Function at 0x49b590
Capabilities:
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x8cbf38]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x44]
cmp eax, dword [ecx + 8]
jbe 0x49c14f
sub esp, 0xc4
mov eax, dword [esp + 0xc8]
test eax, eax
jl 0x49c136
mov eax, dword [esp + 0xcc]
mov ecx, dword [eax + 0x84]
mov edx, dword [esp + 0xd0]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov dword [esp + 0x74], eax
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xa4], 0x11
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], 0
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xb0], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp + 0xb4], 0x11
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], edx
lea edx, [0x8a6aa0]
mov dword [esp], edx
lea ebx, [0x64c5c0]
mov dword [esp + 4], ebx
lea ebp, [esp + 0xb4]
mov dword [esp + 8], ebp
call fcn.00474b20
movzx eax, byte [esp + 0x14]
test al, al
jne 0x49b74b
mov eax, dword [esp + 0xc8]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.0048bfb0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2c], ecx
mov edx, dword [esp + 0x74]
mov dword [esp], edx
call fcn.00491f70
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
lea edx, [esp + 0x50]
mov dword [esp], edx
lea edx, str._:_46
mov dword [esp + 4], edx
mov dword [esp + 8], 1
mov edx, dword [esp + 0x70]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x10], edx
lea edx, [0x6ffd2c]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.004555b0
mov eax, dword [esp + 0x24]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x40], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00495f10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x74]
xor ebx, ebx
jmp 0x49b78d
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x90], ecx
lea edx, [0x65d540]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040d7d0
mov eax, dword [esp + 8]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0xd8], eax
add esp, 0xc4
ret
inc ebx
cmp ebx, ecx
jge 0x49b825
mov ebp, dword [eax + ebx*4]
cmp dword [ebp + 0x20], edx
jne 0x49b78c
mov dword [esp + 0x78], ebp
lea eax, [0x64c5c0]
mov dword [esp], eax
lea ecx, [esp + 0xa4]
mov dword [esp + 4], ecx
call fcn.0040d300
lea eax, [0x8a6aa0]
mov dword [esp], eax
lea eax, [0x64c5c0]
mov dword [esp + 4], eax
lea eax, [0x663f40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x10], eax
call fcn.00474d30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x80], ecx
lea edx, [0x65d540]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040d7d0
mov eax, dword [esp + 8]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0xd8], eax
add esp, 0xc4
ret
lea eax, [0x62c400]
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], 0
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x88], eax
lea ecx, [0x64ce40]
mov dword [esp], ecx
call fcn.0040fcf0
mov esi, dword [esp + 0x88]
test byte [esi], al
mov eax, dword [0x8cc0e0]
mov edi, dword [esp + 4]
mov dword [esp + 0x98], edi
test eax, eax
je 0x49b89b
lea eax, [0x64ce40]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
call fcn.004152e0
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x98]
call fcn.0046c562
mov eax, dword [esp + 0x74]
movzx ecx, byte [eax + 0xc]
and ecx, 8
mov edx, dword [esp + 0x98]
mov byte [edx + 0xc], cl
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov byte [esp + 0x10], 0
mov byte [esp + 0x11], 0
call fcn.00402250
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.00468ec0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x98]
mov dword [ecx + 0x18], eax
mov eax, dword [esp + 0x74]
mov edx, dword [eax + 8]
xor ebx, ebx
jmp 0x49b919
imul edx, edx, 0x1000193
xor edx, 0x5b
mov ebx, 1
test ebx, ebx
jle 0x49b90b
mov dword [ecx + 8], edx
mov edx, dword [esp + 0xc8]
mov ebx, edx
jmp 0x49b931
mov dword [ecx + 8], ebp
shr edx, 8
test edx, edx
jbe 0x49b93f
mov ebp, dword [ecx + 8]
xor esi, esi
jmp 0x49c12d
mov edx, dword [ecx + 8]
xor ebp, ebp
jmp 0x49b954
imul edx, edx, 0x1000193
xor edx, 0x5d
mov ebp, 1
test ebp, ebp
jle 0x49b946
mov dword [ecx + 8], edx
mov edx, dword [0x8cc0e0]
test edx, edx
je 0x49b972
call fcn.0046bec0
mov dword [edi], eax
mov edx, dword [ecx + 0x20]
mov dword [edi + 4], edx
mov dword [ecx + 0x20], eax
mov dword [ecx + 0x1c], 0
mov edx, dword [eax]
test edx, edx
jbe 0x49b998
mov ebp, eax
mov eax, 0xffffffff
mov esi, edx
xor edx, edx
div esi
cmp ebx, eax
jbe 0x49b99c
jmp 0x49c105
mov ebp, eax
mov esi, edx
imul esi, ebx
mov dword [ecx], esi
test ebx, ebx
jle 0x49b9b8
mov eax, dword [ebp + 4]
test eax, eax
je 0x49b9b8
lea edx, [ebx - 1]
imul edx, dword [ebp]
add eax, edx
mov dword [ecx + 4], eax
movzx eax, byte [ebp + 0xd]
mov byte [ecx + 0xd], al
movzx eax, byte [ebp + 0xe]
mov byte [ecx + 0xe], al
mov dword [ecx + 0x28], ebx
mov eax, dword [esp + 0xcc]
mov dword [esp], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 4], eax
call fcn.00497b20
mov eax, dword [esp + 8]
lea ecx, [0x702820]
cmp eax, ecx
jne 0x49c0e9
mov eax, dword [0x8cc0e0]
mov ecx, dword [esp + 0xc]
test byte [ecx], al
test eax, eax
jne 0x49ba0e
mov eax, dword [esp + 0x98]
jmp 0x49ba22
call fcn.0046bec0
mov dword [edi], ecx
mov eax, dword [esp + 0x98]
mov edx, dword [eax + 0x24]
mov dword [edi + 4], edx
mov dword [eax + 0x24], ecx
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 4]
test edx, edx
je 0x49bc5b
mov edx, dword [eax]
test edx, edx
je 0x49bc5b
mov ebx, dword [esp + 0xc8]
cmp ebx, 1
je 0x49bc26
movzx ebp, byte [ecx + 0xf]
xchg ebp, eax
test al, 0x40
xchg ebp, eax
jne 0x49bb28
cmp edx, 0x10000
ja 0x49bb28
mov ecx, dword [eax + 4]
lea edx, [0x62f320]
mov dword [esp], edx
shr ecx, 2
add ecx, 7
shr ecx, 3
add ecx, 3
and ecx, 0xfffffffc
mov dword [esp + 0x44], ecx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.004519e0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x98]
mov edx, dword [ecx + 0x28]
mov dword [esp], eax
mov ebx, dword [esp + 0x44]
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0
mov ebp, dword [esp + 0x74]
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edx
call fcn.00497650
mov eax, dword [esp + 0x44]
test eax, eax
jbe 0x49c0e0
mov eax, dword [0x8cc0e0]
test eax, eax
jne 0x49baf8
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x98]
jmp 0x49bb13
call fcn.0046bec0
mov eax, dword [esp + 0x94]
mov dword [edi], eax
mov ecx, dword [esp + 0x98]
mov edx, dword [ecx + 0x14]
mov dword [edi + 4], edx
mov dword [ecx + 0x14], eax
mov eax, ecx
mov ecx, dword [esp + 0x74]
mov ebx, dword [esp + 0xc8]
jmp 0x49bc84
lea eax, [0x6280a0]
mov dword [esp], eax
call fcn.0040fcf0
mov eax, dword [esp + 4]
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 4
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
call fcn.004977e0
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 4]
shr ecx, 2
mov edx, dword [eax]
shr edx, 2
mov dword [esp + 0x48], edx
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
cmp edx, ecx
jbe 0x49bdca
mov dword [esp + 0x4c], ecx
add esi, 2
cmp ebx, esi
jae 0x49bbc6
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x62f320]
mov dword [esp + 0x10], eax
call fcn.00451aa0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
mov word [esi + ebp - 2], 1
lea edi, [ecx + 1]
cmp edx, edi
jbe 0x49bdca
inc esi
cmp ebx, esi
jae 0x49bc17
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x62f320]
mov dword [esp + 0x10], eax
call fcn.00451aa0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
mov byte [esi + ebp - 1], 0x81
mov edi, edx
sub edx, ecx
dec edx
jmp 0x49c049
movzx edx, byte [eax + 0xf]
movzx ebp, byte [ecx + 0xf]
and ebp, 0x40
or edx, ebp
mov byte [eax + 0xf], dl
mov edx, dword [0x8cc0e0]
mov ebp, dword [ecx + 0x14]
test edx, edx
je 0x49bc50
call fcn.0046bec0
mov dword [edi], ebp
mov edx, dword [eax + 0x14]
mov dword [edi + 4], edx
mov dword [eax + 0x14], ebp
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
jmp 0x49bc84
mov edx, dword [0x8cc0e0]
test edx, edx
je 0x49bc6f
mov edx, dword [eax + 0x14]
call fcn.0046beb0
mov dword [edi], edx
mov dword [eax + 0x14], 0
mov dword [eax + 4], 0
mov ebx, dword [esp + 0xc8]
mov edx, dword [0x8cc0e0]
nop
mov ebp, dword [ecx]
test edx, edx
je 0x49bc9b
mov edx, dword [eax + 0x10]
call fcn.0046beb0
mov dword [edi], edx
mov dword [eax + 0x10], 0
mov edx, dword [ecx + 0x10]
test edx, edx
je 0x49bd25
mov dword [esp + 0x30], ebp
mov dword [esp + 0x8c], edx
lea eax, [0x646180]
mov dword [esp], eax
call fcn.0040fcf0
mov eax, dword [esp + 4]
lea ecx, [0x49c160]
mov dword [eax], ecx
mov ecx, dword [esp + 0xc8]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], edx
mov edx, dword [0x8cc0e0]
test edx, edx
jne 0x49bcf9
mov edx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x98]
jmp 0x49bd17
call fcn.0046bed0
mov edx, dword [esp + 0x8c]
mov dword [edi], edx
mov dword [edi + 4], eax
mov ebx, dword [esp + 0x98]
mov ebp, dword [ebx + 0x10]
mov dword [edi + 8], ebp
mov dword [eax + 0xc], edx
mov dword [ebx + 0x10], eax
mov eax, ebx
mov ebx, ecx
mov ecx, dword [esp + 0x74]
cmp ebx, 1
jne 0x49bd3f
movzx ecx, byte [ecx + 0xf]
test cl, 0x20
je 0x49bd3f
movzx ecx, byte [eax + 0xf]
or ecx, 0x20
mov byte [eax + 0xf], cl
jmp 0x49bd49
movzx ecx, byte [eax + 0xf]
and ecx, 0xffffffdf
mov byte [eax + 0xf], cl
lea eax, [0x64c5c0]
mov dword [esp], eax
lea ecx, [esp + 0xa4]
mov dword [esp + 4], ecx
call fcn.0040d300
lea eax, [0x8a6aa0]
mov dword [esp], eax
lea eax, [0x64c5c0]
mov dword [esp + 4], eax
lea eax, [0x663f40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], eax
call fcn.00474d30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x7c], ecx
lea edx, [0x65d540]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040d7d0
mov eax, dword [esp + 8]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xd8], eax
add esp, 0xc4
ret
cmp edx, 0x80
jae 0x49be1c
inc esi
cmp ebx, esi
jae 0x49be0d
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x62f320]
mov dword [esp + 0x10], eax
call fcn.00451aa0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x48]
or edx, 0x80
mov byte [esi + ebp - 1], dl
jmp 0x49bef8
inc esi
cmp ebx, esi
jae 0x49be57
