Function at 0x44676a
Capabilities:
Authenticate hmac

Disassembly:
mov eax, 0x5298da
call fcn.004512a8
sub esp, 0x5c4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0xb8], ebx
xor edi, edi
inc edi
mov dword [ebp - 0x108], edi
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x174], 0x14
mov dword [ebp - 0x170], eax
or esi, 0xffffffff
mov dword [ebx + 0x12c], esi
push eax
push edi
push 2
call dword [0x52f6e0]
mov dword [ebx + 0x12c], eax
cmp eax, esi
jne 0x4467de
mov dword [ebp - 0xe0], 0x6a
push 0x58a84c
lea eax, [ebp - 0xe0]
push eax
call fcn.00450cd9
cmp word [ebp + 0xc], 0
je 0x4467ea
push dword [ebp + 0xc]
jmp 0x4467fd
push 0
push 0x53279c
call dword [0x52f6dc]
test eax, eax
jne 0x446808
push 0x19
call dword [0x52f6e4]
movzx eax, ax
jmp 0x44680c
movzx eax, word [eax + 8]
push 2
pop ecx
mov word [ebp - 0x184], cx
mov word [ebp - 0x182], ax
push dword [ebp + 8]
call dword [0x52f6f8]
mov dword [ebp - 0x180], eax
cmp eax, esi
jne 0x446856
push dword [ebp + 8]
call dword [0x52f6fc]
test eax, eax
je 0x446898
movsx ecx, word [eax + 0xa]
push ecx
mov eax, dword [eax + 0xc]
push dword [eax]
lea eax, [ebp - 0x180]
push eax
call fcn.004513b0
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push 0x8004667e
push dword [ebx + 0x12c]
call dword [0x52f700]
cmp eax, esi
jne 0x4468be
push dword [ebx + 0x12c]
call dword [0x52f724]
mov dword [ebp - 0x104], 0x6c
push 0x58a84c
lea eax, [ebp - 0x104]
jmp 0x4467d8
push dword [ebx + 0x12c]
call dword [0x52f724]
mov dword [ebp - 0x100], 0x69
push 0x58a84c
lea eax, [ebp - 0x100]
jmp 0x4467d8
push 0x10
lea eax, [ebp - 0x184]
push eax
push dword [ebx + 0x12c]
call dword [0x52f704]
cmp eax, esi
jne 0x447aa3
call dword [0x52f708]
cmp eax, 0x2733
je 0x44690e
push dword [ebx + 0x12c]
call dword [0x52f724]
mov dword [ebp - 0x10c], 0x68
push 0x58a84c
lea eax, [ebp - 0x10c]
jmp 0x4467d8
xor ecx, ecx
mov dword [ebp - 0x550], ecx
xor edx, edx
mov dword [ebp - 0x44c], edx
xor eax, eax
mov dword [ebp - 0xe4], eax
cmp eax, ecx
jae 0x44693e
mov esi, dword [ebp + eax*4 - 0x54c]
cmp esi, dword [ebx + 0x12c]
je 0x44693c
inc eax
jmp 0x446920
cmp eax, ecx
jne 0x446958
cmp ecx, 0x40
jae 0x446958
mov ecx, dword [ebx + 0x12c]
mov dword [ebp + eax*4 - 0x54c], ecx
inc dword [ebp - 0x550]
xor eax, eax
mov dword [ebp - 0xec], eax
cmp eax, edx
jae 0x446978
mov ecx, dword [ebp + eax*4 - 0x448]
cmp ecx, dword [ebx + 0x12c]
je 0x446976
inc eax
jmp 0x44695a
cmp eax, edx
jne 0x446992
cmp edx, 0x40
jae 0x446992
mov ecx, dword [ebx + 0x12c]
mov dword [ebp + eax*4 - 0x448], ecx
inc dword [ebp - 0x44c]
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x44c]
push eax
lea eax, [ebp - 0x550]
push eax
push 0
mov eax, dword [ebx + 0x12c]
inc eax
push eax
call dword [0x52f714]
cmp eax, 0xffffffff
jne 0x4469e2
push dword [ebx + 0x12c]
call dword [0x52f724]
mov dword [ebp - 0xc4], 0x6d
push 0x58a84c
lea eax, [ebp - 0xc4]
jmp 0x4467d8
test eax, eax
jne 0x446a0c
push dword [ebx + 0x12c]
call dword [0x52f724]
mov dword [ebp - 0xc8], 0x193
push 0x58a84c
lea eax, [ebp - 0xc8]
jmp 0x4467d8
lea eax, [ebp - 0x550]
push eax
push dword [ebx + 0x12c]
call fcn.00470c40
test eax, eax
je 0x447aea
xor eax, eax
mov dword [ebp - 0x68], eax
cmp eax, dword [ebp - 0x550]
jae 0x446a67
mov ecx, dword [ebp + eax*4 - 0x54c]
cmp ecx, dword [ebx + 0x12c]
jne 0x446aa6
mov ecx, dword [ebp - 0x550]
dec ecx
cmp eax, ecx
jae 0x446a61
mov ecx, dword [ebp + eax*4 - 0x548]
mov dword [ebp + eax*4 - 0x54c], ecx
inc eax
mov dword [ebp - 0x68], eax
jmp 0x446a42
dec dword [ebp - 0x550]
xor eax, eax
mov dword [ebp - 0x64], eax
cmp eax, dword [ebp - 0x44c]
jae 0x446ab2
mov ecx, dword [ebp + eax*4 - 0x448]
cmp ecx, dword [ebx + 0x12c]
jne 0x446b43
mov ecx, dword [ebp - 0x44c]
dec ecx
cmp eax, ecx
jae 0x446aac
mov ecx, dword [ebp + eax*4 - 0x444]
mov dword [ebp + eax*4 - 0x448], ecx
inc eax
mov dword [ebp - 0x64], eax
jmp 0x446a87
inc eax
jmp 0x446a28
dec dword [ebp - 0x44c]
mov eax, dword [ebx + 0x1b0]
cmp eax, edi
je 0x446ac1
cmp eax, 2
jne 0x446ad8
mov ecx, ebx
call fcn.00443fdc
cmp dword [ebx + 0x1b0], 2
jne 0x446ad8
mov ecx, ebx
call fcn.0044401b
push 0
call fcn.00443b4b
pop ecx
push eax
mov ecx, ebx
call fcn.00445e5a
mov ecx, ebx
call fcn.00446373
cmp dword [ebx + 0x1b0], edi
jne 0x446b05
mov ecx, ebx
call fcn.0044640a
mov ecx, ebx
call fcn.00446373
push 0x532794
push dword [ebx + 0x128]
call fcn.00443b7c
pop ecx
pop ecx
cmp al, 1
jne 0x447a9f
xor esi, esi
cmp dword [ebx + 0xdc], esi
jne 0x446b49
mov dword [ebp - 0xf0], 0xcc
push 0x58a84c
lea eax, [ebp - 0xf0]
jmp 0x4467d8
inc eax
jmp 0x446a69
cmp dword [ebx + 0xf8], esi
jne 0x446b6b
mov dword [ebp - 0xd0], 0xcd
push 0x58a84c
lea eax, [ebp - 0xd0]
jmp 0x4467d8
push 0x53278c
push dword [ebx + 0x128]
call fcn.00443b7c
pop ecx
pop ecx
cmp al, 1
jne 0x446cb6
push 3
call fcn.00443b4b
mov dword [ebp + 0xc], eax
mov dword [esp], 0x53277c
push dword [ebx + 0x124]
call fcn.00456470
pop ecx
pop ecx
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.00444678
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.00445e5a
mov ecx, dword [ebx + 0xdc]
lea eax, [ebx + 0xc8]
cmp dword [eax + 0x18], 0x10
jb 0x446bce
mov eax, dword [eax + 4]
jmp 0x446bd1
add eax, 4
push ecx
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.00443825
mov byte [ebp - 4], 1
push 7
call fcn.00443b4b
add esp, 0x10
mov dword [ebp + 0xc], eax
cmp dword [ebp - 0x98], 0x10
mov eax, dword [ebp - 0xac]
jae 0x446c05
lea eax, [ebp - 0xac]
push eax
push 0x532774
push dword [ebx + 0x124]
call fcn.00453d76
add esp, 0xc
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.00444678
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.00445e5a
mov ecx, dword [ebx + 0xf8]
lea eax, [ebx + 0xe4]
cmp dword [eax + 0x18], 0x10
jb 0x446c44
mov eax, dword [eax + 4]
jmp 0x446c47
add eax, 4
push ecx
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00443825
mov byte [ebp - 4], 2
push 8
call fcn.00443b4b
add esp, 0x10
mov dword [ebp + 0xc], eax
cmp dword [ebp - 0x48], 0x10
mov eax, dword [ebp - 0x5c]
jae 0x446c6f
lea eax, [ebp - 0x5c]
push eax
push 0x532774
push dword [ebx + 0x124]
call fcn.00453d76
add esp, 0xc
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.00444678
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.00445e5a
mov byte [ebp - 4], 1
push esi
push edi
lea ecx, [ebp - 0x60]
call fcn.00433351
mov byte [ebp - 4], 0
push esi
push edi
lea ecx, [ebp - 0xb0]
jmp 0x447a9a
push str.COMSPEC
push dword [ebx + 0x128]
call fcn.00443b7c
pop ecx
pop ecx
cmp al, 1
jne 0x446dad
push 2
call fcn.00443b4b
pop ecx
mov dword [ebp + 0xc], eax
lea eax, [ebx + 0xe4]
cmp dword [eax + 0x18], 0x10
jb 0x446cec
mov eax, dword [eax + 4]
jmp 0x446cef
add eax, 4
lea ecx, [ebx + 0xc8]
cmp dword [ecx + 0x18], 0x10
jb 0x446d00
mov ecx, dword [ecx + 4]
jmp 0x446d03
add ecx, 4
push eax
push ecx
push 0x532764
push dword [ebx + 0x124]
call fcn.00453d76
add esp, 0x10
mov dword [ebp - 0xf4], esi
push dword [ebx + 0x124]
call fcn.00452130
pop ecx
cmp esi, eax
jae 0x446d41
mov eax, dword [ebx + 0x124]
add eax, esi
cmp byte [eax], 0x5e
jne 0x446d3e
mov byte [eax], 0
inc esi
jmp 0x446d18
push dword [ebx + 0x124]
call fcn.00443c35
mov esi, eax
push dword [ebx + 0x124]
call fcn.00452130
push eax
push esi
lea eax, [ebp - 0x60]
push eax
call fcn.00443825
mov byte [ebp - 4], 3
push esi
call fcn.00450d90
push ecx
push 7
pop ecx
lea esi, [ebp - 0x60]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
push 0x532754
push dword [ebx + 0x124]
call fcn.00453d76
add esp, 0x24
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.00444678
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.00445e5a
mov byte [ebp - 4], 0
push 0
push 1
jmp 0x447a97
push 0x532748
push dword [ebx + 0x128]
call fcn.00443b7c
pop ecx
pop ecx
cmp al, 1
jne 0x44711d
push 4
call fcn.00443b4b
mov dword [ebp + 0xc], eax
mov dword [esp], 0x532738
push dword [ebx + 0x124]
call fcn.00456470
pop ecx
pop ecx
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.00444678
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.00445e5a
push dword [ebx + 0x128]
lea ecx, [ebp - 0x94]
call fcn.00433972
mov byte [ebp - 4], 4
push 0xffffffffffffffff
push 4
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x94]
call fcn.0044529e
mov byte [ebp - 4], 5
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x94]
call fcn.00433666
mov byte [ebp - 4], 4
push esi
push edi
lea ecx, [ebp - 0x60]
call fcn.00433351
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00443985
pop ecx
pop ecx
mov byte [ebp - 4], 6
cmp dword [ebp - 0x2c], 0x10
mov eax, dword [ebp - 0x40]
jae 0x446e64
lea eax, [ebp - 0x40]
push eax
call fcn.00443c35
pop ecx
mov dword [ebp - 0x14], eax
lea eax, [ebx + 0xe4]
cmp dword [eax + 0x18], 0x10
jb 0x446e7f
mov eax, dword [eax + 4]
jmp 0x446e82
add eax, 4
push eax
call fcn.00443c35
pop ecx
mov dword [ebp + 0xc], eax
cmp dword [ebp - 0x14], esi
je 0x447103
cmp eax, esi
je 0x447103
mov eax, dword [ebx + 0xf8]
mov dword [ebp + 8], eax
cmp eax, 0x40
jle 0x446ee7
