Function at 0x1800ff9cc
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 8], rbp
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r12
push r14
push r15
sub rsp, 0x60
mov rbp, r9
mov rsi, r8
mov rdi, rdx
mov r14d, ecx
cmp r8, 0x10
ja 0x1800ffa51
mov rax, qword gs:[0x60]
cmp qword [rax + 0x18], 0
je 0x1800ffa2a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
lea rcx, str.HEAP__wZ_:
add rdx, 0x58
call sym.ntdll.dll_DbgPrint
jmp 0x1800ffa36
lea rcx, str.HEAP:
call sym.ntdll.dll_DbgPrint
mov rdx, rsi
lea rcx, str.Invalid_ReserveSize_parameter____Ix_n
call sym.ntdll.dll_DbgPrint
call fcn.18010109c
xor eax, eax
jmp 0x1800ffc9c
cmp rsi, rbp
jae 0x1800ffaa1
mov rax, qword gs:[0x60]
cmp qword [rax + 0x18], 0
je 0x1800ffa89
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
lea rcx, str.HEAP__wZ_:
add rdx, 0x58
call sym.ntdll.dll_DbgPrint
jmp 0x1800ffa95
lea rcx, str.HEAP:
call sym.ntdll.dll_DbgPrint
mov rdx, rbp
lea rcx, str.Invalid_CommitSize_parameter____Ix_n
jmp 0x1800ffa40
mov r12, qword [rsp + 0xa0]
test r14b, 1
je 0x1800ffb04
test r12, r12
je 0x1800ffb04
mov rax, qword gs:[0x60]
cmp qword [rax + 0x18], 0
je 0x1800ffae7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
lea rcx, str.HEAP__wZ_:
add rdx, 0x58
call sym.ntdll.dll_DbgPrint
jmp 0x1800ffaf3
lea rcx, str.HEAP:
call sym.ntdll.dll_DbgPrint
lea rcx, str.May_not_specify_Lock_parameter_with_HEAP_NO_SERIALIZE_n
call sym.ntdll.dll_DbgPrint
jmp 0x1800ffa45
test rdi, rdi
je 0x1800ffc43
and qword [rsp + 0x28], 0
lea r9, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x20], 0x30
or rcx, 0xffffffffffffffff
call sym.ntdll.dll_NtQueryVirtualMemory
mov r15d, eax
test eax, eax
jns 0x1800ffb8a
mov rcx, qword gs:[0x60]
cmp qword [rcx + 0x18], 0
je 0x1800ffb67
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
lea rcx, str.HEAP__wZ_:
mov rdx, qword [rdx + 0x10]
add rdx, 0x58
call sym.ntdll.dll_DbgPrint
jmp 0x1800ffb73
lea rcx, str.HEAP:
call sym.ntdll.dll_DbgPrint
mov r8d, r15d
lea rcx, str.Specified_HeapBase___p__invalid___Status___lx_n
mov rdx, rdi
call sym.ntdll.dll_DbgPrint
jmp 0x1800ffa45
cmp qword [rsp + 0x30], rdi
je 0x1800ffbe9
mov rax, qword gs:[0x60]
cmp qword [rax + 0x18], 0
je 0x1800ffbc4
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
lea rcx, str.HEAP__wZ_:
add rdx, 0x58
call sym.ntdll.dll_DbgPrint
jmp 0x1800ffbd0
lea rcx, str.HEAP:
call sym.ntdll.dll_DbgPrint
mov r8, qword [rsp + 0x30]
lea rcx, str.Specified_HeapBase___p____to_BaseAddress___p__n
mov rdx, rdi
call sym.ntdll.dll_DbgPrint
jmp 0x1800ffa45
cmp dword [rsp + 0x50], 0x10000
jne 0x1800ffc43
mov rax, qword gs:[0x60]
cmp qword [rax + 0x18], 0
je 0x1800ffc26
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
lea rcx, str.HEAP__wZ_:
add rdx, 0x58
call sym.ntdll.dll_DbgPrint
jmp 0x1800ffc32
lea rcx, str.HEAP:
call sym.ntdll.dll_DbgPrint
mov rdx, qword [rsp + 0x30]
lea rcx, str.Specified_HeapBase___p__is_free_or_not_writable_n
jmp 0x1800ffa40
mov rax, qword [rsp + 0xa8]
or r14d, 0x10000060
mov qword [rsp + 0x28], rax
mov ecx, r14d
mov r9, rbp
mov qword [rsp + 0x20], r12
mov r8, rsi
mov rdx, rdi
call sym.ntdll.dll_RtlCreateHeap
mov rdi, rax
test rax, rax
je 0x1800ffc99
test dword [rax + 0x70], 0x8000000
je 0x1800ffc8f
mov ecx, 1
call fcn.1800244c4
mov word [rdi + 0x130], ax
mov dl, 1
mov rcx, rdi
call fcn.1801016bc
mov rax, rdi
lea r11, [rsp + 0x60]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop r12
ret