Function at 0x4e0170
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x5efcb0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x44]
cmp eax, dword [ecx + 8]
jbe 0x4e0df7
sub esp, 0xc4
mov eax, dword [esp + 0xc8]
test byte [eax], al
movzx eax, byte [eax + 5]
test al, al
jne 0x4e01a1
jmp 0x4e01b6
mov eax, dword [esp + 0xc8]
test byte [eax], al
mov eax, dword [eax + 0x14]
mov dword [esp + 0xdc], eax
jmp 0x4e01b8
jmp 0x4e01b8
mov eax, dword [esp + 0xc8]
test byte [eax], al
add eax, 0x18
test byte [eax], al
jmp 0x4e01c8
jmp 0x4e01ca
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], 1
mov dword [esp + 0xc0], 0x44
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xd4]
movsd xmm0, qword [esp + 0xcc]
mov ebx, dword [esp + 0xd8]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 0x44
movsd qword [esp + 0xc], xmm0
mov byte [esp + 0x14], bl
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
call fcn.0048c500
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], edx
cmp ecx, 1
ja 0x4e0251
jmp 0x4e0dec
cmp byte [eax + 1], 0x2d
sete dl
mov byte [esp + 0x3b], dl
je 0x4e0260
jmp 0x4e0262
jmp 0x4e0281
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
cmp ecx, 1
ja 0x4e0274
jmp 0x4e0de2
cmp byte [edx + 1], 0x2b
sete dl
mov byte [esp + 0x3b], dl
jmp 0x4e0281
movzx edx, byte [esp + 0x3b]
test dl, dl
jne 0x4e028c
jmp 0x4e02c2
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x7c]
jmp 0x4e029a
cmp ecx, 1
jae 0x4e02a4
jmp 0x4e0dd8
dec ebx
lea ebp, [ecx - 1]
mov esi, ebx
neg ebx
sar ebx, 0x1f
and ebx, 1
add edx, ebx
mov dword [esp + 0x74], edx
mov dword [esp + 0x78], ebp
mov dword [esp + 0x7c], esi
jmp 0x4e02d8
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
test ecx, ecx
ja 0x4e02d3
jmp 0x4e0dd1
mov byte [edx], 0x2b
jmp 0x4e02d8
mov edx, dword [esp + 0xc8]
test byte [edx], al
movzx edx, byte [edx + 9]
mov byte [esp + 0x3a], dl
test dl, dl
jne 0x4e02ef
jmp 0x4e030c
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
test ecx, ecx
ja 0x4e0300
jmp 0x4e0dca
cmp byte [edx], 0x2b
sete dl
mov byte [esp + 0x3a], dl
jmp 0x4e030e
jmp 0x4e030e
movzx edx, byte [esp + 0x3a]
mov byte [esp + 0x3b], dl
test dl, dl
jne 0x4e031d
jmp 0x4e0333
mov edx, dword [esp + 0xc8]
test byte [edx], al
movzx edx, byte [edx + 7]
xor edx, 1
mov byte [esp + 0x3b], dl
jmp 0x4e0335
jmp 0x4e0335
movzx edx, byte [esp + 0x3b]
test dl, dl
jne 0x4e0340
jmp 0x4e0356
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
test ecx, ecx
ja 0x4e0351
jmp 0x4e0dc3
mov byte [edx], 0x20
jmp 0x4e0358
jmp 0x4e0358
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
cmp ecx, 1
ja 0x4e036a
jmp 0x4e0db9
cmp byte [edx + 1], 0x49
sete dl
mov byte [esp + 0x3a], dl
je 0x4e0379
jmp 0x4e037b
jmp 0x4e039a
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
cmp ecx, 1
ja 0x4e038d
jmp 0x4e0daf
cmp byte [edx + 1], 0x4e
sete dl
mov byte [esp + 0x3a], dl
jmp 0x4e039a
movzx edx, byte [esp + 0x3a]
test dl, dl
jne 0x4e03a8
jmp 0x4e04a8
mov edx, dword [esp + 0xc8]
test byte [edx], al
movzx edx, byte [edx + 0xa]
mov byte [esp + 0x35], dl
mov edx, dword [esp + 0xc8]
test byte [edx], al
mov byte [edx + 0xa], 0
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
cmp ecx, 1
ja 0x4e03d8
jmp 0x4e0da5
cmp byte [edx + 1], 0x4e
sete dl
mov byte [esp + 0x3b], dl
je 0x4e03e7
jmp 0x4e03fd
mov edx, dword [esp + 0xc8]
test byte [edx], al
movzx edx, byte [edx + 9]
xor edx, 1
mov byte [esp + 0x3b], dl
jmp 0x4e03ff
jmp 0x4e03ff
movzx edx, byte [esp + 0x3b]
mov byte [esp + 0x3a], dl
test dl, dl
jne 0x4e040e
jmp 0x4e0424
mov edx, dword [esp + 0xc8]
test byte [edx], al
movzx edx, byte [edx + 7]
xor edx, 1
mov byte [esp + 0x3a], dl
jmp 0x4e0426
jmp 0x4e0426
movzx edx, byte [esp + 0x3a]
test dl, dl
jne 0x4e0431
jmp 0x4e0467
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x7c]
jmp 0x4e043f
cmp ecx, 1
jae 0x4e0449
jmp 0x4e0d9b
lea eax, [ebx - 1]
dec ecx
mov ebx, eax
neg eax
sar eax, 0x1f
and eax, 1
add eax, edx
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], ebx
jmp 0x4e0469
jmp 0x4e0469
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0xc8]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004de2c0
mov eax, dword [esp + 0xc8]
test byte [eax], al
movzx ecx, byte [esp + 0x35]
mov byte [eax + 0xa], cl
add esp, 0xc4
ret
mov edx, dword [esp + 0xc8]
test byte [edx], al
movzx edx, byte [edx + 8]
mov byte [esp + 0x3b], dl
test dl, dl
jne 0x4e04bf
jmp 0x4e04d0
cmp dword [esp + 0xd8], 0x62
setne dl
mov byte [esp + 0x3b], dl
jmp 0x4e04d2
jmp 0x4e04d2
movzx edx, byte [esp + 0x3b]
test dl, dl
jne 0x4e04e0
jmp 0x4e058c
mov dword [esp + 0x40], 0
mov edx, dword [esp + 0xd8]
mov dword [esp + 0x60], edx
cmp edx, 0x67
jle 0x4e04fa
jmp 0x4e0510
cmp edx, 0x47
je 0x4e0501
jmp 0x4e0503
jmp 0x4e0522
cmp edx, 0x67
je 0x4e050a
jmp 0x4e050c
jmp 0x4e0522
jmp 0x4e050e
jmp 0x4e0546
cmp edx, 0x76
je 0x4e0517
jmp 0x4e0519
jmp 0x4e0522
cmp edx, 0x78
je 0x4e0520
jmp 0x4e0542
jmp 0x4e0522
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x40], edx
cmp edx, 0xffffffff
je 0x4e0534
jmp 0x4e053e
mov dword [esp + 0x40], 6
jmp 0x4e0540
jmp 0x4e0540
jmp 0x4e0548
jmp 0x4e0544
jmp 0x4e0546
jmp 0x4e0548
mov dword [esp + 0x2e], 0
mov word [esp + 0x32], 0
lea edx, [esp + 0x2e]
test byte [edx], al
jmp 0x4e055f
jmp 0x4e0561
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 6
mov byte [esp + 0x36], 0
mov byte [esp + 0x34], 0
mov dword [esp + 0x3c], 1
jmp 0x4e07f4
jmp 0x4e058e
mov edx, dword [esp + 0xc8]
test byte [edx], al
movzx edx, byte [edx + 7]
mov byte [esp + 0x3b], dl
test dl, dl
jne 0x4e05a5
jmp 0x4e05a7
jmp 0x4e05c4
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
test ecx, ecx
ja 0x4e05b8
jmp 0x4e07ed
cmp byte [edx], 0x2b
setne dl
mov byte [esp + 0x3b], dl
jmp 0x4e05c4
movzx edx, byte [esp + 0x3b]
test dl, dl
jne 0x4e05d2
jmp 0x4e0776
mov edx, dword [esp + 0xc8]
test byte [edx], al
movzx edx, byte [edx + 0xa]
mov byte [esp + 0x39], dl
test dl, dl
jne 0x4e05e9
jmp 0x4e05ff
mov edx, dword [esp + 0xc8]
test byte [edx], al
movzx edx, byte [edx + 6]
xor edx, 1
mov byte [esp + 0x39], dl
jmp 0x4e0601
jmp 0x4e0601
movzx edx, byte [esp + 0x39]
mov byte [esp + 0x3a], dl
test dl, dl
jne 0x4e0610
jmp 0x4e0623
mov edx, dword [esp + 0xc8]
test byte [edx], al
movzx edx, byte [edx + 4]
mov byte [esp + 0x3a], dl
jmp 0x4e0625
jmp 0x4e0625
movzx edx, byte [esp + 0x3a]
mov byte [esp + 0x3b], dl
test dl, dl
jne 0x4e0634
jmp 0x4e0651
mov edx, dword [esp + 0x78]
mov dword [esp + 0x64], edx
mov ebx, dword [esp + 0xc8]
test byte [ebx], al
cmp dword [ebx + 0x10], edx
setg dl
mov byte [esp + 0x3b], dl
jmp 0x4e0653
jmp 0x4e0653
movzx edx, byte [esp + 0x3b]
test dl, dl
jne 0x4e0661
jmp 0x4e0748
mov edx, dword [esp + 0xc8]
test byte [edx], al
mov edx, dword [edx]
mov dword [esp + 0x84], edx
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
test ecx, ecx
ja 0x4e0684
jmp 0x4e07e6
movzx eax, byte [edx]
mov byte [esp + 0x37], al
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov byte [esp + 4], al
call fcn.004e1030
mov eax, dword [esp + 0x78]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0xc8]
