Function at 0x10008610
Capabilities:
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x58
mov esi, esp
mov dword [esi + 4], ebp
mov eax, dword [ebp + 8]
mov dword [esi + 0x3c], eax
mov eax, esp
mov dword [esi + 0x44], eax
mov dword [esi + 0x50], 0xffffffff
lea eax, [esi + 0x48]
mov dword [esi + 0x4c], 0x1004ef30
mov ecx, dword fs:[0]
mov dword [esi + 0x48], ecx
mov dword fs:[0], eax
mov edi, dword [esi + 0x3c]
push eax
mov eax, esp
mov dword [esi + 0x38], eax
sub esp, 0x10
mov edx, esp
sub esp, 0x18
mov ecx, esp
mov dword [esi + 0x18], ecx
sub esp, 0x18
mov ecx, esp
mov ebx, ecx
mov dword [esi + 0x1c], ebx
sub esp, 0x18
mov ebx, esp
mov dword [esi + 0x34], ebx
mov dword [esi + 0x20], ebx
sub esp, 0xa8
mov ebx, esp
and ebx, 0xfffffff8
mov dword [esi + 0x24], ebx
mov esp, ebx
push eax
sub esp, 0x14
mov ebx, esp
mov dword [esi + 0x28], ebx
sub esp, 0x18
mov ebx, esp
mov dword [esi + 0x2c], ebx
sub esp, 0x18
mov ebx, esp
mov dword [esi + 0x30], ebx
mov dword [eax], edi
mov dword [edx + 0xb], 0x363572
mov dword [edx + 8], 0x72657776
mov dword [edx + 4], 0x31346572
mov dword [edx], 0x35366976
sub esp, 4
mov eax, esp
mov dword [eax], edx
call fcn.10005f80
mov ecx, dword [esi + 0x34]
mov eax, dword [esi + 0x38]
mov edx, dword [eax]
mov dword [esi + 0x50], 0
sub esp, 4
mov eax, esp
mov dword [eax], edx
call fcn.10005f80
jmp 0x100086ea
mov ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x20]
mov edi, dword [esi + 0x1c]
mov dword [esi + 0x50], 1
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], edi
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.10053000
add esp, 0xc
jmp 0x10008714
mov eax, dword [0x1027a534]
sub eax, dword [0x1027a538]
imul eax, eax, 0x77de93cc
sub eax, 0xdd6d236c
sub eax, 0xb0efb78d
add eax, 0xdd6d236c
mov ecx, eax
and ecx, 0x8db7391b
shl ecx, 1
xor eax, 0x8db7391b
add eax, ecx
cmp eax, 0x12e99356
jbe 0x10008bfb
mov ecx, dword [esi + 0x20]
mov eax, dword [0x1027a53c]
xor eax, dword [0x1027a540]
imul eax, eax, 0xb7fb58c4
mov edi, 0x947aec20
xor edx, edx
div edi
mov edx, eax
xor edx, 0x576215e9
and eax, 0xa89dea16
shl eax, 1
sub eax, edx
mov dword [esi + 0x14], eax
call fcn.100061b0
mov ecx, dword [esi + 0x1c]
call fcn.100061b0
mov eax, dword [esi + 0x14]
cmp eax, 0xeb4f0c6a
ja 0x10008bfb
mov ecx, dword [esi + 0x24]
mov edx, dword [esi + 0x18]
mov dword [esi + 0x50], 2
sub esp, 0xc
mov eax, esp
mov dword [eax], edx
mov dword [eax + 8], 1
mov dword [eax + 4], 1
call fcn.10008d40
jmp 0x100087c8
mov ecx, dword [esi + 0x28]
call fcn.10009080
mov ecx, dword [esi + 0x24]
mov edx, dword [esi + 0x28]
mov dword [esi + 0x50], 4
sub esp, 8
mov eax, esp
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.10009180
add esp, 8
mov dword [esi + 0x10], eax
jmp 0x100087f7
mov eax, dword [str._oQzp]
xor ecx, ecx
sub ecx, dword [0x1027a558]
sub eax, ecx
mov edx, eax
xor edx, 0xffffffff
and edx, 0xc974e6b1
mov ecx, eax
and ecx, 0x368b194e
imul ecx, edx
mov edx, eax
and edx, 0xc974e6b1
or eax, 0xc974e6b1
imul eax, edx
add eax, ecx
mov ecx, 0xc3ce25cc
xor edx, edx
div ecx
add eax, 0xaf68b7ec
cmp eax, 0xc92755f7
ja 0x10008c10
mov ecx, dword [esi + 0x10]
mov eax, dword [ecx]
add ecx, dword [eax + 4]
call fcn.100091d0
test al, 1
jne 0x10008861
jmp 0x10008bd2
mov eax, dword [0x1027a564]
xor edx, edx
div dword [0x1027a568]
mov ecx, eax
and ecx, 0x81289fce
shl ecx, 1
add eax, 0x81289fce
sub eax, ecx
imul eax, eax, 0xa2aa033e
xor eax, 0xffffffff
or eax, 0x9eb5d8c1
xor eax, 0xffffffff
cmp eax, 0xe860e0d1
jae 0x10008c22
mov ecx, dword [esi + 0x28]
lea eax, [0x10258c56]
xor edx, edx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.10009310
cmp eax, 0
jne 0x10008908
mov ecx, dword [esi + 0x28]
mov edx, dword [esi + 0x2c]
sub esp, 0xc
mov eax, esp
mov dword [eax], edx
mov dword [eax + 8], 0xffffffff
mov dword [eax + 4], 3
call fcn.10006b70
jmp 0x100088e7
mov eax, dword [esi + 0x2c]
lea ecx, [0x10290a9c]
sub esp, 4
mov dword [esp], eax
call fcn.10007f10
mov ecx, dword [esi + 0x2c]
call fcn.100061b0
jmp 0x10008b13
mov ecx, dword [0x1027a574]
mov edx, dword [0x1027a578]
mov eax, ecx
and eax, edx
or ecx, edx
add eax, ecx
mov edx, eax
and edx, 0x7444b1e1
mov ecx, eax
or ecx, 0x7444b1e1
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x8bbb4e1e
or eax, 0x8bbb4e1e
imul eax, edx
add eax, ecx
and eax, 0xb31df77a
xor eax, 0x8fbaa8ca
cmp eax, 0xe99cbe92
ja 0x10008c45
mov ecx, dword [esi + 0x28]
mov eax, dword [0x1027a57c]
add eax, dword [0x1027a580]
and eax, 0x95810e06
mov edx, eax
xor edx, 0x20e3cdc2
xor edx, 0xffffffff
or eax, 0x20e3cdc2
and eax, edx
imul eax, eax, 0x93e54fbf
mov dword [esi + 8], eax
lea eax, str.Port
xor edx, edx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.10009310
mov ecx, eax
mov eax, dword [esi + 8]
cmp ecx, 0
sete cl
mov byte [esi + 0xf], cl
cmp eax, 0xb5f703e6
ja 0x10008c45
mov al, byte [esi + 0xf]
test al, 1
jne 0x100089cb
jmp 0x10008ac7
mov eax, dword [0x1027a584]
add eax, dword [0x1027a588]
or eax, 0x8f4562e2
and eax, 0x4d560999
xor eax, 0x5330f495
cmp eax, 0x5cced23a
jbe 0x10008c68
mov eax, dword [0x1027a58c]
mov edx, dword [0x1027a590]
mov ecx, eax
xor ecx, edx
xor edx, 0xffffffff
and eax, edx
shl eax, 1
sub eax, ecx
or eax, 0x2bec4d5e
xor eax, 0xffffffff
or eax, 0x36521ccb
xor eax, 0xffffffff
mov ecx, eax
xor ecx, 0x5e3b4e3b
xor ecx, 0xffffffff
or eax, 0x5e3b4e3b
and eax, ecx
cmp eax, 0xa32bf11f
ja 0x100089f0
mov ecx, dword [esi + 0x28]
mov edx, dword [esi + 0x30]
mov dword [esi + 0x50], 4
sub esp, 0xc
mov eax, esp
mov dword [eax], edx
mov dword [eax + 8], 0xffffffff
mov dword [eax + 4], 5
call fcn.10006b70
jmp 0x10008a61
mov eax, dword [0x1027a594]
xor edx, edx
div dword [0x1027a598]
mov edx, eax
and edx, 0x6d5d31c5
mov ecx, eax
or ecx, 0x6d5d31c5
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x92a2ce3a
or eax, 0x92a2ce3a
imul eax, edx
add eax, ecx
sub eax, 0x69afbdc8
add eax, 0x2fb1cd92
cmp eax, 0x97e6e1db
jbe 0x10008c6d
mov eax, dword [esi + 0x30]
lea ecx, [0x10290ab4]
sub esp, 4
mov dword [esp], eax
call fcn.10007f10
mov ecx, dword [esi + 0x30]
call fcn.100061b0
mov eax, dword [0x1027a5a4]
or eax, dword [0x1027a5a8]
mov ecx, 0x68ab26cb
xor edx, edx
div ecx
add eax, 0x2c180bcc
mov edx, eax
xor edx, 0xffffffff
and edx, 0x8adf1f15
mov ecx, eax
and ecx, 0x7520e0ea
imul ecx, edx
mov edx, eax
and edx, 0x8adf1f15
or eax, 0x8adf1f15
imul eax, edx
add eax, ecx
cmp eax, 0x98a6f260
je 0x10008c8e
mov eax, dword [0x1027a5b4]
or eax, dword [0x1027a5b8]
mov edx, eax
and edx, 0xca5c2546
mov ecx, eax
or ecx, 0xca5c2546
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x35a3dab9
or eax, 0x35a3dab9
imul eax, edx
add eax, ecx
or eax, 0x9196d2fa
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xa1fc882f
and eax, 0x5e0377d0
sub eax, ecx
cmp eax, 0x82841794
jb 0x10008c93
mov edi, dword [0x1027a5bc]
mov edx, dword [0x1027a5c0]
mov ecx, edi
xor ecx, 0xffffffff
and ecx, 0x8aedb299
and edi, 0x75124d66
mov eax, edx
xor eax, 0xffffffff
and eax, 0x8aedb299
and edx, 0x75124d66
or ecx, edi
or eax, edx
xor ecx, eax
mov eax, ecx
xor eax, 0xffffffff
and eax, 0xce41c3a4
and ecx, 0x31be3c5b
or eax, ecx
mov ecx, 0xea308f7
xor edx, edx
div ecx
xor eax, 0xdc5cb13d
cmp eax, 0x3d637081
jbe 0x10008c93
mov dword [esi + 0x50], 4
jmp 0x100087d0
mov ecx, dword [esi + 0x28]
call fcn.100061b0
mov ecx, dword [esi + 0x24]
call fcn.10009530
mov ecx, dword [esi + 0x18]
call fcn.100061b0
mov eax, dword [esi + 0x48]
mov dword fs:[0], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [esi + 0x20]
call fcn.100061b0
mov ecx, dword [esi + 0x1c]
call fcn.100061b0
jmp 0x10008750
mov ecx, dword [esi + 0x10]
mov eax, dword [ecx]
add ecx, dword [eax + 4]
call fcn.100091d0
jmp 0x10008847
mov ecx, dword [esi + 0x28]
lea eax, [0x10258c56]
xor edx, edx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.10009310
jmp 0x1000889b
mov ecx, dword [esi + 0x28]
lea eax, str.Port
xor edx, edx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.10009310
jmp 0x10008959
jmp 0x100089f0
mov eax, dword [esi + 0x30]
lea ecx, [0x10290ab4]
sub esp, 4
mov dword [esp], eax
call fcn.10007f10
mov ecx, dword [esi + 0x30]
call fcn.100061b0
jmp 0x10008aab
jmp 0x10008b13
jmp 0x10008b68