Function at 0x140004e60
Capabilities:
Execute command
Set console window title
Set registry value
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x14018f080]
xor rax, rsp
mov qword [rbp + 0x38], rax
lea rcx, str.Login
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea rdx, str._n_n_Connecting..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400062d0
lea rcx, [0x140286da0]
call fcn.14007b190
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cmp byte [0x140286fb0], 0
jne 0x140004f01
lea rdx, str._n_Status:
call fcn.1400062d0
mov rcx, rax
lea rdx, [0x140286fb8]
call fcn.140006270
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, str._n_n__1__Login_n__2__Register_n__3__Upgrade_n_n_Choose_option:
call fcn.1400062d0
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
movdqa xmm1, xmmword [0x140175370]
movdqu xmmword [rbp + 8], xmm1
mov byte [rbp - 8], 0
movups xmmword [rbp - 0x28], xmm0
xor r12d, r12d
mov qword [rbp - 0x18], r12
mov esi, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x10], rsi
mov byte [rbp - 0x28], r12b
movups xmmword [rbp + 0x18], xmm0
movdqu xmmword [rbp + 0x28], xmm1
mov byte [rbp + 0x18], r12b
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rbp - 0x30]
sub ecx, 1
je 0x140005129
sub ecx, 1
je 0x140005021
cmp ecx, 1
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
je 0x140004f9d
lea rdx, str._n_n_Status:_Failure:_Invalid_Selection
call fcn.1400062d0
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [rsi - 0xe]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, str._n_n_Enter_username:
call fcn.1400062d0
lea rdx, [rbp - 8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400064a0
lea rdx, str._n_Enter_license:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400062d0
lea rdx, [rbp + 0x18]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400064a0
lea rax, [rsp + 0x30]
mov qword [rsp + 0x58], rax
lea rdx, [rbp + 0x18]
lea rcx, [rsp + 0x30]
call fcn.140005c90
mov rbx, rax
lea rdx, [rbp - 8]
lea rcx, [rsp + 0x70]
call fcn.140005c90
nop
mov r8, rbx
mov rdx, rax
lea rcx, [0x140286da0]
call fcn.1400830d0
mov rdi, qword [rbp - 0x28]
jmp 0x140005292
lea rdx, str._n_n_Enter_username:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400062d0
lea rdx, [rbp - 8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400064a0
lea rdx, str._n_Enter_password:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400062d0
lea rdx, [rbp - 0x28]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400064a0
lea rdx, str._n_Enter_license:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400062d0
lea rdx, [rbp + 0x18]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400064a0
lea rax, [rsp + 0x30]
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r12
xor r8d, r8d
lea rdx, [0x140169b01]
lea rcx, [rsp + 0x30]
call fcn.140004b00
nop
lea rax, [rsp + 0x70]
mov qword [rsp + 0x58], rax
lea rdx, [rbp + 0x18]
lea rcx, [rsp + 0x70]
call fcn.140005c90
mov rdi, rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x68], rax
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x50]
call fcn.140005c90
mov rbx, rax
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x70]
call fcn.140005c90
nop
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x20], rcx
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [0x140286da0]
call fcn.14007f6b0
mov rsi, qword [rbp - 0x10]
mov rdi, qword [rbp - 0x28]
jmp 0x140005292
lea rdx, str._n_n_Enter_username:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400062d0
lea rdx, [rbp - 8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400064a0
lea rdx, str._n_Enter_password:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400062d0
lea rdx, [rbp - 0x28]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400064a0
lea rax, [rsp + 0x30]
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r12
lea r15, [rbp - 0x28]
mov rdi, qword [rbp - 0x28]
mov rsi, qword [rbp - 0x10]
cmp rsi, 0xf
cmova r15, rdi
movabs rbx, 0x7fffffffffffffff
mov r14, qword [rbp - 0x18]
cmp r14, rbx
ja 0x140005720
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
cmp r14, 0xf
ja 0x1400051d8
mov qword [rsp + 0x40], r14
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x30], xmm0
jmp 0x140005270
mov rax, r14
or rax, 0xf
cmp rax, rbx
jbe 0x140005210
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140135220
mov rcx, rax
test rax, rax
je 0x14000523b
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140005251
mov rbx, rax
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140005242
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140005726
jmp 0x1400051f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000524e
call fcn.140135220
jmp 0x140005251
mov rax, r12
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], rbx
lea r8, [r14 + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x70]
call fcn.140005c90
nop
lea r8, [rsp + 0x30]
mov rdx, rax
lea rcx, [0x140286da0]
call fcn.14007d0d0
cmp byte [0x140286fb0], 0
jne 0x1400052d4
lea rdx, str._n_Status:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400062d0
mov rcx, rax
lea rdx, [0x140286fb8]
call fcn.140006270
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov byte [0x140286c40], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r12
mov r8d, 7
lea rdx, str.cs2.exe
lea rcx, [rsp + 0x30]
call fcn.140004b00
lea rdx, [rsp + 0x30]
call fcn.1400044f0
lea rcx, [0x140169e30]
test eax, eax
je 0x14000536e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.color_C
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Counter_Strike_Source_2__IS_NOT_DETECTED
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400062d0
lea rdx, str._n_nPlease_open_CS2
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400062d0
lea rdx, str._n_n_nPRESS_ENTER_WHEN_INGAME___LOBBY
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400062d0
lea rcx, str.pause___nul
jmp 0x14000539b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.color_a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Counter_Strike_Source_2__IS_DETECTED
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400062d0
lea rcx, str.timeout_2___nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [0x140286c41], 1
lea rcx, [0x140169e30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.color_f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x258
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, str.Fanity_Software__Beta
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r12
mov r8d, 7
lea rdx, str.cs2.exe
lea rcx, [rsp + 0x30]
call fcn.140004b00
lea rdx, [rsp + 0x30]
call fcn.1400044f0
sub eax, 1
je 0x14000556a
sub eax, 1
je 0x14000556a
cmp eax, 1
je 0x14000556a
cmp byte [0x140288129], 0
jne 0x14000543b
call fcn.14000a4f0
call fcn.140007140
test al, al
je 0x14000556a
mov rbx, qword [0x14028b268]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r12
mov r8d, 0xa
lea rdx, str.client.dll
lea rcx, [rsp + 0x30]
call fcn.140004b00
lea rdx, [rsp + 0x30]
call fcn.1400048b0
mov qword [rbx + 0x48], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r12
mov r8d, 0xa
lea rdx, str.server.dll
lea rcx, [rsp + 0x30]
call fcn.140004b00
lea rdx, [rsp + 0x30]
call fcn.1400048b0
mov qword [rbx + 0x40], rax
mov rdx, qword [rbx + 0x48]
mov eax, dword [0x14028b328]
add rax, rdx
mov qword [rbx + 0x50], rax
mov eax, dword [0x14028b31c]
add rax, rdx
mov qword [rbx + 0x58], rax
mov eax, dword [0x14028b314]
add rax, rdx
mov qword [rbx + 0x60], rax
mov eax, dword [0x14028b310]
add rax, rdx
mov qword [rbx + 0x70], rax
mov ecx, dword [0x14028b320]
add rcx, rdx
mov qword [rbx + 0x78], rcx
mov qword [rbx + 0x80], rcx
mov eax, dword [0x14028b318]
add rax, rdx
mov qword [rbx + 0x88], rax
mov eax, dword [0x14028b324]
add rax, rdx
mov qword [rbx + 0x90], rax
lea rcx, str._Fanity__Successfully_loaded_addresses__n
call fcn.140006e30
cmp qword [rbx + 0x48], 0
je 0x14000556a
cmp byte [0x140288128], 0
jne 0x14000556a
call fcn.14000a240
test al, al
je 0x1400055c4
mov qword [rsp + 0x58], 1
lea rcx, [rsp + 0x58]
call fcn.1400066b0
cmp byte [0x140288128], 0
je 0x140005545
lea rdx, [0x140006290]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x1400056a4
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000569e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000569e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x1400055fc
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400055f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400055bd
call fcn.14013556c
nop
cmp rsi, 0xf
jbe 0x140005634
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000562b
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400056cf
mov rcx, rdi
call fcn.14013556c
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x14000566f
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000566a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005719
call fcn.14013556c
xor eax, eax
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.140135200
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.14013556c
nop
cmp rsi, 0xf
jbe 0x1400056df
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400056d6
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400056d6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.14013556c
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x14000566f
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000566a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000566a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140003b40
int3
call fcn.140003aa0
int3