Function at 0x18005b33c
Capabilities:
Create process on windows
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rbp
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x180194100]
xor rax, rsp
mov qword [rbp - 8], rax
and qword [rbp - 0x30], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov r8d, 0x2a
lea rdx, str.SOFTWAREBlizzard_EntertainmentBattle.net
lea rcx, [rbp - 0x28]
call fcn.180013c94
and qword [rbp - 0x30], 0
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 7
cmova rdx, qword [rbp - 0x28]
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 0x2011f
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov esi, eax
xor ebx, ebx
test eax, eax
cmove rbx, qword [rbp - 0x30]
mov qword [rbp - 0x30], rbx
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
jbe 0x18005b407
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005b402
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b4c2
call fcn.1800c9780
test esi, esi
je 0x18005b46f
mov r9d, gethostbyname
lea r8, str.Error
lea rdx, str.You_need_to_have_BlackOps4_from_Battle.Net_to_use_this_product...
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov esi, 1
mov dword [rsp + 0x28], esi
and qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str.http:__battle.net_
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rdx, str.__PLATFORM__:_Couldnt_find_Battle.Net_Launcher__Shutting_down...
mov ecx, esi
call fcn.180049dc8
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, esi
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
test rbx, rbx
je 0x18005b4a6
mov eax, 0x80000000
add rax, rbx
cmp rax, 5
jbe 0x18005b4a6
cmp rbx, 0xffffffff80000007
je 0x18005b4a6
cmp rbx, 0xffffffff80000060
je 0x18005b4a6
cmp rbx, 0xffffffff80000050
je 0x18005b4a6
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1800c9760
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x60
pop rbp
ret
call fcn.1800d0afc
nop
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x20
movabs rcx, 0x1423271d0
call fcn.18007f7c8
mov ecx, 0x1b0
lea rdx, [rbp + 0x18]
mov word [rbp + 0x18], cx
mov r8d, 2
mov rcx, rax
call fcn.180087e70
movabs rcx, 0x1423271e0
call fcn.18007f7c8
mov edi, 4
lea rdx, [rbp + 0x18]
mov ebx, 0x90c301b0
mov r8d, edi
mov rcx, rax
mov dword [rbp + 0x18], ebx
call fcn.180087e70
movabs rcx, 0x142325210
call fcn.18007f7c8
lea r8d, [rdi - 3]
mov byte [rbp + 0x18], 0xc3
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.180087e70
movabs rcx, 0x142307b40
call fcn.18007f7c8
lea r8d, [rdi - 3]
mov byte [rbp + 0x18], 0xc3
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.180087e70
movabs rcx, 0x143d08290
call fcn.18007f7c8
mov r8d, edi
mov dword [rbp + 0x18], ebx
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.180087e70
movabs rcx, 0x1437da454
call fcn.18007f7c8
lea edx, [rdi + 9]
mov rcx, rax
call fcn.180087e04
movabs rcx, 0x1444d2d60
call fcn.18007f7c8
mov ebx, 0xc301b0
lea rdx, [rbp + 0x18]
mov r8d, edi
mov dword [rbp + 0x18], ebx
mov rcx, rax
call fcn.180087e70
movabs rcx, 0x1444e34c0
call fcn.18007f7c8
mov r8d, edi
mov dword [rbp + 0x18], ebx
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.180087e70
movabs rcx, 0x1438994e9
call fcn.18007f7c8
lea ebx, [rdi + 0x12]
mov rcx, rax
mov edx, ebx
call fcn.180087e04
movabs rcx, 0x1438c3476
call fcn.18007f7c8
mov edx, ebx
mov rcx, rax
call fcn.180087e04
movabs rcx, 0x142325c70
call fcn.18007f7c8
xor r9d, r9d
lea rdx, [fcn.18005b158]
xor r8d, r8d
mov rcx, rax
call fcn.180088088
movabs rcx, 0x142325ca0
call fcn.18007f7c8
xor r9d, r9d
lea rdx, [fcn.18005b0ac]
xor r8d, r8d
mov rcx, rax
call fcn.180088088
call fcn.18005b0ac
mov rbx, rax
call fcn.18005b158
mov r9, rbx
lea rdx, str.__PLATFORM__:_BattleTag:__s__BattleID:__llu
mov r8, rax
lea ecx, [rdi - 3]
mov rbx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x40]
add rsp, 0x20
pop rbp
jmp fcn.180049dc8