Function at 0x10cc9010
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x10
push ebx
push ebp
push esi
mov esi, dword [esp + 0x2c]
push edi
mov dword [esp + 0x14], 1
mov ax, word [esi + 4]
mov cl, al
and cl, 0xc0
cmp cl, 0x80
jne 0x10cc9064
mov dx, word [esi + 6]
push esi
shr eax, 0xa
and eax, 7
push eax
mov eax, dword [esp + 0x34]
push edx
mov edx, dword [esp + 0x30]
mov cx, word [eax + 6]
push ecx
push esi
push eax
push edx
call fcn.10cc9650
mov eax, dword [esp + 0x30]
add esp, 0x1c
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 0x14
mov edi, dword [esp + 0x2c]
mov cx, word [edi + 4]
mov edx, ecx
and edx, 0x2000
cmp edx, 0x2000
jne 0x10cc90da
and eax, edx
cmp eax, edx
jne 0x10cc90a0
mov eax, dword [esi]
mov ecx, dword [esp + 0x24]
push 0
push eax
push edi
push ecx
call sym.PBVM90.dll_ot_assign_lvalue_array
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 0x14
mov ebx, dword [esp + 0x24]
push esi
push ebx
call sym.PBVM90.dll_ot_get_valptr
lea edx, [esp + 0x18]
push edx
push eax
push ebx
call sym.PBVM90.dll_ot_create_chararray_from_string
push esi
push ebx
call sym.PBVM90.dll_ot_free_val_ptr
push 0
mov eax, dword [esp + 0x1c]
push eax
push edi
push ebx
call sym.PBVM90.dll_ot_assign_lvalue_array
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 0x14
test al, 1
jne 0x10cc934c
mov bx, word [esi + 6]
mov dx, word [edi + 6]
mov word [esp + 0x10], bx
mov ebp, dword [esp + 0x24]
mov ebx, eax
and eax, 0x2000
shr ebx, 0xa
and ebx, 7
cmp eax, 0x2000
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], edx
mov ebx, esi
jne 0x10cc911d
or ch, 0x20
mov word [edi + 4], cx
jmp 0x10cc92ce
push edx
call sym.PBVM90.dll_ot_type_attr
cmp eax, 1
jne 0x10cc919e
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
cmp cx, ax
mov dword [esp + 0x34], 0
jne 0x10cc914f
cmp ax, 5
je 0x10cc914f
cmp ax, 4
je 0x10cc914f
cmp ax, 0x14
jne 0x10cc917c
lea edx, [esp + 0x24]
lea eax, [esp + 0x30]
push edx
push eax
push esi
push ecx
push ebp
call fcn.10cc9390
add esp, 0x14
cmp word [esp + 0x2c], 5
lea ebx, [esp + 0x24]
jne 0x10cc92ce
mov dword [esp + 0x34], 1
cmp word [esp + 0x2c], 5
jne 0x10cc92ce
mov ecx, dword [esp + 0x34]
push ebx
push ecx
push esi
push edi
push ebp
call fcn.10cc9580
add esp, 0x14
jmp 0x10cc92ce
mov eax, dword [esp + 0x10]
cmp ax, 0x12
jne 0x10cc91ef
mov dx, word [esi + 4]
and edx, 0x2000
cmp edx, 0x2000
jne 0x10cc91c5
mov eax, dword [esi]
push eax
push ebp
call sym.PBVM90.dll_ot_get_string_from_chararray
jmp 0x10cc91da
cmp word [esp + 0x2c], 6
jne 0x10cc92ce
mov cl, byte [esi]
push ecx
push ebp
call sym.PBVM90.dll_ot_get_string_from_char
mov dword [esp + 0x24], eax
mov dword [esp + 0x30], 3
lea ebx, [esp + 0x24]
jmp 0x10cc92ce
mov ecx, dword [esp + 0x2c]
cmp ax, 6
jne 0x10cc9227
cmp cx, 0x12
jne 0x10cc9227
push esi
push ebp
call sym.PBVM90.dll_ot_get_valptr
mov dword [esp + 0x30], 1
push esi
movzx dx, byte [eax]
push ebp
mov word [esp + 0x2c], dx
lea ebx, [esp + 0x2c]
call sym.PBVM90.dll_ot_free_val_ptr
jmp 0x10cc92ce
mov eax, ecx
and eax, 0xc000
cmp ax, 0x8000
je 0x10cc9296
cmp ax, 0x4000
je 0x10cc9296
cmp cx, 0xb
jne 0x10cc925f
mov al, byte [edi + 4]
and al, 0x3e
cmp al, 2
jne 0x10cc925f
lea ecx, [esp + 0x24]
push ecx
push esi
push edi
push ebp
call fcn.10cc95d0
add esp, 0x10
lea ebx, [esp + 0x24]
jmp 0x10cc92ce
cmp cx, 8
jne 0x10cc92ce
mov eax, dword [esp + 0x10]
cmp ax, 5
je 0x10cc927b
cmp ax, 4
je 0x10cc927b
cmp ax, 0x14
jne 0x10cc92ce
lea edx, [esp + 0x24]
lea ecx, [esp + 0x30]
push edx
push ecx
push esi
push eax
push ebp
call fcn.10cc9390
add esp, 0x14
lea ebx, [esp + 0x24]
jmp 0x10cc92ce
mov eax, dword [esp + 0x34]
test eax, eax
je 0x10cc92ce
mov dx, word [edi + 4]
and edx, 0x1c00
cmp edx, 0xc00
jne 0x10cc92ce
mov eax, dword [esi]
test eax, eax
je 0x10cc92ce
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
push ecx
push edx
push eax
push ebp
call fcn.10cc8c50
add esp, 0x10
mov dword [esp + 0x14], eax
cmp dword [esp + 0x14], 1
jne 0x10cc9338
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x2c]
push ebx
push eax
push ecx
push edx
push esi
push edi
push ebp
call fcn.10cc9650
add esp, 0x1c
test byte [edi + 7], 0xc0
je 0x10cc9338
mov ax, word [edi + 4]
mov ecx, eax
and ecx, 0x1c00
cmp ecx, 0xc00
jne 0x10cc9338
mov edx, eax
and edx, 0x2000
cmp edx, 0x2000
je 0x10cc9338
and al, 0xc0
cmp al, 0x80
je 0x10cc9338
mov ecx, dword [ebx]
test ecx, ecx
je 0x10cc9338
push 0x5ed
push 0x10e1072c
push 1
push edi
call fcn.10c8dc90
and word [edi + 4], 0xfffe
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 0x14
mov ebx, dword [esp + 0x24]
push edi
push ebx
call sym.PBVM90.dll_ot_type_loc
cmp eax, 1
jne 0x10cc9363
push edi
push ebx
call sym.PBVM90.dll_ot_free_out_node
or byte [edi + 4], 1
cmp word [edi + 6], 8
jne 0x10cc9376
mov ax, word [esi + 6]
mov word [edi + 6], ax
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 0x14