Function at 0x180001d90
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x50
mov rax, qword [0x180024598]
xor rax, rsp
mov qword [rsp + 0x48], rax
call fcn.180002e94
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rsp + 0x30]
mov rcx, rax
mov rdx, rdi
mov r9d, 0x18
call sub.KERNEL32.dll_K32GetModuleInformation
mov edi, 0xfffff000
add edi, dword [rsp + 0x38]
lea r8, str.488BC448895808488968184889702057415641574883EC604883FAFF488BFA
mov rcx, rsi
mov rdx, rdi
call fcn.180002710
test rax, rax
je 0x180001e1b
mov qword [0x1800252f8], rax
jmp 0x180001e34
lea rdx, str.StaticFindObject_Error
lea r8, str.INIT_ERROR
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
lea r8, str.488B05________488B88A00900004885C9
mov rcx, rsi
mov rdx, rdi
call fcn.180002710
test rax, rax
je 0x180001e65
mov qword [0x180025318], rax
mov ecx, dword [rax + 3]
add rax, rcx
add rax, 7
mov qword [0x180025310], rax
jmp 0x180001e7e
lea rdx, str.GameEngine_Error
lea r8, [0x18001e2cf]
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
lea r8, str.48895C2408574883EC30488BD9488954242033C9418BF84C8BD2448BC94885D2
mov rcx, rsi
mov rdx, rdi
call fcn.180002710
test rax, rax
je 0x180001e9e
mov qword [0x180025308], rax
jmp 0x180001eb7
lea rdx, str.FName_FName_Error
lea r8, [0x18001e2cf]
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
lea r8, str.48895C241048897424185557415441564157488DAC2480FEFFFF4881EC80020000488B05________4833C448898570010000488B31488BD9
mov rcx, rsi
mov rdx, rdi
call fcn.180002710
test rax, rax
je 0x180001ed7
mov qword [0x180025300], rax
jmp 0x180001ef0
lea rdx, str.StaticConstructObject_Internal_Error
lea r8, [0x18001e2cf]
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
lea r8, str.750D4438BD800200000F84B2080000
mov rcx, rsi
mov rdx, rdi
call fcn.180002710
mov rbx, rax
test rax, rax
je 0x180001f28
lea r9, [rsp + 0x2c]
mov edx, 1
mov rcx, rbx
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [rbx], 0xeb
jmp 0x180001f41
lea rdx, str.Exec_Patch_Error
lea r8, [0x18001e2cf]
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
lea r8, str.48895C2410574883EC20488B01488BDA488BF9FF90F807000048C7873803000000000000
mov rcx, rsi
mov rdx, rdi
call fcn.180002710
test rax, rax
je 0x180001f7b
mov r14, rax
lea rdx, [0x180001c50]
lea r8, [0x1800252f0]
mov rcx, rax
call fcn.180002feb
mov rcx, r14
call fcn.18000373a
jmp 0x180001f94
lea rdx, str.pClientRestart_Patch_Error
lea r8, [0x18001e2cf]
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
lea r8, str.4055565741544155415641574881EC10010000488D6C243048899D38010000
mov rcx, rsi
mov rdx, rdi
call fcn.180002710
test rax, rax
je 0x180001fe7
mov qword [0x180025338], rax
lea r8, str.4889742410574881ECB000000080B98800000000488BF2488BF9
mov rcx, rsi
mov rdx, rdi
call fcn.180002710
mov r14, rax
lea rdx, [0x180001740]
lea r8, [0x180025328]
mov rcx, rax
call fcn.180002feb
mov rcx, r14
call fcn.18000373a
jmp 0x18000202b
lea rdx, str.pProcessEvent_Patch_Error
lea r14, [0x18001e2cf]
mov r15, qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
mov r8, r14
xor r9d, r9d
call r15
lea r8, str.4889742410574881ECB000000080B98800000000488BF2488BF9
mov rcx, rsi
mov rdx, rdi
call fcn.180002710
lea rdx, str.pViewportClientPostRender_Not_Found_Error
xor ecx, ecx
mov r8, r14
xor r9d, r9d
call r15
lea r8, str.4883EC48488D44245848895424584889442438488D542430488D05
mov rcx, rsi
mov rdx, rdi
call fcn.180002710
test rax, rax
je 0x18000204b
mov qword [0x180025348], rax
jmp 0x180002064
lea rdx, str.pGetObjectsOfClass_Not_Found_Error
lea r8, [0x18001e2cf]
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
lea r8, str.40555356574156488DAC24F0FDFFFF4881EC10030000488B05________4833C448898500020000450FB6F1498BD8488BF2
mov rcx, rsi
mov rdx, rdi
call fcn.180002710
test rax, rax
je 0x180002084
mov qword [0x180025350], rax
jmp 0x18000209d
lea rdx, str.pworld2screen_Not_Found_Error
lea r8, [0x18001e2cf]
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
lea r8, str.40555356574154415541564157488DAC24A8FEFFFF4881EC58020000488B05________4833C448898548010000488B85C8010000
mov rcx, rsi
mov rdx, rdi
call fcn.180002710
test rax, rax
je 0x1800020bd
mov qword [0x180025358], rax
jmp 0x1800020d6
lea rdx, str.pStaticLoadClass_Not_Found_Error
lea r8, [0x18001e2cf]
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
lea r8, str.48895C241855565741564157488D6C24904881EC70010000488B05________4833C44889456033DB488BF24C8BF148895C2430BFFFFFFFFF48895C2438
mov rcx, rsi
mov rdx, rdi
call fcn.180002710
test rax, rax
je 0x180002110
mov r14, rax
lea rdx, [0x180001220]
lea r8, [0x180025360]
mov rcx, rax
call fcn.180002feb
mov rcx, r14
call fcn.18000373a
jmp 0x180002129
lea rdx, str.pSummon_Not_Found_Error
lea r8, [0x18001e2cf]
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
lea r8, str.48895C241848896C2420565741564881ECE0000000488B05________4833C448898424D00000008B41084533F6C1E804488BEAC6417000
mov rcx, rsi
mov rdx, rdi
call fcn.180002710
test rax, rax
je 0x180002163
mov r14, rax
lea rdx, [0x180001d60]
lea r8, [0x180025370]
mov rcx, rax
call fcn.180002feb
mov rcx, r14
call fcn.18000373a
jmp 0x18000217c
lea rdx, str.AOB_SetupInitialLocalPlayer_Not_Found_Error
lea r8, [0x18001e2cf]
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
lea r8, str.0F84B3030000488B86D8000000
mov rcx, rsi
mov rdx, rdi
call fcn.180002710
test rbx, rbx
je 0x1800021bd
mov rsi, rax
lea r9, [rsp + 0x2c]
mov edx, 6
mov rcx, rax
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [rsi], 0x90909090
mov word [rsi + 4], 0x9090
jmp 0x1800021d6
lea rdx, str.AOB_CVarConsoleViewEnabled_Patch_Error
lea r8, [0x18001e2cf]
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.180004730
nop
add rsp, 0x50
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret