Function at 0x43cde0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x549506
mov eax, dword fs:[0]
push eax
sub esp, 0x460
mov eax, dword [0x5b0008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x44c], ecx
mov ecx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x454], ecx
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], eax
mov eax, dword [ecx + 4]
mov esi, eax
mov edi, dword [ecx]
sub esi, edi
push esi
push 0x73
push edi
mov dword [ebp - 0x460], eax
call fcn.00548520
mov ecx, dword [ebp - 0x460]
test eax, eax
push esi
cmovne ecx, eax
push 0x68
push edi
mov dword [ebp - 0x434], ecx
call fcn.00548520
mov esi, dword [ebp - 0x460]
add esp, 0x18
test eax, eax
mov ecx, esi
cmovne ecx, eax
mov dword [ebp - 0x468], ecx
cmp edi, esi
jne 0x43cf06
lea eax, [ebp - 0x429]
mov byte [ebp - 0x429], 0x11
push eax
push 0
lea ecx, [ebp - 0x440]
call fcn.0044abb0
mov eax, dword [ebp - 0x438]
mov edi, dword [ebp - 0x43c]
mov byte [ebp - 0x429], 0x75
mov dword [ebp - 0x448], eax
cmp edi, eax
je 0x43cedb
mov eax, dword [ebp - 0x440]
mov byte [edi], 0x75
inc edi
mov dword [ebp - 0x43c], edi
mov dword [ebp - 0x444], eax
jmp 0x43cf0c
lea eax, [ebp - 0x429]
push eax
push edi
lea ecx, [ebp - 0x440]
call fcn.0044abb0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x444], eax
mov edi, dword [ebp - 0x43c]
cmp dword [ebp - 0x434], esi
mov esi, dword [ebp - 0x44c]
jne 0x43cfbe
mov eax, dword [esi + 0x26c]
cmp byte [eax + 0x1c], 0
je 0x43cfbe
mov ecx, dword [esi + 0x270]
mov eax, dword [ecx]
mov eax, dword [eax + 0x108]
call eax
cmp byte [eax + 0x21], 0
je 0x43cfbe
mov eax, dword [esi + 0x26c]
cmp dword [eax + 4], 0
je 0x43cfbe
mov eax, dword [ebp - 0x448]
mov byte [ebp - 0x429], 0x73
cmp edi, eax
je 0x43cf73
mov ecx, dword [ebp - 0x444]
mov byte [edi], 0x73
inc edi
mov dword [ebp - 0x43c], edi
jmp 0x43cfa4
lea eax, [ebp - 0x429]
push eax
push edi
lea ecx, [ebp - 0x440]
call fcn.0044abb0
mov eax, dword [ebp - 0x438]
mov ecx, dword [ebp - 0x440]
mov edi, dword [ebp - 0x43c]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], ecx
mov byte [ebp - 0x429], 0x72
cmp edi, eax
je 0x43d001
mov byte [edi], 0x72
inc edi
mov dword [ebp - 0x43c], edi
jmp 0x43d18d
mov eax, dword [0x5be08c]
cmp byte [eax + 0xe2d], 0
jne 0x43cfd5
cmp byte [eax + 0xe2c], 0
je 0x43d037
mov ecx, dword [ebp - 0x468]
cmp ecx, dword [ebp - 0x460]
jne 0x43d037
mov byte [ebp - 0x429], 0x68
cmp edi, dword [ebp - 0x448]
je 0x43d001
mov byte [edi], 0x68
inc edi
mov dword [ebp - 0x43c], edi
jmp 0x43d187
lea eax, [ebp - 0x429]
push eax
push edi
lea ecx, [ebp - 0x440]
call fcn.0044abb0
mov eax, dword [ebp - 0x438]
mov ecx, dword [ebp - 0x440]
