Function at 0x44bfae
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
push ebx
push edi
mov edx, 0xd
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x44bfb6
call fcn.0052ed00
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
and ebx, ebx
je 0x44c006
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x44bff5
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0xfc]
neg ebx
dec ebx
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x44]
push dword [ebp + 0xfc]
pop eax
mov dword [esp + 0x10], eax
jmp 0x44c034
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x44c025
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0xfc]
neg ebx
dec ebx
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x44]
push dword [ebp + 0xfc]
pop eax
mov dword [esp + 0x14], eax
call fcn.0051cba5
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
and ebx, ebx
je 0x44c0a5
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x44c07d
push 0
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0x44]
push 0
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x44]
mov ebp, dword [esp + 0x54]
add ebx, dword [ebp + 0x4c]
dec ebx
push ebx
call fcn.0051c695
jmp 0x44c0a3
push 0
mov ebp, dword [esp + 0x4c]
mov ebx, dword [ebp + 0x44]
mov ebp, dword [esp + 0x4c]
add ebx, dword [ebp + 0x4c]
dec ebx
push ebx
push 0
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x44]
call fcn.0051c695
jmp 0x44c0f5
jmp 0x44c0cf
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 0x48]
mov ebp, dword [esp + 0x48]
add ebx, dword [ebp + 0x50]
dec ebx
push ebx
push 0
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x48]
push 0
call fcn.0051c695
mov ebp, dword [esp + 0x48]
push dword [ebp + 0x40]
mov ebx, 3
cmp ebx, dword [esp]
jne 0x44c191
lea ebp, [0x6afc9c]
push dword [ebp + 0xc]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004cf938
mov dword [esp + 0x20], eax
push 0xff101010
push dword [esp + 0x24]
call fcn.004cf938
mov ebx, eax
and ebx, 0xffffff
or ebx, 0xc0000000
push ebx
push 0
call fcn.0051bf84
mov ebx, dword [esp + 0x20]
and ebx, 0xffffff
or ebx, 0xc0000000
push ebx
push 0x3f000000
call fcn.0051bf84
push 0xff101010
push dword [esp + 0x24]
call fcn.004edca6
mov ebx, eax
and ebx, 0xffffff
or ebx, 0xc0000000
push ebx
push 0x3f800000
call fcn.0051bf84
jmp 0x44c392
mov ebx, 0xffffffff
cmp ebx, dword [esp]
jne 0x44c240
push 0xff202020
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004cf938
mov ebx, eax
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0
call fcn.0051bf84
mov ebp, dword [esp + 0x4c]
mov ebx, dword [ebp + 0xc]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0x3f000000
call fcn.0051bf84
push 0xff101010
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004edca6
mov ebx, eax
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0x3f19999a
call fcn.0051bf84
push 0xff303030
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004edca6
mov ebx, eax
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0x3f800000
call fcn.0051bf84
jmp 0x44c392
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x44c2b1
push 0xff202020
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004cf938
push eax
push 0
call fcn.0051bf84
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0xc]
push 0x3f000000
call fcn.0051bf84
push 0xff101010
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004edca6
push eax
push 0x3f19999a
call fcn.0051bf84
push 0xff303030
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004edca6
push eax
push 0x3f800000
call fcn.0051bf84
jmp 0x44c392
mov ebx, 1
cmp ebx, dword [esp]
jne 0x44c32f
lea ebp, [0x6afc9c]
push dword [ebp + 8]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004cf938
mov dword [esp + 0x20], eax
push 0xff202020
push dword [esp + 0x24]
call fcn.004cf938
push eax
push 0
call fcn.0051bf84
push dword [esp + 0x20]
push 0x3f000000
call fcn.0051bf84
push 0xff101010
push dword [esp + 0x24]
call fcn.004edca6
push eax
push 0x3f19999a
call fcn.0051bf84
push 0xff303030
push dword [esp + 0x24]
call fcn.004edca6
push eax
push 0x3f800000
call fcn.0051bf84
jmp 0x44c392
mov ebx, 2
cmp ebx, dword [esp]
jne 0x44c392
lea ebp, [0x6afc9c]
push dword [ebp + 0xc]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0xc]
