Function at 0x6d23a0
Capabilities:
Authenticate hmac

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x34c
call fcn.006f5ae0
mov eax, dword [0x7db1e8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov dword [ebp - 0x2b4], 0x40
mov dword [ebp - 0x2f8], 0x28
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2bc], 8
mov byte [ebp - 0x2c9], 1
mov dword [ebp - 0x2fc], 0
cmp dword [ebp + 0x20], 0x100000
jae 0x6d2406
mov dword [ebp - 0x31c], 1
jmp 0x6d2410
mov dword [ebp - 0x31c], 0
cmp dword [ebp - 0x31c], 0
je 0x6d2425
mov dword [ebp - 0x328], 1
jmp 0x6d242f
mov dword [ebp - 0x328], 0
push 0xc7
push str.ssl_s3_cbc.c
push str.Assertion_failed:_data_plus_mac_plus_padding_size___1024__1024
mov eax, dword [ebp - 0x328]
push eax
call fcn.0056cb20
add esp, 0x10
test eax, eax
jne 0x6d2458
xor eax, eax
jmp 0x6d3134
push 0x75620c
mov ecx, dword [ebp + 8]
push ecx
call fcn.0056bda0
add esp, 8
test eax, eax
je 0x6d24bb
lea edx, [ebp - 0x2ac]
push edx
call fcn.0067a190
add esp, 4
test eax, eax
jg 0x6d2487
xor eax, eax
jmp 0x6d3134
mov dword [ebp - 0x2e8], 0x6d3150
mov dword [ebp - 0x2c8], 0x67a1e0
mov dword [ebp - 0x2d0], 0x10
mov dword [ebp - 0x2f8], 0x30
mov byte [ebp - 0x2c9], 0
jmp 0x6d26a7
push str.SHA1
mov eax, dword [ebp + 8]
push eax
call fcn.0056bda0
add esp, 8
test eax, eax
je 0x6d250d
lea ecx, [ebp - 0x2ac]
push ecx
call fcn.00610af0
add esp, 4
test eax, eax
jg 0x6d24ea
xor eax, eax
jmp 0x6d3134
mov dword [ebp - 0x2e8], 0x6d32d0
mov dword [ebp - 0x2c8], 0x610b40
mov dword [ebp - 0x2d0], 0x14
jmp 0x6d26a7
push str.SHA2_224
mov edx, dword [ebp + 8]
push edx
call fcn.0056bda0
add esp, 8
test eax, eax
je 0x6d255f
lea eax, [ebp - 0x2ac]
push eax
call fcn.0062e290
add esp, 4
test eax, eax
jg 0x6d253c
xor eax, eax
jmp 0x6d3134
mov dword [ebp - 0x2e8], 0x6d3520
mov dword [ebp - 0x2c8], 0x62e7d0
mov dword [ebp - 0x2d0], 0x1c
jmp 0x6d26a7
push str.SHA2_256
mov ecx, dword [ebp + 8]
push ecx
call fcn.0056bda0
add esp, 8
test eax, eax
je 0x6d25b1
lea edx, [ebp - 0x2ac]
push edx
call fcn.0062e710
add esp, 4
test eax, eax
jg 0x6d258e
xor eax, eax
jmp 0x6d3134
mov dword [ebp - 0x2e8], 0x6d3520
mov dword [ebp - 0x2c8], 0x62e7d0
mov dword [ebp - 0x2d0], 0x20
jmp 0x6d26a7
push str.SHA2_384
mov eax, dword [ebp + 8]
push eax
call fcn.0056bda0
add esp, 8
test eax, eax
je 0x6d2617
lea ecx, [ebp - 0x2ac]
push ecx
call fcn.0062e9b0
add esp, 4
test eax, eax
jg 0x6d25e0
xor eax, eax
jmp 0x6d3134
mov dword [ebp - 0x2e8], 0x6d35e0
mov dword [ebp - 0x2c8], 0x62f3a0
mov dword [ebp - 0x2d0], 0x30
mov dword [ebp - 0x2b4], 0x80
mov dword [ebp - 0x2bc], 0x10
jmp 0x6d26a7
push str.SHA2_512
mov edx, dword [ebp + 8]
push edx
call fcn.0056bda0
add esp, 8
test eax, eax
je 0x6d267a
lea eax, [ebp - 0x2ac]
push eax
call fcn.0062f280
add esp, 4
test eax, eax
jg 0x6d2646
xor eax, eax
jmp 0x6d3134
mov dword [ebp - 0x2e8], 0x6d35e0
mov dword [ebp - 0x2c8], 0x62f3a0
mov dword [ebp - 0x2d0], 0x40
mov dword [ebp - 0x2b4], 0x80
mov dword [ebp - 0x2bc], 0x10
jmp 0x6d26a7
cmp dword [ebp + 0x10], 0
je 0x6d2689
mov ecx, dword [ebp + 0x10]
mov dword [ecx], 0
push 0x105
push str.ssl_s3_cbc.c
push str.Assertion_failed:_0
push 0
call fcn.0056cb20
add esp, 0x10
jmp 0x6d3134
cmp dword [ebp - 0x2bc], 0x10
ja 0x6d26bc
mov dword [ebp - 0x32c], 1
jmp 0x6d26c6
mov dword [ebp - 0x32c], 0
cmp dword [ebp - 0x32c], 0
je 0x6d26db
mov dword [ebp - 0x330], 1
jmp 0x6d26e5
mov dword [ebp - 0x330], 0
push 0x108
push str.ssl_s3_cbc.c
push str.Assertion_failed:_md_length_size___MAX_HASH_BIT_COUNT_BYTES
mov edx, dword [ebp - 0x330]
push edx
call fcn.0056cb20
add esp, 0x10
test eax, eax
je 0x6d27ce
cmp dword [ebp - 0x2b4], 0x80
ja 0x6d2723
mov dword [ebp - 0x334], 1
jmp 0x6d272d
mov dword [ebp - 0x334], 0
cmp dword [ebp - 0x334], 0
je 0x6d2742
mov dword [ebp - 0x338], 1
jmp 0x6d274c
mov dword [ebp - 0x338], 0
push 0x109
push str.ssl_s3_cbc.c
push str.Assertion_failed:_md_block_size___MAX_HASH_BLOCK_SIZE
mov eax, dword [ebp - 0x338]
push eax
call fcn.0056cb20
add esp, 0x10
test eax, eax
je 0x6d27ce
cmp dword [ebp - 0x2d0], 0x40
ja 0x6d2783
mov dword [ebp - 0x304], 1
jmp 0x6d278d
mov dword [ebp - 0x304], 0
cmp dword [ebp - 0x304], 0
je 0x6d27a2
mov dword [ebp - 0x308], 1
jmp 0x6d27ac
mov dword [ebp - 0x308], 0
push 0x10a
push str.ssl_s3_cbc.c
push str.Assertion_failed:_md_size___EVP_MAX_MD_SIZE
mov ecx, dword [ebp - 0x308]
push ecx
call fcn.0056cb20
add esp, 0x10
test eax, eax
jne 0x6d27d5
xor eax, eax
jmp 0x6d3134
mov dword [ebp - 0x2e0], 0xd
movsx edx, byte [ebp + 0x2c]
test edx, edx
je 0x6d27fa
mov eax, dword [ebp - 0x2f8]
mov ecx, dword [ebp + 0x28]
lea edx, [ecx + eax + 0xb]
mov dword [ebp - 0x2e0], edx
movsx eax, byte [ebp + 0x2c]
test eax, eax
je 0x6d280e
mov dword [ebp - 0x30c], 2
jmp 0x6d2832
mov ecx, dword [ebp - 0x2b4]
mov edx, dword [ebp - 0x2d0]
lea eax, [edx + ecx + 0xff]
xor edx, edx
div dword [ebp - 0x2b4]
add eax, 1
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x300], eax
mov ecx, dword [ebp + 0x20]
add ecx, dword [ebp - 0x2e0]
mov dword [ebp - 0x344], ecx
mov edx, dword [ebp - 0x344]
sub edx, dword [ebp - 0x2d0]
sub edx, 1
mov dword [ebp - 0x348], edx
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [ebp - 0x348]
lea edx, [ecx + eax + 1]
mov eax, dword [ebp - 0x2b4]
lea eax, [edx + eax - 1]
xor edx, edx
div dword [ebp - 0x2b4]
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2d8], 0
mov ecx, dword [ebp + 0x1c]
add ecx, dword [ebp - 0x2e0]
mov dword [ebp - 0x2ec], ecx
mov eax, dword [ebp - 0x2ec]
xor edx, edx
div dword [ebp - 0x2b4]
mov dword [ebp - 0x320], edx
mov eax, dword [ebp - 0x2ec]
xor edx, edx
div dword [ebp - 0x2b4]
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x2ec]
add eax, dword [ebp - 0x2bc]
xor edx, edx
div dword [ebp - 0x2b4]
mov dword [ebp - 0x340], eax
movsx edx, byte [ebp + 0x2c]
test edx, edx
je 0x6d2903
mov dword [ebp - 0x310], 1
jmp 0x6d290d
mov dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x300]
add eax, dword [ebp - 0x310]
cmp dword [ebp - 0x314], eax
jbe 0x6d2946
mov ecx, dword [ebp - 0x314]
sub ecx, dword [ebp - 0x300]
mov dword [ebp - 0x2f4], ecx
mov edx, dword [ebp - 0x2b4]
imul edx, dword [ebp - 0x2f4]
mov dword [ebp - 0x2d8], edx
mov eax, dword [ebp - 0x2ec]
shl eax, 3
mov dword [ebp - 0x2d4], eax
movsx ecx, byte [ebp + 0x2c]
test ecx, ecx
jne 0x6d2a6c
mov edx, dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x2d4]
lea ecx, [eax + edx*8]
mov dword [ebp - 0x2d4], ecx
mov edx, dword [ebp - 0x2b4]
push edx
push 0
lea eax, [ebp - 0xd4]
push eax
call fcn.006f7570
add esp, 0xc
cmp dword [ebp + 0x28], 0x80
ja 0x6d29a3
mov dword [ebp - 0x318], 1
jmp 0x6d29ad
mov dword [ebp - 0x318], 0
cmp dword [ebp - 0x318], 0
je 0x6d29c2
mov dword [ebp - 0x324], 1
jmp 0x6d29cc
mov dword [ebp - 0x324], 0
push 0x16c
push str.ssl_s3_cbc.c
push str.Assertion_failed:_mac_secret_length___sizeof_hmac_pad_
mov ecx, dword [ebp - 0x324]
push ecx
call fcn.0056cb20
add esp, 0x10
test eax, eax
jne 0x6d29f5
xor eax, eax
jmp 0x6d3134
mov edx, dword [ebp + 0x28]
push edx
mov eax, dword [ebp + 0x24]
push eax
lea ecx, [ebp - 0xd4]
push ecx
call fcn.006f6ff0
add esp, 0xc
mov dword [ebp - 0x2b8], 0
jmp 0x6d2a27
mov edx, dword [ebp - 0x2b8]
add edx, 1
mov dword [ebp - 0x2b8], edx
mov eax, dword [ebp - 0x2b8]
cmp eax, dword [ebp - 0x2b4]
jae 0x6d2a55
mov ecx, dword [ebp - 0x2b8]
movzx edx, byte [ebp + ecx - 0xd4]
xor edx, 0x36
mov eax, dword [ebp - 0x2b8]
mov byte [ebp + eax - 0xd4], dl
jmp 0x6d2a18
lea ecx, [ebp - 0xd4]
push ecx
lea edx, [ebp - 0x2ac]
push edx
call dword [ebp - 0x2c8]
add esp, 8
movsx eax, byte [ebp - 0x2c9]
test eax, eax
je 0x6d2ada
mov ecx, dword [ebp - 0x2bc]
sub ecx, 4
push ecx
push 0
lea edx, [ebp - 0x14]
push edx
call fcn.006f7570
add esp, 0xc
mov eax, dword [ebp - 0x2d4]
shr eax, 0x18
mov ecx, dword [ebp - 0x2bc]
mov byte [ebp + ecx - 0x18], al
mov edx, dword [ebp - 0x2d4]
shr edx, 0x10
mov eax, dword [ebp - 0x2bc]
mov byte [ebp + eax - 0x17], dl
mov ecx, dword [ebp - 0x2d4]
shr ecx, 8
mov edx, dword [ebp - 0x2bc]
mov byte [ebp + edx - 0x16], cl
mov eax, dword [ebp - 0x2bc]
