Function at 0x14001dde8
Capabilities:
Create thread
Enumerate gui resources
Execute command
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x410
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x14010d040]
xor rax, rsp
mov qword [rsp + 0x3f0], rax
xor r14d, r14d
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 0xffffffbf
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
lea r13d, [r14 + 5]
mov edx, r13d
mov rcx, qword [0x14010fee0]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x14001dec4
lea rdx, str.RtlGetVersion
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x14001dec4
mov edi, 0x114
mov r8d, edi
xor edx, edx
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov dword [rsp + 0x2d0], edi
lea rcx, [rsp + 0x2d0]
call rbx
test eax, eax
jne 0x14001dfc8
mov eax, dword [rsp + 0x2dc]
cmp eax, 0x4a65
je 0x14001debe
cmp eax, 0x585d
jne 0x14001dec4
mov dword [0x140110530], eax
call fcn.14001c298
call fcn.14001d5c4
mov edx, r13d
mov rcx, qword [0x14010fee0]
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rsp + 0x230], xmm0
mov qword [rsp + 0x240], r14
mov qword [rsp + 0x248], r14
mov r12d, 7
mov r8d, r12d
lea rdi, str.cs2.exe
mov rdx, rdi
lea rcx, [rsp + 0x230]
call fcn.140017fb0
lea rcx, [rsp + 0x230]
call fcn.14001ceb4
test eax, eax
jne 0x14001df3d
lea rdx, str.Please_open_CS2._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003ba0
xorps xmm0, xmm0
movups xmmword [rsp + 0x230], xmm0
mov qword [rsp + 0x240], r14
mov qword [rsp + 0x248], r14
mov r8, r12
mov rdx, rdi
lea rcx, [rsp + 0x230]
call fcn.140017fb0
lea rcx, [rsp + 0x230]
call fcn.14001ceb4
mov esi, 1
test eax, eax
mov ebx, eax
jne 0x14001e002
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rsp + 0x230], xmm0
mov qword [rsp + 0x240], r14
mov qword [rsp + 0x248], r14
mov r8, r12
mov rdx, rdi
lea rcx, [rsp + 0x230]
call fcn.140017fb0
lea rcx, [rsp + 0x230]
call fcn.14001ceb4
jmp 0x14001df7d
lea rdx, str.Failed_to_get_operating_system_info._nClosing...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003ba0
lea rdx, [0x140003d10]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x230], r14
mov dword [rsp + 0x238], ebx
lea rdx, [rsp + 0x230]
lea rcx, [0x14001be64]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
jne 0x14001e042
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xffffffff
jne 0x14001e042
mov rax, qword [rsp + 0x230]
test rax, rax
jne 0x14001e045
mov rax, r14
mov qword [0x14010fb18], rax
call fcn.14001d044
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x14001e085
lea rdx, str.NtUserGetPointerProprietaryId
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14010fa58], rax
test rax, rax
je 0x14001e085
mov dword [0x14010fa60], ebx
lea rcx, [0x1400f6290]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edi, r14d
mov r15d, 0x80000003
add edi, esi
cmp edi, 0x1e
jg 0x14001f19a
mov qword [rsp + 0x260], r14
mov qword [rsp + 0x268], r14
mov qword [rsp + 0x270], r14
mov qword [rsp + 0x280], r14
mov qword [rsp + 0x288], r14
mov dword [rsp + 0x278], 0x80000002
mov eax, dword [0x14010fa60]
mov dword [rsp + 0x258], eax
lea rcx, [rsp + 0x258]
call qword [0x14010fa58]
mov rax, qword [rsp + 0x280]
mov qword [0x14010fa68], rax
mov qword [0x14010f9c8], rax
mov qword [rsp + 0x2a0], r14
mov qword [rsp + 0x2a8], r14
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2c0], r14
mov qword [rsp + 0x2c8], r14
mov dword [rsp + 0x2b8], r15d
mov eax, dword [0x14010fa60]
mov dword [rsp + 0x298], eax
lea rcx, [rsp + 0x298]
call qword [0x14010fa58]
mov rax, qword [rsp + 0x2c8]
mov qword [0x14010fa70], rax
mov qword [0x14010f9c0], rax
mov rcx, qword [0x14010f9c8]
lea rax, [rcx + 0x18c7f98]
mov qword [0x14010f9d0], rax
lea rax, [rcx + 0x1929430]
mov qword [0x14010f9d8], rax
lea rax, [rcx + 0x19176a8]
mov qword [0x14010f9f0], rax
lea rax, [rcx + 0x173b568]
mov qword [0x14010f9f8], rax
lea rax, [rcx + 0x172eee0]
mov qword [0x14010fa08], rax
lea rax, [rcx + 0x192e0e8]
mov qword [0x14010fa10], rax
test rcx, rcx
setne bl
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
test bl, bl
je 0x14001e09b
cmp edi, esi
jle 0x14001e1ee
mov ecx, 0x3a98
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x14010fee0]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 6
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
call fcn.140062b90
xor edx, edx
mov rcx, qword [0x14010fee0]
call qword [sym.imp.USER32.dll_ShowWindow]
mov qword [rsp + 0x260], r14
mov qword [rsp + 0x268], r14
mov qword [rsp + 0x270], r14
mov qword [rsp + 0x280], r14
mov qword [rsp + 0x288], r14
mov dword [rsp + 0x278], r15d
mov eax, dword [0x14010fa60]
mov dword [rsp + 0x258], eax
lea rcx, [rsp + 0x258]
call qword [0x14010fa58]
mov rax, qword [rsp + 0x288]
mov qword [0x14010fa70], rax
mov edx, dword [0x14010d2a8]
add rdx, rax
lea r8, [rsp + 0x250]
call fcn.140003a8c
cmp qword [rsp + 0x250], 0x36b8
sete byte [0x14010fb59]
mov ecx, 0x38
call fcn.14006be00
mov qword [0x14010fb30], rax
mov r8, r14
mov r15d, 0xf
mov rdx, qword [0x140110478]
add rdx, r8
cmp qword [rdx + 0x18], r15
jbe 0x14001e2d7
mov rdx, qword [rdx]
mov qword [rax], rdx
add r8, 0x20
add rax, 8
cmp r8, 0xe0
jb 0x14001e2c4
mov rbx, qword [0x140110478]
mov rdi, qword [0x140110480]
cmp rbx, rdi
je 0x14001ef12
movabs r12, 0x7fffffffffffffff
mov r13d, 0x1000
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 3
jb 0x14001f24a
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001e332
mov r9, qword [rbx]
mov qword [rsp + 0x30], 3
lea rax, [0x1400ef1dc]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x60]
call fcn.140018d34
nop
lea rdx, [rsp + 0x60]
call fcn.140015364
mov cl, r14b
cmp byte [rax + 0x10], sil
je 0x14001e36e
mov byte [rax + 0x10], sil
mov byte [rax], cl
mov rdx, qword [rsp + 0x78]
cmp rdx, r15
jbe 0x14001e3a8
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r13
jb 0x14001e3a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f0f8
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 7
jb 0x14001f244
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001e3c8
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
lea rax, [0x1400ef598]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x40]
call fcn.140018d34
nop
lea rdx, [rsp + 0x40]
call fcn.140015364
mov ecx, esi
cmp byte [rax + 0x10], r14b
je 0x14001e403
mov byte [rax + 0x10], r14b
mov dword [rax], ecx
mov rdx, qword [rsp + 0x58]
cmp rdx, r15
jbe 0x14001e43d
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, r13
jb 0x14001e438
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f0ff
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 7
jb 0x14001f23e
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001e45d
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
lea rax, [0x1400ef5b0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x230]
call fcn.140018d34
nop
lea rdx, [rsp + 0x230]
call fcn.140015364
mov ecx, esi
cmp byte [rax + 0x10], r14b
je 0x14001e49e
mov byte [rax + 0x10], r14b
mov dword [rax], ecx
mov rdx, qword [rsp + 0x248]
cmp rdx, r15
jbe 0x14001e4de
inc rdx
mov rcx, qword [rsp + 0x230]
mov rax, rcx
cmp rdx, r13
jb 0x14001e4d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f106
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 6
jb 0x14001f238
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001e4fe
mov r9, qword [rbx]
mov qword [rsp + 0x30], 6
lea rax, [0x1400ef688]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0xa0]
call fcn.140018d34
nop
lea rdx, [rsp + 0xa0]
call fcn.140015364
mov cl, r14b
cmp byte [rax + 0x10], sil
je 0x14001e540
mov byte [rax + 0x10], sil
mov byte [rax], cl
mov rdx, qword [rsp + 0xb8]
cmp rdx, r15
jbe 0x14001e580
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, r13
jb 0x14001e57b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f10d
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 7
jb 0x14001f232
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001e5a0