call fcn.004cf938
mov dword [esp + 0x20], eax
push 0xff101010
push dword [esp + 0x24]
call fcn.004cf938
push eax
push 0
call fcn.0051bf84
push dword [esp + 0x20]
push 0x3f000000
call fcn.0051bf84
push 0xff101010
push dword [esp + 0x24]
call fcn.004edca6
push eax
push 0x3f800000
call fcn.0051bf84
pop eax
push 0x11
call fcn.0051bbec
mov ebp, dword [esp + 0x48]
push dword [ebp + 0xc]
mov ebp, dword [esp + 0x48]
push dword [ebp + 0xfc]
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0xfc]
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x50]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x58]
mov ebx, dword [ebp + 0x4c]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x5c]
mov ebx, dword [ebp + 0x48]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x60]
mov ebx, dword [ebp + 0x44]
add ebx, dword [esp + 0x20]
push ebx
call fcn.0051cc9a
push 0x15
call fcn.0051bbec
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44c463
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0xf8]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
mov ebp, dword [esp + 0x48]
push dword [ebp + 0xfc]
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0xfc]
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x50]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x58]
mov ebx, dword [ebp + 0x4c]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x5c]
mov ebx, dword [ebp + 0x48]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x60]
mov ebx, dword [ebp + 0x44]
add ebx, dword [esp + 0x20]
push ebx
call fcn.0051cc9a
jmp 0x44c4b6
mov ebp, dword [esp + 0x44]
push dword [ebp + 0xf8]
mov ebp, dword [esp + 0x48]
push dword [ebp + 0xfc]
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0xfc]
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x50]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x58]
mov ebx, dword [ebp + 0x4c]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x5c]
mov ebx, dword [ebp + 0x48]
add ebx, dword [esp + 0x20]
push ebx
mov ebp, dword [esp + 0x60]
mov ebx, dword [ebp + 0x44]
add ebx, dword [esp + 0x20]
push ebx
call fcn.0051cc9a
push 0x11
call fcn.0051bbec
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
and ebx, ebx
je 0x44c5f0
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x44c4e7
mov eax, 1
jmp 0x44c4e9
xor eax, eax
mov ebx, eax
imul ebx, ebx, 0xb4
add ebx, 0x5a
mov dword [esp + 0x30], ebx
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x10], 0
je 0x44c57c
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 0x14]
and ebx, ebx
jne 0x44c526
push dword [esp + 0x30]
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0x10]
call fcn.004229a3
push eax
mov ebp, dword [esp + 0x4c]
pop eax
mov dword [ebp + 0x14], eax
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44c557
push 0x40
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0x78]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x74]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x14]
call fcn.00526952
push eax
call fcn.0051cd3b
jmp 0x44c57c
push 0xff
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0x78]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x74]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x14]
call fcn.00526952
push eax
call fcn.0051cd3b
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44c5c0
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x40000000
push ebx
push dword [esp + 0x34]
fild dword [esp]
fstp dword [esp]
mov ebp, dword [esp + 0x50]
push dword [ebp + 4]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x68]
mov ebp, dword [esp + 0x58]
push dword [ebp + 0x64]
call fcn.0051c935
jmp 0x44c5eb
mov ebp, dword [esp + 0x48]
push dword [ebp + 8]
push dword [esp + 0x34]
fild dword [esp]
fstp dword [esp]
mov ebp, dword [esp + 0x50]
push dword [ebp + 4]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x68]
mov ebp, dword [esp + 0x58]
push dword [ebp + 0x64]
call fcn.0051c935
jmp 0x44c875
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x10], 0
je 0x44c650
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44c62b
push 0x40
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0x78]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x74]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x10]
call fcn.00526952
push eax
call fcn.0051cd3b
jmp 0x44c650
push 0xff
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0x78]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x74]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x10]
call fcn.00526952
push eax
call fcn.0051cd3b
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44c68d
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x40000000
push ebx
mov ebp, dword [esp + 0x4c]
push dword [ebp + 4]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x68]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x64]
call fcn.0051bc03
jmp 0x44c875
mov ebp, dword [esp + 0x48]
push dword [ebp + 8]
mov ebp, dword [esp + 0x4c]
push dword [ebp + 4]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x68]
mov ebp, dword [esp + 0x54]
push dword [ebp + 0x64]
call fcn.0051bc03
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x130]
cmp ebx, dword [esp + 0x48]
jne 0x44c875
push 0x12
call fcn.0051bbec
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x13c]
and ebx, ebx
jge 0x44c7a7
push edx
call fcn.0052eb60
pop edx
push eax
push edx
call fcn.0052eb60
pop edx
push eax
push edx
call fcn.0052eb60
pop edx
push eax
mov ebp, dword [esp + 0x50]
mov ebx, dword [ebp + 0x138]
mov ebp, dword [esp + 0x50]
add ebx, dword [ebp + 0x13c]
push ebx
mov ebp, dword [esp + 0x58]
push dword [ebp]
call fcn.0052c550
call fcn.004f6442
add dword [esp], edx
call fcn.0051bd57
call fcn.004f6460
mov ebx, eax
dec ebx
mov dword [esp + 8], ebx
push edx
call fcn.0052eb60
pop edx
push eax
push edx
call fcn.0052eb60
pop edx
push eax
push edx
call fcn.0052eb60
pop edx
push eax
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x138]
mov ebp, dword [esp + 0x58]
push dword [ebp]
call fcn.0052c550
call fcn.004f6442
add dword [esp], edx
call fcn.0051bd57
call fcn.004f6460
mov ebx, eax
sub ebx, dword [esp + 8]
mov dword [esp + 0x10], ebx
mov eax, 0x5e48da
push eax
call fcn.0051bd81
push eax
push dword [esp + 0x14]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x68]
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x64]
add ebx, dword [esp + 0x14]
push ebx
call fcn.0051c8be
jmp 0x44c86b
push edx
call fcn.0052eb60
pop edx
push eax
push edx
call fcn.0052eb60
pop edx
push eax
push edx
call fcn.0052eb60
pop edx
push eax
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x138]
mov ebp, dword [esp + 0x58]
push dword [ebp]
call fcn.0052c550
call fcn.004f6442
add dword [esp], edx
call fcn.0051bd57
call fcn.004f6460
mov ebx, eax
dec ebx
mov dword [esp + 8], ebx
push edx
call fcn.0052eb60
pop edx
push eax
push edx
call fcn.0052eb60
pop edx
push eax
push edx
call fcn.0052eb60
pop edx
push eax
mov ebp, dword [esp + 0x50]
mov ebx, dword [ebp + 0x138]
mov ebp, dword [esp + 0x50]
add ebx, dword [ebp + 0x13c]
push ebx
mov ebp, dword [esp + 0x58]
push dword [ebp]
call fcn.0052c550
call fcn.004f6442
add dword [esp], edx
call fcn.0051bd57
call fcn.004f6460
mov ebx, eax
sub ebx, dword [esp + 8]
mov dword [esp + 0x10], ebx
mov eax, 0x5e48da
push eax
call fcn.0051bd81
push eax
push dword [esp + 0x14]
mov ebp, dword [esp + 0x50]
push dword [ebp + 0x68]
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x64]
add ebx, dword [esp + 0x14]
push ebx
call fcn.0051c8be
push 0x11
call fcn.0051bbec
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 0x1c]
and ebx, 0x800
and ebx, ebx
je 0x44caba
push 0x14
call fcn.0051bbec
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0xa4]
cmp ebx, dword [esp + 0x48]
jne 0x44c8b8
mov ebp, dword [esp + 0x44]
cmp dword [ebp + 0xac], 0
je 0x44c8b8
mov eax, 1
jmp 0x44c8ba
xor eax, eax
and eax, eax
je 0x44c8f0
mov ebp, dword [esp + 0x48]
push dword [ebp + 8]
push 2
push 2
lea ebp, [0x6afc9c]
push dword [ebp + 0x2c]
push dword [ebp + 0x2c]
mov ebp, dword [esp + 0x5c]
push dword [ebp + 0x70]
mov ebp, dword [esp + 0x60]
push dword [ebp + 0x6c]
call fcn.0051cc9a
jmp 0x44c961
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44c935
lea ebp, [0x6afc9c]
mov ebx, dword [ebp + 0x10]
and ebx, 0xffffff
or ebx, 0x40000000
push ebx
push 2
push 2
push dword [ebp + 0x2c]
push dword [ebp + 0x2c]
mov ebp, dword [esp + 0x5c]
push dword [ebp + 0x70]
mov ebp, dword [esp + 0x60]
push dword [ebp + 0x6c]
call fcn.0051cc9a
jmp 0x44c961
lea ebp, [0x6afc9c]
push dword [ebp + 0x10]
push 2
push 2
push dword [ebp + 0x2c]
push dword [ebp + 0x2c]
mov ebp, dword [esp + 0x5c]
push dword [ebp + 0x70]
mov ebp, dword [esp + 0x60]
push dword [ebp + 0x6c]
call fcn.0051cc9a
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x28], 0
je 0x44cab0
push 0x50
call fcn.0051bbec
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 0x70]
lea ebp, [0x6afc9c]
add ebx, dword [ebp + 0x2c]
add ebx, 0xfffffffe
push ebx
mov ebp, dword [esp + 0x4c]
mov ebx, dword [ebp + 0x6c]
lea ebp, [0x6afc9c]
add ebx, dword [ebp + 0x2c]
add ebx, 0xfffffffe
push ebx
mov ebp, dword [esp + 0x50]
mov ebx, dword [ebp + 0x70]
add ebx, 2
push ebx
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x6c]
add ebx, 2
push ebx
call fcn.0051c695
call fcn.0051cba5
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44ca27
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x20000000
push ebx
push 0
call fcn.0051bf84
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x30000000
push ebx
push 0x3f000000
call fcn.0051bf84
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x20000000
push ebx
push 0x3f800000
call fcn.0051bf84
jmp 0x44ca81
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0
call fcn.0051bf84
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0xc0000000
push ebx
push 0x3f000000
call fcn.0051bf84
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0x3f800000
call fcn.0051bf84
lea ebp, [0x6afc9c]
mov ebx, dword [ebp + 0x2c]
add ebx, 0xfffffffc
push ebx
mov ebx, dword [ebp + 0x2c]
add ebx, 0xfffffffc
push ebx
mov ebp, dword [esp + 0x50]
mov ebx, dword [ebp + 0x70]
add ebx, 2
push ebx
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x6c]
add ebx, 2
push ebx
call fcn.0051c8be
push 0x11
call fcn.0051bbec
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 0x1c]
and ebx, 1
and ebx, ebx
jne 0x44caf2
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 0x1c]
and ebx, 0x1000
and ebx, ebx
je 0x44caea
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x24], 0
je 0x44caea
mov eax, 1
jmp 0x44caec
xor eax, eax
and eax, eax
jne 0x44caf2
jmp 0x44caf9
mov eax, 1
jmp 0x44cafb
xor eax, eax
and eax, eax
je 0x44cc76
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0xa4]
cmp ebx, dword [esp + 0x48]
jne 0x44cb27
mov ebp, dword [esp + 0x44]
cmp dword [ebp + 0xa8], 0
je 0x44cb27
mov eax, 1
jmp 0x44cb29
xor eax, eax
and eax, eax
je 0x44cbc9
mov ebp, dword [esp + 0x44]
cmp dword [ebp + 0xbc], 0
je 0x44cb55
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0xb8]
cmp ebx, dword [esp + 0x48]
jne 0x44cb55
mov eax, 1
jmp 0x44cb57
xor eax, eax
and eax, eax
je 0x44cb93
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0xc]
push 0xffffffff
lea ebp, [0x6afc9c]
push dword [ebp + 0x28]
push dword [ebp + 0x28]
mov ebp, dword [esp + 0x5c]
push dword [ebp + 0x60]
mov ebp, dword [esp + 0x60]
push dword [ebp + 0x5c]
call fcn.0043d16d
jmp 0x44cbc9
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
mov ebp, dword [esp + 0x4c]
push dword [ebp + 0xc]
push 1
lea ebp, [0x6afc9c]
push dword [ebp + 0x28]
push dword [ebp + 0x28]
mov ebp, dword [esp + 0x5c]
push dword [ebp + 0x60]
mov ebp, dword [esp + 0x60]
push dword [ebp + 0x5c]
call fcn.0043d16d
mov ebp, dword [esp + 0x48]
cmp dword [ebp + 0x20], 0
je 0x44cc2c
mov ebp, dword [esp + 0x48]
mov ebx, dword [ebp + 8]
and ebx, 0xffffff
or ebx, 0x40000000
push ebx
lea ebp, [0x6afc9c]
mov ebx, dword [ebp + 0x28]
push 6
call fcn.00518780
sub ebx, eax
push ebx
mov ebp, dword [esp + 0x50]
mov ebx, dword [ebp + 0x60]
push 3
call fcn.0051875c
add ebx, eax
push ebx
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x5c]
push 3
call fcn.00518780
add ebx, eax
push ebx
call fcn.004d4ab3
jmp 0x44cc76
mov ebp, dword [esp + 0x48]
push dword [ebp + 8]
lea ebp, [0x6afc9c]
mov ebx, dword [ebp + 0x28]
push 6
call fcn.00518780
sub ebx, eax
push ebx
mov ebp, dword [esp + 0x50]
mov ebx, dword [ebp + 0x60]
push 3
call fcn.0051875c
add ebx, eax
push ebx
mov ebp, dword [esp + 0x54]
mov ebx, dword [ebp + 0x5c]
push 3
call fcn.00518780
add ebx, eax
push ebx
call fcn.004d4ab3
xor eax, eax
push dword [esp + 0x28]
call fcn.0052ed90
add esp, 0x34
pop edi
pop ebx
pop ebp
ret 8