Function at 0x1800bc740
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x290
mov rax, qword [0x1802943b0]
xor rax, rsp
mov qword [rsp + 0x280], rax
mov r9d, 8
lea r8, str.HKKOHAAALSBUDVJSOJB
mov edx, 0xff
lea rcx, [rsp + 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov byte [rsp + 0x27e], 0
lea rcx, [rsp + 0x58]
call fcn.1800bc500
nop
mov rcx, rax
call fcn.18003c570
mov r9, rax
lea rax, str.kksdfhjsksdh
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x80]
call fcn.18003b1e0
nop
lea rcx, [rsp + 0x58]
call fcn.18003bcb0
lea r10, [rsp + 0x38]
mov r11, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x50]
cmp rbx, 8
cmovae r10, r11
mov r8d, 0x2f
lea rcx, str.vbnvbnnghghfghfztztztzbcvbvbnghghfghfghnbvcbvnc
mov rdi, qword [rsp + 0x48]
cmp rdi, r8
jne 0x1800bc9d2
mov r9d, r8d
mov rdx, rcx
sub r10, rcx
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rdx]
cmp word [r10 + rdx], ax
jne 0x1800bc9d2
add rdx, 2
sub r9, 1
jne 0x1800bc810
call fcn.1800be4a0
call fcn.1800be350
xor edi, edi
mov dword [0x1802bdc58], edi
movabs rax, 0x202709f4c58a0424
mov qword [0x18033c890], rax
lea rax, str.STRING
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
mov dword [0x1802bdc58], edi
movabs rbx, 0x6c188be134e074aa
mov qword [0x18033c890], rbx
lea rax, str.gVersion_is_up_to_date
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
mov dword [0x1802bdc58], edi
mov qword [0x18033c890], rbx
lea rax, str.gAnti_Transaction_Protection_Active
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
mov dword [0x1802bdc58], edi
movabs rax, 0x531b84e7da981fb6
mov qword [0x18033c890], rax
lea rax, str.CHAR_MP_MORS_MUTUAL
mov qword [0x1802bdd20], rax
mov qword [0x1802bdd28], rax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x30], 1
mov rax, qword [rsp + 0x30]
mov qword [0x1802bdd30], rax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x30], 8
mov rax, qword [rsp + 0x30]
mov qword [0x1802bdd38], rax
lea rax, str.HUD_COLOUR_GOLDExplos1ve
mov qword [0x1802bdd40], rax
lea rax, str.HUD_COLOUR_GOLDServer
mov qword [0x1802bdd48], rax
mov qword [rsp + 0x30], rdi
movss xmm0, dword [0x18026c0b0]
movss dword [rsp + 0x30], xmm0
mov rax, qword [rsp + 0x30]
mov qword [0x1802bdd50], rax
lea rax, str.notification
mov qword [0x1802bdd58], rax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x30], 9
mov rax, qword [rsp + 0x30]
mov qword [0x1802bdd60], rax
mov qword [0x1802bdd68], rdi
mov dword [0x1802bdc48], 0xa
call fcn.1800cdff0
mov dword [0x1802bdc58], edi
movabs rax, 0x2ed7843f8f801023
mov qword [0x18033c890], rax
mov qword [0x1802bdd20], rdi
mov qword [0x1802bdd28], rdi
mov dword [0x1802bdc48], 2
call fcn.1800cdff0
jmp 0x1800bc9fa
lea rdx, [rsp + 0x38]
cmp rbx, 8
cmovae rdx, r11
cmp rdi, r8
jne 0x1800bca25
sub rdx, rcx
movzx eax, word [rcx]
cmp word [rcx + rdx], ax
jne 0x1800bca25
add rcx, 2
sub r8, 1
jne 0x1800bc9e7
lea rcx, [rsp + 0x38]
call fcn.18003b160
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.1801e62c0
mov rbx, qword [rsp + 0x2a0]
add rsp, 0x290
pop rdi
ret
xor edx, edx
lea rcx, str.Taskkill__F__IM_gta5.exe__F
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rcx, str.A_new_version_is_available._Please_press_in_the_launcher__DOWNLOAD_LATEST_VERSION_
call fcn.1800bcd20
int3