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
lea rax, [0x1400ef6a8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0xc8]
call fcn.140018d34
nop
lea rdx, [rsp + 0xc8]
call fcn.140015364
mov ecx, esi
cmp byte [rax + 0x10], r14b
je 0x14001e5e1
mov byte [rax + 0x10], r14b
mov dword [rax], ecx
mov rdx, qword [rsp + 0xe0]
cmp rdx, r15
jbe 0x14001e621
inc rdx
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, r13
jb 0x14001e61c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f114
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 7
jb 0x14001f22c
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001e641
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
lea rax, [0x1400ef6c0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0xe8]
call fcn.140018d34
nop
lea rdx, [rsp + 0xe8]
call fcn.140015364
mov ecx, esi
cmp byte [rax + 0x10], r14b
je 0x14001e682
mov byte [rax + 0x10], r14b
mov dword [rax], ecx
mov rdx, qword [rsp + 0x100]
cmp rdx, r15
jbe 0x14001e6c2
inc rdx
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, r13
jb 0x14001e6bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f11b
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 7
jb 0x14001f226
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001e6e2
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
lea rax, [0x1400ef790]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x108]
call fcn.140018d34
nop
lea rdx, [rsp + 0x108]
call fcn.140015364
mov cl, r14b
cmp byte [rax + 0x10], sil
je 0x14001e724
mov byte [rax + 0x10], sil
mov byte [rax], cl
mov rdx, qword [rsp + 0x120]
cmp rdx, r15
jbe 0x14001e764
inc rdx
mov rcx, qword [rsp + 0x108]
mov rax, rcx
cmp rdx, r13
jb 0x14001e75f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f122
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, r15
jb 0x14001f220
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001e783
mov r9, qword [rbx]
mov qword [rsp + 0x30], r15
lea rax, [0x1400ef7a8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x128]
call fcn.140018d34
nop
lea rdx, [rsp + 0x128]
call fcn.140015364
mov cl, r14b
cmp byte [rax + 0x10], sil
je 0x14001e7c1
mov byte [rax + 0x10], sil
mov byte [rax], cl
mov rdx, qword [rsp + 0x140]
cmp rdx, r15
jbe 0x14001e801
inc rdx
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, r13
jb 0x14001e7fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f129
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 6
jb 0x14001f21a
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001e821
mov r9, qword [rbx]
mov qword [rsp + 0x30], 6
lea rax, [0x1400ef7f0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x148]
call fcn.140018d34
nop
lea rdx, [rsp + 0x148]
call fcn.140015364
mov ecx, r14d
cmp byte [rax + 0x10], r14b
je 0x14001e863
mov byte [rax + 0x10], r14b
mov dword [rax], ecx
mov rdx, qword [rsp + 0x160]
cmp rdx, r15
jbe 0x14001e8a3
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, r13
jb 0x14001e89e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f130
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 3
jb 0x14001f214
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001e8c3
mov r9, qword [rbx]
mov qword [rsp + 0x30], 3
lea rax, [0x1400ef800]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x168]
call fcn.140018d34
nop
lea rdx, [rsp + 0x168]
call fcn.140015364
mov dword [rax], 0x3f800000
cmp byte [rax + 0x10], 2
je 0x14001e908
mov byte [rax + 0x10], 2
mov rdx, qword [rsp + 0x180]
cmp rdx, r15
jbe 0x14001e946
inc rdx
mov rcx, qword [rsp + 0x168]
mov rax, rcx
cmp rdx, r13
jb 0x14001e941
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f137
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 0x11
jb 0x14001f20e
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001e966
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0x11
lea rax, [0x1400ef808]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x188]
call fcn.140018d34
nop
