Function at 0x4f2a9f
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
push ebx
push edi
mov edx, 7
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x4f2aa7
call fcn.0052ed00
mov ebp, dword [esp + 0x2c]
push dword [ebp + 8]
call fcn.0051bbd5
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0xf4]
call fcn.0051bd6e
push eax
call fcn.0051bd44
push eax
push 0
push 0
call fcn.0051bb8a
push 0x10
call fcn.0051bbec
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x14]
call fcn.00527a22
mov dword [esp + 0x18], eax
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x128]
dec ebx
mov dword [esp + 0x14], ebx
jmp 0x4f2b15
xor eax, eax
cmp eax, dword [esp + 0x14]
jg 0x4f2e11
cmp dword [esp + 0x18], 0
je 0x4f2bd1
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x14]
call fcn.00528011
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x3c]
cmp ebx, dword [esp + 0x14]
jl 0x4f2bd1
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
cmp dword [ebp + 0x44], 0
je 0x4f2b6e
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x2c]
and ebx, ebx
jne 0x4f2b6e
mov eax, 1
jmp 0x4f2b70
xor eax, eax
and eax, eax
je 0x4f2b93
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
lea eax, [ebp + 8]
mov ebx, eax
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xa0]
je 0x4f2b93
mov eax, 1
jmp 0x4f2b95
xor eax, eax
and eax, eax
je 0x4f2bad
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
lea eax, [ebp + 8]
push eax
push dword [esp + 0x30]
call fcn.0044bfae
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x14]
call fcn.00527d4b
and eax, eax
je 0x4f2bc1
xor eax, eax
jmp 0x4f2bc6
mov eax, 1
and eax, eax
je 0x4f2bcc
jmp 0x4f2bd1
jmp 0x4f2b38
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x50]
cmp ebx, dword [esp + 0x14]
jne 0x4f2bf3
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 2
and ebx, ebx
je 0x4f2bf3
mov eax, 1
jmp 0x4f2bf5
xor eax, eax
and eax, eax
je 0x4f2c11
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x80000000
and ebx, ebx
jne 0x4f2c11
mov eax, 1
jmp 0x4f2c13
xor eax, eax
and eax, eax
je 0x4f2c28
mov ebp, dword [esp + 0x2c]
lea eax, [ebp + 0x1c]
push eax
push dword [esp + 0x30]
call fcn.0044bfae
mov ebx, dword [esp + 0x14]
and ebx, ebx
jne 0x4f2c48
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x80
and ebx, ebx
je 0x4f2c48
mov eax, 1
jmp 0x4f2c4a
xor eax, eax
and eax, eax
je 0x4f2d16
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
and ebx, ebx
je 0x4f2cbc
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x4f2c93
lea ebp, [0x6afc9c]
push dword [ebp + 0x10]
call fcn.0051bd6e
push eax
push 1
push 0
push 0
call fcn.0051bf0a
jmp 0x4f2cba
lea ebp, [0x6afc9c]
push dword [ebp + 0x10]
call fcn.0051bd6e
push eax
push 1
push 0
call fcn.0051bd44
mov ebx, eax
dec ebx
push ebx
call fcn.0051bf0a
jmp 0x4f2d16
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x4f2cef
lea ebp, [0x6afc9c]
push dword [ebp + 0x10]
push 1
call fcn.0051bd44
push eax
push 0
push 0
call fcn.0051bf0a
jmp 0x4f2d16
lea ebp, [0x6afc9c]
push dword [ebp + 0x10]
push 1
call fcn.0051bd44
push eax
call fcn.0051bd6e
mov ebx, eax
dec ebx
push ebx
push 0
call fcn.0051bf0a
cmp dword [esp + 0x18], 0
je 0x4f2dc7
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x14]
call fcn.00527fd7
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x3c]
cmp ebx, dword [esp + 0x14]
jl 0x4f2dc7
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
cmp dword [ebp + 0x44], 0
je 0x4f2d64
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x2c]
cmp ebx, 1
jne 0x4f2d64
mov eax, 1
jmp 0x4f2d66
xor eax, eax
and eax, eax
je 0x4f2d89
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
lea eax, [ebp + 8]
mov ebx, eax
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xa0]
je 0x4f2d89
mov eax, 1
jmp 0x4f2d8b
xor eax, eax
and eax, eax
je 0x4f2da3
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
lea eax, [ebp + 8]
push eax
push dword [esp + 0x30]
call fcn.0044bfae
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x14]
call fcn.00527d4b
and eax, eax
je 0x4f2db7
xor eax, eax
jmp 0x4f2dbc
mov eax, 1
and eax, eax
je 0x4f2dc2
jmp 0x4f2dc7
jmp 0x4f2d2d
mov ebp, dword [esp + 0x2c]
cmp dword [ebp + 0xa0], 0
je 0x4f2dee
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0xa0]
mov ebx, dword [ebp + 0x34]
cmp ebx, dword [esp + 0x14]
jne 0x4f2dee
mov eax, 1
jmp 0x4f2df0
xor eax, eax
and eax, eax
je 0x4f2e07
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0xa0]
push dword [esp + 0x30]
call fcn.0044bfae
dec dword [esp + 0x14]
jno 0x4f2b15
push 0x50
call fcn.0051bbec
call fcn.0051cba5
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xf4]
and ebx, 0xffffff
push ebx
push 0
call fcn.0051bf84
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xf4]
and ebx, 0xffffff
or ebx, 0xa0000000
push ebx
push 0x3f000000
call fcn.0051bf84
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xf4]
and ebx, 0xffffff
or ebx, 0xff000000
push ebx
push 0x3f800000
call fcn.0051bf84
lea ebp, [0x6afc9c]
mov ebx, dword [ebp + 0x20]
add ebx, dword [ebp + 0x38]
add ebx, dword [ebp + 0x58]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x40000000
and ebx, ebx
je 0x4f2eb5
mov ebp, dword [esp + 0x2c]
cmp dword [ebp + 0xe0], 0
je 0x4f2eb5
mov eax, 1
jmp 0x4f2eb7
xor eax, eax
and eax, eax
je 0x4f303a
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
and ebx, ebx
je 0x4f2f9d
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x4f2ee6
push 1
jmp 0x4f2eeb
push 0
mov ebp, dword [esp + 0x30]
mov ebx, dword [ebp + 0x10]
and ebx, 0x2000
and ebx, ebx
je 0x4f2f03
mov edx, 1
jmp 0x4f2f05
xor edx, edx
pop eax
xor eax, edx
and eax, eax
je 0x4f2f48
mov ebx, dword [esp + 8]
lea ebp, [0x6afc9c]
sub ebx, dword [ebp + 0x58]
push ebx
push 0
push dword [esp + 0x10]
push 0
call fcn.0051c695
push dword [esp + 8]
call fcn.0051bd44
push eax
push 0
push 0
call fcn.0051c8be
jmp 0x4f2f98
call fcn.0051bd6e
mov ebx, eax
sub ebx, dword [esp + 8]
lea ebp, [0x6afc9c]
add ebx, dword [ebp + 0x58]
push ebx
push 0
call fcn.0051bd6e
mov ebx, eax
sub ebx, dword [esp + 0x10]
push ebx
push 0
call fcn.0051c695
push dword [esp + 8]
call fcn.0051bd44
push eax
call fcn.0051bd6e
mov ebx, eax
sub ebx, dword [esp + 0x10]
push ebx
push 0
call fcn.0051c8be
jmp 0x4f303a
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x2000
and ebx, ebx
je 0x4f3000
push 0
call fcn.0051bd44
mov ebx, eax
sub ebx, dword [esp + 0xc]
lea ebp, [0x6afc9c]
add ebx, dword [ebp + 0x58]
push ebx
push 0
call fcn.0051bd44
mov ebx, eax
sub ebx, dword [esp + 0x14]
push ebx
call fcn.0051c695
call fcn.0051bd6e
push eax
push dword [esp + 0xc]
push 0
call fcn.0051bd44
mov ebx, eax
sub ebx, dword [esp + 0x14]
push ebx
call fcn.0051c8be
jmp 0x4f303a
push 0
mov ebx, dword [esp + 0xc]
lea ebp, [0x6afc9c]
sub ebx, dword [ebp + 0x58]
push ebx
push 0
push dword [esp + 0x14]
call fcn.0051c695
call fcn.0051bd6e
push eax
push dword [esp + 0xc]
push 0
push 0
call fcn.0051c8be
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x80000000
and ebx, ebx
je 0x4f3068
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xe0]
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xe4]
jge 0x4f3068
mov eax, 1
jmp 0x4f306a
xor eax, eax
and eax, eax
je 0x4f3235
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 2
and ebx, ebx
je 0x4f3098
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 0x2c]
add ebx, dword [ebp + 0x4c]
lea ebp, [0x6afc9c]
add ebx, dword [ebp + 0x20]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x100
and ebx, ebx
je 0x4f30ba
mov ebx, dword [esp + 8]
lea ebp, [0x6afc9c]
add ebx, dword [ebp + 0x3c]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
and ebx, ebx
je 0x4f3198
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x4f30e1
push 1
jmp 0x4f30e6
push 0
mov ebp, dword [esp + 0x30]
mov ebx, dword [ebp + 0x10]
and ebx, 0x2000
and ebx, ebx
je 0x4f30fe
mov edx, 1
jmp 0x4f3100
xor edx, edx
pop eax
xor eax, edx
and eax, eax
je 0x4f3159
call fcn.0051bd6e
mov ebx, eax
sub ebx, dword [esp + 8]
lea ebp, [0x6afc9c]
add ebx, dword [ebp + 0x58]
push ebx
push 0
call fcn.0051bd6e
mov ebx, eax
sub ebx, dword [esp + 0x10]
push ebx
push 0
call fcn.0051c695
push dword [esp + 8]
call fcn.0051bd44
push eax
call fcn.0051bd6e
mov ebx, eax
sub ebx, dword [esp + 0x10]
push ebx
push 0
call fcn.0051c8be
jmp 0x4f3193
mov ebx, dword [esp + 8]
lea ebp, [0x6afc9c]
sub ebx, dword [ebp + 0x58]
push ebx
push 0
push dword [esp + 0x10]
push 0
call fcn.0051c695
push dword [esp + 8]
call fcn.0051bd44
push eax
push 0
push 0
call fcn.0051c8be
jmp 0x4f3235
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x2000
and ebx, ebx
je 0x4f31e5
push 0
mov ebx, dword [esp + 0xc]
lea ebp, [0x6afc9c]
sub ebx, dword [ebp + 0x58]
push ebx
push 0
push dword [esp + 0x14]
call fcn.0051c695
call fcn.0051bd6e
push eax
push dword [esp + 0xc]
push 0
push 0
call fcn.0051c8be
jmp 0x4f3235
push 0
call fcn.0051bd44
mov ebx, eax
sub ebx, dword [esp + 0xc]
lea ebp, [0x6afc9c]
add ebx, dword [ebp + 0x58]
push ebx
push 0
call fcn.0051bd44
mov ebx, eax
sub ebx, dword [esp + 0x14]
push ebx
call fcn.0051c695
call fcn.0051bd6e
push eax
push dword [esp + 0xc]
push 0
call fcn.0051bd44
mov ebx, eax
sub ebx, dword [esp + 0x14]
push ebx
call fcn.0051c8be
push 0x10
call fcn.0051bbec
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x40000000
and ebx, ebx
je 0x4f342b
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
cmp ebx, 0x40000000
jne 0x4f33a5
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xc4]
jne 0x4f32fa
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x6afc9c]
push dword [ebp + 4]
push 0xffffffff
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x160]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x15c]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x148]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x160]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x144]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x15c]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.0043d16d
jmp 0x4f3372
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x6afc9c]
push dword [ebp + 4]
push 1
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x160]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x15c]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x148]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x160]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x144]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x15c]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.0043d16d
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6afc9c]
