Function at 0x180059dac
Capabilities:
Create process on windows
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rbp
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x180188140]
xor rax, rsp
mov qword [rbp - 8], rax
and qword [rbp - 0x30], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov r8d, 0x2a
lea rdx, str.SOFTWAREBlizzard_EntertainmentBattle.net
lea rcx, [rbp - 0x28]
call fcn.18001b060
and qword [rbp - 0x30], 0
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 7
cmova rdx, qword [rbp - 0x28]
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 0x2011f
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov esi, eax
xor ebx, ebx
test eax, eax
cmove rbx, qword [rbp - 0x30]
mov qword [rbp - 0x30], rbx
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
jbe 0x180059e77
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180059e72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180059f32
call fcn.1800c0630
test esi, esi
je 0x180059edf
mov r9d, gethostbyname
lea r8, str.Error
lea rdx, str.You_need_to_have_BlackOps4_from_Battle.Net_to_use_this_product...
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov esi, 1
mov dword [rsp + 0x28], esi
and qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str.http:__battle.net_
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rdx, str.__PLATFORM__:_Couldnt_find_Battle.Net_Launcher__Shutting_down...
mov ecx, esi
call fcn.180048458
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, esi
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
test rbx, rbx
je 0x180059f16
mov eax, 0x80000000
add rax, rbx
cmp rax, 5
jbe 0x180059f16
cmp rbx, 0xffffffff80000007
je 0x180059f16
cmp rbx, 0xffffffff80000060
je 0x180059f16
cmp rbx, 0xffffffff80000050
je 0x180059f16
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1800c0610
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x60
pop rbp
ret
call fcn.1800c6ae4
nop
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x20
movabs rcx, 0x1423271d0
call fcn.180079b28
mov ecx, 0x1b0
lea rdx, [rbp + 0x18]
mov word [rbp + 0x18], cx
mov r8d, 2
mov rcx, rax
call fcn.1800821c8
movabs rcx, 0x1423271e0
call fcn.180079b28
mov edi, 4
lea rdx, [rbp + 0x18]
mov ebx, 0x90c301b0
mov r8d, edi
mov rcx, rax
mov dword [rbp + 0x18], ebx
call fcn.1800821c8
movabs rcx, 0x142325210
call fcn.180079b28
lea r8d, [rdi - 3]
mov byte [rbp + 0x18], 0xc3
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.1800821c8
movabs rcx, 0x142307b40
call fcn.180079b28
lea r8d, [rdi - 3]
mov byte [rbp + 0x18], 0xc3
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.1800821c8
movabs rcx, 0x143d08290
call fcn.180079b28
mov r8d, edi
mov dword [rbp + 0x18], ebx
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.1800821c8
movabs rcx, 0x1437da454
call fcn.180079b28
lea edx, [rdi + 9]
mov rcx, rax
call fcn.18008215c
movabs rcx, 0x1444d2d60
call fcn.180079b28
mov ebx, 0xc301b0
lea rdx, [rbp + 0x18]
mov r8d, edi
mov dword [rbp + 0x18], ebx
mov rcx, rax
call fcn.1800821c8
movabs rcx, 0x1444e34c0
call fcn.180079b28
mov r8d, edi
mov dword [rbp + 0x18], ebx
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.1800821c8
movabs rcx, 0x1438994e9
call fcn.180079b28
lea ebx, [rdi + 0x12]
mov rcx, rax
mov edx, ebx
call fcn.18008215c
movabs rcx, 0x1438c3476
call fcn.180079b28
mov edx, ebx
mov rcx, rax
call fcn.18008215c
movabs rcx, 0x142325c70
call fcn.180079b28
xor r9d, r9d
lea rdx, [fcn.180059c0c]
xor r8d, r8d
mov rcx, rax
call fcn.180082308
movabs rcx, 0x142325ca0
call fcn.180079b28
xor r9d, r9d
lea rdx, [fcn.180059b68]
xor r8d, r8d
mov rcx, rax
call fcn.180082308
call fcn.180059b68
mov rbx, rax
call fcn.180059c0c
mov r9, rbx
lea rdx, str.__PLATFORM__:_BattleTag:__s__BattleID:__llu
mov r8, rax
lea ecx, [rdi - 3]
mov rbx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x40]
add rsp, 0x20
pop rbp
jmp fcn.180048458