mov cl, byte [ebp - 0x2d4]
mov byte [ebp + eax - 0x15], cl
jmp 0x6d2b38
mov edx, dword [ebp - 0x2bc]
push edx
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.006f7570
add esp, 0xc
mov ecx, dword [ebp - 0x2d4]
shr ecx, 0x18
mov edx, dword [ebp - 0x2bc]
mov byte [ebp + edx - 0x19], cl
mov eax, dword [ebp - 0x2d4]
shr eax, 0x10
mov ecx, dword [ebp - 0x2bc]
mov byte [ebp + ecx - 0x1a], al
mov edx, dword [ebp - 0x2d4]
shr edx, 8
mov eax, dword [ebp - 0x2bc]
mov byte [ebp + eax - 0x1b], dl
mov ecx, dword [ebp - 0x2bc]
mov dl, byte [ebp - 0x2d4]
mov byte [ebp + ecx - 0x1c], dl
cmp dword [ebp - 0x2d8], 0
jbe 0x6d2ced
movsx eax, byte [ebp + 0x2c]
test eax, eax
je 0x6d2c4c
mov ecx, dword [ebp - 0x2e0]
cmp ecx, dword [ebp - 0x2b4]
ja 0x6d2b66
xor eax, eax
jmp 0x6d3134
mov edx, dword [ebp - 0x2e0]
sub edx, dword [ebp - 0x2b4]
mov dword [ebp - 0x2f0], edx
mov eax, dword [ebp + 0x14]
push eax
lea ecx, [ebp - 0x2ac]
push ecx
call dword [ebp - 0x2c8]
add esp, 8
mov edx, dword [ebp - 0x2f0]
push edx
mov eax, dword [ebp + 0x14]
add eax, dword [ebp - 0x2b4]
push eax
lea ecx, [ebp - 0x154]
push ecx
call fcn.006f6ff0
add esp, 0xc
mov edx, dword [ebp - 0x2b4]
sub edx, dword [ebp - 0x2f0]
push edx
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp - 0x2f0]
lea edx, [ebp + ecx - 0x154]
push edx
call fcn.006f6ff0
add esp, 0xc
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x2ac]
push ecx
call dword [ebp - 0x2c8]
add esp, 8
mov dword [ebp - 0x2b8], 1
jmp 0x6d2c05
mov edx, dword [ebp - 0x2b8]
add edx, 1
mov dword [ebp - 0x2b8], edx
mov eax, dword [ebp - 0x2d8]
xor edx, edx
div dword [ebp - 0x2b4]
sub eax, 1
cmp dword [ebp - 0x2b8], eax
jae 0x6d2c47
mov eax, dword [ebp - 0x2b4]
imul eax, dword [ebp - 0x2b8]
add eax, dword [ebp + 0x18]
sub eax, dword [ebp - 0x2f0]
push eax
lea ecx, [ebp - 0x2ac]
push ecx
call dword [ebp - 0x2c8]
add esp, 8
jmp 0x6d2bf6
jmp 0x6d2ced
push 0xd
mov edx, dword [ebp + 0x14]
push edx
lea eax, [ebp - 0x154]
push eax
call fcn.006f6ff0
add esp, 0xc
mov ecx, dword [ebp - 0x2b4]
sub ecx, 0xd
push ecx
mov edx, dword [ebp + 0x18]
push edx
lea eax, [ebp - 0x147]
push eax
call fcn.006f6ff0
add esp, 0xc
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x2ac]
push edx
call dword [ebp - 0x2c8]
add esp, 8
mov dword [ebp - 0x2b8], 1
jmp 0x6d2cb0
mov eax, dword [ebp - 0x2b8]
add eax, 1
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2d8]
xor edx, edx
div dword [ebp - 0x2b4]
cmp dword [ebp - 0x2b8], eax
jae 0x6d2ced
mov ecx, dword [ebp - 0x2b4]
imul ecx, dword [ebp - 0x2b8]
mov edx, dword [ebp + 0x18]
lea eax, [edx + ecx - 0xd]
push eax
lea ecx, [ebp - 0x2ac]
push ecx
call dword [ebp - 0x2c8]
add esp, 8
jmp 0x6d2ca1
push 0x40
push 0
lea edx, [ebp - 0x54]
push edx
call fcn.006f7570
add esp, 0xc
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x2b8], eax
jmp 0x6d2d1a
mov ecx, dword [ebp - 0x2b8]
add ecx, 1
mov dword [ebp - 0x2b8], ecx
mov edx, dword [ebp - 0x2f4]
add edx, dword [ebp - 0x300]
cmp dword [ebp - 0x2b8], edx
ja 0x6d2f96
mov eax, dword [ebp - 0x33c]
push eax
mov ecx, dword [ebp - 0x2b8]
push ecx
call fcn.00594480
add esp, 8
mov byte [ebp - 0x2bd], al
mov edx, dword [ebp - 0x340]
push edx
mov eax, dword [ebp - 0x2b8]
push eax
call fcn.00594480
add esp, 8
mov byte [ebp - 0x2be], al
mov dword [ebp - 0x2c4], 0
jmp 0x6d2d85
mov ecx, dword [ebp - 0x2c4]
add ecx, 1
mov dword [ebp - 0x2c4], ecx
mov edx, dword [ebp - 0x2c4]
cmp edx, dword [ebp - 0x2b4]
jae 0x6d2f0a
mov byte [ebp - 0x2ad], 0
mov eax, dword [ebp - 0x2d8]
cmp eax, dword [ebp - 0x2e0]
jae 0x6d2dbf
mov ecx, dword [ebp + 0x14]
add ecx, dword [ebp - 0x2d8]
mov dl, byte [ecx]
mov byte [ebp - 0x2ad], dl
jmp 0x6d2de8
mov eax, dword [ebp + 0x20]
add eax, dword [ebp - 0x2e0]
cmp dword [ebp - 0x2d8], eax
jae 0x6d2de8
mov ecx, dword [ebp - 0x2d8]
sub ecx, dword [ebp - 0x2e0]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + ecx]
mov byte [ebp - 0x2ad], al
mov ecx, dword [ebp - 0x2d8]
add ecx, 1
mov dword [ebp - 0x2d8], ecx
movzx ebx, byte [ebp - 0x2bd]
mov edx, dword [ebp - 0x320]
push edx
mov eax, dword [ebp - 0x2c4]
push eax
call fcn.006d2380
add esp, 8
movzx ecx, al
and ebx, ecx
mov byte [ebp - 0x2e1], bl
movzx ebx, byte [ebp - 0x2bd]
mov edx, dword [ebp - 0x320]
add edx, 1
push edx
mov eax, dword [ebp - 0x2c4]
push eax
call fcn.006d2380
add esp, 8
movzx ecx, al
and ebx, ecx
mov byte [ebp - 0x2e2], bl
movzx edx, byte [ebp - 0x2ad]
push edx
push 0x80
movzx eax, byte [ebp - 0x2e1]
push eax
call fcn.005e8430
add esp, 0xc
mov byte [ebp - 0x2ad], al
movzx ecx, byte [ebp - 0x2ad]
movzx edx, byte [ebp - 0x2e2]
not edx
and ecx, edx
mov byte [ebp - 0x2ad], cl
movzx eax, byte [ebp - 0x2be]
not eax
movzx ecx, byte [ebp - 0x2bd]
or eax, ecx
movzx edx, byte [ebp - 0x2ad]
and edx, eax
mov byte [ebp - 0x2ad], dl
mov eax, dword [ebp - 0x2b4]
sub eax, dword [ebp - 0x2bc]
cmp dword [ebp - 0x2c4], eax
jb 0x6d2ef2
movzx ecx, byte [ebp - 0x2ad]
push ecx
mov edx, dword [ebp - 0x2b4]
sub edx, dword [ebp - 0x2bc]
mov eax, dword [ebp - 0x2c4]
sub eax, edx
movzx ecx, byte [ebp + eax - 0x14]
push ecx
movzx edx, byte [ebp - 0x2be]
push edx
call fcn.005e8430
add esp, 0xc
mov byte [ebp - 0x2ad], al
mov eax, dword [ebp - 0x2c4]
mov cl, byte [ebp - 0x2ad]
mov byte [ebp + eax - 0x1d4], cl
jmp 0x6d2d76
lea edx, [ebp - 0x1d4]
push edx
lea eax, [ebp - 0x2ac]
push eax
call dword [ebp - 0x2c8]
add esp, 8
