Function at 0x140024c90
Capabilities:
Download url
Execute command
Get common file path
Receive data

Disassembly:
sub rsp, 0x808
mov rax, qword [0x1400f9010]
xor rax, rsp
mov qword [rsp + 0x7f8], rax
lea rcx, [rsp + 0x350]
call fcn.140004110
nop
lea rdx, str.BenyoGenyo12
lea rcx, [rsp + 0x350]
call fcn.14001b060
mov dword [rsp + 0x38], 0
mov edx, 0xd4a50fff
mov ecx, 0xf4240
call fcn.140024c30
mov dword [rsp + 0x34], eax
mov edx, 0x110
lea rcx, [rsp + 0x3b0]
call fcn.140003b10
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 1
lea rdx, [0x1400d03a0]
lea rcx, [rsp + 0x3b0]
call fcn.140026a60
nop
lea rcx, [rsp + 0x3b0]
call fcn.1400269b0
movzx eax, al
test eax, eax
jne 0x140024db4
mov edx, pe_nt_image_headers64
lea rcx, [rsp + 0x5d0]
call fcn.140003b10
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 2
lea rdx, str.win_serial.benyo
lea rcx, [rsp + 0x5d0]
call fcn.140025780
nop
mov edx, dword [rsp + 0x34]
lea rcx, [rsp + 0x5d0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov qword [rsp + 0x58], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x5d0]
call fcn.140025690
nop
lea rcx, [rsp + 0x5d0]
call fcn.140025650
lea rcx, [rsp + 0x3b0]
call fcn.1400269b0
movzx eax, al
test eax, eax
je 0x140024e1f
lea rcx, [rsp + 0x370]
call fcn.140004110
nop
lea rdx, [rsp + 0x370]
lea rcx, [rsp + 0x3b0]
call fcn.140028850
mov r8d, 0xa
xor edx, edx
lea rcx, [rsp + 0x370]
call fcn.140023c30
mov dword [rsp + 0x34], eax
lea rcx, [rsp + 0x3b0]
call fcn.140026950
nop
lea rcx, [rsp + 0x370]
call fcn.140004080
lea rdx, str.Serial:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001cae0
mov qword [rsp + 0x60], rax
mov edx, dword [rsp + 0x34]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov qword [rsp + 0x68], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x1400d0410]
lea rdx, str.https:__nopaste.net_cs2_serails2_d1
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
jne 0x140024fc0
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x110
lea rcx, [rsp + 0x4c0]
call fcn.140003b10
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 1
lea rdx, str.enabledSerials.benyo
lea rcx, [rsp + 0x4c0]
call fcn.140026a60
nop
lea rcx, [rsp + 0x4c0]
call fcn.1400269b0
movzx eax, al
test eax, eax
je 0x140024fb1
lea rcx, [rsp + 0x390]
call fcn.140004110
nop
lea rdx, [rsp + 0x390]
lea rcx, [rsp + 0x4c0]
call fcn.140028850
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rcx, qword [rsp + 0x50]
add rcx, rax
mov rax, rcx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
movzx eax, al
test eax, eax
je 0x140024f95
mov r8d, 0xa
xor edx, edx
lea rcx, [rsp + 0x390]
call fcn.140023c30
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x44]
cmp dword [rsp + 0x34], eax
jne 0x140024f90
lea rdx, [0x1400d04b0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001cae0
mov qword [rsp + 0x70], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, dword [rsp + 0x34]
mov dword [rsp + 0x38], eax
jmp 0x140024efa
lea rcx, [rsp + 0x4c0]
call fcn.140026950
nop
lea rcx, [rsp + 0x390]
call fcn.140004080
nop
lea rcx, [rsp + 0x4c0]
call fcn.140025610
jmp 0x140024fea
lea rdx, str.Failed_download
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001cae0
mov qword [rsp + 0x78], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400ce396]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001cae0
mov qword [rsp + 0x80], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp dword [rsp + 0x38], 0
jne 0x140025161
lea rdx, str.You_dont_have_permission_to_use_it.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001cae0
mov qword [rsp + 0x88], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Ask_for_permission_on_discord.__Benyo
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001cae0
mov qword [rsp + 0x90], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.If_you_do_not_have_permission__enter_the_admin_password_for_use.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001cae0
mov qword [rsp + 0x98], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x330]
call fcn.140004110
nop
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x330]
call fcn.1400288a0
movzx eax, al
test eax, eax
je 0x140025100
lea rdx, [rsp + 0x330]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140028850
jmp 0x1400250ce
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x330]
call fcn.1400288e0
movzx eax, al
test eax, eax
je 0x140025154
lea rdx, str.Permissions_loaded_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001cae0
