Function at 0x1800555b8
Capabilities:
Create process on windows
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rbp
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x1801850b8]
xor rax, rsp
mov qword [rbp - 8], rax
and qword [rbp - 0x30], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov r8d, 0x2a
lea rdx, str.SOFTWAREBlizzard_EntertainmentBattle.net
lea rcx, [rbp - 0x28]
call fcn.18001a7f0
and qword [rbp - 0x30], 0
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rdx, qword [rbp - 0x28]
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 0x2011f
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov esi, eax
xor ebx, ebx
test eax, eax
cmove rbx, qword [rbp - 0x30]
mov qword [rbp - 0x30], rbx
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x180055683
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005567e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005573e
call fcn.1800bbd50
test esi, esi
je 0x1800556eb
mov r9d, gethostbyname
lea r8, [0x180123b48]
lea rdx, str.You_need_to_have_BlackOps4_from_Battle.Net_to_use_this_product...
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov esi, 1
mov dword [rsp + 0x28], esi
and qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str.http:__battle.net_
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rdx, str.__PLATFORM__:_Couldnt_find_Battle.Net_Launcher__Shutting_down...
mov ecx, esi
call fcn.18004471c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, esi
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
test rbx, rbx
je 0x180055722
mov eax, 0x80000000
add rax, rbx
cmp rax, 5
jbe 0x180055722
cmp rbx, 0xffffffff80000007
je 0x180055722
cmp rbx, 0xffffffff80000060
je 0x180055722
cmp rbx, 0xffffffff80000050
je 0x180055722
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1800bbd30
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x60
pop rbp
ret
call fcn.1800c2db4
nop
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x20
movabs rcx, 0x1423271d0
call fcn.180075e08
mov ecx, 0x1b0
lea rdx, [rbp + 0x18]
mov word [rbp + 0x18], cx
mov r8d, 2
mov rcx, rax
call fcn.18007dd68
movabs rcx, 0x1423271e0
call fcn.180075e08
mov edi, 4
lea rdx, [rbp + 0x18]
mov ebx, 0x90c301b0
mov r8d, edi
mov rcx, rax
mov dword [rbp + 0x18], ebx
call fcn.18007dd68
movabs rcx, 0x142325210
call fcn.180075e08
lea r8d, [rdi - 3]
mov byte [rbp + 0x18], 0xc3
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.18007dd68
movabs rcx, 0x142307b40
call fcn.180075e08
lea r8d, [rdi - 3]
mov byte [rbp + 0x18], 0xc3
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.18007dd68
movabs rcx, 0x143d08290
call fcn.180075e08
mov r8d, edi
mov dword [rbp + 0x18], ebx
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.18007dd68
movabs rcx, 0x1437da454
call fcn.180075e08
lea edx, [rdi + 9]
mov rcx, rax
call fcn.18007dcfc
movabs rcx, 0x1444d2d60
call fcn.180075e08
mov ebx, 0xc301b0
lea rdx, [rbp + 0x18]
mov r8d, edi
mov dword [rbp + 0x18], ebx
mov rcx, rax
call fcn.18007dd68
movabs rcx, 0x1444e34c0
call fcn.180075e08
mov r8d, edi
mov dword [rbp + 0x18], ebx
lea rdx, [rbp + 0x18]
mov rcx, rax
call fcn.18007dd68
movabs rcx, 0x1438994e9
call fcn.180075e08
lea ebx, [rdi + 0x12]
mov rcx, rax
mov edx, ebx
call fcn.18007dcfc
movabs rcx, 0x1438c3476
call fcn.180075e08
mov edx, ebx
mov rcx, rax
call fcn.18007dcfc
movabs rcx, 0x142325c70
call fcn.180075e08
xor r9d, r9d
lea rdx, [fcn.180055418]
xor r8d, r8d
mov rcx, rax
call fcn.18007dea8
movabs rcx, 0x142325ca0
call fcn.180075e08
xor r9d, r9d
lea rdx, [fcn.180055374]
xor r8d, r8d
mov rcx, rax
call fcn.18007dea8
call fcn.180055374
mov rbx, rax
call fcn.180055418
mov r9, rbx
lea rdx, str.__PLATFORM__:_BattleTag:__s__BattleID:__llu
mov r8, rax
lea ecx, [rdi - 3]
mov rbx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x40]
add rsp, 0x20
pop rbp
jmp fcn.18004471c