Function at 0x1400e2016
Capabilities:
Execute command
Get common file path
Hide graphical window

Disassembly:
jmp 0x140125770
push rbp
push rdi
sub rsp, 0x838
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x172
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14032fe58]
xor rax, rbp
mov qword [rbp + 0x7f8], rax
lea rcx, [0x140354a59]
call fcn.1400e372c
call qword [sym.imp.KERNEL32.dll_AllocConsole]
xor edx, edx
lea rcx, str.ConsoleWindowClass
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [rbp + 8], rax
xor edx, edx
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
lea rax, [rbp + 0x3f8]
mov qword [rbp + 0x438], rax
lea rdx, str.cs2.exe
mov rcx, qword [rbp + 0x438]
call fcn.1400e1035
mov qword [rbp + 0x7b8], rax
mov rdx, qword [rbp + 0x7b8]
lea rcx, [0x14032a008]
call fcn.1400e13b9
mov dword [rbp + 0x7c0], eax
mov eax, dword [rbp + 0x7c0]
mov dword [rbp + 0x24], eax
cmp dword [rbp + 0x24], 0
je 0x1401258ba
mov edx, dword [rbp + 0x24]
lea rcx, [rbp + 0x488]
call fcn.1400df7bc
mov qword [rbp + 0x7b8], rax
mov rax, qword [rbp + 0x7b8]
mov qword [rbp + 0x7c0], rax
mov r8, qword [rbp + 0x7c0]
lea rdx, str.Failed_to_attach_process__StatusCode:
lea rcx, [rbp + 0x4c8]
call fcn.1400e38f8
mov qword [rbp + 0x7c8], rax
mov rax, qword [rbp + 0x7c8]
mov qword [rbp + 0x7d0], rax
mov rdx, qword [rbp + 0x7d0]
lea rcx, [rbp + 0x458]
call fcn.1400e0a3b
lea rdx, [0x140328f70]
lea rcx, [rbp + 0x458]
call fcn.1400e3d7b
nop
lea rcx, [rbp + 0x4c8]
call fcn.1400dfcfd
lea rcx, [rbp + 0x488]
call fcn.1400dfcfd
nop
jmp 0x1401258bc
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 5
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
je 0x140125902
lea rdx, str.Failed_to_get_documents_path.
lea rcx, [rbp + 0x508]
call fcn.1400e2cfa
lea rdx, [0x140328f70]
lea rcx, [rbp + 0x508]
call fcn.1400e3d7b
lea rdx, [rbp + 0x70]
lea rcx, [0x140331598]
call fcn.1400df2c1
lea rdx, str._CS2_External
lea rcx, [0x140331598]
call fcn.1400df58c
call fcn.1400e3402
movzx eax, al
test eax, eax
jne 0x140125957
lea rdx, str.Failed_to_update_offsets.
lea rcx, [rbp + 0x538]
call fcn.1400e2cfa
lea rdx, [0x140328f70]
lea rcx, [rbp + 0x538]
call fcn.1400e3d7b
lea rcx, [0x140330f40]
call fcn.1400e35b0
movzx eax, al
test eax, eax
jne 0x140125990
lea rdx, str.Failed_to_call_InitAddress__.
lea rcx, [rbp + 0x568]
call fcn.1400e2cfa
lea rdx, [0x140328f70]
lea rcx, [rbp + 0x568]
call fcn.1400e3d7b
xor r8d, r8d
lea rdx, [0x140331598]
lea rcx, [rbp + 0x5b8]
call fcn.1400e2877
nop
lea rcx, [rbp + 0x5b8]
call fcn.1400e1026
mov byte [rbp + 0x594], al
lea rcx, [rbp + 0x5b8]
call fcn.1400e30ce
movzx eax, byte [rbp + 0x594]
test eax, eax
je 0x140125a12
lea rdx, str.Config_folder_connected:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400df7a8
lea rdx, [0x140331598]
mov rcx, rax
call fcn.1400e2ee4
mov qword [rbp + 0x7b8], rax
lea rdx, [0x1400df2e9]
mov rcx, qword [rbp + 0x7b8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140125ab8
xor r8d, r8d
lea rdx, [0x140331598]
lea rcx, [rbp + 0x618]
call fcn.1400e2877
nop
lea rcx, [rbp + 0x618]
call fcn.1400e03a6
mov byte [rbp + 0x5f4], al
lea rcx, [rbp + 0x618]
call fcn.1400e30ce
movzx eax, byte [rbp + 0x5f4]
test eax, eax
je 0x140125a91
lea rdx, str.Config_folder_created:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400df7a8
lea rdx, [0x140331598]
mov rcx, rax
call fcn.1400e2ee4
mov qword [rbp + 0x7b8], rax
lea rdx, [0x1400df2e9]
mov rcx, qword [rbp + 0x7b8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140125ab8
lea rdx, str.Failed_to_create_the_config_directory.
lea rcx, [rbp + 0x658]
call fcn.1400e2cfa
lea rdx, [0x140328f70]
lea rcx, [rbp + 0x658]
call fcn.1400e3d7b
nop
lea rax, [rbp + 0x688]
mov qword [rbp + 0x6e8], rax
lea rdx, [0x1400e0676]
mov rcx, qword [rbp + 0x6e8]
call fcn.1400df082
mov qword [rbp + 0x7b8], rax
mov rax, qword [rbp + 0x7b8]
mov qword [rbp + 0x7c0], rax
mov rax, qword [rbp + 0x7c0]
mov qword [rbp + 0x7c8], rax
lea rax, [rbp + 0x708]
mov qword [rbp + 0x748], rax
lea rdx, str.SDL_app
mov rcx, qword [rbp + 0x748]
call fcn.1400e1035
mov qword [rbp + 0x7d0], rax
mov rax, qword [rbp + 0x7d0]
mov qword [rbp + 0x7d8], rax
mov rax, qword [rbp + 0x7d8]
mov qword [rbp + 0x7e0], rax
lea rax, [rbp + 0x768]
mov qword [rbp + 0x7a8], rax
lea rdx, str.Counter_Strike_2
mov rcx, qword [rbp + 0x7a8]
call fcn.1400e1035
mov qword [rbp + 0x7e8], rax
mov rax, qword [rbp + 0x7e8]
mov qword [rbp + 0x7f0], rax
mov r9, qword [rbp + 0x7c8]
mov r8, qword [rbp + 0x7e0]
mov rdx, qword [rbp + 0x7f0]
mov rcx, qword [0x140330f30]
call fcn.1400df95b
nop
jmp 0x140125b9a
lea rcx, str.pause
call qword [sym.imp.ucrtbased.dll_system]
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x1402b5d40]
call fcn.1400e2afc
mov rax, rdi
mov rcx, qword [rbp + 0x7f8]
xor rcx, rbp
call fcn.1400e1233
lea rsp, [rbp + 0x808]
pop rdi
pop rbp
ret