Function at 0x6b6cfa00
Capabilities:
Get process heap flags

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
mov eax, ecx
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x38
mov ebx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ecx, dword [ecx]
mov dword [ebx], 0
mov eax, dword [edx]
cmp eax, dword [0x6b6e3778]
je 0x6b6cfa50
cmp eax, dword [0x6b6e3768]
je 0x6b6cfb40
mov esi, 0x80004002
lea esp, [ebp - 0x10]
mov eax, esi
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0xc
mov esi, dword [0x6b6e377c]
cmp dword [edx + 4], esi
jne 0x6b6cfa2e
mov esi, dword [0x6b6e3780]
cmp dword [edx + 8], esi
jne 0x6b6cfa2e
mov esi, dword [0x6b6e3784]
cmp dword [edx + 0xc], esi
jne 0x6b6cfa2e
xor edx, edx
mov eax, 0x6b6dd050
jmp 0x6b6cfa92
add edx, 1
mov eax, dword [edx*8 + 0x6b6dbde0]
test eax, eax
je 0x6b6cfb70
mov edi, dword [ecx]
cmp dword [eax], edi
jne 0x6b6cfa80
mov esi, dword [ecx + 4]
cmp dword [eax + 4], esi
jne 0x6b6cfa80
mov esi, dword [ecx + 8]
cmp dword [eax + 8], esi
jne 0x6b6cfa80
mov esi, dword [ecx + 0xc]
cmp dword [eax + 0xc], esi
jne 0x6b6cfa80
mov dword [esp + 8], 0xc
mov edi, dword [edx*8 + 0x6b6dbde4]
xor esi, esi
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [eax], 0x6b6dbdb4
sub esp, 0xc
mov dword [eax + 4], 1
mov dword [eax + 8], edi
mov dword [ebx], eax
test byte [0x6b6d70b4], 8
je 0x6b6cfa3f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Created_class_factory__p_n
mov dword [esp + 8], str.ClassFactory_Constructor
mov dword [esp + 4], 0x6b6d70b4
mov dword [esp], 3
call fcn.6b6cea40
lea esp, [ebp - 0x10]
mov eax, esi
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0xc
mov eax, dword [0x6b6e376c]
cmp dword [edx + 4], eax
jne 0x6b6cfa3a
mov eax, dword [0x6b6e3770]
cmp dword [edx + 8], eax
jne 0x6b6cfa3a
mov eax, dword [0x6b6e3774]
cmp dword [edx + 0xc], eax
jne 0x6b6cfa3a
jmp 0x6b6cfa71
test byte [0x6b6d70b4], 1
jne 0x6b6cfb90
lea esp, [ebp - 0x10]
mov esi, 0x80040111
pop ecx
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0xc
mov eax, ecx
shr eax, 0x10
je 0x6b6cfc3a
movzx eax, byte [ecx + 0xf]
mov dword [esp + 0x2c], eax
movzx eax, byte [ecx + 0xe]
mov dword [esp + 0x28], eax
movzx eax, byte [ecx + 0xd]
mov dword [esp + 0x24], eax
movzx eax, byte [ecx + 0xc]
mov dword [esp + 0x20], eax
movzx eax, byte [ecx + 0xb]
mov dword [esp + 0x1c], eax
movzx eax, byte [ecx + 0xa]
mov dword [esp + 0x18], eax
movzx eax, byte [ecx + 9]
mov dword [esp + 0x14], eax
movzx eax, byte [ecx + 8]
mov dword [esp + 0x10], eax
movzx eax, word [ecx + 6]
mov dword [esp + 0xc], eax
movzx eax, word [ecx + 4]
mov dword [esp + 8], eax
mov eax, dword [ecx]
mov dword [esp], 0x6b6dba70
mov dword [esp + 4], eax
call fcn.6b6ce650
mov dword [esp + 0x10], eax
mov esi, 0x80040111
mov dword [esp + 0xc], str.CLSID__s_not_supported_n
mov dword [esp + 8], str.DllGetClassObject
mov dword [esp + 4], 0x6b6d70b4
mov dword [esp], 0
call fcn.6b6cea40
lea esp, [ebp - 0x10]
mov eax, esi
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0xc
movzx ecx, cx
mov dword [esp], 0x6b6dba60
mov dword [esp + 4], ecx
call fcn.6b6ce650
jmp 0x6b6cfbfd