Function at 0x43fac9
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push edx
sub edx, 0x6480
call fcn.0043f15e
add byte [0x3e4e3a36], dh
cmp al, 0x3e
aaa
inc esi
add esp, 4
sub edx, 0x3673
add edx, 0x87ec
pop edx
push eax
push eax
add esp, 4
sub eax, 0x12784
pop eax
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x43f1c2
push ebx
call 0x43f19b
add byte [ebx], bh
xor eax, 0x414e4445
dec eax
xor eax, 0x4c48348
add ebx, 0xea5d
call 0x43f1b1
add byte [edi], dh
cmp dword [ebx + eax*2], edi
dec esp
xor edi, dword [edi]
add esp, 4
pop ebx
push ebx
sub ebx, 0x436f
pop ebx
jmp 0x43f3f0
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push edx
push edi
add esp, 4
sub edx, 0x17686
or edx, 0x8028
pop edx
push esi
and esi, 0x843f
sub esi, 0x7ec1
pop esi
push eax
push eax
add esp, 4
xor eax, 0x8d39
sub eax, 0xbe07
pop eax
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x43f271
push edi
sub edi, 0x14e5
and edi, 0x17f21
jmp 0x43f243
pop edi
push ebx
sub ebx, 0x155aa
jmp 0x43f251
xor ebx, 0x10597
pop ebx
push esi
xor esi, 0x3204
pop esi
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x43f3a2
cmp dword [ebp - 0xc10], 0
jle 0x43f396
push eax
push edx
add esp, 4
or eax, 0x5001
pop eax
push ecx
and ecx, 0x233d
xor ecx, 0xe9fc
sub ecx, 0x1e74
pop ecx
push eax
push edx
add esp, 4
add eax, 0x11fbf
xor eax, 0x1727e
pop eax
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x43f332
push ebx
add ebx, 0x3a6a
and ebx, 0x477d
xor ebx, 0xb07
or ebx, 0x1404
pop ebx
push ecx
push ecx
add esp, 4
xor ecx, 0xe51
sub ecx, 0x8b86
or ecx, 0x11c3d
pop ecx
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x43f31a
mov dword [ebp - 0x14cc], 1
jmp 0x43f324
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x43f396
push esi
push ebx
add esp, 4
jmp 0x43f33f
or esi, 0x12f35
sub esi, 0xa4eb
sub esi, 0x2a90
pop esi
push eax
push esi
add esp, 4
xor eax, 0xbd2e
sub eax, 0xf832
pop eax
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x43f271
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x43f3eb
push edx
push esi
add esp, 4
sub edx, 0xa749
and edx, 0xb22a
pop edx
push edi
push esi
add esp, 4
and edi, 0x3212
add edi, 0x156d3
jmp 0x43f3d6
and edi, 0xa569
pop edi
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x43f42c
jmp 0x43f139
push edi
jmp 0x43f3f9
or edi, 0x99b7
call 0x43f40c
add byte [eax], bh
xor eax, 0x354c3c50
add esp, 4
add edi, 0x853e
pop edi
push edx
push edi
add esp, 4
and edx, 0xbb29
pop edx
mov dword [ebp - 0xa5c], 0
push edi
call 0x43f43b
add byte [edx], bh
dec ecx
dec esp
aas
dec eax
inc esi
add esp, 4
or edi, 0x9185
pop edi
push ecx
add ecx, 0x90c6
pop ecx
push edi
jmp 0x43f457
xor edi, 0x1ca9
pop edi
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push ebx
push edi
add esp, 4
call 0x43f4c5
add byte [ebx], bh
xor eax, 0x3335384c
inc edx
dec esi
add esp, 4
sub ebx, 0x7c18
jmp 0x43f4d4
call 0x43f4e0
add byte [ebx], bh
inc edi
aas
xor al, 0x34
inc esp
add esp, 4
pop ebx
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push ebx
xor ebx, 0x4d20
xor ebx, 0x17e
call 0x43f598
add byte [edx + 0x33], al
xor eax, dword [edi + eax*2 + 0x32]
dec esi
aas
add esp, 4
jmp 0x43f5a2
pop ebx
push edi
push eax
add esp, 4
or edi, 0x17cb4
pop edi
push eax
call 0x43f5bc
add byte [edx + 0x3e], al
dec edx
dec ecx
push eax
dec esi
add esp, 4
call 0x43f5cb
add byte [edx], bh
dec eax
inc eax
dec eax
cmp dword [esi], esi
add esp, 4
call 0x43f5dd
add byte [edi], bh
cmp eax, dword [eax + 0x35]
xor eax, 0x3e41354d
add esp, 4
pop eax
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push esi
or esi, 0xa6a7
add esi, 0xff46
xor esi, 0xd75d
pop esi
push eax
push edi
add esp, 4
and eax, 0xc57
call 0x43f637
add byte [esi + 0x3c], cl
dec esp
dec edi
cmp dword [edi], edi
inc esi
cmp al, 0x36
add esp, 4
pop eax
cmp dword [ebp - 0x14d4], 0
jne 0x43f653
mov dword [ebp - 0x2e0], 0
jmp 0x43f90f
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push edi
jmp 0x43f66f
jmp 0x43f678
pop edi
push esi
push ecx
add esp, 4
and esi, 0xec40
or esi, 0x2748
xor esi, 0xb696
xor esi, 0x457e
pop esi
cmp dword [ebp - 0xc20], 0
jne 0x43f6af
mov dword [ebp - 0x2e0], 0
jmp 0x43f90f
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push edx
push edi
add esp, 4
add edx, 0x97ab
or edx, 0x14c1e
add edx, 0x84f7
add edx, 0xb204
pop edx
push edi
push esi
add esp, 4
and edi, 0x4350
jmp 0x43f6ec
pop edi
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push ecx
push edi
add esp, 4
xor ecx, 0xde35
or ecx, 0x11e52
pop ecx
push edx
or edx, 0xe2c2
pop edx
push ebx
push esi
add esp, 4
call 0x43f748
add byte [edi], bh
cmp dword [edx + ecx*2 + 0x48], ecx
xor al, 0x33
dec edx
add esp, 4
pop ebx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push ebx
xor ebx, 0x144da
and ebx, 0x2e12
pop ebx
push edi
push ecx
add esp, 4
and edi, 0xc71a
and edi, 0x4a3
add edi, 0x13778
pop edi
push edx
push ecx
add esp, 4
sub edx, 0xa113
pop edx
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x43f7fb
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
sub eax, ecx
mov dword [ebp - 0x1498], eax
jmp 0x43f85e
movzx edx, word [ebp - 0x1f8]
movzx eax, word [ebp - 0x100]
cmp edx, eax
je 0x43f71a
movzx ecx, word [ebp - 0x1f8]
xor ecx, 0x20
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x43f71a
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
jge 0x43f848
mov dword [ebp - 0x14d8], 0xffffffff
jmp 0x43f852
mov dword [ebp - 0x14d8], 1
mov edx, dword [ebp - 0x14d8]
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 0
jne 0x43f8a7
push edi
call 0x43f877
add byte [edi + 0x44], cl
push eax
dec ebx
dec esp
dec eax
inc esp
cmp al, 0x4a
add esp, 4
or edi, 0x12c54
call 0x43f88d
add byte [edi + 0x47], al
inc edx
dec esp
dec edi
dec edx
add esp, 4
pop edi
push edi
xor edi, 0xfcc9
pop edi
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2e0], eax
jmp 0x43f90f
push ebx
add ebx, 0x3e4a
add ebx, 0x7e2a
or ebx, 0x4070
pop ebx
push ecx
jmp 0x43f8c3
sub ecx, 0x35fa
pop ecx
push eax
jmp 0x43f8d2
xor eax, 0x18229
pop eax
mov ecx, dword [ebp - 0x4d4]
mov edx, dword [ecx]
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0xc20]
je 0x43f905
mov ecx, dword [ebp - 0x4d4]
cmp dword [ecx + 0x30], 0
jne 0x43f6bb
mov dword [ebp - 0x2e0], 0
push esi
or esi, 0x10456
or esi, 0x91d6
jmp 0x43f923
xor esi, 0x41ae
pop esi
push edi
push edi
add esp, 4
call 0x43f93d
add byte [ecx + 0x41], cl
dec edx
dec edx
inc ebp
xor edi, dword [0x4c48349]
pop edi
cmp dword [ebp - 0x2e0], 0
jne 0x44025a
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push ecx
sub ecx, 0x6025
and ecx, 0x1069
or ecx, 0x17035
pop ecx
push edx
push ecx
add esp, 4
or edx, 0x2a30
add edx, 0x7d4
or edx, 0x1470a
or edx, 0xb0ed
pop edx
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push edx
push ebx
add esp, 4
and edx, 0x11aea
and edx, 0xdf8e
pop edx
push edi
jmp 0x43fab7
and edi, 0x1628e
call 0x43fac9
add byte [ebp + 0x38], al
dec ebp
dec edx
dec edi
add esp, 4
pop edi
cmp dword [ebp - 0x14dc], 0
jne 0x43fae5
mov dword [ebp - 0x6ec], 0
jmp 0x43fda1
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push ebx
push eax
add esp, 4
sub ebx, 0x73fe
pop ebx
push ebx
jmp 0x43fb0a
xor ebx, 0x5430
add ebx, 0xe206
xor ebx, 0xcd8d
pop ebx
push edx
push esi
add esp, 4
xor edx, 0x6869
pop edx
cmp dword [ebp - 0xc2c], 0
jne 0x43fb41
mov dword [ebp - 0x6ec], 0
jmp 0x43fda1
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push ecx
push edx
add esp, 4
add ecx, 0xe5a4
and ecx, 0x5a5f
pop ecx
push ecx
and ecx, 0x11c23
pop ecx
push ecx
push edi
add esp, 4
or ecx, 0x1291f
and ecx, 0x143cf
and ecx, 0x3080
pop ecx
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push ecx
sub ecx, 0x16baa
sub ecx, 0xaf8d
sub ecx, 0x8dae
pop ecx
push ecx
push edi
add esp, 4
add ecx, 0xf9f2
and ecx, 0x136a4
sub ecx, 0x800c
xor ecx, 0x10c5b
pop ecx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push esi
push ecx
add esp, 4
and esi, 0xcbe8
pop esi
push edi
push eax
add esp, 4
sub edi, 0x6695
sub edi, 0x1803
and edi, 0x13fcb
or edi, 0x9244
pop edi
push eax
xor eax, 0x166f4
pop eax
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x43fc8d
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x43fcf0
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x43fbac
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x43fbac
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x43fcda
lea eax, [esi + edi*8]
invalid
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x43fce4
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x43fd39
push esi
push ebx
add esp, 4
sub esi, 0x12a0b
pop esi
push ecx
call 0x43fd15
add byte [esi], dh
cmp eax, 0x4b4f4145
aas
xor cl, byte [ecx - 0x7d]
les eax, [ecx + eax*4]
loope 0x43fcbe
sub eax, dword [ecx]
add byte [ecx + 0x1241be9], al
add byte [ecx + 0xf0dde9], al
add byte [ecx - 0x75], bl
lea ebp, [eax]
sti
invalid
push ecx
push eax
add esp, 4
xor ecx, 0x2863
pop ecx
push edi
call 0x43fd55
add byte [ebx + 0x49], cl
cmp al, 0x4a
dec edi
dec ebx
inc esp
add esp, 4
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0xde25
sub ecx, 0xeb8
pop ecx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x43fd97
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x43fb4d
mov dword [ebp - 0x6ec], 0
push esi
xor esi, 0x12cb2
xor esi, 0x2e91
sub esi, 0x1399b
call 0x43fdc3
add byte [ecx], bh
dec esp
inc edi
dec eax
inc ebx
dec edx
inc esi
aas
cmp dword [ebx + 0x505e04c4], eax
push ebx
add esp, 4
sub eax, 0x9a49
pop eax
cmp dword [ebp - 0x6ec], 0
jne 0x43fe1d
push ebx
call 0x43fdeb
add byte [0x43453f3f], dh
dec edx
push eax
xor eax, 0xeb04c483
push es
xor al, byte [ebx + 0x47]
dec ecx
dec eax
inc ecx
pop ebx
push ecx
add ecx, 0xbd7
call 0x43fe0a
add byte [ecx + 0x3c], cl
xor ecx, dword [ecx + 0x40]
dec ebp
add esp, 4
pop ecx
mov dword [ebp - 0x738], 0
jmp 0x440944
push edi
call 0x43fe2a
add byte [eax + 0x3f], dl
inc ebx
push eax
dec esp
