Function at 0x496500
Capabilities:
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x8cbf38]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x28]
cmp eax, dword [ecx + 8]
jbe 0x496e29
sub esp, 0xa8
mov eax, 0
mov dword [esp + 0xa4], eax
mov byte [esp + 0x23], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
movzx eax, byte [esp + 0xc4]
test al, al
je 0x49659d
mov ecx, dword [esp + 0xb0]
test ecx, ecx
jne 0x496563
mov edx, 1
jmp 0x496594
mov eax, dword [esp + 0xac]
lea edx, [eax + ecx*8 - 8]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
mov ebx, dword [ebx + 0x50]
mov dword [esp], edx
call ebx
cmp dword [esp + 4], 0x17
setne al
mov ecx, dword [esp + 0xb0]
mov edx, eax
movzx eax, byte [esp + 0xc4]
test dl, dl
je 0x4965a4
jmp 0x496e04
mov ecx, dword [esp + 0xb0]
lea edx, [0x61fdc0]
mov dword [esp + 0x94], edx
mov dword [esp + 0x98], 0
mov edx, dword [esp + 0xbc]
lea ebx, [ecx + edx]
mov ebp, dword [esp + 0x94]
cmp ebx, 0x80
jg 0x496dec
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x28], ebx
mov dword [esp], ebx
call fcn.004961b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004a6d10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004a11a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x48], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.004a1350
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0049d3b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004a4440
mov eax, dword [esp + 0xc]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
call fcn.004a1350
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0049d3b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004a4440
mov eax, dword [esp + 0x28]
test eax, eax
jl 0x496de7
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x44], ecx
mov ebx, eax
mov eax, 4
mul ebx
jo 0x496dd9
mov edx, dword [esp + 0x44]
neg edx
cmp eax, edx
ja 0x496dd9
mov dword [esp + 0x8c], ecx
mov edi, dword [esp + 0x88]
test byte [edi], al
mov esi, dword [esp + 0x6c]
test byte [esi], al
mov eax, dword [0x8cc0e0]
test eax, eax
je 0x496771
lea eax, [0x64a3c0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
call fcn.004152e0
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x28]
mov esi, dword [esp + 0x6c]
mov edi, dword [esp + 0x88]
call fcn.0046c576
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x8c]
xor ebp, ebp
xor esi, esi
xor edi, edi
jmp 0x4967b1
mov ecx, dword [esp + 0x40]
inc ecx
mov edi, dword [esp + 0xb0]
mov ebp, ecx
mov edi, eax
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xac]
cmp eax, ebp
jle 0x49687a
mov dword [esp + 0x40], ebp
lea ecx, [ecx + ebp*8]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
lea ebp, [0x702820]
cmp eax, ebp
jne 0x496dbd
lea eax, [edi + 1]
cmp ebx, eax
jae 0x49681e
mov dword [esp + 0x78], ecx
mov dword [esp + 0x2c], esi
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x663f40]
mov dword [esp + 0x10], eax
call fcn.00451aa0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x78]
lea ebp, [0x702820]
mov esi, dword [esp + 0x2c]
mov edi, dword [0x8cc0e0]
test edi, edi
je 0x49683c
call fcn.0046bec0
mov dword [edi], ecx
mov ebp, dword [edx + eax*4 - 4]
mov dword [edi + 4], ebp
lea ebp, [0x702820]
mov dword [edx + eax*4 - 4], ecx
mov dword [esp + 0x38], 0
mov edi, dword [ecx + 8]
shr edi, 0x18
xchg edi, eax
mov byte [esp + 0x38], al
xchg edi, eax
mov edi, dword [ecx + 8]
shr edi, 0x10
xchg edi, eax
mov byte [esp + 0x39], al
xchg edi, eax
mov edi, dword [ecx + 8]
shr edi, 8
xchg edi, eax
mov byte [esp + 0x3a], al
xchg edi, eax
mov ecx, dword [ecx + 8]
mov byte [esp + 0x3b], cl
xor ecx, ecx
jmp 0x496db3
movzx ecx, byte [esp + 0xc4]
test cl, cl
je 0x49688d
xor ebp, ebp
jmp 0x496d9c
xor ebp, ebp
jmp 0x49689f
imul esi, esi, 0x1000193
xor esi, 0x2e
mov ebp, 1
test ebp, ebp
jle 0x496891
mov ebp, dword [esp + 0xb8]
mov dword [esp + 0x50], eax
xor eax, eax
mov dword [esp + 0x40], eax
jmp 0x4968d7
mov eax, dword [esp + 0x40]
inc eax
mov ebp, dword [esp + 0xb8]
mov edi, dword [esp + 0xbc]
mov dword [esp + 0x40], eax
mov edi, ecx
movzx ecx, byte [esp + 0xc4]
mov dword [esp + 0x2c], esi
mov ecx, dword [esp + 0xbc]
mov eax, dword [esp + 0x40]
cmp ecx, eax
jle 0x4969ab
lea ebp, [ebp + eax*8]
mov ecx, dword [ebp]
mov ebp, dword [ebp + 4]
lea eax, [0x702820]
cmp ecx, eax
jne 0x496d72
lea ecx, [edi + 1]
cmp ebx, ecx
jae 0x49694d
mov dword [esp + 0x70], ebp
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x663f40]
mov dword [esp + 0x10], eax
call fcn.00451aa0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea eax, [0x702820]
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x2c]
mov edi, dword [0x8cc0e0]
test edi, edi
je 0x49696b
call fcn.0046bec0
mov dword [edi], ebp
mov eax, dword [edx + ecx*4 - 4]
mov dword [edi + 4], eax
lea eax, [0x702820]
mov dword [edx + ecx*4 - 4], ebp
mov dword [esp + 0x34], 0
mov edi, dword [ebp + 8]
shr edi, 0x18
xchg edi, eax
mov byte [esp + 0x34], al
xchg edi, eax
mov edi, dword [ebp + 8]
shr edi, 0x10
xchg edi, eax
mov byte [esp + 0x35], al
xchg edi, eax
mov edi, dword [ebp + 8]
shr edi, 8
xchg edi, eax
mov byte [esp + 0x36], al
xchg edi, eax
mov ebp, dword [ebp + 8]
xchg ebp, eax
mov byte [esp + 0x37], al
xchg ebp, eax
xor ebp, ebp
jmp 0x496d68
mov eax, dword [esp + 0x88]
mov byte [eax + 0xc], 0
mov dword [eax + 8], esi
mov edx, dword [esp + 0xb0]
mov word [eax + 0x20], dx
mov word [eax + 0x22], cx
movzx edx, byte [esp + 0xc4]
test dl, dl
je 0x4969de
or ecx, 0xffff8000
mov word [eax + 0x22], cx
mov dword [esp + 0x30], esi
lea eax, [0x8a6ba8]
mov dword [esp], eax
lea ecx, [0x62f2e0]
mov dword [esp + 4], ecx
lea edx, [esp + 0x30]
mov dword [esp + 8], edx
call fcn.00474b20
movzx eax, byte [esp + 0x14]
test al, al
je 0x496a38
mov eax, dword [esp + 0xc]
lea ecx, [0x621cc0]
cmp eax, ecx
jne 0x496d44
mov eax, dword [esp + 0x10]
mov edx, dword [eax]
mov dword [esp + 0x84], edx
mov eax, dword [eax + 4]
mov dword [esp + 0x40], eax
xor ebx, ebx
jmp 0x496cf1
lea eax, [0x8a6ba0]
mov dword [esp], eax
call fcn.00475ad0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
lea eax, [0x496fd0]
mov dword [esp + 0x9c], eax
lea eax, [0x8a6ba0]
mov dword [esp + 0xa0], eax
lea eax, [esp + 0x9c]
mov dword [esp + 0xa4], eax
mov byte [esp + 0x23], 1
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x4c], eax
lea ecx, [0x8a6ba8]
mov dword [esp], ecx
lea ecx, [0x62f2e0]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 8], ecx
call fcn.00474b20
movzx eax, byte [esp + 0x14]
test al, al
je 0x496ae7
mov eax, dword [esp + 0xc]
lea ecx, [0x621cc0]
cmp eax, ecx
jne 0x496cc3
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov dword [esp + 0x80], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x40], eax
xor edx, edx
jmp 0x496c60
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
lea eax, [0x496e40]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00497010
mov eax, dword [esp + 4]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x24], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00495f10
mov eax, dword [esp + 8]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x40], ecx
xor edx, edx
jmp 0x496b57
mov ebx, dword [esp + 0x3c]
lea edx, [ebx + 1]
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x40]
cmp edx, ecx
jge 0x496bc5
mov dword [esp + 0x3c], edx
mov ecx, dword [eax + edx*4]
mov dword [esp + 0x60], ecx
mov ebx, dword [esp + 0x88]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov byte [esp + 8], 1
call fcn.004957e0
movzx eax, byte [esp + 0xc]
test al, al
je 0x496b48
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x60]
mov dword [esp], ecx
lea edx, [esp + 0x58]
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], ecx
mov byte [esp + 0x23], 0
mov edx, dword [esp + 0xa4]
mov eax, dword [edx]
call eax
add esp, 0xa8
ret
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov byte [esp + 0x10], 0
mov byte [esp + 0x11], 0
call fcn.00402250
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.00468ec0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x88]
mov dword [ecx + 0x18], eax
mov dword [ecx + 0x1c], 0
mov eax, dword [esp + 0x58]
mov dword [esp], ecx
lea edx, [esp + 0x58]
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], ecx
mov byte [esp + 0x23], 0
mov edx, dword [esp + 0xa4]
mov eax, dword [edx]
call eax
add esp, 0xa8
ret
mov ebx, dword [esp + 0x3c]
lea edx, [ebx + 1]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x80]
cmp edx, eax
jge 0x496ae7
mov dword [esp + 0x3c], edx
mov eax, dword [ecx + edx*4]
mov dword [esp + 0x64], eax
mov ebx, dword [esp + 0x88]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov byte [esp + 8], 1
call fcn.004957e0
movzx eax, byte [esp + 0xc]
test al, al
je 0x496c4e
lea eax, [0x702820]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0xcc], eax
mov byte [esp + 0x23], 0
mov edx, dword [esp + 0xa4]
mov eax, dword [edx]
call eax
add esp, 0xa8
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x630fc0]
mov dword [esp + 8], eax
call fcn.0040d1d0
mov ebp, dword [esp + 0x3c]
lea ebx, [ebp + 1]
mov eax, dword [esp + 0x40]
lea ecx, [0x621cc0]
mov edx, dword [esp + 0x84]
cmp ebx, eax
jge 0x496a38
mov dword [esp + 0x3c], ebx
mov eax, dword [edx + ebx*4]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x88]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov byte [esp + 8], 1
call fcn.004957e0
movzx eax, byte [esp + 0xc]
test al, al
je 0x496cd9
lea eax, [0x702820]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xcc], eax
add esp, 0xa8
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x630fc0]
mov dword [esp + 8], eax
call fcn.0040d1d0
movzx edi, byte [esp + ebp + 0x34]
imul esi, esi, 0x1000193
inc ebp
xor esi, edi
cmp ebp, 4
jl 0x496d5a
jmp 0x4968b6
mov eax, dword [0x702824]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x65d540]
mov dword [esp + 8], eax
call fcn.0040d260
imul esi, esi, 0x1000193
xor esi, 0x76
mov ebp, 1
test ebp, ebp
jle 0x496d8e
jmp 0x49688d
movzx edi, byte [esp + ecx + 0x38]
imul esi, esi, 0x1000193
inc ecx
xor esi, edi
cmp ecx, 4
jl 0x496da5
jmp 0x496793
mov ecx, dword [0x702824]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x65d540]
mov dword [esp + 8], eax
call fcn.0040d260
test ecx, ecx
je 0x496de2
call fcn.004632f0
call fcn.00463380
call fcn.004632f0
lea eax, [0x62efe0]
mov dword [esp], eax
lea eax, [0x701000]
mov dword [esp + 4], eax
call fcn.0043c340
lea eax, [0x62efe0]
mov dword [esp], eax
lea eax, [0x700ff8]
mov dword [esp + 4], eax
call fcn.0043c340
nop
call fcn.0043b8a0
add esp, 0xa8
ret
call fcn.0046aab0
jmp fcn.00496500