Function at 0x1800bc130
Capabilities:
Create process on windows

Disassembly:
mov r11, rsp
push rdi
sub rsp, 0x2c0
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov rax, qword [0x1802a8008]
xor rax, rsp
mov qword [rsp + 0x2b0], rax
mov r9d, 8
lea r8, str.HKKOHAAALSBUDVJSOJB
mov edx, 0xff
lea rcx, [r11 - 0x218]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov byte [rsp + 0x2ae], 0
lea rcx, [rsp + 0x90]
call fcn.1800bbf10
nop
mov rcx, rax
call fcn.18003ddf0
mov r9, rax
lea rax, str.kksdfhjsksdh
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0xb0]
call fcn.18003c1f0
nop
mov rax, qword [rsp + 0xa8]
cmp rax, 0x10
jb 0x1800bc222
inc rax
mov rcx, qword [rsp + 0x90]
cmp rax, 0x1000
jb 0x1800bc21d
test cl, 0x1f
je 0x1800bc1ed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800bc1fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800bc20d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x1800bc21a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6034
mov qword [rsp + 0xa8], 0xf
xor esi, esi
mov qword [rsp + 0xa0], rsi
mov byte [rsp + 0x90], sil
lea rcx, [rsp + 0x70]
mov rbx, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x88]
cmp rdi, 8
cmovae rcx, rbx
lea r9d, [rsi + 0x2f]
lea r8, str.vbnvbnnghghfghfztztztzbcvbvbnghghfghfghnbvcbvnc
mov rdx, qword [rsp + 0x80]
call fcn.1800373c0
test eax, eax
jne 0x1800bc388
call fcn.1800bee30
call fcn.1800bec10
mov dword [0x1802da500], esi
movabs rax, 0x202709f4c58a0424
mov qword [0x18034fb80], rax
lea rax, str.STRING
mov qword [0x1802da5c8], rax
mov dword [0x1802da4f0], 1
call fcn.1800cf2b0
mov dword [0x1802da500], esi
movabs rbx, 0x6c188be134e074aa
mov qword [0x18034fb80], rbx
lea rax, str.gVersion_is_up_to_date
mov qword [0x1802da5c8], rax
mov dword [0x1802da4f0], 1
call fcn.1800cf2b0
mov dword [0x1802da500], esi
mov qword [0x18034fb80], rbx
lea rax, str.gAnti_Transaction_Protection_Active
mov qword [0x1802da5c8], rax
mov dword [0x1802da4f0], 1
call fcn.1800cf2b0
movss xmm0, dword [0x180269c70]
movss dword [rsp + 0x38], xmm0
call fcn.18003dcf0
mov dword [0x1802da500], esi
movabs rax, 0x2ed7843f8f801023
mov qword [0x18034fb80], rax
mov qword [rsp + 0x60], rsi
mov dword [rsp + 0x60], esi
mov rax, qword [rsp + 0x60]
mov qword [0x1802da5c8], rax
mov qword [rsp + 0x60], rsi
mov dword [rsp + 0x60], esi
mov rax, qword [rsp + 0x60]
mov qword [0x1802da5d0], rax
mov dword [0x1802da4f0], 2
call fcn.1800cf2b0
mov rdi, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x70]
jmp 0x1800bc3c7
lea rcx, [rsp + 0x70]
cmp rdi, 8
cmovae rcx, rbx
mov r9d, 0x2f
lea r8, str.vbnvbnnghghfghfztztztzbcvbvbnghghfghfghnbvcbvnc
call fcn.1800373c0
test eax, eax
je 0x1800bc3c7
xor edx, edx
lea rcx, str.Taskkill__F__IM_gta5.exe__F
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rcx, str.A_new_version_is_available._Please_press_in_the_launcher__DOWNLOAD_LATEST_VERSION_
call fcn.1800bc8e0
nop
cmp rdi, 8
jb 0x1800bc436
lea rax, [rdi + 1]
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
jbe 0x1800bc3e7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
add rax, rax
cmp rax, 0x1000
jb 0x1800bc42e
test bl, 0x1f
je 0x1800bc3fe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rbx - 8]
cmp rax, rbx
jb 0x1800bc40e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rbx, rax
cmp rbx, 8
jae 0x1800bc41e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rbx, 0x27
jbe 0x1800bc42b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rbx, rax
mov rcx, rbx
call fcn.1801e6034
mov rcx, qword [rsp + 0x2b0]
xor rcx, rsp
call fcn.1801e6050
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret