Function at 0x4b1900
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x5efcb0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x18]
cmp eax, dword [ecx + 8]
jbe 0x4b2059
sub esp, 0x98
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov ebx, dword [esp + 0xa8]
mov dword [esp + 0x2c], ebx
mov ebx, dword [esp + 0xa8]
test ebx, ebx
jl 0x4b1957
jmp 0x4b19d0
mov ebx, dword [esp + 0xa4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xa0]
inc esi
cmp ebx, esi
jae 0x4b1973
jmp 0x4b1975
jmp 0x4b19a5
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
jmp 0x4b19a5
lea edi, [esi + ebp - 1]
mov byte [edi], 0x2d
mov dword [esp + 0x9c], ebp
mov dword [esp + 0xa0], esi
mov dword [esp + 0xa4], ebx
mov ebx, dword [esp + 0xa8]
neg ebx
mov dword [esp + 0x2c], ebx
jmp 0x4b19d2
jmp 0x4b19d2
lea ebx, [0x5329bc]
mov dword [esp + 0x70], ebx
cmp dword [esp + 0xac], 2
sete bl
mov byte [esp + 0x27], bl
je 0x4b19ef
jmp 0x4b19fd
cmp dword [esp + 0x2c], 0x64
setb bl
mov byte [esp + 0x27], bl
jmp 0x4b19ff
jmp 0x4b19ff
movzx ebx, byte [esp + 0x27]
test bl, bl
jne 0x4b1a0d
jmp 0x4b1b01
jmp 0x4b1a0f
mov ecx, dword [esp + 0x2c]
mov eax, 0xcccccccd
mul ecx
shr edx, 3
mov dword [esp + 0x64], edx
mov ecx, dword [esp + 0x70]
mov ebx, dword [ecx]
mov dword [esp], edx
mov edx, ecx
call ebx
movzx ecx, byte [esp + 4]
mov byte [esp + 0x26], cl
mov ecx, dword [esp + 0x2c]
mov eax, 0xcccccccd
mul ecx
shr edx, 3
lea ebx, [edx + edx*4]
shl ebx, 1
sub ecx, ebx
mov dword [esp + 0x60], ecx
mov edx, dword [esp + 0x70]
mov ebx, dword [edx]
mov dword [esp], ecx
call ebx
movzx ecx, byte [esp + 4]
mov byte [esp + 0x25], cl
mov ecx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x9c]
mov ebp, dword [esp + 0xa0]
add ebp, 2
cmp ecx, ebp
jae 0x4b1a82
jmp 0x4b1a84
jmp 0x4b1ab4
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 2
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
jmp 0x4b1ab4
lea eax, [ebp + ebx - 2]
lea edx, [ebp + ebx - 1]
movzx esi, byte [esp + 0x26]
movzx edi, byte [esp + 0x25]
xchg esi, ebx
mov byte [eax], bl
xchg esi, ebx
xchg edi, eax
mov byte [edx], al
xchg edi, eax
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebp
mov dword [esp + 0x94], ecx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebp
mov dword [esp + 0xb8], ecx
add esp, 0x98
ret
cmp dword [esp + 0xac], 4
sete bl
mov byte [esp + 0x24], bl
je 0x4b1b14
jmp 0x4b1b25
cmp dword [esp + 0x2c], 0x2710
setb bl
mov byte [esp + 0x24], bl
jmp 0x4b1b27
jmp 0x4b1b27
movzx ebx, byte [esp + 0x24]
test bl, bl
jne 0x4b1b35
jmp 0x4b1cd3
jmp 0x4b1b37
mov ecx, dword [esp + 0x2c]
mov eax, 0x83126e98
mul ecx
shr edx, 9
mov dword [esp + 0x5c], edx
mov ecx, dword [esp + 0x70]
mov ebx, dword [ecx]
mov dword [esp], edx
mov edx, ecx
call ebx
movzx ecx, byte [esp + 4]
mov byte [esp + 0x25], cl
mov ecx, dword [esp + 0x2c]
shr ecx, 1
mov eax, 0xa3d70a3e
mul ecx
shr edx, 5
mov eax, 0xcccccccd
mov ecx, edx
mul edx
shr edx, 3
lea ebx, [edx + edx*4]
shl ebx, 1
sub ecx, ebx
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x70]
mov ebx, dword [edx]
mov dword [esp], ecx
call ebx
movzx ecx, byte [esp + 4]
mov byte [esp + 0x26], cl
mov ecx, dword [esp + 0x2c]
mov eax, 0xcccccccd
mul ecx
shr edx, 3
mov eax, 0xcccccccd
mov ecx, edx
mul edx
shr edx, 3
lea ebx, [edx + edx*4]
shl ebx, 1
sub ecx, ebx
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x70]
mov ebx, dword [edx]
mov dword [esp], ecx
call ebx
movzx ecx, byte [esp + 4]
mov byte [esp + 0x23], cl
mov ecx, dword [esp + 0x2c]
mov eax, 0xcccccccd
mul ecx
shr edx, 3
lea ebx, [edx + edx*4]
shl ebx, 1
sub ecx, ebx
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0x70]
mov ebx, dword [edx]
mov dword [esp], ecx
call ebx
movzx ecx, byte [esp + 4]
mov byte [esp + 0x22], cl
mov ecx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x9c]
mov ebp, dword [esp + 0xa0]
add ebp, 4
cmp ecx, ebp
jae 0x4b1c1e
jmp 0x4b1c20
jmp 0x4b1c50
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
jmp 0x4b1c50
mov dword [esp + 0x78], ebx
mov dword [esp + 0x44], ebp
mov dword [esp + 0x40], ecx
lea eax, [ebp + ebx - 4]
lea edx, [ebp + ebx - 3]
lea esi, [ebp + ebx - 2]
lea edi, [ebp + ebx - 1]
mov dword [esp + 0x74], edi
movzx ecx, byte [esp + 0x25]
movzx ebp, byte [esp + 0x26]
movzx ebx, byte [esp + 0x23]
movzx edi, byte [esp + 0x22]
mov byte [eax], cl
xchg ebp, eax
mov byte [edx], al
xchg ebp, eax
mov byte [esi], bl
mov eax, dword [esp + 0x74]
xchg edi, ebx
mov byte [eax], bl
xchg edi, ebx
mov eax, dword [esp + 0x78]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 0x94], edx
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], edx
add esp, 0x98
ret
jmp 0x4b1cd5
mov dword [esp + 0x38], 0
mov ebx, dword [esp + 0x2c]
test ebx, ebx
je 0x4b1ce7
jmp 0x4b1cf1
mov dword [esp + 0x38], 1
jmp 0x4b1cf3
jmp 0x4b1cf3
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x28], ebx
jmp 0x4b1cfd
mov ebx, dword [esp + 0x28]
test ebx, ebx
ja 0x4b1d07
jmp 0x4b1d21
inc dword [esp + 0x38]
jmp 0x4b1d0d
mov ebx, dword [esp + 0x28]
mov eax, 0xcccccccd
mul ebx
shr edx, 3
mov dword [esp + 0x28], edx
jmp 0x4b1cfd
mov ebx, dword [esp + 0xac]
sub ebx, dword [esp + 0x38]
mov dword [esp + 0x34], ebx
jmp 0x4b1d32
mov ebx, dword [esp + 0x34]
test ebx, ebx
jg 0x4b1d3c
jmp 0x4b1dae
mov ebx, dword [esp + 0xa4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xa0]
inc esi
cmp ebx, esi
jae 0x4b1d58
jmp 0x4b1d5a
jmp 0x4b1d8a
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
jmp 0x4b1d8a
lea edi, [esi + ebp - 1]
mov byte [edi], 0x30
mov dword [esp + 0x9c], ebp
mov dword [esp + 0xa0], esi
mov dword [esp + 0xa4], ebx
jmp 0x4b1da8
dec dword [esp + 0x34]
jmp 0x4b1d32
mov ebx, dword [esp + 0xa0]
mov dword [esp + 0x6c], ebx
mov ebp, dword [esp + 0xa4]
mov dword [esp + 0x68], ebp
mov esi, dword [esp + 0x38]
add ebx, esi
cmp ebp, ebx
jge 0x4b1dd0
jmp 0x4b1e04
mov ebx, dword [esp + 0xa0]
mov dword [esp + 0x68], ebx
mov ebp, dword [esp + 0x38]
lea ecx, [ebx + ebp]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0xa4]
cmp edx, ecx
jae 0x4b1df6
jmp 0x4b2053
jmp 0x4b1df8
mov dword [esp + 0xa0], ecx
jmp 0x4b1f39
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x38]
lea edx, [0x511660]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004711a0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x8c], edx
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], ecx
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], edx
mov dword [esp + 0x88], eax
mov ebx, dword [esp + 0x90]
add edx, ebx
mov dword [esp + 0x4c], edx
cmp eax, edx
jae 0x4b1e80
jmp 0x4b1e89
mov dword [esp + 0x84], edx
jmp 0x4b1ed1
mov ebx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], edx
jmp 0x4b1ed1
mov eax, dword [esp + 0x90]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x4c]
sub eax, dword [esp + 0x90]
add eax, dword [esp + 0x80]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x8c]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00476100
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], edx
jmp 0x4b1f39
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x6c], ecx
dec ecx
mov dword [esp + 0x3c], ecx
jmp 0x4b1f4b
cmp dword [esp + 0x2c], 0xa
setae cl
mov byte [esp + 0x24], cl
jae 0x4b1f5b
jmp 0x4b1f6a
mov ecx, dword [esp + 0x3c]
test ecx, ecx
setg cl
mov byte [esp + 0x24], cl
jmp 0x4b1f6c
jmp 0x4b1f6c
movzx ecx, byte [esp + 0x24]
test cl, cl
jne 0x4b1f77
jmp 0x4b1fde
mov ecx, dword [esp + 0x2c]
mov eax, 0xcccccccd
mul ecx
shr edx, 3
mov dword [esp + 0x30], edx
mov ecx, dword [esp + 0x70]
mov ebx, dword [ecx]
mov ebp, dword [esp + 0x2c]
lea esi, [edx + edx*4]
shl esi, 1
sub ebp, esi
mov dword [esp], ebp
mov edx, ecx
call ebx
movzx ecx, byte [esp + 4]
mov byte [esp + 0x22], cl
mov eax, dword [esp + 0x3c]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x9c]
cmp ebx, eax
ja 0x4b1fc5
jmp 0x4b204c
lea ebx, [ebp + eax]
mov byte [ebx], cl
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x2c], ecx
dec dword [esp + 0x3c]
jmp 0x4b1fd9
jmp 0x4b1f4b
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x70]
mov ecx, dword [edx]
mov dword [esp], eax
call ecx
movzx eax, byte [esp + 4]
mov byte [esp + 0x22], al
mov ecx, dword [esp + 0x3c]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x9c]
cmp ebx, ecx
ja 0x4b200e
jmp 0x4b2043
add ecx, ebp
mov byte [ecx], al
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0xa4]
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], edx
add esp, 0x98
ret
mov eax, ecx
mov ecx, ebx
call fcn.00475830
mov ecx, ebx
call fcn.00475830
call fcn.00475870
nop
call fcn.004743b0
jmp fcn.004b1900