Function at 0x1021f380
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x2c
mov eax, ecx
mov dword [esp + 0xc], 0
push ebx
push ebp
push esi
movzx ecx, word [eax + 0x18]
mov ebx, dword [eax + 0x38]
movzx esi, byte [eax + 9]
push edi
movzx edi, word [eax + 0x12]
mov dword [esp + 0x24], eax
mov eax, dword [eax + 0x34]
mov dword [esp + 0x2c], ecx
lea ecx, [edi + ecx*2]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x34], ecx
lea ecx, [esi + ebx]
mov eax, dword [eax + 0x28]
mov dword [esp + 0x14], eax
movzx eax, byte [ecx + 7]
cmp eax, edx
mov dword [esp + 0x20], ebx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x18], edi
mov dword [esp + 0x30], ecx
jg 0x1021f64a
movzx edi, byte [ecx + 1]
movzx eax, byte [ecx + 2]
shl edi, 8
or edi, eax
lea eax, [edx - 4]
cmp edi, eax
jle 0x1021f41b
push 0x10281ad4
push 0x10ae4
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call sym.WMCommon.dll_sqlite3_log
add esp, 0x14
mov eax, 0xb
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret
test edi, edi
je 0x1021f646
movzx eax, byte [edi + ebx]
movzx ebp, byte [edi + ebx + 1]
shl eax, 8
or ebp, eax
lea eax, [edx - 4]
cmp ebp, eax
jle 0x1021f463
push 0x10281ad4
push 0x10ae7
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call sym.WMCommon.dll_sqlite3_log
add esp, 0x14
mov eax, 0xb
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret
test ebp, ebp
je 0x1021f47c
cmp byte [ebx + ebp], 0
jne 0x1021f646
cmp byte [ebx + ebp + 1], 0
jne 0x1021f646
mov eax, dword [esp + 0x34]
movzx edx, byte [edi + ebx + 2]
add eax, ebx
movzx ecx, byte [ecx + 5]
mov dword [esp + 0x28], eax
movzx eax, byte [edi + ebx + 3]
shl edx, 8
or edx, eax
shl ecx, 8
movzx eax, byte [esi + ebx + 6]
or ecx, eax
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], edx
mov dword [esp + 0x38], ecx
cmp ecx, edi
jb 0x1021f4e2
push 0x10281ad4
push 0x10aef
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call sym.WMCommon.dll_sqlite3_log
add esp, 0x14
mov eax, 0xb
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret
lea eax, [edx + edi]
mov dword [esp + 0x2c], eax
test ebp, ebp
je 0x1021f5e8
cmp eax, ebp
jbe 0x1021f520
push 0x10281ad4
push 0x10af2
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call sym.WMCommon.dll_sqlite3_log
add esp, 0x14
mov eax, 0xb
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret
movzx ecx, byte [ebx + ebp + 2]
movzx eax, byte [ebx + ebp + 3]
shl ecx, 8
or ecx, eax
mov dword [esp + 0x20], ecx
lea eax, [ecx + ebp]
cmp eax, dword [esp + 0x14]
jle 0x1021f567
push 0x10281ad4
push 0x10af4
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call sym.WMCommon.dll_sqlite3_log
add esp, 0x14
mov eax, 0xb
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret
mov eax, ebp
lea esi, [edx + ecx]
sub eax, edx
sub eax, edi
push eax
mov eax, dword [esp + 0x30]
add eax, ebx
push eax
lea eax, [esi + edi]
add eax, ebx
push eax
call sub.VCRUNTIME140.dll_memmove
mov ecx, dword [esp + 0x44]
mov edx, esi
add esp, 0xc
mov dword [esp + 0x1c], edx
mov esi, dword [esp + 0x10]
lea ebx, [ecx + edx]
mov eax, edi
mov dword [esp + 0x38], ebx
sub eax, ecx
push eax
lea eax, [ecx + esi]
push eax
lea eax, [ebx + esi]
push eax
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [esp + 0x24]
add esp, 0xc
lea edx, [eax + esi]
cmp edx, dword [esp + 0x28]
jae 0x1021f63a
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x28]
movzx ecx, byte [edx]
movzx eax, byte [edx + 1]
shl ecx, 8
or ecx, eax
cmp ecx, edi
jae 0x1021f619
mov eax, dword [esp + 0x1c]
add eax, ecx
shr eax, 8
mov byte [edx], al
mov al, byte [esp + 0x1c]
add al, cl
jmp 0x1021f628
cmp eax, dword [esp + 0x14]
jle 0x1021f590
push 0x10281ad4
push 0x10af8
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call sym.WMCommon.dll_sqlite3_log
add esp, 0x14
mov eax, 0xb
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret
cmp ecx, ebp
jae 0x1021f62b
lea eax, [ecx + ebx]
shr eax, 8
mov byte [edx], al
lea eax, [ecx + ebx]
mov byte [edx + 1], al
add edx, 2
cmp edx, esi
jb 0x1021f5c5
mov ebx, dword [esp + 0x38]
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0x30]
mov al, byte [ecx + 7]
jmp 0x1021f759
mov edi, dword [esp + 0x18]
movzx ebp, byte [ecx + 5]
mov ebx, edx
movzx eax, byte [ecx + 6]
add edx, 0xfffffffc
shl ebp, 8
or ebp, eax
mov dword [esp + 0x18], edx
cmp dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
jbe 0x1021f74f
add edi, dword [esp + 0x10]
nop word [eax + eax]
movzx esi, byte [edi]
movzx eax, byte [edi + 1]
shl esi, 8
or esi, eax
cmp esi, ebp
jb 0x1021f7c7
cmp esi, edx
jg 0x1021f7c7
mov eax, dword [esp + 0x20]
add eax, esi
push eax
mov eax, dword [esp + 0x28]
push eax
mov eax, dword [eax + 0x4c]
call eax
movzx eax, ax
add esp, 8
sub ebx, eax
mov dword [esp + 0x38], eax
cmp ebx, ebp
jl 0x1021f79c
mov edx, dword [esp + 0x14]
add eax, esi
cmp eax, edx
jg 0x1021f79c
mov eax, ebx
mov byte [edi + 1], bl
sar eax, 8
cmp dword [esp + 0x1c], 0
mov byte [edi], al
jne 0x1021f717
cmp ebx, esi
je 0x1021f731
mov eax, dword [esp + 0x24]
sub edx, ebp
push edx
mov eax, dword [eax + 0x34]
mov eax, dword [eax]
mov ecx, dword [eax + 0xe0]
mov eax, dword [esp + 0x14]
add eax, ebp
mov dword [esp + 0x20], ecx
push eax
lea eax, [ecx + ebp]
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esp + 0x28]
add esp, 0xc
mov dword [esp + 0x20], eax
jmp 0x1021f71b
mov eax, dword [esp + 0x20]
push dword [esp + 0x38]
add eax, esi
push eax
mov eax, dword [esp + 0x18]
add eax, ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 0x28]
add edi, 2
mov edx, dword [esp + 0x18]
inc ecx
mov dword [esp + 0x28], ecx
cmp ecx, dword [esp + 0x2c]
jl 0x1021f680
mov ecx, dword [esp + 0x30]
mov esi, dword [esp + 0x10]
xor al, al
mov byte [ecx + 7], 0
mov edi, dword [esp + 0x34]
mov edx, dword [esp + 0x24]
movzx eax, al
sub eax, edi
add eax, ebx
cmp eax, dword [edx + 0x14]
je 0x1021f7f2
push 0x10281ad4
push 0x10b2e
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call sym.WMCommon.dll_sqlite3_log
add esp, 0x14
mov eax, 0xb
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret
push 0x10281ad4
push 0x10b1b
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call sym.WMCommon.dll_sqlite3_log
add esp, 0x14
mov eax, 0xb
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret
push 0x10281ad4
push 0x10b15
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call sym.WMCommon.dll_sqlite3_log
add esp, 0x14
mov eax, 0xb
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret
mov byte [ecx + 6], bl
mov eax, ebx
sar eax, 8
sub ebx, edi
mov byte [ecx + 5], al
lea eax, [edi + esi]
push ebx
push 0
push eax
mov word [ecx + 1], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret