Function at 0xdf03e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x14b6840]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x3c]
cmp eax, dword [ecx + 8]
jbe 0xdf0f9a
sub esp, 0xbc
mov ebx, dword [esp + 0xc0]
test byte [ebx], al
mov ebp, dword [0x14b675c]
mov esi, dword [0x118543c]
mov dword [esp + 0x60], ebp
mov dword [esp + 0x64], esi
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
lea ebp, [0xdf03b0]
mov dword [esp + 0xb0], ebp
lea ebp, [esp + 0x60]
mov dword [esp + 0xb4], ebp
xor eax, eax
xor ecx, ecx
mov edx, 0xffffffff
xor ebp, ebp
xor esi, esi
jmp 0xdf047c
mov edi, dword [esp + 0x48]
inc edi
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x58]
mov ebx, ecx
mov eax, edi
mov ecx, edx
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0x98]
mov dword [esp + 0x5c], ecx
cmp eax, 4
jge 0xdf0581
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], ebp
mov dword [esp + 0x3c], edx
lea edi, [0x1185920]
mov edx, dword [edi + eax*4]
mov ecx, edx
mov edi, 1
shl edi, cl
mov esi, dword [esp + 0x5c]
shl esi, cl
mov dword [esp + 0xa8], esi
lea ebp, [eax + eax*2]
mov esi, dword [ebx + ebp*4 + 8]
mov dword [esp + 0xa4], esi
lea esi, [0x1185940]
mov esi, dword [esi + eax*4]
mov ebp, dword [ebx + ebp*4]
mov dword [esp + 0xb8], ebp
cmp ecx, 0x20
sbb ecx, ecx
and edi, ecx
mov edx, esi
mov esi, dword [esp + 0xa8]
and esi, ecx
lea ecx, [esi + edi]
mov ebp, dword [esp + 0xa4]
cmp ebp, ecx
jb 0xdf0f92
cmp esi, ecx
ja 0xdf0f8b
mov dword [esp + 0x48], eax
mov dword [esp + 0x68], edi
mov dword [esp + 0x5c], esi
sub ebp, esi
xchg ebp, ebx
neg ebx
xchg ebp, ebx
shl esi, 3
sar ebp, 0x1f
and ebp, esi
mov esi, dword [ebx + 0x34]
xchg edi, ebx
neg ebx
xchg edi, ebx
lea ebx, [0x1185930]
mov eax, dword [ebx + eax*4]
mov ecx, eax
shr esi, cl
mov ebx, dword [esp + 0xb8]
add ebx, ebp
cmp eax, 0x20
sbb ebp, ebp
and esi, ebp
and edi, esi
mov ebp, dword [esp + 0x5c]
cmp edi, ebp
jne 0xdf0558
mov ecx, dword [esp + 0x68]
lea edi, [ecx - 1]
and edi, esi
jmp 0xdf055e
mov ecx, dword [esp + 0x68]
xor edi, edi
mov dword [esp + 0xa0], edx
mov dword [esp + 0xac], ebx
mov dword [esp + 0x4c], edi
mov eax, edi
xor esi, esi
xor eax, eax
mov dword [esp + 0x70], eax
mov eax, edi
jmp 0xdf0816
cmp ecx, 0x400
jae 0xdf07ff
mov eax, dword [ebx + 0x30]
test byte [eax], al
shl ecx, 7
add eax, ecx
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00df35d0
mov eax, dword [esp + 0xc]
cmp eax, 0xffffffff
je 0xdf0627
mov ecx, dword [esp + 0x10]
shl eax, 0xd
shl ecx, 0xd
mov ebx, dword [esp + 0xb0]
mov ebp, dword [esp + 0x5c]
lea esi, [ebp + 1]
shl ebp, 0x16
add eax, ebp
mov dword [esp + 0x74], eax
add ecx, ebp
shl esi, 0x16
sub esi, ecx
mov dword [esp], ecx
mov dword [esp + 4], esi
lea edx, [esp + 0xb0]
call ebx
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0xc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00df0350
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x74]
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], eax
add esp, 0xbc
ret
mov edx, dword [esp + 0xc0]
mov ecx, dword [edx + 0x28]
mov eax, dword [esp + 0x5c]
cmp eax, ecx
jae 0xdf07fa
mov ecx, dword [edx + 0x24]
lea ecx, [ecx + eax*8]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
test edx, 0x80000000
je 0xdf07e7
mov ebx, 0x40000
je 0xdf07cc
mov ecx, 0x40000
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], ebx
je 0xdf07be
mov edx, 0x40000
mov dword [esp + 0x14], edx
call fcn.00dff0c0
lea eax, [0x122c5e7]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00dffc80
mov dword [esp], 3
mov dword [esp + 4], 0
call fcn.00dffaa0
lea eax, [0x1226fb3]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00dffc80
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.00dffaa0
lea eax, [0x12275ec]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00dffc80
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00dff970
lea eax, [0x1226f6f]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00dffc80
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00dff970
lea eax, [0x1226f6f]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00dffc80
mov eax, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00dff970
lea eax, [0x1226fa7]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00dffc80
call fcn.00dff120
call fcn.00dff0c0
lea eax, [0x122ce0e]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.00dffc80
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00dff970
call fcn.00dff2d0
call fcn.00dff120
lea eax, [0x122bbab]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00dfd1b0
shr edx, 4
and edx, 0x3ffff
jmp 0xdf0677
mov ebp, edx
shl ebp, 0xe
shr ecx, 0x12
or ecx, ebp
and ecx, 0x3ffff
test edx, 0x80000000
jmp 0xdf0664
mov ebx, ecx
and ebx, 0x3ffff
test edx, 0x80000000
jmp 0xdf0659
call fcn.00e32490
mov eax, ecx
mov ecx, 0x400
call fcn.00e324a0
inc edi
mov dword [esp + 0x70], esi
mov esi, eax
mov eax, dword [esp + 0x4c]
cmp edi, ecx
jge 0xdf0a03
jae 0xdf0f84
mov dword [esp + 0x38], esi
lea eax, [ebx + edi*8]
mov esi, dword [eax + 4]
mov dword [esp + 0x9c], esi
mov eax, dword [eax]
mov dword [esp + 0x98], eax
test eax, eax
sete al
test esi, esi
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, eax
xchg esi, eax
test al, al
xchg esi, eax
je 0xdf085c
xor eax, eax
mov esi, dword [esp + 0x70]
jmp 0xdf080b
mov dword [esp + 0x54], edi
mov eax, dword [esp + 0xb0]
lea ebx, [edi + ebp]
mov dword [esp + 0x58], ebx
mov ecx, edx
mov esi, 1
shl esi, cl
mov ebp, dword [esp + 0x48]
lea edi, [0x1185930]
mov edi, dword [edi + ebp*4]
mov ecx, edi
shl ebx, cl
cmp edx, 0x20
sbb ebp, ebp
and esi, ebp
shl esi, 0xd
cmp ecx, 0x20
sbb ebp, ebp
and ebx, ebp
mov dword [esp], ebx
mov dword [esp + 4], esi
lea edx, [esp + 0xb0]
call eax
mov eax, dword [esp + 0x9c]
test eax, 0x80000000
je 0xdf08c5
mov ebp, dword [esp + 0x98]
mov ebx, 0x40000
jmp 0xdf08d4
mov ebx, dword [esp + 0x98]
mov ebp, ebx
and ebx, 0x3ffff
mov esi, dword [esp + 0x38]
lea edi, [esi + ebx]
mov ecx, ebx
mov ebx, dword [esp + 0xc4]
cmp ebx, edi
jbe 0xdf09ce
test eax, 0x80000000
je 0xdf08fa
mov edx, 0x40000
jmp 0xdf0915
mov edi, eax
shl eax, 0xe
shr ebp, 0x12
or ebp, eax
and ebp, 0x3ffff
mov eax, edi
mov edx, ebp
mov ebp, dword [esp + 0x98]
cmp ebx, edx
jbe 0xdf0458
test esi, esi
jne 0xdf0928
test eax, 0x80000000
jmp 0xdf0951
mov ebp, dword [esp + 0xa0]
cmp ebp, 0x20
sbb edi, edi
mov edx, ecx
mov ecx, ebp
mov ebx, 1
shl ebx, cl
and ebx, edi
cmp edx, ebx
jae 0xdf09ad
test eax, 0x80000000
mov ebx, dword [esp + 0xc4]
je 0xdf0964
mov ecx, dword [esp + 0xa0]
cmp ecx, 0x20
mov eax, 0x40000
jmp 0xdf0976
shr eax, 4
and eax, 0x3ffff
mov ecx, dword [esp + 0xa0]
cmp ecx, 0x20
sbb ebp, ebp
mov esi, dword [esp + 0x54]
lea edi, [esi + 1]
shl edi, cl
and edi, ebp
sub edi, eax
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x5c]
mov edx, edi
mov edi, esi
mov esi, edx
mov edx, dword [esp + 0xa0]
jmp 0xdf080b
lea eax, [esi + ebx]
mov ecx, dword [esp + 0x68]
mov edx, ebp
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x5c]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x70]
jmp 0xdf080b
test esi, esi
jne 0xdf09e8
mov ecx, dword [esp + 0xa0]
cmp ecx, 0x20
sbb eax, eax
mov edx, dword [esp + 0x54]
shl edx, cl
and edx, eax
jmp 0xdf09ec
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x68]
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x5c]
mov esi, edi
jmp 0xdf0a07
mov edx, dword [esp + 0x70]
mov edi, dword [esp + 0xc4]
cmp edi, esi
jbe 0xdf0d78
mov edx, dword [esp + 0x48]
test edx, edx
je 0xdf0d59
mov esi, dword [esp + 0x44]
test esi, 0x80000000
je 0xdf0a47
mov dword [esp + 0x80], eax
mov eax, 0x40000
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x80]
jmp 0xdf0a62
mov ebx, dword [esp + 0x40]
and ebx, 0x3ffff
test esi, 0x80000000
mov dword [esp + 0x34], ebx
mov ebx, dword [esp + 0xac]
je 0xdf0a77
mov dword [esp + 0x78], eax
mov eax, 0x40000
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x78]
jmp 0xdf0a9e
shl esi, 0xe
mov ebx, dword [esp + 0x40]
shr ebx, 0x12
or ebx, esi
and ebx, 0x3ffff
mov esi, dword [esp + 0x44]
test esi, 0x80000000
mov dword [esp + 0x30], ebx
mov ebx, dword [esp + 0xac]
je 0xdf0aa7
mov esi, 0x40000
jmp 0xdf0ab0
shr esi, 4
and esi, 0x3ffff
mov dword [esp + 0x2c], esi
call fcn.00dff0c0
lea eax, [0x122c5e7]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00dffc80
mov eax, dword [esp + 0x3c]
sar eax, 0x1f
mov dword [esp + 0x94], eax
mov edx, dword [esp + 0x48]
lea ebx, [edx - 1]
mov dword [esp], ebx
sar ebx, 0x1f
mov dword [esp + 4], ebx
call fcn.00dffaa0
lea eax, [0x1226fb3]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00dffc80
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
call fcn.00dffaa0
lea eax, [0x12273ab]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00dffc80
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00dff970
lea eax, [0x1226f6f]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00dffc80
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00dff970
lea eax, [0x1226f6f]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00dffc80
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00dff970
call fcn.00dff2d0
call fcn.00dff120
call fcn.00dff0c0
lea eax, [0x122c5f8]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00dffc80
mov eax, dword [esp + 0x48]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 0x94], eax
mov dword [esp + 4], eax
call fcn.00dffaa0
lea eax, [0x12290f6]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00dffc80
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00dff970
lea eax, [0x1227b9c]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00dffc80
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.00dffaa0
call fcn.00dff2d0
call fcn.00dff120
mov eax, dword [esp + 0x5c]
sar eax, 0x1f
mov dword [esp + 0x90], eax
mov edx, dword [esp + 0xc0]
mov edx, dword [edx + 0x34]
mov dword [esp + 0x8c], edx
call fcn.00dff0c0
lea eax, [0x1230e1e]
mov dword [esp], eax
mov dword [esp + 4], 0x18
call fcn.00dffc80
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00dffb10
lea eax, [0x1227865]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00dffc80
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
call fcn.00dffaa0
call fcn.00dff2d0
call fcn.00dff120
mov eax, dword [esp + 0x48]
lea ecx, [0x1185930]
mov ecx, dword [ecx + eax*4]
mov dword [esp + 0xa0], ecx
lea edx, [0x1185920]
mov edx, dword [edx + eax*4]
mov dword [esp + 0x88], edx
call fcn.00dff0c0
lea eax, [0x1234175]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.00dffc80
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00dff970
lea eax, [0x122ed76]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00dffc80
mov eax, dword [esp + 0x88]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00dff970
call fcn.00dff2d0
call fcn.00dff120
xor eax, eax
jmp 0xdf0eeb
mov eax, dword [0x118543c]
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], eax
add esp, 0xbc
ret
shl edx, 0xd
mov dword [esp + 0x6c], edx
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x48]
lea esi, [0x1185930]
mov ecx, dword [esi + ebx*4]
mov dword [esp + 0xa0], ecx
shl ebp, cl
mov dword [esp + 0x8c], ebp
mov ebx, dword [esp + 0xc0]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00df0350
mov eax, dword [esp + 8]
mov edx, dword [esp + 0xa0]
cmp edx, 0x20
sbb edx, edx
mov ebx, dword [esp + 0x8c]
and ebx, edx
mov edx, dword [esp + 0x6c]
add edx, ebx
mov dword [esp + 0xc8], edx
mov dword [esp + 0xcc], eax
add esp, 0xbc
ret
mov dword [esp + 0x20], ebp
call fcn.00dff0c0
lea eax, [0x122c5e7]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00dffc80
mov eax, dword [esp + 0x48]
mov dword [esp], eax
mov ecx, dword [esp + 0x94]
mov dword [esp + 4], ecx
call fcn.00dffaa0
lea eax, [0x1226fb3]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00dffc80
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x50]
lea edx, [ecx + eax]
mov dword [esp], edx
sar edx, 0x1f
mov dword [esp + 4], edx
call fcn.00dffaa0
lea eax, [0x12275ec]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00dffc80
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00dff970
lea eax, [0x1226f6f]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00dffc80
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00dff970
lea eax, [0x1226f6f]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00dffc80
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00dff970
lea eax, [0x1226fa7]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00dffc80
call fcn.00dff120
mov eax, dword [esp + 0x50]
inc eax
mov ecx, dword [esp + 0x68]
cmp eax, ecx
jge 0xdf0f6e
mov edx, dword [esp + 0xac]
lea ebx, [edx + eax*8]
mov ebp, dword [ebx + 4]
mov ebx, dword [ebx]
test ebp, 0x80000000
je 0xdf0f11
mov esi, 0x40000
jmp 0xdf0f25
mov esi, ebx
and ebx, 0x3ffff
test ebp, 0x80000000
mov edi, ebx
mov ebx, esi
mov esi, edi
je 0xdf0f2e
mov ebx, 0x40000
jmp 0xdf0f48
mov edi, ebp
shl ebp, 0xe
shr ebx, 0x12
or ebp, ebx
and ebp, 0x3ffff
test edi, 0x80000000
mov ebx, ebp
mov ebp, edi
mov dword [esp + 0x50], eax
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], esi
je 0xdf0f60
mov ebp, 0x40000
jmp 0xdf0de7
shr ebp, 4
and ebp, 0x3ffff
jmp 0xdf0de7
lea eax, [0x122bbab]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00dfd1b0
mov eax, edi
call fcn.00e32490
mov eax, esi
call fcn.00e324f0
mov edx, ebp
call fcn.00e324d0
nop
call fcn.00e31030
jmp fcn.00df03e0