Function at 0x690552c0
Capabilities:
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, edx
push edi
push esi
push ebx
mov ebx, eax
sub esp, 0x4c
mov eax, dword [eax + 0x70]
test eax, eax
je 0x690554e0
mov dword [esp], ebx
lea eax, [esp + 0x3c]
mov dword [esp + 8], eax
lea eax, [esp + 0x38]
mov dword [esp + 4], eax
call sym.gdiplus.dll_GdipGetPropertySize
mov edx, dword [ebp + 4]
mov eax, dword fs:[0x18]
sub esp, 0xc
mov ecx, dword [esp + 0x38]
lea edx, [ecx + edx + 0x10]
mov dword [esp + 8], edx
mov edx, 8
mov dword [esp + 4], edx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
test eax, eax
mov dword [esp + 0x18], eax
mov edx, eax
mov edi, eax
je 0x69055421
mov eax, dword [ebx + 0x6c]
mov esi, dword [ebx + 0x70]
shl eax, 4
mov dword [esp + 0x28], esi
cmp eax, 8
mov ecx, eax
jae 0x69055468
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x38]
sub esi, eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], esi
mov ecx, esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x24], esi
mov esi, dword [esp + 0x28]
mov dword [esp + 0x2c], eax
mov edx, eax
shl edx, 4
lea eax, [edx + 0x10]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x18]
add esi, edx
cmp ecx, 8
lea eax, [eax + edx + 0x10]
mov edi, eax
jae 0x69055430
mov ecx, dword [esp + 0x24]
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x2c]
test edi, edi
je 0x6905553a
mov esi, dword [esp + 0x18]
mov ecx, esi
add edx, esi
lea esi, [esi]
lea esi, [esi]
mov dword [ecx + 0xc], eax
mov esi, dword [ecx + 4]
add ecx, 0x10
add eax, esi
cmp edx, ecx
jne 0x690553b0
mov eax, dword [ebp]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x20]
mov ecx, dword [ebp + 4]
mov dword [edx], eax
mov eax, dword [ebp + 8]
add edi, esi
mov esi, dword [ebp + 0xc]
mov dword [edx + 4], ecx
mov word [edx + 8], ax
mov eax, dword [esp + 0x18]
add edi, eax
cmp ecx, 8
mov dword [edx + 0xc], edi
jae 0x690554a0
rep movsb byte es:[edi], byte [esi]
mov eax, dword fs:[0x18]
mov edx, dword [ebx + 0x70]
mov dword [esp + 8], edx
xor edx, edx
mov dword [esp + 4], edx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
inc dword [ebx + 0x6c]
sub esp, 0xc
mov eax, dword [esp + 0x18]
mov dword [ebx + 0x70], eax
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
ret
test al, 1
jne 0x69055568
test edi, 2
jne 0x6905557f
test edi, 4
je 0x6905538c
mov ecx, dword [esi]
add edi, 4
add esi, 4
mov dword [edi - 4], ecx
sub dword [esp + 0x24], 4
jmp 0x6905538c
test dl, 1
jne 0x69055596
test edi, 2
jne 0x690555aa
test edi, 4
je 0x69055349
mov edx, dword [esi]
add edi, 4
add esi, 4
sub ecx, 4
mov dword [edi - 4], edx
jmp 0x69055349
test edi, 1
jne 0x69055545
test edi, 2
jne 0x69055553
test edi, 4
je 0x690553f0
mov eax, dword [esi]
add edi, 4
add esi, 4
sub ecx, 4
mov dword [edi - 4], eax
jmp 0x690553f0
mov eax, dword [ebp + 4]
mov edi, 8
xor ecx, ecx
mov dword [esp + 4], edi
xor esi, esi
mov edx, dword fs:[0x18]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], esi
add eax, 0x10
mov dword [esp + 8], eax
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
test eax, eax
mov dword [esp + 0x18], eax
je 0x69055421
mov edx, dword [esp + 0x3c]
shl edx, 4
lea eax, [edx + 0x10]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x18]
add edx, eax
jmp 0x690553bf
movzx eax, byte [esi]
inc edi
inc esi
dec ecx
mov byte [edi - 1], al
jmp 0x690554ac
movzx eax, word [esi]
add edi, 2
add esi, 2
sub ecx, 2
mov word [edi - 2], ax
jmp 0x690554b8
movzx ecx, byte [esi]
lea edi, [eax + 1]
inc esi
mov byte [eax], cl
mov ecx, dword [esp + 0x1c]
dec ecx
mov dword [esp + 0x24], ecx
jmp 0x69055438
movzx ecx, word [esi]
add edi, 2
add esi, 2
mov word [edi - 2], cx
sub dword [esp + 0x24], 2
jmp 0x69055444
movzx edx, byte [esi]
inc edi
inc esi
lea ecx, [eax - 1]
mov byte [esp + 0x1c], dl
mov byte [edi - 1], dl
jmp 0x69055471
movzx edx, word [esi]
add edi, 2
add esi, 2
sub ecx, 2
mov word [edi - 2], dx
jmp 0x6905547d