Function at 0x496990
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc4]
cmp eax, dword [ecx + 8]
jbe 0x49755d
sub esp, 0x144
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 0
mov eax, dword [esp + 0x14c]
test eax, eax
je 0x496da0
mov ecx, dword [esp + 0x15c]
test ecx, ecx
jne 0x4969ff
lea ecx, [0x8e7360]
mov edx, dword [ecx + 0x20]
test edx, edx
jne 0x496a0c
lea edx, [0x8e73a0]
mov ebx, dword [ecx + 0x18]
cmp ebx, 3
jg 0x496d64
jl 0x496d28
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xcc], edx
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx]
test ebx, ebx
jne 0x496a3e
mov ebx, dword [esp + 0x148]
jmp 0x496a77
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x148]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.00496550
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
jne 0x496cf8
mov eax, ebp
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00497770
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test ecx, ecx
je 0x496a9b
xor edx, edx
jmp 0x496aa7
test ebx, ebx
jbe 0x497553
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], eax
test ecx, ecx
jne 0x496cd6
mov dword [esp + 0xc8], edx
mov eax, dword [esp + 0xcc]
mov ecx, dword [eax + 8]
mov ebx, dword [eax + 4]
test ecx, ecx
jne 0x496b10
mov eax, dword [esp + 0x150]
mov dword [esp], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 8], eax
call fcn.00495eb0
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xcc]
mov edx, dword [esp + 0xc8]
test ecx, ecx
jne 0x496b18
xor ecx, ecx
jmp 0x496b6e
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00497770
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test eax, eax
je 0x496b3c
xor edx, edx
jmp 0x496b48
test ebx, ebx
jbe 0x49754a
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
test eax, eax
jne 0x496cb4
mov eax, dword [esp + 0xcc]
mov ecx, edx
mov edx, dword [esp + 0xc8]
mov dword [esp + 0xd8], ecx
mov ebx, dword [esp + 0xe4]
mov ebp, dword [ebx + 4]
mov esi, dword [ebx]
test ebp, ebp
jne 0x496b89
xor ebp, ebp
jmp 0x496bd1
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00497770
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test ecx, ecx
je 0x496bad
xor edx, edx
jmp 0x496bb9
test ebx, ebx
jbe 0x497541
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], eax
test ecx, ecx
jne 0x496c92
mov ebp, edx
mov dword [esp + 0xd4], ebp
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x58], 0
lea eax, [esp + 0x44]
mov dword [esp], eax
lea eax, [esp + 0x40]
mov dword [esp + 4], eax
lea eax, [esp + 0x58]
mov dword [esp + 8], eax
call fcn.0049c390
mov eax, dword [esp + 0x44]
cmp eax, 6
jae 0x496c1c
mov eax, 1
jmp 0x496c2a
jne 0x496c28
cmp dword [esp + 0x40], 1
setbe al
jmp 0x496c2a
xor eax, eax
mov byte [esp + 0x37], al
call fcn.0049ae70
mov eax, dword [esp]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xcc]
mov edx, dword [ecx + 0x2c]
test edx, edx
jne 0x496c4a
mov edx, eax
mov dword [esp + 0x38], edx
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x54], ecx
lea ebx, [0x696b00]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044b780
mov eax, dword [esp + 0xc]
mov dword [esp + 0xe0], eax
mov ecx, dword [esp + 0xe4]
mov edx, dword [ecx + 0x18]
mov dword [esp + 0x64], edx
xor ebx, ebx
jmp 0x496ddd
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436440
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436440
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436440
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
call fcn.00436440
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea eax, [0x7518fc]
mov dword [esp + 0x168], eax
lea eax, [0x750558]
mov dword [esp + 0x16c], eax
call fcn.00436440
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea eax, [0x7518fc]
mov dword [esp + 0x168], eax
lea eax, [0x75055c]
mov dword [esp + 0x16c], eax
call fcn.00436440
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea eax, [0x7518fc]
mov dword [esp + 0x168], eax
lea eax, [0x75055c]
mov dword [esp + 0x16c], eax
call fcn.00436440
add esp, 0x144
ret
inc ebx
cmp ebx, edx
jge 0x496f1a
mov ebp, dword [ecx + 0x18]
mov esi, dword [ecx + 0x14]
cmp ebx, ebp
jae 0x497538
mov ebp, dword [esi + ebx*4]
test ebp, ebp
jbe 0x496ddc
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x3c]
cmp esi, edi
je 0x496e2c
movzx edx, byte [esp + 0x37]
test dl, dl
je 0x496e31
mov dword [esp + 0x60], ebp
and ebp, 0x10000003
cmp ebp, 3
jne 0x496e26
mov ebp, dword [esp + 0x60]
mov esi, edi
jmp 0x496e31
mov ebp, dword [esp + 0x60]
jmp 0x496e31
movzx edx, byte [esp + 0x37]
mov edx, dword [esp + 0x54]
cmp ebx, edx
jae 0x49752f
mov dword [esp + 0x4c], ebx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
lea ecx, [eax + ebx*4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0
mov byte [esp + 0x14], 1
mov dword [esp + 0x18], 2
call fcn.0049a780
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x496eea
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0xe0]
mov edx, dword [ecx + eax*4]
mov dword [esp + 0x5c], edx
lea ebx, [0x6a5dc0]
mov dword [esp], ebx
call fcn.0040b800
mov eax, dword [esp + 4]
lea ecx, [0x4975f0]
mov dword [eax], ecx
mov edx, dword [esp + 0x38]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0x5c]
mov dword [eax + 8], ebx
mov dword [esp], eax
call fcn.00435d70
test eax, eax
jne 0x496ede
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xe4]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x4c]
jmp 0x496ddc
call fcn.00436440
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
call fcn.00436440
add esp, 0x144
ret
lea edi, [esp + 0xfc]
xor eax, eax
call fcn.0046335e
mov dword [esp], 2
call fcn.00499210
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 8]
mov dword [esp + 0x140], ecx
mov dword [esp + 0x168], edx
mov dword [esp + 0x16c], ebx
test ebp, ebp
jne 0x49715e
mov eax, dword [esp + 0x140]
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
lea ecx, [0x4975b0]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
lea eax, [esp + 0xe8]
mov dword [esp + 0xb0], eax
lea eax, [esp + 0xa4]
mov dword [esp], eax
call fcn.00435e50
test eax, eax
jne 0x497152
mov dword [esp + 0xfc], 0x48
mov dword [esp + 0x128], 0x100
mov edx, dword [esp + 0xcc]
movzx ebx, byte [edx]
test bl, bl
je 0x496ff0
mov dword [esp + 0x128], 0x101
mov word [esp + 0x12c], 0
mov ebx, dword [edx + 0x2c]
test ebx, ebx
je 0x49705e
mov eax, dword [esp + 0x140]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20000
lea eax, [edx + 0x2c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0049bed0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
test edx, edx
jne 0x497130
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0x54]
test ebx, ebx
jbe 0x497526
mov ebp, dword [esp + 0xe0]
mov esi, dword [ebp]
mov dword [esp + 0x134], esi
cmp ebx, 1
jbe 0x49751a
mov esi, dword [ebp + 4]
mov dword [esp + 0x138], esi
cmp ebx, 2
jbe 0x49750e
mov eax, dword [ebp + 8]
mov dword [esp + 0x13c], eax
mov eax, dword [edx + 0x24]
lea ecx, [ebx + eax]
mov dword [esp + 0x50], ecx
mov esi, dword [edx + 0x20]
cmp ebx, ecx
jb 0x4970b6
mov edi, ebx
jmp 0x4970fa
mov dword [esp + 0x64], eax
mov dword [esp + 0xdc], esi
lea eax, [0x696b00]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.0044b8c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0xdc]
mov edi, dword [esp + 0x54]
mov ebp, eax
mov ebx, ecx
mov eax, dword [esp + 0x64]
mov dword [esp + 0x54], ebx
mov dword [esp + 0xd0], ebp
lea ecx, [ebp + edi*4]
mov dword [esp], ecx
mov dword [esp + 4], esi
shl eax, 2
mov dword [esp + 8], eax
call fcn.00463a60
mov eax, dword [esp + 0xd0]
movzx ecx, byte [esp + 0x37]
mov edx, dword [esp + 0x50]
xor ebx, ebx
jmp 0x497181
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436440
add esp, 0x144
ret
call fcn.00436440
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436440
add esp, 0x144
ret
inc ebx
cmp ebx, edx
jge 0x4971a6
jae 0x497505
mov ebp, dword [eax + ebx*4]
test cl, cl
je 0x497180
and ebp, 0x10000003
cmp ebp, 3
jne 0x497180
mov dword [eax + ebx*4], 0
jmp 0x497180
xor ecx, ecx
xor ebx, ebx
jmp 0x4971ad
inc ecx
cmp ecx, edx
jge 0x4971cc
jae 0x4974fc
mov ebp, dword [eax + ecx*4]
test ebp, ebp
je 0x4971ac
cmp ebx, edx
jae 0x4974f3
mov dword [eax + ebx*4], ebp
inc ebx
jmp 0x4971ac
mov edx, dword [esp + 0x54]
cmp ebx, edx
ja 0x4974ec
test ebx, ebx
je 0x4971ec
mov ebp, dword [esp + 0xcc]
movzx esi, byte [ebp + 0x1c]
xor esi, 1
jmp 0x4971f5
mov ebp, dword [esp + 0xcc]
xor esi, esi
xchg esi, eax
mov byte [esp + 0x36], al
xchg esi, eax
mov dword [esp + 0x48], ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x49728b
mov edi, dword [esp + 0x140]
test ebx, ebx
jbe 0x4974e3
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20002
mov dword [esp + 0xc], eax
shl ebx, 2
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0049bed0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
test edx, edx
je 0x49728b
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436440
add esp, 0x144
ret
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00495fb0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
test ebx, ebx
jne 0x4974c1
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov ecx, dword [esp + 0xcc]
mov edx, dword [ecx + 0xc]
or edx, 0x80400
mov ebx, dword [ecx + 0x10]
test ebx, ebx
je 0x49737b
mov ebp, dword [ecx + 0x14]
mov esi, dword [ecx + 0x18]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc8]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xd8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
movzx ebx, byte [esp + 0x36]
mov byte [esp + 0x14], bl
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x20], eax
lea eax, [esp + 0xfc]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x28], eax
call fcn.00499380
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
jmp 0x4973e8
mov ebx, dword [ecx + 0x14]
mov ebp, dword [ecx + 0x18]
mov esi, dword [esp + 0xc8]
mov dword [esp], esi
mov esi, dword [esp + 0xd8]
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
movzx ebx, byte [esp + 0x36]
mov byte [esp + 0x10], bl
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0xfc]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x24], eax
call fcn.0049a540
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
mov eax, dword [esp + 0x168]
test eax, eax
jne 0x49749f
mov eax, dword [esp + 0x74]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
lea ecx, [0x497570]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x68]
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x80]
mov dword [esp], eax
call fcn.00435e50
test eax, eax
jne 0x497493
mov eax, dword [esp + 0xd0]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], ecx
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 0
call fcn.00436440
add esp, 0x144
ret
call fcn.00436440
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436440
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436440
add esp, 0x144
ret
xor eax, eax
mov ecx, eax
call fcn.00463150
mov ecx, ebx
call fcn.00463190
mov eax, ebx
mov ecx, edx
call fcn.00463150
mov eax, ecx
mov ecx, edx
call fcn.00463150
mov eax, ebx
mov ecx, edx
call fcn.00463150
mov eax, 2
mov ecx, eax
call fcn.00463150
mov eax, 1
mov ecx, eax
call fcn.00463150
xor eax, eax
mov ecx, eax
call fcn.00463150
mov eax, ebx
mov ecx, edx
call fcn.00463150
mov eax, ebx
mov ecx, ebp
call fcn.00463150
xor eax, eax
mov ecx, eax
call fcn.00463150
xor eax, eax
mov ecx, eax
call fcn.00463150
xor eax, eax
mov ecx, eax
call fcn.00463150
nop
call fcn.00461cc0
jmp fcn.00496990