Function at 0x5daf00
Capabilities:
Get process heap flags

Disassembly:
lea r12, [rsp - 0xa8]
cmp r12, qword [r14 + 0x10]
jbe 0x5dc2c6
push rbp
mov rbp, rsp
sub rsp, 0x120
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], rcx
mov qword [rsp + 0x170], r8
mov rdx, qword [rsp + 0x140]
cmp rdx, 0x10
jb 0x5dc2ba
cmp rdx, 0x20
jb 0x5dc2b0
mov qword [rsp + 0x180], r10
mov qword [rsp + 0x170], r8
mov qword [rsp + 0x168], rsi
mov qword [rsp + 0x160], rdi
mov qword [rsp + 0x158], rcx
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x178], r9
mov rsi, qword [0x007d7bb0]
mov r8, qword [0x007d7bb8]
mov r9, qword [0x007d7bc0]
mov r10, qword [rax + 0x28]
mov ecx, 0x10
mov rdi, rdx
mov rax, rbx
mov rbx, qword [rsp + 0x130]
call r10
mov rbx, qword [rsp + 0x130]
lea rdx, [rbx + 0x10]
mov qword [rsp + 0x98], rdx
mov rdi, qword [rsp + 0x140]
lea r10, [rdi - 0x10]
mov qword [rsp + 0x38], r10
mov rcx, qword [rsp + 0x178]
mov r8, rcx
shr rcx, 7
mov qword [rsp + 0x90], rcx
mov r11, qword [rsp + 0x160]
mov rax, qword [rsp + 0x150]
mov r12, qword [rsp + 0x148]
mov r13, qword [rsp + 0x158]
mov r15, qword [rsp + 0x168]
mov rsi, qword [rsp + 0x170]
mov r9, qword [rsp + 0x180]
mov qword [rsp + 0x50], rax
xor eax, eax
mov qword [rsp + 0x40], rax
xor eax, eax
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x50]
jmp 0x5db620
mov qword [rsp + 0x80], r9
mov qword [rsp + 0x118], r8
mov qword [rsp + 0x78], r15
mov qword [rsp + 0x110], r11
mov r10, qword [rsp + 0x148]
mov r11, qword [r10 + 0x28]
mov rbx, rdx
mov ecx, 0x10
mov rdi, qword [rsp + 0x38]
mov rsi, r8
mov r8, rcx
mov r9, r12
call r11
mov rdx, qword [rsp + 0x80]
mov r10, qword [rsp + 0x170]
lea r11, [r10 + rdx]
lea r11, [r11 + 0x10]
mov qword [rsp + 0x108], r11
mov r12, qword [rsp + 0x88]
lea r13, [r12 - 0x10]
mov qword [rsp + 0x88], r13
mov r15, qword [rsp + 0x78]
mov r11, qword [rsp + 0x158]
lea rcx, [r11 + r15]
lea rcx, [rcx + 0x10]
mov qword [rsp + 0xd0], rcx
lea rbx, [r10 + rdx]
lea rbx, [rbx + 0x20]
mov qword [rsp + 0x100], rbx
lea rsi, [r12 - 0x20]
mov qword [rsp + 0x80], rsi
lea rdi, [r11 + r15]
lea rdi, [rdi + 0x20]
mov qword [rsp + 0xc8], rdi
lea r8, [r10 + rdx]
lea r8, [r8 + 0x30]
mov qword [rsp + 0xf8], r8
lea r9, [r12 - 0x30]
mov qword [rsp + 0x78], r9
lea r8, [r11 + r15]
lea r8, [r8 + 0x30]
mov qword [rsp + 0xc0], r8
lea r8, [r10 + rdx]
lea r8, [r8 + 0x40]
mov qword [rsp + 0xf0], r8
lea r8, [r12 - 0x40]
mov qword [rsp + 0x70], r8
lea r8, [r11 + r15]
lea r8, [r8 + 0x40]
mov qword [rsp + 0xb8], r8
lea r8, [r10 + rdx]
lea r8, [r8 + 0x50]
mov qword [rsp + 0xe8], r8
lea r8, [r12 - 0x50]
mov qword [rsp + 0x68], r8
lea r8, [r11 + r15]
lea r8, [r8 + 0x50]
mov qword [rsp + 0xb0], r8
lea r8, [r10 + rdx]
lea r8, [r8 + 0x60]
mov qword [rsp + 0xe0], r8
lea r8, [r12 - 0x60]
mov qword [rsp + 0x60], r8
lea r8, [r11 + r15]
lea r8, [r8 + 0x60]
mov qword [rsp + 0xa8], r8
lea rdx, [r10 + rdx]
lea rdx, [rdx + 0x70]
mov qword [rsp + 0xd8], rdx
add r12, 0xffffffffffffff90
mov qword [rsp + 0x58], r12
lea r15, [r11 + r15]
lea r15, [r15 + 0x70]
mov qword [rsp + 0xa0], r15
mov r11, qword [rsp + 0x40]
inc r11
mov qword [rsp + 0x40], r11
nop
mov r10, qword [rsp + 0x110]
mov qword [rsp], r10
mov r10, qword [rsp + 0x118]
mov qword [rsp + 8], r10
mov r10, qword [rsp + 0x130]
mov qword [rsp + 0x10], r10
nop
call sym.github.com_templexxx_xorsimd.bytes16.abi0
xorps xmm15, xmm15
mov r14, qword [0x0083b2b0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x148]
mov r10, qword [rdx + 0x28]
mov rax, qword [rsp + 0x150]
mov rbx, qword [rsp + 0x130]
mov ecx, 0x10
mov rdi, qword [rsp + 0x140]
mov rsi, qword [rsp + 0x108]
mov r8, rcx
mov r9, qword [rsp + 0x88]
call r10
mov rdx, qword [rsp + 0xd0]
mov qword [rsp], rdx
mov rdx, qword [rsp + 0x108]
mov qword [rsp + 8], rdx
mov rdx, qword [rsp + 0x98]
mov qword [rsp + 0x10], rdx
nop dword [rax]
call sym.github.com_templexxx_xorsimd.bytes16.abi0
xorps xmm15, xmm15
mov r14, qword [0x0083b2b0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x148]
mov r10, qword [rdx + 0x28]
mov rax, qword [rsp + 0x150]
mov rbx, qword [rsp + 0x98]
mov ecx, 0x10
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x100]
mov r8, rcx
mov r9, qword [rsp + 0x80]
call r10
mov rdx, qword [rsp + 0xc8]
mov qword [rsp], rdx
mov rdx, qword [rsp + 0x100]
mov qword [rsp + 8], rdx
mov rdx, qword [rsp + 0x130]
mov qword [rsp + 0x10], rdx
call sym.github.com_templexxx_xorsimd.bytes16.abi0
xorps xmm15, xmm15
mov r14, qword [0x0083b2b0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x148]
mov r10, qword [rdx + 0x28]
mov rax, qword [rsp + 0x150]
mov rbx, qword [rsp + 0x130]
mov ecx, 0x10
mov rdi, qword [rsp + 0x140]
mov rsi, qword [rsp + 0xf8]
mov r8, rcx
mov r9, qword [rsp + 0x78]
call r10
mov rdx, qword [rsp + 0xc0]
mov qword [rsp], rdx
mov rdx, qword [rsp + 0xf8]
mov qword [rsp + 8], rdx
mov rdx, qword [rsp + 0x98]
mov qword [rsp + 0x10], rdx
call sym.github.com_templexxx_xorsimd.bytes16.abi0
xorps xmm15, xmm15
mov r14, qword [0x0083b2b0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x148]
mov r10, qword [rdx + 0x28]
mov rax, qword [rsp + 0x150]
mov rbx, qword [rsp + 0x98]
mov ecx, 0x10
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0xf0]
mov r8, rcx
mov r9, qword [rsp + 0x70]
nop
call r10
mov rdx, qword [rsp + 0xb8]
mov qword [rsp], rdx
mov rdx, qword [rsp + 0xf0]
mov qword [rsp + 8], rdx
mov rdx, qword [rsp + 0x130]
mov qword [rsp + 0x10], rdx
call sym.github.com_templexxx_xorsimd.bytes16.abi0
xorps xmm15, xmm15
mov r14, qword [0x0083b2b0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x148]
mov r10, qword [rdx + 0x28]
mov rax, qword [rsp + 0x150]
mov rbx, qword [rsp + 0x130]
mov ecx, 0x10
mov rdi, qword [rsp + 0x140]
mov rsi, qword [rsp + 0xe8]
mov r8, rcx
mov r9, qword [rsp + 0x68]
call r10
mov rdx, qword [rsp + 0xb0]
mov qword [rsp], rdx
mov rdx, qword [rsp + 0xe8]
mov qword [rsp + 8], rdx
mov rdx, qword [rsp + 0x98]
mov qword [rsp + 0x10], rdx
call sym.github.com_templexxx_xorsimd.bytes16.abi0
xorps xmm15, xmm15
mov r14, qword [0x0083b2b0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x148]
mov r10, qword [rdx + 0x28]
mov rax, qword [rsp + 0x150]
mov rbx, qword [rsp + 0x98]
mov ecx, 0x10
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0xe0]
mov r8, rcx
mov r9, qword [rsp + 0x60]
call r10
mov rdx, qword [rsp + 0xa8]
mov qword [rsp], rdx
mov rdx, qword [rsp + 0xe0]
mov qword [rsp + 8], rdx
mov rdx, qword [rsp + 0x130]
mov qword [rsp + 0x10], rdx
call sym.github.com_templexxx_xorsimd.bytes16.abi0
xorps xmm15, xmm15
mov r14, qword [0x0083b2b0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x148]
mov r10, qword [rdx + 0x28]
mov rax, qword [rsp + 0x150]
mov rbx, qword [rsp + 0x130]
mov ecx, 0x10
mov rdi, qword [rsp + 0x140]
mov rsi, qword [rsp + 0xd8]
mov r8, rcx
mov r9, qword [rsp + 0x58]
call r10
mov rdx, qword [rsp + 0xa0]
mov qword [rsp], rdx
mov rdx, qword [rsp + 0xd8]
mov qword [rsp + 8], rdx
mov rdx, qword [rsp + 0x98]
mov qword [rsp + 0x10], rdx
call sym.github.com_templexxx_xorsimd.bytes16.abi0
xorps xmm15, xmm15
mov r14, qword [0x0083b2b0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x48]
sub rdx, 0xffffffffffffff80
mov r10, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x98]
mov r11, qword [rsp + 0x160]
mov rax, qword [rsp + 0x150]
mov r12, qword [rsp + 0x148]
mov r13, qword [rsp + 0x158]
mov r15, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x170]
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x180]
mov r8, qword [rsp + 0x178]
mov r9, qword [rsp + 0x40]
mov rcx, r10
mov rbx, qword [rsp + 0x130]
mov rsi, qword [rsp + 0x170]
mov rdi, qword [rsp + 0x140]
mov r9, qword [rsp + 0x180]
mov r10, qword [rsp + 0x38]
mov qword [rsp + 0x48], rdx
mov rdx, qword [rsp + 0x98]
mov r10, qword [rsp + 0x40]
cmp r10, rcx
jge 0x5db6b2
mov r10, qword [rsp + 0x48]
cmp r8, r10
jb 0x5dc2a5
sub r9, r10
mov qword [rsp + 0x88], r9
neg r9
sar r9, 0x3f
and r9, r10
lea r8, [rsi + r9]
mov r12, qword [rsp + 0x88]
nop dword [rax]
cmp r12, 0x80
jb 0x5dc294
cmp r11, r10
jb 0x5dc289
sub r15, r10
mov qword [rsp + 0x80], r15
neg r15
sar r15, 0x3f
and r15, r10
lea r11, [r13 + r15]
mov r10, qword [rsp + 0x80]
nop dword [rax + rax]
cmp r10, 0x80
jae 0x5db059
jmp 0x5dc27c
mov rcx, r8
shr r8, 4
and r8d, 7
lea r10, [0x00693c00]
jmp qword [r10 + r8*8]
mov ecx, pe_nt_image_headers64
mov rdx, r10
call sym.runtime.panicSliceAcap
mov rax, r10
mov rcx, r11
call sym.runtime.panicSliceB
mov ecx, pe_nt_image_headers64
mov rdx, r12
nop dword [rax]
call sym.runtime.panicSliceAcap
mov rax, r10
mov rcx, r8
call sym.runtime.panicSliceB
mov ecx, 0x20
call sym.runtime.panicSliceAcap
mov ecx, 0x10
nop
call sym.runtime.panicSliceAcap
nop
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x58], r10
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x58]
nop dword [rax + rax]
jmp sym.github.com_xtaci_kcp_go_v5.decrypt16