Function at 0x6894c890
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ecx, 0x11
push edi
push esi
mov esi, eax
push ebx
sub esp, 0x4c
mov dword [esp + 0x18], edx
add edx, 0x48
mov edi, edx
mov dword [esp + 0x1c], eax
xor eax, eax
rep stosd dword es:[edi], eax
mov dword [esi + 0x68], 0
mov dword [esi + 0x50], 0
mov edx, dword [esi + 0x4c]
test edx, edx
je 0x6894cc61
mov esi, dword [esp + 0x1c]
lea eax, [esi + 0x54]
mov dword [esp + 4], eax
mov eax, dword [esi + 0x60]
mov dword [esp + 0x20], eax
shr eax, 0x1f
lea eax, [edx + eax - 1]
mov dword [esp], eax
call fcn.6894f320
test eax, eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
je 0x6894cc20
mov eax, dword [eax + 0x5c]
mov esi, dword [esp + 0x18]
mov dword [esi + 0x70], eax
mov esi, dword [esp + 0x20]
lea eax, [esi + 4]
sub eax, dword [esi + 4]
lea edi, [eax + 9]
mov esi, eax
mov dword [esp + 0x28], eax
mov dword [esp], edi
mov dword [esp + 0x24], edi
call sub.msvcrt.dll_strlen
cmp byte [esi + 9], 0x65
lea eax, [edi + eax + 1]
je 0x6894cb60
mov esi, dword [esp + 0x28]
movzx edx, byte [eax]
movzx ecx, byte [esi + 8]
mov byte [esp + 0x2f], cl
cmp cl, 3
ja 0x6894cd18
xor esi, esi
xor ecx, ecx
lea esi, [esi]
movzx ebx, byte [eax]
add eax, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or esi, edx
test bl, bl
js 0x6894c950
mov ebx, dword [esp + 0x18]
xor ecx, ecx
mov dword [ebx + 0x7c], esi
xor ebx, ebx
lea esi, [esi]
mov ebp, eax
movzx edx, byte [eax]
add eax, 1
mov edi, edx
and edi, 0x7f
shl edi, cl
add ecx, 7
or ebx, edi
test dl, dl
js 0x6894c978
mov edi, ebp
mov ebp, edx
mov edx, edi
cmp ecx, 0x1f
ja 0x6894c9a9
and ebp, 0x40
je 0x6894c9a9
mov edi, 0xffffffff
shl edi, cl
or ebx, edi
mov ecx, dword [esp + 0x18]
xor edi, edi
mov ebp, ebx
mov dword [ecx + 0x78], ebx
xor ecx, ecx
cmp byte [esp + 0x2f], 1
je 0x6894cb90
lea esi, [esi]
movzx ebx, byte [eax]
add eax, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or edi, edx
test bl, bl
js 0x6894c9c8
mov ebx, ebp
mov ecx, dword [esp + 0x18]
xor ebp, ebp
mov dword [ecx + 0x80], edi
mov edi, dword [esp + 0x24]
mov byte [ecx + 0x85], 0xff
movzx edx, byte [edi]
cmp dl, 0x7a
je 0x6894cc70
test dl, dl
je 0x6894cee0
mov edi, dword [esp + 0x24]
add edi, 1
sub edx, 0x42
cmp dl, 0x11
ja case.0x6894ca1d.1
movzx edx, dl
jmp dword [edx*4 + 0x68a1d9fc]
movzx edx, byte [eax]
mov ecx, dword [esp + 0x18]
add eax, 1
mov byte [ecx + 0x85], dl
movzx edx, byte [edi]
add edi, 1
test dl, dl
jne 0x6894ca12
test ebp, ebp
jne 0x6894ca58
mov ebp, eax
lea esi, [esi]
nop
test ebp, ebp
je 0x6894cd1d
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
lea edx, [ecx + eax + 4]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp], eax
