Function at 0x5488b3
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
push ebx
push edi
mov edx, 7
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x5488bb
call fcn.005b13d0
lea ebp, [0x7c27a8]
cmp dword [ebp + 0x80], 0
je 0x5488e1
jmp 0x549618
mov ebp, dword [esp + 0x2c]
push dword [ebp + 8]
call fcn.0059f6fa
push 0x100
call fcn.0059f6ca
lea ebp, [0x7c27a8]
push dword [ebp]
call fcn.0059f8fe
push eax
call fcn.0059f728
push eax
push 0
push 0
call fcn.0059f8b3
push 0x10
call fcn.0059f6ca
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x14]
call fcn.005aa09a
mov dword [esp + 0x18], eax
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x120]
dec ebx
mov dword [esp + 0x14], ebx
jmp 0x548946
xor eax, eax
cmp eax, dword [esp + 0x14]
jg 0x548c42
cmp dword [esp + 0x18], 0
je 0x548a02
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x14]
call fcn.005a9fd9
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x3c]
cmp ebx, dword [esp + 0x14]
jl 0x548a02
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
cmp dword [ebp + 0x44], 0
je 0x54899f
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x2c]
and ebx, ebx
jne 0x54899f
mov eax, 1
jmp 0x5489a1
xor eax, eax
and eax, eax
je 0x5489c4
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
lea eax, [ebp + 8]
mov ebx, eax
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xa0]
je 0x5489c4
mov eax, 1
jmp 0x5489c6
xor eax, eax
and eax, eax
je 0x5489de
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
lea eax, [ebp + 8]
push eax
push dword [esp + 0x30]
call fcn.0045ea5c
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x14]
call fcn.005aa165
and eax, eax
je 0x5489f2
xor eax, eax
jmp 0x5489f7
mov eax, 1
and eax, eax
je 0x5489fd
jmp 0x548a02
jmp 0x548969
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x50]
cmp ebx, dword [esp + 0x14]
jne 0x548a24
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 2
and ebx, ebx
je 0x548a24
mov eax, 1
jmp 0x548a26
xor eax, eax
and eax, eax
je 0x548a42
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x80000000
and ebx, ebx
jne 0x548a42
mov eax, 1
jmp 0x548a44
xor eax, eax
and eax, eax
je 0x548a59
mov ebp, dword [esp + 0x2c]
lea eax, [ebp + 0x1c]
push eax
push dword [esp + 0x30]
call fcn.0045ea5c
mov ebx, dword [esp + 0x14]
and ebx, ebx
jne 0x548a79
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x80
and ebx, ebx
je 0x548a79
mov eax, 1
jmp 0x548a7b
xor eax, eax
and eax, eax
je 0x548b47
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
and ebx, ebx
je 0x548aed
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x548ac4
lea ebp, [0x7c27a8]
push dword [ebp + 0x10]
call fcn.0059f8fe
push eax
push 1
push 0
push 0
call fcn.0059f824
jmp 0x548aeb
lea ebp, [0x7c27a8]
push dword [ebp + 0x10]
call fcn.0059f8fe
push eax
push 1
push 0
call fcn.0059f728
mov ebx, eax
dec ebx
push ebx
call fcn.0059f824
jmp 0x548b47
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x548b20
lea ebp, [0x7c27a8]
push dword [ebp + 0x10]
push 1
call fcn.0059f728
push eax
push 0
push 0
call fcn.0059f824
jmp 0x548b47
lea ebp, [0x7c27a8]
push dword [ebp + 0x10]
push 1
call fcn.0059f728
push eax
call fcn.0059f8fe
mov ebx, eax
dec ebx
push ebx
push 0
call fcn.0059f824
cmp dword [esp + 0x18], 0
je 0x548bf8
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x14]
call fcn.005a9f9f
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x3c]
cmp ebx, dword [esp + 0x14]
jl 0x548bf8
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
cmp dword [ebp + 0x44], 0
je 0x548b95
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x2c]
cmp ebx, 1
jne 0x548b95
mov eax, 1
jmp 0x548b97
xor eax, eax
and eax, eax
je 0x548bba
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
lea eax, [ebp + 8]
mov ebx, eax
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xa0]
je 0x548bba
mov eax, 1
jmp 0x548bbc
xor eax, eax
and eax, eax
je 0x548bd4
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
lea eax, [ebp + 8]
push eax
push dword [esp + 0x30]
call fcn.0045ea5c
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x14]
call fcn.005aa165
and eax, eax
je 0x548be8
xor eax, eax
jmp 0x548bed
mov eax, 1
and eax, eax
je 0x548bf3
jmp 0x548bf8
jmp 0x548b5e
mov ebp, dword [esp + 0x2c]
cmp dword [ebp + 0xa0], 0
je 0x548c1f
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0xa0]
mov ebx, dword [ebp + 0x34]
cmp ebx, dword [esp + 0x14]
jne 0x548c1f
mov eax, 1
jmp 0x548c21
xor eax, eax
and eax, eax
je 0x548c38
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0xa0]
push dword [esp + 0x30]
call fcn.0045ea5c
dec dword [esp + 0x14]
jno 0x548946
push 0x50
call fcn.0059f6ca
call fcn.005a02e6
lea ebp, [0x7c27a8]
mov ebx, dword [ebp]
and ebx, 0xffffff
push ebx
push 0
call fcn.0059fbe5
mov ebx, dword [ebp]
and ebx, 0xffffff
or ebx, 0xa0000000
push ebx
push 0x3f000000
call fcn.0059fbe5
mov ebx, dword [ebp]
and ebx, 0xffffff
or ebx, 0xff000000
push ebx
push 0x3f800000
call fcn.0059fbe5
mov ebx, dword [ebp + 0x20]
add ebx, dword [ebp + 0x38]
add ebx, dword [ebp + 0x58]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x40000000
and ebx, ebx
je 0x548cd1
mov ebp, dword [esp + 0x2c]
cmp dword [ebp + 0xe0], 0
je 0x548cd1
mov eax, 1
jmp 0x548cd3
xor eax, eax
and eax, eax
je 0x548e56
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
and ebx, ebx
je 0x548db9
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x548d02
push 1
jmp 0x548d07
push 0
mov ebp, dword [esp + 0x30]
mov ebx, dword [ebp + 0x10]
and ebx, 0x2000
and ebx, ebx
je 0x548d1f
mov edx, 1
jmp 0x548d21
xor edx, edx
pop eax
xor eax, edx
and eax, eax
je 0x548d64
mov ebx, dword [esp + 8]
lea ebp, [0x7c27a8]
sub ebx, dword [ebp + 0x58]
push ebx
push 0
push dword [esp + 0x10]
push 0
call fcn.0059ff18
push dword [esp + 8]
call fcn.0059f728
push eax
push 0
push 0
call fcn.005a0256
jmp 0x548db4
call fcn.0059f8fe
mov ebx, eax
sub ebx, dword [esp + 8]
lea ebp, [0x7c27a8]
add ebx, dword [ebp + 0x58]
push ebx
push 0
call fcn.0059f8fe
mov ebx, eax
sub ebx, dword [esp + 0x10]
push ebx
push 0
call fcn.0059ff18
push dword [esp + 8]
call fcn.0059f728
push eax
call fcn.0059f8fe
mov ebx, eax
sub ebx, dword [esp + 0x10]
push ebx
push 0
call fcn.005a0256
jmp 0x548e56
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x2000
and ebx, ebx
je 0x548e1c
push 0
call fcn.0059f728
mov ebx, eax
sub ebx, dword [esp + 0xc]
lea ebp, [0x7c27a8]
add ebx, dword [ebp + 0x58]
push ebx
push 0
call fcn.0059f728
mov ebx, eax
sub ebx, dword [esp + 0x14]
push ebx
call fcn.0059ff18
call fcn.0059f8fe
push eax
push dword [esp + 0xc]
push 0
call fcn.0059f728
mov ebx, eax
sub ebx, dword [esp + 0x14]
push ebx
call fcn.005a0256
jmp 0x548e56
push 0
mov ebx, dword [esp + 0xc]
lea ebp, [0x7c27a8]
sub ebx, dword [ebp + 0x58]
push ebx
push 0
push dword [esp + 0x14]
call fcn.0059ff18
call fcn.0059f8fe
push eax
push dword [esp + 0xc]
push 0
push 0
call fcn.005a0256
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x80000000
and ebx, ebx
je 0x548e84
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xe0]
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xe4]
jge 0x548e84
mov eax, 1
jmp 0x548e86
xor eax, eax
and eax, eax
je 0x549051
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 2
and ebx, ebx
je 0x548eb4
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 0x2c]
add ebx, dword [ebp + 0x4c]
lea ebp, [0x7c27a8]
add ebx, dword [ebp + 0x20]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x100
and ebx, ebx
je 0x548ed6
mov ebx, dword [esp + 8]
lea ebp, [0x7c27a8]
add ebx, dword [ebp + 0x3c]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
and ebx, ebx
je 0x548fb4
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x548efd
push 1
jmp 0x548f02
push 0
mov ebp, dword [esp + 0x30]
mov ebx, dword [ebp + 0x10]
and ebx, 0x2000
and ebx, ebx
je 0x548f1a
mov edx, 1
jmp 0x548f1c
xor edx, edx
pop eax
xor eax, edx
and eax, eax
je 0x548f75
call fcn.0059f8fe
mov ebx, eax
sub ebx, dword [esp + 8]
lea ebp, [0x7c27a8]
add ebx, dword [ebp + 0x58]
push ebx
push 0
call fcn.0059f8fe
mov ebx, eax
sub ebx, dword [esp + 0x10]
push ebx
push 0
call fcn.0059ff18
push dword [esp + 8]
call fcn.0059f728
push eax
call fcn.0059f8fe
mov ebx, eax
sub ebx, dword [esp + 0x10]
push ebx
push 0
call fcn.005a0256
jmp 0x548faf
mov ebx, dword [esp + 8]
lea ebp, [0x7c27a8]
sub ebx, dword [ebp + 0x58]
push ebx
push 0
push dword [esp + 0x10]
push 0
call fcn.0059ff18
push dword [esp + 8]
call fcn.0059f728
push eax
push 0
push 0
call fcn.005a0256
jmp 0x549051
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x2000
and ebx, ebx
je 0x549001
push 0
mov ebx, dword [esp + 0xc]
lea ebp, [0x7c27a8]
sub ebx, dword [ebp + 0x58]
push ebx
push 0
push dword [esp + 0x14]
call fcn.0059ff18
call fcn.0059f8fe
push eax
push dword [esp + 0xc]
push 0
push 0
call fcn.005a0256
jmp 0x549051
push 0
call fcn.0059f728
mov ebx, eax
sub ebx, dword [esp + 0xc]
lea ebp, [0x7c27a8]
add ebx, dword [ebp + 0x58]
push ebx
push 0
call fcn.0059f728
mov ebx, eax
sub ebx, dword [esp + 0x14]
push ebx
call fcn.0059ff18
call fcn.0059f8fe
push eax
push dword [esp + 0xc]
push 0
call fcn.0059f728
mov ebx, eax
sub ebx, dword [esp + 0x14]
push ebx
call fcn.005a0256
push 0x10
call fcn.0059f6ca
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x40000000
and ebx, ebx
je 0x549247
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
cmp ebx, 0x40000000
jne 0x5491c1
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xc4]
jne 0x549116
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x7c27a8]
push dword [ebp + 4]
push 0xffffffff
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x158]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x154]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x140]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x158]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x13c]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x154]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.00443ad2
jmp 0x54918e
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x7c27a8]
push dword [ebp + 4]
push 1
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x158]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x154]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x140]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x158]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x13c]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x154]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.00443ad2
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x7c27a8]
push dword [ebp + 0x14]
push 0x40000000
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x140]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x13c]
call fcn.00505ef7
jmp 0x549247
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xe0]
and ebx, ebx
jle 0x54920c
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x7c27a8]
mov ebx, dword [ebp + 0x14]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0x40000000
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x140]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x13c]
call fcn.00505ef7
jmp 0x549247
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x7c27a8]
mov ebx, dword [ebp + 0x14]
and ebx, 0xffffff
or ebx, 0x20000000
push ebx
push 0x40000000
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x140]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x13c]
call fcn.00505ef7
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x80000000
and ebx, ebx
je 0x54943b
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
cmp ebx, 0x80000000
jne 0x5493ad
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xc4]
jne 0x549302
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x7c27a8]
push dword [ebp + 4]
push 0xffffffff
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x158]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x154]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x148]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x158]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x144]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x154]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.00443ad2
jmp 0x54937a
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x7c27a8]
push dword [ebp + 4]
push 1
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x158]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x154]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x148]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x158]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x144]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x154]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.00443ad2
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x7c27a8]
push dword [ebp + 0x14]
push connect
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x148]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x144]
call fcn.00505ef7
jmp 0x54943b
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xe0]
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xe4]
jge 0x549400
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x7c27a8]
mov ebx, dword [ebp + 0x14]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push connect
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x148]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x144]
call fcn.00505ef7
jmp 0x54943b
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x7c27a8]
mov ebx, dword [ebp + 0x14]
and ebx, 0xffffff
or ebx, 0x20000000
push ebx
push connect
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x148]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x144]
call fcn.00505ef7
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 2
and ebx, ebx
je 0x549461
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x80000000
and ebx, ebx
je 0x549461
mov eax, 1
jmp 0x549463
xor eax, eax
and eax, eax
je 0x549478
mov ebp, dword [esp + 0x2c]
lea eax, [ebp + 0x1c]
push eax
push dword [esp + 0x30]
call fcn.0045ea5c
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x100
and ebx, ebx
je 0x549616
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
cmp ebx, 0x100
jne 0x5495db
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xc4]
jne 0x549533
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x7c27a8]
push dword [ebp + 4]
push 0xffffffff
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x15c]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x15c]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x150]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x15c]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x14c]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x15c]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.00443ad2
jmp 0x5495ab
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x7c27a8]
push dword [ebp + 4]
push 1
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x15c]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x15c]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x150]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x15c]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x14c]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x15c]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.00443ad2
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x7c27a8]
push dword [ebp + 0x14]
push 0x100
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x150]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x14c]
call fcn.00505ef7
jmp 0x549616
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x7c27a8]
mov ebx, dword [ebp + 0x14]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0x100
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x150]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x14c]
call fcn.00505ef7
xor eax, eax
add esp, 0x1c
pop edi
pop ebx
pop ebp
ret 4