Function at 0x4df270
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5d8195
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
mov eax, dword [0x680f10]
xor eax, esp
mov dword [esp + 0xac], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x680f10]
xor eax, esp
push eax
lea eax, [esp + 0xc4]
mov dword fs:[0], eax
mov edi, dword [esp + 0xd4]
mov esi, ecx
cmp byte [esi + 0xa00], 0
mov dword [esp + 0x14], esi
jne 0x4dfe73
mov byte [esi + 0xa00], 1
cmp byte [edi + 0x209c], 0
je 0x4df2fb
cmp byte [edi + 0x2ab7], 0
jne 0x4df2fb
mov eax, 0x601720
mov dx, word [eax]
mov word [ecx], dx
add eax, 2
add ecx, 0xa
cmp eax, 0x601920
jl 0x4df2e3
jmp 0x4dfe73
lea eax, [esp + 0xa0]
push eax
mov ecx, edi
call fcn.004b8c70
push 0xa00
push 0
push esi
mov dword [esp + 0xd8], 0
call fcn.0044dac0
add esp, 0xc
push 0x5fbaac
lea ecx, [esp + 0x64]
call fcn.0048cd50
mov eax, dword [esp + 0x68]
mov ebp, 0x10
cmp dword [esp + 0x7c], ebp
mov byte [esp + 0xcc], 1
jae 0x4df34e
lea eax, [esp + 0x68]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0xb8]
push ecx
push eax
push edx
push 0
lea ecx, [esp + 0xb4]
call fcn.0048a450
test eax, eax
sete bl
cmp dword [esp + 0x7c], ebp
mov byte [esp + 0xcc], 0
mov dword [esp + 0x60], 0x5f1558
jb 0x4df392
mov eax, dword [esp + 0x68]
push eax
call fcn.004274fc
add esp, 4
test bl, bl
mov ecx, esi
je 0x4df3b5
mov eax, 0x601720
lea ecx, [ecx]
mov dx, word [eax]
mov word [ecx], dx
add eax, 2
add ecx, 0xa
cmp eax, 0x601920
jl 0x4df3a0
jmp 0x4df3d3
mov eax, 0x601120
lea ebx, [ebx]
mov dx, word [eax]
mov word [ecx], dx
add eax, 2
add ecx, 0xa
cmp eax, 0x601320
jl 0x4df3c0
push 0x5fbab8
lea ecx, [esp + 0x64]
call fcn.0048cd50
cmp dword [esp + 0x7c], ebp
mov eax, dword [esp + 0x68]
mov byte [esp + 0xcc], 2
jae 0x4df3f7
lea eax, [esp + 0x68]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0xb8]
push ecx
push eax
push edx
push 0
lea ecx, [esp + 0xb4]
call fcn.0048a450
test eax, eax
sete bl
cmp dword [esp + 0x7c], ebp
mov byte [esp + 0xcc], 0
mov dword [esp + 0x60], 0x5f1558
jb 0x4df43b
mov eax, dword [esp + 0x68]
push eax
call fcn.004274fc
add esp, 4
test bl, bl
je 0x4df634
push 0x5fb2f6
lea ecx, [esp + 0x64]
call fcn.0048cd50
push 0x5fbac0
lea ecx, [esp + 0x1c]
mov byte [esp + 0xd0], 3
call fcn.0048cd50
lea ecx, [esp + 0x18]
push ecx
mov ecx, edi
mov byte [esp + 0xd0], 4
call fcn.004b7a60
cmp dword [esp + 0x34], ebp
mov ebx, 0x5f1558
mov esi, eax
mov byte [esp + 0xcc], 3
mov dword [esp + 0x18], ebx
jb 0x4df4a1
mov edx, dword [esp + 0x20]
push edx
call fcn.004274fc
add esp, 4
test esi, esi
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], 0
mov byte [esp + 0x20], 0
mov dword [esp + 0x18], 0x5f13d0
je 0x4df514
mov ecx, esi
call fcn.004b5800
push eax
lea ecx, [esp + 0x40]
call fcn.0048c600
mov dword [esp + 0x3c], 0x5f1570
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0xd8], 5
call fcn.00402bb0
cmp dword [esp + 0x58], ebp
mov byte [esp + 0xcc], 3
mov dword [esp + 0x3c], ebx
jb 0x4df514
mov ecx, dword [esp + 0x44]
push ecx
call fcn.004274fc
add esp, 4
push 0x5fbacc
lea ecx, [esp + 0x1c]
call fcn.0048cd50
cmp dword [esp + 0x34], ebp
mov eax, dword [esp + 0x20]
mov byte [esp + 0xcc], 6
jae 0x4df538
lea eax, [esp + 0x20]
mov edx, dword [esp + 0x30]
push edx
push eax
mov eax, dword [esp + 0x80]
push eax
push 0
lea ecx, [esp + 0x74]
call fcn.0048a450
test eax, eax
sete bl
cmp dword [esp + 0x34], ebp
mov esi, 0x5f1558
mov byte [esp + 0xcc], 3
mov dword [esp + 0x18], esi
jb 0x4df57a
mov ecx, dword [esp + 0x20]
push ecx
call fcn.004274fc
add esp, 4
test bl, bl
je 0x4df59c
mov ecx, dword [esp + 0x14]
mov eax, 0x601d20
mov dx, word [eax]
mov word [ecx], dx
add eax, 2
add ecx, 0xa
cmp eax, 0x601f20
jl 0x4df587
jmp 0x4df613
push 0x5fbad4
lea ecx, [esp + 0x1c]
call fcn.0048cd50
cmp dword [esp + 0x34], ebp
mov eax, dword [esp + 0x20]
mov byte [esp + 0xcc], 7
jae 0x4df5c0
lea eax, [esp + 0x20]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x78]
push ecx
push eax
push edx
push 0
lea ecx, [esp + 0x74]
call fcn.0048a450
test eax, eax
sete bl
cmp dword [esp + 0x34], ebp
mov dword [esp + 0x18], esi
jb 0x4df5f2
mov eax, dword [esp + 0x20]
push eax
call fcn.004274fc
add esp, 4
test bl, bl
je 0x4df613
mov ecx, dword [esp + 0x14]
mov eax, 0x601f20
nop
mov dx, word [eax]
mov word [ecx], dx
add eax, 2
add ecx, 0xa
cmp eax, 0x602120
jl 0x4df600
cmp dword [esp + 0x7c], ebp
mov byte [esp + 0xcc], 0
mov dword [esp + 0x60], esi
jb 0x4df639
mov eax, dword [esp + 0x68]
push eax
call fcn.004274fc
add esp, 4
jmp 0x4df639
mov esi, 0x5f1558
push 0x5fbae4
lea ecx, [esp + 0x64]
call fcn.0048cd50
lea ecx, [esp + 0x60]
push ecx
mov ecx, edi
mov byte [esp + 0xd0], 8
call fcn.004b7950
cmp dword [esp + 0x7c], ebp
mov edi, eax
mov byte [esp + 0xcc], 0
mov dword [esp + 0x60], esi
jb 0x4df67c
mov edx, dword [esp + 0x68]
push edx
call fcn.004274fc
add esp, 4
test edi, edi
mov dword [esp + 0x7c], 0xf
mov dword [esp + 0x78], 0
mov byte [esp + 0x68], 0
mov dword [esp + 0x60], 0x5f13d0
jne 0x4df6be
cmp dword [esp + 0xbc], ebp
mov dword [esp + 0xa0], esi
jb 0x4dfe73
mov eax, dword [esp + 0xa8]
push eax
jmp 0x4dfe6b
push 0x5fb2f7
lea ecx, [esp + 0x84]
call fcn.0048cd50
mov edx, dword [edi]
mov eax, dword [edx]
mov ecx, edi
mov byte [esp + 0xcc], 9
call eax
cmp eax, 3
mov ecx, edi
jne 0x4df73a
call fcn.004b5800
push eax
lea ecx, [esp + 0x40]
call fcn.0048c600
mov dword [esp + 0x3c], 0x5f1570
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x48]
push ecx
lea ecx, [esp + 0x90]
mov byte [esp + 0xd8], 0xa
call fcn.00402bb0
cmp dword [esp + 0x58], ebp
mov byte [esp + 0xcc], 9
mov dword [esp + 0x3c], esi
jb 0x4df807
mov edx, dword [esp + 0x44]
push edx
jmp 0x4df7ff
mov eax, dword [edi]
mov edx, dword [eax]
call edx
cmp eax, 5