mov eax, ebp
cmp ebx, 0xfffffffc
jne 0x6894ca7d
cmp esi, 1
je 0x6894cd4f
call fcn.6894c090
mov eax, dword [esp + 0x18]
movzx eax, byte [eax + 0x84]
cmp al, 0xff
je 0x6894cd30
and eax, 7
cmp al, 2
je 0x6894cd08
jbe 0x6894ccc0
cmp al, 3
je 0x6894ccc8
cmp al, 4
jne 0x68a004cc
mov ebx, 0x18
mov eax, dword [esp + 0x20]
add ebx, eax
mov eax, dword [esp + 0x18]
cmp byte [eax + 0x86], 0
movzx edx, byte [eax + 0x85]
je 0x6894ccd8
xor esi, esi
xor ecx, ecx
mov edi, edx
nop
movzx edx, byte [ebx]
add ebx, 1
mov eax, edx
and eax, 0x7f
shl eax, cl
add ecx, 7
or esi, eax
test dl, dl
js 0x6894cae0
mov edx, edi
cmp dl, 0xff
je 0x6894cb1b
lea eax, [esp + 0x3c]
mov edi, dword [esp + 0x1c]
movzx edx, dl
mov ecx, ebx
mov dword [esp], eax
mov eax, edi
call fcn.6894adc0
mov eax, dword [esp + 0x3c]
mov dword [edi + 0x50], eax
add ebx, esi
mov esi, dword [esp + 0x20]
mov eax, dword [esi]
lea edx, [esi + eax + 4]
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x78], 0xfffffffc
jne 0x6894cb3b
cmp dword [eax + 0x7c], 1
je 0x6894cd3a
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp], eax
mov eax, ebx
call fcn.6894c090
xor eax, eax
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
ret
cmp byte [esi + 0xa], 0x68
jne 0x6894c930
mov edx, dword [eax]
mov esi, dword [esp + 0x18]
add eax, 4
mov dword [esi + 0x88], edx
mov esi, dword [esp + 0x28]
add esi, 0xb
mov dword [esp + 0x24], esi
jmp 0x6894c930
movzx edi, byte [eax]
lea eax, [edx + 2]
jmp 0x6894c9e0
movzx edx, byte [eax]
mov ecx, dword [esp + 0x18]
add eax, 1
add edi, 1
mov byte [ecx + 0x84], dl
movzx edx, byte [edi - 1]
test dl, dl
jne 0x6894ca12
jmp 0x6894ca42
movzx edx, byte [eax]
lea ecx, [eax + 1]
lea eax, [esp + 0x3c]
add edi, 1
mov dword [esp], eax
mov eax, dword [esp + 0x1c]
call fcn.6894adc0
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x74], edx
movzx edx, byte [edi - 1]
test dl, dl
jne 0x6894ca12
jmp 0x6894ca42
mov ecx, dword [esp + 0x18]
add edi, 1
mov byte [ecx + 0x87], 1
movzx edx, byte [edi - 1]
test dl, dl
jne 0x6894ca12
jmp 0x6894ca42
mov ecx, dword [eax + 0x48]
mov eax, dword [eax + 0x4c]
cmp byte [eax - 2], 0xff
movzx edx, byte [eax - 5]
je 0x6894ce81
cmp dl, 0xe8
je 0x6894cea8
cmp dl, 0x8b
jne 0x6894cc4c
cmp byte [eax - 4], 0x4d
je 0x6894cdd3
cmp byte [eax - 1], 0x83
jne 0x6894cc61
cmp byte [eax], 9
jne 0x6894cc61
cmp byte [eax + 1], 0
je 0x6894cd67
add esp, 0x4c
mov eax, 5
pop ebx
pop esi
pop edi
pop ebp
ret
xor ecx, ecx
mov edi, ebx
lea esi, [esi]
movzx ebx, byte [eax]
add eax, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or ebp, edx
test bl, bl
js 0x6894cc78
mov ebx, edi
mov edi, dword [esp + 0x18]
add ebp, eax
mov byte [edi + 0x86], 1
mov edi, dword [esp + 0x24]
movzx edx, byte [edi + 1]
lea ecx, [edi + 1]
test dl, dl
je 0x6894ca58
mov dword [esp + 0x24], ecx
jmp 0x6894ca0b
test al, al
jne 0x6894ceee
mov ebx, 0x10
jmp 0x6894cabb
cmp dl, 0xff
je 0x6894cb1d
lea eax, [esp + 0x3c]
mov esi, dword [esp + 0x1c]
mov ecx, ebx
mov dword [esp], eax
mov eax, esi
call fcn.6894adc0
mov ebx, eax
mov eax, dword [esp + 0x3c]
mov dword [esi + 0x50], eax
jmp 0x6894cb1d
mov ebx, 0xc
jmp 0x6894cabb
cmp dl, 4
je 0x6894cd59
add esp, 0x4c
mov eax, 3
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebx, 8
jmp 0x6894cabb
mov dword [esp], eax
mov ecx, dword [esp + 0x1c]
mov eax, ebx
call fcn.6894b930
xor eax, eax
jmp 0x6894cb4f
call fcn.6894b930
jmp 0x6894ca82
cmp byte [eax + 1], 0
jne 0x6894cd1d
add eax, 2
jmp 0x6894c948
cmp byte [eax + 2], 0x2d
jne 0x6894cc61
cmp byte [eax + 3], 0
jne 0x6894cc61
cmp byte [eax + 4], 0x10
jne 0x6894cc61
cmp byte [eax + 5], 0
jne 0x6894cc61
mov eax, dword [esp + 0x18]
mov byte [eax + 0x5c], 1
mov dword [eax + 0x68], 4
mov dword [eax + 0x64], 4
mov byte [eax + 0x49], 1
mov dword [eax + 4], 0xfffffffc
mov dword [eax + 0x80], 8
mov byte [eax + 0x50], 1
mov dword [eax + 0x20], 0
mov byte [eax + 0x87], 1
xor eax, eax
jmp 0x6894cb4f
cmp byte [eax], 0x64
jne 0x6894cc4c
cmp byte [eax + 1], 0x8b
jne 0x6894cc61
mov eax, dword [ecx + 8]
mov edx, dword [eax + 0xc4]
mov esi, dword [esp + 0x18]
mov ebx, edx
mov byte [esi + 0x5c], 1
sub ebx, ecx
lea ecx, [eax + 0xb0]
mov dword [esi + 0x68], 4
sub ecx, edx
mov dword [esi + 0x64], ebx
mov dword [esi], ecx
lea ecx, [eax + 0xa4]
sub ecx, edx
mov dword [esi + 0x48], 0x1010101
mov dword [esi + 0xc], ecx
lea ecx, [eax + 0xac]
sub ecx, edx
mov dword [esi + 0x4d], 0x1010101
mov dword [esi + 4], ecx
lea ecx, [eax + 0xa8]
sub ecx, edx
mov byte [esi + 0x87], 1
mov dword [esi + 8], ecx
lea ecx, [eax + 0xa0]
mov dword [esi + 0x80], 8
sub ecx, edx
mov dword [esi + 0x18], ecx
lea ecx, [eax + 0x9c]
sub ecx, edx
mov dword [esi + 0x1c], ecx
lea ecx, [eax + 0xb4]
add eax, 0xb8
sub eax, edx
sub ecx, edx
mov dword [esi + 0x20], eax
xor eax, eax
mov dword [esi + 0x14], ecx
jmp 0x6894cb4f
cmp byte [eax - 1], 0xd0
jne 0x6894cc34
cmp byte [eax], 0x83
jne 0x6894cc34
cmp byte [eax + 1], 0xf8
jne 0x6894cc34
mov eax, dword [ecx]
mov eax, dword [eax + 4]
jmp 0x6894cde9
cmp byte [eax - 4], 0x68
movzx edx, byte [eax]
je 0x6894cee7
cmp dl, 0x83
jne 0x6894cc4c
cmp byte [eax + 1], 0xc4
jne 0x6894cc61
cmp byte [eax + 3], 0xb8
jne 0x6894cc61
mov eax, dword [ecx + 0x38]
jmp 0x6894cde9
mov ebp, eax
jmp 0x6894ca58
cmp dl, 0xc3
jne 0x6894ceb1
jmp 0x6894ce9e
jmp 0x68a004cc
ud2