mov edi, dword [ebp - 0x43c]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], ecx
jmp 0x43d18d
mov esi, dword [eax + 0x7a8]
lea edi, [eax + 0x734]
push 9
call fcn.0051f3c3
add esp, 4
mov dword [ebp - 0x430], eax
mov eax, 0x5b0bb0
test esi, esi
mov ecx, 0x5b0ba8
mov edx, 1
cmovne ecx, eax
call fcn.0041d6e0
mov edx, dword [ebp - 0x430]
mov ecx, edi
call fcn.0041d930
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x458], eax
mov byte [eax + 8], 0
mov esi, dword [ebp - 0x44c]
mov byte [ebp - 4], 1
cmp dword [esi + 0x278], 0
jne 0x43d0fc
cmp dword [esi + 0x280], 0
je 0x43d0c9
mov edi, dword [ebp - 0x43c]
mov byte [ebp - 0x429], 0x71
cmp edi, dword [ebp - 0x448]
je 0x43d11d
mov byte [edi], 0x71
inc edi
mov dword [ebp - 0x43c], edi
jmp 0x43d14e
mov ecx, eax
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43d0d0
sub ecx, edx
je 0x43d0fc
mov edi, dword [ebp - 0x43c]
mov byte [ebp - 0x429], 2
cmp edi, dword [ebp - 0x448]
je 0x43d11d
mov byte [edi], 2
inc edi
mov dword [ebp - 0x43c], edi
jmp 0x43d14e
mov edi, dword [ebp - 0x43c]
mov byte [ebp - 0x429], 1
cmp edi, dword [ebp - 0x448]
je 0x43d11d
mov byte [edi], 1
inc edi
mov dword [ebp - 0x43c], edi
jmp 0x43d14e
lea eax, [ebp - 0x429]
push eax
push edi
lea ecx, [ebp - 0x440]
call fcn.0044abb0
mov eax, dword [ebp - 0x438]
mov edi, dword [ebp - 0x43c]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x444], eax
mov edx, dword [ebp - 0x430]
mov ecx, edx
mov byte [ebp - 4], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x434], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43d163
sub ecx, dword [ebp - 0x434]
push ecx
push 0
push edx
call fcn.0051b450
push dword [ebp - 0x430]
call fcn.0051d799
add esp, 0x10
mov ecx, dword [ebp - 0x444]
mov eax, edi
sub eax, ecx
mov ecx, dword [esi + 0x26c]
mov dword [ebp - 0x464], eax
mov byte [ebp - 0x429], al
mov eax, dword [ecx + 8]
cmp eax, 0xffffffff
jne 0x43d1b7
mov eax, dword [ecx + 0xc]
cmp eax, 0xffffffff
je 0x43d28a
push eax
push 1
lea eax, [ebp - 0x429]
push eax
call fcn.00484bb0
test eax, eax
je 0x43d28a
mov eax, dword [ebp - 0x444]
cmp eax, edi
je 0x43d226
mov esi, eax
nop word [eax + eax]
mov al, byte [esi]
mov byte [ebp - 0x44d], al
mov eax, dword [ebp - 0x44c]
mov ecx, dword [eax + 0x26c]
mov eax, dword [ecx + 8]
cmp eax, 0xffffffff
jne 0x43d208
mov eax, dword [ecx + 0xc]
cmp eax, 0xffffffff
je 0x43d28a
push eax
push 1
lea eax, [ebp - 0x44d]
push eax
call fcn.00484bb0
test eax, eax
je 0x43d28a
inc esi
cmp esi, edi
jne 0x43d1e0
mov esi, dword [ebp - 0x44c]
mov eax, dword [esi + 0x26c]
mov dword [ebp - 0x430], eax
mov ecx, dword [eax + 8]
mov dword [ebp - 0x434], ecx
cmp ecx, 0xffffffff
je 0x43d27c
cmp dword [eax + 0x23a0], 0
je 0x43d2db
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x430]
push ecx
push dword [ecx + 0x23a0]
mov dword [ecx + 0x10], eax
lea edx, [ecx + 0x78]
mov ecx, dword [ebp - 0x434]
call fcn.004850d0
add esp, 8
test al, al
jne 0x43d2c9
xor eax, eax
jmp 0x43d2f5
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x434], ecx
cmp ecx, 0xffffffff
jne 0x43d240
xor esi, esi
mov edx, dword [ebp - 0x444]
test edx, edx
je 0x43daea
mov ecx, dword [ebp - 0x448]
mov eax, edx
sub ecx, edx
cmp ecx, 0x1000
jb 0x43dae0
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43db09
jmp 0x43dae0
mov ecx, dword [ebp - 0x430]
mov dword [ecx + 0x23a0], 0
jmp 0x43d2e1
mov ecx, dword [ebp - 0x430]
mov eax, dword [0x5be08c]
mov eax, dword [eax + 0xd14]
mov dword [ecx + 0x23a4], eax
or eax, 0xffffffff
test eax, eax
je 0x43d28a
mov ecx, dword [esi + 0x26c]
lea eax, [ebp - 0x42a]
push 1
push eax
mov byte [ebp - 0x42a], 0
call fcn.00484cd0
test eax, eax
je 0x43d28a
movzx eax, byte [ebp - 0x42a]
push dword [ebp - 0x464]
mov ecx, dword [ebp - 0x444]
push eax
push ecx
mov dword [ebp - 0x45c], eax
call fcn.00548520
add esp, 0xc
mov ecx, edi
test eax, eax
cmovne ecx, eax
cmp ecx, edi
je 0x43d28a
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x418], 0
mov dword [ebp - 0x414], 0xf
mov byte [ebp - 0x428], 0
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x45c]
dec eax
cmp eax, 0x72
ja case.0x43d398.3
movzx eax, byte [eax + 0x43db40]
jmp dword [eax*4 + 0x43db20]
mov ecx, dword [esi + 0x274]
push 1
mov eax, dword [ecx]
call dword [eax + 0x78]
mov edi, 1
jmp 0x43d5c2
lea eax, [ebp - 0x428]
mov ecx, esi
push eax
call fcn.0043df10
mov edi, eax
jmp 0x43d5c2
lea eax, [ebp - 0x428]
mov ecx, esi
push eax
call fcn.0043e790
mov dword [ebp - 0x434], 1
jmp case.0x43d398.3
push ecx
mov ecx, esi
call fcn.0043ec00
mov edi, eax
test edi, edi
je 0x43d5c2
jmp 0x43d5d5
push ecx
mov ecx, esi
call fcn.0043f040
mov edi, eax
jmp 0x43d5c2
lea ecx, [ebp - 0x410]
call fcn.00421840
lea ecx, [ebp - 0x410]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43d422
sub ecx, edx
mov dword [ebp - 0x45c], ecx
mov ecx, dword [esi + 0x26c]
mov eax, dword [ecx + 8]
cmp eax, 0xffffffff
jne 0x43d44b
mov eax, dword [ecx + 0xc]
cmp eax, 0xffffffff
je case.0x43d398.3
push eax
push 4
lea eax, [ebp - 0x45c]
push eax
call fcn.00484bb0
test eax, eax
je case.0x43d398.3
mov ecx, dword [esi + 0x26c]
mov eax, dword [ecx + 8]
cmp eax, 0xffffffff
jne 0x43d47c
mov eax, dword [ecx + 0xc]
cmp eax, 0xffffffff
je case.0x43d398.3
push eax
push dword [ebp - 0x45c]
lea eax, [ebp - 0x410]
push eax
call fcn.00484ad0
test eax, eax
je case.0x43d398.3
mov ecx, dword [esi + 0x26c]
lea eax, [ebp - 0x464]
push 4
push eax
mov dword [ebp - 0x464], 0
call fcn.00484cd0
test eax, eax
je case.0x43d398.3
cmp dword [ebp - 0x464], 0
jne case.0x43d398.1
mov edi, dword [ebp - 0x414]
cmp edi, 0x19
jb 0x43d50e
cmp edi, 0x10
mov dword [ebp - 0x418], 0x19
push 0x19
lea esi, [ebp - 0x428]
cmovae esi, dword [ebp - 0x428]
push str.Viewer_refused_connection
push esi
call fcn.0051b5b0
mov byte [esi + 0x19], 0
add esp, 0xc
mov esi, dword [ebp - 0x44c]
jmp case.0x43d398.3
mov ecx, edi
mov eax, accept
shr ecx, 1
sub eax, ecx
cmp edi, eax
jbe 0x43d524
mov ecx, accept
jmp 0x43d531
lea eax, [ecx + edi]
mov ecx, 0x1f
cmp eax, ecx
cmova ecx, eax
lea eax, [ecx + 1]
mov dword [ebp - 0x430], ecx
push eax
call fcn.0041c440
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x414], ecx
mov dword [ebp - 0x418], 0x19
mov dword [ebp - 0x458], eax
movups xmm0, xmmword [str.Viewer_refused_connection]
movups xmmword [eax], xmm0
movq xmm0, qword [0x59d2cc]
movq qword [eax + 0x10], xmm0
mov cl, byte [0x59d2d4]
mov byte [eax + 0x18], cl
mov byte [eax + 0x19], 0
cmp edi, 0x10
jb 0x43d5ba
mov ecx, dword [ebp - 0x428]
inc edi
mov eax, ecx
cmp edi, 0x1000
jb 0x43d5aa
mov ecx, dword [ecx - 4]
add edi, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43db0e
push edi
push ecx
call fcn.0051949c
mov eax, dword [ebp - 0x458]
add esp, 8
mov dword [ebp - 0x428], eax
xor edi, edi
push dword [ebp + 0xc]
test edi, edi
mov ecx, esi
setne al
movzx eax, al
push eax
call fcn.0043c4f0
mov eax, 1
mov dword [ebp - 0x430], eax
cmp edi, eax
jne 0x43d671
mov edx, dword [ebp - 0x454]
mov ecx, dword [edx + 4]
cmp ecx, dword [edx + 8]
je 0x43d603
mov al, byte [ebp - 0x42a]
mov byte [ecx], al
inc dword [edx + 4]
jmp 0x43d612
lea eax, [ebp - 0x42a]
push eax
push ecx
mov ecx, edx
call fcn.0044ac70
cmp dword [esi + 0x280], 0
mov al, byte [ebp - 0x42a]
je 0x43d636
cmp al, 0x73
jne 0x43d636
mov eax, dword [esi + 0x26c]
cmp dword [eax + 4], 0
je 0x43d63f
or eax, 0xffffffff
jmp 0x43d66b
cmp al, 0x11
jne 0x43d63f
or eax, 0xffffffff
jmp 0x43d66b
mov eax, dword [0x5be08c]
cmp byte [eax + 0xe2d], 0
jne 0x43d656
cmp byte [eax + 0xe2c], 0
je 0x43d669
mov eax, dword [ebp - 0x468]
cmp eax, dword [ebp - 0x460]
jne 0x43d669
or eax, 0xffffffff
jmp 0x43d66b
xor eax, eax
mov dword [ebp - 0x430], eax
mov ecx, dword [esi + 0x26c]
bswap eax
mov dword [ebp - 0x46c], eax
mov eax, dword [ecx + 8]
cmp eax, 0xffffffff
jne 0x43d693
mov eax, dword [ecx + 0xc]
cmp eax, 0xffffffff
je 0x43d870
push eax
push 4
lea eax, [ebp - 0x46c]
push eax
call fcn.00484bb0
test eax, eax
je 0x43d870
test edi, edi
jne 0x43d6b9
cmp byte [ebp - 0x42a], 0x72
jne 0x43d6e0
jmp 0x43d6c6
cmp byte [ebp - 0x42a], 0x72
jne 0x43da42
mov eax, dword [esi + 0x26c]
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x43d6d8
mov eax, dword [ecx]
call dword [eax + 0x18]
test edi, edi
jne 0x43da42
cmp dword [ebp - 0x434], 0
mov edx, dword [ebp - 0x418]
jne 0x43d8cc
test edx, edx
jne 0x43d807
mov edi, dword [ebp - 0x414]
cmp edi, 0x17
jb 0x43d73f
cmp edi, 0x10
mov dword [ebp - 0x418], 0x17
push 0x17
lea esi, [ebp - 0x428]
cmovae esi, dword [ebp - 0x428]
push str.authentication_rejected
push esi
call fcn.0051b5b0
mov byte [esi + 0x17], 0
add esp, 0xc
mov esi, dword [ebp - 0x44c]
jmp 0x43d801
mov eax, edi
mov ecx, accept
shr eax, 1
sub ecx, eax
cmp edi, ecx
jbe 0x43d755
mov ecx, accept
jmp 0x43d762
add eax, edi
mov ecx, 0x1f
cmp eax, 0x1f
cmova ecx, eax
lea eax, [ecx + 1]
mov dword [ebp - 0x434], ecx
push eax
call fcn.0041c440
mov ecx, dword [ebp - 0x434]
mov edx, eax
mov dword [ebp - 0x414], ecx
mov dword [ebp - 0x418], 0x17
mov dword [ebp - 0x458], edx
movups xmm0, xmmword [str.authentication_rejected]
movups xmmword [edx], xmm0
mov ecx, dword [0x59d128]
mov dword [edx + 0x10], ecx
mov cx, word [0x59d12c]
mov word [edx + 0x14], cx
mov al, byte [0x59d12e]
mov byte [edx + 0x16], al
mov byte [edx + 0x17], 0
cmp edi, 0x10
jb 0x43d7fb
mov ecx, dword [ebp - 0x428]
inc edi
mov eax, ecx
cmp edi, 0x1000
jb 0x43d7e3
mov ecx, dword [ecx - 4]
add edi, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43db13
push edi
push ecx
call fcn.0051949c
mov eax, dword [ebp - 0x458]
add esp, 8
mov dword [ebp - 0x428], eax
jmp 0x43d801
mov dword [ebp - 0x428], edx
mov edx, dword [ebp - 0x418]
mov ecx, edx
mov eax, edx
shl ecx, 0x10
and eax, 0xff00
or ecx, eax
shr edx, 8
movzx eax, byte [ebp - 0x415]
and edx, 0xff00
shl ecx, 8
or ecx, edx
or ecx, eax
lea eax, [ebp - 0x454]
push 4
mov dword [ebp - 0x454], ecx
mov ecx, dword [esi + 0x26c]
push eax
call fcn.00484b80
test eax, eax
je 0x43d870
cmp dword [ebp - 0x414], 0x10
lea eax, [ebp - 0x428]
push dword [ebp - 0x418]
cmovae eax, dword [ebp - 0x428]
mov ecx, dword [esi + 0x26c]
push eax
call fcn.00484aa0
xor esi, esi
mov edx, dword [ebp - 0x414]
cmp edx, 0x10
jb 0x43d8ac
mov ecx, dword [ebp - 0x428]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43d8a2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43db09
push edx
push ecx
call fcn.0051949c
add esp, 8
mov dword [ebp - 0x418], 0
mov dword [ebp - 0x414], 0xf
mov byte [ebp - 0x428], 0
jmp 0x43d28c
test edx, edx
jne 0x43d9e9
mov edi, dword [ebp - 0x414]
cmp edi, 0x27
jb 0x43d918
cmp edi, 0x10
mov dword [ebp - 0x418], 0x27
push 0x27
lea esi, [ebp - 0x428]
cmovae esi, dword [ebp - 0x428]
push str.Server_require_a_higher_viewer_version.
push esi
call fcn.0051b5b0
mov byte [esi + 0x27], 0
add esp, 0xc
mov esi, dword [ebp - 0x44c]
jmp 0x43d9e3
mov eax, edi
mov ecx, accept
shr eax, 1
sub ecx, eax
cmp edi, ecx
jbe 0x43d92e
mov ecx, accept
jmp 0x43d93a
add eax, edi
mov ecx, 0x2f
cmp eax, ecx
cmova ecx, eax
lea eax, [ecx + 1]
mov dword [ebp - 0x434], ecx
push eax
call fcn.0041c440
mov dword [ebp - 0x418], 0x27
mov edx, eax
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x414], eax
mov dword [ebp - 0x458], edx
movups xmm0, xmmword [str.Server_require_a_higher_viewer_version.]
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x59d140]
movups xmmword [edx + 0x10], xmm0
mov ecx, dword [0x59d150]
mov dword [edx + 0x20], ecx
mov ax, word [0x59d154]
mov word [edx + 0x24], ax
mov al, byte [0x59d156]
mov byte [edx + 0x26], al
mov byte [edx + 0x27], 0
cmp edi, 0x10
jb 0x43d9dd
mov ecx, dword [ebp - 0x428]
inc edi
mov eax, ecx
cmp edi, 0x1000
jb 0x43d9c5
mov ecx, dword [ecx - 4]
add edi, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43db18
push edi
push ecx
call fcn.0051949c
mov eax, dword [ebp - 0x458]
add esp, 8
mov dword [ebp - 0x428], eax
jmp 0x43d9e3
mov dword [ebp - 0x428], edx
mov edx, dword [ebp - 0x418]
mov ecx, edx
mov eax, edx
shl ecx, 0x10
and eax, 0xff00
or ecx, eax
shr edx, 8
movzx eax, byte [ebp - 0x415]
and edx, 0xff00
shl ecx, 8
or ecx, edx
or ecx, eax
mov dword [ebp - 0x454], ecx
mov ecx, dword [esi + 0x26c]
mov eax, dword [ecx + 8]
cmp eax, 0xffffffff
jne 0x43da2e
mov eax, dword [ecx + 0xc]
cmp eax, 0xffffffff
je 0x43d870
push eax
push 4
lea eax, [ebp - 0x454]
push eax
call fcn.00484bb0
jmp 0x43d846
mov esi, dword [esi + 0x26c]
mov edi, dword [esi + 8]
cmp edi, 0xffffffff
jne 0x43da5c
mov edi, dword [esi + 0xc]
cmp edi, 0xffffffff
je 0x43d870
cmp dword [esi + 0x23a0], 0
je 0x43da94
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push ecx
push dword [esi + 0x23a0]
lea edx, [esi + 0x78]
mov dword [esi + 0x10], eax
mov ecx, edi
call fcn.004850d0
add esp, 8
test al, al
jne 0x43da8a
xor eax, eax
jmp 0x43daa8
mov dword [esi + 0x23a0], 0
mov eax, dword [0x5be08c]
mov eax, dword [eax + 0xd14]
mov dword [esi + 0x23a4], eax
or eax, 0xffffffff
test eax, eax
je 0x43d870
cmp dword [ebp - 0x430], 0xffffffff
jne 0x43dad6
mov ecx, dword [ebp - 0x44c]
push 1
push dword [ebp - 0x454]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x43d870
mov esi, 1
jmp 0x43d872
push ecx
push edx
call fcn.0051949c
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00519459
mov esp, ebp
pop ebp
ret 8
call fcn.0051d748
call fcn.0051d748
call fcn.0051d748
call fcn.0051d748
nop dword [eax]
lodsb al, byte [esi]
rol dword [ebx], cl
call ebx
inc ebx
add byte [edi + 0xe0043d3], bl
aam 0x43
add al, ch
rol dword [ebx], cl
retf