Function at 0x100b63d0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x20
cmp byte [esi], 0
push ebx
push edi
jne 0x100b66da
mov eax, dword [esi + 0x34]
mov edi, dword [esi + 0x38]
mov dword [esp + 0x14], eax
mov al, byte [esi + 5]
movzx ecx, al
lea ebx, [ecx + edi]
movzx ecx, byte [ebx]
mov byte [esp + 0xb], al
mov eax, esi
call fcn.100b62e0
test eax, eax
je 0x100b6432
push 0x10160fd8
push 0xe857
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call fcn.100a5f10
add esp, 0x14
mov eax, 0xb
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x14]
movzx edx, word [eax + 0x20]
sub dx, 1
mov word [esi + 0x14], dx
movzx edx, byte [esp + 0xb]
mov byte [esi + 1], 0
mov eax, dword [eax + 0x24]
mov dword [esp + 0x10], eax
mov al, byte [esi + 6]
movzx cx, al
add cx, dx
add cx, 8
movzx edx, cx
mov ecx, dword [esp + 0x10]
mov word [esi + 0xe], dx
add ecx, edi
mov dword [esi + 0x3c], ecx
movzx ecx, dx
movzx edx, al
xor eax, eax
add edx, edi
mov dword [esi + 0x44], edx
mov dword [esp + 0x1c], ecx
add ecx, edi
mov dword [esi + 0x40], ecx
mov ah, byte [ebx + 5]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x20], ecx
movzx cx, byte [ebx + 4]
mov al, byte [ebx + 6]
sub eax, 1
and eax, 0xffff
add eax, 1
mov dword [esp + 0x24], eax
xor eax, eax
mov ah, byte [ebx + 3]
or ax, cx
mov word [esi + 0x12], ax
mov edx, dword [edx + 0x20]
movzx ecx, ax
sub edx, 8
mov eax, 0xaaaaaaab
mul edx
shr edx, 2
cmp ecx, edx
jbe 0x100b64f4
push 0x10160fd8
push 0xe869
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call fcn.100a5f10
add esp, 0x14
mov eax, 0xb
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x1c]
lea edx, [eax + ecx*2]
mov eax, dword [esp + 0x10]
add eax, 0xfffffffc
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0xc], eax
mov eax, dword [edx + 4]
test dword [eax + 0x18], 0x20000000
je 0x100b65a6
cmp byte [esi + 4], 0
jne 0x100b6529
sub dword [esp + 0xc], 1
test ecx, ecx
mov dword [esp + 0x1c], 0
jle 0x100b659b
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0x14]
mov ax, word [edx]
mov ch, al
mov cl, ah
movzx eax, cx
movzx eax, ax
cmp eax, dword [esp + 0x18]
mov dword [esp + 0x20], eax
jl 0x100b6654
cmp eax, dword [esp + 0xc]
jg 0x100b6654
mov edx, dword [esi + 0x4c]
add eax, edi
push eax
push esi
call edx
movzx eax, ax
add eax, dword [esp + 0x28]
add esp, 8
cmp eax, dword [esp + 0x10]
jg 0x100b6644
mov eax, dword [esp + 0x1c]
movzx ecx, word [esi + 0x12]
add dword [esp + 0x14], 2
add eax, 1
cmp eax, ecx
mov dword [esp + 0x1c], eax
jl 0x100b653d
cmp byte [esi + 4], 0
jne 0x100b65a6
add dword [esp + 0xc], 1
xor edx, edx
mov dh, byte [ebx + 1]
mov dl, byte [ebx + 2]
movzx ebx, byte [ebx + 7]
add ebx, dword [esp + 0x24]
mov dword [esp + 0x1c], ebx
movzx eax, dx
test ax, ax
jbe 0x100b662a
movzx eax, ax
cmp eax, dword [esp + 0x18]
jl 0x100b66a6
cmp eax, dword [esp + 0xc]
jg 0x100b66a6
xor ecx, ecx
mov ch, byte [eax + edi]
xor edx, edx
mov dh, byte [eax + edi + 2]
mov cl, byte [eax + edi + 1]
mov dl, byte [eax + edi + 3]
movzx ecx, cx
test cx, cx
movzx edx, dx
mov dword [esp + 0x24], edx
jbe 0x100b6611
movzx edx, dx
movzx ebx, cx
lea edx, [edx + eax + 3]
cmp ebx, edx
jle 0x100b667d
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x1c]
movzx edx, dx
add eax, edx
cmp eax, dword [esp + 0x10]
jg 0x100b667d
add ebx, edx
test cx, cx
mov dword [esp + 0x1c], ebx
movzx eax, cx
ja 0x100b65c2
cmp ebx, dword [esp + 0x10]
jle 0x100b66cf
mov eax, 0xe8b3
call fcn.101101f0
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xe88a
call fcn.101101f0
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x10160fd8
push 0xe885
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call fcn.100a5f10
add esp, 0x14
mov eax, 0xb
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x10160fd8
push 0xe8a5
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call fcn.100a5f10
add esp, 0x14
mov eax, 0xb
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x10160fd8
push 0xe89e
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call fcn.100a5f10
add esp, 0x14
mov eax, 0xb
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
sub ebx, dword [esp + 0x18]
mov byte [esi], 1
mov word [esi + 0x10], bx
pop edi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret