Function at 0x4309ba
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
and dword [ebp - 4], 0
xor eax, eax
push ebx
mov ebx, ecx
mov dword [ebp - 0x14], edx
mov edx, dword [ebp + 0x10]
mov ecx, 0xa2
push esi
mov esi, dword [ebp + 0x14]
mov dword [ebp - 0x24], ecx
or ecx, 0xffffffff
push edi
xor edi, edi
mov dword [ebp - 0xc], eax
and dword [ebp - 0x1c], edi
mov dword [ebp - 0x2c], eax
mov eax, dword [ebx]
mov dword [esi + 0x1c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x18], eax
mov dword [ebp - 8], edi
mov dword [ebp - 0x30], edx
test ecx, ecx
je 0x430a50
test byte [edx + 0x18], 6
je 0x430a0d
and dword [ebp - 0x14], edi
jmp 0x430a50
xor edi, edi
cmp dword [eax + 0x14], edi
jle 0x430a50
mov eax, dword [eax + 0x10]
mov dword [ebp + 0x14], eax
mov edx, ecx
mov ecx, dword [eax]
call fcn.0040e407
mov ecx, dword [ebp - 0x18]
test eax, eax
je 0x430a3e
mov eax, dword [ebp + 0x14]
inc edi
add eax, 0x10
cmp edi, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x14]
mov dword [ebp + 0x14], eax
jl 0x430a1a
jmp 0x430a4a
mov eax, dword [ecx + 0x10]
add edi, edi
mov eax, dword [eax + edi*8 + 0xc]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp + 0x10]
mov edi, dword [ebp - 8]
mov eax, dword [edx + 4]
mov dword [ebp - 0x44], eax
test eax, eax
je 0x430c37
xor edi, edi
lea ecx, [eax + 8]
mov dword [ebp - 0x10], edi
mov dword [ebp + 0x14], ecx
cmp dword [eax], edi
jle 0x430c11
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0x20], edx
test eax, eax
je 0x430af6
test dword [eax + 8], 0x800
je 0x430af6
mov eax, dword [eax]
xor edi, edi
and dword [ebp - 0x28], 0
mov dword [ebp - 0x38], eax
cmp dword [eax], edi
jle 0x430ae9
lea ebx, [eax + 0xc]
push dword [ebp - 0x14]
mov edx, dword [ebp + 0xc]
push dword [ebp + 8]
mov ecx, dword [ebx]
call fcn.00430924
pop ecx
pop ecx
test eax, eax
je 0x430aca
inc dword [ebp - 4]
xor ecx, ecx
push 2
pop eax
mov dword [ebp - 0xc], eax
inc ecx
mov eax, dword [ebp + 0x14]
mov dword [ebp - 8], eax
mov word [esi + 0x20], di
mov dword [ebp - 0x28], ecx
jmp 0x430acd
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
inc edi
add ebx, 0x18
cmp edi, dword [eax]
jl 0x430a99
mov ebx, dword [ebp - 0x3c]
test ecx, ecx
mov ecx, dword [ebp + 0x14]
jne 0x430bf9
mov edx, dword [ebp - 0x20]
cmp dword [ebp + 8], 0
mov edi, dword [ebp - 0x10]
je 0x430bfc
cmp dword [ebp - 0x14], 0
je 0x430b08
mov eax, dword [ebp - 0x1c]
cmp dword [edx + 0x48], eax
jne 0x430bfc
cmp dword [ebp + 8], 0
je 0x430b44
mov edi, dword [ecx + 0xc]
mov ecx, edi
test edi, edi
jne 0x430b19
mov ecx, dword [edx]
mov edx, dword [ebp + 8]
call fcn.0040e407
test eax, eax
jne 0x430bf6
cmp byte [ebx + 0xc8], 2
jb 0x430b44
test edi, edi
je 0x430b44
lea eax, [esi + 0x2c]
xor edx, edx
push eax
mov ecx, ebx
call fcn.00438379
pop ecx
mov ecx, dword [ebp - 0xc]
mov eax, ecx
inc ecx
mov dword [ebp - 0xc], ecx
test eax, eax
jne 0x430b57
mov eax, dword [ebp + 0x14]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x20]
xor edi, edi
mov dword [ebp - 0x28], edi
mov eax, dword [ecx + 4]
movsx ecx, word [ecx + 0x2a]
mov dword [ebp - 0x38], eax
