Function at 0x489990
Capabilities:
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x7c3e14]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x44]
cmp eax, dword [ecx + 8]
jbe 0x48a54f
sub esp, 0xc4
mov eax, dword [esp + 0xc8]
test eax, eax
jl 0x48a536
mov eax, dword [esp + 0xcc]
mov ecx, dword [eax + 0x84]
mov edx, dword [esp + 0xd0]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov dword [esp + 0x74], eax
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xa4], 0x11
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], 0
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xb0], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp + 0xb4], 0x11
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], edx
lea edx, [0x79dda0]
mov dword [esp], edx
lea ebx, [0x5f1e80]
mov dword [esp + 4], ebx
lea ebp, [esp + 0xb4]
mov dword [esp + 8], ebp
call fcn.0046e7c0
movzx eax, byte [esp + 0x14]
test al, al
jne 0x489b4b
mov eax, dword [esp + 0xc8]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 0xa
call fcn.0047d550
mov eax, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2c], ecx
mov edx, dword [esp + 0x74]
mov dword [esp], edx
call fcn.00486070
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
lea edx, [esp + 0x50]
mov dword [esp], edx
lea edx, [0x658fb4]
mov dword [esp + 4], edx
mov dword [esp + 8], 1
mov edx, dword [esp + 0x70]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x10], edx
lea edx, [0x658fb8]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.00451650
mov eax, dword [esp + 0x24]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x40], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004881b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x74]
xor ebx, ebx
jmp 0x489b8d
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x90], ecx
lea edx, [0x600700]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00409ef0
mov eax, dword [esp + 8]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0xd8], eax
add esp, 0xc4
ret
inc ebx
cmp ebx, ecx
jge 0x489c25
mov ebp, dword [eax + ebx*4]
cmp dword [ebp + 0x20], edx
jne 0x489b8c
mov dword [esp + 0x78], ebp
lea eax, [0x5f1e80]
mov dword [esp], eax
lea ecx, [esp + 0xa4]
mov dword [esp + 4], ecx
call fcn.00409a20
lea eax, [0x79dda0]
mov dword [esp], eax
lea eax, [0x5f1e80]
mov dword [esp + 4], eax
lea eax, [0x605d60]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x10], eax
call fcn.0046e9d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x80], ecx
lea edx, [0x600700]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00409ef0
mov eax, dword [esp + 8]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0xd8], eax
add esp, 0xc4
ret
lea eax, [0x5db660]
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], 0
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x88], eax
lea ecx, [0x5f2b00]
mov dword [esp], ecx
call fcn.0040c420
mov esi, dword [esp + 0x88]
test byte [esi], al
mov eax, dword [0x7c3fa0]
mov edi, dword [esp + 4]
mov dword [esp + 0x98], edi
test eax, eax
je 0x489c9b
lea eax, [0x5f2b00]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
call fcn.00411660
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x98]
call fcn.00468ab2
mov eax, dword [esp + 0x74]
movzx ecx, byte [eax + 0xc]
and ecx, 8
mov edx, dword [esp + 0x98]
mov byte [edx + 0xc], cl
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov byte [esp + 0x10], 0
mov byte [esp + 0x11], 0
call fcn.00401520
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.004650f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x98]
mov dword [ecx + 0x18], eax
mov eax, dword [esp + 0x74]
mov edx, dword [eax + 8]
xor ebx, ebx
jmp 0x489d19
imul edx, edx, 0x1000193
xor edx, 0x5b
mov ebx, 1
test ebx, ebx
jle 0x489d0b
mov dword [ecx + 8], edx
mov edx, dword [esp + 0xc8]
mov ebx, edx
jmp 0x489d31
mov dword [ecx + 8], ebp
shr edx, 8
test edx, edx
jbe 0x489d3f
mov ebp, dword [ecx + 8]
xor esi, esi
jmp 0x48a52d
mov edx, dword [ecx + 8]
xor ebp, ebp
jmp 0x489d54
imul edx, edx, 0x1000193
xor edx, 0x5d
mov ebp, 1
test ebp, ebp
jle 0x489d46
mov dword [ecx + 8], edx
mov edx, dword [0x7c3fa0]
test edx, edx
je 0x489d72
call fcn.00468410
mov dword [edi], eax
mov edx, dword [ecx + 0x20]
mov dword [edi + 4], edx
mov dword [ecx + 0x20], eax
mov dword [ecx + 0x1c], 0
mov edx, dword [eax]
test edx, edx
jbe 0x489d98
mov ebp, eax
mov eax, 0xffffffff
mov esi, edx
xor edx, edx
div esi
cmp ebx, eax
jbe 0x489d9c
jmp 0x48a505
mov ebp, eax
mov esi, edx
imul esi, ebx
mov dword [ecx], esi
test ebx, ebx
jle 0x489db8
mov eax, dword [ebp + 4]
test eax, eax
je 0x489db8
lea edx, [ebx - 1]
imul edx, dword [ebp]
add eax, edx
mov dword [ecx + 4], eax
movzx eax, byte [ebp + 0xd]
mov byte [ecx + 0xd], al
movzx eax, byte [ebp + 0xe]
mov byte [ecx + 0xe], al
mov dword [ecx + 0x28], ebx
mov eax, dword [esp + 0xcc]
mov dword [esp], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 4], eax
call fcn.004895f0
mov eax, dword [esp + 8]
lea ecx, [0x65b040]
cmp eax, ecx
jne 0x48a4e9
mov eax, dword [0x7c3fa0]
mov ecx, dword [esp + 0xc]
test byte [ecx], al
test eax, eax
jne 0x489e0e
mov eax, dword [esp + 0x98]
jmp 0x489e22
call fcn.00468410
mov dword [edi], ecx
mov eax, dword [esp + 0x98]
mov edx, dword [eax + 0x24]
mov dword [edi + 4], edx
mov dword [eax + 0x24], ecx
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 4]
test edx, edx
je 0x48a05b
mov edx, dword [eax]
test edx, edx
je 0x48a05b
mov ebx, dword [esp + 0xc8]
cmp ebx, 1
je 0x48a026
movzx ebp, byte [ecx + 0xf]
xchg ebp, eax
test al, 0x40
xchg ebp, eax
jne 0x489f28
cmp edx, 0x10000
ja 0x489f28
mov ecx, dword [eax + 4]
lea edx, [0x5ddd80]
mov dword [esp], edx
shr ecx, 2
add ecx, 7
shr ecx, 3
add ecx, 3
and ecx, 0xfffffffc
mov dword [esp + 0x44], ecx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044d9f0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x98]
mov edx, dword [ecx + 0x28]
mov dword [esp], eax
mov ebx, dword [esp + 0x44]
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0
mov ebp, dword [esp + 0x74]
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edx
call fcn.00489120
mov eax, dword [esp + 0x44]
test eax, eax
jbe 0x48a4e0
mov eax, dword [0x7c3fa0]
test eax, eax
jne 0x489ef8
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x98]
jmp 0x489f13
call fcn.00468410
mov eax, dword [esp + 0x94]
mov dword [edi], eax
mov ecx, dword [esp + 0x98]
mov edx, dword [ecx + 0x14]
mov dword [edi + 4], edx
mov dword [ecx + 0x14], eax
mov eax, ecx
mov ecx, dword [esp + 0x74]
mov ebx, dword [esp + 0xc8]
jmp 0x48a084
lea eax, [0x5dad20]
mov dword [esp], eax
call fcn.0040c420
mov eax, dword [esp + 4]
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 4
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
call fcn.004892b0
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 4]
shr ecx, 2
mov edx, dword [eax]
shr edx, 2
mov dword [esp + 0x48], edx
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
cmp edx, ecx
jbe 0x48a1ca
mov dword [esp + 0x4c], ecx
add esi, 2
cmp ebx, esi
jae 0x489fc6
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x5ddd80]
mov dword [esp + 0x10], eax
call fcn.0044db70
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
mov word [esi + ebp - 2], 1
lea edi, [ecx + 1]
cmp edx, edi
jbe 0x48a1ca
inc esi
cmp ebx, esi
jae 0x48a017
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x5ddd80]
mov dword [esp + 0x10], eax
call fcn.0044db70
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
mov byte [esi + ebp - 1], 0x81
mov edi, edx
sub edx, ecx
dec edx
jmp 0x48a449
movzx edx, byte [eax + 0xf]
movzx ebp, byte [ecx + 0xf]
and ebp, 0x40
or edx, ebp
mov byte [eax + 0xf], dl
mov edx, dword [0x7c3fa0]
mov ebp, dword [ecx + 0x14]
test edx, edx
je 0x48a050
call fcn.00468410
mov dword [edi], ebp
mov edx, dword [eax + 0x14]
mov dword [edi + 4], edx
mov dword [eax + 0x14], ebp
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
jmp 0x48a084
mov edx, dword [0x7c3fa0]
test edx, edx
je 0x48a06f
mov edx, dword [eax + 0x14]
call fcn.00468400
mov dword [edi], edx
mov dword [eax + 0x14], 0
mov dword [eax + 4], 0
mov ebx, dword [esp + 0xc8]
mov edx, dword [0x7c3fa0]
nop
mov ebp, dword [ecx]
test edx, edx
je 0x48a09b
mov edx, dword [eax + 0x10]
call fcn.00468400
mov dword [edi], edx
mov dword [eax + 0x10], 0
mov edx, dword [ecx + 0x10]
test edx, edx
je 0x48a125
mov dword [esp + 0x30], ebp
mov dword [esp + 0x8c], edx
lea eax, [0x5ec4c0]
mov dword [esp], eax
call fcn.0040c420
mov eax, dword [esp + 4]
lea ecx, [0x48a560]
mov dword [eax], ecx
mov ecx, dword [esp + 0xc8]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], edx
mov edx, dword [0x7c3fa0]
test edx, edx
jne 0x48a0f9
mov edx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x98]
jmp 0x48a117
call fcn.00468420
mov edx, dword [esp + 0x8c]
mov dword [edi], edx
mov dword [edi + 4], eax
mov ebx, dword [esp + 0x98]
mov ebp, dword [ebx + 0x10]
mov dword [edi + 8], ebp
mov dword [eax + 0xc], edx
mov dword [ebx + 0x10], eax
mov eax, ebx
mov ebx, ecx
mov ecx, dword [esp + 0x74]
cmp ebx, 1
jne 0x48a13f
movzx ecx, byte [ecx + 0xf]
test cl, 0x20
je 0x48a13f
movzx ecx, byte [eax + 0xf]
or ecx, 0x20
mov byte [eax + 0xf], cl
jmp 0x48a149
movzx ecx, byte [eax + 0xf]
and ecx, 0xffffffdf
mov byte [eax + 0xf], cl
lea eax, [0x5f1e80]
mov dword [esp], eax
lea ecx, [esp + 0xa4]
mov dword [esp + 4], ecx
call fcn.00409a20
lea eax, [0x79dda0]
mov dword [esp], eax
lea eax, [0x5f1e80]
mov dword [esp + 4], eax
lea eax, [0x605d60]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x10], eax
call fcn.0046e9d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x7c], ecx
lea edx, [0x600700]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00409ef0
mov eax, dword [esp + 8]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xd8], eax
add esp, 0xc4
ret
cmp edx, 0x80
jae 0x48a21c
inc esi
cmp ebx, esi
jae 0x48a20d
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x5ddd80]
mov dword [esp + 0x10], eax
call fcn.0044db70
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x48]
or edx, 0x80
mov byte [esi + ebp - 1], dl
jmp 0x48a2f8
inc esi
cmp ebx, esi
jae 0x48a257
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x5ddd80]
mov dword [esp + 0x10], eax
call fcn.0044db70
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x48]
mov byte [esi + ebp - 1], pe_nt_image_headers32
nop
jmp 0x48a270
mov edi, edx
or edi, 0x80
xchg edi, eax
mov byte [esi + ebp - 1], al
xchg edi, eax
shr edx, 7
mov dword [esp + 0x38], edx
cmp edx, 0x80
jb 0x48a2b9
inc esi
cmp ebx, esi
jae 0x48a25f
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x5ddd80]
mov dword [esp + 0x10], eax
call fcn.0044db70
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x38]
jmp 0x48a25f
inc esi
cmp ebx, esi
jae 0x48a2f4
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x5ddd80]
mov dword [esp + 0x10], eax
call fcn.0044db70
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x38]
mov byte [esi + ebp - 1], dl
mov edx, dword [esp + 0xc8]
lea edi, [edx - 1]
jmp 0x48a313
mov ecx, edi
or ecx, 0x80
mov byte [esi + ebp - 1], cl
shr edi, 7
mov dword [esp + 0x34], edi
cmp edi, 0x80
jb 0x48a363
inc esi
cmp ebx, esi
jae 0x48a304
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x5ddd80]
mov dword [esp + 0x10], eax
call fcn.0044db70
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0xc8]
mov edi, dword [esp + 0x34]
jmp 0x48a304
inc esi
cmp ebx, esi
jae 0x48a3a5
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x5ddd80]
mov dword [esp + 0x10], eax
call fcn.0044db70
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0xc8]
mov edi, dword [esp + 0x34]
xchg edi, eax
mov byte [esi + ebp - 1], al
xchg edi, eax
inc esi
cmp ebx, esi
jae 0x48a3e5
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x5ddd80]
mov dword [esp + 0x10], eax
call fcn.0044db70
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0xc8]
mov byte [esi + ebp - 1], 0
test esi, esi
jbe 0x48a431
lea ecx, [esi - 4]
mov dword [ebp], ecx
mov ecx, dword [esp + 0x98]
movzx ebx, byte [ecx + 0xf]
or ebx, 0x40
mov byte [ecx + 0xf], bl
mov ebx, dword [0x7c3fa0]
test ebx, ebx
je 0x48a41c
call fcn.00468410
mov dword [edi], ebp
mov ebx, dword [ecx + 0x14]
mov dword [edi + 4], ebx
mov dword [ecx + 0x14], ebp
mov ebp, dword [ecx]
mov dword [ecx + 4], ebp
mov eax, ecx
mov ecx, dword [esp + 0x74]
mov ebx, edx
jmp 0x48a084
xor eax, eax
mov ecx, eax
call fcn.00468460
mov ecx, edx
or ecx, 0x80
mov byte [esi + ebp - 1], cl
shr edx, 7
mov dword [esp + 0x3c], edx
cmp edx, 0x80
jb 0x48a496
inc esi
cmp ebx, esi
jae 0x48a43a
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x5ddd80]
mov dword [esp + 0x10], eax
call fcn.0044db70
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x48]
jmp 0x48a43a
inc esi
cmp ebx, esi
jae 0x48a4d5
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x5ddd80]
mov dword [esp + 0x10], eax
call fcn.0044db70
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x48]
mov byte [esi + ebp - 1], dl
mov edx, edi
jmp 0x48a1ca
xor eax, eax
mov ecx, eax
call fcn.00468460
mov ecx, dword [0x65b044]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x600700]
mov dword [esp + 8], eax
call fcn.00409980
lea eax, [0x5dda40]
mov dword [esp], eax
lea eax, [0x6591f0]
mov dword [esp + 4], eax
call fcn.004382f0
imul ebp, ebp, 0x1000193
movzx edi, dl
xor ebp, edi
mov esi, 1
test esi, esi
jle 0x48a51d
jmp 0x489d2b
lea eax, [0x5dda40]
mov dword [esp], eax
lea eax, [0x6591e8]
mov dword [esp + 4], eax
call fcn.004382f0
nop
call fcn.00467000
jmp fcn.00489990