Function at 0x140009a40
Capabilities:
Execute command
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r12
push r14
push r15
sub rsp, 0x350
mov rax, qword [0x14008c010]
xor rax, rsp
mov qword [rsp + 0x340], rax
xor edi, edi
call fcn.140009310
mov rcx, rax
test rax, rax
je 0x14000a5ff
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x260], rbx
lea rcx, [rsp + 0xd0]
call fcn.1400626d0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140009b0e
mov eax, dword [rbx + 0x10]
shr eax, 0x1f
test al, al
jne 0x140009afd
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140009afd
call fcn.14000b140
mov rsi, rax
mov r14, 0xffffffffffffffff
mov ecx, r14d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140009aef
mov rcx, qword [rbx]
mov rdx, qword [rcx]
mov r8, qword [rdx + 8]
mov rdx, rbx
call r8
lea rax, [rsi + 0x18]
mov qword [rsp + 0x260], rax
jmp 0x140009b15
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x260]
call fcn.14000b230
mov r14, 0xffffffffffffffff
mov rdx, qword [rsp + 0xd0]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140009b38
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
jmp 0x140009b40
vpxor xmm0, xmm0, xmm0
xor eax, eax
vmovups ymmword [rsp + 0x2b0], ymm0
vmovups ymmword [rsp + 0x2d0], ymm0
vmovups ymmword [rsp + 0x2f0], ymm0
vmovups ymmword [rsp + 0x310], ymm0
mov qword [rsp + 0x330], rax
lea rax, [rsp + 0x2b8]
mov qword [rsp + 0x2b0], rax
mov r8d, 3
mov rdx, qword [rsp + 0x260]
lea rcx, [rsp + 0x2b0]
vzeroupper
call fcn.14000ae50
nop
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x290], xmm0
mov qword [rsp + 0x2a0], rdi
mov qword [rsp + 0x2a8], rdi
mov rdx, qword [rsp + 0x2b0]
mov r8, r14
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140009bd0
lea rcx, [rsp + 0x290]
call fcn.1400035f0
nop
mov r15d, edi
mov rcx, qword [rsp + 0x2a0]
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
test rcx, rcx
je 0x140009dbd
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rcx
cmp rax, 0x19
jb 0x14000a60a
lea rax, [rsp + 0x290]
cmp qword [rsp + 0x2a8], 0x10
cmovae rax, qword [rsp + 0x290]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x19
lea r9, str._INFO__Your_license_key:
lea r8, [rsp + 0x290]
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x130]
call fcn.14000c250
nop
mov r8d, 1
lea rdx, [0x140076a90]
lea rcx, [rsp + 0x130]
call fcn.14000b0a0
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x90], xmm0
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rsp + 0xa0], xmm1
vmovups ymm0, ymmword [rax]
vmovups ymmword [rsp + 0x90], ymm0
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0x10
cmovae rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0xa0]
mov rcx, rbx
vzeroupper
call fcn.14000c3f0
nop
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0x10
jb 0x140009d30
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009d2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009d2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006c3cc
vmovdqu xmm0, xmmword [0x14007d8a0]
vmovdqu xmmword [rsp + 0xa0], xmm0
mov byte [rsp + 0x90], 0
mov rdx, qword [rsp + 0x148]
cmp rdx, 0x10
jb 0x140009d8f
inc rdx
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009d8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009d8a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006c3cc
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x1d8]
call fcn.140007bd0
mov rcx, rax
call fcn.140063fc0
mov r15d, eax
cmp eax, 1
je 0x140009f57
jmp 0x140009f39
lea rax, [rsp + 0x290]
cmp qword [rsp + 0x2a8], 0x10
cmovae rax, qword [rsp + 0x290]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x1c
lea r9, str._INFO__No_license_key_found
lea r8, [rsp + 0x290]
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x150]
call fcn.14000c250
nop
mov r8d, 1
lea rdx, [0x140076a90]
lea rcx, [rsp + 0x150]
call fcn.14000b0a0
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0xb0], xmm0
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rsp + 0xc0], xmm1
vmovups ymm0, ymmword [rax]
vmovups ymmword [rsp + 0xb0], ymm0
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0x10
cmovae rdx, qword [rsp + 0xb0]
mov r8, qword [rsp + 0xc0]
mov rcx, rbx
vzeroupper
call fcn.14000c3f0
nop
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0x10
jb 0x140009ed0
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009ecb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009ecb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006c3cc
vmovdqu xmm0, xmmword [0x14007d8a0]
vmovdqu xmmword [rsp + 0xc0], xmm0
mov byte [rsp + 0xb0], 0
mov rdx, qword [rsp + 0x168]
cmp rdx, 0x10
jb 0x140009f2f
inc rdx
mov rcx, qword [rsp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009f2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009f2a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006c3cc
movabs rsi, 0x7fffffffffffffff
cmp qword [rsp + 0x2a0], 0
je 0x140009f57
lea rdx, str._ERROR__License_key_invalid_or_expired_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b6f0
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x268], xmm0
mov qword [rsp + 0x278], rdi
mov qword [rsp + 0x280], 0xf
mov byte [rsp + 0x268], 0
mov r12d, edi
cmp r15d, 1
je 0x14000a2d8
nop dword [rax]
test r12d, r12d
jle 0x140009fa8
lea rdx, str._ERROR__License_key_invalid_or_expired_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b6f0
inc r12d
lea rdx, str._INFO__Please_enter_a_valid_license_key:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b6f0
lea rdx, [0x14000b8c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov rax, qword [rbx]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x268]
mov rcx, rbx
call fcn.14000c5b0
lea rcx, [rsp + 0x268]
call fcn.140009900
lea rcx, [rsp + 0x1b0]
call fcn.14000a6c0
nop
lea rdx, [rsp + 0x268]
cmp qword [rsp + 0x280], 0x10
setae r9b
cmovae rdx, qword [rsp + 0x268]
add rdx, qword [rsp + 0x278]
lea rcx, [rsp + 0x268]
test r9b, r9b
cmovne rcx, qword [rsp + 0x268]
mov dword [rsp + 0x20], 0x10
mov r9, rax
call fcn.14000c750
movzx ebx, al
lea rcx, [rsp + 0x1b0]
call fcn.14000add0
mov rcx, qword [rsp + 0x1d0]
test rcx, rcx
je 0x14000a099
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test rax, rax
je 0x14000a099
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rax
call r8
test bl, bl
je 0x14000a0bd
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x1f8]
call fcn.140007bd0
mov rcx, rax
call fcn.140063fc0
mov r15d, eax
cmp r15d, 1
jne 0x140009f90
mov rbx, qword [rsp + 0x278]
test rbx, rbx
je 0x14000a2d8
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
lea r15, [rsp + 0x268]
cmp qword [rsp + 0x280], 0x10
cmovae r15, qword [rsp + 0x268]
cmp rbx, rsi
ja 0x14000a610
mov qword [rsp + 0x68], 0xf
cmp rbx, 0x10
jae 0x14000a133
mov qword [rsp + 0x60], rbx
vmovups xmm0, xmmword [r15]
vmovups xmmword [rsp + 0x50], xmm0
jmp 0x14000a1ca
mov rax, rbx
or rax, 0xf
cmp rax, rsi
jbe 0x14000a16b
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14006c070
mov rcx, rax
test rax, rax
je 0x14000a196
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000a1ac
mov rsi, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rsi, rcx
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x14000a19d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000a616
jmp 0x14000a14d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000a1a9
call fcn.14006c070
jmp 0x14000a1ac
mov rax, rdi
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rsi
lea r8, [rbx + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x50]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x258]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, str.SoftwareNinjaHackzLicense
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov qword [rsp + 0x288], rdi
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x288]
call fcn.140062840
mov rbx, qword [rsp + 0x288]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
mov r9d, 1
xor r8d, r8d
lea rdx, [0x140076a50]
mov rcx, qword [rsp + 0x258]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rsp + 0x258]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rsp + 0x288]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000a28f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14000a2cf
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a2ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a2ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006c3cc
lea rdx, str._INFO__License_Key_Valid_and_Saved._Welcome_n
jmp 0x14000a2df
lea rdx, str._INFO__License_Key_Valid._Welcome_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b6f0
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], rdi
mov r8d, 7
lea rdx, str.cs2.exe
lea rcx, [rsp + 0x70]
call fcn.1400035f0
lea rdx, [rsp + 0x70]
lea rcx, [0x14008c080]
call fcn.140008e10
test eax, eax
je 0x14000a3a7
lea rdx, str._ERROR__Failed_to_attach_process._Make_sure_CS2_is_launched.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b6f0
lea rdx, [0x14000b8c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], rdi
mov r8d, 7
lea rdx, str.cs2.exe
lea rcx, [rsp + 0x70]
call fcn.1400035f0
lea rdx, [rsp + 0x70]
lea rcx, [0x14008c080]
call fcn.140008e10
test eax, eax
jne 0x14000a331
call fcn.140012ff0
test al, al
jne 0x14000a3d8
lea rdx, str._ERROR__Failed_to_update_offsets.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b6f0
lea rdx, [0x14000b8c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14000a576
call fcn.140008b20
test al, al
jne 0x14000a3ea
lea rdx, str._ERROR__Failed_to_call_InitAddress__.
jmp 0x14000a3b7
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov r8d, dword [0x14008c090]
lea rcx, [rsp + 0x218]
call fcn.14000b900
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14000a414
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.14000c3f0
nop
lea rcx, [rsp + 0x218]
call fcn.140002f60
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov r8, qword [0x14008e250]
lea rcx, [rsp + 0x238]
call fcn.14000ba30
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14000a457
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.14000c3f0
nop
lea rcx, [rsp + 0x238]
call fcn.140002f60
lea rdx, str.Runing...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b6f0
lea rdx, [0x14000b8c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rax, [rsp + 0x170]
mov qword [rsp + 0x48], rax
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rsp + 0x170], rax
lea rax, [0x140005500]
mov qword [rsp + 0x178], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x1a8], rax
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x118], rax
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0xd8], xmm0
mov qword [rsp + 0xe8], rdi
mov qword [rsp + 0xf0], rdi
mov r8d, 7
lea rdx, str.SDL_app
lea rcx, [rsp + 0xd8]
call fcn.1400035f0
nop
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0xf8], xmm0
mov qword [rsp + 0x108], rdi
mov qword [rsp + 0x110], rdi
mov r8d, 0x10
lea rdx, str.Counter_Strike_2
lea rcx, [rsp + 0xf8]
call fcn.1400035f0
nop
lea r9, [rsp + 0x170]
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0xf8]
call fcn.1400608b0
nop
jmp 0x14000a576
lea rcx, [rsp + 0x268]
call fcn.140002f60
nop
lea rcx, [rsp + 0x290]
call fcn.140002f60
nop
lea rax, [rsp + 0x2b8]
mov rcx, qword [rsp + 0x2b0]
cmp rcx, rax
je 0x14000a5ae
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rdx, qword [rsp + 0x260]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r14d
sub r14d, 1
jg 0x14000a5cf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor eax, eax
mov rcx, qword [rsp + 0x340]
xor rcx, rsp
call fcn.14006bf30
lea r11, [rsp + 0x350]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop r12
ret
mov ecx, 0x80004005
call fcn.1400091e0
nop
call fcn.140002b20
nop
call fcn.140002b20
int3
call fcn.140002a80
int3