Function at 0x1001bd40
Capabilities:
Enumerate pe sections

Disassembly:
movsx eax, word [esp + 8]
sub esp, 0x118
cmp eax, 0x20c
push ebx
push esi
push edi
mov esi, ecx
jg 0x1001bed9
je 0x1001be97
sub eax, 0x12d
je 0x1001bdb6
dec eax
je 0x1001bd82
sub eax, 0xcd
je 0x1001bffb
pop edi
pop esi
pop ebx
add esp, 0x118
ret 0x10
mov eax, dword [esp + 0x130]
cmp word [eax + 2], 6
jne 0x1001bda3
mov byte [esi + 0x8b], 1
pop edi
pop esi
pop ebx
add esp, 0x118
ret 0x10
mov byte [esi + 0x8b], 0
pop edi
pop esi
pop ebx
add esp, 0x118
ret 0x10
mov al, byte [esi + 0x90]
xor ebx, ebx
cmp al, bl
mov eax, dword [esp + 0x130]
je 0x1001bdfa
or ecx, 0xffffffff
cmp word [esi + 0x8c], cx
jne 0x1001bde1
mov cx, word [eax]
mov word [esi + 0x8c], cx
jmp 0x1001bdf4
cmp word [esi + 0x8e], cx
jne 0x1001bdf4
mov dx, word [eax]
mov word [esi + 0x8e], dx
mov byte [esi + 0x90], bl
mov edi, dword [esp + 0x134]
cmp edi, ebx
je 0x1001be50
cmp dword [esi + 0x14], ebx
jne 0x1001be39
push 8
call fcn.1001ca50
add byte [ebx - 0x3cc4fb3c], al
mov ax, word [eax]
cmp ax, word [esi + 0x8c]
jne 0x1001be73
mov ecx, dword [esi]
mov eax, dword [esi + 8]
push eax
mov edx, dword [ecx]
call dword [edx + 0x30]
pop edi
pop esi
pop ebx
add esp, 0x118
ret 0x10
cmp ax, word [esi + 0x8e]
jne 0x1001c002
mov ecx, dword [esi]
mov eax, dword [esi + 0xc]
push eax
mov edx, dword [ecx]
call dword [edx + 0x30]
pop edi
pop esi
pop ebx
add esp, 0x118
ret 0x10
mov edi, dword [esp + 0x130]
mov cx, word [edi]
push ecx
mov ecx, esi
call fcn.1001bbe0
mov dx, word [edi + 2]
mov ecx, esi
push edx
mov ebx, eax
call fcn.1001bc10
mov edx, dword [esi + 0x70]
pop edi
movsx ecx, bx
movsx eax, ax
add edx, ecx
mov ecx, dword [esi + 0x74]
add ecx, eax
mov dword [esi + 0x78], edx
mov dword [esi + 0x7c], ecx
pop esi
pop ebx
add esp, 0x118
ret 0x10
cmp eax, 0x2fb
je 0x1001bffb
cmp eax, 0x41b
je 0x1001bf8e
cmp eax, 0x521
jne 0x1001c002
mov eax, dword [esp + 0x130]
push ebp
mov dx, word [eax]
mov cx, word [eax + 2]
mov word [esp + 0x10], dx
mov edx, dword [esp + 0x12c]
mov word [esp + 0x14], cx
mov bp, word [eax + edx*2 - 2]
lea ebx, [edx - 1]
cmp ebx, 2
jle 0x1001bf62
lea ecx, [eax + 4]
lea edi, [esp + edx*2 + 0x21]
add ebx, 0xfffffffe
movsx edx, word [ecx]
and edx, 0x800000ff
jns 0x1001bf44
dec edx
or edx, 0xffffff00
inc edx
mov byte [edi - 1], dl
sub edi, 2
movsx eax, word [ecx]
cdq
and edx, 0xff
add ecx, 2
add eax, edx
sar eax, 8
mov byte [edi + 2], al
dec ebx
jne 0x1001bf31
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x28]
movsx eax, bp
push ebp
push ecx
mov byte [esp + eax + 0x30], 0
mov eax, dword [esp + 0x18]
push edx
push eax
mov ecx, esi
call fcn.1001bc40
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x118
ret 0x10
cmp dword [esp + 0x128], 4
jne 0x1001c002
mov al, byte [esi + 0x8a]
test al, al
je 0x1001bfe8
mov eax, dword [esp + 0x130]
mov cx, word [eax + 6]
mov dx, word [eax + 4]
push ecx
mov cx, word [eax + 2]
push edx
mov dx, word [eax]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
mov ecx, esi
call fcn.1001bcc0
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [esi]
push eax
push ecx
mov eax, dword [edx + 4]
push eax
call dword [0x10020050]
mov byte [esi + 0x8a], 1
pop edi
pop esi
pop ebx
add esp, 0x118
ret 0x10
mov byte [esi + 0x90], 1
pop edi
pop esi
pop ebx
add esp, 0x118
ret 0x10