Function at 0x1800317d0
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x4a0]
sub rsp, 0x5a0
mov rax, qword [0x180132408]
xor rax, rsp
mov qword [rbp + 0x490], rax
lea rcx, str.steam_api64.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x420], xmm0
movdqa xmm1, xmmword [0x1801061f0]
movdqa xmmword [rbp + 0x430], xmm1
mov byte [rbp + 0x420], 0
movups xmmword [rbp + 0x440], xmm0
movdqa xmmword [rbp + 0x450], xmm1
mov byte [rbp + 0x440], 0
movdqa xmmword [rbp + 0x470], xmm0
xor r15d, r15d
mov qword [rbp + 0x480], r15
lea r8d, [r15 + 0x24]
lea rdx, str.83_79_18_00_48_8B_D1_74_4A_FF_4A_18
lea rcx, [rbp + 0x420]
call fcn.180038ad0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3b0], xmm0
movdqa xmm1, xmmword [0x1801061f0]
movdqa xmmword [rbp + 0x3c0], xmm1
mov byte [rbp + 0x3b0], r15b
movups xmmword [rbp + 0x3d0], xmm0
movdqa xmmword [rbp + 0x3e0], xmm1
mov byte [rbp + 0x3d0], r15b
movdqa xmmword [rbp + 0x400], xmm0
mov qword [rbp + 0x410], r15
lea r8d, [r15 + 0x1b]
lea rdx, str.76_32_48_8B_53_40_48_8D_0D
lea rcx, [rbp + 0x3b0]
call fcn.180038ad0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x340], xmm0
movdqa xmm1, xmmword [0x1801061f0]
movdqa xmmword [rbp + 0x350], xmm1
mov byte [rbp + 0x340], r15b
movups xmmword [rbp + 0x360], xmm0
movdqa xmmword [rbp + 0x370], xmm1
mov byte [rbp + 0x360], r15b
movdqa xmmword [rbp + 0x390], xmm0
mov qword [rbp + 0x3a0], r15
lea r8d, [r15 + 0x22]
lea rdx, str.83_3D___________75_17_8B_43_20_25
lea rcx, [rbp + 0x340]
call fcn.180038ad0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
movdqa xmm1, xmmword [0x1801061f0]
movdqa xmmword [rbp + 0x2e0], xmm1
mov byte [rbp + 0x2d0], r15b
movups xmmword [rbp + 0x2f0], xmm0
movdqa xmmword [rbp + 0x300], xmm1
mov byte [rbp + 0x2f0], r15b
movdqa xmmword [rbp + 0x320], xmm0
mov qword [rbp + 0x330], r15
lea r8d, [r15 + 0x18]
lea rdx, str.48_85_C0_74_14_4C_8B_10
lea rcx, [rbp + 0x2d0]
call fcn.180038ad0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x260], xmm0
movdqa xmm1, xmmword [0x1801061f0]
movdqa xmmword [rbp + 0x270], xmm1
mov byte [rbp + 0x260], r15b
movups xmmword [rbp + 0x280], xmm0
movdqa xmmword [rbp + 0x290], xmm1
mov byte [rbp + 0x280], r15b
movdqa xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2c0], r15
lea r8d, [r15 + 0x41]
lea rdx, str.48_89_5C_24___57_48_83_EC_20_48_8B_DA_48_8B_F9_48_85_D2_75_44_E8
lea rcx, [rbp + 0x260]
call fcn.180038ad0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
movdqa xmm1, xmmword [0x1801061f0]
movdqa xmmword [rbp + 0x200], xmm1
mov byte [rbp + 0x1f0], r15b
movups xmmword [rbp + 0x210], xmm0
movdqa xmmword [rbp + 0x220], xmm1
mov byte [rbp + 0x210], r15b
movdqa xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r15
lea r8d, [r15 + 0x37]
lea rdx, str.48_8B_05_________45_________48_8B_48_08_48_85_C9_74_07
lea rcx, [rbp + 0x1f0]
