Function at 0x18002b3c0
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1d8]
sub rsp, 0x2b0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x18032f0e0]
xor rax, rsp
mov qword [rbp + 0x190], rax
xor r12d, r12d
mov dword [rsp + 0x50], r12d
lea rax, [0x180274858]
mov qword [rsp + 0x60], rax
mov r13d, 1
mov dword [rsp + 0x50], r13d
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x10], rax
mov dword [rbp + 0xc], 0x98
mov qword [rsp + 0x68], r12
xor r8d, r8d
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x10]
call fcn.180036700
nop
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x60], rax
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x5c], edx
lea rcx, [rsp + 0x70]
call fcn.180035660
nop
lea r9d, [r12 + 0x40]
mov r8d, r13d
lea rdx, [0x1802736f8]
lea rcx, [rsp + 0x70]
call fcn.180035540
test rax, rax
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rcx, [rsp + rcx + 0x60]
je 0x18002a8a1
mov edx, 4
cmp qword [rcx + 0x48], r12
cmovne edx, r12d
jmp 0x18002a8b6
mov edx, 6
mov eax, 2
cmp qword [rcx + 0x48], 0
cmovne edx, eax
or edx, dword [rcx + 0x10]
xor r8d, r8d
call fcn.1800408d0
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
test byte [rsp + rcx + 0x70], 6
je 0x18002a8d3
call fcn.1800e6100
lea rsi, [0x18034f1f8]
mov r9, rsi
cmp qword [0x18034f210], 0x10
cmovae r9, qword [0x18034f1f8]
lea r8, str.user
lea rdx, str.hax_values
call fcn.180036a20
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18002a910
mov rdx, rax
mov rcx, rsi
call fcn.1800294e0
lea r14, [0x18034f218]
mov r9, r14
cmp qword [0x18034f230], 0x10
cmovae r9, qword [0x18034f218]
lea r8, str.pass
lea rdx, str.hax_values
call fcn.180036a20
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18002a960
mov rdx, rax
mov rcx, r14
call fcn.1800294e0
call fcn.18002b4e0
call qword [sym.imp.WINMM.dll_timeGetTime]
add eax, 0x1f4
mov dword [0x1803855fc], eax
mov rcx, qword [0x180385680]
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
movabs r10, 0x67c540aa08e4a6f5
cmp byte [0x18037f911], 0
jne 0x18002acdc
mov dword [0x18035eaf0], r12d
mov qword [0x1803afcd8], r10
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], 0xffffffff
mov rax, qword [rsp + 0x50]
mov qword [0x18035ebb8], rax
lea r15, str.Hack_Failed
mov qword [0x18035ebc0], r15
lea rax, str.DLC_HEIST_BIOLAB_PREP_HACKING_SOUNDS
mov qword [0x18035ebc8], rax
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], r13d
mov rax, qword [rsp + 0x50]
mov qword [0x18035ebd0], rax
mov dword [0x18035eae0], 4
call fcn.180110360
lea rcx, str.Please_Enter_Your_Username
call fcn.1800296c0
lea rdx, str.Enter_your_Username
call fcn.180045ec0
mov dword [0x18035eae0], r12d
mov dword [0x18035eaf0], r12d
movabs rbx, 0xcf2b696bbf945ae
mov qword [0x1803afcd8], rbx
call fcn.180110360
cmp dword [rax], 0
jne 0x18002aa90
call qword [sym.imp.WINMM.dll_timeGetTime]
mov dword [0x1803855fc], eax
mov rcx, qword [0x180385680]
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov dword [0x18035eae0], r12d
mov dword [0x18035eaf0], r12d
mov qword [0x1803afcd8], rbx
call fcn.180110360
cmp dword [rax], 0
je 0x18002aa58
mov dword [0x18035eae0], r12d
mov dword [0x18035eaf0], r12d
movabs rdi, 0x8362b09b91893647
mov qword [0x1803afcd8], rdi
call fcn.180110360
cmp qword [rax], 0
jne 0x18002ab2b
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x60], rax
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x5c], edx
lea rcx, [rsp + 0x70]
call fcn.180033450
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x60], rax
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rsp + rcx + 0x5c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x10], rax
lea rcx, [rbp + 0x10]
call fcn.1801faae8
nop
jmp 0x18002b24b
mov dword [0x18035eae0], r12d
mov dword [0x18035eaf0], r12d
mov qword [0x1803afcd8], rdi
call fcn.180110360
mov rdx, qword [rax]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x18002ab50
mov rcx, rsi
call fcn.1800294e0
lea rcx, str.Please_Enter_Your_Password
call fcn.1800296c0
lea rdx, str.Enter_your_Password
call fcn.180045ec0
mov dword [0x18035eae0], r12d
mov dword [0x18035eaf0], r12d
mov qword [0x1803afcd8], rbx
call fcn.180110360
cmp dword [rax], 0
jne 0x18002abd8
nop dword [rax]
call qword [sym.imp.WINMM.dll_timeGetTime]
mov dword [0x1803855fc], eax
mov rcx, qword [0x180385680]
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov dword [0x18035eae0], r12d
mov dword [0x18035eaf0], r12d
mov qword [0x1803afcd8], rbx
call fcn.180110360
cmp dword [rax], 0
je 0x18002aba0
mov dword [0x18035eae0], r12d
mov dword [0x18035eaf0], r12d
mov qword [0x1803afcd8], rdi
call fcn.180110360
cmp qword [rax], 0
jne 0x18002ac69
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x60], rax
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x5c], edx
lea rcx, [rsp + 0x70]
call fcn.180033450
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x60], rax
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rsp + rcx + 0x5c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x10], rax
lea rcx, [rbp + 0x10]
call fcn.1801faae8
nop
jmp 0x18002b24b
mov dword [0x18035eae0], r12d
mov dword [0x18035eaf0], r12d
mov qword [0x1803afcd8], rdi
call fcn.180110360
mov rdx, qword [rax]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x18002ac90
mov rcx, r14
call fcn.1800294e0
call fcn.18002b4e0
call qword [sym.imp.WINMM.dll_timeGetTime]
add eax, 0x1f4
mov dword [0x1803855fc], eax
mov rcx, qword [0x180385680]
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
cmp byte [0x18037f911], 0
je 0x18002b280
movabs r10, 0x67c540aa08e4a6f5
lea r9, [0x180351170]
mov rcx, qword [0x180351180]
test rcx, rcx
jne 0x18002ad30
mov qword [0x1803afcd8], r10
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], 0xffffffff
mov rax, qword [rsp + 0x50]
mov qword [0x18035ebb8], rax
lea rax, str.RANK_UP
mov qword [0x18035ebc0], rax
lea rax, str.HUD_AWARDS
mov qword [0x18035ebc8], rax
jmp 0x18002ae45
mov rdx, r9
lea rcx, [rbp + 0x170]
call fcn.180045d70
mov rcx, rax
call fcn.1800f6cf0
mov rcx, qword [0x180351480]
inc rcx
call fcn.1801fd5b0
mov r15, rax
lea rdx, [0x180351470]
cmp qword [0x180351488], 0x10
cmovae rdx, qword [0x180351470]
mov r8, rax
sub r8, rdx
nop word [rax + rax]
movzx ecx, byte [rdx]
mov byte [r8 + rdx], cl
lea rdx, [rdx + 1]
test cl, cl
jne 0x18002ad80
mov rcx, qword [0x1803514a0]
inc rcx
call fcn.1801fd5b0
mov rdi, rax
lea rdx, [0x180351490]
cmp qword [0x1803514a8], 0x10
cmovae rdx, qword [0x180351490]
mov r8, rax
sub r8, rdx
nop
movzx ecx, byte [rdx]
mov byte [r8 + rdx], cl
lea rdx, [rdx + 1]
test cl, cl
jne 0x18002adc0
call fcn.1801fa638
mov rbx, rax
call fcn.1801fa61c
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rcx, 0xf4240
add rax, rcx
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x50]
call fcn.18003b8f0
movabs rax, 0x67c540aa08e4a6f5
mov qword [0x1803afcd8], rax
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], 0xffffffff
mov rax, qword [rsp + 0x50]
mov qword [0x18035ebb8], rax
mov qword [0x18035ebc0], r15
mov qword [0x18035ebc8], rdi
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], r13d
mov rax, qword [rsp + 0x50]
mov dword [0x18035eaf0], r12d
mov qword [0x18035ebd0], rax
mov dword [0x18035eae0], 4
call fcn.180110360
lea rdi, [0x180351190]
mov r8, qword [0x1803511a0]
movabs rbx, 0x202709f4c58a0424
movabs r15, 0x2513dfb0fb8400fe
movss xmm6, dword [0x1802fb5dc]
test r8, r8
jne 0x18002b07b
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], 0xf
mov byte [rbp + 0x170], r8b
mov edx, r13d
lea rcx, [rbp + 0x70]
call fcn.180032340
nop
lea rbx, str.CHAR_STRIPPER_CHEETAH
mov rdx, rbx
lea rcx, [rbp + 0x80]
call fcn.180037e00
mov rdx, rdi
lea rcx, [rbp + 0x70]
call fcn.18003b5e0
mov dword [0x18035eae0], r12d
mov dword [0x18035eaf0], r12d
mov qword [0x1803afcd8], r15
call fcn.180110360
mov dword [0x18035eaf0], r12d
movabs rax, 0x202709f4c58a0424
mov qword [0x1803afcd8], rax
lea rax, str.STRING
mov qword [0x18035ebb8], rax
mov dword [0x18035eae0], r13d
call fcn.180110360
mov dword [0x18035eaf0], r12d
movabs rax, 0x6c188be134e074aa
mov qword [0x1803afcd8], rax
lea rax, str.wThunder_Menu_n__rUltimate_Version:_2.2_r_n
mov qword [0x18035ebb8], rax
mov dword [0x18035eae0], r13d
call fcn.180110360
mov dword [0x18035eaf0], r12d
movabs rax, 0x531b84e7da981fb6
mov qword [0x1803afcd8], rax
mov qword [0x18035ebb8], rbx
mov qword [0x18035ebc0], rbx
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], r13d
mov rax, qword [rsp + 0x50]
mov qword [0x18035ebc8], rax
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], 8
mov rax, qword [rsp + 0x50]
mov qword [0x18035ebd0], rax
lea rax, [0x180273910]
mov qword [0x18035ebd8], rax
lea rax, str.rUltimate_Version:_2.2_r_n
mov qword [0x18035ebe0], rax
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], 0x3f800000
mov rax, qword [rsp + 0x50]
mov qword [0x18035ebe8], rax
lea rax, str.wThunder_Menu_n_rUltimate_Version:_2.2_r_n
mov qword [0x18035ebf0], rax
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], 9
mov rax, qword [rsp + 0x50]
mov qword [0x18035ebf8], rax
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x50], r13d
mov rax, qword [rsp + 0x50]
mov qword [0x18035ec00], rax
mov dword [0x18035eae0], 0xa
call fcn.180110360
xor edx, edx
xor ecx, ecx
call qword [0x1803856f8]
nop
lea rcx, [rbp + 0x70]
call fcn.18002b2c0
nop
lea rcx, [rbp + 0x170]
call fcn.1800292b0
mov r8, qword [0x1803511a0]
movabs rbx, 0x202709f4c58a0424
test r8, r8
je 0x18002b17c
mov dword [0x18035eae0], r12d
mov dword [0x18035eaf0], r12d
mov qword [0x1803afcd8], r15
call fcn.180110360
mov dword [0x18035eaf0], r12d
mov qword [0x1803afcd8], rbx
lea rax, str.STRING
mov qword [0x18035ebb8], rax
mov dword [0x18035eae0], r13d
call fcn.180110360
mov dword [0x18035eaf0], r12d
movabs rax, 0x6c188be134e074aa
mov qword [0x1803afcd8], rax
lea rax, str.wThunder_Menu_VIP_n__rUltimate_Version:_2.2_Fair_Use_r_n
mov qword [0x18035ebb8], rax
mov dword [0x18035eae0], r13d
call fcn.180110360
cmp qword [0x1803511a8], 0x10
cmovae rdi, qword [0x180351190]
call fcn.1801fa638
mov rbx, rax
call fcn.1801fa61c
cqo
idiv rbx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add r8, 0xf4240
add rax, r8
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x50]
call fcn.18003b8f0
lea rax, str.wThunder_Menu_VIP_n_rUltimate_Version:_2.2_Fair_Use_r_n
mov qword [rsp + 0x38], rax
movss dword [rsp + 0x30], xmm6
lea rax, str.rUltimate_Version:_2.2_Fair_Use_r_n
mov qword [rsp + 0x28], rax
lea rax, str.wThunder_Menu_VIP_n
mov qword [rsp + 0x20], rax
mov rdx, rdi
mov rcx, rdi
call fcn.180045c80
xor edx, edx
xor ecx, ecx
call qword [0x1803856f8]
cmp qword [0x18034f210], 0x10
setae r8b
mov rdx, qword [0x18034f1f8]
cmp qword [0x18034f208], 0
jne 0x18002b1a0
call fcn.180029c90
jmp 0x18002b1df
test r8b, r8b
cmovne rsi, rdx
cmp qword [0x18034f230], 0x10
cmovae r14, qword [0x18034f218]
mov rcx, rsi
call fcn.1800296c0
mov rcx, r14
call fcn.1800296c0
movzx eax, byte [0x180384d25]
cmp byte [0x18037f911], 1
cmove eax, r13d
mov byte [0x180384d25], al
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x60], rax
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x5c], edx
lea rcx, [rsp + 0x70]
call fcn.180033450
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x60], rax
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rsp + rcx + 0x5c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x10], rax
lea rcx, [rbp + 0x10]
call fcn.1801faae8
nop
mov rcx, qword [rbp + 0x190]
xor rcx, rsp
call fcn.1801fcf00
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r9d, r13d
lea r8, str.DLC_HEIST_BIOLAB_PREP_HACKING_SOUNDS
mov rdx, r15
call fcn.180045e50
mov ecx, 0x7d0
call fcn.1800f5d20
xor edx, edx
lea rcx, str.Taskkill__F__IM_gta5.exe__F
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rcx, str.User_Error_404:_Not_Found
call fcn.1801095a0
int3
push rbx
sub rsp, 0x20
lea rcx, str.rThunder_Ultimate_function_loaded
call fcn.1800296c0
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x180385680]
add eax, 0x1f4
mov dword [0x1803855fc], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
call fcn.1801fa638
mov rbx, rax
call fcn.1801fa61c
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rcx, 0xf4240
add rax, rcx
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], rax
call fcn.18003b8f0
cmp qword [0x18034f208], 0
lea rcx, [0x18034f1f8]
mov rdx, qword [0x18034f210]
mov r8, qword [0x18034f1f8]
jne 0x18002b45a
add rsp, 0x20
pop rbx
jmp fcn.180029c90
cmp rdx, 0x10
lea rbx, [0x18034f218]
cmovae rcx, r8
cmp qword [0x18034f230], 0x10
cmovae rbx, qword [0x18034f218]
call fcn.1800296c0
mov rcx, rbx
call fcn.1800296c0
call fcn.1801fa638
mov rbx, rax
call fcn.1801fa61c
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rcx, 0xf4240
add rax, rcx
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], rax
call fcn.18003b8f0
add rsp, 0x20
pop rbx
jmp 0x18002a7b0