Function at 0x69045fb0
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push ebp
mov ecx, 0x16
mov ebp, esp
push edi
push esi
mov esi, eax
lea edi, [ebp - 0x70]
push ebx
mov ebx, eax
sub esp, 0x9c
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x7c], edx
rep movsd dword es:[edi], dword [esi]
call fcn.690459b0
mov dword [ebp - 0x44], eax
mov eax, dword [ebx + 0x3c]
call fcn.690459b0
mov dword [ebp - 0x34], eax
mov eax, dword [ebx + 0x30]
call fcn.690459b0
mov dword [ebp - 0x40], eax
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x69046087
mov dword [esp + 0x14], 0
mov edi, dword [sym.imp.kernel32.dll_MultiByteToWideChar]
mov dword [esp + 0x10], 0
mov edx, dword [ebx + 0x20]
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 4], 0
mov dword [esp], 0
call edi
mov esi, eax
sub esp, 0x18
lea edx, [esi + esi]
mov dword [esp + 4], 0
mov dword [esp + 8], edx
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
mov dword [ebp - 0x54], eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], eax
mov eax, dword [ebx + 0x20]
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 0x1c]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp], 0
call edi
mov dword [ebp - 0x50], esi
sub esp, 0x18
mov edi, dword [ebx + 0xc]
mov dword [ebp - 0x80], edi
test edi, edi
je 0x69046149
cmp byte [edi], 0
je 0x69046280
mov esi, dword [sym.imp.ucrtbase.dll_strlen]
lea esi, [esi]
mov dword [esp], edi
call esi
lea edi, [edi + eax + 1]
cmp byte [edi], 0
jne 0x690460a8
mov eax, dword [ebp - 0x80]
mov edx, dword [sym.imp.kernel32.dll_MultiByteToWideChar]
lea esi, [edi + 1]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
sub esi, eax
mov dword [ebp - 0x80], edx
mov dword [esp + 0xc], esi
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call edx
mov edi, eax
sub esp, 0x18
lea ecx, [edi + edi]
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov edx, dword [ebp - 0x80]
sub esp, 0xc
mov dword [ebp - 0x64], eax
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov eax, dword [ebx + 0xc]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp], 0
call edx
sub esp, 0x18
mov edi, dword [ebx + 0x10]
test edi, edi
je 0x69046211
xor esi, esi
cmp byte [edi], 0
je 0x69046186
mov dword [esp], edi
mov esi, dword [sym.imp.ucrtbase.dll_strlen]
call esi
add eax, 1
lea edx, [edi + eax]
cmp byte [edx], 0
je 0x69046288
mov dword [esp], edx
mov dword [ebp - 0x80], edx
call esi
mov edx, dword [ebp - 0x80]
lea esi, [edx + eax + 1]
sub esi, edi
mov edx, dword [sym.imp.kernel32.dll_MultiByteToWideChar]
mov dword [esp + 8], edi
mov dword [esp + 0x14], 0
mov dword [ebp - 0x80], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
mov dword [esp + 4], 0
mov dword [esp], 0
call edx
mov edi, eax
sub esp, 0x18
lea ecx, [edi + edi]
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov edx, dword [ebp - 0x80]
sub esp, 0xc
mov dword [ebp - 0x60], eax
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], esi
mov eax, dword [ebx + 0x10]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp], 0
call edx
sub esp, 0x18
mov esi, dword [ebp - 0x7c]
lea eax, [ebp - 0x70]
mov edx, esi
call fcn.69045e50
mov eax, dword [ebp - 0x44]
mov dword [esi], ebx
mov dword [esi + 4], 0
mov ebx, dword [sym.imp.kernel32.dll_HeapFree]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov esi, dword fs:[0x18]
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x54]
sub esp, 0xc
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
sub esp, 0xc
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov edi, dword [ebp - 0x80]
jmp 0x690460b6
mov esi, eax
jmp 0x69046186