lea ecx, [ebp - 0x1d4]
push ecx
lea edx, [ebp - 0x2ac]
push edx
call dword [ebp - 0x2e8]
add esp, 8
mov dword [ebp - 0x2c4], 0
jmp 0x6d2f53
mov eax, dword [ebp - 0x2c4]
add eax, 1
mov dword [ebp - 0x2c4], eax
mov ecx, dword [ebp - 0x2c4]
cmp ecx, dword [ebp - 0x2d0]
jae 0x6d2f91
mov edx, dword [ebp - 0x2c4]
movzx eax, byte [ebp + edx - 0x1d4]
movzx ecx, byte [ebp - 0x2be]
and eax, ecx
mov edx, dword [ebp - 0x2c4]
movzx ecx, byte [ebp + edx - 0x54]
or ecx, eax
mov edx, dword [ebp - 0x2c4]
mov byte [ebp + edx - 0x54], cl
jmp 0x6d2f44
jmp 0x6d2d0b
call fcn.0057aee0
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0
jne 0x6d2faf
jmp 0x6d311f
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x2dc]
push ecx
call fcn.0057a7d0
add esp, 0xc
test eax, eax
jg 0x6d2fcd
jmp 0x6d311f
movsx edx, byte [ebp + 0x2c]
test edx, edx
je 0x6d3051
mov eax, dword [ebp - 0x2f8]
push eax
push 0x5c
lea ecx, [ebp - 0xd4]
push ecx
call fcn.006f7570
add esp, 0xc
mov edx, dword [ebp + 0x28]
push edx
mov eax, dword [ebp + 0x24]
push eax
mov ecx, dword [ebp - 0x2dc]
push ecx
call fcn.0057a810
add esp, 0xc
test eax, eax
jle 0x6d3047
mov edx, dword [ebp - 0x2f8]
push edx
lea eax, [ebp - 0xd4]
push eax
mov ecx, dword [ebp - 0x2dc]
push ecx
call fcn.0057a810
add esp, 0xc
test eax, eax
jle 0x6d3047
mov edx, dword [ebp - 0x2d0]
push edx
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x2dc]
push ecx
call fcn.0057a810
add esp, 0xc
test eax, eax
jg 0x6d304c
jmp 0x6d311f
jmp 0x6d30db
mov dword [ebp - 0x2b8], 0
jmp 0x6d306c
mov edx, dword [ebp - 0x2b8]
add edx, 1
mov dword [ebp - 0x2b8], edx
mov eax, dword [ebp - 0x2b8]
cmp eax, dword [ebp - 0x2b4]
jae 0x6d309a
mov ecx, dword [ebp - 0x2b8]
movzx edx, byte [ebp + ecx - 0xd4]
xor edx, 0x6a
mov eax, dword [ebp - 0x2b8]
mov byte [ebp + eax - 0xd4], dl
jmp 0x6d305d
mov ecx, dword [ebp - 0x2b4]
push ecx
lea edx, [ebp - 0xd4]
push edx
mov eax, dword [ebp - 0x2dc]
push eax
call fcn.0057a810
add esp, 0xc
test eax, eax
jle 0x6d30d9
mov ecx, dword [ebp - 0x2d0]
push ecx
lea edx, [ebp - 0x54]
push edx
mov eax, dword [ebp - 0x2dc]
push eax
call fcn.0057a810
add esp, 0xc
test eax, eax
jg 0x6d30db
jmp 0x6d311f
lea ecx, [ebp - 0x34c]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0x2dc]
push eax
call fcn.0057a360
add esp, 0xc
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0
je 0x6d3115
cmp dword [ebp + 0x10], 0
je 0x6d3115
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x34c]
mov dword [ecx], edx
mov dword [ebp - 0x2fc], 1
mov eax, dword [ebp - 0x2dc]
push eax
call fcn.0057ae10
add esp, 4
mov eax, dword [ebp - 0x2fc]
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006f4db8
mov esp, ebp
pop ebp
ret