Function at 0x499340
Capabilities:
Access peb ldr_data
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ffd80
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x672494]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x20], ebx
push 0
call fcn.00499050
mov eax, dword [ebx + 0xa8]
test eax, eax
je 0x4994aa
mov eax, dword [ebx + 0xa8]
mov dword [ebp - 0x18], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
movzx ecx, word [eax + 0x2c]
xor edi, edi
mov esi, dword [eax + 0x30]
and ecx, 0xfffffffe
mov dword [ebp - 0x10], eax
mov ebx, 0x811c9dc5
lea edx, [ecx + esi]
inc ecx
shr ecx, 1
cmp esi, edx
cmova ecx, edi
mov dword [ebp - 0x14], ecx
test ecx, ecx
je 0x4993eb
mov eax, ecx
nop
mov dl, byte [esi]
lea ecx, [edx - 0x41]
cmp cl, 0x19
movsx ecx, dl
ja 0x4993d0
or ecx, 0x20
xor ecx, ebx
inc edi
imul ebx, ecx, 0x1000193
add esi, 2
cmp edi, eax
jne 0x4993c0
mov eax, dword [ebp - 0x10]
cmp ebx, 0xa3e6f6c3
je 0x4993ef
mov eax, dword [eax]
jmp 0x499397
mov esi, dword [eax + 0x18]
mov eax, dword [0x67f480]
mov dword [ebp - 0x10], esi
test eax, eax
jne 0x499498
test esi, esi
je 0x499491
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + esi + 0x78]
mov eax, dword [eax + esi + 0x7c]
add ecx, esi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], ecx
cmp ecx, esi
je 0x499491
mov eax, dword [ecx + 0x18]
xor ebx, ebx
mov dword [ebp - 0x14], eax
test eax, eax
je 0x499491
mov edi, dword [ecx + 0x20]
add edi, esi
mov edx, dword [edi]
add edx, esi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x499469
lea eax, [ecx - 0x41]
cmp al, 0x19
movsx eax, cl
ja 0x49944f
or eax, 0x20
mov cl, byte [edx]
xor eax, esi
imul esi, eax, 0x1000193
inc edx
test cl, cl
jne 0x499442
cmp esi, 0x8285aca5
je 0x499476
mov eax, dword [ebp - 0x14]
inc ebx
add edi, 4
cmp ebx, eax
je 0x499491
mov esi, dword [ebp - 0x10]
jmp 0x499432
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + ebx*2]
mov eax, dword [ecx + eax*4]
add eax, edx
jmp 0x499493
xor eax, eax
mov dword [0x67f480], eax
push dword [ebp - 0x18]
call eax
mov ebx, dword [ebp - 0x20]
xor eax, eax
lea ecx, [ebx + 0xa8]
xchg dword [ecx], eax
mov eax, dword [ebx + 0xa4]
mov dword [ebp - 0x14], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
movzx ecx, word [eax + 0x2c]
xor edi, edi
mov esi, dword [eax + 0x30]
and ecx, 0xfffffffe
mov dword [ebp - 0x10], eax
mov ebx, 0x811c9dc5
lea edx, [ecx + esi]
inc ecx
shr ecx, 1
cmp esi, edx
cmova ecx, edi
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x499512
mov eax, ecx
mov dl, byte [esi]
lea ecx, [edx - 0x41]
cmp cl, 0x19
movsx ecx, dl
ja 0x4994f7
or ecx, 0x20
xor ecx, ebx
inc edi
imul ebx, ecx, 0x1000193
add esi, 2
cmp edi, eax
jne 0x4994e7
mov eax, dword [ebp - 0x10]
cmp ebx, 0xa3e6f6c3
je 0x499516
mov eax, dword [eax]
jmp 0x4994bf
mov esi, dword [eax + 0x18]
mov eax, dword [0x67f480]
mov dword [ebp - 0x10], esi
test eax, eax
jne 0x4995c6
test esi, esi
je 0x4995bf
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + esi + 0x78]
mov eax, dword [eax + esi + 0x7c]
add ecx, esi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x24], ecx
cmp ecx, esi
je 0x4995bf
mov eax, dword [ecx + 0x18]
xor ebx, ebx
mov dword [ebp - 0x18], eax
test eax, eax
je 0x4995bf
mov edi, dword [ecx + 0x20]
add edi, esi
nop dword [eax]
mov edx, dword [edi]
add edx, esi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x499597
lea eax, [ecx - 0x41]
cmp al, 0x19
movsx eax, cl
ja 0x49957d
or eax, 0x20
mov cl, byte [edx]
xor eax, esi
imul esi, eax, 0x1000193
