Function at 0x6f5033e0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x2c
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
test byte [0x6f50e018], 8
jne 0x6f503780
test esi, esi
je 0x6f5038ac
test ebx, ebx
je 0x6f5038ac
mov dword [ebx], 0
xor edx, edx
mov ecx, 8
mov eax, esi
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov dword [ebx + 0x10], 0
call sym._validate_indices
test eax, eax
jne 0x6f503450
mov eax, 0x80070057
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
ret 8
movzx eax, word [esi + 2]
movzx edx, word [esi + 4]
mov ecx, 0xe
movzx eax, byte [eax + 0x6f50f860]
movzx edx, byte [edx + 0x6f50f860]
shl eax, 0x1c
shl edx, 0x18
or eax, edx
movzx edx, word [esi + 0x10]
movzx edx, byte [edx + 0x6f50f860]
or eax, edx
movzx edx, word [esi + 6]
movzx edx, byte [edx + 0x6f50f860]
shl edx, 0x14
or eax, edx
movzx edx, word [esi + 8]
movzx edx, byte [edx + 0x6f50f860]
shl edx, 0x10
or eax, edx
movzx edx, word [esi + 0xa]
movzx edx, byte [edx + 0x6f50f860]
shl edx, 0xc
or eax, edx
movzx edx, word [esi + 0xc]
movzx edx, byte [edx + 0x6f50f860]
shl edx, 8
or eax, edx
movzx edx, word [esi + 0xe]
movzx edx, byte [edx + 0x6f50f860]
shl edx, 4
or eax, edx
mov edx, 9
mov dword [ebx], eax
mov eax, esi
call sym._validate_indices
test eax, eax
je 0x6f503440
movzx eax, word [esi + 0x14]
movzx edx, word [esi + 0x16]
mov ecx, 0x13
movzx eax, byte [eax + 0x6f50f860]
movzx edx, byte [edx + 0x6f50f860]
shl eax, 0xc
shl edx, 8
or eax, edx
movzx edx, word [esi + 0x1a]
movzx edx, byte [edx + 0x6f50f860]
or eax, edx
movzx edx, word [esi + 0x18]
movzx edx, byte [edx + 0x6f50f860]
shl edx, 4
or eax, edx
mov edx, 0xf
mov word [ebx + 4], ax
mov eax, esi
call sym._validate_indices
test eax, eax
je 0x6f503440
movzx eax, word [esi + 0x1e]
movzx edx, word [esi + 0x20]
mov ecx, 0x15
movzx eax, byte [eax + 0x6f50f860]
movzx edx, byte [edx + 0x6f50f860]
shl eax, 0xc
shl edx, 8
or eax, edx
movzx edx, word [esi + 0x24]
movzx edx, byte [edx + 0x6f50f860]
or eax, edx
movzx edx, word [esi + 0x22]
movzx edx, byte [edx + 0x6f50f860]
shl edx, 4
or eax, edx
mov edx, 0x14
mov word [ebx + 6], ax
mov eax, esi
call sym._validate_indices
test eax, eax
je 0x6f503440
movzx eax, word [esi + 0x28]
movzx edx, word [esi + 0x2a]
mov ecx, 0x18
movzx eax, byte [eax + 0x6f50f860]
shl eax, 4
or al, byte [edx + 0x6f50f860]
mov edx, 0x16
mov byte [ebx + 8], al
mov eax, esi
call sym._validate_indices
test eax, eax
je 0x6f503440
movzx eax, word [esi + 0x2c]
movzx edx, word [esi + 0x2e]
mov ecx, 0x1a
movzx eax, byte [eax + 0x6f50f860]
shl eax, 4
or al, byte [edx + 0x6f50f860]
mov edx, 0x19
mov byte [ebx + 9], al
mov eax, esi
call sym._validate_indices
test eax, eax
je 0x6f503440
movzx eax, word [esi + 0x32]
movzx edx, word [esi + 0x34]
mov ecx, 0x1c
movzx eax, byte [eax + 0x6f50f860]
shl eax, 4
or al, byte [edx + 0x6f50f860]
mov edx, 0x1b
mov byte [ebx + 0xa], al
mov eax, esi
call sym._validate_indices
test eax, eax
je 0x6f503440
movzx eax, word [esi + 0x36]
movzx edx, word [esi + 0x38]
mov ecx, 0x1e
movzx eax, byte [eax + 0x6f50f860]
