Function at 0x68005500
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x20c
mov dword [ebp - 0x204], ecx
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x200], edx
xor edx, edx
mov dword [ebp - 0x1b8], eax
xor eax, eax
mov dword [ebp + eax - 0x1b0], edx
add eax, 4
cmp eax, 0x18
jb 0x6800552b
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov eax, 0x18
cmp ecx, 0x18
cmovbe eax, ecx
cmp eax, 4
jb 0x68005890
mov esi, dword [ebp + 8]
mov edx, dword [esi + eax - 4]
mov dword [ebp + eax - 0x1b4], edx
sub eax, 1
cmp eax, 4
jb 0x68005582
mov esi, dword [ebp + 8]
and eax, 0xfffffffc
xor edx, edx
mov ebx, dword [esi + edx]
mov dword [ebp + edx - 0x1b0], ebx
add edx, 4
cmp edx, eax
jb 0x68005571
cmp ecx, 0x18
jbe 0x68005591
mov dword [ebp - 0x1b0], 0x18
mov eax, dword [ebp + 8]
lea esi, [ebp - 0x1bc]
mov dword [ebp - 0x198], 0x18
mov dword [ebp - 0x194], 1
mov dword [ebp - 0x190], 0
mov edx, dword [eax + 8]
mov dword [ebp - 0x184], 0
mov eax, dword [0x68022004]
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], 0
mov ebx, eax
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x1fc], eax
cmp edx, 1
je 0x680058f0
lea edi, [ebp - 0x168]
xor eax, eax
mov ecx, 0x54
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x208], edi
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x178], 0
lea edi, [ebp - 0x1f0]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0xffffffff
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0x38
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], 0x71
mov dword [ebp - 0x150], sym._export_welcome_dlg_proc_16
mov dword [ebp - 0x164], 0x800
mov dword [ebp - 0x14c], esi
cmp edx, 4
je 0x68005afb
ja 0x680058c0
sub edx, 2
lea edi, [ebp - 0x1f0]
cmp edx, 1
ja 0x68005b81
mov dword [ebp - 0x194], 1
mov ebx, dword [ebp - 0x1fc]
mov edx, 2
mov ecx, 3
mov eax, 1
imul eax, eax, 0x38
imul edx, edx, 0x38
mov dword [ebp + eax - 0x168], 0x38
mov dword [ebp + eax - 0x160], ebx
mov dword [ebp + eax - 0x15c], 0x75
mov dword [ebp + eax - 0x150], sym._export_file_dlg_proc_16
mov dword [ebp + eax - 0x164], 0x3000
mov dword [ebp + eax - 0x14c], esi
mov dword [ebp + eax - 0x140], 0x4b3
mov dword [ebp + eax - 0x13c], 0x4b4
xor eax, eax
mov dword [ebp + edx - 0x168], 0x38
mov dword [ebp + edx - 0x160], ebx
mov dword [ebp + edx - 0x15c], 0x76
mov dword [ebp + edx - 0x150], sym._export_finish_dlg_proc_16
mov dword [ebp + edx - 0x164], 0x800
mov dword [ebp + edx - 0x14c], esi
xor edx, edx
mov dword [ebp + eax - 0x1e0], edx
add eax, 4
cmp eax, 0x20
jb 0x68005754
mov eax, dword [ebp - 0x200]
mov esi, dword [ebp - 0x204]
mov dword [esp], edi
mov dword [ebp - 0x1e4], ebx
test esi, esi
mov dword [ebp - 0x1e8], eax
mov eax, 0x4b0
cmovne eax, esi
mov dword [ebp - 0x1d8], ecx
mov dword [ebp - 0x1f0], 0x34
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x1ec], 0x1088008
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1c8], 0xcd
mov dword [ebp - 0x1c0], 0xce
call sym._PropertySheetW_4
mov ebx, eax
mov eax, dword [ebp - 0x1bc]
sub esp, 4
mov dword [esp], eax
call sym._DeleteObject_4
mov eax, dword [ebp - 0x180]
mov edi, dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 4
test eax, eax
je 0x68005819
mov edx, dword [ebp - 0x188]
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov dword [esp + 8], edx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call edi
sub esp, 0xc
mov eax, dword [ebp - 0x17c]
mov dword [esp + 4], 0
mov esi, dword fs:[0x18]
mov dword [esp + 8], eax
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call edi
mov eax, dword [ebp - 0x170]
sub esp, 0xc
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [ebp - 0x174]
