Function at 0x7df0dba0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x32c
push ebx
push edi
push 0x103
lea eax, [ebp - 0x123]
push 0
push eax
mov byte [ebp - 0x124], 0
call fcn.7df14470
mov ebx, dword [ebp + 0xc]
push 0x2e
push ebx
mov dword [ebp - 0x20], 0
call fcn.7df148b0
sub eax, ebx
movzx edi, ax
push edi
lea ecx, [ebp - 0x124]
push ebx
push ecx
call fcn.7df143f0
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x1c]
lea edx, [ebp - 0x32c]
push 0x104
push ecx
mov byte [ebp + edi - 0x124], 0
mov dword [ebp - 0x18], edx
call fcn.7df15260
mov edx, dword [ebp - 0x18]
push edx
call fcn.7df15680
add esp, 0x30
test eax, eax
je 0x7df0dc3a
mov eax, dword [ebp + 0x10]
push eax
lea ecx, [ebp - 0x1c]
push ecx
call fcn.7df15900
add esp, 8
test eax, eax
jne 0x7df0dc3a
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
lea edx, [ebp - 0x1c]
push 3
push edx
call fcn.7df03950
mov eax, dword [ebp - 0x18]
push eax
lea ecx, [ebp - 0x124]
push ecx
call fcn.7df14a90
mov eax, dword [ebp + 8]
lea edx, [ebp - 0x124]
push edx
push eax
call fcn.7df038d0
mov ecx, dword [ebp - 0x18]
push ecx
mov esi, eax
call fcn.7df13b20
add esp, 0x1c
mov dword [ebp - 8], eax
test esi, esi
je 0x7df0dd0b
lea ebx, [edi + ebx + 1]
push ebx
call fcn.7df146c0
add esp, 4
cmp eax, 1
jbe 0x7df0ddad
cmp byte [ebx], 0x23
jne 0x7df0ddad
mov eax, dword [ebp + 8]
lea edx, [ebp - 0x20]
push edx
inc ebx
push ebx
push eax
call fcn.7df14670
mov ecx, dword [ebp - 0x20]
add esp, 0xc
mov dword [ebp + 0xc], ecx
test ecx, ecx
je 0x7df0dd0b
mov eax, dword [esi + 0x3c]
mov edx, 0x5a4d
cmp word [esi], dx
jne 0x7df0dd0b
cmp dword [eax + esi], 0x4550
jne 0x7df0dd0b
mov edx, dword [eax + esi + 0x7c]
mov dword [ebp - 4], edx
test edx, edx
je 0x7df0dd0b
mov edi, dword [eax + esi + 0x78]
mov edx, dword [edi + esi + 0x24]
mov eax, dword [edi + esi + 0x20]
add edi, esi
add edx, esi
mov dword [ebp - 0xc], edx
mov edx, dword [edi + 0x1c]
mov ebx, ecx
add eax, esi
add edx, esi
shr ebx, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], edx
test ebx, ebx
je 0x7df0dd71
xor ebx, ebx
cmp dword [edi + 0x18], ebx
ja 0x7df0dd17
xor eax, eax
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + ebx*4]
mov ecx, dword [ebp + 0xc]
add eax, esi
push eax
push ecx
call fcn.7df15300
add esp, 8
test eax, eax
jne 0x7df0dd3a
inc ebx
cmp ebx, dword [edi + 0x18]
jb 0x7df0dd14
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp - 0xc]
movzx eax, word [edx + ebx*2]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx + eax*4]
add eax, esi
cmp eax, edi
jbe 0x7df0dd0d
add edi, dword [ebp - 4]
cmp eax, edi
jae 0x7df0dd0d
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 8]
push esi
push edx
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.7df0dea0
add esp, 0x14
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
cmp ecx, dword [edi + 0x14]
jae 0x7df0dd0b
test ecx, ecx
je 0x7df0dd0b
mov eax, ecx
sub eax, dword [edi + 0x10]
mov eax, dword [edx + eax*4]
add eax, esi
cmp eax, edi
jbe 0x7df0dd0d
add edi, dword [ebp - 4]
cmp eax, edi
jae 0x7df0dd0d
mov edx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 8]
push esi
push ecx
push eax
push edx
call fcn.7df0dea0
add esp, 0x14
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
test ebx, ebx
je 0x7df0dd0b
mov eax, dword [esi + 0x3c]
mov ecx, 0x5a4d
cmp word [esi], cx
jne 0x7df0dd0b
cmp dword [eax + esi], 0x4550
jne 0x7df0dd0b
mov ecx, dword [eax + esi + 0x7c]
mov dword [ebp - 4], ecx
test ecx, ecx
je 0x7df0dd0b
mov edi, dword [eax + esi + 0x78]
mov ecx, dword [edi + esi + 0x24]
mov eax, dword [edi + esi + 0x20]
add edi, esi
add ecx, esi
mov dword [ebp - 0xc], ecx
mov ecx, dword [edi + 0x1c]
mov edx, ebx
add eax, esi
add ecx, esi
shr edx, 0x10
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], ecx
test edx, edx
je 0x7df0de79
cmp dword [edi + 0x18], 0
mov dword [ebp + 0xc], 0
jbe 0x7df0dd0b
jmp 0x7df0de23
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + ecx*4]
add edx, esi
push edx
push ebx
call fcn.7df15300
add esp, 8
test eax, eax
jne 0x7df0de4e
mov eax, dword [ebp + 0xc]
inc eax
mov dword [ebp + 0xc], eax
cmp eax, dword [edi + 0x18]
jb 0x7df0de20
pop esi
pop edi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp + 0xc]
movzx edx, word [eax + ecx*2]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + edx*4]
add eax, esi
cmp eax, edi
jbe 0x7df0dd0d
add edi, dword [ebp - 4]
cmp eax, edi
jae 0x7df0dd0d
push ebx
jmp 0x7df0dd58
cmp ebx, dword [edi + 0x14]
jae 0x7df0dd0b
test ebx, ebx
je 0x7df0dd0b
mov edx, ebx
sub edx, dword [edi + 0x10]
mov eax, dword [ecx + edx*4]
jmp 0x7df0de5e