call fcn.180038ad0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
movdqa xmm1, xmmword [0x1801061f0]
movdqa xmmword [rbp + 0x190], xmm1
mov byte [rbp + 0x180], r15b
movups xmmword [rbp + 0x1a0], xmm0
movdqa xmmword [rbp + 0x1b0], xmm1
mov byte [rbp + 0x1a0], r15b
movdqa xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e0], r15
lea r8d, [r15 + 0x29]
lea rdx, str.4C_8D_05_________4D_8B_08_4D_85_C9_74_11
lea rcx, [rbp + 0x180]
call fcn.180038ad0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
movdqa xmm1, xmmword [0x1801061f0]
movdqa xmmword [rbp + 0x120], xmm1
mov byte [rbp + 0x110], r15b
movups xmmword [rbp + 0x130], xmm0
movdqa xmmword [rbp + 0x140], xmm1
mov byte [rbp + 0x130], r15b
movdqa xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], r15
lea r8d, [r15 + 0x21]
lea rdx, str.48_8B_C8_FF_52_30_84_C0_74_05_48
lea rcx, [rbp + 0x110]
call fcn.180038ad0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
movdqa xmm1, xmmword [0x1801061f0]
movdqa xmmword [rbp + 0xb0], xmm1
mov byte [rbp + 0xa0], r15b
movups xmmword [rbp + 0xc0], xmm0
movdqa xmmword [rbp + 0xd0], xmm1
mov byte [rbp + 0xc0], r15b
movdqa xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r15
lea r8d, [r15 + 6]
lea rdx, str.FF_E3
lea rcx, [rbp + 0xa0]
call fcn.180038ad0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x1801061f0]
movdqa xmmword [rbp + 0x40], xmm1
mov byte [rbp + 0x30], r15b
movups xmmword [rbp + 0x50], xmm0
movdqa xmmword [rbp + 0x60], xmm1
mov byte [rbp + 0x50], r15b
movdqa xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r15
lea r8d, [r15 + 0x24]
lea rdx, str.E8_________48_8B_88___01_00_00___02
lea rcx, [rbp + 0x30]
call fcn.180038ad0
nop
call fcn.180033080
lea rax, [0x1800e8820]
mov qword [rsp + 0x58], rax
lea rax, str.xxxx_xxxxxxx____
mov qword [rsp + 0x60], rax
mov byte [rsp + 0x68], r15b
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r15
lea rcx, [rsp + 0x58]
call fcn.180031640
mov r9, qword [rsp + 0x78]
mov rcx, r9
mov rbx, qword [rsp + 0x70]
sub rcx, rbx
movabs rsi, 0x2aaaaaaaaaaaaaab
mov rax, rsi
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, 1
ja 0x180031c68
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
cmp r9, qword [rbp - 0x80]
je 0x180031c4c
movups xmmword [r9], xmm0
movsd xmm0, qword [rsp + 0x50]
movsd qword [r9 + 0x10], xmm0
add r9, 0x18
mov qword [rsp + 0x78], r9
jmp 0x180031c68
lea r8, [rsp + 0x40]
mov rdx, r9
lea rcx, [rsp + 0x70]
call fcn.180033fb0
mov r9, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x70]
sub r9, rbx
mov rax, rsi
imul r9
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x180031c91
movsd xmm0, qword [rbx + 0x10]
movsd qword [rsp + 0x50], xmm0
mov rdi, qword [rbx]
jmp 0x180031c94
mov rdi, r15
test rdi, rdi
jne 0x180031cac
lea rdx, str.Is_Dlc_Present
lea rcx, str.Failed_to_find__s_pattern.