mov qword [rsp + 0xa0], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rsp + 0x38], 1
lea rcx, [rsp + 0x330]
call fcn.140004080
cmp dword [rsp + 0x38], 1
jl 0x1400255ad
lea rax, [rsp + 0x210]
mov qword [rsp + 0xa8], rax
lea rdx, str.cs2.exe
mov rcx, qword [rsp + 0xa8]
call fcn.1400040b0
mov qword [rsp + 0xb0], rax
mov rdx, qword [rsp + 0xb0]
lea rcx, [0x14010fb60]
call fcn.140023910
mov dword [rsp + 0x48], eax
lea rax, [rsp + 0x6e0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 5
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
je 0x140025209
lea rdx, str._Info__Error:_Failed_to_get_the_Documents_folder_path.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14001cae0
mov qword [rsp + 0xb8], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400255ad
lea rdx, [rsp + 0x6e0]
lea rcx, [0x140113438]
call fcn.14001b060
lea rdx, str.Benyo
lea rcx, [0x140113438]
call fcn.140027070
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x3c], eax
cmp dword [rsp + 0x3c], 1
je 0x140025252
cmp dword [rsp + 0x3c], 2
je 0x140025287
cmp dword [rsp + 0x3c], 3
je 0x1400252bc
jmp 0x1400252f1
lea rdx, str._ERROR__Please_launch_the_game_first_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001cae0
mov qword [rsp + 0xc0], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400255ad
lea rdx, str._ERROR__Failed_to_hook_process__please_run_the_cheat_in_UAC.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001cae0
mov qword [rsp + 0xc8], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400255ad
lea rdx, str._ERROR__Failed_to_get_module_address.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001cae0
mov qword [rsp + 0xd0], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400255ad
call fcn.14002acf0
movzx eax, al
test eax, eax
jne 0x140025332
lea rdx, str._ERROR__Failed_to_update_offsets.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001cae0
mov qword [rsp + 0xd8], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400255ad
lea rcx, [0x140113270]
call fcn.140022860
movzx eax, al
test eax, eax
jne 0x14002537a
lea rdx, str._ERROR__Failed_to_call_InitAddress__.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001cae0
mov qword [rsp + 0xe0], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400255ad
xor r8d, r8d
lea rdx, [0x140113438]
lea rcx, [rsp + 0x1d0]
call fcn.140028910
nop
lea rcx, [rsp + 0x1d0]
call fcn.140024930
mov byte [rsp + 0x30], al
lea rcx, [rsp + 0x1d0]
call fcn.140023fa0
movzx eax, byte [rsp + 0x30]
test eax, eax
je 0x1400253fd
lea rdx, str._Info__Config_folder_connected:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001cae0
lea rdx, [0x140113438]
mov rcx, rax
call fcn.140028960
mov qword [rsp + 0xe8], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400254b2
xor r8d, r8d
lea rdx, [0x140113438]
lea rcx, [rsp + 0x1f0]
call fcn.140028910
nop
lea rcx, [rsp + 0x1f0]
call fcn.140024af0
mov byte [rsp + 0x31], al
lea rcx, [rsp + 0x1f0]
call fcn.140023fa0
movzx eax, byte [rsp + 0x31]
test eax, eax
je 0x14002547d
lea rdx, str._Info__Config_folder_created:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001cae0
lea rdx, [0x140113438]
mov rcx, rax
call fcn.140028960
mov qword [rsp + 0xf0], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400254b2
lea rdx, str._Info__Error:_Failed_to_create_the_config_directory.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14001cae0
mov qword [rsp + 0xf8], rax
lea rdx, [0x14001cec0]
mov rcx, qword [rsp + 0xf8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400255ad
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x100], rax
lea rdx, [0x140018e30]
mov rcx, qword [rsp + 0x100]
call fcn.1400289b0
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x230]
mov qword [rsp + 0x118], rax
lea rdx, [0x1400d0750]
mov rcx, qword [rsp + 0x118]
call fcn.1400040b0
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x148], rax
lea rax, [rsp + 0x250]
mov qword [rsp + 0x130], rax
lea rdx, str.Counter_Strike_2
mov rcx, qword [rsp + 0x130]
call fcn.1400040b0
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x150], rax
mov r9, qword [rsp + 0x140]
mov r8, qword [rsp + 0x148]
mov rdx, qword [rsp + 0x150]
mov rcx, qword [0x140113308]
call fcn.1400b6710
nop
jmp 0x1400255ad
lea rdx, [0x14001cec0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dword [rsp + 0x4c], 0
lea rcx, [rsp + 0x3b0]
call fcn.140025610
nop
lea rcx, [rsp + 0x350]
call fcn.140004080
mov eax, dword [rsp + 0x4c]
mov rcx, qword [rsp + 0x7f8]
xor rcx, rsp
call fcn.1400c7520
add rsp, 0x808
ret