Function at 0x4b5ac0
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x44
mov eax, ecx
mov dword [esp + 0x10], 0
push ebx
push esi
mov esi, edx
mov dword [esp + 0xc], eax
mov ebx, dword [eax]
xor ecx, ecx
mov edx, dword [ebp + 0x14]
mov eax, 0xa2
push edi
xor edi, edi
mov dword [esp + 0x3c], ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x28], esi
mov dword [esp + 0x18], 0
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x20], edi
mov dword [esp + 0x40], ecx
mov dword [esp + 0x30], edi
mov dword [esp + 0x38], eax
mov dword [edx + 0x1c], 0xffffffff
test esi, esi
je 0x4b5b66
test byte [ecx + 0x18], 6
je 0x4b5b28
mov dword [esp + 0x28], edi
jmp 0x4b5b66
xor edi, edi
cmp dword [ebx + 0x14], edi
jle 0x4b5b64
mov ebx, dword [ebx + 0x10]
mov edx, dword [ebx]
sub esi, edx
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b5c0e
test ecx, ecx
jne 0x4b5c20
mov ecx, dword [esp + 0x2c]
add edi, edi
mov eax, dword [ecx + 0x10]
mov eax, dword [eax + edi*8 + 0xc]
mov dword [esp + 0x30], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
xor edi, edi
mov esi, dword [ebp + 8]
nop dword [eax]
mov eax, dword [ecx + 4]
mov dword [esp + 0x48], eax
test eax, eax
je 0x4b5dc6
xor ecx, ecx
lea esi, [eax + 8]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x14], esi
cmp dword [eax], ecx
jle 0x4b5d9f
mov eax, dword [esi + 0x14]
mov ebx, dword [esi + 0x10]
mov dword [esp + 0x34], ebx
test eax, eax
je 0x4b5c6d
test dword [eax + 8], 0x800
je 0x4b5c6d
mov ebx, dword [eax]
xor esi, esi
mov dword [esp + 0x44], 0
cmp dword [ebx], esi
jle 0x4b5c58
lea edi, [ebx + 0xc]
nop word [eax + eax]
push dword [esp + 0x28]
mov edx, dword [ebp + 0xc]
push dword [ebp + 8]
mov ecx, dword [edi]
call fcn.004b59f0
add esp, 8
test eax, eax
je 0x4b5c40
mov eax, dword [esp + 0x14]
inc dword [esp + 0x1c]
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x18], 2
mov word [eax + 0x20], si
mov eax, 1
mov dword [esp + 0x44], eax
jmp 0x4b5c44
movzx eax, byte [eax + 0x6ce760]
movzx ecx, byte [ecx + 0x6ce760]
sub ecx, eax
jne 0x4b5c26
inc edx
jmp 0x4b5b36
mov eax, dword [esp + 0x2c]
inc edi
add ebx, 0x10
cmp edi, dword [eax + 0x14]
jge 0x4b5b5e
mov esi, dword [esp + 0x28]
jmp 0x4b5b32
mov eax, dword [esp + 0x44]
inc esi
add edi, 0x18
cmp esi, dword [ebx]
jl 0x4b5bd0
mov ecx, dword [esp + 0x24]
test eax, eax
jne 0x4b5d7c
mov eax, dword [ebp + 8]
mov esi, dword [esp + 0x14]
test eax, eax
je 0x4b5d80
mov ebx, dword [esp + 0x34]
jmp 0x4b5c70
mov eax, dword [ebp + 8]
cmp dword [esp + 0x28], 0
je 0x4b5c84
mov edx, dword [esp + 0x30]
cmp dword [ebx + 0x48], edx
jne 0x4b5d80
test eax, eax
je 0x4b5cf3
mov edi, dword [esi + 0xc]
mov edx, edi
test edi, edi
jne 0x4b5c93
mov edx, dword [ebx]
mov esi, eax
sub esi, edx
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b5cd4
test ecx, ecx
jne 0x4b5cea
mov eax, dword [esp + 0x10]
cmp byte [eax + 0xc8], 2
jb 0x4b5cf3
test edi, edi
je 0x4b5cf3
mov eax, dword [eax + 0x110]
test eax, eax
je 0x4b5cf3
mov ecx, dword [ebp + 0x14]
add ecx, 0x2c
cmp dword [eax], ecx
je 0x4b5ced
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4b5cc7
