Function at 0x1400e10aa
Capabilities:
Execute command
Get common file path

Disassembly:
jmp 0x140125640
push rbp
push rdi
sub rsp, 0x6a8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x10e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140344d80]
xor rax, rbp
mov qword [rbp + 0x668], rax
lea rcx, [0x14036b8de]
call fcn.1400e5876
lea rax, [rbp + 0x3d8]
mov qword [rbp + 0x418], rax
lea rdx, str.cs2.exe
mov rcx, qword [rbp + 0x418]
call fcn.1400e30ee
mov qword [rbp + 0x628], rax
mov rdx, qword [rbp + 0x628]
lea rcx, [0x140335008]
call fcn.1400e3486
mov dword [rbp + 4], eax
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 5
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
je 0x14012570e
lea rdx, str.Failed_to_get_the_Documents_folder_path.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400e17c6
mov qword [rbp + 0x628], rax
lea rdx, [0x1400e1302]
mov rcx, qword [rbp + 0x628]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140125a7f
lea rdx, [rbp + 0x30]
lea rcx, [0x140346720]
call fcn.1400e12d5
lea rdx, str._CS2_External
lea rcx, [0x140346720]
call fcn.1400e15a5
cmp dword [rbp + 4], 0
je 0x140125781
lea rdx, str._ERROR__Failed_to_attach_process__StatusCode:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400e17c6
mov qword [rbp + 0x628], rax
mov edx, dword [rbp + 4]
mov rcx, qword [rbp + 0x628]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov qword [rbp + 0x630], rax
lea rdx, [0x1400e1302]
mov rcx, qword [rbp + 0x630]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140125a7f
call fcn.1400e5547
movzx eax, al
test eax, eax
jne 0x1401257c0
lea rdx, str._ERROR__Failed_to_update_offsets.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400e17c6
mov qword [rbp + 0x628], rax
lea rdx, [0x1400e1302]
mov rcx, qword [rbp + 0x628]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140125a7f
lea rcx, [0x140345fe0]
call fcn.1400e56f0
movzx eax, al
test eax, eax
jne 0x140125806
lea rdx, str._ERROR__Failed_to_call_InitAddress__.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400e17c6
mov qword [rbp + 0x628], rax
lea rdx, [0x1400e1302]
mov rcx, qword [rbp + 0x628]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140125a7f
xor r8d, r8d
lea rdx, [0x140346720]
lea rcx, [rbp + 0x458]
call fcn.1400e49b2
nop
lea rcx, [rbp + 0x458]
call fcn.1400e30df
mov byte [rbp + 0x434], al
lea rcx, [rbp + 0x458]
call fcn.1400e5227
movzx eax, byte [rbp + 0x434]
test eax, eax
je 0x140125888
lea rdx, str.Config_folder_connected:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400e17c6
lea rdx, [0x140346720]
mov rcx, rax
call fcn.1400e5033
mov qword [rbp + 0x628], rax
lea rdx, [0x1400e1302]
mov rcx, qword [rbp + 0x628]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14012593a
xor r8d, r8d
lea rdx, [0x140346720]
lea rcx, [rbp + 0x4b8]
call fcn.1400e49b2
nop
lea rcx, [rbp + 0x4b8]
call fcn.1400e2446
mov byte [rbp + 0x494], al
lea rcx, [rbp + 0x4b8]
call fcn.1400e5227
movzx eax, byte [rbp + 0x494]
test eax, eax
je 0x140125907
lea rdx, str.Config_folder_created:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400e17c6
lea rdx, [0x140346720]
mov rcx, rax
call fcn.1400e5033
mov qword [rbp + 0x628], rax
lea rdx, [0x1400e1302]
mov rcx, qword [rbp + 0x628]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14012593a
lea rdx, str.Failed_to_create_the_config_directory.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400e17c6
mov qword [rbp + 0x628], rax
lea rdx, [0x1400e1302]
mov rcx, qword [rbp + 0x628]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140125a7f
lea rdx, str.Injecting_into_the_game
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400e17c6
mov dword [rbp + 0x154], 0
jmp 0x140125967
mov eax, dword [rbp + 0x154]
inc eax
mov dword [rbp + 0x154], eax
cmp dword [rbp + 0x154], 5
jge 0x140125990
lea rdx, [0x1402bf184]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400e17c6
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140125959
lea rax, [rbp + 0x4f8]
mov qword [rbp + 0x558], rax
lea rdx, [0x1400e2711]
mov rcx, qword [rbp + 0x558]
call fcn.1400e107d
mov qword [rbp + 0x628], rax
mov rax, qword [rbp + 0x628]
mov qword [rbp + 0x630], rax
mov rax, qword [rbp + 0x630]
mov qword [rbp + 0x638], rax
lea rax, [rbp + 0x578]
mov qword [rbp + 0x5b8], rax
lea rdx, str.SDL_app
mov rcx, qword [rbp + 0x5b8]
call fcn.1400e30ee
mov qword [rbp + 0x640], rax
mov rax, qword [rbp + 0x640]
mov qword [rbp + 0x648], rax
mov rax, qword [rbp + 0x648]
mov qword [rbp + 0x650], rax
lea rax, [rbp + 0x5d8]
mov qword [rbp + 0x618], rax
lea rdx, str.Counter_Strike_2
mov rcx, qword [rbp + 0x618]
call fcn.1400e30ee
mov qword [rbp + 0x658], rax
mov rax, qword [rbp + 0x658]
mov qword [rbp + 0x660], rax
mov r9, qword [rbp + 0x638]
mov r8, qword [rbp + 0x650]
mov rdx, qword [rbp + 0x660]
mov rcx, qword [0x140345fd0]
call fcn.1400e1988
nop
jmp 0x140125a72
lea rcx, str.pause
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp - 0x30]
lea rdx, [0x1402bdd00]
call fcn.1400e4c41
mov rcx, qword [rbp + 0x668]
xor rcx, rbp
call fcn.1400e32e7
lea rsp, [rbp + 0x678]
pop rdi
pop rbp
ret