Function at 0x64aa22d0
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov ebx, dword [ebp + 8]
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0x1c], 0xffffffff
cmp dword [ebx + 0x4c], 3
je 0x64aa25c0
mov eax, dword [ebp + 0xc]
mov edi, dword [eax]
test edi, edi
je 0x64aa230d
mov edx, eax
lea ecx, [ebp - 0x1c]
mov eax, ebx
call sym._METAFILE_AddBrushObject
test eax, eax
jne 0x64aa2437
mov edx, dword [ebx + 0x64]
test edx, edx
je 0x64aa2440
mov eax, dword [ebx + 0x68]
lea ecx, [eax + 0x20]
cmp edx, ecx
jb 0x64aa2528
mov edx, dword [ebx + 0x60]
add eax, edx
mov dword [ebx + 0x68], ecx
mov dword [eax], 0x400e
mov dword [eax + 4], 0x20
mov dword [eax + 8], 0x14
test edi, edi
jne 0x64aa2518
mov edi, dword [ebp + 0xc]
mov edx, 0xffff8000
mov ecx, 0xffffc000
mov word [eax + 2], dx
mov edx, dword [edi + 4]
mov dword [eax + 0xc], edx
fld dword [esi]
fld dword [esi + 4]
fld dword [esi + 8]
fld dword [esi + 0xc]
fxch st(3)
fnstcw word [ebp - 0x2a]
movzx edx, word [ebp - 0x2a]
or dh, 0xc
mov word [ebp - 0x2c], dx
fldcw word [ebp - 0x2c]
fist word [ebp - 0x30]
fldcw word [ebp - 0x2a]
fild word [ebp - 0x30]
fxch st(1)
fucompi st(1)
fstp st(0)
jp 0x64aa2492
jne 0x64aa24a0
fxch st(1)
fldcw word [ebp - 0x2c]
fist word [ebp - 0x30]
fldcw word [ebp - 0x2a]
fild word [ebp - 0x30]
fxch st(1)
fucompi st(1)
fstp st(0)
jp 0x64aa24a8
jne 0x64aa24b0
fldcw word [ebp - 0x2c]
fist word [ebp - 0x30]
fldcw word [ebp - 0x2a]
fild word [ebp - 0x30]
fxch st(1)
fucompi st(1)
fstp st(0)
jp 0x64aa24b6
jne 0x64aa24c0
fldcw word [ebp - 0x2c]
fist word [ebp - 0x30]
fldcw word [ebp - 0x2a]
fild word [ebp - 0x30]
fxch st(1)
fucompi st(1)
fstp st(0)
jp 0x64aa24c8
jne 0x64aa24c8
mov word [eax + 2], cx
fld dword [esi]
fldcw word [ebp - 0x2c]
fistp word [eax + 0x10]
fldcw word [ebp - 0x2a]
fld dword [esi + 4]
fldcw word [ebp - 0x2c]
fistp word [eax + 0x12]
fldcw word [ebp - 0x2a]
fld dword [esi + 8]
fldcw word [ebp - 0x2c]
fistp word [eax + 0x14]
fldcw word [ebp - 0x2a]
fld dword [esi + 0xc]
fldcw word [ebp - 0x2c]
fistp word [eax + 0x16]
fldcw word [ebp - 0x2a]
mov eax, dword [ebx + 0x68]
cmp eax, 4
ja 0x64aa24ee
xor eax, eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 8], 0x100
mov dword [esp + 4], 8
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [ebx + 0x60], eax
sub esp, 0xc
test eax, eax
je 0x64aa25b0
mov dword [eax], 0x2b464d45
mov ecx, 0x24
mov edx, dword [ebx + 0x60]
mov eax, 4
mov dword [ebx + 0x64], 0x100
jmp 0x64aa2329
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x64aa24c8
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x64aa24c8
fstp st(0)
fstp st(0)
jmp 0x64aa24c8
fstp st(0)
fstp st(0)
jmp 0x64aa24c8
fstp st(0)
jmp 0x64aa24c8
fstp st(0)
lea esi, [esi]
mov ecx, dword [esi]
lea edx, [eax + 0x10]
mov dword [eax + 0x10], ecx
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov eax, dword [esi + 8]
mov dword [edx + 8], eax
mov eax, dword [esi + 0xc]
mov dword [edx + 0xc], eax
mov eax, dword [ebx + 0x68]
cmp eax, 4
jbe 0x64aa2435
mov edx, dword [ebx + 0x60]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov eax, dword [ebx + 0x58]
mov dword [esp], eax
call sym._GdiComment_12
mov dword [ebx + 0x68], 4
xor eax, eax
sub esp, 0xc
jmp 0x64aa2437
mov edx, dword [ebp - 0x1c]
mov ecx, 0x4000
jmp 0x64aa235e
lea eax, [ecx + ecx]
mov dword [ebp - 0x30], eax
mov ecx, dword fs:[0x18]
mov dword [esp + 8], eax
mov dword [esp + 4], 8
mov eax, dword [ecx + 0x30]
mov dword [ebp - 0x34], ecx
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
mov edx, eax
test eax, eax
je 0x64aa25b0
mov eax, dword [ebx + 0x68]
mov dword [esp + 8], eax
mov ecx, dword [ebx + 0x60]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [ebp - 0x38], edx
call sym._memcpy
mov eax, dword [ebp - 0x30]
mov dword [ebx + 0x64], eax
mov eax, dword [ebx + 0x60]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ecx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebx + 0x68]
sub esp, 0xc
mov dword [ebx + 0x60], edx
lea ecx, [eax + 0x20]
jmp 0x64aa2329
mov eax, 3
jmp 0x64aa2437
test byte [0x64ab5100], 1
jne 0x64aa25d8
mov eax, 6
jmp 0x64aa2437
mov dword [esp + 0xc], 0x64abf26c
mov dword [esp + 8], str.METAFILE_FillEllipse
mov dword [esp + 4], 0x64ab5100
mov dword [esp], 0
call sym._wine_dbg_log.constprop.0_9
jmp 0x64aa25c9