sub esp, 4
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call edi
sub esp, 0xc
test ebx, ebx
jne 0x680058e0
mov dword [esi + 0x34], 0x4c7
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
test eax, eax
je 0x68005582
mov esi, dword [ebp + 8]
movzx edx, byte [esi]
mov byte [ebp - 0x1b0], dl
test al, 2
je 0x68005582
movzx edx, word [esi + eax - 2]
mov word [ebp + eax - 0x1b2], dx
jmp 0x68005582
lea edi, [ebp - 0x1f0]
cmp edx, 5
jne 0x68005b81
mov dword [ebp - 0x194], 3
jmp 0x680056b1
mov ebx, dword [ebp - 0x16c]
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
test edi, edi
je 0x68005910
cmp dword [edi], 0x18
mov eax, 0x18
cmovbe eax, dword [edi]
cmp eax, 4
jae 0x68005b10
test eax, eax
jne 0x68005b48
lea edi, [ebp - 0x168]
xor eax, eax
mov ecx, 0x54
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x208], edi
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1fc]
lea edi, [ebp - 0x1f0]
mov dword [esp + 8], 0
mov dword [esp + 0xc], edi
mov dword [ebp - 0x160], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], 2
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x14c], esi
mov dword [ebp - 0x178], 0
mov dword [esp], eax
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0xffffffff
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0x38
mov dword [ebp - 0x15c], 0x71
mov dword [ebp - 0x150], sym._export_welcome_dlg_proc_16
mov dword [ebp - 0x164], 0x800
call sym._CertGetCertificateContextProperty_16
mov ebx, dword [ebp + 8]
sub esp, 0x10
mov edx, dword [ebx + 8]
cmp edx, 5
je 0x68005b6b
jbe 0x68005ad0
test eax, eax
je 0x68005b76
mov ebx, dword [0x68022004]
mov dword [ebp - 0x114], esi
mov edx, 5
mov ecx, 6
mov dword [ebp - 0x130], 0x38
mov eax, 4
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x124], 0x72
mov dword [ebp - 0x118], sym._export_private_key_dlg_proc_16
mov dword [ebp - 0x12c], 0x3000
mov dword [ebp - 0x108], 0x4c4
mov dword [ebp - 0x104], 0x4c5
mov dword [ebp - 0xf8], 0x38
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], 0x74
mov dword [ebp - 0xe0], sym._export_format_dlg_proc_16
mov dword [ebp - 0xf4], 0x3000
mov dword [ebp - 0xd0], 0x4b1
mov dword [ebp - 0xcc], 0x4b2
mov dword [ebp - 0xdc], esi
mov dword [ebp - 0xc0], 0x38
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], 0x73
mov dword [ebp - 0xa8], sym._export_password_dlg_proc_16
mov dword [ebp - 0xbc], 0x3000
mov dword [ebp - 0x98], 0x4c6
mov dword [ebp - 0x94], 0x4c7
mov dword [ebp - 0xa4], esi
jmp 0x680056c0
cmp edx, 4
je 0x68005af0
cmp edx, 1
jbe 0x680059d1
mov eax, dword [0x68022004]
mov dword [ebp - 0x1fc], eax
jmp 0x680056a1
mov eax, dword [0x68022004]
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x194], 5
mov ebx, dword [ebp - 0x1fc]
jmp 0x680056b1
mov edx, dword [edi + eax - 4]
mov dword [ebp + eax - 0x19c], edx
sub eax, 1
cmp eax, 4
jb 0x68005910
and eax, 0xfffffffc
xor edx, edx
mov ecx, dword [edi + edx]
mov dword [ebp + edx - 0x198], ecx
add edx, 4
cmp edx, eax
jb 0x68005b2c
jmp 0x68005910
movzx edx, byte [edi]
mov byte [ebp - 0x198], dl
test al, 2
je 0x68005910
movzx edx, word [edi + eax - 2]
mov word [ebp + eax - 0x19a], dx
jmp 0x68005910
mov ebx, dword [0x68022004]
jmp 0x680058cf
mov eax, dword [0x68022004]
mov dword [ebp - 0x1fc], eax
mov ebx, dword [ebp - 0x1fc]
mov dword [ebp - 0x114], esi
mov edx, 3
mov ecx, 4
mov dword [ebp - 0x130], 0x38
mov eax, 2
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x124], 0x74
mov dword [ebp - 0x118], sym._export_format_dlg_proc_16
mov dword [ebp - 0x12c], 0x3000
mov dword [ebp - 0x108], 0x4b1
mov dword [ebp - 0x104], 0x4b2
jmp 0x680056c0