Function at 0x6019e0
Capabilities:
Get process heap flags

Disassembly:
lea r12, [rsp - 0xa0]
cmp r12, qword [r14 + 0x10]
jbe 0x602d46
push rbp
mov rbp, rsp
sub rsp, 0x118
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], rbx
mov qword [rsp + 0x150], rcx
mov qword [rsp + 0x168], r8
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x602d3a
cmp rdx, 0x20
jb 0x602d30
mov qword [rsp + 0x178], r10
mov qword [rsp + 0x170], r9
mov qword [rsp + 0x168], r8
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x158], rdi
mov qword [rsp + 0x150], rcx
mov qword [rsp + 0x148], rbx
mov qword [rsp + 0x140], rax
mov rsi, qword [0x0081fd70]
mov r8, qword [0x0081fd78]
mov r9, qword [0x0081fd80]
mov r10, qword [rax + 0x28]
mov ecx, 0x10
mov rdi, rdx
mov rax, rbx
mov rbx, qword [rsp + 0x128]
call r10
mov rbx, qword [rsp + 0x128]
lea rdx, [rbx + 0x10]
mov qword [rsp + 0x90], rdx
mov rdi, qword [rsp + 0x138]
lea r10, [rdi - 0x10]
mov qword [rsp + 0x38], r10
mov rcx, qword [rsp + 0x170]
mov r8, rcx
shr rcx, 7
mov r11, qword [rsp + 0x158]
mov rax, qword [rsp + 0x148]
mov r12, qword [rsp + 0x140]
mov r13, qword [rsp + 0x150]
mov r15, qword [rsp + 0x160]
mov rsi, qword [rsp + 0x168]
mov r9, qword [rsp + 0x178]
mov qword [rsp + 0x50], rax
xor eax, eax
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x50]
jmp 0x602109
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x80], r9
mov qword [rsp + 0x110], r8
mov qword [rsp + 0x78], r15
mov qword [rsp + 0x108], r11
mov r10, qword [rsp + 0x140]
mov r11, qword [r10 + 0x28]
mov rbx, rdx
mov ecx, 0x10
mov rdi, qword [rsp + 0x38]
mov rsi, r8
mov r8, rcx
mov r9, r12
call r11
mov rdx, qword [rsp + 0x80]
mov r10, qword [rsp + 0x168]
lea r11, [r10 + rdx]
lea r11, [r11 + 0x10]
mov qword [rsp + 0x100], r11
mov r12, qword [rsp + 0x88]
lea r13, [r12 - 0x10]
mov qword [rsp + 0x88], r13
mov r15, qword [rsp + 0x78]
mov r11, qword [rsp + 0x150]
lea rcx, [r11 + r15]
lea rcx, [rcx + 0x10]
mov qword [rsp + 0xc8], rcx
lea rbx, [r10 + rdx]
lea rbx, [rbx + 0x20]
mov qword [rsp + 0xf8], rbx
lea rsi, [r12 - 0x20]
mov qword [rsp + 0x80], rsi
lea rdi, [r11 + r15]
lea rdi, [rdi + 0x20]
mov qword [rsp + 0xc0], rdi
lea r8, [r10 + rdx]
lea r8, [r8 + 0x30]
mov qword [rsp + 0xf0], r8
lea r9, [r12 - 0x30]
mov qword [rsp + 0x78], r9
lea r8, [r11 + r15]
lea r8, [r8 + 0x30]
mov qword [rsp + 0xb8], r8
lea r8, [r10 + rdx]
lea r8, [r8 + 0x40]
mov qword [rsp + 0xe8], r8
lea r8, [r12 - 0x40]
mov qword [rsp + 0x70], r8
lea r8, [r11 + r15]
lea r8, [r8 + 0x40]
mov qword [rsp + 0xb0], r8
lea r8, [r10 + rdx]
lea r8, [r8 + 0x50]
mov qword [rsp + 0xe0], r8
lea r8, [r12 - 0x50]
mov qword [rsp + 0x68], r8
lea r8, [r11 + r15]
lea r8, [r8 + 0x50]
mov qword [rsp + 0xa8], r8
lea r8, [r10 + rdx]
lea r8, [r8 + 0x60]
mov qword [rsp + 0xd8], r8
lea r8, [r12 - 0x60]
mov qword [rsp + 0x60], r8
lea r8, [r11 + r15]
lea r8, [r8 + 0x60]
mov qword [rsp + 0xa0], r8
lea rdx, [r10 + rdx]
lea rdx, [rdx + 0x70]
mov qword [rsp + 0xd0], rdx
add r12, 0xffffffffffffff90
mov qword [rsp + 0x58], r12
lea r15, [r11 + r15]
lea r15, [r15 + 0x70]
mov qword [rsp + 0x98], r15
mov r11, qword [rsp + 0x40]
dec r11
mov qword [rsp + 0x40], r11
nop
mov r10, qword [rsp + 0x108]
mov qword [rsp], r10
mov r10, qword [rsp + 0x110]
mov qword [rsp + 8], r10
mov r10, qword [rsp + 0x128]
mov qword [rsp + 0x10], r10
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x140]
mov r10, qword [rdx + 0x28]
mov rax, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x128]
mov ecx, 0x10
mov rdi, qword [rsp + 0x138]
mov rsi, qword [rsp + 0x100]
mov r8, rcx
mov r9, qword [rsp + 0x88]
call r10
mov rdx, qword [rsp + 0xc8]
mov qword [rsp], rdx
mov rdx, qword [rsp + 0x100]
mov qword [rsp + 8], rdx
mov rdx, qword [rsp + 0x90]
mov qword [rsp + 0x10], rdx
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x140]
mov r10, qword [rdx + 0x28]
mov rax, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x90]
mov ecx, 0x10
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0xf8]
mov r8, rcx
mov r9, qword [rsp + 0x80]
call r10
mov rdx, qword [rsp + 0xc0]
mov qword [rsp], rdx
mov rdx, qword [rsp + 0xf8]
mov qword [rsp + 8], rdx
mov rdx, qword [rsp + 0x128]
mov qword [rsp + 0x10], rdx
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x140]
mov r10, qword [rdx + 0x28]
mov rax, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x128]
mov ecx, 0x10
mov rdi, qword [rsp + 0x138]
mov rsi, qword [rsp + 0xf0]
mov r8, rcx
mov r9, qword [rsp + 0x78]
call r10
mov rdx, qword [rsp + 0xb8]
mov qword [rsp], rdx
mov rdx, qword [rsp + 0xf0]
mov qword [rsp + 8], rdx
mov rdx, qword [rsp + 0x90]
mov qword [rsp + 0x10], rdx
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x140]
mov r10, qword [rdx + 0x28]
mov rax, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x90]
mov ecx, 0x10
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0xe8]
mov r8, rcx
mov r9, qword [rsp + 0x70]
call r10
mov rdx, qword [rsp + 0xb0]
mov qword [rsp], rdx
mov rdx, qword [rsp + 0xe8]
mov qword [rsp + 8], rdx
mov rdx, qword [rsp + 0x128]
mov qword [rsp + 0x10], rdx
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x140]
mov r10, qword [rdx + 0x28]
mov rax, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x128]
mov ecx, 0x10
mov rdi, qword [rsp + 0x138]
mov rsi, qword [rsp + 0xe0]
mov r8, rcx
mov r9, qword [rsp + 0x68]
call r10
mov rdx, qword [rsp + 0xa8]
mov qword [rsp], rdx
mov rdx, qword [rsp + 0xe0]
mov qword [rsp + 8], rdx
mov rdx, qword [rsp + 0x90]
mov qword [rsp + 0x10], rdx
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x140]
mov r10, qword [rdx + 0x28]
mov rax, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x90]
mov ecx, 0x10
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0xd8]
mov r8, rcx
mov r9, qword [rsp + 0x60]
nop
call r10
mov rdx, qword [rsp + 0xa0]
mov qword [rsp], rdx
mov rdx, qword [rsp + 0xd8]
mov qword [rsp + 8], rdx
mov rdx, qword [rsp + 0x128]
mov qword [rsp + 0x10], rdx
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x140]
mov r10, qword [rdx + 0x28]
mov rax, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x128]
mov ecx, 0x10
mov rdi, qword [rsp + 0x138]
mov rsi, qword [rsp + 0xd0]
mov r8, rcx
mov r9, qword [rsp + 0x58]
call r10
mov rdx, qword [rsp + 0x98]
mov qword [rsp], rdx
mov rdx, qword [rsp + 0xd0]
mov qword [rsp + 8], rdx
mov rdx, qword [rsp + 0x90]
mov qword [rsp + 0x10], rdx
call fcn.00540fa0
xorps xmm15, xmm15
mov r14, qword [0x008b94a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x48]
sub rdx, 0xffffffffffffff80
mov rbx, qword [rsp + 0x90]
mov r10, qword [rsp + 0x158]
mov rax, qword [rsp + 0x148]
mov r11, qword [rsp + 0x140]
mov r12, qword [rsp + 0x150]
mov r13, qword [rsp + 0x160]
mov r15, qword [rsp + 0x168]
mov rdi, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x178]
mov rsi, qword [rsp + 0x170]
mov r8, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x128]
mov rsi, r15
mov rdi, qword [rsp + 0x138]
mov r8, qword [rsp + 0x170]
mov r9, rcx
mov r10, qword [rsp + 0x38]
mov r11, qword [rsp + 0x158]
mov r12, qword [rsp + 0x140]
mov r13, qword [rsp + 0x150]
mov r15, qword [rsp + 0x160]
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x48], rdx
mov rdx, qword [rsp + 0x90]
test rcx, rcx
jle 0x60219d
mov r10, qword [rsp + 0x48]
nop word [rax + rax]
cmp r8, r10
jb 0x602d25
sub r9, r10
mov qword [rsp + 0x88], r9
neg r9
sar r9, 0x3f
and r9, r10
lea r8, [rsi + r9]
mov r12, qword [rsp + 0x88]
cmp r12, 0x80
jb 0x602d15
nop word [rax + rax]
cmp r11, r10
jb 0x602d0a
sub r15, r10
mov qword [rsp + 0x80], r15
neg r15
sar r15, 0x3f
and r15, r10
lea r11, [r13 + r15]
mov r10, qword [rsp + 0x80]
cmp r10, 0x80
jae 0x601b2a
jmp 0x602cfd
mov rcx, r8
shr r8, 4
and r8d, 7
lea r13, [0x006be420]
jmp qword [r13 + r8*8]
mov ecx, pe_nt_image_headers64
mov rdx, r10
call fcn.0046bb40
mov rax, r10
mov rcx, r11
call fcn.0046bb80
mov ecx, pe_nt_image_headers64
mov rdx, r12
nop dword [rax]
call fcn.0046bb40
mov rax, r10
mov rcx, r8
call fcn.0046bb80
mov ecx, 0x20
call fcn.0046bb40
mov ecx, 0x10
nop
call fcn.0046bb40
nop
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x58], r10
call fcn.004697e0
mov rax, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x58]
nop dword [rax + rax]
jmp fcn.006019e0