Function at 0x1020c210
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x54
cmp dword [ebp + 0xc], 0
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov dword [esp + 0x18], edx
mov edi, dword [ebx + 4]
mov dword [esp + 0x2c], ecx
je 0x1020c299
movzx esi, byte [edx + 1]
lea ecx, [edx + 1]
mov dword [esp + 0x30], esi
cmp esi, 0x80
jae 0x1020c24d
mov dword [esp + 0x1c], 2
jmp 0x1020c266
lea edx, [esp + 0x30]
call fcn.10232820
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 0x18]
movzx eax, al
inc eax
mov dword [esp + 0x1c], eax
movzx ecx, byte [edx]
mov dword [esp + 0x30], ecx
cmp esi, 0x80
jb 0x1020c286
add esi, 0xfffffff4
mov eax, 1
shr esi, 1
add esi, ecx
add edi, 0x28
jmp 0x1020c2da
movzx esi, byte [esi + 0x1025d2a0]
mov eax, 1
add esi, ecx
add edi, 0x28
jmp 0x1020c2da
movzx ecx, byte [edx]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x28], ecx
cmp ecx, 0x80
jae 0x1020c2b6
mov dword [esp + 0x1c], 1
jmp 0x1020c2d6
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x28]
call fcn.10232820
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x18]
movzx eax, al
mov dword [esp + 0x1c], eax
mov dword [esp + 0x30], ecx
mov esi, ecx
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x14], esi
cmp esi, dword [esp + 0x2c]
jbe 0x1020c313
push 0x10281ad4
push 0x14cbe
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call sym.WMCommon.dll_sqlite3_log
add esp, 0x14
mov byte [ebx + 0x17], 0xb
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [eax*4 + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x1c]
movzx ecx, word [edi + 0x10]
add eax, edx
mov dword [esp + 0x34], eax
mov al, byte [eax]
mov byte [esp + 0x13], al
movzx ebx, al
test cl, 0x24
je 0x1020c5c8
cmp ebx, 0xa
jae 0x1020c58a
test al, al
je 0x1020c88d
lea ecx, [esi + edx]
cmp ebx, 7
jne 0x1020c382
lea eax, [esp + 0x38]
mov edx, ebx
push eax
call fcn.1020d120
movsd xmm1, qword [esp + 0x3c]
add esp, 4
push dword [edi + 4]
push dword [edi]
call fcn.1020cc20
mov ecx, eax
add esp, 8
neg ecx
jmp 0x1020c808
cmp ebx, 6
ja case.default.0x1020c38b
jmp dword [ebx*4 + 0x1020c91c]
movsx eax, byte [ecx]
cdq
mov ecx, eax
mov eax, edx
jmp 0x1020c562
movsx eax, byte [ecx]
movzx ecx, byte [ecx + 1]
shl eax, 8
or eax, ecx
cdq
mov ecx, eax
mov eax, edx
jmp 0x1020c562
movzx eax, byte [ecx + 1]
movsx ecx, byte [ecx]
shl eax, 8
shl ecx, 0x10
or eax, ecx
movzx ecx, byte [esi + edx + 2]
or eax, ecx
cdq
mov ecx, eax
mov eax, edx
jmp 0x1020c562
movzx eax, byte [ecx]
movzx ecx, byte [ecx + 1]
shl eax, 8
or eax, ecx
movzx ecx, byte [esi + edx + 2]
shl eax, 8
or eax, ecx
movzx ecx, byte [esi + edx + 3]
shl eax, 8
or eax, ecx
cdq
mov ecx, eax
mov eax, edx
jmp 0x1020c562
movzx eax, byte [ecx + 2]
cdq
mov ecx, eax
mov eax, edx
shld eax, ecx, 8
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18]
shl ecx, 8
movzx eax, byte [esi + eax + 3]
cdq
or ecx, eax
mov eax, dword [esp + 0x14]
or eax, edx
shld eax, ecx, 8
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18]
shl ecx, 8
movzx eax, byte [esi + eax + 4]
cdq
or ecx, eax
mov eax, dword [esp + 0x14]
or eax, edx
shld eax, ecx, 8
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18]
shl ecx, 8
movzx eax, byte [esi + eax + 5]
cdq
or dword [esp + 0x14], edx
or ecx, eax
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x18]
movsx eax, byte [esi + ecx]
movzx ecx, byte [esi + ecx + 1]
shl eax, 8
or eax, ecx
mov ecx, dword [esp + 0x34]
cdq
add ecx, 0
adc dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
jmp 0x1020c562
movzx eax, byte [ecx]
cdq
mov ecx, eax
mov eax, edx
shld eax, ecx, 8
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18]
shl ecx, 8
movzx eax, byte [esi + eax + 1]
cdq
or ecx, eax
mov eax, dword [esp + 0x14]
or eax, edx
shld eax, ecx, 8
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18]
shl ecx, 8
movzx eax, byte [esi + eax + 2]
cdq
or ecx, eax
mov eax, dword [esp + 0x14]
or eax, edx
shld eax, ecx, 8
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18]
shl ecx, 8
movzx eax, byte [esi + eax + 3]
cdq
or ecx, eax
mov eax, dword [esp + 0x14]
or eax, edx
shld eax, ecx, 8
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18]
shl ecx, 8
movzx eax, byte [esi + eax + 4]
cdq
or ecx, eax
mov eax, dword [esp + 0x14]
or eax, edx
shld eax, ecx, 8
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18]
shl ecx, 8
movzx eax, byte [esi + eax + 5]
cdq
or ecx, eax
mov eax, dword [esp + 0x14]
or eax, edx
shld eax, ecx, 8
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18]
shl ecx, 8
movzx eax, byte [esi + eax + 6]
cdq
or ecx, eax
mov eax, dword [esp + 0x14]
or eax, edx
shld eax, ecx, 8
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18]
shl ecx, 8
movzx eax, byte [esi + eax + 7]
cdq
or ecx, eax
mov eax, dword [esp + 0x14]
or eax, edx
jmp 0x1020c562
lea ecx, [ebx - 8]
xor eax, eax
mov edx, dword [edi]
cmp eax, dword [edi + 4]
jl 0x1020c88d
jg 0x1020c58a
cmp ecx, edx
jb 0x1020c88d
cmp eax, dword [edi + 4]
jg 0x1020c58a
jl 0x1020c810
cmp ecx, edx
jbe 0x1020c810
mov ecx, 1
mov eax, dword [ebp + 8]
mov edx, dword [esp + 0x24]
mov eax, dword [eax]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + edx]
test eax, eax
je 0x1020c911
test al, 2
je 0x1020c90f
test ebx, ebx
je 0x1020c903
test byte [edi + 0x10], 1
jne 0x1020c903
xor edx, edx
jmp 0x1020c908
test cl, 8
je 0x1020c630
cmp ebx, 0xa
jae 0x1020c58a
test al, al
je 0x1020c88d
lea eax, [esp + 0x38]
lea ecx, [esi + edx]
mov edx, ebx
push eax
call fcn.1020d120
movsd xmm0, qword [edi]
add esp, 4
cmp byte [esp + 0x13], 7
jne 0x1020c616
movsd xmm1, qword [esp + 0x38]
comisd xmm0, xmm1
ja 0x1020c88d
comisd xmm1, xmm0
ja 0x1020c58a
jmp 0x1020c810
push dword [esp + 0x3c]
movaps xmm1, xmm0
push dword [esp + 0x3c]
call fcn.1020cc20
add esp, 8
mov ecx, eax
jmp 0x1020c808
mov dword [esp + 0x20], ebx
test cl, 2
je 0x1020c71a
cmp ebx, 0x80
jb 0x1020c656
mov ecx, dword [esp + 0x34]
lea edx, [esp + 0x20]
call fcn.10232820
mov ebx, dword [esp + 0x20]
cmp ebx, 0xc
jb 0x1020c88d
test bl, 1
je 0x1020c58a
lea ecx, [ebx - 0xc]
shr ecx, 1
mov dword [esp + 0x34], ecx
mov dword [esp + 0x44], ecx
lea eax, [ecx + esi]
cmp eax, dword [esp + 0x2c]
ja 0x1020c895
mov edx, dword [ebp + 8]
mov edx, dword [edx]
movzx eax, word [edx + 8]
cmp eax, dword [esp + 0x24]
jle 0x1020c895
mov eax, dword [esp + 0x28]
cmp dword [eax + edx], 0
je 0x1020c6e4
mov al, byte [edx + 4]
lea ecx, [esp + 0x38]
mov byte [esp + 0x4a], al
mov eax, dword [edx + 0xc]
mov dword [esp + 0x4c], eax
mov eax, 2
mov word [esp + 0x48], ax
mov eax, dword [esp + 0x18]
add eax, esi
mov dword [esp + 0x40], eax
mov eax, dword [ebp + 8]
add eax, 0x17
push eax
mov eax, dword [esp + 0x2c]
push dword [eax + edx]
mov edx, edi
call fcn.1020cdc0
add esp, 8
mov ecx, eax
jmp 0x1020c808
mov esi, dword [edi + 0xc]
cmp ecx, esi
mov edx, dword [edi + 8]
cmovl esi, ecx
mov ecx, dword [esp + 0x18]
add ecx, dword [esp + 0x14]
sub esi, 4
jb 0x1020c7b1
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x1020c7b6
add ecx, 4
add edx, 4
sub esi, 4
jae 0x1020c700
jmp 0x1020c7b1
test cl, 0x10
je 0x1020c801
cmp ebx, 0x80
jb 0x1020c740
mov ecx, dword [esp + 0x34]
lea edx, [esp + 0x20]
call fcn.10232820
mov ebx, dword [esp + 0x20]
movzx ecx, word [edi + 0x10]
cmp ebx, 0xc
jb 0x1020c88d
test bl, 1
jne 0x1020c88d
lea edx, [ebx - 0xc]
shr edx, 1
mov dword [esp + 0x34], edx
lea eax, [edx + esi]
cmp eax, dword [esp + 0x2c]
ja 0x1020c8c3
test ecx, 0x400
mov ecx, dword [esp + 0x18]
je 0x1020c78a
lea ecx, [esi + ecx]
call fcn.1020cda0
test eax, eax
je 0x1020c58a
mov ecx, edx
sub ecx, dword [edi]
jmp 0x1020c808
mov esi, dword [edi + 0xc]
cmp edx, esi
cmovl esi, edx
add ecx, dword [esp + 0x14]
mov edx, dword [edi + 8]
sub esi, 4
jb 0x1020c7b1
nop
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x1020c7b6
add ecx, 4
add edx, 4
sub esi, 4
jae 0x1020c7a0
cmp esi, 0xfffffffc
je 0x1020c7ea
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x1020c7e3
cmp esi, 0xfffffffd
je 0x1020c7ea
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x1020c7e3
cmp esi, 0xfffffffe
je 0x1020c7ea
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x1020c7e3
cmp esi, 0xffffffff
je 0x1020c7ea
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x1020c7ea
sbb ecx, ecx
or ecx, 1
jmp 0x1020c7ec
xor ecx, ecx
test ecx, ecx
jne 0x1020c58f
mov ecx, dword [esp + 0x34]
sub ecx, dword [edi + 0xc]
mov esi, dword [esp + 0x14]
jmp 0x1020c808
xor ecx, ecx
test al, al
setne cl
test ecx, ecx
jne 0x1020c58f
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 0x24]
add dword [esp + 0x28], 4
inc ecx
mov dword [esp + 0x24], ecx
movzx eax, word [eax + 0x14]
cmp ecx, eax
je 0x1020c8f1
add edi, 0x28
cmp ebx, 0x80
jb 0x1020c83f
lea eax, [ebx - 0xc]
shr eax, 1
jmp 0x1020c846
movzx eax, byte [ebx + 0x1025d2a0]
add esi, eax
shr ebx, 7
xor ecx, ecx
mov dword [esp + 0x14], esi
mov eax, ebx
mov edx, 1
or eax, ecx
je 0x1020c86e
nop dword [eax]
shrd ebx, ecx, 7
inc edx
shr ecx, 7
mov eax, ebx
or eax, ecx
jne 0x1020c860
mov eax, dword [esp + 0x1c]
add eax, edx
mov dword [esp + 0x1c], eax
cmp eax, dword [esp + 0x30]
jae 0x1020c8f1
cmp esi, dword [esp + 0x2c]
ja 0x1020c8f1
mov edx, dword [esp + 0x18]
jmp 0x1020c322
or ecx, 0xffffffff
jmp 0x1020c58f
push 0x10281ad4
push 0x14d0b
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call sym.WMCommon.dll_sqlite3_log
mov eax, dword [ebp + 8]
add esp, 0x14
mov byte [eax + 0x17], 0xb
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x10281ad4
push 0x14d29
push str.database_corruption
push str._s_at_line__d_of___.10s_
push 0xb
call sym.WMCommon.dll_sqlite3_log
mov eax, dword [ebp + 8]
add esp, 0x14
mov byte [eax + 0x17], 0xb
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
mov byte [eax + 0x1a], 1
movsx eax, byte [eax + 0x16]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, 1
and eax, 1
cmp eax, edx
je 0x1020c911
neg ecx
pop edi
pop esi
mov eax, ecx
pop ebx
mov esp, ebp
pop ebp
ret