Function at 0x70309300
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x158
mov eax, dword [0x7034b250]
xor eax, esp
mov dword [esp + 0x154], eax
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x16c]
mov edx, dword [esp + 0x160]
push ebx
push ebp
push esi
mov esi, dword [esp + 0x168]
push edi
mov edi, dword [esp + 0x184]
mov dword [esp + 0x24], edi
or edi, 0xffffffff
xor ebx, ebx
test dword [esp + 0x180], 0xe20f5a6f
lea ebp, [ecx + eax]
mov dword [esp + 0x20], edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x60], edi
lea edi, [ebp - 1]
mov dword [esp + 0x6c], edx
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], ecx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x54], edi
mov dword [esp + 0x18], esi
je 0x70309393
lea eax, [ebx - 3]
jmp 0x70309e55
cmp esi, ebx
je 0x70309e50
cmp eax, ebx
je 0x70309e50
mov eax, dword [esp + 0x188]
cmp dword [esp + 0x24], ebx
jne 0x703093b8
cmp eax, ebx
jg 0x70309e50
cmp eax, ebx
jge 0x703093c6
mov eax, 0xfffffff1
jmp 0x70309e55
cmp ecx, ebx
jl 0x70309e49
mov edi, dword [esp + 0x178]
cmp ecx, edi
jg 0x70309e49
movzx eax, word [esi + 0x18]
movzx ecx, word [esi + 0x1c]
add eax, esi
mov dword [esp + 0xc0], eax
movzx eax, word [esi + 0x1a]
mov dword [esp + 0xb8], ecx
mov ecx, dword [esi + 0x20]
mov dword [esp + 0xbc], eax
mov eax, 0x989680
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0x130], ebx
mov dword [esp + 0x10], ecx
cmp edx, ebx
je 0x7030946b
mov eax, dword [edx]
test al, 1
je 0x70309436
mov ecx, dword [edx + 4]
mov dword [esp + 0x1c], ecx
test al, 2
je 0x70309444
mov ecx, dword [edx + 8]
mov dword [esp + 0x9c], ecx
test al, 0x10
je 0x70309452
mov ecx, dword [edx + 0x14]
mov dword [esp + 0xa0], ecx
test al, 4
je 0x70309460
mov ecx, dword [edx + 0xc]
mov dword [esp + 0x130], ecx
test al, 8
je 0x7030946b
mov edx, dword [edx + 0x10]
mov dword [esp + 0x10], edx
cmp dword [esp + 0x10], ebx
jne 0x70309479
mov dword [esp + 0x10], 0x70320db8
cmp dword [esi], 0x50435245
je 0x703094bf
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x138]
push eax
push ecx
lea edx, [esp + 0x78]
push edx
push esi
call fcn.7030a070
add esp, 0x10
mov dword [esp + 0x18], eax
cmp eax, ebx
jne 0x703094ae
mov eax, 0xfffffffc
jmp 0x70309e55
cmp dword [esp + 0x1c], ebx
je 0x703094bf
lea eax, [esp + 0x138]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 8]
mov edx, dword [esp + 0x180]
mov ebx, eax
shr eax, 0x12
and eax, 1
mov dword [esp + 0x5c], eax
movzx eax, word [ecx + 0x1a]
or ebx, edx
shr ebx, 4
and ebx, 1
mov dword [esp + 0x3c], ebx
movzx ebx, word [ecx + 0xc]
shr ebx, 3
and ebx, 1
mov dword [esp + 0x50], ebx
movzx ebx, word [ecx + 0x1c]
imul ebx, eax
movzx eax, word [ecx + 0x18]
add ebx, esi
add eax, ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x120], eax
mov dword [esp + 0x100], ebx
add ebx, edi
mov dword [esp + 0x104], ebx
mov eax, dword [ecx + 8]
shr eax, 5
and eax, 1
mov dword [esp + 0xe8], eax
mov eax, dword [ecx + 8]
shr eax, 0xb
and eax, 1
mov dword [esp + 0xdc], eax
mov dword [esp + 0x28], eax
mov eax, dword [ecx + 8]
shr eax, 0x1d
and eax, 1
mov dword [esp + 0xe4], eax
mov eax, dword [ecx + 8]
shr eax, 0x19
and eax, 1
mov dword [esp + 0xe0], eax
mov eax, edx
shr eax, 7
and eax, 1
mov dword [esp + 0xd4], eax
mov eax, edx
shr eax, 8
and eax, 1
mov dword [esp + 0xd8], eax
mov eax, edx
shr eax, 0xa
and eax, 1
mov dword [esp + 0xec], eax
mov eax, edx
shr eax, 0x1c
and eax, 1
mov dword [esp + 0x14], ebx
mov dword [esp + 0xf0], eax
test edx, 0x8000000
je 0x703095bf
mov eax, 2
jmp 0x703095c7
mov eax, edx
shr eax, 0xf
and eax, 1
mov edi, eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0xc8], eax
add eax, 0x340
xor esi, esi
mov dword [esp + 0xcc], eax
mov eax, edx
and eax, 0x1800000
mov dword [esp + 0x114], edi
mov dword [esp + 0xf4], esi
mov dword [esp + 0x134], esi
mov dword [esp + 0x12c], esi
je 0x7030962c
cmp eax, 0x800000
je 0x7030961f
cmp eax, 0x1000000
je 0x70309645
mov eax, 0xffffffe9
jmp 0x70309e55
mov dword [esp + 0xf8], 1
jmp 0x7030964c
mov eax, dword [ecx + 8]
test eax, 0x1800000
je 0x70309645
shr eax, 0x17
and eax, 1
mov dword [esp + 0xf8], eax
jmp 0x7030964c
mov dword [esp + 0xf8], esi
test edx, 0x700000
jne 0x70309659
mov eax, dword [ecx + 8]
jmp 0x7030965b
mov eax, edx
and eax, 0x700000
cmp eax, 0x300000
ja 0x703096bc
je 0x703096b5
cmp eax, esi
je 0x7030967b
cmp eax, 0x100000
je 0x703096ae
cmp eax, 0x200000
jne 0x70309615
mov eax, 0xa
cmp eax, 0xff
mov dword [esp + 0xb0], esi
jle 0x703096e8
mov edx, eax
sar edx, 8
mov dword [esp + 0xb4], 2
mov byte [esp + 0xc4], dl
mov byte [esp + 0xc5], al
jmp 0x703096fa
mov eax, 0xd
jmp 0x70309680
mov eax, 0xd0a
jmp 0x70309680
cmp eax, 0x400000
je 0x703096db
cmp eax, 0x500000
jne 0x70309615
mov dword [esp + 0xb0], 2
jmp 0x703096fa
mov dword [esp + 0xb0], 1
jmp 0x703096fa
mov dword [esp + 0xb4], 1
mov byte [esp + 0xc4], al
cmp edi, esi
je 0x7030970e
test byte [ecx + 0xc], 1
je 0x7030970e
mov eax, 0xfffffff3
jmp 0x70309e55
mov eax, dword [ecx + 8]
and eax, 7
mov dword [esp + 0x68], eax
mov eax, 0x55555556
imul dword [esp + 0x188]
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edi, [eax + eax*2]
movzx eax, word [ecx + 0x12]
cmp ax, si
jbe 0x70309787
movzx ecx, ax
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x70309787
lea edi, [ecx + ecx*2 + 3]
lea ecx, [edi*4]
push ecx
call dword [sym.safemon.dll_pcre_malloc]
add esp, 4
mov dword [esp + 0xa4], eax
test eax, eax
jne 0x70309776
mov eax, 0xfffffffa
jmp 0x70309e55
mov ebx, dword [esp + 0x104]
mov dword [esp + 0x34], 1
jmp 0x70309792
mov edx, dword [esp + 0x24]
mov dword [esp + 0xa4], edx
lea ecx, [edi + edi]
mov eax, 0x55555556
imul ecx
mov ecx, dword [esp + 0x18]
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0xd0], esi
mov dword [esp + 0xa8], edi
mov dword [esp + 0xac], eax
mov dword [esp + 0x11c], 0xffffffff
movzx esi, word [ecx + 0x10]
lea esi, [esi + esi + 2]
cmp esi, dword [esp + 0x188]
mov dword [esp + 0x40], esi
jle 0x703097e2
mov esi, edi
mov dword [esp + 0x40], edi
mov edx, dword [esp + 0xa4]
test edx, edx
je 0x7030982b
lea ecx, [edx + edi*4]
mov eax, esi
cdq
sub eax, edx
sar eax, 1
mov edx, 1
sub edx, eax
lea eax, [ecx + edx*4]
sub ecx, 4
cmp ecx, eax
jb 0x70309824
jmp 0x70309810
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, eax
jae 0x70309810
mov ebx, dword [esp + 0x104]
mov edx, dword [esp + 0xa4]
cmp dword [esp + 0x3c], 0
mov edi, dword [esp + 0x18]
jne 0x70309885
test byte [edi + 0xc], 2
je 0x70309869
movzx eax, word [edi + 0x14]
mov ecx, eax
and ecx, 0xff
shr eax, 8
and eax, 1
mov dword [esp + 0x20], ecx
mov dword [esp + 0x58], eax
je 0x70309885
mov eax, dword [esp + 0xc8]
movzx ecx, byte [eax + ecx]
mov dword [esp + 0x20], ecx
jmp 0x70309885
cmp dword [esp + 0x50], 0
jne 0x70309885
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x70309885
test byte [eax + 4], 1
je 0x70309885
add eax, 8
mov dword [esp + 0x30], eax
test byte [edi + 0xc], 4
je 0x703098b5
movzx eax, word [edi + 0x16]
mov ecx, eax
and ecx, 0xff
shr eax, 8
and eax, 1
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x38], ecx
movzx ecx, byte [eax + ecx + 0x100]
mov dword [esp + 0x60], ecx
mov eax, dword [esp + 0x180]
and eax, 0x4000000
mov dword [esp + 0x64], eax
mov edi, dword [esp + 0x14]
mov dword [esp + 0x10], edi
test edx, edx
je 0x703098f1
lea ecx, [edx + esi*4]
cmp edx, ecx
jae 0x703098f1
sub ecx, edx
dec ecx
shr ecx, 2
inc ecx
or eax, 0xffffffff
mov edi, edx
rep stosd dword es:[edi], eax
mov ebx, dword [esp + 0x104]
mov edi, dword [esp + 0x14]
cmp dword [esp + 0x5c], 0
je 0x70309976
mov esi, ebp
cmp ebp, ebx
jae 0x70309970
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb4]
lea esp, [esp]
test edi, edi
je 0x70309947
mov edx, dword [esp + 0x28]
push edx
lea eax, [esp + 0xb8]
push eax
push ebx
push edi
push esi
call fcn.70309e90
add esp, 0x14
test eax, eax
jne 0x70309970
mov ebx, dword [esp + 0x104]
mov eax, dword [esp + 0xb4]
mov edi, dword [esp + 0xb0]
jmp 0x7030996b
mov ecx, ebx
sub ecx, eax
cmp esi, ecx
ja 0x7030996b
mov dl, byte [esi]
cmp dl, byte [esp + 0xc4]
jne 0x7030996b
cmp eax, 1
je 0x70309970
mov cl, byte [esi + 1]
cmp cl, byte [esp + 0xc5]
je 0x70309970
inc esi
cmp esi, ebx
jb 0x70309910
mov dword [esp + 0x14], esi
mov edi, esi
mov edx, dword [esp + 0x18]
mov eax, dword [edx + 8]
or eax, dword [esp + 0x180]
test eax, 0x4000000
jne 0x70309aff
cmp dword [esp + 0x20], 0
jl 0x703099f8
cmp dword [esp + 0x58], 0
je 0x703099d3
cmp ebp, edi
jae 0x70309aff
jmp 0x703099b0
movzx ecx, byte [ebp]
mov edx, dword [esp + 0xc8]
movzx eax, byte [ecx + edx]
cmp eax, dword [esp + 0x20]
je 0x70309aff
inc ebp
cmp ebp, edi
jb 0x703099b0
jmp 0x70309aff
cmp ebp, edi
jae 0x70309aff
jmp 0x703099e0
movzx ecx, byte [ebp]
cmp ecx, dword [esp + 0x20]
je 0x70309aff
inc ebp
cmp ebp, edi
jb 0x703099e0
jmp 0x70309aff
cmp dword [esp + 0x50], 0
je 0x70309ace
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x100]
add eax, edx
cmp ebp, eax
jbe 0x70309aff
cmp ebp, edi
jae 0x70309aaa
mov esi, dword [esp + 0x28]
cmp dword [esp + 0xb0], 0
je 0x70309a63
cmp ebp, dword [esp + 0x100]
jbe 0x70309aa1
mov edx, dword [esp + 0x100]
mov eax, dword [esp + 0xb0]
push esi
lea ecx, [esp + 0xb8]
push ecx
push edx
push eax
push ebp
call fcn.70309f60
mov edi, dword [esp + 0x28]
add esp, 0x14
test eax, eax
jne 0x70309aaa
jmp 0x70309aa1
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x100]
add ecx, edx
cmp ebp, ecx
jb 0x70309aa1
mov cl, byte [esp + 0xc4]
mov eax, ebp
sub eax, dword [esp + 0xb4]
cmp byte [eax], cl
jne 0x70309aa1
cmp dword [esp + 0xb4], 1
je 0x70309aaa
mov dl, byte [esp + 0xc5]
cmp byte [eax + 1], dl
je 0x70309aaa
inc ebp
cmp ebp, edi
jb 0x70309a24
cmp byte [ebp - 1], 0xd
jne 0x70309aff
mov eax, dword [esp + 0xb0]
cmp eax, 1
je 0x70309ac1
cmp eax, 2
jne 0x70309aff
cmp ebp, edi
jae 0x70309aff
cmp byte [ebp], 0xa
jne 0x70309aff
inc ebp
jmp 0x70309aff
cmp dword [esp + 0x30], 0
je 0x70309aff
cmp ebp, edi
jae 0x70309aff
mov esi, dword [esp + 0x30]
lea ecx, [ecx]
movzx eax, byte [ebp]
mov ecx, eax
and ecx, 7
mov edx, 1
shl edx, cl
shr eax, 3
mov al, byte [eax + esi]
test al, dl
jne 0x70309aff
inc ebp
cmp ebp, edi
jb 0x70309ae0
cmp dword [esp + 0x64], 0
mov edx, dword [esp + 0x10]
mov dword [esp + 0x14], edx
jne 0x70309bac
cmp dword [esp + 0x114], 0
jne 0x70309bac
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x70309b37
test byte [eax + 4], 2
je 0x70309b37
mov ecx, edx
sub ecx, ebp
cmp ecx, dword [eax + 0x28]
jb case.0x70309c25.998
mov esi, dword [esp + 0x38]
test esi, esi
jl 0x70309bac
mov eax, edx
sub eax, ebp
cmp eax, 0x3e8
jge 0x70309bac
xor eax, eax
cmp dword [esp + 0x20], eax
setge al
add eax, ebp
cmp eax, dword [esp + 0x54]
jbe 0x70309bac
cmp dword [esp + 0x4c], 0
je 0x70309b87
cmp eax, edx
jae case.0x70309c25.998
mov edi, dword [esp + 0x60]
lea ebx, [ebx]
movzx ecx, byte [eax]
inc eax
cmp ecx, esi
je 0x70309ba3
cmp ecx, edi
je 0x70309ba3
cmp eax, edx
jb 0x70309b70
xor edi, edi
jmp 0x70309d24
cmp eax, edx
jae case.0x70309c25.998
jmp 0x70309b90
movzx ecx, byte [eax]
inc eax
cmp ecx, esi
je 0x70309ba3
cmp eax, edx
jb 0x70309b90
xor edi, edi
jmp 0x70309d24
dec eax
cmp eax, edx
jae case.0x70309c25.998
mov dword [esp + 0x54], eax
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0xfc]
push 0
push 0
push 0
push edx
lea eax, [esp + 0xa8]
push eax
push 2
push 0
push ebp
push ecx
push ebp
mov dword [esp + 0x130], ebp
mov dword [esp + 0x138], ebp
mov dword [esp + 0xc0], 0
call fcn.70305440
add esp, 0x28
cmp dword [esp + 0xf4], 0
mov edi, eax
je 0x70309c0c
cmp dword [esp + 0x2c], 0
jne 0x70309c0c
mov edx, dword [esp + 0x110]
mov dword [esp + 0x2c], edx
test edi, edi
jg case.default.0x70309c25
je case.0x70309c25.997
lea eax, [edi + 0x3e6]
cmp eax, 4
ja case.default.0x70309c25
jmp dword [eax*4 + 0x70309e70]
mov eax, dword [esp + 0x108]
mov esi, eax
cmp eax, ebp
jne 0x70309c3c
lea esi, [ebp + 1]
mov ebx, dword [esp + 0x104]
xor edi, edi
cmp dword [esp + 0x5c], edi
je 0x70309cb4
cmp dword [esp + 0xb0], edi
je 0x70309c88
cmp ebp, ebx
jae 0x70309cb4
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0xb0]
push eax
lea ecx, [esp + 0xb8]
push ecx
push ebx
push edx
push ebp
call fcn.70309e90
add esp, 0x14
test eax, eax
jne 0x70309d24
mov ebx, dword [esp + 0x104]
jmp 0x70309cb4
mov eax, dword [esp + 0xb4]
mov ecx, ebx
sub ecx, eax
cmp ebp, ecx
ja 0x70309cb4
mov dl, byte [esp + 0xc4]
cmp byte [ebp], dl
jne 0x70309cb4
cmp eax, 1
je 0x70309d24
mov al, byte [esp + 0xc5]
cmp byte [ebp + 1], al
je 0x70309d24
cmp dword [esp + 0x3c], 0
mov ebp, esi
jne 0x70309d24
cmp esi, dword [esp + 0x10]
ja 0x70309d24
cmp byte [esi - 1], 0xd
jne 0x70309cfc
cmp esi, dword [esp + 0x10]
jae 0x70309cfc
cmp byte [esi], 0xa
jne 0x70309cfc
mov ecx, dword [esp + 0x18]
test byte [ecx + 0xc], 0x20
jne 0x70309cfc
mov eax, dword [esp + 0xb0]
cmp eax, 1
je 0x70309cf9
cmp eax, 2
je 0x70309cf9
cmp dword [esp + 0xb4], 2
jne 0x70309cfc
lea ebp, [esi + 1]
mov esi, dword [esp + 0x40]
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x134], 0
jmp 0x703098c5
cmp edi, 1
je 0x70309d90
cmp edi, 0xfffffc19
je 0x70309d90
cmp dword [esp + 0x34], 0
je 0x70309d3c
mov edx, dword [esp + 0xa4]
push edx
call dword [sym.safemon.dll_pcre_free]
add esp, 4
test edi, edi
je 0x70309d4c
cmp edi, 0xfffffff4
je 0x70309d4c
mov eax, edi
jmp 0x70309e55
mov edx, dword [esp + 0x2c]
test edx, edx
je 0x70309d88
cmp dword [esp + 0x188], 1
mov dword [esp + 0x134], 0
jle 0x70309d7e
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x24]
sub edx, eax
mov dword [ecx], edx
mov edx, dword [esp + 0x10]
sub edx, eax
mov dword [ecx + 4], edx
mov eax, 0xfffffff4
jmp 0x70309e2e
or eax, 0xffffffff
jmp 0x70309e2e
cmp dword [esp + 0x34], 0
je 0x70309de4
mov edi, dword [esp + 0x188]
cmp edi, 4
mov esi, dword [esp + 0xa4]
jl 0x70309dc6
mov edx, dword [esp + 0x24]
lea eax, [edi*4 - 8]
push eax
lea ecx, [esi + 8]
push ecx
add edx, 8
push edx
call fcn.702e9140
add esp, 0xc
cmp dword [esp + 0x118], edi
jle 0x70309dda
mov dword [esp + 0xd0], 1
push esi
call dword [sym.safemon.dll_pcre_free]
add esp, 4
cmp dword [esp + 0xd0], 0
je 0x70309df2
xor eax, eax
jmp 0x70309dfe
mov eax, dword [esp + 0x118]
cdq
sub eax, edx
sar eax, 1
cmp dword [esp + 0x188], 2
jge 0x70309e0c
xor eax, eax
jmp 0x70309e2e
mov ecx, dword [esp + 0x100]
mov esi, dword [esp + 0x108]
mov edx, dword [esp + 0x24]
sub esi, ecx
mov dword [edx], esi
mov esi, dword [esp + 0x10c]
sub esi, ecx
mov dword [edx + 4], esi
mov ecx, dword [esp + 0x6c]
test ecx, ecx
je 0x70309e55
test byte [ecx], 0x20
je 0x70309e55
mov ecx, dword [ecx + 0x18]
mov edx, dword [esp + 0x134]
mov dword [ecx], edx
jmp 0x70309e55
mov eax, 0xffffffe8
jmp 0x70309e55
mov eax, 0xfffffffe
mov ecx, dword [esp + 0x164]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.702e1c2f
add esp, 0x158
ret