Function at 0x140025020
Capabilities:
Accept command line arguments
Create process on windows
Create thread
Enumerate gui resources
Execute command
Hide graphical window
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x620
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x140128040]
xor rax, rsp
mov qword [rsp + 0x600], rax
xor esi, esi
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 0xffffffbf
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x460], xmm0
movups xmmword [rsp + 0x470], xmm0
movups xmmword [rsp + 0x480], xmm0
movups xmmword [rsp + 0x490], xmm0
movups xmmword [rsp + 0x4a0], xmm0
movups xmmword [rsp + 0x4b0], xmm0
movups xmmword [rsp + 0x4c0], xmm0
mov qword [rsp + 0x4d0], rax
lea rcx, [rsp + 0x460]
call fcn.1400269a0
nop
lea rcx, [rsp + 0x3e0]
call fcn.140021f20
nop
mov r8, rax
cmp qword [rax + 0x18], 7
jbe 0x1400250e2
mov r8, qword [rax]
mov rax, qword [rax + 0x10]
lea r9, [r8 + rax*2]
lea rdx, [rsp + 0x3a0]
lea rcx, [rsp + 0x460]
call fcn.140026ce0
mov rdx, qword [0x140128390]
cmp rdx, 0xf
jbe 0x140025145
mov rcx, qword [0x140128378]
inc rdx
cmp rdx, 0x1000
jb 0x14002513b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140025566
mov rcx, r8
nop dword [rax + rax]
call fcn.1400821fc
movups xmm0, xmmword [rsp + 0x3a0]
movups xmmword [0x140128378], xmm0
movups xmm1, xmmword [rsp + 0x3b0]
movups xmmword [0x140128388], xmm1
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x3b8], 0xf
mov byte [rsp + 0x3a0], 0
lea rcx, [rsp + 0x3a0]
call fcn.140003ae0
nop
lea rcx, [rsp + 0x3e0]
call fcn.140003a60
call fcn.140024ba0
mov edx, 5
mov rcx, qword [0x140129d40]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
nop
test rax, rax
je 0x14002522d
lea rdx, str.RtlGetVersion
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x14002522d
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rsp + 0x4e4]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x4e0], 0x114
lea rcx, [rsp + 0x4e0]
call rbx
test eax, eax
jne 0x14002556d
mov eax, dword [rsp + 0x4ec]
cmp eax, 0x4a65
je 0x140025227
nop dword [rax]
cmp eax, 0x585d
jne 0x14002522d
mov dword [0x14012a4d8], eax
call fcn.140022200
call fcn.140024400
mov edx, 5
mov rcx, qword [0x140129d40]
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rsp + 0x3a0], xmm0
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x3b8], rsi
mov r8d, 7
lea rdx, str.cs2.exe
lea rcx, [rsp + 0x3a0]
call fcn.14001c540
lea rcx, [rsp + 0x3a0]
call fcn.140023de0
test eax, eax
jne 0x1400252a5
lea rdx, str.Please_open_CS2._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
nop dword [rax]
call fcn.140003f80
xorps xmm0, xmm0
movups xmmword [rsp + 0x3a0], xmm0
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x3b8], rsi
mov r8d, 7
lea rdx, str.cs2.exe
lea rcx, [rsp + 0x3a0]
call fcn.14001c540
lea rcx, [rsp + 0x3a0]
call fcn.140023de0
mov ebx, eax
test eax, eax
jne 0x140025344
nop dword [rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rsp + 0x3a0], xmm0
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x3b8], rsi
mov r8d, 7
lea rdx, str.cs2.exe
lea rcx, [rsp + 0x3a0]
call fcn.14001c540
lea rcx, [rsp + 0x3a0]
call fcn.140023de0
mov ebx, eax
test eax, eax
je 0x1400252f0
mov qword [rsp + 0x390], rsi
mov dword [rsp + 0x398], ebx
lea rdx, [rsp + 0x390]
lea rcx, [0x140021600]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
jne 0x140025385
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xffffffff
jne 0x140025385
mov rax, qword ds:[rsp + 0x390]
test rax, rax
jne 0x140025388
mov rax, rsi
mov qword [0x140129930], rax
call fcn.140023fa0
lea rcx, str.win32u.dll
nop dword [rax + rax]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x1400253cd
lea rdx, str.NtUserGetPointerProprietaryId
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401298c8], rax
test rax, rax
je 0x1400253cd
mov dword [0x1401298d0], ebx
lea rcx, [0x14010dee0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edi, esi
nop dword [rax]
inc edi
cmp edi, 0x1e
jg 0x140026487
mov qword [rsp + 0x3e8], rsi
mov qword [rsp + 0x3f0], rsi
mov qword [rsp + 0x3f8], rsi
mov qword [rsp + 0x408], rsi
mov qword [rsp + 0x410], rsi
mov dword [rsp + 0x400], 0x80000002
mov eax, dword [0x1401298d0]
mov dword [rsp + 0x3e0], eax
lea rcx, [rsp + 0x3e0]
call qword [0x1401298c8]
mov rax, qword [rsp + 0x408]
mov qword [0x1401298d8], rax
mov qword [0x140129838], rax
call fcn.140021160
mov qword [0x140129830], rax
mov rcx, qword [0x140129838]
lea rax, [rcx + 0x19a3328]
mov qword [0x140129840], rax
lea rax, [rcx + 0x1a052d0]
mov qword [0x140129848], rax
lea rax, [rcx + 0x19f3298]
mov qword [0x140129860], rax
lea rax, [rcx + 0x180db18]
mov qword [0x140129868], rax
lea rax, [rcx + 0x1801bf0]
mov qword [0x140129878], rax
lea rax, [rcx + 0x1a0a3f8]
mov qword [0x140129880], rax
test rcx, rcx
setne bl
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
test bl, bl
je 0x1400253e0
cmp edi, 1
jle 0x1400254df
mov ecx, 0x3a98
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x140129d40]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 6
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov ebx, esi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x3c0]
mov edx, 8
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14002568c
lea rax, [rsp + 0x450]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rsp + 0x3d0]
lea edx, [r9 + 0x16]
mov rcx, qword [rsp + 0x3c0]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x1400255b2
mov ebx, 1
jmp 0x1400255b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rdx, str.Failed_to_get_operating_system_info._nClosing...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
nop dword [rax + rax]
call fcn.140003f80
lea rdx, [0x140004160]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x3c0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x140025692
cmp dword [rsp + 0x3d0], 0
jne 0x140025692
lea rcx, [rsp + 0x390]
call fcn.140078d40
test eax, eax
jne 0x140025692
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
nop
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov r8, rax
lea rax, [rsp + 0x3a0]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x3e0]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor edx, edx
mov rcx, qword [rsp + 0x390]
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
test eax, eax
je 0x140025676
mov rcx, qword [rsp + 0x3a0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x3a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x390]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140025692
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
mov rcx, qword [0x140129d40]
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140024e00
mov qword [rsp + 0x3e8], rsi
mov qword [rsp + 0x3f0], rsi
mov qword [rsp + 0x3f8], rsi
mov qword [rsp + 0x408], rsi
mov qword [rsp + 0x410], rsi
mov dword [rsp + 0x400], 0x80000003
mov eax, dword [0x1401298d0]
mov dword [rsp + 0x3e0], eax
lea rcx, [rsp + 0x3e0]
call qword [0x1401298c8]
mov rdx, qword [rsp + 0x410]
mov qword [0x1401298e0], rdx
add rdx, 0x51e784
lea r8, [rsp + 0x390]
call fcn.140003b50
cmp qword [rsp + 0x390], 0x36b9
sete byte [0x1401299c1]
mov ecx, 0x38
call fcn.1400824cc
mov rdx, rax
mov qword [0x140129950], rax
mov rax, qword [0x14012a450]
cmp qword [rax + 0x18], 0xf
jbe 0x140025754
mov rax, qword [rax]
mov qword [rdx], rax
mov rcx, qword [0x14012a450]
add rcx, 0x20
cmp qword [rcx + 0x18], 0xf
jbe 0x14002576c
mov rcx, qword [rcx]
mov qword [rdx + 8], rcx
mov rax, qword [0x14012a450]
add rax, 0x40
cmp qword [rax + 0x18], 0xf
jbe 0x140025785
mov rax, qword [rax]
mov qword [rdx + 0x10], rax
mov rax, qword [0x14012a450]
add rax, 0x60
cmp qword [rax + 0x18], 0xf
jbe 0x14002579e
mov rax, qword [rax]
mov qword [rdx + 0x18], rax
mov rax, qword [0x14012a450]
sub rax, 0xffffffffffffff80
cmp qword [rax + 0x18], 0xf
jbe 0x1400257b7
mov rax, qword [rax]
mov qword [rdx + 0x20], rax
mov rax, qword [0x14012a450]
add rax, 0xa0
cmp qword [rax + 0x18], 0xf
jbe 0x1400257d2
mov rax, qword [rax]
mov qword [rdx + 0x28], rax
mov rax, qword [0x14012a450]
add rax, 0xc0
cmp qword [rax + 0x18], 0xf
jbe 0x1400257ed
mov rax, qword [rax]
mov qword ds:[rdx + 0x30], rax
mov rbx, qword [0x14012a450]
mov rdi, qword [0x14012a458]
cmp rbx, rdi
je 0x1400261ff
movabs r14, 0x7fffffffffffffff
lea rdx, [0x14010717c]
lea r15, [0x140107558]
lea r12, [0x140107570]
lea r13, [0x140107648]
nop
mov rcx, qword ds:[rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 3
jb 0x140026546
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140025857
mov r9, qword [rbx]
mov qword [rsp + 0x30], 3
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0xc8]
call fcn.14001d4c0
nop
lea r8, [rsp + 0xc8]
lea rdx, [rsp + 0x390]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x14002589f
mov byte [rcx + 0x50], 1
mov byte [rcx + rax], 0
lea rcx, [rsp + 0xc8]
call fcn.140003ae0
mov rcx, qword ds:[rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 7
jb 0x14002653e
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1400258d7
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0xe8]
call fcn.14001d4c0
nop
lea r8, [rsp + 0xe8]
lea rdx, [rsp + 0x3c0]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, 1
lea edx, [rax + 0x3f]
