Function at 0x7c81184d
Capabilities:
Get process heap force flags

Disassembly:
push 0x28
push 0x7c811980
call fcn.7c8024d6
test dword [ebp + 8], 0xfffffffe
jne 0x7c8415de
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x1d8]
and eax, 0x10
xor ebx, ebx
xor ecx, ecx
or eax, ecx
jne 0x7c8415ef
mov eax, dword [ebp + 0xc]
add eax, eax
mov dword [ebp + 0xc], eax
mov eax, dword fs:[0x18]
mov ecx, dword [eax + 0xbf8]
mov dword [ebp - 0x38], ecx
mov eax, dword [eax + 0xbfc]
mov dword [ebp - 0x34], eax
test byte [ebp + 8], 1
je 0x7c8118d2
mov eax, dword fs:[0x18]
movzx ecx, word [ebp - 0x36]
push ecx
push dword [0x7c8856d4]
mov eax, dword [eax + 0x30]
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov dword [ebp - 0x34], eax
cmp eax, ebx
je 0x7c841636
mov dword [ebp - 4], ebx
mov byte [ebp - 0x19], bl
lea eax, [ebp - 0x38]
push eax
push 0x7c885100
push ebx
mov esi, dword [sym.imp.ntdll.dll_RtlQueryEnvironmentVariable_U]
call esi
mov dword [ebp - 0x20], eax
cmp eax, ebx
jl 0x7c84163d
cmp dword [ebp - 0x20], ebx
jl 0x7c841668
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x24], eax
movzx ecx, word [ebp - 0x38]
shr ecx, 1
cmp word [eax + ecx*2 - 2], 0x5c
je 0x7c811916
mov byte [ebp - 0x19], 1
push ebx
mov edi, dword [ebp + 0x10]
push edi
push dword [ebp + 0xc]
push eax
call dword [sym.imp.ntdll.dll_RtlGetFullPathName_U]
mov dword [ebp - 0x28], eax
mov esi, eax
shr esi, 1
mov ecx, esi
mov dword [ebp - 0x2c], ecx
cmp eax, ebx
je 0x7c836be4
cmp eax, dword [ebp + 0xc]
jae 0x7c836be4
lea ecx, [edi + ecx*2]
cmp word [ecx - 2], 0x5c
je 0x7c811965
lea edx, [eax + 2]
cmp edx, dword [ebp + 0xc]
jae 0x7c836bf7
mov word [ecx], 0x5c
mov word [ecx + 2], bx
shr edx, 1
mov esi, edx
push 0xffffffffffffffff
lea eax, [ebp - 0x10]
push eax
call fcn.7c80df7f
pop ecx
pop ecx
mov eax, esi
call fcn.7c802511
ret 0xc
sal dword [edx - 0x19], cl
and al, 0xa7
push ebx
jbe 0x7c836c67
std
clc
mov esp, 0xe5329966
lea ecx, [ebx - 0xd]
sbb esp, dword [esi - 0x39]
sti
cmp eax, 0xf7dabca6
cmc
lcall 0xa38a, 0x24de7301
out 0xbc, eax
out 8, eax
salc
jae 0x7c836c7a
test byte [eax + 0x3d], ah
out 0x6d, eax
and byte [eax - 0x31], bl
jns 0x7c836c75
adc byte [edi - 0x7ded44], ch
outsd dx, dword [esi]
out 0x3c, al
rcl dword [edi]
invalid
cld
mov edx, ebx
invalid
int 0xf8
aas
xchg esp, eax
into
daa
mov eax, dword [0xda2cb88e]
mov eax, dword [0x9d0f75e2]
jmp 0xebbbb12f
and dword [ebx], edx
salc
mov edx, 0xdfed3b6e
dec eax
pop edx
xlatb
cmp bl, ah
dec esi
mov ah, 0x68
jmp 0x7c8415cc
jmp 0x96c6cd3a
jne 0x7c84155c
cdq
fiadd word [eax]
retf
adc eax, 0x3c11f8d
mov ch, 0x75
jecxz 0x7c84164b
jle 0x7c841583
cmpsb byte [esi], byte es:[edi]
mov cl, 0x45
xor byte [eax], ch
push ds
and dl, byte [esi]
aas
jnp 0x7c841592
cmpsd dword [esi], dword es:[edi]
aas
rcr dword [edx - 0x17], 1
mov byte [edx + eax], dl
inc dword [edx - 0x2e558c71]
cmp ah, byte [edi + 7]
stosb byte es:[edi], al
sar dword [edx], 1
pop es
cmp al, 0x72
jns 0x7c841621
cli
std
and eax, 0x71f87f22
and esp, dword [edi - 0x26836c05]
stosb byte es:[edi], al
xor edx, ecx
lodsd eax, dword [esi]
invalid
test dl, ah
rol dword [eax + 0xf], 1
add eax, 0x6f4b0ad4
xchg ecx, eax
invalid
xchg dword [esi + 0x4cde520f], ebx
push ss
into
push ebx
inc edi
sub esp, dword [eax]
xor ebx, eax
frstor dword [ebp - 0x791ba7c6]
movsb byte es:[edi], byte [esi]
push 0x11695dc2
iretd
loope 0x7c8416ad
mov eax, 0x777f374c
mov ebx, 0x781b3f03
pop ecx
mov ebp, 0xbdae03b
xor byte [ebp + esi*2 + 0x273ffddc], bh
mov eax, 0xeb4a7ae
sub dword [edx*2 + 0x73f3c0d0], esi
arpl word [edi + 0x17733c79], cx
mov ebp, 0x174a7fc2
mov eax, ds
mov ebx, 0xf63bd0d1
invalid
std
and dword [esp + esi], eax
test eax, 0xc2997b05
xchg ecx, eax
and al, 0xd3
sbb esi, dword [eax]
lodsd eax, dword [esi]
inc ebx
neg dword [ebx + 0x7d718deb]
int 0x34
into
or eax, 0x87c6a458
or al, 0xa9
pop ebp
cmp cl, byte [edx - 0x6da2355e]
iretd