Function at 0x694428e0
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
test byte [0x69445018], 8
jne 0x69442b00
cmp word [0x6944801c], 0
jne 0x69442930
test byte [0x69445018], 1
jne 0x69442b64
mov eax, 0xb
mov edi, 1
mov word [0x694480c8], ax
lea esp, [ebp - 0xc]
mov eax, edi
pop ebx
pop esi
pop edi
pop ebp
ret
mov edi, dword [section..bss]
test edi, edi
je 0x69442b90
mov ebx, dword [0x69448008]
test ebx, ebx
jne 0x69442970
test byte [0x69445018], 1
jne 0x69442bb0
mov esi, 3
mov edi, 1
mov word [0x694480c8], si
lea esp, [ebp - 0xc]
mov eax, edi
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp + 0xc]
xor edi, edi
cmp byte [eax + 0x7a], 0
je 0x694429dc
test ebx, ebx
jle 0x694429dc
add eax, 0x7a
xor esi, esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], eax
mov eax, dword [0x69448004]
mov ebx, edi
mov edi, esi
mov ecx, eax
xor eax, eax
mov esi, ecx
jmp 0x694429ad
add ebx, 1
movzx eax, bx
cmp dword [ebp - 0x1c], eax
mov edi, eax
jle 0x694429cb
lea eax, [eax + eax*4]
mov ecx, dword [ebp - 0x20]
shl eax, 5
lea eax, [esi + eax + 0x7e]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_strcmp]
test eax, eax
jne 0x694429a0
mov esi, edi
mov edi, ebx
mov ebx, dword [ebp - 0x1c]
mov eax, 0
cmp ebx, esi
cmove edi, eax
mov dword [esp + 8], 0xb8
mov dword [esp + 4], 0
mov ebx, dword fs:[0x18]
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
test eax, eax
mov esi, eax
je 0x69442be0
movzx edx, di
lea eax, [edx + edx*4]
shl eax, 5
add eax, dword [0x69448004]
mov eax, dword [eax]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_LoadLibraryA]
sub esp, 4
test eax, eax
je 0x69442c30
mov dword [esi + 0xa0], eax
mov dword [esp + 4], str.DS_Entry
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov ecx, dword [ebp + 0xc]
mov dword [esi + 0xa4], eax
sub esp, 8
mov eax, dword [0x69448018]
mov dword [ecx], eax
lea edx, [eax + 1]
mov eax, dword [ebp + 8]
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], 0x401
mov dword [0x69448018], edx
mov dword [esp + 8], 3
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [esi + 0xa4]
sub esp, 0x14
test ax, ax
mov edi, eax
jne 0x69442ca1
mov eax, dword [0x694480c0]
mov dword [esi], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov dword [esi + 4], eax
mov eax, dword [ebp + 0xc]
add eax, 0x7a
mov dword [esp + 4], eax
lea eax, [esi + 0x7e]
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_strcpy]
lea eax, [esi + 0xa8]
mov dword [esi + 0xb0], 0
mov dword [esi + 0xb4], 0
mov dword [0x694480c0], esi
mov dword [esi + 0xac], eax
mov dword [esi + 0xa8], eax
xor eax, eax
mov word [0x694480c8], ax
jmp 0x6944291d
mov dword [esp + 0xc], str.DG_CONTROL_DAT_IDENTITY_MSG_OPENDS_n
mov dword [esp + 8], str.TWAIN_OpenDS
mov dword [esp + 4], 0x69445018
mov dword [esp], 3
call fcn.69441470
test byte [0x69445018], 8
je 0x694428f6
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xc], str.pIdentity_is__s_n
mov dword [esp + 8], str.TWAIN_OpenDS
mov dword [esp + 4], 0x69445018
mov dword [esp], 3
add eax, 0x7a
mov dword [esp + 0x10], eax
call fcn.69441470
jmp 0x694428f6
mov dword [esp + 0xc], str.seq_error_n
mov dword [esp + 8], str.TWAIN_OpenDS
mov dword [esp + 4], 0x69445018
mov dword [esp], 0
call fcn.69441470
jmp 0x6944290d
call fcn.69442150
mov ebx, dword [0x69448008]
test ebx, ebx
jne 0x69442970
jmp 0x69442948
mov dword [esp + 0xc], str.no_devs._n
mov dword [esp + 8], str.TWAIN_OpenDS
mov dword [esp + 4], 0x69445018
mov dword [esp], 0
call fcn.69441470
jmp 0x69442955
test byte [0x69445018], 1
mov ebx, 2
mov edi, 1
mov word [0x694480c8], bx
je 0x6944291d
mov dword [esp + 0xc], str.Out_of_memory._n
mov dword [esp + 8], str.TWAIN_OpenDS
mov dword [esp + 4], 0x69445018
mov dword [esp], 0
call fcn.69441470
jmp 0x6944291d
test byte [0x69445018], 2
jne 0x69442c73
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov ecx, 5
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov word [0x694480c8], cx
mov edi, 1
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
jmp 0x6944291d
mov dword [esp + 0x10], str._null_
mov dword [esp + 0xc], str.Failed_to_load_TWAIN_Source__s_n
mov dword [esp + 8], str.TWAIN_OpenDS
mov dword [esp + 4], 0x69445018
mov dword [esp], 1
call fcn.69441470
jmp 0x69442c39
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov edx, 5
mov eax, dword [ebx + 0x30]
mov word [0x694480c8], dx
mov edi, 1
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub dword [0x69448018], 1
sub esp, 0xc
jmp 0x6944291d