inc edx
test cl, cl
jne 0x499570
cmp esi, 0x8285aca5
je 0x4995a4
mov eax, dword [ebp - 0x18]
inc ebx
add edi, 4
cmp ebx, eax
je 0x4995bf
mov esi, dword [ebp - 0x10]
jmp 0x499560
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + ebx*2]
mov eax, dword [ecx + eax*4]
add eax, edx
jmp 0x4995c1
xor eax, eax
mov dword [0x67f480], eax
push dword [ebp - 0x14]
call eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xa0]
mov dword [ebp - 0x14], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
movzx ecx, word [eax + 0x2c]
xor edi, edi
mov esi, dword [eax + 0x30]
and ecx, 0xfffffffe
mov dword [ebp - 0x10], eax
mov ebx, 0x811c9dc5
lea edx, [ecx + esi]
inc ecx
shr ecx, 1
cmp esi, edx
cmova ecx, edi
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x49963b
mov eax, ecx
nop dword [eax + eax]
mov dl, byte [esi]
lea ecx, [edx - 0x41]
cmp cl, 0x19
movsx ecx, dl
ja 0x499620
or ecx, 0x20
xor ecx, ebx
inc edi
imul ebx, ecx, 0x1000193
add esi, 2
cmp edi, eax
jne 0x499610
mov eax, dword [ebp - 0x10]
cmp ebx, 0xa3e6f6c3
je 0x49963f
mov eax, dword [eax]
jmp 0x4995e3
mov esi, dword [eax + 0x18]
mov eax, dword [0x67f480]
mov dword [ebp - 0x10], esi
test eax, eax
jne 0x4996e8
test esi, esi
je 0x4996e1
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + esi + 0x78]
mov eax, dword [eax + esi + 0x7c]
add ecx, esi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x24], ecx
cmp ecx, esi
je 0x4996e1
mov eax, dword [ecx + 0x18]
xor ebx, ebx
mov dword [ebp - 0x18], eax
test eax, eax
je 0x4996e1
mov edi, dword [ecx + 0x20]
add edi, esi
mov edx, dword [edi]
add edx, esi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4996b9
lea eax, [ecx - 0x41]
cmp al, 0x19
movsx eax, cl
ja 0x49969f
or eax, 0x20
mov cl, byte [edx]
xor eax, esi
imul esi, eax, 0x1000193
inc edx
test cl, cl
jne 0x499692
cmp esi, 0x8285aca5
je 0x4996c6
mov eax, dword [ebp - 0x18]
inc ebx
add edi, 4
cmp ebx, eax
je 0x4996e1
mov esi, dword [ebp - 0x10]
jmp 0x499682
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + ebx*2]
mov eax, dword [ecx + eax*4]
add eax, edx
jmp 0x4996e3
xor eax, eax
mov dword [0x67f480], eax
push dword [ebp - 0x14]
call eax
mov ebx, dword [ebp - 0x20]
add ebx, 0xb0
mov ecx, dword [ebx]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], 0
mov eax, ecx
mov edi, dword [ecx + 4]
mov esi, edi
cmp byte [edi + 0xd], 0
jne 0x499734
nop
push dword [esi + 8]
mov ecx, ebx
call fcn.004a4b70
mov esi, dword [esi]
push 0x20
push edi
call fcn.004d0c91
add esp, 8
mov edi, esi
cmp byte [esi + 0xd], 0
je 0x499710
mov eax, dword [ebx]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 4], ecx
mov eax, dword [ebx]
push 0x20
mov dword [eax], ecx
mov eax, dword [ebx]
mov dword [eax + 8], ecx
mov dword [ebx + 4], 0
push dword [ebx]
call fcn.004d0c91
mov ebx, dword [ebp - 0x20]
add esp, 8
mov esi, dword [ebx + 0x98]
lea edi, [ebx + 0x98]
mov dword [ebp - 4], 1
mov ecx, edi
push dword [esi + 4]
call fcn.004a49f0
mov eax, dword [edi]
push 0x2c
mov dword [eax + 4], esi
mov eax, dword [edi]
mov dword [eax], esi
mov eax, dword [edi]
mov dword [eax + 8], esi
mov dword [edi + 4], 0
push dword [edi]
call fcn.004d0c91
add esp, 8
lea eax, [ebx + 0x80]
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteCriticalSection]
lea ecx, [ebx + 0x70]
call fcn.00495300
lea ecx, [ebx + 0x5c]
call fcn.00495d00
push 8
push dword [ebx + 0x5c]
call fcn.004d0c91
add esp, 8
mov dword [ebx + 0x5c], 0
lea ecx, [ebx + 8]
call fcn.004a4930
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret