Function at 0x4f3e36
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
push ebx
push edi
mov edx, 7
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x4f3e3e
call fcn.0052fae0
mov ebp, dword [esp + 0x2c]
push dword [ebp + 8]
call fcn.0051cb35
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0xf4]
call fcn.0051ccce
push eax
call fcn.0051cca4
push eax
push 0
push 0
call fcn.0051caea
push 0x10
call fcn.0051cb4c
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x14]
call fcn.005289c3
mov dword [esp + 0x18], eax
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x128]
dec ebx
mov dword [esp + 0x14], ebx
jmp 0x4f3eac
xor eax, eax
cmp eax, dword [esp + 0x14]
jg 0x4f41a8
cmp dword [esp + 0x18], 0
je 0x4f3f68
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x14]
call fcn.00528fb2
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x3c]
cmp ebx, dword [esp + 0x14]
jl 0x4f3f68
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
cmp dword [ebp + 0x44], 0
je 0x4f3f05
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x2c]
and ebx, ebx
jne 0x4f3f05
mov eax, 1
jmp 0x4f3f07
xor eax, eax
and eax, eax
je 0x4f3f2a
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
lea eax, [ebp + 8]
mov ebx, eax
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xa0]
je 0x4f3f2a
mov eax, 1
jmp 0x4f3f2c
xor eax, eax
and eax, eax
je 0x4f3f44
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
lea eax, [ebp + 8]
push eax
push dword [esp + 0x30]
call fcn.0044d275
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x14]
call fcn.00528d18
and eax, eax
je 0x4f3f58
xor eax, eax
jmp 0x4f3f5d
mov eax, 1
and eax, eax
je 0x4f3f63
jmp 0x4f3f68
jmp 0x4f3ecf
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x50]
cmp ebx, dword [esp + 0x14]
jne 0x4f3f8a
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 2
and ebx, ebx
je 0x4f3f8a
mov eax, 1
jmp 0x4f3f8c
xor eax, eax
and eax, eax
je 0x4f3fa8
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x80000000
and ebx, ebx
jne 0x4f3fa8
mov eax, 1
jmp 0x4f3faa
xor eax, eax
and eax, eax
je 0x4f3fbf
mov ebp, dword [esp + 0x2c]
lea eax, [ebp + 0x1c]
push eax
push dword [esp + 0x30]
call fcn.0044d275
mov ebx, dword [esp + 0x14]
and ebx, ebx
jne 0x4f3fdf
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x80
and ebx, ebx
je 0x4f3fdf
mov eax, 1
jmp 0x4f3fe1
xor eax, eax
and eax, eax
je 0x4f40ad
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
and ebx, ebx
je 0x4f4053
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x4f402a
lea ebp, [0x6b0dfc]
push dword [ebp + 0x10]
call fcn.0051ccce
push eax
push 1
push 0
push 0
call fcn.0051ce6a
jmp 0x4f4051
lea ebp, [0x6b0dfc]
push dword [ebp + 0x10]
call fcn.0051ccce
push eax
push 1
push 0
call fcn.0051cca4
mov ebx, eax
dec ebx
push ebx
call fcn.0051ce6a
jmp 0x4f40ad
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x4f4086
lea ebp, [0x6b0dfc]
push dword [ebp + 0x10]
push 1
call fcn.0051cca4
push eax
push 0
push 0
call fcn.0051ce6a
jmp 0x4f40ad
lea ebp, [0x6b0dfc]
push dword [ebp + 0x10]
push 1
call fcn.0051cca4
push eax
call fcn.0051ccce
mov ebx, eax
dec ebx
push ebx
push 0
call fcn.0051ce6a
cmp dword [esp + 0x18], 0
je 0x4f415e
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x14]
call fcn.00528f78
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x3c]
cmp ebx, dword [esp + 0x14]
jl 0x4f415e
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
cmp dword [ebp + 0x44], 0
je 0x4f40fb
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x2c]
cmp ebx, 1
jne 0x4f40fb
mov eax, 1
jmp 0x4f40fd
xor eax, eax
and eax, eax
je 0x4f4120
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
lea eax, [ebp + 8]
mov ebx, eax
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xa0]
je 0x4f4120
mov eax, 1
jmp 0x4f4122
xor eax, eax
and eax, eax
je 0x4f413a
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0x18]
lea eax, [ebp + 8]
push eax
push dword [esp + 0x30]
call fcn.0044d275
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x14]
call fcn.00528d18
and eax, eax
je 0x4f414e
xor eax, eax
jmp 0x4f4153
mov eax, 1
and eax, eax
je 0x4f4159
jmp 0x4f415e
jmp 0x4f40c4
mov ebp, dword [esp + 0x2c]
cmp dword [ebp + 0xa0], 0
je 0x4f4185
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + 0xa0]
mov ebx, dword [ebp + 0x34]
cmp ebx, dword [esp + 0x14]
jne 0x4f4185
mov eax, 1
jmp 0x4f4187
xor eax, eax
and eax, eax
je 0x4f419e
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0xa0]
push dword [esp + 0x30]
call fcn.0044d275
dec dword [esp + 0x14]
jno 0x4f3eac
push 0x50
call fcn.0051cb4c
call fcn.0051db05
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xf4]
and ebx, 0xffffff
push ebx
push 0
call fcn.0051cee4
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xf4]
and ebx, 0xffffff
or ebx, 0xa0000000
push ebx
push 0x3f000000
call fcn.0051cee4
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xf4]
and ebx, 0xffffff
or ebx, 0xff000000
push ebx
push 0x3f800000
call fcn.0051cee4
lea ebp, [0x6b0dfc]
mov ebx, dword [ebp + 0x20]
add ebx, dword [ebp + 0x38]
add ebx, dword [ebp + 0x58]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x40000000
and ebx, ebx
je 0x4f424c
mov ebp, dword [esp + 0x2c]
cmp dword [ebp + 0xe0], 0
je 0x4f424c
mov eax, 1
jmp 0x4f424e
xor eax, eax
and eax, eax
je 0x4f43d1
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
and ebx, ebx
je 0x4f4334
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x4f427d
push 1
jmp 0x4f4282
push 0
mov ebp, dword [esp + 0x30]
mov ebx, dword [ebp + 0x10]
and ebx, 0x2000
and ebx, ebx
je 0x4f429a
mov edx, 1
jmp 0x4f429c
xor edx, edx
pop eax
xor eax, edx
and eax, eax
je 0x4f42df
mov ebx, dword [esp + 8]
lea ebp, [0x6b0dfc]
sub ebx, dword [ebp + 0x58]
push ebx
push 0
push dword [esp + 0x10]
push 0
call fcn.0051d5f5
push dword [esp + 8]
call fcn.0051cca4
push eax
push 0
push 0
call fcn.0051d81e
jmp 0x4f432f
call fcn.0051ccce
mov ebx, eax
sub ebx, dword [esp + 8]
lea ebp, [0x6b0dfc]
add ebx, dword [ebp + 0x58]
push ebx
push 0
call fcn.0051ccce
mov ebx, eax
sub ebx, dword [esp + 0x10]
push ebx
push 0
call fcn.0051d5f5
push dword [esp + 8]
call fcn.0051cca4
push eax
call fcn.0051ccce
mov ebx, eax
sub ebx, dword [esp + 0x10]
push ebx
push 0
call fcn.0051d81e
jmp 0x4f43d1
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x2000
and ebx, ebx
je 0x4f4397
push 0
call fcn.0051cca4
mov ebx, eax
sub ebx, dword [esp + 0xc]
lea ebp, [0x6b0dfc]
add ebx, dword [ebp + 0x58]
push ebx
push 0
call fcn.0051cca4
mov ebx, eax
sub ebx, dword [esp + 0x14]
push ebx
call fcn.0051d5f5
call fcn.0051ccce
push eax
push dword [esp + 0xc]
push 0
call fcn.0051cca4
mov ebx, eax
sub ebx, dword [esp + 0x14]
push ebx
call fcn.0051d81e
jmp 0x4f43d1
push 0
mov ebx, dword [esp + 0xc]
lea ebp, [0x6b0dfc]
sub ebx, dword [ebp + 0x58]
push ebx
push 0
push dword [esp + 0x14]
call fcn.0051d5f5
call fcn.0051ccce
push eax
push dword [esp + 0xc]
push 0
push 0
call fcn.0051d81e
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x80000000
and ebx, ebx
je 0x4f43ff
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xe0]
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xe4]
jge 0x4f43ff
mov eax, 1
jmp 0x4f4401
xor eax, eax
and eax, eax
je 0x4f45cc
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 2
and ebx, ebx
je 0x4f442f
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 0x2c]
add ebx, dword [ebp + 0x4c]
lea ebp, [0x6b0dfc]
add ebx, dword [ebp + 0x20]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x100
and ebx, ebx
je 0x4f4451
mov ebx, dword [esp + 8]
lea ebp, [0x6b0dfc]
add ebx, dword [ebp + 0x3c]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
and ebx, ebx
je 0x4f452f
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 8
and ebx, ebx
je 0x4f4478
push 1
jmp 0x4f447d
push 0
mov ebp, dword [esp + 0x30]
mov ebx, dword [ebp + 0x10]
and ebx, 0x2000
and ebx, ebx
je 0x4f4495
mov edx, 1
jmp 0x4f4497
xor edx, edx
pop eax
xor eax, edx
and eax, eax
je 0x4f44f0
call fcn.0051ccce
mov ebx, eax
sub ebx, dword [esp + 8]
lea ebp, [0x6b0dfc]
add ebx, dword [ebp + 0x58]
push ebx
push 0
call fcn.0051ccce
mov ebx, eax
sub ebx, dword [esp + 0x10]
push ebx
push 0
call fcn.0051d5f5
push dword [esp + 8]
call fcn.0051cca4
push eax
call fcn.0051ccce
mov ebx, eax
sub ebx, dword [esp + 0x10]
push ebx
push 0
call fcn.0051d81e
jmp 0x4f452a
mov ebx, dword [esp + 8]
lea ebp, [0x6b0dfc]
sub ebx, dword [ebp + 0x58]
push ebx
push 0
push dword [esp + 0x10]
push 0
call fcn.0051d5f5
push dword [esp + 8]
call fcn.0051cca4
push eax
push 0
push 0
call fcn.0051d81e
jmp 0x4f45cc
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x2000
and ebx, ebx
je 0x4f457c
push 0
mov ebx, dword [esp + 0xc]
lea ebp, [0x6b0dfc]
sub ebx, dword [ebp + 0x58]
push ebx
push 0
push dword [esp + 0x14]
call fcn.0051d5f5
call fcn.0051ccce
push eax
push dword [esp + 0xc]
push 0
push 0
call fcn.0051d81e
jmp 0x4f45cc
push 0
call fcn.0051cca4
mov ebx, eax
sub ebx, dword [esp + 0xc]
lea ebp, [0x6b0dfc]
add ebx, dword [ebp + 0x58]
push ebx
push 0
call fcn.0051cca4
mov ebx, eax
sub ebx, dword [esp + 0x14]
push ebx
call fcn.0051d5f5
call fcn.0051ccce
push eax
push dword [esp + 0xc]
push 0
call fcn.0051cca4
mov ebx, eax
sub ebx, dword [esp + 0x14]
push ebx
call fcn.0051d81e
push 0x10
call fcn.0051cb4c
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x40000000
and ebx, ebx
je 0x4f47c2
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
cmp ebx, 0x40000000
jne 0x4f473c
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xc4]
jne 0x4f4691
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x6b0dfc]
push dword [ebp + 4]
push 0xffffffff
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x160]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x15c]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x148]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x160]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x144]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x15c]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.0043e43a
jmp 0x4f4709
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x6b0dfc]
push dword [ebp + 4]
push 1
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x160]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x15c]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x148]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x160]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x144]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x15c]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.0043e43a
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6b0dfc]
push dword [ebp + 0x14]
push 0x40000000
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x148]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x144]
call fcn.004bea65
jmp 0x4f47c2
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xe0]
and ebx, ebx
jle 0x4f4787
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6b0dfc]
mov ebx, dword [ebp + 0x14]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0x40000000
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x148]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x144]
call fcn.004bea65
jmp 0x4f47c2
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6b0dfc]
mov ebx, dword [ebp + 0x14]
and ebx, 0xffffff
or ebx, 0x20000000
push ebx
push 0x40000000
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x148]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x144]
call fcn.004bea65
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x80000000
and ebx, ebx
je 0x4f49b6
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
cmp ebx, 0x80000000
jne 0x4f4928
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xc4]
jne 0x4f487d
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x6b0dfc]
push dword [ebp + 4]
push 0xffffffff
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x160]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x15c]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x150]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x160]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x14c]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x15c]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.0043e43a
jmp 0x4f48f5
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x6b0dfc]
push dword [ebp + 4]
push 1
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x160]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x15c]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x150]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x160]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x14c]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x15c]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.0043e43a
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6b0dfc]
push dword [ebp + 0x14]
push closesocket
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x150]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x14c]
call fcn.004bea65
jmp 0x4f49b6
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xe0]
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xe4]
jge 0x4f497b
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6b0dfc]
mov ebx, dword [ebp + 0x14]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push closesocket
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x150]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x14c]
call fcn.004bea65
jmp 0x4f49b6
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6b0dfc]
mov ebx, dword [ebp + 0x14]
and ebx, 0xffffff
or ebx, 0x20000000
push ebx
push closesocket
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x150]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x14c]
call fcn.004bea65
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 2
and ebx, ebx
je 0x4f49dc
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x80000000
and ebx, ebx
je 0x4f49dc
mov eax, 1
jmp 0x4f49de
xor eax, eax
and eax, eax
je 0x4f49f3
mov ebp, dword [esp + 0x2c]
lea eax, [ebp + 0x1c]
push eax
push dword [esp + 0x30]
call fcn.0044d275
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x100
and ebx, ebx
je 0x4f4b91
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
cmp ebx, 0x100
jne 0x4f4b56
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0xb0]
mov ebp, dword [esp + 0x2c]
cmp ebx, dword [ebp + 0xc4]
jne 0x4f4aae
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x6b0dfc]
push dword [ebp + 4]
push 0xffffffff
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x164]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x164]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x158]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x164]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x154]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x164]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.0043e43a
jmp 0x4f4b26
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp + 0x10]
and ebx, 0x10
push ebx
lea ebp, [0x6b0dfc]
push dword [ebp + 4]
push 1
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x164]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x164]
mov ebp, dword [esp + 0x40]
mov ebx, dword [ebp + 0x158]
mov ebp, dword [esp + 0x40]
mov edi, dword [ebp + 0x164]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
mov ebp, dword [esp + 0x44]
mov ebx, dword [ebp + 0x154]
mov ebp, dword [esp + 0x44]
mov edi, dword [ebp + 0x164]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
sub ebx, edi
push ebx
call fcn.0043e43a
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6b0dfc]
push dword [ebp + 0x14]
push 0x100
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x158]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x154]
call fcn.004bea65
jmp 0x4f4b91
mov ebp, dword [esp + 0x2c]
push dword [ebp + 0x10]
lea ebp, [0x6b0dfc]
mov ebx, dword [ebp + 0x14]
and ebx, 0xffffff
or ebx, 0x80000000
push ebx
push 0x100
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x158]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x154]
call fcn.004bea65
xor eax, eax
add esp, 0x1c
pop edi
pop ebx
pop ebp
ret 4