test ecx, ecx
jle 0x430bf6
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax]
call fcn.0040e407
test eax, eax
jne 0x430c8a
mov edx, dword [ebp - 4]
cmp edx, 1
jne 0x430bd6
mov eax, dword [ebp + 0x14]
test byte [eax + 0x24], 4
jne 0x430c8a
mov eax, dword [eax + 0x34]
test eax, eax
je 0x430bd6
mov ecx, dword [eax + 4]
and dword [ebp - 0x34], 0
mov dword [ebp - 0x40], ecx
test ecx, ecx
jle 0x430bd6
mov edi, dword [eax]
mov edx, dword [ebp + 0xc]
mov ecx, dword [edi]
call fcn.0040e407
test eax, eax
je 0x430c87
mov eax, dword [ebp - 0x34]
add edi, 8
inc eax
mov dword [ebp - 0x34], eax
cmp eax, dword [ebp - 0x40]
jl 0x430baf
mov edi, dword [ebp - 0x28]
mov edx, dword [ebp - 4]
mov eax, dword [ebp + 0x14]
inc edx
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x20]
push 0xffffffffffffffff
movzx ecx, di
mov dword [ebp - 4], edx
movsx eax, word [eax + 0x28]
cmp edi, eax
pop eax
cmove ecx, eax
mov word [esi + 0x20], cx
mov ecx, dword [ebp + 0x14]
mov edi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x44]
inc edi
add ecx, 0x48
mov dword [ebp - 0x10], edi
mov dword [ebp + 0x14], ecx
cmp edi, dword [eax]
jl 0x430a71
mov edi, dword [ebp - 8]
test edi, edi
je 0x430c37
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
mov eax, dword [edi + 0x10]
mov dword [esi + 0x2c], eax
test byte [edi + 0x24], 8
je 0x430c31
or dword [esi + 4], 0x100000
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0xc]
jne 0x430e62
cmp dword [ebp + 8], 0
je 0x430e62
test eax, eax
jne 0x430e62
xor edi, edi
mov dword [ebp - 0x10], edi
cmp dword [ebx + 0x78], edi
je 0x430ccb
mov al, byte [ebx + 0x90]
mov byte [ebp + 0x17], al
cmp al, 0x7c
je 0x430cb1
mov edx, dword [ebp + 8]
mov ecx, 0x538550
call fcn.0040e407
test eax, eax
jne 0x430cab
mov dword [esi + 0x1c], 1
jmp 0x430cc5
mov edi, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
inc edi
mov eax, dword [ebp - 0x38]
add eax, 0x10
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x38], eax
movsx ecx, word [edx + 0x2a]
cmp edi, ecx
jl 0x430b71
jmp 0x430bf6
cmp byte [ebp + 0x17], 0x7b
je 0x430ccb
mov edx, dword [ebp + 8]
mov ecx, 0x538554
call fcn.0040e407
test eax, eax
jne 0x430ccb
and dword [esi + 0x1c], edi
mov edi, dword [ebx + 0x78]
mov dword [ebp - 0x10], edi
mov eax, dword [ebp + 0x10]
test dword [eax + 0x18], 0x200
je 0x430d05
mov eax, dword [eax + 8]
test eax, eax
je 0x430d05
mov edx, dword [ebp + 8]
mov ecx, str.excluded
call fcn.0040e407
test eax, eax
jne 0x430d05
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 8]
mov eax, dword [eax + 0x14]
mov edi, dword [eax + 0x18]
mov dword [ebp - 0x10], edi
mov dword [esi + 0x1c], 2
test edi, edi
je 0x430e1c
mov edx, dword [ebp - 0x10]
mov eax, dword [edi + 0x48]
xor edi, edi
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc], 1
movsx ecx, word [edx + 0x2a]
mov eax, dword [edx + 4]
mov dword [ebp + 0x14], eax
mov dword [ebp - 0x38], ecx
test ecx, ecx
jle 0x430d68
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax]
call fcn.0040e407
test eax, eax
je 0x430d4f
mov eax, dword [ebp + 0x14]
inc edi
add eax, 0x10
mov dword [ebp + 0x14], eax
cmp edi, dword [ebp - 0x38]
jl 0x430d30
jmp 0x430d6c
mov edx, dword [ebp - 0x10]
movsx eax, word [edx + 0x28]
cmp edi, eax
jne 0x430d64
or eax, 0xffffffff
mov edi, eax
mov dword [ebp + 0x14], eax
jmp 0x430d99
movsx ecx, word [edx + 0x2a]
cmp edi, ecx
jl 0x430d8e
mov ecx, dword [ebp + 0xc]
call fcn.00434126
mov edx, dword [ebp - 0x10]
test eax, eax
je 0x430d8b
test byte [edx + 0x24], 0x40
movsx ecx, word [edx + 0x2a]
push 0xffffffffffffffff
pop eax
cmove edi, eax
jmp 0x430d8e
mov ecx, dword [ebp - 0x38]
mov dword [ebp + 0x14], edi
cmp edi, ecx
jge 0x430e1c
inc dword [ebp - 4]
cmp dword [esi + 0x1c], 2
jne 0x430dd9
cmp byte [ebx + 0xc8], 2
mov ecx, dword [ebp + 0x10]
jb 0x430dbe
mov word [esi + 0x20], di
mov dword [esi + 0x2c], edx
mov dword [ebp - 0x24], 0xa2
jmp 0x430e1f
mov eax, dword [ecx + 8]
mov dword [ebp - 0x24], 0xab
mov eax, dword [eax + 0x18]
add eax, edi
or dword [esi + 4], 0x400000
mov dword [esi + 0x1c], eax
jmp 0x430e1f
test edi, edi
jns 0x430de3
mov byte [esi + 1], 0x44
jmp 0x430e0e
mov ecx, dword [ebp + 0x14]
xor eax, eax
inc eax
shl eax, cl
cmp dword [esi + 0x1c], 0
push 0xffffffffffffffff
pop ecx
jne 0x430e02
cmp edi, 0x20
cmovge eax, ecx
or dword [ebx + 0x88], eax
jmp 0x430e0e
cmp edi, 0x20
cmovge eax, ecx
or dword [ebx + 0x8c], eax
mov dword [esi + 0x2c], edx
mov word [esi + 0x20], di
mov dword [ebp - 0x24], 0x4d
mov ecx, dword [ebp + 0x10]
mov edi, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 4], 0
jne 0x430e67
cmp eax, 1
jne 0x430e67
test edi, edi
je 0x430e67
test byte [ecx + 0x18], 0x20
jne 0x430e67
mov ecx, dword [ebp + 0xc]
call fcn.00434126
test eax, eax
je 0x430e67
mov eax, dword [edi + 0x10]
test byte [eax + 0x24], 0x40
jne 0x430e67
xor edi, edi
mov byte [esi + 1], 0x44
inc edi
or eax, 0xffffffff
mov dword [ebp - 4], edi
mov word [esi + 0x20], ax
jmp 0x430e6a
mov ecx, dword [ebp + 0x10]
jmp 0x430e25
mov edi, dword [ebp - 4]
mov edx, dword [ebp + 0x10]
test byte [edx + 0x18], 0x80
je 0x430ec0
test edi, edi
jne 0x430ec4
cmp dword [ebp + 8], edi
jne 0x430f05
mov eax, dword [edx + 8]
mov ecx, dword [eax]
mov dword [ebp - 0x44], ecx
test ecx, ecx
jle 0x430f02
add eax, 8
mov dword [ebp + 0x14], eax
cmp dword [eax], 0
je 0x430eaf
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax]
call fcn.0040e407
test eax, eax
je 0x430f7d
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0x44]
inc edi
add eax, 0x18
mov dword [ebp + 0x14], eax
cmp edi, ecx
jl 0x430e92
mov edx, dword [ebp + 0x10]
mov edi, dword [ebp - 4]
test edi, edi
je 0x430f05
cmp edi, 1
je 0x43109b
push dword [ebp + 0xc]
test edi, edi
mov ecx, str.ambiguous_column_name
mov eax, str.no_such_column
cmovne eax, ecx
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x431068
push dword [ebp + 8]
push ecx
push eax
push str._s:__s._s._s
push ebx
call fcn.0040e32e
add esp, 0x18
jmp 0x431091
mov edi, dword [ebp - 4]
mov edx, dword [edx + 0xc]
inc dword [ebp - 0x2c]
mov dword [ebp + 0x10], edx
test edx, edx
jne 0x430a4d
cmp dword [ebp + 8], edx
jne 0x430ecd
test byte [esi + 4], 0x40
