Function at 0x1001afd0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
push ebx
push esi
push edi
mov edi, ecx
mov dword [esp + 0x2c], edx
xor ebx, ebx
mov dword [esp + 0x18], edi
mov ecx, dword [edi + 0xc]
mov eax, dword [edi + 0x2c]
mov dword [esp + 0x30], eax
mov dword [esp + 0x1c], ecx
mov edx, dword [ecx + 0x38]
movzx esi, byte [edx + 0x24]
movzx eax, byte [edx + 0x25]
shl esi, 8
or esi, eax
movzx eax, byte [edx + 0x26]
shl esi, 8
or esi, eax
movzx eax, byte [edx + 0x27]
shl esi, 8
or esi, eax
cmp esi, dword [esp + 0x30]
jb 0x1001b041
push 0x100f4b6c
push 0xdff9
push str.database_corruption_at_line__d_of___.10s_
push 0xb
call fcn.10007190
add esp, 0x10
lea eax, [ebx + 0xb]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test esi, esi
je 0x1001b7f2
mov dl, byte [ebp + 0x10]
xor cl, cl
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x24], ecx
cmp dl, 1
jne 0x1001b089
cmp eax, dword [esp + 0x30]
ja 0x1001b09b
lea ecx, [esp + 0x13]
mov edx, eax
push 0
push ecx
mov ecx, edi
call fcn.10016760
add esp, 8
test eax, eax
jne 0x1001b9de
cmp byte [esp + 0x13], 2
jne 0x1001b09b
mov byte [esp + 0x24], 1
jmp 0x1001b09b
cmp dl, 2
movzx ecx, cl
mov eax, 1
cmove ecx, eax
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x1c]
mov ecx, dword [ecx + 0x44]
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + 0x94]
cmp eax, dword [edx + 0x98]
jbe 0x1001b0ba
call fcn.10012c80
jmp 0x1001b0bf
call fcn.10012970
test eax, eax
jne 0x1001b9de
lea edx, [esi - 1]
mov esi, dword [esp + 0x1c]
mov eax, edx
shr eax, 0x18
mov ecx, dword [esi + 0x38]
mov byte [ecx + 0x24], al
mov eax, edx
shr eax, 0x10
mov byte [ecx + 0x25], al
mov eax, edx
shr eax, 8
mov byte [ecx + 0x26], al
mov byte [ecx + 0x27], dl
nop dword [eax]
mov dword [esp + 0x34], ebx
test ebx, ebx
je 0x1001b116
mov ecx, dword [ebx + 0x38]
movzx eax, byte [ecx]
movzx esi, byte [ecx + 1]
shl eax, 8
or esi, eax
movzx eax, byte [ecx + 2]
shl esi, 8
or esi, eax
movzx eax, byte [ecx + 3]
jmp 0x1001b133
mov ecx, dword [esi + 0x38]
movzx eax, byte [ecx + 0x20]
movzx esi, byte [ecx + 0x21]
shl eax, 8
or esi, eax
movzx eax, byte [ecx + 0x22]
shl esi, 8
or esi, eax
movzx eax, byte [ecx + 0x23]
shl esi, 8
or esi, eax
cmp esi, dword [esp + 0x30]
ja 0x1001b774
mov ecx, dword [edi]
lea eax, [esp + 0x38]
push 0
push eax
mov edx, esi
call fcn.10011fe0
mov edi, eax
add esp, 8
test edi, edi
jne 0x1001b792
mov eax, dword [esp + 0x38]
cmp esi, 1
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x40], edi
mov edx, dword [eax + 8]
mov ecx, dword [eax + 4]
mov dword [esp + 0x14], edx
mov dword [esp + 0x28], ecx
mov dword [edx + 0x44], eax
setne al
mov dword [edx + 0x34], ebx
dec al
and al, 0x64
mov dword [edx + 0x38], ecx
mov dword [edx + 0x48], esi
mov byte [edx + 6], al
movzx ebx, byte [ecx + 4]
movzx eax, byte [ecx + 5]
shl ebx, 8
or ebx, eax
movzx eax, byte [ecx + 6]
shl ebx, 8
or ebx, eax
movzx eax, byte [ecx + 7]
shl ebx, 8
or ebx, eax
mov dword [esp + 0x20], ebx
jne 0x1001b214
cmp byte [esp + 0x24], 0
jne 0x1001b214
mov edi, dword [esp + 0x38]
mov ecx, edi
mov edx, dword [edi + 0x10]
mov eax, dword [edx + 0x94]
cmp eax, dword [edx + 0x98]
jbe 0x1001b1dc
call fcn.10012c80
jmp 0x1001b1e1
call fcn.10012970
mov edi, eax
test edi, edi
jne 0x1001b762
mov eax, dword [ebp + 8]
mov ebx, dword [esp + 0x14]
mov dword [eax], esi
mov esi, dword [esp + 0x1c]
mov eax, dword [ebx + 0x38]
mov ecx, dword [esi + 0x38]
mov eax, dword [eax]
mov dword [ecx + 0x20], eax
mov eax, dword [esp + 0x2c]
mov dword [eax], ebx
xor ebx, ebx
mov dword [esp + 0x14], ebx
jmp 0x1001b6f6
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x24]
shr eax, 2
sub eax, 2
cmp ebx, eax
ja 0x1001b744
cmp byte [esp + 0x24], 0
mov eax, dword [ebp + 0xc]
je 0x1001b47c
cmp eax, esi
je 0x1001b24b
jbe 0x1001b47c
cmp byte [ebp + 0x10], 2
jne 0x1001b47c
mov eax, dword [ebp + 8]
mov edi, dword [esp + 0x38]
mov byte [esp + 0x24], 0
mov dword [eax], esi
mov eax, dword [esp + 0x2c]
mov ecx, dword [edi + 0x10]
mov dword [eax], edx
mov eax, dword [ecx + 0x94]
cmp eax, dword [ecx + 0x98]
mov ecx, edi
jbe 0x1001b279
call fcn.10012c80
jmp 0x1001b27e
call fcn.10012970
mov edi, eax
test edi, edi
jne 0x1001b762
test ebx, ebx
jne 0x1001b2f7
mov esi, dword [esp + 0x34]
test esi, esi
jne 0x1001b2b0
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x14], ebx
mov eax, dword [ecx + 0x38]
mov ecx, dword [esi + 0x38]
mov eax, dword [eax]
mov dword [ecx + 0x20], eax
jmp 0x1001b6f6
mov ecx, dword [esi + 0x44]
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + 0x94]
cmp eax, dword [edx + 0x98]
jbe 0x1001b2cb
call fcn.10012c80
jmp 0x1001b2d0
call fcn.10012970
mov edi, eax
test edi, edi
jne 0x1001b762
mov ecx, dword [esp + 0x14]
xor ebx, ebx
mov dword [esp + 0x14], ebx
mov eax, dword [ecx + 0x38]
mov ecx, dword [esi + 0x38]
mov esi, dword [esp + 0x1c]
mov eax, dword [eax]
mov dword [ecx], eax
jmp 0x1001b6f6
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx + 0x38]
movzx eax, byte [ecx + 8]
movzx ebx, byte [ecx + 9]
shl eax, 8
or ebx, eax
movzx eax, byte [ecx + 0xa]
shl ebx, 8
or ebx, eax
movzx eax, byte [ecx + 0xb]
shl ebx, 8
or ebx, eax
cmp ebx, dword [esp + 0x30]
ja 0x1001b72c
lea eax, [esp + 0x3c]
mov edx, ebx
push 0
push eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
call fcn.10011fe0
mov edi, eax
add esp, 8
test edi, edi
jne 0x1001b762
mov ecx, dword [esp + 0x3c]
cmp ebx, 1
mov esi, dword [ecx + 8]
mov eax, dword [ecx + 4]
mov dword [esi + 0x38], eax
mov eax, dword [esp + 0x18]
mov dword [esi + 0x34], eax
setne al
dec al
mov dword [esi + 0x44], ecx
and al, 0x64
mov dword [esi + 0x48], ebx
mov byte [esi + 6], al
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + 0x94]
cmp eax, dword [edx + 0x98]
jbe 0x1001b387
call fcn.10012c80
jmp 0x1001b38c
call fcn.10012970
mov edi, eax
test edi, edi
jne 0x1001b722
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + 0x38]
mov edx, dword [esp + 0x20]
dec edx
mov eax, dword [eax + 0x38]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, edx
mov ecx, dword [esi + 0x38]
shr eax, 0x18
mov byte [ecx + 4], al
mov eax, edx
shr eax, 0x10
mov byte [ecx + 5], al
mov eax, edx
shr eax, 8
mov byte [ecx + 6], al
lea eax, [edx*4]
push eax
mov eax, dword [esp + 0x18]
mov byte [ecx + 7], dl
mov eax, dword [eax + 0x38]
add eax, 0xc
push eax
mov eax, dword [esi + 0x38]
add eax, 8
push eax
call fcn.100bfbc0
mov ecx, dword [esi + 0x44]
add esp, 0xc
call fcn.10012590
mov esi, dword [esp + 0x34]
test esi, esi
jne 0x1001b426
mov esi, dword [esp + 0x1c]
mov eax, ebx
shr eax, 0x18
mov ecx, dword [esi + 0x38]
mov byte [ecx + 0x20], al
mov eax, ebx
shr eax, 0x10
mov byte [ecx + 0x21], al
mov eax, ebx
shr eax, 8
mov byte [ecx + 0x23], bl
xor ebx, ebx
mov byte [ecx + 0x22], al
mov dword [esp + 0x14], ebx
jmp 0x1001b6f6
mov ecx, dword [esi + 0x44]
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + 0x94]
cmp eax, dword [edx + 0x98]
jbe 0x1001b441
call fcn.10012c80
jmp 0x1001b446
call fcn.10012970
mov edi, eax
test edi, edi
jne 0x1001b762
mov ecx, dword [esi + 0x38]
mov eax, ebx
mov esi, dword [esp + 0x1c]
shr eax, 0x18
mov byte [ecx], al
mov eax, ebx
shr eax, 0x10
mov byte [ecx + 1], al
mov eax, ebx
shr eax, 8
mov byte [ecx + 3], bl
xor ebx, ebx
mov byte [ecx + 2], al
mov dword [esp + 0x14], ebx
jmp 0x1001b6f6
test ebx, ebx
je 0x1001b71e
test eax, eax
je 0x1001b606
cmp byte [ebp + 0x10], 2
mov dword [esp + 0x20], edi
jne 0x1001b553
xor esi, esi
lea edx, [ecx + 0xa]
nop
movzx ecx, byte [edx - 2]
movzx eax, byte [edx - 1]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 1]
shl ecx, 8
or ecx, eax
cmp ecx, dword [ebp + 0xc]
jbe 0x1001b547
inc esi
add edx, 4
cmp esi, ebx
jb 0x1001b4a0
mov ecx, dword [esp + 0x28]
mov eax, edi
lea esi, [ecx + eax*4]
movzx ecx, byte [esi + 8]
movzx eax, byte [esi + 9]
shl ecx, 8
or ecx, eax
movzx eax, byte [esi + 0xa]
shl ecx, 8
or ecx, eax
movzx eax, byte [esi + 0xb]
shl ecx, 8
or ecx, eax
cmp ecx, dword [esp + 0x30]
ja 0x1001b738
cmp byte [esp + 0x24], 0
je 0x1001b51d
cmp ecx, dword [ebp + 0xc]
je 0x1001b51d
jae 0x1001b6ee
cmp byte [ebp + 0x10], 2
jne 0x1001b6ee
mov eax, dword [ebp + 8]
mov edi, dword [esp + 0x38]
mov dword [eax], ecx
mov ecx, dword [edi + 0x10]
mov eax, dword [ecx + 0x94]
cmp eax, dword [ecx + 0x98]
mov ecx, edi
jbe 0x1001b611
call fcn.10012c80
jmp 0x1001b616
mov ecx, dword [esp + 0x28]
mov eax, esi
mov dword [esp + 0x20], esi
jmp 0x1001b4d5
movzx edx, byte [ecx + 8]
movzx eax, byte [ecx + 9]
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 0xa]
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 0xb]
shl edx, 8
or edx, eax
sub edx, dword [ebp + 0xc]
jns 0x1001b588
cmp edx, 0x80000000
jne 0x1001b586
mov edx, 0x7fffffff
jmp 0x1001b588
neg edx
mov esi, 1
cmp ebx, esi
jbe 0x1001b4d3
mov edi, ecx
nop word [eax + eax]
movzx eax, byte [edi + esi*4 + 8]
movzx ecx, byte [edi + esi*4 + 9]
shl eax, 8
or eax, ecx
movzx ecx, byte [edi + esi*4 + 0xa]
shl eax, 8
or eax, ecx
movzx ecx, byte [edi + esi*4 + 0xb]
shl eax, 8
or eax, ecx
sub eax, dword [ebp + 0xc]
jns 0x1001b5d8
cmp eax, 0x80000000
jne 0x1001b5d6
mov eax, 0x7fffffff
jmp 0x1001b5d8
neg eax
cmp eax, edx
mov ecx, esi
cmovge ecx, dword [esp + 0x20]
inc esi
cmp eax, edx
mov dword [esp + 0x20], ecx
cmovge eax, edx
mov edx, eax
cmp esi, ebx
jb 0x1001b5a0
mov edi, dword [esp + 0x40]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x20]
jmp 0x1001b4d5
xor eax, eax
mov dword [esp + 0x20], eax
jmp 0x1001b4d5
call fcn.10012970
mov edi, eax
test edi, edi
jne 0x1001b762
mov ecx, dword [esp + 0x28]
lea edx, [ebx - 1]
cmp dword [esp + 0x20], edx
jae 0x1001b634
mov eax, dword [ecx + ebx*4 + 4]
mov dword [esi + 8], eax
mov ebx, dword [esp + 0x18]
mov eax, edx
shr eax, 0x18
mov byte [ecx + 4], al
mov eax, edx
shr eax, 0x10
mov byte [ecx + 5], al
mov eax, edx
shr eax, 8
mov byte [ecx + 6], al
mov eax, dword [ebp + 8]
mov byte [ecx + 7], dl
mov ecx, dword [ebx + 0x3c]
mov esi, dword [eax]
test ecx, ecx
je 0x1001b672
cmp esi, dword [ecx]
ja 0x1001b66e
mov edx, esi
call fcn.1000c720
test eax, eax
je 0x1001b672
xor eax, eax
jmp 0x1001b677
mov eax, 1
mov ecx, dword [ebx]
mov edx, esi
push eax
lea eax, [esp + 0x48]
push eax
call fcn.10011fe0
mov edi, eax
add esp, 8
test edi, edi
jne 0x1001b6e9
mov ecx, dword [esp + 0x44]
cmp esi, 1
mov edx, dword [ecx + 8]
mov eax, dword [ecx + 4]
mov dword [edx + 0x38], eax
setne al
mov dword [edx + 0x34], ebx
dec al
mov ebx, dword [esp + 0x2c]
and al, 0x64
mov dword [edx + 0x44], ecx
mov dword [edx + 0x48], esi
mov byte [edx + 6], al
mov dword [ebx], edx
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + 0x94]
cmp eax, dword [edx + 0x98]
jbe 0x1001b6d0
call fcn.10012c80
jmp 0x1001b6d5
call fcn.10012970
mov edi, eax
test edi, edi
je 0x1001b6e9
mov ecx, dword [ebx]
test ecx, ecx
je 0x1001b6e9
mov ecx, dword [ecx + 0x44]
call fcn.10012590
mov byte [esp + 0x24], 0
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x34]
test eax, eax
je 0x1001b706
mov ecx, dword [eax + 0x44]
call fcn.10012590
cmp byte [esp + 0x24], 0
mov dword [esp + 0x34], 0
je 0x1001b762
mov edi, dword [esp + 0x18]
jmp 0x1001b0f0
mov ebx, edx
jmp 0x1001b6f2
mov ecx, dword [esi + 0x44]
call fcn.10012590
jmp 0x1001b762
push 0x100f4b6c
push 0xe068
jmp 0x1001b74e
push 0x100f4b6c
push 0xe0a9
jmp 0x1001b74e
push 0x100f4b6c
push 0xe046
push str.database_corruption_at_line__d_of___.10s_
push 0xb
call fcn.10007190
add esp, 0x10
mov edi, 0xb
mov eax, dword [esp + 0x14]
test eax, eax
je 0x1001b792
mov ecx, dword [eax + 0x44]
call fcn.10012590
jmp 0x1001b792
push 0x100f4b6c
push 0xe02a
push str.database_corruption_at_line__d_of___.10s_
push 0xb
call fcn.10007190
add esp, 0x10
mov edi, 0xb
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x1001b7a2
mov ecx, dword [ecx + 0x44]
call fcn.10012590
mov ebx, dword [esp + 0x2c]
test edi, edi
jne 0x1001b9ca
mov eax, dword [ebx]
mov ecx, dword [eax + 0x44]
cmp word [ecx + 0x1a], 1
jle 0x1001b9d9
test eax, eax
je 0x1001b7c7
call fcn.10012590
push 0x100f4b6c
push 0xe10c
push str.database_corruption_at_line__d_of___.10s_
push 0xb
mov dword [ebx], 0
call fcn.10007190
add esp, 0x10
mov eax, 0xb
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ecx + 0x44]
xor eax, eax
mov esi, edi
