Function at 0x68005dd0
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov ebx, ecx
sub esp, 0x20c
mov dword [ebp - 0x200], edx
xor edx, edx
mov dword [ebp - 0x1b8], eax
lea eax, [ebp - 0x1b0]
mov dword [ebp - 0x1b4], ecx
xor ecx, ecx
mov dword [eax + edx], ecx
add edx, 4
cmp edx, 0x18
jb 0x68005dfa
mov esi, dword [ebp + 8]
mov ecx, 0x18
mov esi, dword [esi]
cmp esi, 0x18
mov dword [ebp - 0x1fc], esi
cmovbe ecx, esi
cmp ecx, 4
jb 0x68006130
mov esi, dword [ebp + 8]
mov edi, eax
mov esi, dword [esi + ecx - 4]
mov dword [ebp + ecx - 0x1b4], esi
dec ecx
mov esi, dword [ebp + 8]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
cmp dword [ebp - 0x1fc], 0x18
jbe 0x68005e50
mov dword [ebp - 0x1b0], 0x18
mov dword [ebp - 0x198], 0x18
mov eax, dword [ebp + 8]
mov dword [ebp - 0x194], 1
mov dword [ebp - 0x190], 0
mov esi, dword [eax + 8]
mov dword [ebp - 0x184], 0
mov eax, dword [0x68024004]
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], 0
mov edx, eax
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x1fc], eax
cmp esi, 1
je 0x68006190
lea edi, [ebp - 0x168]
xor eax, eax
mov ecx, 0x54
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x204], edi
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x1bc]
mov dword [ebp - 0x170], 0xffffffff
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0x38
mov dword [ebp - 0x15c], 0x71
mov dword [ebp - 0x150], sym._export_welcome_dlg_proc_16
mov dword [ebp - 0x164], 0x800
mov dword [ebp - 0x14c], eax
cmp esi, 4
je 0x680063e0
ja 0x68006160
sub esi, 2
cmp esi, 1
lea esi, [ebp - 0x1f0]
ja 0x68006466
mov dword [ebp - 0x194], 1
mov edx, dword [ebp - 0x1fc]
mov dword [ebp - 0x1fc], 3
mov ecx, 2
mov eax, 1
imul eax, eax, 0x38
lea edi, [ebp - 0x1bc]
mov dword [ebp + eax - 0x160], edx
mov dword [ebp + eax - 0x14c], edi
mov dword [ebp + eax - 0x168], 0x38
mov dword [ebp + eax - 0x15c], 0x75
mov dword [ebp + eax - 0x150], sym._export_file_dlg_proc_16
mov dword [ebp + eax - 0x164], 0x3000
mov dword [ebp + eax - 0x140], 0x4b3
mov dword [ebp + eax - 0x13c], 0x4b4
imul eax, ecx, 0x38
mov ecx, 8
mov dword [ebp + eax - 0x160], edx
mov dword [ebp + eax - 0x14c], edi
lea edi, [ebp - 0x1e0]
mov dword [ebp + eax - 0x168], 0x38
mov dword [ebp + eax - 0x15c], 0x76
mov dword [ebp + eax - 0x150], sym._export_finish_dlg_proc_16
mov dword [ebp + eax - 0x164], 0x800
xor eax, eax
test ebx, ebx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x1e4], edx
mov dword [ebp - 0x1f0], 0x34
mov dword [ebp - 0x1e8], eax
mov eax, 0x4b0
cmove ebx, eax
mov eax, dword [ebp - 0x204]
mov dword [esp], esi
mov dword [ebp - 0x1ec], 0x1088008
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x1dc], ebx
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1c8], 0xcd
mov dword [ebp - 0x1c0], 0xce
call dword [sym.imp.comctl32.dll_PropertySheetW]
mov ebx, eax
mov eax, dword [ebp - 0x1bc]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.gdi32.dll_DeleteObject]
mov eax, dword [ebp - 0x180]
mov edi, dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 4
test eax, eax
jne 0x680063b0
mov eax, dword [ebp - 0x17c]
mov dword [esp + 4], 0
mov esi, dword fs:[0x18]
mov dword [esp + 8], eax
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call edi
mov eax, dword [ebp - 0x170]
sub esp, 0xc
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [ebp - 0x174]
sub esp, 4
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call edi
sub esp, 0xc
test ebx, ebx
jne 0x68006180
mov dword [esi + 0x34], 0x4c7
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
test ecx, ecx
je 0x68005e3d
mov esi, dword [ebp + 8]
movzx edx, byte [esi]
mov byte [eax], dl
test cl, 2
je 0x68005e3d
mov esi, dword [ebp + 8]
movzx esi, word [esi + ecx - 2]
mov word [eax + ecx - 2], si
jmp 0x68005e3d
cmp esi, 5
lea esi, [ebp - 0x1f0]
jne 0x68006466
mov dword [ebp - 0x194], 3
jmp 0x68005f6a
mov ebx, dword [ebp - 0x16c]
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, dword [ebp + 0xc]
test edx, edx
je 0x680061c0
mov esi, dword [ebp + 0xc]
mov ecx, 0x18
lea eax, [ebp - 0x198]
cmp dword [esi], 0x18
cmovbe ecx, dword [esi]
cmp ecx, 4
jae 0x68006410
test ecx, ecx
jne 0x68006430
lea esi, [esi]
lea edi, [ebp - 0x168]
xor eax, eax
mov ecx, 0x54
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x204], edi
lea esi, [ebp - 0x1f0]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1fc]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x1bc]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], 2
mov dword [ebp - 0x178], 0
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0xffffffff
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0x38
mov dword [ebp - 0x15c], 0x71
mov dword [ebp - 0x150], sym._export_welcome_dlg_proc_16
mov dword [ebp - 0x164], 0x800
mov dword [esp], eax
call dword [sym.imp.crypt32.dll_CertGetCertificateContextProperty]
mov ecx, dword [ebp + 8]
sub esp, 0x10
mov edx, dword [ecx + 8]
cmp edx, 5
je 0x68006450
jbe 0x68006390
test eax, eax
je 0x6800645b
mov edx, dword [0x68024004]
lea eax, [ebp - 0x1bc]
mov dword [ebp - 0x130], 0x38
mov ecx, 5
mov dword [ebp - 0x114], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xa4], eax
mov eax, 4
mov dword [ebp - 0x128], edx
mov dword [ebp - 0x124], 0x72
mov dword [ebp - 0x118], sym._export_private_key_dlg_proc_16
mov dword [ebp - 0x12c], 0x3000
mov dword [ebp - 0x108], 0x4c4
mov dword [ebp - 0x104], 0x4c5
mov dword [ebp - 0xf8], 0x38
mov dword [ebp - 0xf0], edx
mov dword [ebp - 0xec], 0x74
mov dword [ebp - 0xe0], sym._export_format_dlg_proc_16
mov dword [ebp - 0xf4], 0x3000
mov dword [ebp - 0xd0], 0x4b1
mov dword [ebp - 0xcc], 0x4b2
mov dword [ebp - 0xc0], 0x38
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0xb4], 0x73
mov dword [ebp - 0xa8], sym._export_password_dlg_proc_16
mov dword [ebp - 0xbc], 0x3000
mov dword [ebp - 0x98], 0x4c6
mov dword [ebp - 0x94], 0x4c7
mov dword [ebp - 0x1fc], 6
jmp 0x68005f7e
cmp edx, 4
je 0x68006400
cmp edx, 1
jbe 0x68006288
mov eax, dword [0x68024004]
mov dword [ebp - 0x1fc], eax
jmp 0x68005f5a
mov edx, dword [ebp - 0x188]
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov dword [esp + 8], edx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call edi
sub esp, 0xc
jmp 0x680060b9
lea esi, [ebp - 0x1f0]
mov dword [ebp - 0x194], 5
mov edx, dword [ebp - 0x1fc]
jmp 0x68005f6a
mov eax, dword [0x68024004]
mov dword [ebp - 0x1fc], eax
jmp 0x680063e6
mov esi, dword [ebp + 0xc]
mov edi, eax
mov edx, dword [esi + ecx - 4]
mov dword [ebp + ecx - 0x19c], edx
dec ecx
mov esi, dword [ebp + 0xc]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
jmp 0x680061c0
movzx edx, byte [esi]
mov byte [eax], dl
test cl, 2
je 0x680061c0
mov esi, dword [ebp + 0xc]
movzx edx, word [esi + ecx - 2]
mov word [eax + ecx - 2], dx
jmp 0x680061c0
mov edx, dword [0x68024004]
jmp 0x6800616f
mov eax, dword [0x68024004]
mov dword [ebp - 0x1fc], eax
mov edx, dword [ebp - 0x1fc]
lea eax, [ebp - 0x1bc]
mov dword [ebp - 0x130], 0x38
mov ecx, 3
mov dword [ebp - 0x114], eax
mov eax, 2
mov dword [ebp - 0x128], edx
mov dword [ebp - 0x124], 0x74
mov dword [ebp - 0x118], sym._export_format_dlg_proc_16
mov dword [ebp - 0x12c], 0x3000
mov dword [ebp - 0x108], 0x4b1
mov dword [ebp - 0x104], 0x4b2
mov dword [ebp - 0x1fc], 4
jmp 0x68005f7e