push dword [ebp + 0x14]
push 0x40000000
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x148]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x144]
call fcn.004bd743
jmp 0x4f342b
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xe0]
and ebx, ebx
jle 0x4f33f0
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6afc9c]
mov ebx, dword [ebp + 0x14]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0x40000000
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x148]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x144]
call fcn.004bd743
jmp 0x4f342b
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6afc9c]
mov ebx, dword [ebp + 0x14]
and ebx, 0xffffff
or ebx, 0x20000000
push ebx
push 0x40000000
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x148]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x144]
call fcn.004bd743
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x80000000
and ebx, ebx
je 0x4f361f
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
cmp ebx, 0x80000000
jne 0x4f3591
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xc4]
jne 0x4f34e6
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x6afc9c]
push dword [ebp + 4]
push 0xffffffff
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x160]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x15c]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x150]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x160]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x14c]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x15c]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.0043d16d
jmp 0x4f355e
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x6afc9c]
push dword [ebp + 4]
push 1
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x160]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x15c]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x150]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x160]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x14c]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x15c]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.0043d16d
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6afc9c]
push dword [ebp + 0x14]
push connect
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x150]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x14c]
call fcn.004bd743
jmp 0x4f361f
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xe0]
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xe4]
jge 0x4f35e4
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6afc9c]
mov ebx, dword [ebp + 0x14]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push connect
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x150]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x14c]
call fcn.004bd743
jmp 0x4f361f
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6afc9c]
mov ebx, dword [ebp + 0x14]
and ebx, 0xffffff
or ebx, 0x20000000
push ebx
push connect
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x150]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x14c]
call fcn.004bd743
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 2
and ebx, ebx
je 0x4f3645
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x80000000
and ebx, ebx
je 0x4f3645
mov eax, 1
jmp 0x4f3647
xor eax, eax
and eax, eax
je 0x4f365c
mov ebp, dword [esp + 0x2c]
lea eax, [ebp + 0x1c]
push eax
push dword [esp + 0x30]
call fcn.0044bfae
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x100
and ebx, ebx
je 0x4f37fa
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
cmp ebx, 0x100
jne 0x4f37bf
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xc4]
jne 0x4f3717
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x6afc9c]
push dword [ebp + 4]
push 0xffffffff
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x164]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x164]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x158]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x164]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x154]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x164]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.0043d16d
jmp 0x4f378f
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x6afc9c]
push dword [ebp + 4]
push 1
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x164]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x164]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x158]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x164]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x154]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x164]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.0043d16d
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6afc9c]
push dword [ebp + 0x14]
push 0x100
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x158]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x154]
call fcn.004bd743
jmp 0x4f37fa
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6afc9c]
mov ebx, dword [ebp + 0x14]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0x100
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x158]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x154]
call fcn.004bd743
xor eax, eax
add esp, 0x1c
pop edi
pop ebx
pop ebp
ret 4