lea rdx, [rsp + 0x188]
call fcn.140015364
mov ecx, 0xc8
cmp byte [rax + 0x10], r14b
je 0x14001e9aa
mov byte [rax + 0x10], r14b
mov dword [rax], ecx
mov rdx, qword [rsp + 0x1a0]
cmp rdx, r15
jbe 0x14001e9ea
inc rdx
mov rcx, qword [rsp + 0x188]
mov rax, rcx
cmp rdx, r13
jb 0x14001e9e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f13e
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 7
jb 0x14001f208
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001ea0a
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
lea rax, [0x1400ef9d8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x1a8]
call fcn.140018d34
nop
lea rdx, [rsp + 0x1a8]
call fcn.140015364
mov cl, r14b
cmp byte [rax + 0x10], sil
je 0x14001ea4c
mov byte [rax + 0x10], sil
mov byte [rax], cl
mov rdx, qword [rsp + 0x1c0]
cmp rdx, r15
jbe 0x14001ea8c
inc rdx
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, r13
jb 0x14001ea87
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f145
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 0xc
jb 0x14001f202
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001eaac
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0xc
lea rax, [0x1400efa08]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x1c8]
call fcn.140018d34
nop
lea rdx, [rsp + 0x1c8]
call fcn.140015364
mov ecx, r15d
cmp byte [rax + 0x10], r14b
je 0x14001eaee
mov byte [rax + 0x10], r14b
mov dword [rax], ecx
mov rdx, qword [rsp + 0x1e0]
cmp rdx, r15
jbe 0x14001eb2e
inc rdx
mov rcx, qword [rsp + 0x1c8]
mov rax, rcx
cmp rdx, r13
jb 0x14001eb29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f14c
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, r15
jb 0x14001f1fc
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001eb4d
mov r9, qword [rbx]
mov qword [rsp + 0x30], r15
lea rax, [0x1400efa20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x1e8]
call fcn.140018d34
nop
lea rdx, [rsp + 0x1e8]
call fcn.140015364
mov dword [rax], 0x3f800000
cmp byte [rax + 0x10], 2
je 0x14001eb8e
mov byte [rax + 0x10], 2
mov rdx, qword [rsp + 0x200]
cmp rdx, r15
jbe 0x14001ebcc
inc rdx
mov rcx, qword [rsp + 0x1e8]
mov rax, rcx
cmp rdx, r13
jb 0x14001ebc7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f153
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 0x13
jb 0x14001f1f6
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001ebec
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0x13
lea rax, [0x1400efc30]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x208]
call fcn.140018d34
nop
lea rdx, [rsp + 0x208]
call fcn.140015364
mov cl, r14b
cmp byte [rax + 0x10], sil
je 0x14001ec2e
mov byte [rax + 0x10], sil
mov byte [rax], cl
mov rdx, qword [rsp + 0x220]
cmp rdx, r15
jbe 0x14001ec6e
inc rdx
mov rcx, qword [rsp + 0x208]
mov rax, rcx
cmp rdx, r13
jb 0x14001ec69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f15a
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 0xc
jb 0x14001f1f0
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001ec8e
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0xc
lea rax, [0x1400efbb0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x80]
call fcn.140018d34
nop
lea rdx, [rsp + 0x80]
call fcn.140015364
mov cl, r14b
cmp byte [rax + 0x10], sil
je 0x14001ecd0
mov byte [rax + 0x10], sil
mov byte [rax], cl
mov rdx, qword [rsp + 0x98]
cmp rdx, r15
jbe 0x14001ed10
inc rdx
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, r13
jb 0x14001ed0b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f161
call fcn.14006bdcc
movdqa xmm6, xmmword [0x1400f9270]
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 8
jb 0x14001f1ea
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001ed38
mov r9, qword [rbx]
mov qword [rsp + 0x30], 8
lea rax, [0x1400efbd0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x80]
call fcn.140018d34
nop
lea rdx, [rsp + 0x80]
call fcn.140015364
cmp byte [rax + 0x10], 3
movdqu xmmword [rax], xmm6
je 0x14001ed7b
mov byte [rax + 0x10], 3
mov rdx, qword [rsp + 0x98]
cmp rdx, r15
jbe 0x14001edb9
inc rdx
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, r13
jb 0x14001edb4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f168
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 0xb
jb 0x14001f1e4
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001edd9
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0xb
lea rax, [0x1400efbf8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x298]
call fcn.140018d34
nop
lea rdx, [rsp + 0x298]
call fcn.140015364
mov cl, r14b
cmp byte [rax + 0x10], sil
je 0x14001ee1b
mov byte [rax + 0x10], sil
mov byte [rax], cl
mov rdx, qword [rsp + 0x2b0]
cmp rdx, r15
jbe 0x14001ee5b
inc rdx
mov rcx, qword [rsp + 0x298]
mov rax, rcx
cmp rdx, r13
jb 0x14001ee56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f16f
call fcn.14006bdcc
mov rcx, qword [rbx + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 9
jb 0x14001f1de
mov r9, rbx
cmp qword [rbx + 0x18], r15
jbe 0x14001ee7b
mov r9, qword [rbx]
mov qword [rsp + 0x30], 9
lea rax, [0x1400efc20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x258]
call fcn.140018d34
nop
lea rdx, [rsp + 0x258]
call fcn.140015364
mov ecx, 5
cmp byte [rax + 0x10], r14b
je 0x14001eebf
mov byte [rax + 0x10], r14b
mov dword [rax], ecx
mov rdx, qword [rsp + 0x270]
cmp rdx, r15
jbe 0x14001eeff
inc rdx
mov rcx, qword [rsp + 0x258]
mov rax, rcx
cmp rdx, r13
jb 0x14001eefa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f176
call fcn.14006bdcc
add rbx, 0x20
cmp rbx, rdi
jne 0x14001e312
mov r12d, 7
call fcn.140063850
lea rax, str.GrenadeToolKit.txt
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], 0x12
movaps xmm0, xmmword [rsp + 0x230]
movdqa xmmword [rsp + 0x230], xmm0
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x258]
call fcn.14001aabc
nop
lea rcx, [rsp + 0x258]
call fcn.1400060f4
mov bl, al
lea rcx, [rsp + 0x258]
call fcn.1400036c4
test bl, bl
je 0x14001ef83
mov dword [0x14010d138], 0x28
mov ecx, 8
call fcn.14006ba80
lea rcx, [0x14001bed8]
mov qword [rax], rcx
mov qword [rsp + 0x250], rax
lea rcx, [rsp + 0x238]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x140020680]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x230], rax
test rax, rax
je 0x14001f186
cmp dword [rsp + 0x238], r14d
je 0x14001f17d
movaps xmm0, xmmword [rsp + 0x230]
movdqa xmmword [rsp + 0xa0], xmm0
lea rcx, [rsp + 0xa0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14001f17d
xorps xmm0, xmm0
lea rax, [rsp + 0x258]
mov qword [rsp + 0x250], rax
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rsp + 0x258], rax
lea rax, [0x14000f69c]
mov qword [rsp + 0x260], rax
lea rax, [rsp + 0x258]
mov qword [rsp + 0x290], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0xa0], rax
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
mov r8, r12
lea rdx, str.SDL_app
lea rcx, [rsp + 0x40]
call fcn.140006a48
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
mov r8d, 0x10
lea rdx, str.Counter_Strike_2
lea rcx, [rsp + 0x60]
call fcn.140006a48
nop
lea r9, [rsp + 0x258]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
call fcn.140061524
nop
xor eax, eax
mov rcx, qword [rsp + 0x3f0]
xor rcx, rsp
call fcn.14006b940
lea r11, [rsp + 0x410]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x238], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rcx, [0x1400f6290]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, r13d
mov rcx, qword [0x14010fee0]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, str.Failed_to_start_driver._Contact_Zapy_for_support._n_nIf_youd_like_to_fix_it_yourself__try_these_things:_n_Disable_your_antivirus_n_Disable_core_isolation_n_Uninstall_anticheats_like_Faceit_n_Update_windows_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003ba0
mov ecx, 0xea60
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, esi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3
call fcn.14000424c
int3