Function at 0x180072280
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x4a8
lea rbp, [rsp + 0x50]
lea rdi, [rsp + 0x50]
mov ecx, 0xb6
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x4c8]
mov rax, qword [0x1800ea138]
xor rax, rbp
mov qword [rbp + 0x448], rax
lea rcx, [0x1800fd3aa]
call fcn.180037c84
lea rcx, [rbp + 8]
call fcn.180037c66
nop
lea rdx, [rbp + 8]
mov rcx, qword [rbp + 0x470]
call fcn.180036424
lea rcx, [rbp + 0x48]
call fcn.180037c66
nop
lea rdx, [rbp + 0x48]
mov rcx, qword [rbp + 0x470]
call fcn.180036424
mov rax, qword [rbp + 0x470]
movzx eax, byte [rax + 0x18]
test eax, eax
je 0x180072324
lea rcx, [rbp + 0x48]
call fcn.180036523
nop
lea rcx, [rbp + 8]
call fcn.180036523
jmp 0x1800725b4
movzx eax, byte [0x1800ebbb8]
test eax, eax
je 0x180072354
lea rcx, str._AssetValidator__Ignoring_query_due_to_pending_check._n
call fcn.180036de3
nop
lea rcx, [rbp + 0x48]
call fcn.180036523
nop
lea rcx, [rbp + 8]
call fcn.180036523
jmp 0x1800725b4
lea rcx, [0x1800ebc60]
call fcn.180037833
cmp rax, 1
jbe 0x18007238b
lea rcx, str._AssetValidator__Ignoring_query_due_to_cached_assets._n
call fcn.180036de3
nop
lea rcx, [rbp + 0x48]
call fcn.180036523
nop
lea rcx, [rbp + 8]
call fcn.180036523
jmp 0x1800725b4
lea rcx, str._n_n_n___________hades_query_n_n
call fcn.180036de3
lea rdx, str..H1Z1_BE.exe
lea rcx, [rbp + 0x88]
call fcn.180036d5c
nop
lea r8, str.__assetcheck
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x368]
call fcn.180037671
mov qword [rbp + 0x418], rax
mov rax, qword [rbp + 0x418]
mov qword [rbp + 0x420], rax
lea r8, [rbp + 8]
mov rdx, qword [rbp + 0x420]
lea rcx, [rbp + 0x3a8]
call fcn.1800369fb
mov qword [rbp + 0x428], rax
mov rax, qword [rbp + 0x428]
mov qword [rbp + 0x430], rax
lea r8, [0x1800b6008]
mov rdx, qword [rbp + 0x430]
lea rcx, [rbp + 0x3e8]
call fcn.1800379fa
mov qword [rbp + 0x438], rax
mov rax, qword [rbp + 0x438]
mov qword [rbp + 0x440], rax
lea r8, [rbp + 0x48]
mov rdx, qword [rbp + 0x440]
lea rcx, [rbp + 0xc8]
call fcn.1800369fb
nop
lea rcx, [rbp + 0x3e8]
call fcn.180036523
nop
lea rcx, [rbp + 0x3a8]
call fcn.180036523
nop
lea rcx, [rbp + 0x368]
call fcn.180036523
mov r8d, 0x68
xor edx, edx
lea rcx, [rbp + 0x110]
call fcn.18003758b
mov dword [rbp + 0x110], 0x68
mov dword [rbp + 0x1c4], 0x8000000
lea rcx, [rbp + 0xc8]
call fcn.180036299
mov qword [rbp + 0x418], rax
lea rcx, [rbp + 0x88]
call fcn.180036299
lea rcx, [rbp + 0x198]
mov qword [rsp + 0x48], rcx
lea rcx, [rbp + 0x110]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov ecx, dword [rbp + 0x1c4]
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [rbp + 0x418]
mov rdx, rcx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x180072566
lea rdx, str.Failed_to_start_H1Z1_BE.exe
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.180036302
lea rdx, [0x180036127]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0xc8]
call fcn.180036523
nop
lea rcx, [rbp + 0x88]
call fcn.180036523
nop
lea rcx, [rbp + 0x48]
call fcn.180036523
nop
lea rcx, [rbp + 8]
call fcn.180036523
jmp 0x1800725b4
mov rcx, qword [rbp + 0x198]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [0x1800ebbb8], 1
lea rcx, [rbp + 0xc8]
call fcn.180036523
nop
lea rcx, [rbp + 0x88]
call fcn.180036523
nop
lea rcx, [rbp + 0x48]
call fcn.180036523
nop
lea rcx, [rbp + 8]
call fcn.180036523
lea rcx, [rbp - 0x50]
lea rdx, [0x1800b5d60]
call fcn.1800377a7
mov rcx, qword [rbp + 0x448]
xor rcx, rbp
call fcn.180036e4c
lea rsp, [rbp + 0x458]
pop rdi
pop rbp
ret