Function at 0x4ad700
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov edx, dword [ebp + 0x1c]
xor eax, eax
push ebx
mov ebx, dword [ebp + 8]
mov ecx, 0xa4
push esi
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebx]
push edi
xor edi, edi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 4], edi
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x24], ecx
mov dword [edx + 0x1c], 0xffffffff
test esi, esi
je 0x4ad79e
test byte [eax + 0x18], 6
je 0x4ad756
mov dword [ebp + 0xc], edi
jmp 0x4ad79e
mov ecx, dword [ebp - 0x18]
xor ebx, ebx
cmp dword [ecx + 0x14], ebx
jle 0x4ad79e
mov ecx, dword [ecx + 0x10]
mov eax, ecx
mov dword [ebp - 0x20], ecx
mov edx, dword [eax]
mov edi, esi
sub edi, edx
nop
movzx eax, byte [edx]
movzx esi, byte [edi + edx]
cmp eax, esi
jne 0x4ad82e
test eax, eax
jne 0x4ad840
mov ecx, dword [ebp - 0x18]
add ebx, ebx
mov eax, dword [ecx + 0x10]
mov eax, dword [eax + ebx*8 + 0xc]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0x18]
xor edi, edi
mov edx, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x10]
mov eax, dword [eax + 4]
mov dword [ebp - 0x34], eax
test eax, eax
je 0x4ad9e0
xor ecx, ecx
lea esi, [eax + 8]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 8], esi
cmp dword [eax], ecx
jle 0x4ad9ba
mov eax, dword [esi + 0x14]
mov ebx, dword [esi + 0x10]
mov dword [ebp - 0x20], ebx
test eax, eax
je 0x4ad88d
test dword [eax + 4], 0x800
je 0x4ad88d
mov ebx, dword [eax + 0x1c]
xor esi, esi
mov dword [ebp - 0x30], 0
cmp dword [ebx], esi
jle 0x4ad87a
lea edi, [ebx + 4]
push dword [ebp + 0xc]
push dword [ebp + 0x10]
push dword [ebp + 0x14]
push edi
call fcn.004d6080
add esp, 0x10
test eax, eax
je 0x4ad864
mov eax, dword [ebp - 8]
inc dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x10], 2
mov word [eax + 0x20], si
mov eax, 1
mov dword [ebp - 0x30], eax
jmp 0x4ad867
movzx ecx, byte [eax + 0x6b4c40]
movzx eax, byte [esi + 0x6b4c40]
sub ecx, eax
jne 0x4ad846
inc edx
jmp 0x4ad770
mov ecx, dword [ebp - 0x18]
inc ebx
mov eax, dword [ebp - 0x20]
add eax, 0x10
mov dword [ebp - 0x20], eax
cmp ebx, dword [ecx + 0x14]
jge 0x4ad796
mov esi, dword [ebp + 0xc]
jmp 0x4ad768
mov eax, dword [ebp - 0x30]
inc esi
add edi, 0x14
cmp esi, dword [ebx]
jl 0x4ad7f7
mov ecx, dword [ebp - 0x14]
test eax, eax
jne 0x4ad99c
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp - 8]
test eax, eax
je 0x4ad99f
mov ebx, dword [ebp - 0x20]
jmp 0x4ad890
mov eax, dword [ebp + 0x10]
cmp dword [ebp + 0xc], 0
je 0x4ad8a2
mov edx, dword [ebp - 0x1c]
cmp dword [ebx + 0x48], edx
jne 0x4ad99f
test eax, eax
je 0x4ad91c
mov edi, dword [esi + 0xc]
mov edx, edi
test edi, edi
jne 0x4ad8b5
mov edx, dword [ebx]
mov esi, eax
sub esi, edx
nop dword [eax]
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4ad8fd
test ecx, ecx
jne 0x4ad913
mov eax, dword [ebp + 8]
cmp byte [eax + 0xc8], 2
jb 0x4ad91c
test edi, edi
je 0x4ad91c
mov eax, dword [eax + 0x110]
test eax, eax
je 0x4ad91c
mov ecx, dword [ebp + 0x1c]
add ecx, 0x2c
nop
cmp dword [eax], ecx
je 0x4ad916
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4ad8f0
jmp 0x4ad91c
movzx eax, byte [eax + 0x6b4c40]
movzx ecx, byte [ecx + 0x6b4c40]
sub ecx, eax
jne 0x4ad999
inc edx
jmp 0x4ad8c0
mov dword [eax], 0
mov ecx, dword [ebp - 0x10]
mov eax, ecx
inc ecx
mov dword [ebp - 0x10], ecx
test eax, eax
jne 0x4ad92f
mov eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x20]
xor edi, edi
mov ebx, dword [ebx + 4]
movsx eax, word [eax + 0x2a]
test eax, eax
jle 0x4ad999
nop
mov esi, dword [ebp + 0x14]
mov edx, dword [ebx]
sub esi, edx
movzx eax, byte [edx]
movzx ecx, byte [esi + edx]
cmp eax, ecx
jne 0x4ada49
test eax, eax
jne 0x4ada5f
mov esi, dword [ebp - 0xc]
cmp esi, 1
jne 0x4ada65
mov eax, dword [ebp - 8]
test byte [eax + 0x24], 4
jne 0x4ad98a
mov ecx, dword [ebp + 0x14]
push ecx
push dword [eax + 0x34]
call fcn.004b0750
add esp, 8
test eax, eax
je 0x4ada65
mov ecx, dword [ebp - 0x20]
inc edi
add ebx, 0x14
movsx eax, word [ecx + 0x2a]
cmp edi, eax
jl 0x4ad940
mov ecx, dword [ebp - 0x14]
mov esi, dword [ebp - 8]
mov edx, dword [ebp + 0x1c]
mov eax, dword [ebp - 0x34]
inc ecx
add esi, 0x48
mov dword [ebp - 0x14], ecx
mov dword [ebp - 8], esi
cmp ecx, dword [eax]
jl 0x4ad7c2
mov edi, dword [ebp - 4]
test edi, edi
je 0x4ad9dd
mov eax, dword [edi + 0x2c]
mov dword [edx + 0x1c], eax
mov eax, dword [edi + 0x10]
mov dword [edx + 0x2c], eax
test byte [edi + 0x24], 8
je 0x4ad9d7
or dword [edx + 4], 0x100000
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp + 0x10]
cmp dword [ebp + 0xc], 0
mov esi, dword [ebp - 0x10]
jne 0x4add1f
test ecx, ecx
je 0x4add1f
test esi, esi
jne 0x4add1f
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x14], ebx
cmp dword [eax + 0x78], ebx
je 0x4adaf6
movzx edi, byte [eax + 0x90]
cmp edi, 0x7e
je 0x4adabf
mov edx, 0x6bae70
mov esi, ecx
sub esi, edx
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4adaa4
test ecx, ecx
jne 0x4adab6
mov eax, dword [ebp + 0x1c]
mov dword [eax + 0x1c], 1
jmp 0x4adaed
movzx ecx, byte [ecx + 0x6b4c40]
movzx eax, byte [eax + 0x6b4c40]
sub eax, ecx
jne 0x4ad98a
inc edx
jmp 0x4ad947
mov eax, dword [ebp - 8]
inc esi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xc], esi
movsx eax, word [eax + 0x28]
cmp edi, eax
jne 0x4ada8f
mov edx, dword [ebp + 0x1c]
or eax, 0xffffffff
mov esi, dword [ebp - 8]
mov ecx, dword [ebp - 0x14]
mov word [edx + 0x20], ax
jmp 0x4ad9a2
mov edx, dword [ebp + 0x1c]
mov esi, dword [ebp - 8]
mov ecx, dword [ebp - 0x14]
movsx eax, di
mov word [edx + 0x20], ax
jmp 0x4ad9a2
movzx eax, byte [eax + 0x6b4c40]
movzx ecx, byte [ecx + 0x6b4c40]
sub ecx, eax
jne 0x4adabc
inc edx
jmp 0x4ada27
mov ecx, dword [ebp + 0x10]
cmp edi, 0x7d
je 0x4adaf6
mov edx, 0x6bae74
mov esi, ecx
sub esi, edx
nop dword [eax]
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4adb9c
test ecx, ecx
jne 0x4adbb2
mov eax, dword [ebp + 0x1c]
mov dword [eax + 0x1c], ebx
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx + 0x78]
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp + 0x18]
test dword [eax + 0x18], 0x200
je 0x4adb3d
mov edi, dword [eax + 8]
test edi, edi
je 0x4adb3d
mov esi, dword [ebp + 0x10]
mov edx, str.excluded
sub esi, edx
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4adbb8
test ecx, ecx
jne 0x4adbce
mov eax, dword [edi + 0x14]
mov ebx, dword [eax + 0x18]
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x14], ebx
mov dword [eax + 0x1c], 2
test ebx, ebx
je 0x4add19
mov eax, dword [ebx + 0x48]
mov esi, 1
movsx ecx, word [ebx + 0x2a]
xor edi, edi
mov dword [ebp - 0x1c], eax
mov eax, dword [ebx + 4]
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], ecx
test ecx, ecx
jle 0x4adc04
nop word [eax + eax]
mov ebx, dword [ebp + 0x14]
mov edx, dword [eax]
sub ebx, edx
movzx eax, byte [edx]
movzx esi, byte [ebx + edx]
cmp eax, esi
jne 0x4adbd4
test eax, eax
jne 0x4adbe6
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x20]
movsx eax, word [ebx + 0x28]
cmp edi, eax
mov eax, 0xffffffff
cmove edi, eax
jmp 0x4adc01
movzx eax, byte [eax + 0x6b4c40]
movzx ecx, byte [ecx + 0x6b4c40]
sub ecx, eax
jne 0x4adaf6
inc edx
jmp 0x4adad0
movzx eax, byte [eax + 0x6b4c40]
movzx ecx, byte [ecx + 0x6b4c40]
sub ecx, eax
jne 0x4adb3d
inc edx
jmp 0x4adb13
movzx ecx, byte [eax + 0x6b4c40]
movzx eax, byte [esi + 0x6b4c40]
sub ecx, eax
jne 0x4adbe9
inc edx
jmp 0x4adb77
mov eax, dword [ebp - 0x30]
inc edi
mov ecx, dword [ebp - 0x20]
add eax, 0x14
mov dword [ebp - 0x30], eax
cmp edi, ecx
jl 0x4adb70
mov ebx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x10]
cmp edi, ecx
jl 0x4adc31
push dword [ebp + 0x14]
call fcn.004d4980
mov ecx, dword [ebp - 0x20]
add esp, 4
test eax, eax
je 0x4adc29
test dword [ebx + 0x24], 0x200
mov eax, 0xffffffff
cmove edi, eax
cmp edi, ecx
jge 0x4add1c
mov ecx, dword [ebp + 0x1c]
inc dword [ebp - 0xc]
mov eax, dword [ecx + 0x1c]
cmp eax, 2
jne 0x4adc85
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0x18]
cmp byte [eax + 0xc8], 2
jb 0x4adc64
mov word [ecx + 0x20], di
mov edi, dword [ebp - 4]
mov dword [ecx + 0x2c], ebx
mov dword [ebp - 0x24], 0xa4
jmp 0x4add22
mov eax, dword [edx + 8]
mov dword [ebp - 0x24], 0xad
mov eax, dword [eax + 0x18]
add eax, edi
or dword [ecx + 4], 0x400000
mov edi, dword [ebp - 4]
mov dword [ecx + 0x1c], eax
jmp 0x4add22
test edi, edi
jns 0x4adca0
mov byte [ecx + 1], 0x44
mov dword [ecx + 0x2c], ebx
mov word [ecx + 0x20], di
mov dword [ebp - 0x24], 0x4d
jmp 0x4add1c
test eax, eax
jne 0x4adcea
cmp edi, 0x20
jl 0x4adcc5
mov edx, dword [ebp + 8]
or eax, 0xffffffff
mov dword [ebp - 0x24], 0x4d
or dword [edx + 0x88], eax
mov dword [ecx + 0x2c], ebx
mov word [ecx + 0x20], di
jmp 0x4add1c
mov edx, dword [ebp + 8]
mov ecx, edi
mov eax, 1
mov dword [ebp - 0x24], 0x4d
shl eax, cl
mov ecx, dword [ebp + 0x1c]
or dword [edx + 0x88], eax
mov dword [ecx + 0x2c], ebx
mov word [ecx + 0x20], di
jmp 0x4add1c
cmp edi, 0x20
jl 0x4adcf4
or eax, 0xffffffff
jmp 0x4add00
mov ecx, edi
mov eax, 1
shl eax, cl
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ebp + 8]
mov dword [ebp - 0x24], 0x4d
or dword [edx + 0x8c], eax
mov dword [ecx + 0x2c], ebx
mov word [ecx + 0x20], di
jmp 0x4add1c
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 4]
mov edx, dword [ebp + 0x18]
mov ebx, dword [ebp - 0xc]
test ebx, ebx
jne 0x4add6c
cmp esi, 1
mov esi, dword [ebp + 0x14]
jne 0x4add6f
test edi, edi
je 0x4add6f
test byte [edx + 0x18], 0x28
jne 0x4add6f
push esi
call fcn.004d4980
add esp, 4
test eax, eax
je 0x4add6f
mov eax, dword [edi + 0x10]
test dword [eax + 0x24], 0x200
jne 0x4add6f
mov eax, dword [ebp + 0x1c]
mov ebx, 1
or ecx, 0xffffffff
mov dword [ebp - 0xc], ebx
mov word [eax + 0x20], cx
mov byte [eax + 1], 0x44
jmp 0x4add6f
mov esi, dword [ebp + 0x14]
mov edi, dword [ebp + 0x18]
test byte [edi + 0x18], 0x80
je 0x4ade07
test ebx, ebx
jne 0x4ae040
mov ecx, dword [ebp + 0x10]
test ecx, ecx
jne 0x4ade12
mov ecx, dword [edi + 8]
xor edx, edx
mov dword [ebp - 0x30], edx
mov eax, dword [ecx]
mov dword [ebp - 0x34], eax
test eax, eax
jle 0x4ade0f
lea ebx, [ecx + 0x10]
test byte [ebx], 3
mov edi, dword [ebx - 8]
jne 0x4adddf
test edi, edi
jne 0x4addbb
mov ecx, esi
neg ecx
sbb ecx, ecx
jmp 0x4adddb
test esi, esi
je 0x4adddf
mov edx, edi
sub esi, edi
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4addf2
test ecx, ecx
jne 0x4ade04
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov esi, dword [ebp + 0x14]
test ecx, ecx
je 0x4ade31
inc edx
add ebx, 0x14
mov dword [ebp - 0x30], edx
cmp edx, eax
jl 0x4adda7
mov ebx, dword [ebp - 0xc]
mov edi, dword [ebp + 0x18]
jmp 0x4ade0f
movzx eax, byte [eax + 0x6b4c40]
movzx ecx, byte [ecx + 0x6b4c40]
sub ecx, eax
jne 0x4addd2
inc edx
jmp 0x4addc3
test ebx, ebx
jne 0x4ae040
mov ecx, dword [ebp + 0x10]
mov edi, dword [edi + 0xc]
inc dword [ebp - 0x2c]
mov dword [ebp + 0x18], edi
test edi, edi
je 0x4adf1c
mov edx, dword [ebp + 0x1c]
mov edi, dword [ebp - 4]
mov eax, dword [ebp + 0x18]
jmp 0x4ad7a1
mov ebx, dword [ebp + 0x18]
lea eax, [edx + edx*4]
mov esi, dword [ebx + 8]
mov ecx, dword [ebx + 0x18]
mov eax, dword [esi + eax*4 + 4]
test cl, 1
jne 0x4ade69
test byte [eax + 4], 0x10
je 0x4ade69
push edi
push str.misuse_of_aliased_aggregate__s
push dword [ebp + 8]
call fcn.004c8210
add esp, 0xc
pop edi
pop esi
mov eax, 2
pop ebx
mov esp, ebp
pop ebp
ret
test dword [eax + 4], 0x8000
je 0x4ade89
test ecx, 0x4000
je 0x4ade81
mov ecx, dword [ebp - 0x28]
cmp ebx, ecx
je 0x4ade89
push edi
push str.misuse_of_aliased_window_function__s
jmp 0x4ade52
mov cl, byte [eax]
cmp cl, 0xad
jne 0x4ade93
mov cl, byte [eax + 2]
cmp cl, 0xae
jne 0x4ade9d
mov eax, dword [eax + 0x14]
jmp 0x4adea8
cmp cl, 0x88
jne 0x4adecb
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax]
cmp eax, 1
je 0x4adecb
push str.row_value_misused
push dword [ebp + 8]
call fcn.004c8210
add esp, 8
mov eax, 2
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x2c]
mov edi, dword [ebp + 0x1c]
mov ebx, dword [ebp + 8]
push eax
push 0x70c3ad
push edi
push edx
push esi
push ebx
call fcn.004b87b0
add esp, 0x18
cmp byte [ebx + 0xc8], 2
jb 0x4ae1a1
mov eax, dword [ebx + 0x110]
test eax, eax
je 0x4ae1a1
cmp dword [eax], edi
je 0x4adf11
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4adf01
jmp 0x4ae1a1
mov dword [eax], 0
jmp 0x4ae1a1
test ecx, ecx
jne 0x4ae04e
mov edi, dword [ebp + 0x1c]
mov ebx, dword [edi + 4]
test bl, 0x40
je 0x4adf7a
mov eax, dword [ebp - 0x18]
cmp byte [eax + 0xa5], cl
jne 0x4adfb8
mov ecx, dword [ebp - 0x28]
test dword [ecx + 0x18], 0x10000
je 0x4adfab
mov ecx, dword [eax + 0x20]
xor edx, edx
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x34], eax
mov eax, ecx
and eax, 0x10000001
cmp eax, 1
jne 0x4adf70
test edx, edx
jne 0x4adf70
mov eax, ecx
and eax, 0x40000000
or eax, edx
jne 0x4adfb8
and ecx, 0x20000000
or ecx, edx
jne 0x4adfb8
test ebx, 0x4000000
jne 0x4ae04b
mov edx, dword [edi + 8]
mov edi, str.true
mov esi, edx
sub edi, edx
movzx ecx, byte [esi]
movzx eax, byte [edi + esi]
cmp ecx, eax
jne 0x4adfde
test ecx, ecx
jne 0x4adff0
mov eax, 0x10000000
jmp 0x4ae014
mov eax, dword [eax + 0x20]
and eax, 0x40000000
or eax, 0
je 0x4adf7a
push esi
push str.double_quoted_string_literal:___w_
push 0x1c
call fcn.00484f60
add esp, 0xc
mov byte [edi], 0x73
mov dword [edi + 0x2c], 0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, byte [eax + 0x6b4c40]
movzx ecx, byte [ecx + 0x6b4c40]
sub ecx, eax
jne 0x4adff3
inc esi
jmp 0x4adf92
mov edi, str.false
sub edi, edx
nop word [eax + eax]
movzx eax, byte [edx]
movzx esi, byte [edi + edx]
cmp eax, esi
jne 0x4ae02b
test eax, eax
jne 0x4ae03d
mov eax, 0x20000000
mov ecx, dword [ebp + 0x1c]
or ebx, eax
pop edi
pop esi
mov eax, 1
mov dword [ecx + 4], ebx
mov byte [ecx], 0xa7
pop ebx
mov esp, ebp
pop ebp
ret
movzx ecx, byte [eax + 0x6b4c40]
movzx eax, byte [esi + 0x6b4c40]
sub ecx, eax
jne 0x4ae04b
inc edx
jmp 0x4ae000
cmp ebx, 1
je 0x4ae0b8
jmp 0x4ae04e
mov ebx, dword [ebp - 0xc]
mov edx, dword [ebp + 0xc]
test ebx, ebx
mov ecx, str.ambiguous_column_name
mov eax, str.no_such_column
cmovne eax, ecx
mov ecx, dword [ebp + 0x14]
push ecx
test edx, edx
je 0x4ae07f
push dword [ebp + 0x10]
push edx
push eax
push str._s:__s._s._s
push dword [ebp + 8]
call fcn.004c8210
add esp, 0x18
jmp 0x4ae0ab
mov edx, dword [ebp + 0x10]
test edx, edx
je 0x4ae09a
push edx
push eax
push str._s:__s._s
push dword [ebp + 8]
call fcn.004c8210
add esp, 0x14
jmp 0x4ae0ab
push eax
push str._s:__s
push dword [ebp + 8]
call fcn.004c8210
add esp, 0x10
mov eax, dword [ebp + 8]
mov byte [eax + 0x11], 1
mov eax, dword [ebp - 0x28]
inc dword [eax + 0x14]
mov edi, dword [ebp + 0x1c]
movzx eax, word [edi + 0x20]
test ax, ax
js 0x4ae156
cmp dword [ebp - 4], 0
je 0x4ae156
mov esi, dword [edi + 0x2c]
movsx edx, ax
test byte [esi + 0x24], 0x60
je 0x4ae12d
mov eax, dword [esi + 4]
lea ecx, [edx + edx*4]
test byte [eax + ecx*4 + 0x10], 0x60
je 0x4ae12d
movzx eax, word [esi + 0x2a]
cmp ax, 0x40
jl 0x4ae106
mov eax, dword [ebp - 4]
or ecx, 0xffffffff
or edx, 0xffffffff
mov dword [eax + 0x38], ecx
mov dword [eax + 0x3c], edx
jmp 0x4ae156
xor ecx, ecx
cwde
bts ecx, eax
xor edx, edx
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
mov eax, dword [ebp - 4]
cmovae edx, ecx
add ecx, 0xffffffff
adc edx, 0xffffffff
mov dword [eax + 0x38], ecx
mov dword [eax + 0x3c], edx
jmp 0x4ae156
cmp edx, 0x40
mov eax, 0x3f
cmovge edx, eax
xor eax, eax
bts eax, edx
xor ecx, ecx
cmp edx, 0x20
cmovae ecx, eax
xor eax, ecx
cmp edx, 0x40
mov edx, dword [ebp - 4]
cmovae ecx, eax
or dword [edx + 0x38], eax
or dword [edx + 0x3c], ecx
mov eax, dword [edi + 0xc]
mov esi, dword [ebp - 0x18]
test eax, eax
je 0x4ae16a
push eax
push esi
call fcn.004cb760
add esp, 8
mov eax, dword [edi + 0x10]
mov dword [edi + 0xc], 0
test eax, eax
je 0x4ae182
push eax
push esi
call fcn.004cb760
add esp, 8
mov ecx, dword [ebp - 0x24]
or dword [edi + 4], 0x800000
mov dword [edi + 0x10], 0
mov byte [edi], cl
cmp ebx, 1
jne 0x4ade5d
mov ebx, dword [ebp + 8]
test dword [edi + 4], 0x400000
jne 0x4ae1bd
mov eax, dword [ebp + 0x18]
push dword [eax + 4]
push dword [ebp - 0x1c]
push edi
push ebx
call fcn.004be7e0
add esp, 0x10
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp + 0x18]
inc dword [ecx + 0x10]
cmp ecx, eax
je 0x4ae1da
nop word [eax + eax]
mov ecx, dword [ecx + 0xc]
inc dword [ecx + 0x10]
cmp ecx, eax
jne 0x4ae1d0
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret