Function at 0x68004aa0
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea esi, [ebp - 0x134]
push ebx
mov ebx, eax
sub esp, 0x17c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x130], ebx
mov dword [ebp - 0x16c], edx
mov ebx, dword [0x68022004]
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x12c], ecx
test eax, eax
je 0x68004bd0
mov edx, dword [eax]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10c], 0
mov edi, dword [eax + 0xc]
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0x128], edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x11c], edi
lea edi, [ebp - 0xe8]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x114], ecx
mov ecx, 0x34
mov dword [ebp - 0x108], eax
xor eax, eax
rep stosd dword es:[edi], eax
mov dword [ebp - 0x124], edx
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x100], 1
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0xf8], 0x38
mov dword [ebp - 0xec], 0x6b
mov dword [ebp - 0xe0], sym._import_welcome_dlg_proc_16
mov dword [ebp - 0xf4], 0x800
mov dword [ebp - 0xdc], esi
cmp edx, 1
je 0x68004c80
cmp edx, 4
je 0x68004ec0
ja 0x68004e58
cmp edx, 2
je 0x68004ea0
cmp edx, 3
jne 0x68004e67
mov dword [ebp - 0x110], 2
mov ecx, 2
mov eax, 1
jmp 0x68004cd7
mov edi, dword [ebp + 0xc]
lea edx, [ebp - 0xe8]
mov ecx, 0x34
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x108], edi
mov edi, edx
rep stosd dword es:[edi], eax
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x100], 1
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0xf8], 0x38
mov dword [ebp - 0xec], 0x6b
mov dword [ebp - 0xe0], sym._import_welcome_dlg_proc_16
mov dword [ebp - 0xf4], 0x800
mov dword [ebp - 0xdc], esi
mov dword [ebp - 0xb8], ebx
mov ecx, 3
mov edx, 4
mov eax, 2
mov dword [ebp - 0xc0], 0x38
mov dword [ebp - 0xb4], 0x6c
mov dword [ebp - 0xa8], sym._import_file_dlg_proc_16
mov dword [ebp - 0xbc], 0x3000
mov dword [ebp - 0x98], 0x415
mov dword [ebp - 0x94], 0x416
mov dword [ebp - 0xa4], esi
imul eax, eax, 0x38
imul ecx, ecx, 0x38
mov dword [ebp + eax - 0xf8], 0x38
mov dword [ebp + eax - 0xf0], ebx
mov dword [ebp + eax - 0xec], 0x6d
mov dword [ebp + eax - 0xe0], sym._import_store_dlg_proc_16
mov dword [ebp + eax - 0xf4], 0x3000
mov dword [ebp + eax - 0xdc], esi
mov dword [ebp + eax - 0xd0], 0x417
mov dword [ebp + eax - 0xcc], 0x418
xor eax, eax
mov dword [ebp + ecx - 0xf8], 0x38
mov dword [ebp + ecx - 0xf0], ebx
mov dword [ebp + ecx - 0xec], 0x6e
mov dword [ebp + ecx - 0xe0], sym._import_finish_dlg_proc_16
mov dword [ebp + ecx - 0xf4], 0x800
mov dword [ebp + ecx - 0xdc], esi
xor ecx, ecx
mov dword [ebp + eax - 0x158], ecx
add eax, 4
cmp eax, 0x20
jb 0x68004d6b
mov eax, dword [ebp - 0x16c]
mov esi, dword [ebp - 0x170]
mov dword [ebp - 0x168], 0x34
mov dword [ebp - 0x164], 0x1088008
test esi, esi
mov dword [ebp - 0x160], eax
mov eax, 0x413
cmovne eax, esi
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x154], eax
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x168]
mov dword [esp], eax
mov dword [ebp - 0x140], 0xcd
mov dword [ebp - 0x138], 0xce
call sym._PropertySheetW_4
mov eax, dword [ebp - 0x114]
sub esp, 4
cmp eax, dword [ebp - 0x120]
je 0x68004e20
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov edx, dword fs:[0x18]
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
mov eax, dword [ebp - 0x10c]
test eax, eax
je 0x68004e33
cmp dword [ebp - 0x124], 5
je 0x68004e80
mov eax, dword [ebp - 0x134]
mov dword [esp], eax
call sym._DeleteObject_4
mov eax, dword [ebp - 0xfc]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
cmp edx, 5
jne 0x68004e67
mov dword [ebp - 0x110], 4
mov ecx, 2
mov edx, 3
mov eax, 1
jmp 0x68004cd7
mov eax, dword [ebp - 0x120]
mov dword [esp + 4], 0
mov dword [esp], eax
call sym._CertCloseStore_8
sub esp, 8
jmp 0x68004e33
mov ecx, 2
mov edx, 3
mov eax, 1
mov dword [ebp - 0x110], 1
jmp 0x68004cd7
mov ecx, 2
mov edx, 3
mov eax, 1
mov dword [ebp - 0x110], 3
jmp 0x68004cd7