Function at 0x70304b60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x1090
call fcn.702ecc20
mov eax, dword [0x7034b250]
xor eax, esp
mov dword [esp + 0x108c], eax
mov eax, dword [esp + 0x10a0]
mov ecx, dword [esp + 0x109c]
mov edx, dword [esp + 0x10a4]
push ebx
mov ebx, dword [esp + 0x1098]
push edi
xor edi, edi
mov dword [esp + 0x10], ebx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x14], 1
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
cmp eax, edi
jne 0x70304bdf
cmp ecx, edi
je 0x70304bc6
mov dword [ecx], 0x63
pop edi
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x108c]
xor ecx, esp
call fcn.702e1c2f
add esp, 0x1090
ret
mov dword [eax], edi
cmp ecx, edi
je 0x70304be7
mov dword [ecx], edi
push ebp
push esi
cmp edx, edi
jne 0x70304bfb
mov esi, 0x10
mov dword [esp + 0x10], esi
jmp 0x70305295
mov eax, dword [esp + 0x10b8]
mov dword [edx], edi
cmp eax, edi
jne 0x70304c14
mov eax, 0x70320db8
mov dword [esp + 0x10b8], eax
mov ebp, dword [esp + 0x10a8]
lea ecx, [eax + 0x100]
lea edx, [eax + 0x200]
mov dword [esp + 0x38], eax
add eax, 0x340
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], eax
test ebp, 0xd8038580
je 0x70304c52
mov esi, 0x11
mov dword [esp + 0x10], esi
jmp 0x70305289
cmp byte [ebx], 0x28
jne 0x70304dbd
jmp 0x70304c60
cmp byte [ebx + edi + 1], 0x2a
jne 0x70304dbd
push 5
lea esi, [ebx + edi + 2]
push str.UTF8_
push esi
call fcn.702e5728
add esp, 0xc
test eax, eax
jne 0x70304c91
add edi, 7
or ebp, 0x800
jmp 0x70304db3
push 4
push str.UCP_
push esi
call fcn.702e5728
add esp, 0xc
test eax, eax
jne 0x70304cb3
add edi, 6
or ebp, 0x20000000
jmp 0x70304db3
push 0xd
push str.NO_START_OPT_
push esi
call fcn.702e5728
add esp, 0xc
test eax, eax
jne 0x70304cd5
add edi, 0xf
or ebp, 0x4000000
jmp 0x70304db3
push 3
push 0x70320d08
push esi
call fcn.702e5728
add esp, 0xc
test eax, eax
jne 0x70304cfc
add edi, 5
mov eax, 0x100000
and ebp, 0xff8fffff
jmp 0x70304db1
push 3
push 0x70320d04
push esi
call fcn.702e5728
add esp, 0xc
test eax, eax
jne 0x70304d23
add edi, 5
mov eax, 0x200000
and ebp, 0xff8fffff
jmp 0x70304db1
push 5
push str.CRLF_
push esi
call fcn.702e5728
add esp, 0xc
test eax, eax
jne 0x70304d47
add edi, 7
mov eax, 0x300000
and ebp, 0xff8fffff
jmp 0x70304db1
push 4
push str.ANY_
push esi
call fcn.702e5728
add esp, 0xc
test eax, eax
jne 0x70304d6b
add edi, 6
mov eax, 0x400000
and ebp, 0xff8fffff
jmp 0x70304db1
push 8
push str.ANYCRLF_
push esi
call fcn.702e5728
add esp, 0xc
test eax, eax
jne 0x70304d8f
add edi, 0xa
mov eax, 0x500000
and ebp, 0xff8fffff
jmp 0x70304db1
push 0xc
push str.BSR_ANYCRLF_
push esi
call fcn.702e5728
add esp, 0xc
test eax, eax
jne 0x70304dd9
add edi, 0xe
mov eax, 0x800000
and ebp, 0xfe7fffff
or ebp, eax
cmp byte [ebx + edi], 0x28
je 0x70304c60
mov eax, ebp
shr eax, 0xb
mov edx, 1
and eax, edx
je 0x70304df7
mov esi, 0x20
mov dword [esp + 0x10], esi
jmp 0x70305289
push 0xc
push 0x70320cc8
push esi
call fcn.702e5728
add esp, 0xc
test eax, eax
jne 0x70304dbd
add edi, 0xe
mov eax, 0x1000000
jmp 0x70304dab
test ebp, 0x20000000
je 0x70304e0d
mov esi, 0x43
mov dword [esp + 0x10], esi
jmp 0x70305289
mov eax, ebp
and eax, 0x1800000
je 0x70304e32
cmp eax, 0x800000
je 0x70304e32
cmp eax, 0x1000000
je 0x70304e32
mov esi, 0x38
mov dword [esp + 0x10], esi
jmp 0x70305289
mov eax, ebp
and eax, 0x700000
cmp eax, 0x300000
mov ecx, 2
jg 0x70304e9a
je 0x70304e93
test eax, eax
je 0x70304e59
cmp eax, 0x100000
je 0x70304e8c
cmp eax, 0x200000
jne 0x70304ea8
mov eax, 0xa
cmp eax, 0xff
mov dword [esp + 0x90], 0
jle 0x70304ec8
mov dword [esp + 0x94], ecx
mov ecx, eax
sar ecx, 8
mov byte [esp + 0x98], cl
mov byte [esp + 0x99], al
jmp 0x70304ed6
mov eax, 0xd
jmp 0x70304e5e
mov eax, 0xd0a
jmp 0x70304e5e
cmp eax, 0x400000
je 0x70304ebf
cmp eax, 0x500000
je 0x70304eb6
mov esi, 0x38
mov dword [esp + 0x10], esi
jmp 0x70305289
mov dword [esp + 0x90], ecx
jmp 0x70304ed6
mov dword [esp + 0x90], edx
jmp 0x70304ed6
mov dword [esp + 0x94], edx
mov byte [esp + 0x98], al
xor eax, eax
lea edx, [esp + 0x9c]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x60], eax
mov eax, edx
mov dword [esp + 0x4c], eax
mov ecx, edx
mov eax, ebx
mov dword [esp + 0x48], edx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x50], ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x70304f14
sub eax, edx
add eax, ebx
lea edx, [esp + 0x9c]
mov dword [esp + 0x20], edx
mov dword [esp + 0x54], eax
xor eax, eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x3c]
push edx
push eax
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x38]
push edx
push eax
push eax
push eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0x78], eax
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x48]
push edx
mov eax, ebp
and eax, 7
push eax
add edi, ebx
push ebp
mov dword [esp + 0xb0], ebp
mov dword [esp + 0x48], edi
mov byte [esp + 0xd0], 0x5e
call fcn.70304400
mov esi, dword [esp + 0x44]
add esp, 0x34
test esi, esi
jne 0x70305289
mov ebp, dword [esp + 0x1c]
cmp ebp, 0x10000
jle 0x70304fb3
mov esi, 0x14
mov dword [esp + 0x10], esi
jmp 0x70305289
mov ecx, dword [esp + 0x68]
add ecx, 3
imul ecx, dword [esp + 0x64]
lea ebx, [ecx + ebp + 0x28]
push ebx
call dword [sym.safemon.dll_pcre_malloc]
mov esi, eax
add esp, 4
test esi, esi
jne 0x70304fe1
mov esi, 0x15
mov dword [esp + 0x10], esi
jmp 0x70305285
mov dword [esi + 4], ebx
mov dword [esi], 0x50435245
mov edx, dword [esp + 0x7c]
mov dword [esi + 8], edx
movzx eax, word [esp + 0x80]
mov word [esi + 0xc], ax
xor edx, edx
mov word [esi + 0x14], dx
xor ecx, ecx
mov word [esi + 0xe], cx
xor eax, eax
mov word [esi + 0x16], ax
mov ecx, 0x28
mov word [esi + 0x18], cx
movzx edx, word [esp + 0x68]
mov word [esi + 0x1a], dx
movzx eax, word [esp + 0x64]
mov word [esi + 0x1c], ax
mov eax, dword [esp + 0x10b8]
xor ecx, ecx
mov edx, eax
sub edx, 0x70320db8
neg edx
sbb edx, edx
and edx, eax
mov dword [esi + 0x20], edx
mov word [esi + 0x1e], cx
mov dword [esi + 0x24], ecx
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x70], eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x64], ecx
movzx eax, word [esi + 0x18]
push ecx
add eax, esi
mov dword [esp + 0x64], eax
movzx edx, word [esi + 0x1a]
movzx ebx, word [esi + 0x1c]
imul ebx, edx
lea edx, [esp + 0x3c]
push edx
push ecx
lea edx, [esp + 0x30]
push edx
lea edx, [esp + 0x38]
push edx
push ecx
push ecx
push ecx
add ebx, eax
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], ecx
mov dword [esp + 0x78], ecx
lea eax, [esp + 0xbc]
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x7c], eax
lea ecx, [esp + 0x30]
push ecx
mov byte [ebx], 0x5e
mov eax, dword [esi + 8]
lea edx, [esp + 0x38]
push edx
lea ecx, [esp + 0x48]
mov edx, eax
push ecx
and edx, 7
push edx
push eax
mov dword [esp + 0x48], edi
mov dword [esp + 0x54], ebx
call fcn.70304400
movzx eax, word [esp + 0xa0]
mov word [esi + 0x10], ax
mov cx, word [esp + 0xa8]
mov word [esi + 0x12], cx
movzx edx, word [esp + 0xb4]
add esp, 0x34
mov word [esi + 0xc], dx
cmp dword [esp + 0x88], 0
je 0x70305110
mov dword [esp + 0x24], 0xffffffff
cmp dword [esp + 0x10], 0
jne 0x70305128
mov eax, dword [esp + 0x14]
cmp byte [eax], 0
je 0x70305128
mov dword [esp + 0x10], 0x16
mov eax, dword [esp + 0x20]
mov byte [eax], 0
inc eax
sub eax, ebx
cmp eax, ebp
jle 0x70305143
mov dword [esp + 0x10], 0x17
jmp 0x703051c5
cmp dword [esp + 0x10], 0
jne 0x703051c5
lea ebx, [ebx]
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0x9c]
cmp eax, ecx
jbe 0x703051b3
sub eax, 2
mov dword [esp + 0x5c], eax
movzx edi, byte [eax]
movzx edx, byte [eax + 1]
shl edi, 8
or edi, edx
movzx eax, byte [edi + ebx]
movzx ecx, byte [edi + ebx + 1]
shl eax, 8
or eax, ecx
push eax
push 0
push ebx
call fcn.70300740
add esp, 0xc
test eax, eax
je 0x703051a9
mov edx, eax
sub edx, ebx
sar edx, 8
sub al, bl
mov byte [edi + ebx], dl
mov byte [edi + ebx + 1], al
cmp dword [esp + 0x10], 0
je 0x70305150
jmp 0x703051c5
mov dword [esp + 0x10], 0x35
jmp 0x703051c5
mov ax, word [esi + 0x12]
cmp ax, word [esi + 0x10]
jbe 0x703051c5
mov dword [esp + 0x10], 0xf
cmp dword [esp + 0x8c], 0
je 0x70305270
push 0xffffffffffffffff
push 0
push ebx
call fcn.70300740
mov edi, eax
add esp, 0xc
test edi, edi
je 0x70305270
lea ebx, [ebx]
movzx ecx, byte [edi + 1]
movzx edx, byte [edi + 2]
shl ecx, 8
or ecx, edx
jne 0x70305247
movzx eax, byte [edi - 2]
movzx ecx, byte [edi - 1]
shl eax, 8
or eax, ecx
movzx edx, byte [eax + edi - 3]
lea ebp, [eax + edi - 3]
lea eax, [esp + 0x38]
push eax
mov byte [ebp], 0
mov ecx, dword [esi + 8]
push 1
push ecx
push edi
mov dword [esp + 0x2c], edx
call fcn.70300490
mov dl, byte [esp + 0x2c]
add esp, 0x10
mov byte [ebp], dl
test eax, eax
jl 0x7030525f
mov ecx, eax
sar ecx, 8
mov byte [edi + 1], cl
mov byte [edi + 2], al
push 0xffffffffffffffff
push 0
add edi, 3
push edi
call fcn.70300740
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x703051f0
jmp 0x70305270
sub eax, 0xfffffffe
neg eax
sbb eax, eax
and eax, 0xfffffff5
add eax, 0x24
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], 0
je 0x703052b3
push esi
call dword [sym.safemon.dll_pcre_free]
mov esi, dword [esp + 0x14]
add esp, 4
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x2c]
sub eax, ebx
mov dword [edx], eax
mov ecx, esi
call fcn.702ffa10
mov ecx, dword [esp + 0x34]
mov dword [ecx], eax
mov eax, dword [esp + 0x30]
test eax, eax
je 0x703052ac
mov dword [eax], esi
xor eax, eax
jmp 0x70305382
mov eax, dword [esi + 8]
test al, 0x10
jne 0x7030533e
mov edx, dword [esp + 0x78]
push edx
mov dword [esp + 0x1c], eax
push 0
lea eax, [esp + 0x20]
push eax
push ebx
call fcn.70304830
add esp, 0x10
test eax, eax
je 0x703052e1
or dword [esi + 8], 0x10
jmp 0x7030533e
mov eax, dword [esp + 0x28]
test eax, eax
jge 0x703052fd
push 0
lea ecx, [esp + 0x1c]
push ecx
push ebx
call fcn.70304a50
add esp, 0xc
test eax, eax
jl 0x70305325
mov ecx, eax
and ecx, 0xff
test eax, 0x100
je 0x7030531a
mov edx, dword [esp + 0x3c]
movzx edx, byte [edx + ecx]
cmp edx, ecx
jne 0x7030531a
mov eax, ecx
or word [esi + 0xc], 2
mov word [esi + 0x14], ax
jmp 0x7030533e
mov eax, dword [esp + 0x78]
push eax
push 0
push ebx
call fcn.70304910
add esp, 0xc
test eax, eax
je 0x7030533e
or word [esi + 0xc], 8
mov ecx, dword [esp + 0x24]
test ecx, ecx
jl 0x70305380
test byte [esi + 8], 0x10
je 0x70305354
test ecx, 0x200
je 0x70305380
mov eax, ecx
and eax, 0xff
test ecx, 0x100
je 0x70305375
mov edx, dword [esp + 0x3c]
movzx edx, byte [edx + eax]
cmp edx, eax
jne 0x70305375
and ecx, 0xfffffeff
or word [esi + 0xc], 4
mov eax, ecx
mov word [esi + 0x16], ax
mov eax, esi
mov ecx, dword [esp + 0x109c]
pop esi
pop ebp
pop edi
pop ebx
xor ecx, esp
call fcn.702e1c2f
add esp, 0x1090
ret