Function at 0x65345993
Capabilities:
Enumerate pe sections

Disassembly:
push ebx
mov ebx, dword [esp + 0x10]
test ebx, ebx
je 0x6536c1e1
mov eax, dword [esp + 0xc]
push edi
push esi
mov cx, word [ebx + 2]
lea esi, [eax + 7]
push ebp
and esi, 0xfffffff8
mov bp, word [ebx]
mov dword [esp + 0x1c], esi
add esi, 4
mov dx, word [ebx + 4]
mov ax, word [ebx + 6]
mov dword [esi], 0
add esi, 4
mov word [esi], bp
add esi, 2
mov word [esi], cx
add esi, 2
mov word [esi], dx
add esi, 2
mov word [esi], ax
add esi, 2
test ebp, 0x2000
jne 0x65345a4a
mov ecx, ebp
add esi, 4
and ecx, 0xffff
mov dword [esi - 4], ecx
test ebp, 0x4000
jne 0x65345a52
cmp bp, 0xc
je 0x6536c1f8
cmp bp, 0xe
mov dword [esp + 0x18], 0
mov edi, ebx
je 0x65345a1f
lea edi, [ebx + 8]
mov eax, dword [esp + 0x18]
mov ecx, ebp
and ecx, 0xffff
cmp ecx, 0x24
jg 0x65345b31
je 0x6536c261
cmp ecx, 0x17
ja case.0x65345a43.15
jmp dword [ecx*4 + 0x6534b6e8]
and ebp, 0x6000
jmp 0x653459ec
mov edi, dword [ebx + 8]
test edi, edi
je 0x6536c1e9
mov eax, esi
add esi, 4
mov dword [esp + 0x18], eax
and ebp, 0xbfff
mov dword [eax], 4
jmp 0x65345a23
mov dl, byte [edi]
mov byte [esi], dl
inc esi
jmp 0x65345a8d
mov ax, word [edi]
mov word [esi], ax
add esi, 2
jmp 0x65345a8d
mov ecx, dword [edi]
mov dword [esi], ecx
add esi, 4
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov ecx, esi
push 2
sub ecx, eax
push 5
add ecx, 7
push edx
shr ecx, 3
mov dword [eax], ecx
call fcn.6534595a
add esp, 0xc
test eax, eax
je 0x6536c2ae
mov eax, esi
pop ebp
pop esi
pop edi
pop ebx
ret 0xc
mov edx, dword [edi]
mov ecx, dword [edi + 4]
add esi, 7
and esi, 0xfffffff8
mov dword [esi], edx
mov dword [esi + 4], ecx
add esi, 8
test eax, eax
je 0x65345a8d
mov dword [eax], 8
jmp 0x65345a8d
mov eax, dword [edi]
mov dword [esi], eax
add esi, 4
test eax, eax
je 0x65345a8d
mov edx, dword [esp + 0x14]
push edi
push esi
push edx
call sym.OLEAUT32.dll_BSTR_UserMarshal
jmp 0x65345b58
mov edi, dword [edi]
mov dword [esi], edi
add esi, 4
test edi, edi
je 0x65345a8d
cmp bp, 0xd
mov eax, 0x65342398
je 0x65345b12
mov eax, 0x65342368
push eax
mov eax, dword [esp + 0x18]
push edi
push esi
mov ecx, dword [eax]
push ecx
push eax
call fcn.6534d300
jmp 0x65345b58
test eax, eax
je 0x65345a8d
jmp case.0x65345a43.15
cmp ecx, 0x2000
jne case.0x65345a43.15
mov eax, dword [edi]
mov dword [esi], eax
add esi, 4
test eax, eax
je 0x65345a8d
mov eax, dword [esp + 0x14]
push edi
push esi
push eax
call sym.OLEAUT32.dll_LPSAFEARRAY_UserMarshal
mov esi, eax
jmp 0x65345a8d
mov eax, dword [esp + 0xc]
pop ebx
ret 0xc
push 0x6f4
call fcn.6537bff3
jmp 0x65345a5d
push 0x80070057
call fcn.6537bff3
jmp 0x65345a0c
mov ecx, dword [edi]
add esi, 7
and esi, 0xfffffff8
mov edx, esi
add esi, 0x10
test eax, eax
mov dword [edx], ecx
mov ecx, dword [edi + 4]
mov dword [edx + 4], ecx
mov ecx, dword [edi + 8]
mov dword [edx + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [edx + 0xc], ecx
je 0x65345a8d
mov dword [eax], 0x10
jmp 0x65345a8d
mov edx, dword [esp + 0x14]
mov dword [esi], 0x72657355
add esi, 4
push edi
push esi
push edx
call sym.OLEAUT32.dll_VARIANT_UserMarshal
mov esi, eax
mov eax, dword [esp + 0x18]
mov dword [eax], 0x10
jmp 0x65345a8d
test eax, eax
je 0x6536c278
mov esi, eax
mov eax, dword [ebx + 0xc]
test eax, eax
jne 0x6536c278
push 0x6f4
call fcn.6537bff3
mov eax, dword [ebx + 0xc]
mov dword [esi], eax
add esi, 4
test eax, eax
je 0x65345a8d
mov ecx, dword [ebx + 8]
mov edx, dword [esp + 0x14]
push ecx
push eax
push 1
push esi
push edx
call fcn.6538db83
jmp 0x65345b58
push 0x80020008
call fcn.6537bff3
jmp 0x65345a8d
add esi, 7
and esi, 0xfffffff8
jmp 0x65345ab6