je 0x431058
mov ecx, dword [ebp - 0x18]
cmp byte [ecx + 0xa5], dl
jne 0x431037
mov eax, dword [ebp - 0x30]
test dword [eax + 0x18], 0x10000
je 0x43102a
call fcn.0043bcd2
test eax, eax
je 0x430f61
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x20]
and eax, 0x40000000
or eax, 0
jne 0x431037
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x20]
and eax, 0x20000000
or eax, 0
je 0x431024
xor eax, eax
inc eax
jmp 0x431026
mov ecx, dword [ebp + 0x10]
imul eax, edi, 0x18
mov edx, dword [ecx + 8]
mov edx, dword [eax + edx + 4]
mov eax, ecx
test byte [eax + 0x18], 1
jne 0x430fb3
test byte [edx + 4], 0x10
je 0x430fb3
mov ecx, dword [ebp + 0x14]
push dword [ecx]
push str.misuse_of_aliased_aggregate__s
push ebx
call fcn.0040e32e
add esp, 0xc
push 2
pop eax
pop edi
pop esi
pop ebx
leave
ret
test dword [eax + 0x18], 0x4000
jne 0x430fd1
test dword [edx + 4], 0x8000
je 0x430fd1
mov ecx, dword [ebp + 0x14]
push dword [ecx]
push str.misuse_of_aliased_window_function__s
jmp 0x430fa2
mov ecx, edx
call fcn.00432931
cmp eax, 1
je 0x430fec
push str.row_value_misused
push ebx
call fcn.0040e32e
pop ecx
pop ecx
jmp 0x430fab
mov eax, dword [ebp - 0x2c]
mov ecx, ebx
push eax
push 0x536cb0
push esi
push edi
mov edi, dword [ebp + 0x10]
mov edx, dword [edi + 8]
call fcn.00430822
add esp, 0x10
cmp byte [ebx + 0xc8], 2
jb 0x431113
push esi
xor edx, edx
mov ecx, ebx
call fcn.00438379
pop ecx
jmp 0x431113
xor eax, eax
test eax, eax
jmp 0x431035
mov eax, dword [ecx + 0x20]
and eax, 0x40000000
or eax, 0
je 0x431058
push dword [ebp + 0xc]
push str.double_quoted_string_literal:___w_
push 0x1c
call fcn.0040d94a
add esp, 0xc
mov byte [esi], 0x71
and dword [esi + 0x2c], 0
xor eax, eax
inc eax
jmp 0x430fae
mov ecx, esi
call fcn.00433da2
test eax, eax
jne 0x431050
jmp 0x430ecd
cmp dword [ebp + 8], 0
je 0x431082
push dword [ebp + 8]
push eax
push str._s:__s._s
push ebx
call fcn.0040e32e
add esp, 0x14
jmp 0x431091
push eax
push str._s:__s
push ebx
call fcn.0040e32e
add esp, 0x10
mov eax, dword [ebp - 0x30]
mov byte [ebx + 0x11], 1
inc dword [eax + 0x14]
movzx eax, word [esi + 0x20]
test ax, ax
js 0x4310d5
mov edi, dword [ebp - 8]
test edi, edi
je 0x4310d2
movsx edx, ax
cmp edx, 0x40
push 0x3f
pop eax
cmovge edx, eax
xor eax, eax
xor ecx, ecx
bts eax, edx
cmp edx, 0x20
cmovae ecx, eax
xor eax, ecx
cmp edx, 0x40
cmovae ecx, eax
or dword [edi + 0x38], eax
or dword [edi + 0x3c], ecx
mov edi, dword [ebp - 4]
mov edx, dword [esi + 0xc]
test edx, edx
je 0x4310e4
mov ecx, dword [ebp - 0x18]
call fcn.004331ad
and dword [esi + 0xc], 0
mov edx, dword [esi + 0x10]
test edx, edx
je 0x4310f7
mov ecx, dword [ebp - 0x18]
call fcn.004331ad
and dword [esi + 0x10], 0
mov ecx, dword [ebp - 0x24]
or dword [esi + 4], 0x800000
mov byte [esi], cl
cmp edi, 1
jne 0x430fab
mov edi, dword [ebp + 0x10]
test dword [esi + 4], 0x400000
jne 0x43112d
push dword [edi + 4]
mov edx, esi
mov ecx, ebx
push dword [ebp - 0x1c]
call fcn.0043b07a
pop ecx
pop ecx
mov eax, dword [ebp - 0x30]
jmp 0x431135
mov eax, dword [eax + 0xc]
inc dword [eax + 0x10]
cmp eax, edi
jne 0x431132
jmp 0x431050