Function at 0x4111e0
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get process heap flags
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x44e768
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [0x463858]
xor eax, esp
mov dword [esp + 0x68], eax
push ebx
push esi
push edi
mov eax, dword [0x463858]
xor eax, esp
push eax
lea eax, [esp + 0x80]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x18], ebx
mov edi, dword [ebp + 8]
mov dword [esp + 0x14], edi
call fcn.00410a80
mov eax, dword [edi + 8]
movsx esi, word [eax + 0x10]
imul esi, esi, 0x98
add esi, 0x14
push esi
call fcn.0042e80d
push esi
mov dword [ebx + 8], eax
push dword [edi + 8]
push eax
call fcn.00434630
mov eax, dword [ebx + 8]
xor ecx, ecx
add esp, 0x10
mov dword [esp + 0x10], 0
cmp cx, word [eax + 0x12]
jge 0x41140f
xor esi, esi
jmp 0x411270
mov eax, dword [esp + 0x14]
mov edi, dword [ebx + 8]
mov ebx, dword [eax + 8]
movsx eax, word [esi + edi + 0x14]
and eax, 0xfffffffe
add eax, 0xfffffe40
cmp eax, 0x84
ja case.0x411299.449
movzx eax, byte [eax + 0x411514]
jmp dword [eax*4 + 0x4114f0]
push 8
call fcn.0042fe83
mov edx, eax
mov dword [esi + edi + 0x1c], edx
mov ecx, dword [esi + ebx + 0x1c]
add esp, 4
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
jmp 0x4113c0
push 4
call fcn.0042fe83
mov ecx, eax
mov dword [esi + edi + 0x1c], ecx
mov eax, dword [esi + ebx + 0x1c]
add esp, 4
mov eax, dword [eax]
mov dword [ecx], eax
jmp 0x4113c0
movsx eax, word [esi + edi + 0x1a]
inc eax
push eax
call fcn.0042e80d
mov ecx, eax
movsx eax, word [esi + edi + 0x1a]
inc eax
push eax
mov dword [esi + edi + 0x1c], ecx
push dword [esi + ebx + 0x1c]
push ecx
call fcn.00434630
add esp, 0x10
jmp 0x4113c0
movsx eax, word [esi + edi + 0x1a]
add eax, 3
push eax
call fcn.0042e80d
mov ecx, eax
movsx eax, word [esi + edi + 0x1a]
add eax, 3
push eax
mov dword [esi + edi + 0x1c], ecx
push dword [esi + ebx + 0x1c]
push ecx
call fcn.00434630
add esp, 0x10
jmp 0x4113c0
push 2
call fcn.0042fe83
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x4113ba
mov eax, dword [esi + ebx + 0x1c]
mov ax, word [eax]
mov word [ecx], ax
jmp 0x4113bc
push 4
call fcn.0042fe83
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x4113ba
mov eax, dword [esi + ebx + 0x1c]
mov eax, dword [eax]
mov dword [ecx], eax
jmp 0x4113bc
push 8
call fcn.0042fe83
mov edx, eax
add esp, 4
test edx, edx
je 0x411394
mov ecx, dword [esi + ebx + 0x1c]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov dword [esi + edi + 0x1c], edx
jmp 0x4113c0
xor edx, edx
mov dword [esi + edi + 0x1c], edx
jmp 0x4113c0
push 8
call fcn.0042fe83
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x4113ba
mov eax, dword [esi + ebx + 0x1c]
movsd xmm0, qword [eax]
movsd qword [ecx], xmm0
jmp 0x4113bc
xor ecx, ecx
mov dword [esi + edi + 0x1c], ecx
test byte [esi + edi + 0x14], 1
je 0x4113e9
push 2
call fcn.0042fe83
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x4113e3
mov eax, dword [esi + ebx + 0x20]
mov ax, word [eax]
mov word [ecx], ax
jmp 0x4113e5
xor ecx, ecx
mov dword [esi + edi + 0x20], ecx
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov eax, dword [ebx + 8]
inc ecx
movsx eax, word [eax + 0x12]
add esi, 0x98
mov dword [esp + 0x10], ecx
cmp ecx, eax
jl 0x411270
mov edi, dword [esp + 0x14]
lea eax, [edi + 0xc]
push eax
lea ecx, [ebx + 0xc]
call fcn.00411a10
lea eax, [edi + 0x18]
push eax
lea ecx, [ebx + 0x18]
call fcn.00411bc0
lea eax, [edi + 0x24]
push eax
lea ecx, [ebx + 0x24]
call fcn.00411a10
lea eax, [edi + 0x30]
push eax
lea ecx, [ebx + 0x30]
call fcn.00411bc0
lea eax, [edi + 0x3c]
push eax
lea ecx, [ebx + 0x3c]
call fcn.00411e20
lea eax, [edi + 0x48]
push eax
lea ecx, [ebx + 0x48]
call fcn.00411fd0
lea eax, [edi + 0x54]
push eax
lea ecx, [ebx + 0x54]
call fcn.004120f0
mov ecx, dword [edi + 0x70]
mov dword [ebx + 0x70], ecx
mov ecx, dword [edi + 0x74]
mov dword [ebx + 0x74], ecx
mov ecx, dword [edi + 0x78]
mov dword [ebx + 0x78], ecx
mov eax, ebx
mov ecx, dword [esp + 0x80]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.0042f36b
mov esp, ebp
pop ebp
ret 4
push 0xd
push str.RowImpl::Ctor
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0xf
mov dword [esp + 0x34], 0
mov byte [esp + 0x24], 0
call fcn.00401520
push str.Found_an_unknown_sqltype__
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x3c]
push eax
mov dword [esp + 0x94], 0
call fcn.0040a770
add esp, 0xc
lea eax, [esp + 0x34]
push 0x45e4d8
push eax
call fcn.00434d0b
or edx, dword [ebx]
inc ecx
add al, ah
adc al, byte [ecx]
pushfd
adc eax, dword [ecx]
push esi
adc eax, dword [ecx]
cmp dl, byte [ebx]
inc ecx
add byte [eax - 0x3cffbeee], ah
adc al, byte [ecx]
jo 0x411521
inc ecx
add byte [edx + 0x4114], bl
or byte [eax], cl
or byte [ecx], al
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [edx], al
or byte [ebx], al
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [ebx], al
or byte [eax], cl
or byte [eax + ecx], al
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
add eax, 134744072
or byte [eax], cl
or byte [eax], cl
or byte [134744072], al
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [134744072], al
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [esi], al
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [esi], al
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [edi], al
int3