Function at 0x180056530
Capabilities:
Create process on windows
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rbp
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x180182100]
xor rax, rsp
mov qword [rbp - 8], rax
and qword [rbp - 0x30], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov r8d, 0x2a
lea rdx, str.SOFTWAREBlizzard_EntertainmentBattle.net
lea rcx, [rbp - 0x28]
call fcn.18001a798
and qword [rbp - 0x30], 0
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 7
cmova rdx, qword [rbp - 0x28]
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 0x2011f
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov esi, eax
xor ebx, ebx
test eax, eax
cmove rbx, qword [rbp - 0x30]
mov qword [rbp - 0x30], rbx
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
jbe 0x1800565fb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800565f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800566b6
call fcn.1800bcfa0
test esi, esi
je 0x180056663
mov r9d, gethostbyname
lea r8, str.Error
lea rdx, str.You_need_to_have_BlackOps4_from_Battle.Net_to_use_this_product...
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov esi, 1
mov dword [rsp + 0x28], esi
and qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str.http:__battle.net_
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rdx, str.__PLATFORM__:_Couldnt_find_Battle.Net_Launcher__Shutting_down...
mov ecx, esi
call fcn.1800451e4
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, esi
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
test rbx, rbx
je 0x18005669a
mov eax, 0x80000000
add rax, rbx
cmp rax, 5
jbe 0x18005669a
cmp rbx, 0xffffffff80000007
je 0x18005669a
cmp rbx, 0xffffffff80000060
je 0x18005669a
cmp rbx, 0xffffffff80000050
je 0x18005669a
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1800bcf80
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x60
pop rbp
ret
call fcn.1800c431c
nop
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x20
movabs rcx, 0x1423271d0
call fcn.180076bac
mov ecx, 0x1b0
lea rdx, [rbp + 0x18]
mov word [rbp + 0x18], cx
mov r8d, 2
mov rcx, rax
call fcn.18007eb30
movabs rcx, 0x1423271e0
call fcn.180076bac
mov edi, 4
lea rdx, [rbp + 0x18]
mov ebx, 0x90c301b0
mov r8d, edi
mov rcx, rax
mov dword [rbp + 0x18], ebx
call fcn.18007eb30
movabs rcx, 0x142325210
call fcn.180076bac
lea r8d, [rdi - 3]
mov byte [rbp + 0x18], 0xc3
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.18007eb30
movabs rcx, 0x142307b40
call fcn.180076bac
lea r8d, [rdi - 3]
mov byte [rbp + 0x18], 0xc3
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.18007eb30
movabs rcx, 0x143d08290
call fcn.180076bac
mov r8d, edi
mov dword [rbp + 0x18], ebx
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.18007eb30
movabs rcx, 0x1437da454
call fcn.180076bac
lea edx, [rdi + 9]
mov rcx, rax
call fcn.18007eac4
movabs rcx, 0x1444d2d60
call fcn.180076bac
mov ebx, 0xc301b0
lea rdx, [rbp + 0x18]
mov r8d, edi
mov dword [rbp + 0x18], ebx
mov rcx, rax
call fcn.18007eb30
movabs rcx, 0x1444e34c0
call fcn.180076bac
mov r8d, edi
mov dword [rbp + 0x18], ebx
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.18007eb30
movabs rcx, 0x1438994e9
call fcn.180076bac
lea ebx, [rdi + 0x12]
mov rcx, rax
mov edx, ebx
call fcn.18007eac4
movabs rcx, 0x1438c3476
call fcn.180076bac
mov edx, ebx
mov rcx, rax
call fcn.18007eac4
movabs rcx, 0x142325c70
call fcn.180076bac
xor r9d, r9d
lea rdx, [fcn.180056390]
xor r8d, r8d
mov rcx, rax
call fcn.18007ec70
movabs rcx, 0x142325ca0
call fcn.180076bac
xor r9d, r9d
lea rdx, [fcn.1800562ec]
xor r8d, r8d
mov rcx, rax
call fcn.18007ec70
call fcn.1800562ec
mov rbx, rax
call fcn.180056390
mov r9, rbx
lea rdx, str.__PLATFORM__:_BattleTag:__s__BattleID:__llu
mov r8, rax
lea ecx, [rdi - 3]
mov rbx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x40]
add rsp, 0x20
pop rbp
jmp fcn.1800451e4