test byte [ecx], al
mov ecx, dword [ecx + 0x10]
sub ecx, eax
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004de070
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x7c]
jmp 0x4e06d9
cmp ecx, 1
jae 0x4e06e3
jmp 0x4e07dc
dec edx
dec ecx
mov ebx, edx
neg edx
sar edx, 0x1f
and edx, 1
add eax, edx
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], ebx
mov eax, dword [esp + 0xc8]
test byte [eax], al
mov eax, dword [eax]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xbc]
mov ebx, dword [esp + 0xc0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.004e0e10
add esp, 0xc4
ret
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0xc8]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004de2c0
add esp, 0xc4
ret
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x7c]
jmp 0x4e0784
cmp ecx, 1
jae 0x4e078b
jmp 0x4e07d2
lea eax, [ebx - 1]
dec ecx
mov ebx, eax
neg eax
sar eax, 0x1f
and eax, 1
add eax, edx
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], ebx
mov edx, dword [esp + 0xc8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
call fcn.004de2c0
add esp, 0xc4
ret
mov eax, 1
call fcn.00475890
mov eax, 1
call fcn.00475890
xor eax, eax
call fcn.00475830
xor eax, eax
call fcn.00475830
mov edx, dword [esp + 0x78]
mov dword [esp + 0x64], edx
cmp dword [esp + 0x3c], edx
jl 0x4e0807
jmp 0x4e0b78
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
cmp ecx, eax
ja 0x4e081c
jmp 0x4e0d96
add edx, eax
movzx edx, byte [edx]
mov byte [esp + 0x38], dl
cmp dl, 0x45
jbe 0x4e082c
jmp 0x4e084f
cmp dl, 0x2e
je 0x4e0833
jmp 0x4e083f
jmp 0x4e0835
mov byte [esp + 0x36], 1
jmp 0x4e0b6d
cmp dl, 0x45
je 0x4e0846
jmp 0x4e0848
jmp 0x4e0867
jmp 0x4e084a
jmp 0x4e0b2f
cmp dl, 0x50
je 0x4e0856
jmp 0x4e085b
jmp 0x4e09ec
cmp dl, 0x65
je 0x4e0865
jmp 0x4e09e0
jmp 0x4e0867
cmp dword [esp + 0xd8], 0x78
setne dl
mov byte [esp + 0x3b], dl
jne 0x4e087a
jmp 0x4e088b
cmp dword [esp + 0xd8], 0x58
setne dl
mov byte [esp + 0x3b], dl
jmp 0x4e088d
jmp 0x4e088d
movzx edx, byte [esp + 0x3b]
test dl, dl
jne 0x4e089b
jmp 0x4e09db
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x7c]
jmp 0x4e08ad
cmp eax, ecx
jbe 0x4e08b6
jmp 0x4e0d91
sub ebx, eax
sub ecx, eax
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and eax, ebx
add eax, edx
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], ebp
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], edx
mov dword [esp + 0xa4], eax
mov ebx, dword [esp + 0xbc]
add edx, ebx
mov dword [esp + 0x54], edx
cmp eax, edx
jae 0x4e090e
jmp 0x4e0917
mov dword [esp + 0xa0], edx
jmp 0x4e095f
mov ebx, dword [esp + 0xbc]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], edx
jmp 0x4e095f
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x54]
sub eax, dword [esp + 0xbc]
add eax, dword [esp + 0x9c]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0xb8]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00476100
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], edx
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x7c]
cmp ecx, edx
jbe 0x4e09d0
jmp 0x4e0d8c
jmp 0x4e09d2
mov dword [esp + 0x78], ecx
jmp 0x4e0b6d
jmp 0x4e0b31
cmp dl, 0x70
je 0x4e09ea
jmp 0x4e0b29
jmp 0x4e09ec
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x7c]
jmp 0x4e09fe
cmp ecx, eax
jae 0x4e0a07
jmp 0x4e0d87
sub ebx, eax
sub ecx, eax
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and eax, ebx
add eax, edx
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], ebp
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], edx
mov dword [esp + 0xb4], eax