jmp 0x4b5cf3
movzx eax, byte [eax + 0x6ce760]
movzx ecx, byte [ecx + 0x6ce760]
sub ecx, eax
jne 0x4b5d78
inc edx
jmp 0x4b5c97
mov dword [eax], 0
mov ecx, dword [esp + 0x18]
mov eax, ecx
inc ecx
mov dword [esp + 0x18], ecx
test eax, eax
jne 0x4b5d0a
mov edi, dword [esp + 0x14]
mov dword [esp + 0x20], edi
mov eax, dword [esp + 0x34]
xor edi, edi
mov ebx, dword [ebx + 4]
movsx eax, word [eax + 0x2a]
test eax, eax
jle 0x4b5d78
nop dword [eax + eax]
mov esi, dword [ebp + 0xc]
mov edx, dword [ebx]
sub esi, edx
movzx eax, byte [edx]
movzx ecx, byte [esi + edx]
cmp eax, ecx
jne 0x4b5e32
test eax, eax
jne 0x4b5e48
mov esi, dword [esp + 0x1c]
cmp esi, 1
jne 0x4b5e4e
mov eax, dword [esp + 0x14]
test byte [eax + 0x24], 4
jne 0x4b5d68
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax + 0x34]
call fcn.004b5980
test eax, eax
je 0x4b5e4e
mov ecx, dword [esp + 0x34]
inc edi
add ebx, 0x10
movsx eax, word [ecx + 0x2a]
cmp edi, eax
jl 0x4b5d20
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x14]
mov edx, dword [ebp + 0x14]
mov eax, dword [esp + 0x48]
inc ecx
add esi, 0x48
mov dword [esp + 0x24], ecx
mov dword [esp + 0x14], esi
cmp ecx, dword [eax]
jl 0x4b5b94
mov edi, dword [esp + 0x20]
test edi, edi
je 0x4b5dc3
mov eax, dword [edi + 0x2c]
mov dword [edx + 0x1c], eax
mov eax, dword [edi + 0x10]
mov dword [edx + 0x2c], eax
test byte [edi + 0x24], 8
je 0x4b5dbc
or dword [edx + 4], 0x100000
mov eax, dword [eax + 0x48]
mov dword [esp + 0x30], eax
mov esi, dword [ebp + 8]
cmp dword [esp + 0x28], 0
mov eax, dword [esp + 0x18]
jne 0x4b6104
test esi, esi
je 0x4b6104
test eax, eax
jne 0x4b6104
mov eax, dword [esp + 0x10]
xor ebx, ebx
mov dword [esp + 0x24], ebx
cmp dword [eax + 0x78], ebx
je 0x4b5ee8
movzx edi, byte [eax + 0x90]
cmp edi, 0x7c
je 0x4b5eb0
mov edx, 0x70ec64
sub esi, edx
nop
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b5e95
test ecx, ecx
jne 0x4b5ea7
mov eax, dword [ebp + 0x14]
mov dword [eax + 0x1c], 1
jmp 0x4b5edd
movzx ecx, byte [ecx + 0x6ce760]
movzx eax, byte [eax + 0x6ce760]
sub eax, ecx
jne 0x4b5d68
inc edx
jmp 0x4b5d27
mov eax, dword [esp + 0x14]
inc esi
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x1c], esi
movsx eax, word [eax + 0x28]
cmp edi, eax
jne 0x4b5e7e
mov edx, dword [ebp + 0x14]
or eax, 0xffffffff
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x24]
mov word [edx + 0x20], ax
jmp 0x4b5d83
mov edx, dword [ebp + 0x14]
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x24]
movsx eax, di
mov word [edx + 0x20], ax
jmp 0x4b5d83
movzx eax, byte [eax + 0x6ce760]
movzx ecx, byte [ecx + 0x6ce760]
sub ecx, eax
jne 0x4b5ead
inc edx
jmp 0x4b5e10
mov esi, dword [ebp + 8]
cmp edi, 0x7b
je 0x4b5ee8
mov edx, 0x70ec78
sub esi, edx
nop dword [eax]
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b5f8e
test ecx, ecx
jne 0x4b5fa4
mov eax, dword [ebp + 0x14]
mov dword [eax + 0x1c], ebx
mov ebx, dword [esp + 0x10]
mov ebx, dword [ebx + 0x78]
mov dword [esp + 0x24], ebx
mov eax, dword [ebp + 0x10]
test dword [eax + 0x18], 0x200
je 0x4b5f30
mov edi, dword [eax + 8]
test edi, edi
je 0x4b5f30
mov esi, dword [ebp + 8]
mov edx, str.excluded
sub esi, edx
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b5faa
test ecx, ecx
jne 0x4b5fc0
mov eax, dword [edi + 0x14]
mov ebx, dword [eax + 0x18]
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x24], ebx
mov dword [eax + 0x1c], 2
test ebx, ebx
je 0x4b610c
mov eax, dword [ebx + 0x48]
xor edi, edi
movsx ecx, word [ebx + 0x2a]
mov dword [esp + 0x30], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x18], 1
mov dword [esp + 0x44], eax
mov dword [esp + 0x34], ecx
test ecx, ecx
jle 0x4b5ff7
mov ebx, dword [ebp + 0xc]
mov edx, dword [eax]
sub ebx, edx
movzx eax, byte [edx]
movzx esi, byte [ebx + edx]
cmp eax, esi
jne 0x4b5fc6
test eax, eax
jne 0x4b5fd8
mov ebx, dword [esp + 0x24]
mov esi, 0xffffffff
mov ecx, dword [esp + 0x34]
movsx eax, word [ebx + 0x28]
cmp edi, eax
cmove edi, esi
jmp 0x4b5ffa
movzx eax, byte [eax + 0x6ce760]
movzx ecx, byte [ecx + 0x6ce760]
sub ecx, eax
jne 0x4b5ee8
inc edx
jmp 0x4b5ec0
movzx eax, byte [eax + 0x6ce760]
movzx ecx, byte [ecx + 0x6ce760]
sub ecx, eax
jne 0x4b5f30
inc edx
jmp 0x4b5f05
movzx ecx, byte [eax + 0x6ce760]
movzx eax, byte [esi + 0x6ce760]
sub ecx, eax
jne 0x4b5fdb
inc edx
jmp 0x4b5f67
mov eax, dword [esp + 0x44]
inc edi
mov ecx, dword [esp + 0x34]
add eax, 0x10
mov dword [esp + 0x44], eax
cmp edi, ecx
jl 0x4b5f60
mov ebx, dword [esp + 0x24]
or esi, 0xffffffff
cmp edi, ecx
jl 0x4b601d
mov ecx, dword [ebp + 0xc]
call fcn.004ba8a0
mov ecx, dword [esp + 0x34]
test eax, eax
je 0x4b6015
test byte [ebx + 0x24], 0x40
cmove edi, esi
cmp edi, ecx
jge 0x4b610c
mov esi, dword [ebp + 0x14]
inc dword [esp + 0x1c]
mov eax, dword [esi + 0x1c]
cmp eax, 2
jne 0x4b606f
mov eax, dword [esp + 0x10]
mov ecx, dword [ebp + 0x10]
cmp byte [eax + 0xc8], 2
jb 0x4b6050
mov word [esi + 0x20], di
mov dword [esi + 0x2c], ebx
mov dword [esp + 0x38], 0xa2
jmp 0x4b6112
mov eax, dword [ecx + 8]
mov dword [esp + 0x38], 0xab
mov eax, dword [eax + 0x18]
add eax, edi
or dword [esi + 4], 0x400000
mov dword [esi + 0x1c], eax
jmp 0x4b6112
test edi, edi
jns 0x4b608b
mov byte [esi + 1], 0x44
mov dword [esi + 0x2c], ebx
mov word [esi + 0x20], di
mov dword [esp + 0x38], 0x4d
jmp 0x4b610f
test eax, eax
jne 0x4b60d6
cmp edi, 0x20
jl 0x4b60b2
mov ecx, dword [esp + 0x10]
or eax, 0xffffffff
mov dword [esp + 0x38], 0x4d
or dword [ecx + 0x88], eax
mov dword [esi + 0x2c], ebx
mov word [esi + 0x20], di
jmp 0x4b610f
mov ecx, edi
mov dword [esp + 0x38], 0x4d
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x10]
or dword [ecx + 0x88], eax
mov dword [esi + 0x2c], ebx
mov word [esi + 0x20], di
jmp 0x4b610f
cmp edi, 0x20
jl 0x4b60e0
or eax, 0xffffffff
jmp 0x4b60e9
mov eax, 1
mov ecx, edi
shl eax, cl
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], 0x4d
or dword [ecx + 0x8c], eax
mov dword [esi + 0x2c], ebx
mov word [esi + 0x20], di
jmp 0x4b610f
mov esi, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
jmp 0x4b611a
mov esi, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x20]
mov ebx, dword [esp + 0x1c]
test ebx, ebx
jne 0x4b615a
cmp eax, 1
jne 0x4b615a
test edi, edi
je 0x4b615a
test byte [ecx + 0x18], 0x20
jne 0x4b615a
mov ecx, dword [ebp + 0xc]
call fcn.004ba8a0
test eax, eax
je 0x4b615a
mov eax, dword [edi + 0x10]
test byte [eax + 0x24], 0x40
jne 0x4b615a
mov ebx, 1
mov byte [esi + 1], 0x44
or eax, 0xffffffff
mov dword [esp + 0x1c], ebx
mov word [esi + 0x20], ax
mov ecx, dword [ebp + 0x10]
test byte [ecx + 0x18], 0x80
je 0x4b6247
test ebx, ebx
jne 0x4b624b
mov esi, dword [ebp + 8]
test esi, esi
jne 0x4b6229
mov eax, dword [ecx + 8]
mov dword [esp + 0x34], eax
cmp dword [eax], ebx
jle 0x4b6259
mov ecx, dword [esp + 0x34]
add eax, 8
mov dword [esp + 0x44], eax
mov edi, dword [eax]
test edi, edi
je 0x4b620f
mov esi, dword [ebp + 0xc]
mov edx, edi
sub esi, edi
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b61f2
test ecx, ecx
jne 0x4b6204
mov ecx, dword [ebp + 0x10]
lea eax, [ebx + ebx*2]
mov edx, dword [esp + 0x34]
mov ecx, dword [ecx + 0x18]
mov eax, dword [edx + eax*8 + 4]
test cl, 1
jne 0x4b625f
test byte [eax + 4], 0x10
je 0x4b625f
push edi
push str.misuse_of_aliased_aggregate__s
push dword [esp + 0x18]
call fcn.00483c70
add esp, 0xc
mov eax, 2
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, byte [eax + 0x6ce760]
movzx ecx, byte [ecx + 0x6ce760]
sub ecx, eax
jne 0x4b6207
inc edx
jmp 0x4b61a1
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x34]
inc ebx
add eax, 0x18
mov dword [esp + 0x44], eax
cmp ebx, dword [ecx]
jl 0x4b6194
mov ebx, dword [esp + 0x1c]
mov ecx, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
mov ecx, dword [ecx + 0xc]
inc dword [esp + 0x3c]
mov dword [ebp + 0x10], ecx
test ecx, ecx
je 0x4b6310
mov edx, dword [ebp + 0x14]
mov edi, dword [esp + 0x20]
jmp 0x4b5b70
test ebx, ebx
je 0x4b6226
cmp ebx, 1
jne 0x4b6450
jmp 0x4b64bd
mov ebx, dword [esp + 0x1c]
jmp 0x4b6229
test ecx, 0x4000
jne 0x4b627b
test dword [eax + 4], 0x8000
je 0x4b627b
push edi
push str.misuse_of_aliased_window_function__s
jmp 0x4b61da
mov cl, byte [eax]
cmp cl, 0xab
jne 0x4b6285
mov cl, byte [eax + 0x26]
cmp cl, 0xac
jne 0x4b628f
mov eax, dword [eax + 0x14]
jmp 0x4b6299
cmp cl, 0x86
jne 0x4b62bd
mov eax, dword [eax + 0x14]
mov eax, dword [eax]
mov eax, dword [eax]
cmp eax, 1
je 0x4b62bd
push 0x70ecc4
push dword [esp + 0x14]
call fcn.00483c70
add esp, 8
mov eax, 2
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x3c]
mov esi, dword [ebp + 0x14]
push ecx
push 0x71dcfe
push esi
push ebx
mov ebx, dword [esp + 0x20]
mov ecx, ebx
call fcn.004b5820
add esp, 0x10
cmp byte [ebx + 0xc8], 2
jb 0x4b6542
mov eax, dword [ebx + 0x110]
test eax, eax
je 0x4b6542
cmp dword [eax], esi
je 0x4b6305
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4b62f5
jmp 0x4b6542
mov dword [eax], 0
jmp 0x4b6542
test esi, esi
jne 0x4b6453
mov esi, dword [ebp + 0x14]
mov ebx, dword [esi + 4]
test bl, 0x40
je 0x4b6376
mov edx, dword [esp + 0x2c]
cmp byte [edx + 0xa5], 0
jne 0x4b63d8
mov eax, dword [esp + 0x40]
test dword [eax + 0x18], 0x10000
je 0x4b63cb
mov eax, dword [edx + 0x24]
mov ecx, dword [edx + 0x20]
xor edx, edx
mov dword [esp + 0x4c], eax
mov eax, ecx
and eax, 0x10000001
cmp eax, 1
jne 0x4b636c
test edx, edx
jne 0x4b636c
mov eax, ecx
and eax, 0x40000000
or eax, edx
jne 0x4b63d8
and ecx, 0x20000000
or ecx, edx
jne 0x4b63d8
test ebx, 0x4000000
jne 0x4b644c
mov edi, dword [esi + 8]
mov esi, str.true
mov edx, edi
sub esi, edi
nop
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b6400
test ecx, ecx
jne 0x4b6412
mov ecx, dword [ebp + 0x14]
mov eax, 0x20000000
mov edx, 0x10000000
mov byte [ecx], 0xa5
cmp byte [edi + 4], 0
cmove eax, edx
or eax, ebx
mov dword [ecx + 4], eax
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [edx + 0x20]
and eax, 0x40000000
or eax, 0
je 0x4b6376
push dword [ebp + 0xc]
push str.double_quoted_string_literal:___w_
push 0x1c
call fcn.00482ff0
add esp, 0xc
mov byte [esi], 0x71
mov dword [esi + 0x2c], 0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, byte [eax + 0x6ce760]
movzx ecx, byte [ecx + 0x6ce760]
sub ecx, eax
jne 0x4b6418
inc edx
jmp 0x4b6390
mov esi, str.false
mov edx, edi
sub esi, edi
movzx ecx, byte [edx]
movzx eax, byte [esi + edx]
cmp ecx, eax
jne 0x4b6437
test ecx, ecx
je 0x4b63a3
inc edx
jmp 0x4b6421
movzx eax, byte [eax + 0x6ce760]
movzx ecx, byte [ecx + 0x6ce760]
sub ecx, eax
jne 0x4b644c
inc edx
jmp 0x4b6421
mov ebx, dword [esp + 0x1c]
mov esi, dword [ebp + 8]
push dword [ebp + 0xc]
test ebx, ebx
mov ecx, str.ambiguous_column_name
mov eax, str.no_such_column
cmovne eax, ecx
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x4b6483
push esi
push ecx
push eax
push str._s:__s._s._s
push dword [esp + 0x24]
call fcn.00483c70
add esp, 0x18
jmp 0x4b64ae
test esi, esi
je 0x4b649c
push esi
push eax
push 0x70ed3c
push dword [esp + 0x20]
call fcn.00483c70
add esp, 0x14
jmp 0x4b64ae
push eax
push 0x70ed34
push dword [esp + 0x1c]
call fcn.00483c70
add esp, 0x10
mov eax, dword [esp + 0x10]
mov byte [eax + 0x11], 1
mov eax, dword [esp + 0x40]
inc dword [eax + 0x14]
mov esi, dword [ebp + 0x14]
movzx eax, word [esi + 0x20]
test ax, ax
js 0x4b64fa
mov edi, dword [esp + 0x20]
test edi, edi
je 0x4b64fa
movsx edx, ax
mov eax, 0x3f
cmp edx, 0x40
cmovge edx, eax
xor eax, eax
xor ecx, ecx
bts eax, edx
cmp edx, 0x20
cmovae ecx, eax
xor eax, ecx
cmp edx, 0x40
cmovae ecx, eax
or dword [edi + 0x38], eax
or dword [edi + 0x3c], ecx
mov edx, dword [esi + 0xc]
mov edi, dword [esp + 0x2c]
test edx, edx
je 0x4b650c
mov ecx, edi
call fcn.004b8e40
mov edx, dword [esi + 0x10]
mov dword [esi + 0xc], 0
test edx, edx
je 0x4b6521
mov ecx, edi
call fcn.004b8e40
mov eax, dword [esp + 0x38]
or dword [esi + 4], 0x800000
mov dword [esi + 0x10], 0
mov byte [esi], al
cmp ebx, 1
jne 0x4b61e6
mov ebx, dword [esp + 0x10]
test dword [esi + 4], 0x400000
jne 0x4b6561
mov eax, dword [ebp + 0x10]
mov edx, esi
mov ecx, ebx
push dword [eax + 4]
push dword [esp + 0x34]
call fcn.004c5580
add esp, 8
mov ecx, dword [esp + 0x40]
mov eax, dword [ebp + 0x10]
inc dword [ecx + 0x10]
cmp ecx, eax
je 0x4b657a
nop
mov ecx, dword [ecx + 0xc]
inc dword [ecx + 0x10]
cmp ecx, eax
jne 0x4b6570
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret