Function at 0x68004bd0
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov ebx, eax
sub esp, 0x17c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x16c], edx
mov edx, ecx
mov dword [ebp - 0x130], ebx
mov esi, dword [0x68024004]
mov dword [ebp - 0x12c], ecx
test eax, eax
je 0x68004cf8
mov ecx, dword [eax]
mov edi, dword [eax + 0xc]
mov dword [ebp - 0x10c], 0
mov ebx, dword [eax + 4]
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0x128], ecx
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x11c], edi
lea edi, [ebp - 0xe8]
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x118], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x114], ecx
mov ecx, 0x34
mov dword [ebp - 0x108], eax
xor eax, eax
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x134]
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x100], 1
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0xf8], 0x38
mov dword [ebp - 0xec], 0x6b
mov dword [ebp - 0xe0], sym._import_welcome_dlg_proc_16
mov dword [ebp - 0xf4], 0x800
mov dword [ebp - 0xdc], eax
cmp ebx, 1
je 0x68004dae
cmp ebx, 4
je 0x68004ff0
ja 0x68004f88
cmp ebx, 2
je 0x68004fd0
cmp ebx, 3
jne 0x68004f97
mov dword [ebp - 0x110], 2
mov ecx, 2
mov eax, 1
jmp 0x68004e0b
mov edi, dword [ebp + 0xc]
lea ebx, [ebp - 0xe8]
mov ecx, 0x34
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x108], edi
mov edi, ebx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x134]
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x100], 1
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0xf8], 0x38
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xec], 0x6b
mov dword [ebp - 0xe0], sym._import_welcome_dlg_proc_16
mov dword [ebp - 0xf4], 0x800
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xb8], esi
lea eax, [ebp - 0x134]
mov ecx, 3
mov ebx, 4
mov dword [ebp - 0xc0], 0x38
mov dword [ebp - 0xb4], 0x6c
mov dword [ebp - 0xa8], sym._import_file_dlg_proc_16
mov dword [ebp - 0xbc], 0x3000
mov dword [ebp - 0x98], 0x415
mov dword [ebp - 0x94], 0x416
mov dword [ebp - 0xa4], eax
mov eax, 2
imul eax, eax, 0x38
lea edi, [ebp - 0x134]
mov dword [ebp - 0x168], 0x34
mov dword [ebp - 0x164], 0x1088008
mov dword [ebp - 0x15c], esi
mov dword [ebp + eax - 0xdc], edi
mov dword [ebp + eax - 0xf8], 0x38
mov dword [ebp + eax - 0xf0], esi
mov dword [ebp + eax - 0xec], 0x6d
mov dword [ebp + eax - 0xe0], sym._import_store_dlg_proc_16
mov dword [ebp + eax - 0xf4], 0x3000
mov dword [ebp + eax - 0xd0], 0x417
mov dword [ebp + eax - 0xcc], 0x418
imul eax, ecx, 0x38
mov ecx, 8
mov dword [ebp - 0x138], 0xce
mov dword [ebp + eax - 0xdc], edi
lea edi, [ebp - 0x158]
mov dword [ebp + eax - 0xf8], 0x38
mov dword [ebp + eax - 0xf0], esi
mov dword [ebp + eax - 0xec], 0x6e
mov dword [ebp + eax - 0xe0], sym._import_finish_dlg_proc_16
mov dword [ebp + eax - 0xf4], 0x800
xor eax, eax
test edx, edx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x140], 0xcd
mov dword [ebp - 0x160], eax
mov eax, 0x413
cmove edx, eax
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x168]
mov dword [ebp - 0x154], edx
mov dword [esp], eax
call dword [sym.imp.comctl32.dll_PropertySheetW]
mov eax, dword [ebp - 0x114]
sub esp, 4
cmp eax, dword [ebp - 0x120]
je 0x68004f51
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov edx, dword fs:[0x18]
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
mov eax, dword [ebp - 0x10c]
test eax, eax
je 0x68004f64
cmp dword [ebp - 0x124], 5
je 0x68004fb0
mov eax, dword [ebp - 0x134]
mov dword [esp], eax
call dword [sym.imp.gdi32.dll_DeleteObject]
mov eax, dword [ebp - 0xfc]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
cmp ebx, 5
jne 0x68004f97
mov dword [ebp - 0x110], 4
mov ecx, 2
mov ebx, 3
mov eax, 1
jmp 0x68004e0b
mov eax, dword [ebp - 0x120]
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.crypt32.dll_CertCloseStore]
sub esp, 8
jmp 0x68004f64
mov ecx, 2
mov ebx, 3
mov eax, 1
mov dword [ebp - 0x110], 1
jmp 0x68004e0b
mov ecx, 2
mov ebx, 3
mov eax, 1
mov dword [ebp - 0x110], 3
jmp 0x68004e0b