cmp al, byte [ebx - 0x107efb3c]
pop ecx
mov dword [eax], 0xeb515f00
add edx, dword [eax + 0x3f]
xor eax, 0x1e2c181
add byte [eax], al
and ecx, 0x9fbf
pop ecx
push esi
add esi, 0xaa22
pop esi
mov eax, dword [ebp - 0x6ec]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x6fc], 0
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x14e8], edx
cmp dword [ebp - 0x14e8], 0
jne 0x43fe8e
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x44017f
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x14ec], edx
jne 0x43feb6
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x44017f
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x14ec]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x14f0], ecx
cmp dword [ebp - 0x14f0], 0
jne 0x43fee8
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
jmp 0x44017f
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x14f0]
mov dword [ebp - 0x6f0], eax
jne 0x43ff0d
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], ecx
jmp 0x44017f
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x6f0]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18a4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18a8], ecx
mov dword [ebp - 0x6f4], 0
jmp 0x43ff67
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x440173
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x43ffd7
mov ecx, dword [ebp - 0x180]
add ecx, 1
mov dword [ebp - 0x180], ecx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x440089
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x440089
push esi
push edx
add esp, 4
xor esi, 0x10d47
add esi, 0x15831
xor esi, 0xaf3c
xor esi, 0x181
pop esi
push edx
sub edx, 0x17e2
pop edx
push edx
push eax
add esp, 4
xor edx, 0xd0e5
pop edx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
cmp ecx, eax
je 0x44007b
mov ecx, dword [ebp - 0x6f8]
add ecx, dword [ebp - 0x180]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x180]
movsx ecx, byte [ebp + eax - 0x820]
cmp edx, ecx
jne 0x440082
jmp 0x43ffc8
jmp 0x440089
push edi
and edi, 0x7552
pop edi
push edi
and edi, 0x6eab
and edi, 0x7fcf
add edi, 0xab28
pop edi
push edi
and edi, 0xd390
jmp 0x4400b4
or edi, 0x2cbe
pop edi
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x4400e8
mov dword [ebp - 0xc30], 0
jmp 0x440157
push ecx
push ecx
add esp, 4
sub ecx, 0x16bab
xor ecx, 0x17b67
call 0x440108
add byte [edx + 0x50], al
xor al, 0x4b
aas
cmp dword ds:[eax], edi
cmp al, byte [ebx + 0x505904c4]
add eax, 0x1fc8
and eax, 0x4ed5
pop eax
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x44014d
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x440157
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x44016e
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x44017f
jmp 0x43ff58
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x44025a
push ecx
push edi
add esp, 4
add ecx, 0x12673
pop ecx
push eax
or eax, 0x1cb4
or eax, 0xfd7a
call 0x4401b2
add byte [ecx], bh
inc edx
xor al, 0x47
xor cl, byte [edi + 0x32]
add esp, 4
pop eax
push ebx
xor ebx, 0x9473
pop ebx
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push edx
push ebx
add esp, 4
xor edx, 0xc620
and edx, 0xfe09
and edx, 0x81ed
jmp 0x4401ea
pop edx
push esi
call 0x4401f8
add byte [edx + 0x4f], cl
xor al, 0x36
xor cl, byte [ebx + eax*4 - 0x3c]
add al, 0x5e
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x44025a
push ecx
xor ecx, 0x17724
jmp 0x440227
sub ecx, 0x3274
xor ecx, 0x10910
pop ecx
push esi
push ebx
add esp, 4
call 0x440247
add byte [edx], dh
dec edi
xor al, 0x44
dec ecx
cmp eax, 0xc483474a
add al, 0x5e
mov dword [ebp - 0x738], 0
jmp 0x440944
push edx
call 0x440268
add byte [edi], dh
dec eax
push eax
dec ebx
xor al, 0x40
add esp, 4
xor edx, 0x1ba4
pop edx
push edi
call 0x440282
add byte [ecx], bh
aaa
dec edi
dec edx
inc edx
dec edx
dec eax
aas
aaa
add esp, 4
sub edi, 0x8d5e
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push ebx
xor ebx, 0x12674
call 0x4402c6
add byte [eax + 0x3d], dl
dec ebx
dec edi
cmp eax, dword [ebx + 0x515b04c4]
push edi
add esp, 4
jmp 0x4402d7
jmp 0x4402de
xor ecx, 0xee5e
pop ecx
cmp dword [ebp - 0x14f4], 0
jne 0x4402fd
mov dword [ebp - 0x2e0], 0
jmp 0x4405a4
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push ebx
xor ebx, 0x115e7
pop ebx
push eax
push edx
add esp, 4
add eax, 0xa43c
or eax, 0xd158
or eax, 0x84d6
pop eax
push ecx
push eax
add esp, 4
or ecx, 0x10be4
or ecx, 0x17225
pop ecx
cmp dword [ebp - 0xc3c], 0
jne 0x440359
mov dword [ebp - 0x2e0], 0
jmp 0x4405a4
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push ebx
and ebx, 0x6910
pop ebx
push edx
add edx, 0x181ab
call 0x440383
add byte [edi], dh
dec esp
inc ebp
cmp byte [esi + 0x3c], al
cmp al, byte [ebx + 0x8e804c4]
add byte [eax], al
add byte [eax], al
cmp byte [0x36324847], dh
dec esp
add esp, 4
pop edx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push edx
or edx, 0xdf58
and edx, 0xc3fa
call 0x4403dd
add byte [ecx + 0x42], cl
xor cl, byte ds:[esi + 0x4b]
aas
inc eax
xor eax, 0x8104c483
retf 0x1c9d
push edx
sub edx, 0x4b10
pop edx
push esi
xor esi, 0x9870
add esi, 0x71ed
and esi, 0x13b9f
pop esi
push ebx
and ebx, 0x14e4e
pop ebx
push ecx
and ecx, 0x1481e
sub ecx, 0x17918
pop ecx
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push edx
push esi
add esp, 4
call 0x4405f6
add byte [ecx + ecx*2 + 0x4f], al
inc ecx
dec ecx
cmp eax, 0x8104c483
retf 0x96ca
push eax
and eax, 0x104d1
add eax, 0x148d9
and eax, 0x5f43
pop eax
push eax
xor eax, 0x14298
xor eax, 0xab2f
call 0x440972
add byte [edx], dh
inc eax
push eax
xor eax, 0x833d3a4f
les eax, [eax + ebx*2]
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push ecx
and ecx, 0x79c5
sub ecx, 0x13b23
and ecx, 0xf68b
and ecx, 0x5823
pop ecx
push edx
push esi
add esp, 4
xor edx, 0x16a12
sub edx, 0x12afb
sub edx, 0x3c79
pop edx
cmp dword [ebp - 0x3cc], 0
je 0x4409c9
cmp dword [ebp - 0xa5c], 0
jne 0x440a0f
push edx
xor edx, 0x15713
or edx, 0xc486
pop edx
push eax
call 0x4409e5
add byte [edi + 0x37], cl
dec edx
inc edi
inc ecx
cmp al, byte [ebx + 0x575804c4]
push esi
add esp, 4
or edi, 0x18637
or edi, 0x7bf3
pop edi
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push esi
push edi
add esp, 4
jmp 0x440a24
pop esi
push eax
and eax, 0xa0e1
xor eax, 0xb9fe
xor eax, 0x3b5e
add eax, 0x13cad
pop eax
push edx
push edi
add esp, 4
and edx, 0x132f3
pop edx
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push edx
xor edx, 0xb7c1
pop edx
push ebx
jmp 0x440a87
pop ebx
push esi
and esi, 0xb5f1
pop esi
push ecx
push edx
add esp, 4
sub ecx, 0xc0f5
or ecx, 0x905c
add ecx, 0xfbbe
pop ecx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push esi
or esi, 0x12cd8
xor esi, 0xdd89
add esi, 0x661e
pop esi
push ebx
push edi
add esp, 4
call 0x440b39
add byte [eax + ecx*2 + 0x3c], al
xor esi, dword ds:[esi]
dec ebx
add esp, 4
add ebx, 0x2901
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push esi
push esi
add esp, 4
or esi, 0xcdba
sub esi, 0xe05f
add esi, 0x1022f
sub esi, 0xecba
pop esi
push ebx
xor ebx, 0x111a2
or ebx, 0x1534f
and ebx, 0x601
pop ebx
cmp dword [ebp - 0x150c], 0
jne 0x440bb4
mov dword [ebp - 0x2a8], 0
jmp 0x440e5b
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push eax
sub eax, 0x17ca6
and eax, 0x151e5
xor eax, 0x9b51
jmp 0x440bdf
pop eax
push esi
push ebx
add esp, 4
and esi, 0x17fa2
sub esi, 0x86e3
add esi, 0xf29
pop esi
cmp dword [ebp - 0xc4c], 0
jne 0x440c10
mov dword [ebp - 0x2a8], 0
jmp 0x440e5b
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push eax
xor eax, 0x17044
pop eax
push esi
push edi
add esp, 4
and esi, 0xfe97
pop esi
push esi
push esi
add esp, 4
xor esi, 0x174c3
sub esi, 0x1741
sub esi, 0xd347
sub esi, 0x14dc2
pop esi
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push edi
push edx
add esp, 4
call 0x440c8c
add byte [0x46443339], bh
push eax
cmp eax, 0xc483493d
add al, 0xe8
pop es
add byte [eax], al
add byte [eax], al
cmp cl, byte [edi + 0x44]
cmp byte ds:[ebx], dh
add esp, 4
jmp 0x440ca3
add edi, 0x9887
pop edi
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push edx
push ebx
add esp, 4
xor edx, 0x129bf
pop edx
push eax
call 0x440d1a
add byte [ecx + 0x3b], al
cmp dword [ecx + 0x3c], ecx
inc ecx
add esp, 4
sub eax, 0xbe94
call 0x440d2f
add byte [eax + 0x3e], al
inc ebp
cmp dword [eax], edi
dec edi
add esp, 4
pop eax
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x440d50
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1514], ecx
jmp 0x440daa
movzx eax, word [ebp - 0x204]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x440c78
movzx edx, word [ebp - 0x204]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x440c78
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x440d94
mov dword [ebp - 0x1510], 0xffffffff
jmp 0x440d9e
mov dword [ebp - 0x1510], 1
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x1514], 0
jne 0x440df3
push edx
push edi
add esp, 4
xor edx, 0xaab7
and edx, 0xd2ba
and edx, 0x16447
pop edx
push ebx
jmp 0x440dd2
and ebx, 0x161b0
and ebx, 0x4e96
and ebx, 0x4a41
pop ebx
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x2a8], ecx
jmp 0x440e5b
push ebx
add ebx, 0x1052e
xor ebx, 0xb791
call 0x440e10
add byte [eax + 0x3a], dl
inc ebx
inc ecx
inc esp
push eax
aas
inc edx
push eax
dec edx
add esp, 4
call 0x440e21
add byte [esi + 0x4b], cl
cmp dword [edi + 0x43], eax
inc eax
dec edx
inc esi
add esp, 4
pop ebx
mov edx, dword [ebp - 0x4e4]
mov eax, dword [edx]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
cmp ecx, dword [ebp - 0xc4c]
je 0x440e51
mov edx, dword [ebp - 0x4e4]
cmp dword [edx + 0x30], 0
jne 0x440c1c
mov dword [ebp - 0x2a8], 0
push ecx
xor ecx, 0x2782
pop ecx
push ecx
push eax
add esp, 4
sub ecx, 0x1110a
sub ecx, 0x12478
and ecx, 0x4ed5
xor ecx, 0xc0e0
pop ecx
push ebx
push ebx
add esp, 4
or ebx, 0xeb9f
pop ebx
cmp dword [ebp - 0x2a8], 0
jne 0x441792
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
mov dword [ebp - 0x16d2], edx