lea ecx, [ebp - 0x5bc]
call fcn.00432b85
push dword [ebp + 8]
push dword [ebp + 0xc]
lea ecx, [ebp - 0x5bc]
call fcn.00433ec0
lea ecx, [ebp - 0x5bc]
call fcn.00433f82
lea ecx, [ebp - 0x5bc]
call fcn.00434003
mov dword [ebp + 0xc], eax
mov dword [ebp + 8], 0x10
push 0x40
push esi
lea eax, [ebp - 0x2b4]
push eax
call fcn.00451330
push 0x40
push esi
lea eax, [ebp - 0x1dc]
push eax
call fcn.00451330
push dword [ebp + 8]
push dword [ebp + 0xc]
lea eax, [ebp - 0x2b4]
push eax
call fcn.004513b0
push dword [ebp + 8]
push dword [ebp + 0xc]
lea eax, [ebp - 0x1dc]
push eax
call fcn.004513b0
add esp, 0x30
xor ecx, ecx
mov dword [ebp - 0xd8], ecx
cmp ecx, 0x40
jge 0x446f5a
lea eax, [ebp + ecx - 0x2b4]
movzx edx, byte [eax]
xor edx, 0x36
mov byte [eax], dl
lea eax, [ebp + ecx - 0x1dc]
movzx edx, byte [eax]
xor edx, 0x5c
mov byte [eax], dl
inc ecx
jmp 0x446f2e
lea ecx, [ebp - 0x270]
call fcn.00432b85
push 0x40
lea eax, [ebp - 0x2b4]
push eax
lea ecx, [ebp - 0x270]
call fcn.00433ec0
push dword [ebp - 0x30]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x270]
call fcn.00433ec0
lea ecx, [ebp - 0x270]
call fcn.00433f82
lea ecx, [ebp - 0x270]
call fcn.00434003
mov dword [ebp + 8], eax
lea ecx, [ebp - 0x348]
call fcn.00432b85
push 0x40
lea eax, [ebp - 0x1dc]
push eax
lea ecx, [ebp - 0x348]
call fcn.00433ec0
push 0x10
push dword [ebp + 8]
lea ecx, [ebp - 0x348]
call fcn.00433ec0
lea ecx, [ebp - 0x348]
call fcn.00433f82
lea ecx, [ebp - 0x348]
call fcn.00434054
push eax
lea ecx, [ebp - 0x44]
call fcn.00433793
push dword [ebp - 0x14]
call fcn.00450d90
push dword [ebp + 0xc]
call fcn.00450d90
push dword [ebp + 8]
call fcn.00450d90
push 0x531740
lea eax, [ebx + 0xc8]
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.00446136
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x44]
push ecx
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.0044543f
add esp, 0x24
mov byte [ebp - 4], 8
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x44]
call fcn.00433666
mov byte [ebp - 4], 7
push esi
push edi
lea ecx, [ebp - 0x60]
call fcn.00433351
mov byte [ebp - 4], 6
push esi
push edi
lea ecx, [ebp - 0xb0]
call fcn.00433351
cmp dword [ebp - 0x2c], 0x10
mov eax, dword [ebp - 0x40]
jae 0x447071
lea eax, [ebp - 0x40]
push dword [ebp - 0x30]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00443825
add esp, 0xc
mov byte [ebp - 4], 9
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x94]
call fcn.00433666
mov byte [ebp - 4], 6
push esi
push edi
lea ecx, [ebp - 0x60]
call fcn.00433351
cmp dword [ebp - 0x7c], 0x10
mov eax, dword [ebp - 0x90]
jae 0x4470b4
lea eax, [ebp - 0x90]
push eax
push 0x532774
push dword [ebx + 0x124]
call fcn.00453d76
push 8
call fcn.00443b4b
add esp, 0x10
mov dword [ebp + 0xc], eax
push eax
mov ecx, ebx
call fcn.00444678
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.00445e5a
mov byte [ebp - 4], 4
push esi
push edi
lea ecx, [ebp - 0x44]
call fcn.00433351
mov byte [ebp - 4], 0
push esi
push edi
lea ecx, [ebp - 0x94]
jmp 0x447a9a
