Function at 0x5ff980
Capabilities:
Get process heap flags

Disassembly:
lea r12, [rsp - 0x100]
cmp r12, qword [r14 + 0x10]
jbe 0x600a39
push rbp
mov rbp, rsp
sub rsp, 0x178
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x1b0], rcx
mov qword [rsp + 0x1c8], r8
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x600a2e
mov qword [rsp + 0x1d8], r10
mov qword [rsp + 0x1d0], r9
mov qword [rsp + 0x1c8], r8
mov qword [rsp + 0x1c0], rsi
mov qword [rsp + 0x1b8], rdi
mov qword [rsp + 0x1b0], rcx
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x1a0], rax
mov rsi, qword [0x0081fd70]
mov r8, qword [0x0081fd78]
mov r9, qword [0x0081fd80]
mov r10, qword [rax + 0x28]
mov ecx, 0x10
mov rdi, rdx
mov rax, rbx
mov rbx, qword [rsp + 0x188]
call r10
mov rcx, qword [rsp + 0x1d0]
mov rdx, rcx
shr rdx, 7
mov r10, qword [rsp + 0x1b8]
mov rbx, qword [rsp + 0x188]
mov r11, qword [rsp + 0x1c8]
mov r12, qword [rsp + 0x1b0]
mov r13, qword [rsp + 0x1c0]
mov r15, qword [rsp + 0x1d8]
xor eax, eax
nop
jmp 0x600024
mov qword [rsp + 0xc0], r9
mov qword [rsp + 0x170], rdi
lea rax, [r12 + r13]
lea rax, [rax + 0x10]
mov qword [rsp + 0x130], rax
lea rcx, [r9 - 0x10]
mov qword [rsp + 0xa8], rcx
lea rsi, [r11 + r15]
lea rsi, [rsi + 0x10]
mov qword [rsp + 0x168], rsi
lea r10, [r12 + r13]
lea r10, [r10 + 0x20]
mov qword [rsp + 0x128], r10
lea r10, [r9 - 0x20]
mov qword [rsp + 0xa0], r10
lea r10, [r11 + r15]
lea r10, [r10 + 0x20]
mov qword [rsp + 0x160], r10
lea r10, [r12 + r13]
lea r10, [r10 + 0x30]
mov qword [rsp + 0x120], r10
lea r10, [r9 - 0x30]
mov qword [rsp + 0x98], r10
lea r10, [r11 + r15]
lea r10, [r10 + 0x30]
mov qword [rsp + 0x158], r10
lea r10, [r12 + r13]
lea r10, [r10 + 0x40]
mov qword [rsp + 0x118], r10
lea r10, [r9 - 0x40]
mov qword [rsp + 0x90], r10
lea r10, [r11 + r15]
lea r10, [r10 + 0x40]
mov qword [rsp + 0x150], r10
lea r10, [r12 + r13]
lea r10, [r10 + 0x50]
mov qword [rsp + 0x110], r10
lea r10, [r9 - 0x50]
mov qword [rsp + 0x88], r10
lea r10, [r11 + r15]
lea r10, [r10 + 0x50]
mov qword [rsp + 0x148], r10
lea r10, [r12 + r13]
lea r10, [r10 + 0x60]
mov qword [rsp + 0x108], r10
lea r10, [r9 - 0x60]
mov qword [rsp + 0x80], r10
lea r10, [r11 + r15]
lea r10, [r10 + 0x60]
mov qword [rsp + 0x140], r10
lea r13, [r12 + r13]
lea r13, [r13 + 0x70]
mov qword [rsp + 0x100], r13
lea r12, [r9 - 0x70]
mov qword [rsp + 0x78], r12
lea r15, [r11 + r15]
lea r15, [r15 + 0x70]
mov qword [rsp + 0x138], r15
dec rdx
mov qword [rsp + 0x38], rdx
nop
mov qword [rsp], rdi
mov qword [rsp + 8], r8
mov qword [rsp + 0x10], rbx
nop dword [rax]
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x1a0]
mov rcx, qword [rax + 0x28]
mov rbx, qword [rsp + 0x188]
mov rdi, qword [rsp + 0x198]
mov rsi, qword [rsp + 0x170]
mov r8d, 0x10
mov r9, qword [rsp + 0xc0]
mov rax, qword [rsp + 0x1a8]
mov r10, rcx
mov rcx, r8
call r10
mov rax, qword [rsp + 0x130]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x168]
mov qword [rsp + 8], rcx
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x10], rcx
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x1a0]
mov rcx, qword [rax + 0x28]
mov rbx, qword [rsp + 0x188]
mov rdi, qword [rsp + 0x198]
mov rsi, qword [rsp + 0x130]
mov r8d, 0x10
mov r9, qword [rsp + 0xa8]
mov rax, qword [rsp + 0x1a8]
mov r10, rcx
mov rcx, r8
call r10
mov rax, qword [rsp + 0x128]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x160]
mov qword [rsp + 8], rcx
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x10], rcx
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x1a0]
mov rcx, qword [rax + 0x28]
mov rbx, qword [rsp + 0x188]
mov rdi, qword [rsp + 0x198]
mov rsi, qword [rsp + 0x128]
