Function at 0x4ffae0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x104]
cmp eax, dword [ecx + 8]
jbe 0x5008c2
sub esp, 0x184
mov eax, dword [esp + 0x190]
test eax, eax
jle 0x500895
mov ecx, dword [esp + 0x19c]
test ecx, ecx
jle 0x500883
mov edx, dword [esp + 0x188]
lea ebx, [edx + eax*4 - 4]
mov ebp, dword [esp + 0x194]
lea esi, [ebp + ecx*4 - 4]
cmp ebx, esi
jne 0x50083f
xor eax, eax
xor edx, edx
xor ebx, ebx
mov esi, dword [esp + 0x1b0]
cmp esi, 1
jne 0x500833
mov edi, dword [esp + 0x1ac]
cmp dword [edi], 1
je 0x500813
mov edi, dword [esp + 0x1a4]
test edi, edi
je 0x5007bf
cmp edi, 1
jne 0x5007b3
mov edi, dword [esp + 0x1a0]
cmp dword [edi], 1
jne 0x4ffb91
test esi, esi
jne 0x500736
test esi, esi
je 0x4ffb9d
cmp eax, esi
jl 0x5006a3
nop
mov ebx, dword [esp + 0x198]
cmp eax, ebx
jl 0x500604
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x198]
cmp ebx, eax
jle 0x5005fd
mov dword [esp + 0x48], ebx
mov dword [esp + 0x158], edx
cmp edx, ebp
je 0x4ffbe2
mov dword [esp], edx
mov dword [esp + 4], ebp
shl eax, 2
mov dword [esp + 8], eax
call fcn.0045aa60
mov eax, dword [esp + 0x194]
mov dword [esp], eax
mov ecx, dword [esp + 0x198]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x19c]
mov dword [esp + 8], edx
mov ebx, dword [0x759a10]
mov ebp, dword [0x759a14]
mov esi, dword [0x759a18]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
call fcn.004fad10
mov eax, dword [esp + 0x18]
test eax, eax
jle 0x5005ea
mov edx, dword [esp + 0x1a4]
cmp edx, 1
jle 0x5005de
mov ebx, dword [esp + 0x1b0]
test ebx, ebx
jg 0x50049f
mov ebp, dword [esp + 0x1a0]
mov esi, dword [ebp + edx*4 - 4]
nop
nop
cmp esi, 0x10000
jb 0x500496
mov edi, esi
shr esi, 0x10
mov eax, 0x10
cmp esi, 0x100
jb 0x50048d
shr esi, 8
mov ecx, ebp
lea ebp, [eax + 8]
cmp esi, 0x100
jae 0x5008b5
mov eax, ebx
lea ebx, [0x683bc0]
movzx ebx, byte [ebx + esi]
lea ebx, [ebx + ebp - 0x20]
neg ebx
lea ebp, [ebx + 1]
cmp ebp, 0x20
sbb esi, esi
mov ecx, ebp
shl edi, cl
and edi, esi
add ebx, 0xffffffe1
neg ebx
mov dword [esp + 0x5c], ebx
xor ecx, ecx
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x48]
mov ebp, dword [esp + 0x158]
mov dword [esp + 0x15c], ebp
xor ebp, ebp
mov dword [esp + 0x54], ebp
xor esi, esi
mov dword [esp + 0x58], esi
xor ecx, ecx
mov dword [esp + 0x180], ecx
xor ecx, ecx
mov dword [esp + 0x68], ecx
xor ecx, ecx
mov dword [esp + 0x64], ecx
xor ecx, ecx
mov dword [esp + 0x160], ecx
xor ecx, ecx
mov dword [esp + 0xb4], ecx
xor ecx, ecx
mov dword [esp + 0xb0], ecx
xor ecx, ecx
mov dword [esp + 0x17c], ecx
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x48]
xor ecx, ecx
jmp 0x4ffd98
mov ebp, dword [esp + 0x78]
inc ebp
shl ebx, 1
mov dword [esp + 0x15c], eax
mov dword [esp + 0x54], edi
mov dword [esp + 0x58], esi
mov dword [esp + 0x150], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xb4], eax
mov dword [esp + 0x148], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0x140], edx
mov edx, dword [esp + 0x164]
mov dword [esp + 0x17c], edx
mov eax, dword [esp + 0x1b0]
mov edx, dword [esp + 0x1a4]
mov ecx, ebp
mov edi, ebx
mov ebp, dword [esp + 0x140]
mov esi, dword [esp + 0x148]
mov ebx, dword [esp + 0x5c]
cmp ebx, ecx
jle 0x500022
mov dword [esp + 0xac], ebp
mov dword [esp + 0xa8], esi
mov dword [esp + 0x78], ecx
mov dword [esp + 0x60], edi
mov eax, dword [esp + 0x180]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ebp
call fcn.004fce30
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x60]
test ebx, 0x80000000
jne 0x4fff7d
mov ebp, dword [esp + 0x1b0]
test ebp, ebp
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xa8]
jne 0x4ffe8c
mov dword [esp + 0x138], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 0x180], eax
mov dword [esp + 0x130], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x128], edx
mov edx, dword [esp + 0xb4]
mov dword [esp + 0x6c], edx
mov dword [esp + 0x120], ebx
mov ebx, dword [esp + 0x17c]
mov dword [esp + 0x164], ebx
mov eax, dword [esp + 0x138]
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x128]
mov ebx, dword [esp + 0x120]
jmp 0x4ffd25
mov dword [esp + 0xa4], edx
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x178], eax
mov ebx, dword [esp + 0x15c]
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov ebx, dword [esp + 0x160]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov ebx, dword [esp + 0x1ac]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1b4]
mov dword [esp + 0x2c], esi
call fcn.004fd800
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0xb4]
mov edi, dword [esp + 0x17c]
mov dword [esp + 0x180], edi
mov edi, dword [esp + 0xa4]
mov dword [esp + 0x68], edi
mov edi, dword [esp + 0xa0]
mov dword [esp + 0x64], edi
mov edi, dword [esp + 0x178]
mov dword [esp + 0x160], edi
mov dword [esp + 0x70], edx
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x164], eax
mov edx, esi
mov ecx, ebp
mov eax, ebx
mov edi, dword [esp + 0xb4]
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x1b0]
mov esi, dword [esp + 0xb0]
jmp 0x4ffd25
mov dword [esp + 0x9c], edx
mov dword [esp + 0x98], ecx
mov dword [esp + 0x174], eax
mov ebx, dword [esp + 0x15c]
mov dword [esp], ebx
mov ebx, dword [esp + 0xa8]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xac]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x194]
mov dword [esp + 0x18], ebx
mov ebp, dword [esp + 0x198]
mov dword [esp + 0x1c], ebp
mov esi, dword [esp + 0x19c]
mov dword [esp + 0x20], esi
call fcn.004fbe40
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x1b0]
test ebp, ebp
mov ebx, dword [esp + 0x60]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0x98]
mov ebx, dword [esp + 0x174]
mov dword [esp + 0x15c], ebx
mov ebx, dword [esp + 0x60]
jmp 0x4ffe1b
lea ebx, [edx - 2]
mov edi, dword [esp + 0x1a0]
mov ecx, dword [esp + 0x17c]
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 0x188], eax
mov dword [esp + 0x110], ecx
mov ecx, dword [esp + 0x180]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x108], edx
mov edx, dword [esp + 0xb4]
mov dword [esp + 0x6c], edx
mov dword [esp + 0x100], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 0x70], ebx
mov ecx, dword [esp + 0x110]
mov eax, dword [esp + 0x118]
mov edx, dword [esp + 0x108]
mov ebx, dword [esp + 0x100]
jmp 0x5003e2
mov ebp, dword [esp + 0x74]
inc ebp
shl ebx, 1
mov dword [esp + 0x74], ebp
mov ebp, edx
mov dword [esp + 0x180], eax
mov dword [esp + 0x58], esi
mov dword [esp + 0x54], edi
mov edi, ebx
mov edx, dword [esp + 0x70]
mov dword [esp + 0xb4], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 0xb0], edx
mov eax, dword [esp + 0x1b0]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [esp + 0x7c]
mov esi, ecx
mov ecx, dword [esp + 0x164]
mov edx, dword [esp + 0x74]
cmp edx, 0x20
jge 0x50037c
mov dword [esp + 0x170], ecx
mov dword [esp + 0x94], esi
mov dword [esp + 0x90], ebp
mov dword [esp + 0x60], edi
mov eax, dword [esp + 0x15c]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x180]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ebp
call fcn.004fce30
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x60]
test ebx, 0x80000000
jne 0x5002d7
mov ebp, dword [esp + 0x1b0]
test ebp, ebp
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x94]
mov esi, dword [esp + 0x180]
mov dword [esp + 0x15c], esi
mov esi, dword [esp + 0x90]
jne 0x5001e6
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x70], eax
mov dword [esp + 0xc0], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0xb8], edx
mov edx, dword [esp + 0x170]
mov dword [esp + 0x164], edx
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0xb8]
jmp 0x5000a2
mov dword [esp + 0x8c], edx
mov dword [esp + 0x88], ecx
mov dword [esp + 0x16c], eax
mov ebx, dword [esp + 0x15c]
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov ebx, dword [esp + 0x160]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov ebx, dword [esp + 0x1ac]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1b4]
mov dword [esp + 0x2c], esi
call fcn.004fd800
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0xb0]
mov edi, dword [esp + 0x170]
mov dword [esp + 0x15c], edi
mov edi, dword [esp + 0x8c]
mov dword [esp + 0x68], edi
mov edi, dword [esp + 0x88]
mov dword [esp + 0x64], edi
mov edi, dword [esp + 0x16c]
mov dword [esp + 0x160], edi
mov dword [esp + 0x70], edx
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x164], eax
mov edx, esi
mov ecx, ebp
mov eax, ebx
mov edi, dword [esp + 0xb0]
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x1b0]
mov esi, dword [esp + 0xb4]
jmp 0x5000a2
mov dword [esp + 0x84], edx
mov dword [esp + 0x80], ecx
mov dword [esp + 0x168], eax
mov ebx, dword [esp + 0x180]
mov dword [esp], ebx
mov ebx, dword [esp + 0x94]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x90]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x194]
mov dword [esp + 0x18], ebx
mov ebp, dword [esp + 0x198]
mov dword [esp + 0x1c], ebp
mov esi, dword [esp + 0x19c]
mov dword [esp + 0x20], esi
call fcn.004fbe40
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x1b0]
test ebp, ebp
mov ebx, dword [esp + 0x60]
mov esi, dword [esp + 0x84]
mov edi, dword [esp + 0x80]
mov ebx, dword [esp + 0x168]
mov dword [esp + 0x15c], ebx
mov ebx, dword [esp + 0x60]
jmp 0x500191
dec ebx
mov edx, dword [esp + 0x1a0]
mov edi, dword [esp + 0x1a4]
mov edx, edi
mov edi, dword [esp + 0x1a0]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x180]
mov dword [esp + 0x188], eax
mov dword [esp + 0xf0], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0xe8], edi
mov edi, dword [esp + 0xb4]
mov dword [esp + 0x70], edi
mov ecx, dword [esp + 0xf0]
mov eax, dword [esp + 0xf8]
mov edi, dword [esp + 0x1a0]
test ebx, ebx
jl 0x50044e
cmp ebx, edx
jae 0x5008ac
mov dword [esp + 0x7c], ebx
mov edi, dword [edi + ebx*4]
mov dword [esp + 0xe0], eax
xor eax, eax
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x188]
mov dword [esp + 0x180], eax
mov dword [esp + 0xd8], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xd0], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 0xb0], edx
mov ecx, dword [esp + 0xd8]
mov eax, dword [esp + 0xe0]
mov edx, dword [esp + 0xd0]
jmp 0x5000f1
mov eax, dword [esp + 0x188]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.004fa8a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
mov dword [esp + 0x1c0], edx
add esp, 0x184
ret
mov ecx, ebp
mov ebp, eax
jmp 0x4ffc87
mov edi, esi
xor eax, eax
jmp 0x4ffc73
mov eax, dword [esp + 0x1ac]
mov ecx, dword [eax]
test ecx, 1
je 0x500549
mov ecx, dword [esp + 0x158]
mov dword [esp], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x50]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x194]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x198]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x19c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ebx
mov eax, dword [esp + 0x1b4]
mov dword [esp + 0x2c], eax
call fcn.00501290
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
mov dword [esp + 0x1c0], edx
add esp, 0x184
ret
mov ecx, dword [esp + 0x158]
mov dword [esp], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x50]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x194]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x198]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x19c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ebx
mov eax, dword [esp + 0x1b4]
mov dword [esp + 0x2c], eax
call fcn.005008d0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
mov dword [esp + 0x1c0], edx
add esp, 0x184
ret
mov ebx, dword [esp + 0x1b0]
jmp 0x4ffc50
mov edx, dword [esp + 0x1a4]
mov ebx, dword [esp + 0x1b0]
jmp 0x4ffc50
mov eax, ebx
jmp 0x4ffbc0
cmp ebx, 1
jne 0x500656
lea eax, [0x5507c0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00441b50
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x19c]
mov ebp, dword [esp + 0x194]
mov esi, dword [esp + 0x1b0]
mov edi, dword [esp + 0x1a0]
mov ebx, 1
mov eax, 1
jmp 0x4ffbad
lea eax, [0x5507c0]
mov dword [esp], eax
mov dword [esp + 4], ebx
lea eax, [ebx + 4]
mov dword [esp + 0x50], eax
mov dword [esp + 8], eax
call fcn.00441b50
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x19c]
mov ebp, dword [esp + 0x194]
mov esi, dword [esp + 0x1b0]
mov edi, dword [esp + 0x1a0]
mov ebx, dword [esp + 0x198]
mov eax, dword [esp + 0x50]
jmp 0x4ffbad
cmp esi, 1
jne 0x5006f0
lea eax, [0x5507c0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00441b50
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x19c]
mov ebp, dword [esp + 0x194]
mov esi, dword [esp + 0x1b0]
mov edi, dword [esp + 0x1a0]
mov eax, 1
jmp 0x4ffb9d
lea eax, [0x5507c0]
mov dword [esp], eax
mov dword [esp + 4], esi
lea ecx, [esi + 4]
mov dword [esp + 0x4c], ecx
mov dword [esp + 8], ecx
call fcn.00441b50
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x19c]
mov ebp, dword [esp + 0x194]
mov esi, dword [esp + 0x1b0]
mov edi, dword [esp + 0x1a0]
mov eax, dword [esp + 0x4c]
jmp 0x4ffb9d
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebp
mov eax, dword [esp + 0x198]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x1ac]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], esi
mov eax, dword [esp + 0x1b4]
mov dword [esp + 0x2c], eax
call fcn.004fd800
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
mov dword [esp + 0x1c0], edx
add esp, 0x184
ret
mov edi, dword [esp + 0x1a0]
jmp 0x4ffb91
cmp eax, 1
jl 0x5007ea
mov dword [edx], 1
mov dword [esp + 0x1b8], edx
mov dword [esp + 0x1bc], 1
mov dword [esp + 0x1c0], eax
add esp, 0x184
ret
lea eax, [0x5507c0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00441b50
mov edx, dword [esp + 0xc]
mov eax, 1
jmp 0x5007c4
mov dword [esp + 0x1b8], edx
mov dword [esp + 0x1bc], 0
mov dword [esp + 0x1c0], eax
add esp, 0x184
ret
mov edi, dword [esp + 0x1ac]
jmp 0x4ffb65
test eax, eax
jle 0x50087a
mov ebx, dword [esp + 0x1a8]
test ebx, ebx
jle 0x500871
lea esi, [edx + eax*4 - 4]
mov edi, dword [esp + 0x1a0]
lea ebx, [edi + ebx*4 - 4]
cmp esi, ebx
je 0x4ffb3f
mov ebx, dword [esp + 0x18c]
jmp 0x4ffb45
mov edi, dword [esp + 0x1a0]
jmp 0x500865
mov edi, dword [esp + 0x1a0]
jmp 0x500865
test eax, eax
mov edx, dword [esp + 0x188]
mov ebp, dword [esp + 0x194]
jmp 0x500841
mov ecx, dword [esp + 0x19c]
mov edx, dword [esp + 0x188]
mov ebp, dword [esp + 0x194]
jmp 0x500841
mov eax, ebx
mov ecx, edx
call fcn.0045a170
mov eax, esi
mov ecx, 0x100
call fcn.0045a180
nop
call fcn.00458ba0
jmp fcn.004ffae0