Function at 0x44d275
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
push ebx
push edi
mov edx, 0xd
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x44d27d
call fcn.0052fae0
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
and ebx, ebx
je 0x44d2cd
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x44d2bc
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0xfc]
neg ebx
dec ebx
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x44]
push dword [ebp + 0xfc]
pop eax
mov dword [esp + 0x10], eax
jmp 0x44d2fb
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x44d2ec
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0xfc]
neg ebx
dec ebx
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x44]
push dword [ebp + 0xfc]
pop eax
mov dword [esp + 0x14], eax
call fcn.0051db05
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
and ebx, ebx
je 0x44d36c
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x44d344
push 0
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0x44]
push 0
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x44]
mov ebp, dword [esp + 0x54]
add ebx, dword [ebp + 0x4c]
dec ebx
push ebx
call fcn.0051d5f5
jmp 0x44d36a
push 0
mov ebp, dword [esp + 0x4c]
mov ebx, dword [ebp + 0x44]
mov ebp, dword [esp + 0x4c]
add ebx, dword [ebp + 0x4c]
dec ebx
push ebx
push 0
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x44]
call fcn.0051d5f5
jmp 0x44d3bc
jmp 0x44d396
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 0x48]
mov ebp, dword [esp + 0x48]
add ebx, dword [ebp + 0x50]
dec ebx
push ebx
push 0
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x48]
push 0
call fcn.0051d5f5
mov ebp, dword [esp + 0x48]
push dword [ebp + 0x40]
mov ebx, 3
cmp ebx, dword [esp]
jne 0x44d458
lea ebp, [0x6b0dfc]
push dword [ebp + 0xc]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004d0c50
mov dword [esp + 0x20], eax
push 0xff101010
push dword [esp + 0x24]
call fcn.004d0c50
mov ebx, eax
and ebx, 0xffffff
or ebx, 0xc0000000
push ebx
push 0
call fcn.0051cee4
mov ebx, dword [esp + 0x20]
and ebx, 0xffffff
or ebx, 0xc0000000
push ebx
push 0x3f000000
call fcn.0051cee4
push 0xff101010
push dword [esp + 0x24]
call fcn.004ef03f
mov ebx, eax
and ebx, 0xffffff
or ebx, 0xc0000000
push ebx
push 0x3f800000
call fcn.0051cee4
jmp 0x44d659
mov ebx, 0xffffffff
cmp ebx, dword [esp]
jne 0x44d507
push 0xff202020
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004d0c50
mov ebx, eax
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0
call fcn.0051cee4
mov ebp, dword [esp + 0x4c]
mov ebx, dword [ebp + 0xc]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0x3f000000
call fcn.0051cee4
push 0xff101010
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004ef03f
mov ebx, eax
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0x3f19999a
call fcn.0051cee4
push 0xff303030
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004ef03f
mov ebx, eax
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0x3f800000
call fcn.0051cee4
jmp 0x44d659
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x44d578
push 0xff202020
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004d0c50
push eax
push 0
call fcn.0051cee4
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0xc]
push 0x3f000000
call fcn.0051cee4
push 0xff101010
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004ef03f
push eax
push 0x3f19999a
call fcn.0051cee4
push 0xff303030
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004ef03f
push eax
push 0x3f800000
call fcn.0051cee4
jmp 0x44d659
mov ebx, 1
cmp ebx, dword [esp]
jne 0x44d5f6
lea ebp, [0x6b0dfc]
push dword [ebp + 8]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004d0c50
mov dword [esp + 0x20], eax
push 0xff202020
push dword [esp + 0x24]
call fcn.004d0c50
push eax
push 0
call fcn.0051cee4
push dword [esp + 0x20]
push 0x3f000000
call fcn.0051cee4
push 0xff101010
push dword [esp + 0x24]
call fcn.004ef03f
push eax
push 0x3f19999a
call fcn.0051cee4
push 0xff303030
push dword [esp + 0x24]
call fcn.004ef03f
push eax
push 0x3f800000
call fcn.0051cee4
jmp 0x44d659
mov ebx, 2
cmp ebx, dword [esp]
jne 0x44d659
lea ebp, [0x6b0dfc]
push dword [ebp + 0xc]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004d0c50
mov dword [esp + 0x20], eax
push 0xff101010
push dword [esp + 0x24]
call fcn.004d0c50
push eax
push 0
call fcn.0051cee4
push dword [esp + 0x20]
push 0x3f000000
call fcn.0051cee4
push 0xff101010
push dword [esp + 0x24]
call fcn.004ef03f
push eax
push 0x3f800000
call fcn.0051cee4
pop eax
push 0x11
call fcn.0051cb4c
mov ebp, dword [esp + 0x48]
push dword [ebp + 0xc]
mov ebp, dword [esp + 0x48]
push dword [ebp + 0xfc]
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0xfc]
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x50]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x58]
mov ebx, dword [ebp + 0x4c]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x5c]
mov ebx, dword [ebp + 0x48]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x60]
mov ebx, dword [ebp + 0x44]
add ebx, dword [esp + 0x20]
push ebx
call fcn.0051dbfa
push 0x15
call fcn.0051cb4c
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44d72a
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0xf8]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
mov ebp, dword [esp + 0x48]
push dword [ebp + 0xfc]
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0xfc]
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x50]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x58]
mov ebx, dword [ebp + 0x4c]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x5c]
mov ebx, dword [ebp + 0x48]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x60]
mov ebx, dword [ebp + 0x44]
add ebx, dword [esp + 0x20]
push ebx
call fcn.0051dbfa
jmp 0x44d77d
mov ebp, dword [esp + 0x44]
push dword [ebp + 0xf8]
mov ebp, dword [esp + 0x48]
push dword [ebp + 0xfc]
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0xfc]
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x50]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x58]
mov ebx, dword [ebp + 0x4c]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x5c]
mov ebx, dword [ebp + 0x48]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x60]
mov ebx, dword [ebp + 0x44]
add ebx, dword [esp + 0x20]
push ebx
call fcn.0051dbfa
push 0x11
call fcn.0051cb4c
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
and ebx, ebx
je 0x44d8b7
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x44d7ae
mov eax, 1
jmp 0x44d7b0
xor eax, eax
mov ebx, eax
imul ebx, ebx, 0xb4
add ebx, 0x5a
mov dword [esp + 0x30], ebx
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x10], 0
je 0x44d843
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 0x14]
and ebx, ebx
jne 0x44d7ed
push dword [esp + 0x30]
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0x10]
call fcn.00423a32
push eax
mov ebp, dword [esp + 0x4c]
pop eax
mov dword [ebp + 0x14], eax
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44d81e
push 0x40
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0x78]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x74]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x14]
call fcn.005278f3
push eax
call fcn.0051dc9b
jmp 0x44d843
push 0xff
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0x78]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x74]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x14]
call fcn.005278f3
push eax
call fcn.0051dc9b
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44d887
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x40000000
push ebx
push dword [esp + 0x34]
fild dword [esp]
fstp dword [esp]
mov ebp, dword [esp + 0x50]
push dword [ebp + 4]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x68]
mov ebp, dword [esp + 0x58]
push dword [ebp + 0x64]
call fcn.0051d895
jmp 0x44d8b2
mov ebp, dword [esp + 0x48]
push dword [ebp + 8]
push dword [esp + 0x34]
fild dword [esp]
fstp dword [esp]
mov ebp, dword [esp + 0x50]
push dword [ebp + 4]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x68]
mov ebp, dword [esp + 0x58]
push dword [ebp + 0x64]
call fcn.0051d895
jmp 0x44db3c
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x10], 0
je 0x44d917
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44d8f2
push 0x40
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0x78]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x74]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x10]
call fcn.005278f3
push eax
call fcn.0051dc9b
jmp 0x44d917
push 0xff
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0x78]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x74]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x10]
call fcn.005278f3
push eax
call fcn.0051dc9b
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44d954
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x40000000
push ebx
mov ebp, dword [esp + 0x4c]
push dword [ebp + 4]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x68]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x64]
call fcn.0051cb63
jmp 0x44db3c
mov ebp, dword [esp + 0x48]
push dword [ebp + 8]
mov ebp, dword [esp + 0x4c]
push dword [ebp + 4]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x68]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x64]
call fcn.0051cb63
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x130]
cmp ebx, dword [esp + 0x48]
jne 0x44db3c
push 0x12
call fcn.0051cb4c
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x13c]
and ebx, ebx
jge 0x44da6e
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
mov ebp, dword [esp + 0x50]
mov ebx, dword [ebp + 0x138]
mov ebp, dword [esp + 0x50]
add ebx, dword [ebp + 0x13c]
push ebx
mov ebp, dword [esp + 0x58]
push dword [ebp]
call fcn.0052d380
call fcn.004f7382
add dword [esp], edx
call fcn.0051ccb7
call fcn.004f73a0
mov ebx, eax
dec ebx
mov dword [esp + 8], ebx
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x138]
mov ebp, dword [esp + 0x58]
push dword [ebp]
call fcn.0052d380
call fcn.004f7382
add dword [esp], edx
call fcn.0051ccb7
call fcn.004f73a0
mov ebx, eax
sub ebx, dword [esp + 8]
mov dword [esp + 0x10], ebx
mov eax, 0x5e58fa
push eax
call fcn.0051cce1
push eax
push dword [esp + 0x14]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x68]
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x64]
add ebx, dword [esp + 0x14]
push ebx
call fcn.0051d81e
jmp 0x44db32
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x138]
mov ebp, dword [esp + 0x58]
push dword [ebp]
call fcn.0052d380
call fcn.004f7382
add dword [esp], edx
call fcn.0051ccb7
call fcn.004f73a0
mov ebx, eax
dec ebx
mov dword [esp + 8], ebx
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
mov ebp, dword [esp + 0x50]
mov ebx, dword [ebp + 0x138]
mov ebp, dword [esp + 0x50]
add ebx, dword [ebp + 0x13c]
push ebx
mov ebp, dword [esp + 0x58]
push dword [ebp]
call fcn.0052d380
call fcn.004f7382
add dword [esp], edx
call fcn.0051ccb7
call fcn.004f73a0
mov ebx, eax
sub ebx, dword [esp + 8]
mov dword [esp + 0x10], ebx
mov eax, 0x5e58fa
push eax
call fcn.0051cce1
push eax
push dword [esp + 0x14]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x68]
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x64]
add ebx, dword [esp + 0x14]
push ebx
call fcn.0051d81e
push 0x11
call fcn.0051cb4c
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 0x1c]
and ebx, 0x800
and ebx, ebx
je 0x44dd81
push 0x14
call fcn.0051cb4c
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0xa4]
cmp ebx, dword [esp + 0x48]
jne 0x44db7f
mov ebp, dword [esp + 0x44]
cmp dword [ebp + 0xac], 0
je 0x44db7f
mov eax, 1
jmp 0x44db81
xor eax, eax
and eax, eax
je 0x44dbb7
mov ebp, dword [esp + 0x48]
push dword [ebp + 8]
push 2
push 2
lea ebp, [0x6b0dfc]
push dword [ebp + 0x2c]
push dword [ebp + 0x2c]
mov ebp, dword [esp + 0x5c]
push dword [ebp + 0x70]
mov ebp, dword [esp + 0x60]
push dword [ebp + 0x6c]
call fcn.0051dbfa
jmp 0x44dc28
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44dbfc
lea ebp, [0x6b0dfc]
mov ebx, dword [ebp + 0x10]
and ebx, 0xffffff
or ebx, 0x40000000
push ebx
push 2
push 2
push dword [ebp + 0x2c]
push dword [ebp + 0x2c]
mov ebp, dword [esp + 0x5c]
push dword [ebp + 0x70]
mov ebp, dword [esp + 0x60]
push dword [ebp + 0x6c]
call fcn.0051dbfa
jmp 0x44dc28
lea ebp, [0x6b0dfc]
push dword [ebp + 0x10]
push 2
push 2
push dword [ebp + 0x2c]
push dword [ebp + 0x2c]
mov ebp, dword [esp + 0x5c]
push dword [ebp + 0x70]
mov ebp, dword [esp + 0x60]
push dword [ebp + 0x6c]
call fcn.0051dbfa
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x28], 0
je 0x44dd77
push 0x50
call fcn.0051cb4c
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 0x70]
lea ebp, [0x6b0dfc]
add ebx, dword [ebp + 0x2c]
add ebx, 0xfffffffe
push ebx
mov ebp, dword [esp + 0x4c]
mov ebx, dword [ebp + 0x6c]
lea ebp, [0x6b0dfc]
add ebx, dword [ebp + 0x2c]
add ebx, 0xfffffffe
push ebx
mov ebp, dword [esp + 0x50]
mov ebx, dword [ebp + 0x70]
add ebx, 2
push ebx
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x6c]
add ebx, 2
push ebx
call fcn.0051d5f5
call fcn.0051db05
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44dcee
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x20000000
push ebx
push 0
call fcn.0051cee4
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x30000000
push ebx
push 0x3f000000
call fcn.0051cee4
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x20000000
push ebx
push 0x3f800000
call fcn.0051cee4
jmp 0x44dd48
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0
call fcn.0051cee4
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0xc0000000
push ebx
push 0x3f000000
call fcn.0051cee4
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0x3f800000
call fcn.0051cee4
lea ebp, [0x6b0dfc]
mov ebx, dword [ebp + 0x2c]
add ebx, 0xfffffffc
push ebx
mov ebx, dword [ebp + 0x2c]
add ebx, 0xfffffffc
push ebx
mov ebp, dword [esp + 0x50]
mov ebx, dword [ebp + 0x70]
add ebx, 2
push ebx
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x6c]
add ebx, 2
push ebx
call fcn.0051d81e
push 0x11
call fcn.0051cb4c
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 0x1c]
and ebx, 1
and ebx, ebx
jne 0x44ddb9
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 0x1c]
and ebx, 0x1000
and ebx, ebx
je 0x44ddb1
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x24], 0
je 0x44ddb1
mov eax, 1
jmp 0x44ddb3
xor eax, eax
and eax, eax
jne 0x44ddb9
jmp 0x44ddc0
mov eax, 1
jmp 0x44ddc2
xor eax, eax
and eax, eax
je 0x44df3d
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0xa4]
cmp ebx, dword [esp + 0x48]
jne 0x44ddee
mov ebp, dword [esp + 0x44]
cmp dword [ebp + 0xa8], 0
je 0x44ddee
mov eax, 1
jmp 0x44ddf0
xor eax, eax
and eax, eax
je 0x44de90
mov ebp, dword [esp + 0x44]
cmp dword [ebp + 0xbc], 0
je 0x44de1c
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0xb8]
cmp ebx, dword [esp + 0x48]
jne 0x44de1c
mov eax, 1
jmp 0x44de1e
xor eax, eax
and eax, eax
je 0x44de5a
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0xc]
push 0xffffffff
lea ebp, [0x6b0dfc]
push dword [ebp + 0x28]
push dword [ebp + 0x28]
mov ebp, dword [esp + 0x5c]
push dword [ebp + 0x60]
mov ebp, dword [esp + 0x60]
push dword [ebp + 0x5c]
call fcn.0043e43a
jmp 0x44de90
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0xc]
push 1
lea ebp, [0x6b0dfc]
push dword [ebp + 0x28]
push dword [ebp + 0x28]
mov ebp, dword [esp + 0x5c]
push dword [ebp + 0x60]
mov ebp, dword [esp + 0x60]
push dword [ebp + 0x5c]
call fcn.0043e43a
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44def3
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x40000000
push ebx
lea ebp, [0x6b0dfc]
mov ebx, dword [ebp + 0x28]
push 6
call fcn.005197bc
sub ebx, eax
push ebx
mov ebp, dword [esp + 0x50]
mov ebx, dword [ebp + 0x60]
push 3
call fcn.00519798
add ebx, eax
push ebx
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x5c]
push 3
call fcn.005197bc
add ebx, eax
push ebx
call fcn.004d5dc7
jmp 0x44df3d
mov ebp, dword [esp + 0x48]
push dword [ebp + 8]
lea ebp, [0x6b0dfc]
mov ebx, dword [ebp + 0x28]
push 6
call fcn.005197bc
sub ebx, eax
push ebx
mov ebp, dword [esp + 0x50]
mov ebx, dword [ebp + 0x60]
push 3
call fcn.00519798
add ebx, eax
push ebx
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x5c]
push 3
call fcn.005197bc
add ebx, eax
push ebx
call fcn.004d5dc7
xor eax, eax
push dword [esp + 0x28]
call fcn.0052fb40
add esp, 0x34
pop edi
pop ebx
pop ebp
ret 8