mov ebx, dword [esp + 0xbc]
add edx, ebx
mov dword [esp + 0x5c], edx
cmp eax, edx
jae 0x4e0a5f
jmp 0x4e0a68
mov dword [esp + 0xb0], edx
jmp 0x4e0ab0
mov ebx, dword [esp + 0xbc]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], edx
jmp 0x4e0ab0
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x5c]
sub eax, dword [esp + 0xbc]
add eax, dword [esp + 0xac]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0xb8]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00476100
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], edx
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x7c]
cmp ecx, edx
jbe 0x4e0b21
jmp 0x4e0d82
jmp 0x4e0b23
mov dword [esp + 0x78], ecx
jmp 0x4e0b6d
jmp 0x4e0b2b
jmp 0x4e0b2d
jmp 0x4e0b2f
jmp 0x4e0b31
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
cmp eax, ecx
jb 0x4e0b46
jmp 0x4e0d7d
add edx, eax
cmp byte [edx], 0x30
jne 0x4e0b4f
jmp 0x4e0b56
mov byte [esp + 0x34], 1
jmp 0x4e0b58
jmp 0x4e0b58
movzx edx, byte [esp + 0x34]
test dl, dl
jne 0x4e0b63
jmp 0x4e0b69
dec dword [esp + 0x40]
jmp 0x4e0b6b
jmp 0x4e0b6b
jmp 0x4e0b6d
jmp 0x4e0b6f
inc dword [esp + 0x3c]
jmp 0x4e07f4
movzx edx, byte [esp + 0x36]
test dl, dl
jne 0x4e0b83
jmp 0x4e0b88
jmp 0x4e0c2c
mov edx, dword [esp + 0x78]
mov dword [esp + 0x64], edx
cmp edx, 2
sete dl
mov byte [esp + 0x3b], dl
je 0x4e0b9e
jmp 0x4e0bbd
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
cmp ecx, 1
ja 0x4e0bb0
jmp 0x4e0d73
cmp byte [edx + 1], 0x30
sete al
mov byte [esp + 0x3b], al
jmp 0x4e0bbf
jmp 0x4e0bbf
movzx eax, byte [esp + 0x3b]
test al, al
jne 0x4e0bca
jmp 0x4e0bd0
dec dword [esp + 0x40]
jmp 0x4e0bd2
jmp 0x4e0bd2
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
inc edx
cmp eax, edx
jae 0x4e0be5
jmp 0x4e0be7
jmp 0x4e0c17
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
jmp 0x4e0c17
lea ebx, [edx + ecx - 1]
mov byte [ebx], 0x2e
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], edx
mov dword [esp + 0x7c], eax
jmp 0x4e0c2c
jmp 0x4e0c2e
mov eax, dword [esp + 0x40]
test eax, eax
jg 0x4e0c38
jmp 0x4e0c98
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
inc edx
cmp eax, edx
jae 0x4e0c4b
jmp 0x4e0c4d
jmp 0x4e0c7d
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
jmp 0x4e0c7d
lea ebx, [edx + ecx - 1]
mov byte [ebx], 0x30
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], edx
mov dword [esp + 0x7c], eax
dec dword [esp + 0x40]
jmp 0x4e0c96
jmp 0x4e0c2e
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], eax
mov ebx, dword [esp + 0x6c]
add edx, ebx
mov dword [esp + 0x4c], edx
cmp eax, edx
jae 0x4e0cc9
jmp 0x4e0cd2
mov dword [esp + 0x90], edx
jmp 0x4e0d17
mov ebx, dword [esp + 0x6c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], ecx
mov dword [esp + 0x94], edx
jmp 0x4e0d17
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x4c]
sub eax, dword [esp + 0x6c]
add eax, dword [esp + 0x8c]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00476100
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x94]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], edx
jmp 0x4e058e
mov eax, 1
call fcn.00475830
call fcn.00475830
call fcn.00475870
call fcn.00475890
call fcn.00475870
call fcn.00475890
call fcn.00475830
mov eax, 1
call fcn.00475890
mov eax, 1
call fcn.00475830
mov eax, 1
call fcn.00475830
mov eax, 1
call fcn.00475830
xor eax, eax
call fcn.00475830
xor eax, eax
call fcn.00475830
xor eax, eax
call fcn.00475830
mov eax, 1
call fcn.00475890
mov eax, 1
call fcn.00475830
mov eax, 1
call fcn.00475830
nop
call fcn.004743b0
jmp fcn.004e0170