Function at 0x10143f50
Capabilities:
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101a15cf
mov eax, dword fs:[0]
push eax
sub esp, 0x1e0
mov eax, dword [0x10211a50]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x198], ecx
lea ecx, [ebp - 0x88]
call fcn.100e9360
mov dword [ebp - 4], 0
call fcn.100e5ce0
push eax
lea ecx, [ebp - 0x118]
call fcn.100e9b40
mov byte [ebp - 4], 1
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x118]
call fcn.100ea070
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1ec], esp
push eax
push ecx
call fcn.100e1d90
add esp, 8
mov dword [ebp - 0x19c], eax
mov edx, dword [ebp - 0x19c]
mov dword [ebp - 0x1d0], edx
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1e8], esp
push str.C2F6E58b1D5Ad
call fcn.100e9380
mov dword [ebp - 0x1c4], eax
mov byte [ebp - 4], 1
call fcn.100f14f0
add esp, 0x34
mov ecx, dword [ebp - 0x198]
add ecx, 0x1e0
call fcn.100ea070
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.100e1d90
add esp, 8
mov dword [ebp - 0x1a0], eax
mov ecx, dword [ebp - 0x1a0]
push ecx
mov ecx, dword [ebp + 8]
add ecx, 0x18
call fcn.100e9450
lea ecx, [ebp - 0x160]
call fcn.100e9490
mov ecx, dword [ebp - 0x198]
add ecx, 0x1f8
call fcn.100ea070
push eax
lea edx, [ebp - 0x190]
push edx
call fcn.100e1d90
add esp, 8
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x60
call fcn.100e9450
lea ecx, [ebp - 0x190]
call fcn.100e9490
lea ecx, [ebp - 0x88]
push ecx
mov ecx, dword [ebp + 8]
call fcn.100e94c0
lea edx, [ebp - 0x178]
push edx
call fcn.100e4b20
add esp, 4
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x1b8], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1b8]
call fcn.100ea070
push eax
lea ecx, [ebp - 0x148]
push ecx
call fcn.100e1d90
add esp, 8
mov dword [ebp - 0x1a4], eax
mov edx, dword [ebp - 0x1a4]
push edx
mov ecx, dword [ebp + 8]
add ecx, 0x48
call fcn.100e9450
lea ecx, [ebp - 0x148]
call fcn.100e9490
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x178]
call fcn.100e9ca0
push str.embsoft
mov ecx, dword [ebp + 8]
add ecx, 0x30
call fcn.100e94e0
push 0x101f36d8
lea ecx, [ebp - 0x28]
call fcn.100e9380
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x191]
call fcn.100e1390
mov byte [ebp - 4], 5
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebp - 0x191]
call fcn.100fbe00
push str.B2f6E5_8b1D4A3
lea ecx, [ebp - 0xa0]
call fcn.100e9380
mov byte [ebp - 4], 6
push str.849a5ee64a63a725
lea ecx, [ebp - 0x100]
call fcn.100e9380
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x70]
call fcn.100e9360
mov byte [ebp - 4], 8
lea edx, [ebp - 0x70]
push edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1cc], esp
lea eax, [ebp - 0x28]
push eax
call fcn.100e9330
mov dword [ebp - 0x1ac], eax
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x1d4], ecx
mov byte [ebp - 4], 9
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1e4], esp
lea edx, [ebp - 0xa0]
push edx
call fcn.100e9330
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 4], 8
call fcn.100f14f0
add esp, 0x34
lea eax, [ebp - 0x130]
push eax
call fcn.100e4b20
add esp, 4
mov dword [ebp - 0x1b4], eax
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1bc], ecx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x1bc]
call fcn.100ea070
push eax
lea edx, [ebp - 0x58]
push edx
call fcn.100e1d90
add esp, 8
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x130]
call fcn.100e9ca0
lea ecx, [ebp - 0x28]
call fcn.100e9680
push eax
lea ecx, [ebp - 0x100]
call fcn.100e9680
push eax
lea ecx, [ebp - 0x58]
call fcn.100e9680
push eax
lea ecx, [ebp - 0xa0]
call fcn.100e9680
push eax
push str._s_s_s_s
lea eax, [ebp - 0xd0]
push eax
call fcn.100e2560
add esp, 0x18
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x40]
call fcn.100e9360
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0xd0]
push edx
call fcn.100f1370
add esp, 8
lea ecx, [ebp - 0x1e0]
call fcn.100f0cc0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xe8]
call fcn.100e9360
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x58]
call fcn.100e9680
push eax
lea ecx, [ebp - 0x40]
call fcn.100e9680
push eax
lea ecx, [ebp - 0x70]
call fcn.100e9680
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x30
call fcn.100e9680
push eax
push str.https:__tongji.flash.cn
push str._s_hm2.gif_msgtype_sdata_stoken_stime_s
lea eax, [ebp - 0xb8]
push eax
call fcn.100e2560
add esp, 0x1c
mov byte [ebp - 4], 0x11
push 0
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0x1e0]
call fcn.100f0e30
mov dword [ebp - 0x1c8], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb8]
call fcn.100e9490
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xe8]
call fcn.100e9490
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1e0]
call fcn.100f0ce0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x40]
call fcn.100e9490
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xd0]
call fcn.100e9490
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x58]
call fcn.100e9490
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x70]
call fcn.100e9490
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x100]
call fcn.100e9490
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xa0]
call fcn.100e9490
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x191]
call fcn.100e0470
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.100e9490
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x118]
call fcn.100e9ca0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call fcn.100e9490
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1016177d
mov esp, ebp
pop ebp
ret 4