mov dword [eax + 8], ebp
mov ebp, dword [esp + 0xac]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x80]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebp
mov ebp, dword [esp + 0x94]
mov dword [eax + 4], ebp
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x9c]
push edx
mov edx, dword [esi + 0x74]
mov dword [eax + 0xc], ecx
call edx
mov esi, eax
lea eax, [esp + 0x6c]
push eax
call edi
lea ecx, [esp + 0x8c]
push ecx
call edi
test esi, esi
jge 0x42540f
mov byte [esp + 0x2b4], bl
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x42576a
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x42576a
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x9c]
push ecx
call esi
lea edx, [esp + 0xac]
push edx
call esi
lea eax, [esp + 0x9c]
push eax
mov eax, 0x4846c0
lea esi, [esp + 0x20]
mov byte [esp + 0x2b8], 0x1c
call fcn.004391e0
test eax, eax
jge 0x42547f
lea ecx, [esp + 0xac]
push ecx
call edi
lea edx, [esp + 0x9c]
push edx
call edi
mov byte [esp + 0x2b4], bl
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x42576a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x42576a
lea eax, [esp + 0xac]
push eax
mov eax, str.type
lea esi, [esp + 0x20]
call fcn.004391e0
test eax, eax
jl 0x42544b
mov ebx, dword [esp + 0xb4]
lea esi, [esp + 0x288]
call fcn.0040eac0
mov byte [esp + 0x2b4], 0x1d
mov ebx, dword [esp + 0xa4]
lea esi, [esp + 0x26c]
call fcn.0040eac0
mov byte [esp + 0x2b4], 0x1e
mov ecx, dword [esp + 0x1d4]
sub ecx, dword [esp + 0x1d0]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
xor ebp, ebp
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x34], ebp
je 0x42571e
lea esp, [esp]
mov ecx, dword [esp + 0x34]
push ecx
lea eax, [esp + 0x1c8]
call fcn.004366a0
push eax
lea ecx, [esp + 0x200]
call fcn.00406900
push ebp
lea edx, [esp + 0x200]
push edx
mov edx, str..______l_o
mov byte [esp + 0x2bc], 0x1f
call fcn.00405640
mov edi, eax
push edi
xor ecx, ecx
lea esi, [esp + 0x1ac]
lea edx, [esp + 0x200]
call fcn.0040cf20
push 0xffffffffffffffff
lea ecx, [edi + 1]
lea esi, [esp + 0x238]
lea edx, [esp + 0x200]
mov byte [esp + 0x2b8], 0x20
call fcn.0040cf20
mov bl, 0x21
lea eax, [esp + 0x26c]
lea edx, [esp + 0x1a8]
mov byte [esp + 0x2b4], bl
call fcn.0040d990
test al, al
je 0x4256c0
mov dword [esp + 0x38], ebp
mov byte [esp + 0x2b4], 0x22
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x38]
push edx
mov dword [esp + 0x34], ebp
mov ecx, dword [eax]
push 0x48232c
push eax
mov eax, dword [ecx]
call eax
cmp eax, ebp
mov eax, dword [esp + 0x38]
jl 0x4256ad
cmp eax, ebp
je 0x4256ad
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
lea edx, [esp + 0x30]
push edx
push 0x48231c
push eax
mov eax, dword [ecx]
call eax
cmp eax, ebp
jl 0x4256a0
mov eax, dword [esp + 0x30]
cmp eax, ebp
je 0x4256a0
mov ecx, dword [eax]
mov edx, dword [ecx + 0x24]
push eax
call edx
cmp dword [esp + 0x2dc], ebp
jne 0x4256a0
mov eax, esi
push eax
lea ecx, [esp + 0x254]
call fcn.00406900
mov ebx, dword [esp + 0x54]
mov byte [esp + 0x2b4], 0x23
call fcn.004214e0
xor esi, esi
mov edx, eax
call fcn.00420800
mov eax, dword [esp + 0x30]
mov esi, eax
cmp dword [ebx + 0x270], eax
je 0x425667
test eax, eax
je 0x42564f
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x270]
test eax, eax
je 0x425661
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [ebx + 0x270], esi
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x258]
push eax
lea ecx, [ebx + 0x274]
call fcn.00401910
push 0
push ebx
push 0x4249c0
push 1
push 0xa
call dword [sym.imp.WINMM.dll_timeSetEvent]
lea ecx, [esp + 0x250]
call fcn.00401df0
xor ebp, ebp
mov bl, 0x21
mov byte [esp + 0x2b4], bl
mov eax, dword [esp + 0x38]
jmp 0x4256b4
mov byte [esp + 0x2b4], bl
cmp eax, ebp
je 0x4256c0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [esp + 0x234]
call fcn.00401df0
lea ecx, [esp + 0x1a8]
call fcn.00401df0
lea ecx, [esp + 0x1fc]
mov byte [esp + 0x2b4], 0x1e
call fcn.00401df0
mov ecx, dword [esp + 0x1d4]
sub ecx, dword [esp + 0x1d0]
mov esi, dword [esp + 0x34]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc esi
add eax, edx
mov dword [esp + 0x34], esi
cmp esi, eax
jb 0x425500
lea ecx, [esp + 0x26c]
call fcn.00401df0
lea ecx, [esp + 0x288]
call fcn.00401df0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0xac]
push ecx
call esi
lea edx, [esp + 0x9c]
push edx
call esi
mov byte [esp + 0x2b4], 0x15
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x425768
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov bl, 0x15
mov eax, dword [esp + 0x3c]
inc eax
cmp eax, dword [esp + 0x44]
mov dword [esp + 0x3c], eax
jl 0x425340
lea esi, [esp + 0x1c4]
call fcn.0041ac60
lea ecx, [esp + 0x1e0]
call fcn.00401df0
lea ecx, [esp + 0x218]
call fcn.00401df0
mov byte [esp + 0x2b4], 0xf
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4257b9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [esp + 0x2b4], 0xe
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4257d1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor ebx, ebx
mov eax, dword [esp + 0x40]
inc eax
cmp eax, dword [esp + 0x48]
mov dword [esp + 0x40], eax
jl 0x424fb0
mov byte [esp + 0x2b4], 0xd
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x4257fe
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [esp + 0x2b4], 0xc
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [esp + 0x2b4], 5
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x424f54
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x424f54
mov byte [esp + 0x2b4], 0xd
cmp eax, ebx
je 0x425847
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [esp + 0x2b4], 0xc
mov eax, dword [esi]
mov ecx, dword [eax + 8]
push esi
call ecx
mov byte [esp + 0x2b4], 5
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x42586f
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
cmp dword [esp + 0x188], edi
jb 0x425888
mov ecx, dword [esp + 0x174]
push ecx
call fcn.004396bc
add esp, 4
mov esi, 0xf
mov dword [esp + 0x188], esi
mov dword [esp + 0x184], ebx
mov byte [esp + 0x174], bl
cmp dword [esp + 0x16c], edi
jb 0x4258bb
mov edx, dword [esp + 0x158]
push edx
call fcn.004396bc
add esp, 4
mov dword [esp + 0x16c], esi
mov dword [esp + 0x168], ebx
mov byte [esp + 0x158], bl
cmp dword [esp + 0x134], edi
jb 0x4258e9
mov eax, dword [esp + 0x120]
push eax
call fcn.004396bc
add esp, 4
mov dword [esp + 0x134], esi
mov dword [esp + 0x130], ebx
mov byte [esp + 0x120], bl
cmp dword [esp + 0x1a4], edi
jb 0x425917
mov ecx, dword [esp + 0x190]
push ecx
call fcn.004396bc
add esp, 4
mov dword [esp + 0x1a4], esi
mov dword [esp + 0x1a0], ebx
mov byte [esp + 0x190], bl
cmp dword [esp + 0x150], edi
jb 0x425945
mov edx, dword [esp + 0x13c]
push edx
call fcn.004396bc
add esp, 4
mov dword [esp + 0x150], esi
mov dword [esp + 0x14c], ebx
mov byte [esp + 0x13c], bl
cmp dword [esp + 0x2d8], edi
jb 0x425aa0
mov eax, dword [esp + 0x2c4]
push eax
jmp 0x425a98
mov byte [esp + 0x2b4], 0xc
mov ecx, dword [esi]
mov edx, dword [ecx + 8]
push esi
call edx
mov byte [esp + 0x2b4], 5
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x42599c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [esp + 0x188], edi
jb 0x4259b5
mov eax, dword [esp + 0x174]
push eax
call fcn.004396bc
add esp, 4
mov esi, 0xf
mov byte [esp + 0x174], bl
mov dword [esp + 0x184], ebx
mov dword [esp + 0x188], esi
cmp dword [esp + 0x16c], edi
jb 0x4259e8
mov ecx, dword [esp + 0x158]
push ecx
call fcn.004396bc
add esp, 4
mov byte [esp + 0x158], bl
mov dword [esp + 0x168], ebx
mov dword [esp + 0x16c], esi
cmp dword [esp + 0x134], edi
jb 0x425a16
mov edx, dword [esp + 0x120]
push edx
call fcn.004396bc
add esp, 4
mov byte [esp + 0x120], bl
mov dword [esp + 0x130], ebx
mov dword [esp + 0x134], esi
cmp dword [esp + 0x1a4], edi
jb 0x425a44
mov eax, dword [esp + 0x190]
push eax
call fcn.004396bc
add esp, 4
mov byte [esp + 0x190], bl
mov dword [esp + 0x1a0], ebx
mov dword [esp + 0x1a4], esi
cmp dword [esp + 0x150], edi
jb 0x425a72
mov ecx, dword [esp + 0x13c]
push ecx
call fcn.004396bc
add esp, 4
mov byte [esp + 0x13c], bl
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x150], esi
cmp dword [esp + 0x2d8], edi
jb 0x425aa0
mov edx, dword [esp + 0x2c4]
push edx
call fcn.004396bc
add esp, 4
mov ecx, dword [esp + 0x2ac]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x290]
xor ecx, esp
call fcn.0045e1a6
add esp, 0x2a4
ret 0x24