Function at 0x64aa31d0
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
mov ebx, dword [ebp + 8]
mov esi, dword [ebp + 0x10]
cmp dword [ebx + 0x4c], 3
je 0x64aa33d0
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x1c]
mov eax, ebx
call sym._METAFILE_AddPenObject
mov edi, eax
test eax, eax
jne 0x64aa33c0
fld dword [esi]
fld dword [esi + 4]
fld dword [esi + 8]
fld dword [esi + 0xc]
fxch st(3)
fnstcw word [ebp - 0x2a]
movzx eax, word [ebp - 0x2a]
or ah, 0xc
mov word [ebp - 0x2c], ax
fldcw word [ebp - 0x2c]
fist word [ebp - 0x30]
fldcw word [ebp - 0x2a]
fild word [ebp - 0x30]
fxch st(1)
fucompi st(1)
fstp st(0)
jp 0x64aa32ec
jne 0x64aa32f8
fxch st(1)
fldcw word [ebp - 0x2c]
fist word [ebp - 0x30]
fldcw word [ebp - 0x2a]
fild word [ebp - 0x30]
fxch st(1)
fucompi st(1)
fstp st(0)
jp 0x64aa3300
jne 0x64aa3310
fldcw word [ebp - 0x2c]
fist word [ebp - 0x30]
fldcw word [ebp - 0x2a]
fild word [ebp - 0x30]
fxch st(1)
fucompi st(1)
fstp st(0)
jp 0x64aa3316
jne 0x64aa3320
xor eax, eax
mov edx, dword [ebx + 0x64]
fldcw word [ebp - 0x2c]
fist word [ebp - 0x30]
fldcw word [ebp - 0x2a]
fild word [ebp - 0x30]
fucompi st(1)
fstp st(0)
setnp al
cmovne eax, edi
mov dword [ebp - 0x30], eax
test edx, edx
jne 0x64aa3334
mov dword [esp + 8], 0x100
mov dword [esp + 4], 8
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [ebx + 0x60], eax
sub esp, 0xc
test eax, eax
je 0x64aa3500
mov dword [eax], 0x2b464d45
mov ecx, 0xc
mov edx, dword [ebx + 0x60]
mov eax, 4
mov dword [ebx + 0x64], 0x100
jmp 0x64aa3345
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x64aa3322
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x64aa3322
fstp st(0)
fstp st(0)
jmp 0x64aa3322
fstp st(0)
fstp st(0)
jmp 0x64aa3322
fstp st(0)
jmp 0x64aa3322
fstp st(0)
mov edx, dword [ebx + 0x64]
mov dword [ebp - 0x30], 0
test edx, edx
je 0x64aa329d
mov eax, dword [ebx + 0x68]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x64aa33e8
mov edx, dword [ebx + 0x60]
add eax, edx
mov edx, 0x4012
mov dword [ebx + 0x68], ecx
mov ecx, dword [ebp - 0x30]
mov word [eax], dx
mov edx, dword [ebp - 0x1c]
mov dword [eax + 4], 8
mov dword [eax + 8], 0xfffffffc
mov word [eax + 2], dx
test ecx, ecx
jne 0x64aa34a8
fld dword [ebp + 0x14]
lea edx, [eax + 0x14]
fstp dword [eax + 0xc]
fld dword [ebp + 0x18]
fstp dword [eax + 0x10]
mov ecx, dword [esi]
mov dword [eax + 0x14], ecx
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov eax, dword [esi + 8]
mov dword [edx + 8], eax
mov eax, dword [esi + 0xc]
mov dword [edx + 0xc], eax
mov eax, dword [ebx + 0x68]
cmp eax, 4
jbe 0x64aa33c0
mov edx, dword [ebx + 0x60]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov eax, dword [ebx + 0x58]
mov dword [esp], eax
call sym._GdiComment_12
mov dword [ebx + 0x68], 4
sub esp, 0xc
lea esp, [ebp - 0xc]
mov eax, edi
pop ebx
pop esi
pop edi
pop ebp
ret
test byte [0x64ab5100], 1
jne 0x64aa3478
mov edi, 6
jmp 0x64aa33c0
lea eax, [ecx + ecx]
mov dword [ebp - 0x34], eax
mov ecx, dword fs:[0x18]
mov dword [esp + 8], eax
mov dword [esp + 4], 8
mov eax, dword [ecx + 0x30]
mov dword [ebp - 0x38], ecx
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
mov edx, eax
test eax, eax
je 0x64aa3500
mov eax, dword [ebx + 0x68]
mov dword [esp + 8], eax
mov ecx, dword [ebx + 0x60]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [ebp - 0x3c], edx
call sym._memcpy
mov eax, dword [ebp - 0x34]
mov dword [ebx + 0x64], eax
mov eax, dword [ebx + 0x60]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x38]
mov eax, dword [ecx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebx + 0x68]
sub esp, 0xc
mov dword [ebx + 0x60], edx
lea ecx, [eax + 8]
jmp 0x64aa3345
mov dword [esp + 0xc], 0x64abf26c
mov dword [esp + 8], str.METAFILE_DrawArc
mov dword [esp + 4], 0x64ab5100
mov dword [esp], 0
call sym._wine_dbg_log.constprop.0_9
jmp 0x64aa33dd
fld dword [ebp + 0x14]
or dh, 0x40
mov word [eax + 2], dx
fstp dword [eax + 0xc]
fld dword [ebp + 0x18]
fstp dword [eax + 0x10]
fld dword [esi]
fnstcw word [ebp - 0x2a]
movzx edx, word [ebp - 0x2a]
or dh, 0xc
mov word [ebp - 0x2c], dx
fldcw word [ebp - 0x2c]
fistp word [eax + 0x14]
fldcw word [ebp - 0x2a]
fld dword [esi + 4]
fldcw word [ebp - 0x2c]
fistp word [eax + 0x16]
fldcw word [ebp - 0x2a]
fld dword [esi + 8]
fldcw word [ebp - 0x2c]
fistp word [eax + 0x18]
fldcw word [ebp - 0x2a]
fld dword [esi + 0xc]
fldcw word [ebp - 0x2c]
fistp word [eax + 0x1a]
fldcw word [ebp - 0x2a]
jmp 0x64aa3398
mov edi, 3
jmp 0x64aa33c0