shl eax, 4
or al, byte [edx + 0x6f50f860]
mov edx, 0x1d
mov byte [ebx + 0xb], al
mov eax, esi
call sym._validate_indices
test eax, eax
je 0x6f503440
movzx eax, word [esi + 0x3a]
movzx edx, word [esi + 0x3c]
mov ecx, 0x20
movzx eax, byte [eax + 0x6f50f860]
shl eax, 4
or al, byte [edx + 0x6f50f860]
mov edx, 0x1f
mov byte [ebx + 0xc], al
mov eax, esi
call sym._validate_indices
test eax, eax
je 0x6f503440
movzx eax, word [esi + 0x3e]
movzx edx, word [esi + 0x40]
mov ecx, 0x22
movzx eax, byte [eax + 0x6f50f860]
shl eax, 4
or al, byte [edx + 0x6f50f860]
mov edx, 0x21
mov byte [ebx + 0xd], al
mov eax, esi
call sym._validate_indices
test eax, eax
je 0x6f503440
movzx eax, word [esi + 0x42]
movzx edx, word [esi + 0x44]
mov ecx, 0x25
movzx eax, byte [eax + 0x6f50f860]
shl eax, 4
or al, byte [edx + 0x6f50f860]
mov edx, 0x23
mov byte [ebx + 0xe], al
mov eax, esi
call sym._validate_indices
test eax, eax
je 0x6f503440
movzx eax, word [esi + 0x46]
movzx edx, word [esi + 0x48]
lea ecx, [esi + 0x4c]
movzx eax, byte [eax + 0x6f50f860]
shl eax, 4
or al, byte [edx + 0x6f50f860]
mov byte [ebx + 0xf], al
movzx eax, word [esi + 0x4c]
test ax, ax
je 0x6f503440
cmp ax, 0x2c
je 0x6f50373d
cmp ax, 0x20
jne 0x6f50384d
mov dword [ebp - 0x14], 0
cmp ax, 0x2c
je 0x6f50376b
lea esi, [esi]
movzx eax, word [ecx + 2]
lea edi, [ecx + 2]
cmp ax, 0x20
je 0x6f503763
cmp ax, 0x2c
jne 0x6f5037d1
mov ecx, edi
cmp ax, 0x2c
jne 0x6f503750
mov edi, dword [ebp - 0x14]
test edi, edi
jne 0x6f503841
mov dword [ebp - 0x14], 1
jmp 0x6f503750
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call sym._wine_dbgstr_wn
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], str.__s___p__n
mov dword [esp + 0x10], 0x1b4
mov dword [esp + 0xc], str.PSPropertyKeyFromString
mov dword [esp + 8], 0x6f50f3c5
mov dword [esp + 4], 0x6f50e018
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x6f5033fc
test ax, ax
je 0x6f503440
mov esi, dword [ebp - 0x14]
test esi, esi
je 0x6f503850
cmp ax, 0x2d
je 0x6f503898
mov dword [ebp - 0x14], 0
mov esi, edi
mov edi, dword [sym.imp.msvcrt.dll_iswctype]
jmp 0x6f50381c
mov eax, dword [ebx + 0x10]
add esi, 2
lea eax, [eax + eax*4]
add eax, eax
mov dword [ebx + 0x10], eax
movzx ecx, word [esi - 2]
lea eax, [eax + ecx - 0x30]
mov dword [ebx + 0x10], eax
movzx eax, word [esi]
mov dword [esp + 4], 4
mov dword [esp], eax
call edi
test eax, eax
jne 0x6f503800
mov edx, dword [ebp - 0x14]
test edx, edx
je 0x6f503841
neg dword [ebx + 0x10]
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
ret 8
add esp, 0x2c
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret 8
mov edi, ecx
nop
cmp ax, 0x2d
jne 0x6f503863
lea esi, [esi]
lea esi, [esi]
add edi, 2
movzx eax, word [edi]
cmp ax, 0x20
je 0x6f503860
cmp ax, 0x2d
jne 0x6f5038a4
movzx eax, word [edi + 2]
lea esi, [edi + 2]
cmp ax, 0x20
jne 0x6f50388c
nop
add esi, 2
movzx eax, word [esi]
cmp ax, 0x20
je 0x6f503880
mov dword [ebp - 0x14], 1
jmp 0x6f5037f4
lea esi, [ecx + 4]
movzx eax, word [ecx + 4]
jmp 0x6f5037f4
movzx eax, word [edi]
jmp 0x6f5037eb
mov eax, 0x80004003
jmp 0x6f503445