mov dword [ebp - 0xf8], 0xce
push 0x58a84c
lea eax, [ebp - 0xf8]
jmp 0x4467d8
push str.__alt______p_
push dword [ebx + 0x128]
call fcn.00443b7c
pop ecx
pop ecx
cmp al, 1
jne 0x447ad0
push 6
call fcn.00443b4b
mov dword [ebp + 0xc], eax
mov dword [esp], 0x532718
push dword [ebx + 0x124]
call fcn.00456470
pop ecx
pop ecx
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.00444678
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.00445e5a
push dword [ebx + 0x128]
lea ecx, [ebp - 0x60]
call fcn.00433972
mov byte [ebp - 4], 0xa
push 0xffffffffffffffff
push 4
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044529e
mov byte [ebp - 4], 0xb
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x60]
call fcn.00433666
mov byte [ebp - 4], 0xa
push esi
push edi
lea ecx, [ebp - 0x150]
call fcn.00433351
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.00443985
pop ecx
pop ecx
mov byte [ebp - 4], 0xc
push esi
push 0x532710
lea ecx, [ebp - 0x94]
call fcn.0044499d
cmp eax, esi
jge 0x4471f4
mov dword [ebp - 0xb4], 0xcf
push 0x58a84c
lea eax, [ebp - 0xb4]
jmp 0x4467d8
push 0xffffffffffffffff
add eax, 7
push eax
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x94]
call fcn.0044529e
mov byte [ebp - 4], 0xd
push esi
push 0x53270c
lea ecx, [ebp - 0x128]
call fcn.0044499d
cmp eax, esi
jge 0x44723f
mov dword [ebp - 0xfc], 0xcf
push 0x58a84c
lea eax, [ebp - 0xfc]
jmp 0x4467d8
push eax
push esi
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x128]
call fcn.0044529e
mov byte [ebp - 4], 0xe
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x128]
call fcn.00433666
mov byte [ebp - 4], 0xd
push esi
push edi
lea ecx, [ebp - 0x150]
call fcn.00433351
lea ecx, [ebp - 0x44]
call fcn.00433499
mov byte [ebp - 4], 0xf
push esi
push 0x532704
lea ecx, [ebp - 0x94]
call fcn.0044499d
cmp eax, esi
jl 0x447333
push 0xffffffffffffffff
add eax, 7
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x94]
call fcn.0044529e
mov byte [ebp - 4], 0x10
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x44]
call fcn.00433666
mov byte [ebp - 4], 0xf
push esi
push edi
lea ecx, [ebp - 0x150]
call fcn.00433351
push esi
push 0x53270c
lea ecx, [ebp - 0x44]
call fcn.0044499d
cmp eax, esi
jge 0x447301
mov dword [ebp - 0xe8], 0xcf
push 0x58a84c
lea eax, [ebp - 0xe8]
jmp 0x4467d8
push eax
push esi
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x44]
call fcn.0044529e
mov byte [ebp - 4], 0x11
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x44]
call fcn.00433666
mov byte [ebp - 4], 0xf
push esi
push edi
lea ecx, [ebp - 0x150]
call fcn.00433351
push esi
call fcn.00452f16
push edx
push eax
push 0x532700
lea eax, [ebp - 0x198]
push eax
call fcn.00453d76
push edi
push 0x5326f8
lea eax, [ebp - 0x134]
push eax
call fcn.00453d76
add esp, 0x20
push str._Y__m__d__H__M__S.jpg
lea ecx, [ebp - 0xb0]
call fcn.00433972
mov byte [ebp - 4], 0x12
mov dword [ebp - 0xc0], 0x80
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x5d0]
push eax
push dword [ebx + 0x12c]
call dword [0x52f70c]
test eax, eax
jne 0x4473b7
mov dword [ebp - 0xbc], 0xd0
push 0x58a84c
lea eax, [ebp - 0xbc]
jmp 0x4467d8
push dword [ebp - 0x5cc]
call dword [0x52f6f4]
push eax
lea ecx, [ebp - 0x16c]
call fcn.00433972
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x16c]
push eax
push 0x5326e8
lea eax, [ebp - 0x150]
push eax
call fcn.0044549b
add esp, 0xc
mov byte [ebp - 4], 0x14
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x16c]
call fcn.00433666
mov byte [ebp - 4], 0x13
push esi
push edi
lea ecx, [ebp - 0x150]
call fcn.00433351
cmp dword [ebp - 0x2c], 0x10
mov eax, dword [ebp - 0x40]
jae 0x44741e
lea eax, [ebp - 0x40]
push eax
call fcn.00443c35
pop ecx
mov dword [ebp - 0x24], eax
cmp dword [ebx + 0xe0], 0x10
jb 0x447439
mov eax, dword [ebx + 0xcc]
jmp 0x44743f
lea eax, [ebx + 0xcc]
push eax
call fcn.00443c35
pop ecx
mov dword [ebp - 0x28], eax
lea eax, [ebx + 0xe4]
cmp dword [eax + 0x18], 0x10
jb 0x44745a
mov eax, dword [eax + 4]
jmp 0x44745d
add eax, 4
push eax
call fcn.00443c35
pop ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x110], 0x10
mov eax, dword [ebp - 0x124]
jae 0x44747c
lea eax, [ebp - 0x124]
push eax
call fcn.00443c35
mov dword [ebp + 8], eax
lea eax, [ebp - 0x198]
push eax
call fcn.00443c35
pop ecx
pop ecx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x154], 0x10
mov eax, dword [ebp - 0x168]
jae 0x4474ab
lea eax, [ebp - 0x168]
push eax
call fcn.00443c35
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x134]
push eax
call fcn.00443c35
pop ecx
pop ecx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x98], 0x10
mov eax, dword [ebp - 0xac]
jae 0x4474da
lea eax, [ebp - 0xac]
push eax
call fcn.00443c35
pop ecx
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x24], esi
je 0x447ab6
cmp dword [ebp - 0x28], esi
je 0x447ab6
cmp dword [ebp - 0x18], esi
je 0x447ab6
cmp dword [ebp + 8], esi
je 0x447ab6
cmp dword [ebp - 0x14], esi
je 0x447ab6
cmp dword [ebp - 0x1c], esi
je 0x447ab6
cmp dword [ebp - 0x20], esi
je 0x447ab6
cmp eax, esi
je 0x447ab6
lea ecx, [ebp - 0x2dc]
call fcn.00432b85
push dword [ebx + 0xdc]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x2dc]
call fcn.00433ec0
push edi
mov esi, 0x5326e4
push esi
lea ecx, [ebp - 0x2dc]
call fcn.00433ec0
push dword [ebp - 0x30]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2dc]
call fcn.00433ec0
push edi
push esi
lea ecx, [ebp - 0x2dc]
call fcn.00433ec0
push dword [ebx + 0xf8]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x2dc]
call fcn.00433ec0
lea ecx, [ebp - 0x2dc]
call fcn.00433f82
lea ecx, [ebp - 0x2dc]
call fcn.00434003
mov dword [ebp + 0xc], eax
lea ecx, [ebp - 0x270]
call fcn.00432b85
push 0x10
push dword [ebp + 0xc]
lea ecx, [ebp - 0x270]
call fcn.00433ec0
push edi
push esi
lea ecx, [ebp - 0x270]
call fcn.00433ec0
push dword [ebp - 0x114]
push dword [ebp + 8]
lea ecx, [ebp - 0x270]
call fcn.00433ec0
push edi
push esi
lea ecx, [ebp - 0x270]
call fcn.00433ec0
lea eax, [ebp - 0x198]
push eax
call fcn.00452130
pop ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x270]
call fcn.00433ec0
lea ecx, [ebp - 0x270]
call fcn.00433f82
lea ecx, [ebp - 0x270]
call fcn.00434054
mov dword [ebp - 0x78], eax
lea ecx, [ebp - 0x348]
call fcn.00432b85
push 0xd
push 0x5326d4
lea ecx, [ebp - 0x348]
call fcn.00433ec0
push dword [ebp - 0x158]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x348]
call fcn.00433ec0
lea ecx, [ebp - 0x348]
call fcn.00433f82
lea ecx, [ebp - 0x348]
call fcn.00434054
mov dword [ebp - 0x74], eax
push dword [ebp + 0xc]
call fcn.00450d90
push dword [ebp - 0x78]
call fcn.00443c35
mov dword [ebp + 0xc], eax
push dword [ebp - 0x74]
call fcn.00443c35
add esp, 0xc
mov dword [ebp - 0x6c], eax
lea ecx, [ebp - 0x204]
call fcn.00432b85
push 0x20
push dword [ebp + 0xc]
lea ecx, [ebp - 0x204]
call fcn.00433ec0
push edi
push esi
lea ecx, [ebp - 0x204]
call fcn.00433ec0
push dword [ebp - 0x114]
push dword [ebp + 8]
lea ecx, [ebp - 0x204]
call fcn.00433ec0
push edi
push esi
lea ecx, [ebp - 0x204]
call fcn.00433ec0
lea eax, [ebp - 0x134]
push eax
call fcn.00452130
pop ecx
push eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x204]
call fcn.00433ec0
push edi
push esi
lea ecx, [ebp - 0x204]
call fcn.00433ec0
lea eax, [ebp - 0x198]
push eax
call fcn.00452130
pop ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x204]
call fcn.00433ec0
push edi
push esi
lea ecx, [ebp - 0x204]
call fcn.00433ec0
push dword [ebp - 0x9c]
push dword [ebp - 0x70]
lea ecx, [ebp - 0x204]
call fcn.00433ec0
push edi
push esi
lea ecx, [ebp - 0x204]
call fcn.00433ec0
push 0x20
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x204]
call fcn.00433ec0
lea ecx, [ebp - 0x204]
call fcn.00433f82
lea ecx, [ebp - 0x204]
call fcn.00434054
push eax
lea ecx, [ebp - 0x94]
call fcn.00433793
push dword [ebp - 0x24]
call fcn.00450d90
push dword [ebp - 0x28]
call fcn.00450d90
push dword [ebp - 0x18]
call fcn.00450d90
push dword [ebp + 8]
call fcn.00450d90
push dword [ebp - 0x14]
call fcn.00450d90
push dword [ebp - 0x1c]
call fcn.00450d90
push dword [ebp - 0x20]
call fcn.00450d90
push dword [ebp - 0x70]
call fcn.00450d90
push dword [ebp + 0xc]
call fcn.00450d90
push dword [ebp - 0x6c]
call fcn.00450d90
push dword [ebp - 0x78]
call fcn.00450d90
push dword [ebp - 0x74]
call fcn.00450d90
mov eax, dword [ebx + 0x128]
push 0x5326cc
push eax
call fcn.00456290
add esp, 0x38
cmp dword [ebx + 0xe0], 0x10
jb 0x447803
mov eax, dword [ebx + 0xcc]
jmp 0x447809
lea eax, [ebx + 0xcc]
push eax
push 0x5326b0
push dword [ebx + 0x124]
call fcn.00453d76
add esp, 0xc
cmp dword [ebp - 0x30], 0
je 0x447854
cmp dword [ebp - 0x2c], 0x10
mov eax, dword [ebp - 0x40]
jae 0x44782f
lea eax, [ebp - 0x40]
push eax
push 0x5326a4
push dword [ebx + 0x128]
call fcn.00453d76
push dword [ebx + 0x128]
push dword [ebx + 0x124]
call fcn.00456480
add esp, 0x14
push 0x10
pop esi
cmp dword [ebp - 0x110], esi
mov eax, dword [ebp - 0x124]
jae 0x44786b
lea eax, [ebp - 0x124]
push eax
push 0x532698
push dword [ebx + 0x128]
call fcn.00453d76
push dword [ebx + 0x128]
push dword [ebx + 0x124]
call fcn.00456480
lea eax, [ebp - 0x134]
push eax
push 0x532690
push dword [ebx + 0x128]
call fcn.00453d76
push dword [ebx + 0x128]
push dword [ebx + 0x124]
call fcn.00456480
lea eax, [ebp - 0x198]
push eax
push 0x532680
push dword [ebx + 0x128]
call fcn.00453d76
push dword [ebx + 0x128]
push dword [ebx + 0x124]
call fcn.00456480
add esp, 0x3c
cmp dword [ebp - 0x154], esi
mov eax, dword [ebp - 0x168]
jae 0x4478f4
lea eax, [ebp - 0x168]
push eax
push 0x53266c
push dword [ebx + 0x128]
call fcn.00453d76
push dword [ebx + 0x128]
push dword [ebx + 0x124]
call fcn.00456480
add esp, 0x14
cmp dword [ebp - 0x7c], esi
mov eax, dword [ebp - 0x90]
jae 0x44792a
lea eax, [ebp - 0x90]
push eax
push 0x53265c
push dword [ebx + 0x128]
call fcn.00453d76
push dword [ebx + 0x128]
push dword [ebx + 0x124]
call fcn.00456480
add esp, 0x14
cmp dword [ebp - 0x98], esi
mov eax, dword [ebp - 0xac]
jae 0x447963
lea eax, [ebp - 0xac]
push eax
push 0x532654
push dword [ebx + 0x128]
call fcn.00453d76
push dword [ebx + 0x128]
push dword [ebx + 0x124]
call fcn.00456480
push dword [ebx + 0x124]
call fcn.00443c35
mov esi, eax
push dword [ebx + 0x124]
call fcn.00452130
push eax
push esi
lea eax, [ebp - 0x150]
push eax
call fcn.00443825
add esp, 0x28
mov byte [ebp - 4], 0x15
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x60]
call fcn.00433666
mov byte [ebp - 4], 0x13
push 0
push edi
lea ecx, [ebp - 0x150]
call fcn.00433351
push esi
call fcn.00450d90
pop ecx
cmp dword [ebp - 0x48], 0x10
mov eax, dword [ebp - 0x5c]
jae 0x4479e4
lea eax, [ebp - 0x5c]
push eax
push 0x532774
push dword [ebx + 0x124]
call fcn.00453d76
push 6
call fcn.00443b4b
add esp, 0x10
mov esi, eax
push esi
mov ecx, ebx
call fcn.00444678
push esi
mov ecx, ebx
call fcn.00445e5a
push 0x531788
push dword [ebx + 0x124]
call fcn.00453d76
push 8
call fcn.00443b4b
add esp, 0xc
mov esi, eax
push esi
mov ecx, ebx
call fcn.00444678
push esi
mov ecx, ebx
call fcn.00445e5a
mov byte [ebp - 4], 0x12
xor esi, esi
push esi
push edi
lea ecx, [ebp - 0x16c]
call fcn.00433351
mov byte [ebp - 4], 0xf
push esi
push edi
lea ecx, [ebp - 0xb0]
call fcn.00433351
mov byte [ebp - 4], 0xd
push esi
push edi
lea ecx, [ebp - 0x44]
call fcn.00433351
mov byte [ebp - 4], 0xc
push esi
push edi
lea ecx, [ebp - 0x128]
call fcn.00433351
mov byte [ebp - 4], 0xa
push esi
push edi
lea ecx, [ebp - 0x94]
call fcn.00433351
mov byte [ebp - 4], 0
push esi
push edi
lea ecx, [ebp - 0x60]
call fcn.00433351
or dword [ebp - 4], 0xffffffff
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret 8
mov dword [ebp - 0xcc], 0xce
push 0x58a84c
lea eax, [ebp - 0xcc]
jmp 0x4467d8
mov dword [ebp - 0xd4], 0x1a1
push 0x58a84c
lea eax, [ebp - 0xd4]
jmp 0x4467d8
lea eax, [ebp - 0x44c]
push eax
push dword [ebx + 0x12c]
call fcn.00470c40
test eax, eax
je 0x44690e
push dword [ebx + 0x12c]
call dword [0x52f724]
mov dword [ebp - 0xdc], 0x6d
push 0x58a84c
lea eax, [ebp - 0xdc]
jmp 0x4467d8