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x62f320]
mov dword [esp + 0x10], eax
call fcn.00451aa0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x48]
mov byte [esi + ebp - 1], pe_nt_image_headers32
nop
jmp 0x49be70
mov edi, edx
or edi, 0x80
xchg edi, eax
mov byte [esi + ebp - 1], al
xchg edi, eax
shr edx, 7
mov dword [esp + 0x38], edx
cmp edx, 0x80
jb 0x49beb9
inc esi
cmp ebx, esi
jae 0x49be5f
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x62f320]
mov dword [esp + 0x10], eax
call fcn.00451aa0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x38]
jmp 0x49be5f
inc esi
cmp ebx, esi
jae 0x49bef4
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x62f320]
mov dword [esp + 0x10], eax
call fcn.00451aa0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x38]
mov byte [esi + ebp - 1], dl
mov edx, dword [esp + 0xc8]
lea edi, [edx - 1]
jmp 0x49bf13
mov ecx, edi
or ecx, 0x80
mov byte [esi + ebp - 1], cl
shr edi, 7
mov dword [esp + 0x34], edi
cmp edi, 0x80
jb 0x49bf63
inc esi
cmp ebx, esi
jae 0x49bf04
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x62f320]
mov dword [esp + 0x10], eax
call fcn.00451aa0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0xc8]
mov edi, dword [esp + 0x34]
jmp 0x49bf04
inc esi
cmp ebx, esi
jae 0x49bfa5
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x62f320]
mov dword [esp + 0x10], eax
call fcn.00451aa0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0xc8]
mov edi, dword [esp + 0x34]
xchg edi, eax
mov byte [esi + ebp - 1], al
xchg edi, eax
inc esi
cmp ebx, esi
jae 0x49bfe5
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x62f320]
mov dword [esp + 0x10], eax
call fcn.00451aa0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0xc8]
mov byte [esi + ebp - 1], 0
test esi, esi
jbe 0x49c031
lea ecx, [esi - 4]
mov dword [ebp], ecx
mov ecx, dword [esp + 0x98]
movzx ebx, byte [ecx + 0xf]
or ebx, 0x40
mov byte [ecx + 0xf], bl
mov ebx, dword [0x8cc0e0]
test ebx, ebx
je 0x49c01c
call fcn.0046bec0
mov dword [edi], ebp
mov ebx, dword [ecx + 0x14]
mov dword [edi + 4], ebx
mov dword [ecx + 0x14], ebp
mov ebp, dword [ecx]
mov dword [ecx + 4], ebp
mov eax, ecx
mov ecx, dword [esp + 0x74]
mov ebx, edx
jmp 0x49bc84
xor eax, eax
mov ecx, eax
call fcn.0046bf30
mov ecx, edx
or ecx, 0x80
mov byte [esi + ebp - 1], cl
shr edx, 7
mov dword [esp + 0x3c], edx
cmp edx, 0x80
jb 0x49c096
inc esi
cmp ebx, esi
jae 0x49c03a
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x62f320]
mov dword [esp + 0x10], eax
call fcn.00451aa0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x48]
jmp 0x49c03a
inc esi
cmp ebx, esi
jae 0x49c0d5
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x62f320]
mov dword [esp + 0x10], eax
call fcn.00451aa0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x48]
mov byte [esi + ebp - 1], dl
mov edx, edi
jmp 0x49bdca
xor eax, eax
mov ecx, eax
call fcn.0046bf30
mov ecx, dword [0x702824]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x65d540]
mov dword [esp + 8], eax
call fcn.0040d260
lea eax, [0x62efe0]
mov dword [esp], eax
lea eax, [0x701040]
mov dword [esp + 4], eax
call fcn.0043c340
imul ebp, ebp, 0x1000193
movzx edi, dl
xor ebp, edi
mov esi, 1
test esi, esi
jle 0x49c11d
jmp 0x49b92b
lea eax, [0x62efe0]
mov dword [esp], eax
lea eax, [0x701038]
mov dword [esp + 4], eax
call fcn.0043c340
nop
call fcn.0046aab0
jmp fcn.0049b590