Function at 0x625429a0
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
test byte [0x62545018], 8
jne 0x62542be0
cmp word [0x6254901c], 0
je 0x62542bb0
mov edi, dword [section..bss]
test edi, edi
je 0x62542b70
mov ebx, dword [0x62549008]
test ebx, ebx
je 0x62542b83
mov eax, dword [ebp + 0xc]
xor edi, edi
cmp byte [eax + 0x7a], 0
je 0x62542a4f
test ebx, ebx
jle 0x62542a4f
mov eax, dword [0x62549004]
xor esi, esi
mov ecx, edi
mov edi, esi
mov esi, ebx
mov ebx, ecx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
add eax, 0x7a
mov dword [ebp - 0x20], eax
xor eax, eax
jmp 0x62542a1c
add ebx, 1
movzx eax, bx
mov edi, eax
cmp esi, eax
jle 0x62542a3d
mov ecx, dword [ebp - 0x1c]
lea eax, [eax + eax*4]
mov edx, dword [ebp - 0x20]
shl eax, 5
lea eax, [ecx + eax + 0x7e]
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_strcmp]
test eax, eax
jne 0x62542a10
mov eax, ebx
mov ebx, esi
mov esi, edi
cmp ebx, esi
mov edi, eax
mov eax, 0
cmove edi, eax
mov dword [esp + 8], 0xb8
mov dword [esp + 4], 0
mov ebx, dword fs:[0x18]
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call sub.kernel32.dll_HeapAlloc
sub esp, 0xc
mov esi, eax
test eax, eax
je 0x62542cb8
movzx edx, di
lea eax, [edx + edx*4]
shl eax, 5
add eax, dword [0x62549004]
mov eax, dword [eax]
mov dword [esp], eax
call sub.kernel32.dll_LoadLibraryA
sub esp, 4
test eax, eax
je 0x62542d30
mov dword [esi + 0xa0], eax
mov dword [esp + 4], str.DS_Entry
mov dword [esp], eax
call sub.kernel32.dll_GetProcAddress
mov ecx, dword [ebp + 0xc]
mov dword [esi + 0xa4], eax
mov eax, dword [0x62549018]
sub esp, 8
mov dword [ecx], eax
lea edx, [eax + 1]
mov eax, dword [ebp + 8]
mov dword [0x62549018], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], 0x401
mov dword [esp + 8], 3
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [esi + 0xa4]
sub esp, 0x14
mov edi, eax
test ax, ax
jne 0x62542c78
mov eax, dword [0x625490c0]
mov dword [esi], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov dword [esi + 4], eax
mov eax, dword [ebp + 0xc]
add eax, 0x7a
mov dword [esp + 4], eax
lea eax, [esi + 0x7e]
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_strcpy]
lea eax, [esi + 0xa8]
mov dword [esi + 0xb0], 0
mov dword [esi + 0xac], eax
mov dword [esi + 0xa8], eax
xor eax, eax
mov dword [esi + 0xb4], 0
mov dword [0x625490c0], esi
mov word [0x625490c8], ax
lea esp, [ebp - 0xc]
mov eax, edi
pop ebx
pop esi
pop edi
pop ebp
ret
call fcn.62542220
mov ebx, dword [0x62549008]
test ebx, ebx
jne 0x625429e0
test byte [0x62545018], 1
jne 0x62542c48
mov esi, 3
mov edi, 1
mov word [0x625490c8], si
lea esp, [ebp - 0xc]
mov eax, edi
pop ebx
pop esi
pop edi
pop ebp
ret
test byte [0x62545018], 1
jne 0x62542d00
mov eax, 0xb
mov edi, 1
mov word [0x625490c8], ax
lea esp, [ebp - 0xc]
mov eax, edi
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0xc], str.DG_CONTROL_DAT_IDENTITY_MSG_OPENDS_n
mov dword [esp + 8], str.TWAIN_OpenDS
mov dword [esp + 4], 0x62545018
mov dword [esp], 3
call fcn.62541280
test byte [0x62545018], 8
je 0x625429b6
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xc], str.pIdentity_is__s_n
mov dword [esp + 8], str.TWAIN_OpenDS
add eax, 0x7a
mov dword [esp + 4], 0x62545018
mov dword [esp + 0x10], eax
mov dword [esp], 3
call fcn.62541280
jmp 0x625429b6
mov dword [esp + 0xc], str.no_devs._n
mov dword [esp + 8], str.TWAIN_OpenDS
mov dword [esp + 4], 0x62545018
mov dword [esp], 0
call fcn.62541280
jmp 0x62542b90
mov dword [esp + 8], esi
mov edx, 5
mov edi, 1
mov dword [esp + 4], 0
mov eax, dword [ebx + 0x30]
mov word [0x625490c8], dx
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call sub.kernel32.dll_HeapFree
sub dword [0x62549018], 1
sub esp, 0xc
jmp 0x62542ba1
mov ebx, 2
mov edi, 1
mov word [0x625490c8], bx
test byte [0x62545018], 1
je 0x62542ba1
mov dword [esp + 0xc], str.Out_of_memory._n
mov dword [esp + 8], str.TWAIN_OpenDS
mov dword [esp + 4], 0x62545018
mov dword [esp], 0
call fcn.62541280
jmp 0x62542ba1
mov dword [esp + 0xc], str.seq_error_n
mov dword [esp + 8], str.TWAIN_OpenDS
mov dword [esp + 4], 0x62545018
mov dword [esp], 0
call fcn.62541280
jmp 0x62542bbd
test byte [0x62545018], 2
jne 0x62542d78
mov dword [esp + 8], esi
mov ecx, 5
mov edi, 1
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov word [0x625490c8], cx
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call sub.kernel32.dll_HeapFree
sub esp, 0xc
jmp 0x62542ba1
call fcn.62541370
mov dword [esp + 0xc], str.Failed_to_load_TWAIN_Source__s_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.TWAIN_OpenDS
mov dword [esp + 4], 0x62545018
mov dword [esp], 1
call fcn.62541280
jmp 0x62542d39