jne 0x4df807
push 0x5fbaf0
lea ecx, [esp + 0x1c]
call fcn.0048cd50
lea eax, [esp + 0x18]
push eax
mov ecx, edi
mov byte [esp + 0xd0], 0xb
call fcn.004b7a60
cmp dword [esp + 0x34], ebp
mov ebx, 0x5f1558
mov esi, eax
mov byte [esp + 0xcc], 9
mov dword [esp + 0x18], ebx
jb 0x4df791
mov ecx, dword [esp + 0x20]
push ecx
call fcn.004274fc
add esp, 4
test esi, esi
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], 0
mov byte [esp + 0x20], 0
mov dword [esp + 0x18], 0x5f13d0
je 0x4df807
mov ecx, esi
call fcn.004b5800
push eax
lea ecx, [esp + 0x40]
call fcn.0048c600
mov dword [esp + 0x3c], 0x5f1570
push 0xffffffffffffffff
push 0
lea edx, [esp + 0x48]
push edx
lea ecx, [esp + 0x90]
mov byte [esp + 0xd8], 0xc
call fcn.00402bb0
cmp dword [esp + 0x58], ebp
mov byte [esp + 0xcc], 9
mov dword [esp + 0x3c], ebx
jb 0x4df807
mov eax, dword [esp + 0x44]
push eax
call fcn.004274fc
add esp, 4
push 0x5fbb00
lea ecx, [esp + 0x1c]
call fcn.0048cd50
cmp dword [esp + 0x34], ebp
mov eax, dword [esp + 0x20]
mov byte [esp + 0xcc], 0xd
jae 0x4df82b
lea eax, [esp + 0x20]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x98]
push ecx
push eax
push edx
push 0
lea ecx, [esp + 0x94]
call fcn.0048a450
test eax, eax
sete bl
cmp dword [esp + 0x34], ebp
mov esi, 0x5f1558
mov byte [esp + 0xcc], 9
mov dword [esp + 0x18], esi
jb 0x4df870
mov eax, dword [esp + 0x20]
push eax
call fcn.004274fc
add esp, 4
test bl, bl
je 0x4df898
mov ecx, dword [esp + 0x14]
mov eax, 0x601120
lea ecx, [ecx]
mov dx, word [eax]
mov word [ecx], dx
add eax, 2
add ecx, 0xa
cmp eax, 0x601320
jl 0x4df880
jmp 0x4dfbe3
push 0x5fbb14
lea ecx, [esp + 0x1c]
call fcn.0048cd50
cmp dword [esp + 0x34], ebp
mov eax, dword [esp + 0x20]
mov byte [esp + 0xcc], 0xe
jae 0x4df8bc
lea eax, [esp + 0x20]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x98]
push ecx
push eax
push edx
push 0
lea ecx, [esp + 0x94]
call fcn.0048a450
test eax, eax
sete bl
cmp dword [esp + 0x34], ebp
mov byte [esp + 0xcc], 9
mov dword [esp + 0x18], esi
jb 0x4df8fc
mov eax, dword [esp + 0x20]
push eax
call fcn.004274fc
add esp, 4
test bl, bl
je 0x4df928
mov ecx, dword [esp + 0x14]
mov eax, 0x601320
lea esp, [esp]
mov dx, word [eax]
mov word [ecx], dx
add eax, 2
add ecx, 0xa
cmp eax, 0x601520
jl 0x4df910
jmp 0x4dfbe3
push str.MacOSRomanEncoding
lea ecx, [esp + 0x1c]
call fcn.0048cd50
cmp dword [esp + 0x34], ebp
mov eax, dword [esp + 0x20]
mov byte [esp + 0xcc], 0xf
jae 0x4df94c
lea eax, [esp + 0x20]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x98]
push ecx
push eax
push edx
push 0
lea ecx, [esp + 0x94]
call fcn.0048a450
test eax, eax
sete bl
cmp dword [esp + 0x34], ebp
mov byte [esp + 0xcc], 9
mov dword [esp + 0x18], esi
jb 0x4df98c
mov eax, dword [esp + 0x20]
push eax
call fcn.004274fc
add esp, 4
test bl, bl
je 0x4df9b8
mov ecx, dword [esp + 0x14]
mov eax, 0x601520
lea esp, [esp]
mov dx, word [eax]
mov word [ecx], dx
add eax, 2
add ecx, 0xa
cmp eax, 0x601720
jl 0x4df9a0
jmp 0x4dfbe3
push 0x5fbb3c
lea ecx, [esp + 0x1c]
call fcn.0048cd50
cmp dword [esp + 0x34], ebp
mov eax, dword [esp + 0x20]
mov byte [esp + 0xcc], 0x10
jae 0x4df9dc
lea eax, [esp + 0x20]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x98]
push ecx
push eax
push edx
push 0
lea ecx, [esp + 0x94]
call fcn.0048a450
test eax, eax
sete bl
cmp dword [esp + 0x34], ebp
mov byte [esp + 0xcc], 9
mov dword [esp + 0x18], esi
jb 0x4dfa1c
mov eax, dword [esp + 0x20]
push eax
call fcn.004274fc
add esp, 4
test bl, bl
je 0x4dfa48
mov ecx, dword [esp + 0x14]
mov eax, 0x601720
lea esp, [esp]
mov dx, word [eax]
mov word [ecx], dx
add eax, 2
add ecx, 0xa
cmp eax, 0x601920
jl 0x4dfa30
jmp 0x4dfbe3
push str.PDFDocEncoding
lea ecx, [esp + 0x40]
call fcn.0048cd50
cmp dword [esp + 0x58], ebp
mov eax, dword [esp + 0x44]
mov byte [esp + 0xcc], 0x11
jae 0x4dfa6c
lea eax, [esp + 0x44]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x98]
push ecx
push eax
push edx
push 0
lea ecx, [esp + 0x94]
call fcn.0048a450
test eax, eax
lea ecx, [esp + 0x3c]
sete bl
mov byte [esp + 0xcc], 9
call fcn.004b36e0
test bl, bl
je 0x4dfac8
mov ecx, dword [esp + 0x14]
mov eax, 0x601920
jmp 0x4dfab0
mov dx, word [eax]
mov word [ecx], dx
add eax, 2
add ecx, 0xa
cmp eax, 0x601b20
jl 0x4dfab0
jmp 0x4dfbe3
push 0x5fbb5c
lea ecx, [esp + 0x40]
call fcn.0048cd50
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x84]
mov byte [esp + 0xd0], 0x12
call fcn.0048b3f0
lea ecx, [esp + 0x3c]
mov bl, al
mov byte [esp + 0xcc], 9
call fcn.004b36e0
test bl, bl
je 0x4dfb28
mov ecx, dword [esp + 0x14]
mov eax, 0x601b20
nop
mov dx, word [eax]
mov word [ecx], dx
add eax, 2
add ecx, 0xa
cmp eax, 0x601d20
jl 0x4dfb10
jmp 0x4dfbe3
push 0x5fbb70
lea ecx, [esp + 0x40]
call fcn.0048cd50
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x84]
mov byte [esp + 0xd0], 0x13
call fcn.0048b3f0
lea ecx, [esp + 0x3c]
mov bl, al
mov byte [esp + 0xcc], 9
call fcn.004b36e0
test bl, bl
je 0x4dfb85
mov ecx, dword [esp + 0x14]
mov eax, 0x601d20
nop
mov dx, word [eax]
mov word [ecx], dx
add eax, 2
add ecx, 0xa
cmp eax, 0x601f20
jl 0x4dfb70
jmp 0x4dfbe3
push 0x5fbb80
lea ecx, [esp + 0x40]
call fcn.0048cd50
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x84]
mov byte [esp + 0xd0], 0x14
call fcn.0048b3f0
lea ecx, [esp + 0x3c]
mov bl, al
mov byte [esp + 0xcc], 9
call fcn.004b36e0
test bl, bl
je 0x4dfbe3
mov ecx, dword [esp + 0x14]
mov eax, 0x601f20
lea esp, [esp]
mov dx, word [eax]
mov word [ecx], dx
add eax, 2
add ecx, 0xa
cmp eax, 0x602120
jl 0x4dfbd0
mov eax, dword [edi]
mov edx, dword [eax]
mov ecx, edi
call edx
cmp eax, 5
jne 0x4dfe00
push 0x5fbb98
lea ecx, [esp + 0x1c]
call fcn.0048cd50
lea eax, [esp + 0x18]
push eax
mov ecx, edi
mov byte [esp + 0xd0], 0x15
call fcn.004b7ac0
cmp dword [esp + 0x34], 0x10
mov esi, eax
mov dword [esp + 0x38], esi
mov byte [esp + 0xcc], 9
mov dword [esp + 0x18], 0x5f1558
jb 0x4dfc40
mov ecx, dword [esp + 0x20]
push ecx
call fcn.004274fc
add esp, 4
test esi, esi
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], 0
mov byte [esp + 0x20], 0
mov dword [esp + 0x18], 0x5f13d0
je 0x4dfe00
mov edi, dword [esp + 0x38]
mov ecx, edi
xor ebp, ebp
call fcn.004b5810
test eax, eax
jbe 0x4dfe00
push ebp
mov ecx, edi
call fcn.004b5830
mov esi, eax
test esi, esi
je 0x4dfdee
mov edx, dword [esi]
mov eax, dword [edx]
mov ecx, esi
call eax
cmp eax, 1
jne 0x4dfdee
mov ecx, esi
call fcn.004b57f0
call fcn.0044eb60
mov esi, eax
cmp esi, 0xff
ja 0x4dfdee
mov ecx, edi
add ebp, 1
call fcn.004b5810
cmp ebp, eax
jae 0x4dfdee
mov edx, dword [esp + 0x14]
lea ecx, [esi + esi*4]
mov dword [esp + 0x5c], esi
lea ebx, [edx + ecx*2]
jmp 0x4dfce0
cmp dword [esp + 0x5c], 0xff
mov edi, dword [esp + 0x38]
ja 0x4dfdee
push ebp
mov ecx, edi
call fcn.004b5830
mov esi, eax
test esi, esi
je 0x4dfdee
mov eax, dword [esi]
mov edx, dword [eax]
mov ecx, esi
call edx
cmp eax, 3
jne 0x4dfdeb
mov ecx, esi
mov word [ebx], 0
call fcn.004b5800
push eax
lea ecx, [esp + 0x64]
call fcn.0048c600
mov dword [esp + 0x60], 0x5f1570
cmp dword [esp + 0x7c], 0x10
mov esi, dword [esp + 0x68]
mov byte [esp + 0xcc], 0x16
jae 0x4dfd4a
lea esi, [esp + 0x68]
push esi
call fcn.00531fc0
add esp, 4
shl eax, 4
mov edi, eax
mov eax, dword [edi + 0x6127a8]
mov ecx, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4dfd80
test dl, dl
je 0x4dfd7c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4dfd80
add eax, 2
add ecx, 2
test dl, dl
jne 0x4dfd60
xor eax, eax
jmp 0x4dfd85
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4dfda5
mov eax, dword [edi + 0x6127ac]
mov dword [ebx], eax
mov ecx, dword [edi + 0x6127b0]
mov dword [ebx + 4], ecx
mov dx, word [edi + 0x6127b4]
mov word [ebx + 8], dx
add dword [esp + 0x5c], 1
add ebx, 0xa
cmp dword [esp + 0x7c], 0x10
mov byte [esp + 0xcc], 9
mov dword [esp + 0x60], 0x5f1558
jb 0x4dfdd1
mov eax, dword [esp + 0x68]
push eax
call fcn.004274fc
add esp, 4
mov ecx, dword [esp + 0x38]
add ebp, 1
call fcn.004b5810
cmp ebp, eax
jb 0x4dfce0
mov edi, dword [esp + 0x38]
jmp 0x4dfdee
sub ebp, 1
mov ecx, edi
add ebp, 1
call fcn.004b5810
cmp ebp, eax
jb 0x4dfc7a
mov esi, 0x10
cmp dword [esp + 0x9c], esi
mov edi, 0x5f1558
mov dword [esp + 0x80], edi
jb 0x4dfe2a
mov ecx, dword [esp + 0x88]
push ecx
call fcn.004274fc
add esp, 4
cmp dword [esp + 0xbc], esi
mov dword [esp + 0x9c], 0xf
mov dword [esp + 0x98], 0
mov byte [esp + 0x88], 0
mov dword [esp + 0x80], 0x5f13d0
mov dword [esp + 0xa0], edi
jb 0x4dfe73
mov edx, dword [esp + 0xa8]
push edx
call fcn.004274fc
add esp, 4
mov ecx, dword [esp + 0xc4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xac]
xor ecx, esp
call fcn.0044abb9
add esp, 0xbc
ret 4