call fcn.180036690
mov qword [0x1801af158], rdi
test rbx, rbx
je 0x180031d08
mov rcx, qword [rbp - 0x80]
sub rcx, rbx
mov rax, rsi
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x180031d00
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180031e45
mov rcx, rbx
call fcn.1800cdf20
lea rax, [0x1800e8870]
mov qword [rsp + 0x58], rax
lea rax, str.xxxxxxxxxxxxxxxxxxxxxxxx____xxxxxx
mov qword [rsp + 0x60], rax
mov byte [rsp + 0x68], 0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r15
lea rcx, [rsp + 0x58]
call fcn.180031640
mov r9, qword [rsp + 0x78]
mov rcx, r9
mov rbx, qword [rsp + 0x70]
sub rcx, rbx
mov rax, rsi
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, 1
ja 0x180031db1
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
cmp r9, qword [rbp - 0x80]
je 0x180031d95
movups xmmword [r9], xmm0
movsd xmm0, qword [rsp + 0x50]
movsd qword [r9 + 0x10], xmm0
add r9, 0x18
mov qword [rsp + 0x78], r9
jmp 0x180031db1
lea r8, [rsp + 0x40]
mov rdx, r9
lea rcx, [rsp + 0x70]
call fcn.180033fb0
mov r9, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x70]
sub r9, rbx
mov rax, rsi
imul r9
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x180031dda
movsd xmm0, qword [rbx + 0x10]
movsd qword [rsp + 0x50], xmm0
mov rdi, qword [rbx]
jmp 0x180031ddd
mov rdi, r15
test rdi, rdi
jne 0x180031df5
lea rdx, str.trigger_script_event
lea rcx, str.Failed_to_find__s_pattern.
call fcn.180036690
mov qword [0x1801af188], rdi
test rbx, rbx
je 0x180031e54
mov rcx, qword [rbp - 0x80]
sub rcx, rbx
mov rax, rsi
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x180031e4c
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180031e4c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1800cdf20
call fcn.180033220
call fcn.1800333b0
call fcn.18002fed0
lea rax, [0x1800e8930]
mov qword [rbp - 0x78], rax
lea rax, str.xxxxxxxxxxx
mov qword [rbp - 0x70], rax
mov byte [rbp - 0x68], 0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r15
lea r9, [0x1801af180]
lea r8, str.xxxx_xxxxxxxxxxxx
lea rdx, [0x1800e8958]
lea rcx, str.has_model_loaded
call fcn.180033540
lea r9, [0x1801af170]
lea r8, str.xxxx_xxxx_xxxxxxxxxxx
lea rdx, [0x1800e89a0]
lea rcx, str.request_model
call fcn.180033540
lea rax, [0x1800e89e8]
mov qword [rsp + 0x58], rax
lea rax, str.xxxx_xxxxxxxxxxxxxxxxxxxxxx
mov qword [rsp + 0x60], rax
mov byte [rsp + 0x68], 0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r15
lea rcx, [rsp + 0x58]
call fcn.180031640
mov r9, qword [rsp + 0x78]
mov rcx, r9
mov rbx, qword [rsp + 0x70]
sub rcx, rbx
mov rax, rsi
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, 1
ja 0x180031f74
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
cmp r9, qword [rbp - 0x80]
je 0x180031f58
movups xmmword [r9], xmm0
movsd xmm0, qword [rsp + 0x50]
movsd qword [r9 + 0x10], xmm0
add r9, 0x18
mov qword [rsp + 0x78], r9
jmp 0x180031f74
lea r8, [rsp + 0x40]
mov rdx, r9
lea rcx, [rsp + 0x70]
call fcn.180033fb0
mov r9, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x70]
sub r9, rbx
mov rax, rsi
imul r9
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x180031f9d
movsd xmm0, qword [rbx + 0x10]
movsd qword [rsp + 0x50], xmm0
mov rdi, qword [rbx]
jmp 0x180031fa0
mov rdi, r15
test rdi, rdi
jne 0x180031fb8
lea rdx, str.create_vehicle
lea rcx, str.Failed_to_find__s_pattern.
call fcn.180036690
mov qword [0x1801af178], rdi
test rbx, rbx
je 0x180032014
mov rcx, qword [rbp - 0x80]
sub rcx, rbx
mov rax, rsi
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x18003200c
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800323fd
mov rcx, rbx
call fcn.1800cdf20
cmp byte [rbp + 0x488], 0
jne 0x18003202e
mov edx, 1
lea rcx, [rbp + 0x420]
call fcn.180038f10
lea rcx, [rbp + 0x420]
call fcn.180035970
mov rcx, qword [rax]
mov rax, qword [0x1801b01d8]
test rcx, rcx
cmovne rax, rcx
mov qword [0x1801b01d8], rax
cmp byte [rbp + 0x418], 0
jne 0x18003206c
mov edx, 1
lea rcx, [rbp + 0x3b0]
call fcn.180038f10
lea rcx, [rbp + 0x3b0]
call fcn.180035970
mov rcx, qword [rax]
test rcx, rcx
je 0x180032a60
add rcx, 9
je 0x180032a60
movsxd rax, dword [rcx]
add rcx, 4
add rcx, rax
mov qword [0x1801b1878], rcx
cmp byte [rbp + 0x3a8], 0
jne 0x1800320b9
mov edx, 1
lea rcx, [rbp + 0x340]
call fcn.180038f10
lea rcx, [rbp + 0x340]
call fcn.180035970
mov rax, qword [rax]
test rax, rax
je 0x180032a53
add rax, 2
je 0x180032a53
cmp byte [rbp + 0x338], 0
jne 0x1800320f5
mov edx, 1
lea rcx, [rbp + 0x2d0]
call fcn.180038f10
lea rcx, [rbp + 0x2d0]
call fcn.180035970
mov rax, qword [rax]
test rax, rax
je 0x180032abb
add rax, 0xffffffffffffffe4
je 0x180032abb
mov qword [0x1801af148], rax
cmp byte [rbp + 0x2c8], 0
jne 0x180032138
mov edx, 1
lea rcx, [rbp + 0x260]
call fcn.180038f10
lea rcx, [rbp + 0x260]
call fcn.180035970
mov rcx, qword [rax]
test rcx, rcx
je 0x180032a6d
mov qword [0x1801af150], rcx
mov edx, 0x9c
lea ecx, [rdx + 0x58]
lea r9d, [rdx + 0x63]
mov r8d, 4
call fcn.1800358c0
mov edx, 0x9c
lea ecx, [rdx + 0x58]
lea r9d, [rdx + 0x63]
mov r8d, 4
call fcn.1800358c0
mov edx, 0x9c
lea ecx, [rdx + 0x58]
lea r9d, [rdx + 0x63]
mov r8d, 4
call fcn.1800358c0
mov edx, 0x90
mov ecx, 4
lea r9d, [rdx - 0x59]
lea r8d, [rdx + 0x64]
call fcn.1800358c0
mov edx, 0x90
mov ecx, 4
lea r9d, [rdx - 0x59]
lea r8d, [rdx + 0x64]
call fcn.1800358c0
mov edx, 0x90
mov ecx, 4
lea r9d, [rdx - 0x59]
lea r8d, [rdx + 0x64]
call fcn.1800358c0
mov edx, 0x90
mov ecx, 4
lea r9d, [rdx + 0x6f]
lea r8d, [rdx + 0x64]
call fcn.1800358c0
xor r9d, r9d
mov edx, 0x90
lea ecx, [r9 + 4]
lea r8d, [rdx + 0x64]
call fcn.1800358c0
xor r9d, r9d
mov edx, 0x9b
lea ecx, [r9 + 0x14]
mov r8d, edx
call fcn.1800358c0
cmp byte [rbp + 0x258], 0
jne 0x18003223b
mov edx, 1
lea rcx, [rbp + 0x1f0]
call fcn.180038f10
lea rcx, [rbp + 0x1f0]
call fcn.180035970
mov rcx, qword [rax]
test rcx, rcx
je 0x180032a7a
movsxd rax, dword [rcx + 3]
add rcx, 7
add rcx, rax
mov qword [0x1801af0f0], rcx
cmp byte [rbp + 0x1e8], 0
jne 0x18003227f
mov edx, 1
lea rcx, [rbp + 0x180]
call fcn.180038f10
lea rcx, [rbp + 0x180]
call fcn.180035970
mov rcx, qword [rax]
test rcx, rcx
je 0x180032a87
movsxd rax, dword [rcx + 3]
add rcx, 7
add rcx, rax
mov qword [0x1801af100], rcx
cmp byte [rbp + 0x178], 0
jne 0x1800322c3
mov edx, 1
lea rcx, [rbp + 0x110]
call fcn.180038f10
lea rcx, [rbp + 0x110]
call fcn.180035970
mov rax, qword [rax]
test rax, rax
je 0x180032aae
add rax, 8
je 0x180032aae
mov qword [0x1801af0f8], rax
cmp byte [rbp + 0x108], 0
jne 0x180032306
mov edx, 1
lea rcx, [rbp + 0xa0]
call fcn.180038f10
lea rcx, [rbp + 0xa0]
call fcn.180035970
mov rcx, qword [rax]
test rcx, rcx
je 0x180032a94
mov qword [0x1801af138], rcx
cmp byte [rbp + 0x98], 0
jne 0x18003233c
mov edx, 1
lea rcx, [rbp + 0x30]
call fcn.180038f10
lea rcx, [rbp + 0x30]
call fcn.180035970
mov rax, qword [rax]
test rax, rax
je 0x180032aa1
add rax, 1
je 0x180032aa1
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1801061f0]
movdqa xmmword [rbp - 0x30], xmm1
mov byte [rbp - 0x40], 0
movups xmmword [rbp - 0x20], xmm0
movdqa xmmword [rbp - 0x10], xmm1
mov byte [rbp - 0x20], 0
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r15
mov r8d, 0x50
lea rdx, str.48_83_EC_28_E8_________48_8B_0D_________4C_8D_0D_________4C_8D_05_________BA_03
lea rcx, [rbp - 0x40]
call fcn.180038ad0
nop
cmp byte [rbp + 0x28], 0
jne 0x1800323b4
mov edx, 1
lea rcx, [rbp - 0x40]
call fcn.180038f10
lea rcx, [rbp - 0x40]
call fcn.180035970
mov r14, qword [rax]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x180032415
mov rax, qword [rbp + 0x20]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180032404
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180032404
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r15
lea rcx, [rbp - 0x20]
call fcn.180003730
lea rcx, [rbp - 0x40]
call fcn.180003730
test r14, r14
je 0x1800324e5
mov esi, r15d
mov r8d, r15d
mov ecx, r15d
mov edi, r15d
mov rdx, r15
mov r10, r14
lea r12, [0x1800e8b20]
mov r9, qword [0x1801b1438]
lea rbx, [r10 + 1]
movzx eax, byte [rdx + r12]
cmp byte [r10], al
jne 0x1800324ce
inc ecx
cmp ecx, 3
jne 0x1800324c6
movsxd rdx, dword [rbx]
movsxd rax, r8d
sub rdx, rax
movsxd rcx, esi
add rdx, 7
add rdx, r14
add rdx, rcx
mov qword [rsp + 0x40], rdx
cmp r9, qword [0x1801b1440]
je 0x1800324a0
mov qword [r9], rdx
mov r9, qword [0x1801b1438]
add r9, 8
mov qword [0x1801b1438], r9
jmp 0x1800324bb
lea r8, [rsp + 0x40]
mov rdx, r9
lea rcx, [0x1801b1430]
call fcn.180033e10
mov r9, qword [0x1801b1438]
inc edi
mov ecx, r15d
mov r8d, r15d
mov rdx, r15
inc r8d
inc rdx
jmp 0x1800324d7
mov r8d, r15d
mov rdx, r15
mov ecx, r15d
mov r10, rbx
inc esi
cmp edi, 0x4e
jne 0x180032450
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, str.https:__whatwhatboy.github.io_WWB_DiscordRecon.html
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
call fcn.18002fed0
cmp dword [0x1801ad7b8], 0
jne 0x180032555
lea rbx, [0x180132440]
cmp qword [0x180132440], 0
je 0x18003254b
nop word [rax + rax]
lea r9, [rbx + 8]
mov r8, rbx
lea rdx, [rsp + 0x40]
call fcn.180002520
add rbx, 0x10
cmp qword [rbx], 0
jne 0x180032530
mov dword [0x1801ad7b8], 1
lea rcx, str._n_n__________________n____________________n_______________________________n________________________________n_____________________________n____________________________n____________________________n_____________________________n______________________________n______________________________n___________________________________n____________________________________n_______________________________________n______________________________________n_____________________________n______________________________n_____________________________n_____________________________n______________________________n____________________________n___________________________n___________________________n________________________n____________________n_n_n88__Yb_888888__dP__b8__dP_Yb__88b_88__n88__dP_88_____dP______dP___Yb_88Yb88__n88_Yb__88_____Yb______Yb___dP_88_Y88__n88__Yb_888888__YboodP__YbodP__88__Y8__n____________________________________________________n_n
call fcn.180036660
lea rcx, str._Recon_has_loaded_Successfully_Open_with_F5
call fcn.180036660
nop
mov rcx, qword [rbp + 0x80]
test rcx, rcx
je 0x1800325cf
mov rax, qword [rbp + 0x90]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800325b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800325b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r15
lea rcx, [rbp + 0x50]
call fcn.180003730
lea rcx, [rbp + 0x30]
call fcn.180003730
nop
mov rcx, qword [rbp + 0xf0]
test rcx, rcx
je 0x180032643
mov rax, qword [rbp + 0x100]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003262c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003262c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r15
lea rcx, [rbp + 0xc0]
call fcn.180003730
lea rcx, [rbp + 0xa0]
call fcn.180003730
nop
mov rcx, qword [rbp + 0x160]
test rcx, rcx
je 0x1800326bd
mov rax, qword [rbp + 0x170]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800326a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800326a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], r15
lea rcx, [rbp + 0x130]
call fcn.180003730
lea rcx, [rbp + 0x110]
call fcn.180003730
nop
mov rcx, qword [rbp + 0x1d0]
test rcx, rcx
je 0x180032737
mov rax, qword [rbp + 0x1e0]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180032720
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180032720
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e0], r15
lea rcx, [rbp + 0x1a0]
call fcn.180003730
lea rcx, [rbp + 0x180]
call fcn.180003730
nop
mov rcx, qword [rbp + 0x240]
test rcx, rcx
je 0x1800327b1
mov rax, qword [rbp + 0x250]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003279a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003279a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r15
lea rcx, [rbp + 0x210]
call fcn.180003730
lea rcx, [rbp + 0x1f0]
call fcn.180003730
nop
mov rcx, qword [rbp + 0x2b0]
test rcx, rcx
je 0x18003282b
mov rax, qword [rbp + 0x2c0]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180032814
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180032814
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2c0], r15
lea rcx, [rbp + 0x280]
call fcn.180003730
lea rcx, [rbp + 0x260]
call fcn.180003730
nop
mov rcx, qword [rbp + 0x320]
test rcx, rcx
je 0x1800328a5
mov rax, qword [rbp + 0x330]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003288e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003288e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x320], xmm0
mov qword [rbp + 0x330], r15
lea rcx, [rbp + 0x2f0]
call fcn.180003730
lea rcx, [rbp + 0x2d0]
call fcn.180003730
nop
mov rcx, qword [rbp + 0x390]
test rcx, rcx
je 0x18003291f
mov rax, qword [rbp + 0x3a0]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180032908
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180032908
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x390], xmm0
mov qword [rbp + 0x3a0], r15
lea rcx, [rbp + 0x360]
call fcn.180003730
lea rcx, [rbp + 0x340]
call fcn.180003730
nop
mov rcx, qword [rbp + 0x400]
test rcx, rcx
je 0x180032999
mov rax, qword [rbp + 0x410]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180032982
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180032982
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x400], xmm0
mov qword [rbp + 0x410], r15
lea rcx, [rbp + 0x3d0]
call fcn.180003730
lea rcx, [rbp + 0x3b0]
call fcn.180003730
nop
mov rcx, qword [rbp + 0x470]
test rcx, rcx
je 0x180032a0b
mov rdx, qword [rbp + 0x480]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800329f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800329f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cdf20
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x470], xmm0
mov qword [rbp + 0x480], r15
lea rcx, [rbp + 0x440]
call fcn.180003730
lea rcx, [rbp + 0x420]
call fcn.180003730
mov rcx, qword [rbp + 0x490]
xor rcx, rsp
call fcn.1800cdb80
lea r11, [rsp + 0x5a0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
lea rcx, str.gameState
call fcn.180031610
int3
lea rcx, str.Native_Registration_Table
call fcn.180031610
int3
lea rcx, str.Get_Label_Text
call fcn.180031610
int3
lea rcx, str.World_Pointer
call fcn.180031610
int3
lea rcx, str.Global_Pointer
call fcn.180031610
int3
lea rcx, str.Native_Return_Adress
call fcn.180031610
int3
lea rcx, str.Active_Script_Thread
call fcn.180031610
int3
lea rcx, str.Model_Spawn_Bypass
call fcn.180031610
int3
lea rcx, str.Get_Event_Data
call fcn.180031610
int3