mov edx, dword [ecx + 0x10]
cmp byte [esi + 0x13], al
sete al
mov dword [esp + 0x38], eax
mov eax, dword [edx + 0x94]
cmp eax, dword [edx + 0x98]
jbe 0x1001b81b
call fcn.10012c80
jmp 0x1001b820
call fcn.10012970
test eax, eax
jne 0x1001b9de
mov eax, dword [0x10100094]
xor edx, edx
div dword [esi + 0x20]
inc dword [esi + 0x2c]
mov edi, dword [esi + 0x2c]
inc eax
mov dword [esp + 0x44], eax
cmp edi, eax
jne 0x1001b845
inc edi
mov dword [esi + 0x2c], edi
cmp byte [esi + 0x11], 0
mov ebx, edi
je 0x1001b926
cmp edi, 2
jae 0x1001b85a
xor eax, eax
jmp 0x1001b889
mov ebx, dword [esp + 0x18]
lea esi, [edi - 2]
mov eax, 0xcccccccd
mul dword [ebx + 0x24]
mov eax, esi
mov ecx, edx
xor edx, edx
shr ecx, 2
inc ecx
div ecx
sub esi, edx
lea eax, [esi + 2]
sub eax, dword [esp + 0x44]
neg eax
sbb eax, eax
add esi, 3
add eax, esi
mov esi, ebx
mov ebx, edi
cmp eax, edi
jne 0x1001b926
push dword [esp + 0x38]
mov ecx, dword [esi]
lea eax, [esp + 0x48]
push eax
mov edx, edi
call fcn.10011fe0
mov esi, eax
add esp, 8
test esi, esi
jne 0x1001b900
mov ecx, dword [esp + 0x44]
cmp edi, 1
mov ebx, dword [ecx + 8]
mov eax, dword [ecx + 4]
mov dword [ebx + 0x38], eax
mov eax, dword [esp + 0x18]
mov dword [ebx + 0x34], eax
setne al
dec al
mov dword [ebx + 0x44], ecx
and al, 0x64
mov dword [ebx + 0x48], edi
mov byte [ebx + 6], al
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + 0x94]
cmp eax, dword [edx + 0x98]
jbe 0x1001b8ed
call fcn.10012c80
jmp 0x1001b8f2
call fcn.10012970
mov ecx, dword [ebx + 0x44]
mov esi, eax
call fcn.10012590
test esi, esi
je 0x1001b909
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [esp + 0x18]
xor edx, edx
mov eax, dword [0x10100094]
div dword [esi + 0x20]
inc dword [esi + 0x2c]
mov ebx, dword [esi + 0x2c]
inc eax
cmp ebx, eax
jne 0x1001b926
inc ebx
mov dword [esi + 0x2c], ebx
mov eax, dword [esi + 0xc]
push dword [esp + 0x38]
mov ecx, dword [eax + 0x38]
mov eax, ebx
shr eax, 0x18
mov byte [ecx + 0x1c], al
mov eax, ebx
shr eax, 0x10
mov byte [ecx + 0x1d], al
mov eax, ebx
shr eax, 8
mov byte [ecx + 0x1e], al
mov eax, dword [ebp + 8]
mov byte [ecx + 0x1f], bl
mov esi, dword [esi + 0x2c]
mov edx, esi
mov ebx, dword [esp + 0x1c]
mov dword [eax], esi
lea eax, [esp + 0x48]
push eax
mov ecx, dword [ebx]
call fcn.10011fe0
add esp, 8
test eax, eax
jne 0x1001b9de
mov ecx, dword [esp + 0x44]
cmp esi, 1
mov edx, dword [ecx + 8]
mov eax, dword [ecx + 4]
mov dword [edx + 0x38], eax
setne al
mov dword [edx + 0x34], ebx
dec al
mov ebx, dword [esp + 0x2c]
and al, 0x64
mov dword [edx + 0x44], ecx
mov dword [edx + 0x48], esi
mov byte [edx + 6], al
mov dword [ebx], edx
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + 0x94]
cmp eax, dword [edx + 0x98]
jbe 0x1001b9ad
call fcn.10012c80
jmp 0x1001b9b2
call fcn.10012970
mov edi, eax
test edi, edi
je 0x1001b7ae
mov ecx, dword [ebx]
test ecx, ecx
je 0x1001b9ca
mov ecx, dword [ecx + 0x44]
call fcn.10012590
mov dword [ebx], 0
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [eax], 0
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret