Function at 0x1800bc9e0
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x290
mov rax, qword [0x1802953c0]
xor rax, rsp
mov qword [rsp + 0x280], rax
mov r9d, 8
lea r8, str.HKKOHAAALSBUDVJSOJB
mov edx, 0xff
lea rcx, [rsp + 0x80]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov byte [rsp + 0x27e], 0
lea rcx, [rsp + 0x58]
call fcn.1800bc7a0
nop
mov rcx, rax
call fcn.18003c6d0
mov r9, rax
lea rax, str.kksdfhjsksdh
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x80]
call fcn.18003b340
nop
lea rcx, [rsp + 0x58]
call fcn.18003be10
lea r10, [rsp + 0x38]
mov r11, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x50]
cmp rbx, 8
cmovae r10, r11
mov r8d, 0x2f
lea rcx, str.vbnvbnnghghfghfztztztzbcvbvbnghghfghfghnbvcbvnc
mov rdi, qword [rsp + 0x48]
cmp rdi, r8
jne 0x1800bcc72
mov r9d, r8d
mov rdx, rcx
sub r10, rcx
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rdx]
cmp word [r10 + rdx], ax
jne 0x1800bcc72
add rdx, 2
sub r9, 1
jne 0x1800bcab0
call fcn.1800be730
call fcn.1800be5e0
xor edi, edi
mov dword [0x1802bec68], edi
movabs rax, 0x202709f4c58a0424
mov qword [0x18033d960], rax
lea rax, str.STRING
mov qword [0x1802bed30], rax
mov dword [0x1802bec58], 1
call fcn.1800ce2a0
mov dword [0x1802bec68], edi
movabs rbx, 0x6c188be134e074aa
mov qword [0x18033d960], rbx
lea rax, str.gVersion_is_up_to_date
mov qword [0x1802bed30], rax
mov dword [0x1802bec58], 1
call fcn.1800ce2a0
mov dword [0x1802bec68], edi
mov qword [0x18033d960], rbx
lea rax, str.gAnti_Transaction_Protection_Active
mov qword [0x1802bed30], rax
mov dword [0x1802bec58], 1
call fcn.1800ce2a0
mov dword [0x1802bec68], edi
movabs rax, 0x531b84e7da981fb6
mov qword [0x18033d960], rax
lea rax, str.CHAR_MP_MORS_MUTUAL
mov qword [0x1802bed30], rax
mov qword [0x1802bed38], rax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x30], 1
mov rax, qword [rsp + 0x30]
mov qword [0x1802bed40], rax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x30], 8
mov rax, qword [rsp + 0x30]
mov qword [0x1802bed48], rax
lea rax, str.HUD_COLOUR_GOLDExplos1ve
mov qword [0x1802bed50], rax
lea rax, str.HUD_COLOUR_GOLDServer
mov qword [0x1802bed58], rax
mov qword [rsp + 0x30], rdi
movss xmm0, dword [0x18026c420]
movss dword [rsp + 0x30], xmm0
mov rax, qword [rsp + 0x30]
mov qword [0x1802bed60], rax
lea rax, str.notification
mov qword [0x1802bed68], rax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x30], 9
mov rax, qword [rsp + 0x30]
mov qword [0x1802bed70], rax
mov qword [0x1802bed78], rdi
mov dword [0x1802bec58], 0xa
call fcn.1800ce2a0
mov dword [0x1802bec68], edi
movabs rax, 0x2ed7843f8f801023
mov qword [0x18033d960], rax
mov qword [0x1802bed30], rdi
mov qword [0x1802bed38], rdi
mov dword [0x1802bec58], 2
call fcn.1800ce2a0
jmp 0x1800bcc9a
lea rdx, [rsp + 0x38]
cmp rbx, 8
cmovae rdx, r11
cmp rdi, r8
jne 0x1800bccc5
sub rdx, rcx
movzx eax, word [rcx]
cmp word [rcx + rdx], ax
jne 0x1800bccc5
add rcx, 2
sub r8, 1
jne 0x1800bcc87
lea rcx, [rsp + 0x38]
call fcn.18003b2c0
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.1801e6af0
mov rbx, qword [rsp + 0x2a0]
add rsp, 0x290
pop rdi
ret
xor edx, edx
lea rcx, str.Taskkill__F__IM_gta5.exe__F
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rcx, str.A_new_version_is_available._Please_press_in_the_launcher__DOWNLOAD_LATEST_VERSION_
call fcn.1800bcfc0
int3