mov r8d, 0x10
mov r9, qword [rsp + 0xa0]
mov rax, qword [rsp + 0x1a8]
mov r10, rcx
mov rcx, r8
call r10
mov rax, qword [rsp + 0x120]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x158]
mov qword [rsp + 8], rcx
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x10], rcx
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x1a0]
mov rcx, qword [rax + 0x28]
mov rbx, qword [rsp + 0x188]
mov rdi, qword [rsp + 0x198]
mov rsi, qword [rsp + 0x120]
mov r8d, 0x10
mov r9, qword [rsp + 0x98]
mov rax, qword [rsp + 0x1a8]
mov r10, rcx
mov rcx, r8
call r10
mov rax, qword [rsp + 0x118]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 8], rcx
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x10], rcx
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x1a0]
mov rcx, qword [rax + 0x28]
mov rbx, qword [rsp + 0x188]
mov rdi, qword [rsp + 0x198]
mov rsi, qword [rsp + 0x118]
mov r8d, 0x10
mov r9, qword [rsp + 0x90]
mov rax, qword [rsp + 0x1a8]
mov r10, rcx
mov rcx, r8
call r10
mov rax, qword [rsp + 0x110]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x148]
mov qword [rsp + 8], rcx
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x10], rcx
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x1a0]
mov rcx, qword [rax + 0x28]
mov rbx, qword [rsp + 0x188]
mov rdi, qword [rsp + 0x198]
mov rsi, qword [rsp + 0x110]
mov r8d, 0x10
mov r9, qword [rsp + 0x88]
mov rax, qword [rsp + 0x1a8]
mov r10, rcx
mov rcx, r8
call r10
mov rax, qword [rsp + 0x108]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x140]
mov qword [rsp + 8], rcx
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x10], rcx
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x1a0]
mov rcx, qword [rax + 0x28]
mov rbx, qword [rsp + 0x188]
mov rdi, qword [rsp + 0x198]
mov rsi, qword [rsp + 0x108]
mov r8d, 0x10
mov r9, qword [rsp + 0x80]
mov rax, qword [rsp + 0x1a8]
mov r10, rcx
mov rcx, r8
call r10
mov rax, qword [rsp + 0x100]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x138]
mov qword [rsp + 8], rcx
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x10], rcx
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x1a0]
mov rcx, qword [rax + 0x28]
mov rbx, qword [rsp + 0x188]
mov rdi, qword [rsp + 0x198]
mov rsi, qword [rsp + 0x100]
mov r8d, 0x10
mov r9, qword [rsp + 0x78]
mov rax, qword [rsp + 0x1a8]
mov r10, rcx
mov rcx, r8
call r10
mov rax, qword [rsp + 0xb0]
sub rax, 0xffffffffffffff80
mov rcx, qword [rsp + 0x1b8]
mov rdx, qword [rsp + 0x188]
mov rbx, qword [rsp + 0x1c8]
mov rsi, qword [rsp + 0x1b0]
mov rdi, qword [rsp + 0x1c0]
mov r8, qword [rsp + 0x1d8]
mov r9, qword [rsp + 0x1d0]
mov r10, qword [rsp + 0x38]
mov rcx, r9
mov rbx, rdx
mov r10, qword [rsp + 0x1b8]
mov r11, qword [rsp + 0x1c8]
mov r12, rsi
mov r13, rdi
mov r15, r8
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0xb0], rax
test rdx, rdx
jle 0x600092
cmp rcx, rax
jb 0x600a29
sub r15, rax
mov rdi, r15
neg r15
sar r15, 0x3f
and r15, rax
lea r8, [r11 + r15]
cmp rdi, 0x80
jb 0x600a1c
nop dword [rax + rax]
cmp r10, rax
jb 0x600a14
sub r13, rax
mov r9, r13
neg r13
sar r13, 0x3f
and r13, rax
lea rdi, [r12 + r13]
nop dword [rax]
cmp r9, 0x80
jae 0x5ffa85
jmp 0x600a07
mov rdx, rcx
shr rdx, 4
and edx, 7
lea rsi, [0x006be3a0]
jmp qword [rsi + rdx*8]
mov ecx, pe_nt_image_headers64
mov rdx, r9
call fcn.0046bb40
mov rcx, r10
call fcn.0046bb80
mov ecx, pe_nt_image_headers64
mov rdx, rdi
call fcn.0046bb40
call fcn.0046bb80
mov ecx, 0x10
call fcn.0046bb40
nop
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x58], r10
call fcn.004697e0
mov rax, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x58]
jmp fcn.005ff980