cmp byte [rcx + 0x50], 0
je 0x140025922
mov byte [rcx + 0x50], 0
mov dword [rdx + rcx], eax
lea rcx, [rsp + 0xe8]
call fcn.140003ae0
mov rcx, qword ds:[rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 7
jb 0x140026538
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140025957
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x108]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x108]
lea rdx, [rsp + 0x450]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, 1
lea edx, [rax + 0x3f]
cmp byte [rcx + 0x50], 0
je 0x1400259a2
mov byte [rcx + 0x50], 0
mov dword [rdx + rcx], eax
lea rcx, [rsp + 0x108]
call fcn.140003ae0
mov rcx, qword ds:[rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 6
jb 0x140026532
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1400259d7
mov r9, qword [rbx]
mov qword [rsp + 0x30], 6
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x128]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x128]
lea rdx, [rsp + 0x2a8]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x140025a1f
mov byte [rcx + 0x50], 1
mov byte [rcx + rax], 0
lea rcx, [rsp + 0x128]
call fcn.140003ae0
mov rcx, qword ds:[rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 7
jb 0x14002652c
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140025a57
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
lea rax, [0x140107668]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x148]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x148]
lea rdx, [rsp + 0x2b8]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, 1
lea edx, [rax + 0x3f]
cmp byte [rcx + 0x50], 0
je 0x140025aa9
mov byte [rcx + 0x50], 0
mov dword [rcx + rdx], eax
lea rcx, [rsp + 0x148]
call fcn.140003ae0
mov rcx, qword [rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 7
jb 0x140026526
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140025ada
mov r9, qword [rbx]
mov qword ss:[rsp + 0x30], 7
lea rax, [0x140107680]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x168]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x168]
lea rdx, [rsp + 0x2c8]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, 1
lea edx, [rax + 0x3f]
cmp byte [rcx + 0x50], 0
je 0x140025b30
mov byte [rcx + 0x50], 0
mov dword ds:[rcx + rdx], eax
lea rcx, [rsp + 0x168]
call fcn.140003ae0
mov rcx, qword [rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 7
jb 0x14002651e
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140025b66
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
lea rax, [0x140107750]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x188]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x188]
lea rdx, [rsp + 0x2d8]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x140025bb7
mov byte [rcx + 0x50], 1
mov byte [rax + rcx], 0
lea rcx, [rsp + 0x188]
call fcn.140003ae0
mov rcx, qword [rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 0xf
jb 0x140026518
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140025be9
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0xf
lea rax, [0x140107768]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x1a8]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x1a8]
lea rdx, [rsp + 0x2e8]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x140025c38
mov byte [rcx + 0x50], 1
mov byte [rcx + rax], 0
lea rcx, [rsp + 0x1a8]
call fcn.140003ae0
mov rcx, qword [rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 6
jb 0x140026512
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140025c6a
mov r9, qword [rbx]
mov qword [rsp + 0x30], 6
lea rax, [0x1401077b0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x1c8]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x1c8]
lea rdx, [rsp + 0x2f8]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, esi
mov edx, 0x40
cmp byte [rcx + 0x50], 0
je 0x140025cbb
mov byte [rcx + 0x50], 0
mov dword [rdx + rcx], eax
lea rcx, [rsp + 0x1c8]
call fcn.140003ae0
mov rcx, qword [rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 3
jb 0x14002650c
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140025cec
mov r9, qword [rbx]
mov qword [rsp + 0x30], 3
lea rax, [0x1401077c0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x1e8]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x1e8]
lea rdx, [rsp + 0x308]
call fcn.14001be40
mov rcx, qword [rax]
mov dword [rcx + 0x40], 0x3f800000
cmp byte [rcx + 0x50], 2
je 0x140025d3d
mov byte [rcx + 0x50], 2
lea rcx, [rsp + 0x1e8]
call fcn.140003ae0
mov rcx, qword [rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 0x11
jb 0x140026506
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140025d6b
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0x11
lea rax, [0x1401077c8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x208]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x208]
lea rdx, [rsp + 0x318]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, 0xc8
mov edx, 0x40
cmp byte [rcx + 0x50], 0
je 0x140025dbf
mov byte [rcx + 0x50], 0
mov dword [rcx + rdx], eax
lea rcx, [rsp + 0x208]
call fcn.140003ae0
mov rcx, qword ds:[rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 7
jb 0x1400264fe
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140025df7
mov r9, qword [rbx]
mov qword [rsp + 0x30], 7
lea rax, [0x140107998]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x228]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x228]
lea rdx, [rsp + 0x328]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x140025e46
mov byte [rcx + 0x50], 1
mov byte [rcx + rax], 0
lea rcx, [rsp + 0x228]
call fcn.140003ae0
mov rcx, qword [rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 0xc
jb 0x1400264f8
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140025e78
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0xc
lea rax, [0x1401079c8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x248]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x248]
lea rdx, [rsp + 0x338]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, 0xf
lea edx, [rax + 0x31]
cmp byte [rcx + 0x50], 0
je 0x140025eca
mov byte [rcx + 0x50], 0
mov dword [rcx + rdx], eax
lea rcx, [rsp + 0x248]
call fcn.140003ae0
mov rcx, qword [rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 0xf
jb 0x1400264f2
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140025efb
mov r9, qword [rbx]
mov qword ss:[rsp + 0x30], 0xf
lea rax, [0x1401079e0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x268]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x268]
lea rdx, [rsp + 0x348]
call fcn.14001be40
mov rcx, qword [rax]
mov dword [rcx + 0x40], 0x3f800000
cmp byte [rcx + 0x50], 2
je 0x140025f4f
mov byte [rcx + 0x50], 2
lea rcx, [rsp + 0x268]
call fcn.140003ae0
mov rcx, qword [rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 0x13
jb 0x1400264ec
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140025f7d
mov r9, qword [rbx]
mov qword ss:[rsp + 0x30], 0x13
lea rax, [0x140107bf0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x288]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x288]
lea rdx, [rsp + 0x358]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x140025fcd
mov byte [rcx + 0x50], 1
mov byte [rax + rcx], 0
lea rcx, [rsp + 0x288]
call fcn.140003ae0
mov rcx, qword [rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 0xc
jb 0x1400264e6
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140025fff
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0xc
lea rax, [0x140107b70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x80]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x368]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x14002604e
mov byte [rcx + 0x50], 1
mov byte [rax + rcx], 0
lea rcx, [rsp + 0x80]
call fcn.140003ae0
movaps xmm6, xmmword [0x140111cc0]
mov rcx, qword [rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 8
jb 0x1400264de
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140026087
mov r9, qword [rbx]
mov qword [rsp + 0x30], 8
lea rax, [0x140107b90]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x80]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x378]
call fcn.14001be40
mov rcx, qword [rax]
cmp byte [rcx + 0x50], 3
movups xmmword [rcx + 0x40], xmm6
je 0x1400260d6
mov byte [rcx + 0x50], 3
lea rcx, ds:[rsp + 0x80]
call fcn.140003ae0
mov rcx, qword [rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 0xb
jb 0x1400264d8
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140026106
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0xb
lea rax, [0x140107bb8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0xa8]
call fcn.14001d4c0
nop
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0x60]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, 0x40
cmp byte [rcx + 0x50], 1
je 0x140026157
mov byte [rcx + 0x50], 1
mov byte [rcx + rax], 0
lea rcx, [rsp + 0xa8]
call fcn.140003ae0
mov rcx, qword [rbx + 0x10]
mov rax, r14
sub rax, rcx
cmp rax, 9
jb 0x1400264d2
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140026189
mov r9, qword [rbx]
mov qword [rsp + 0x30], 9
lea rax, [0x140107be0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x3e0]
call fcn.14001d4c0
nop
lea r8, [rsp + 0x3e0]
lea rdx, [rsp + 0x3a0]
call fcn.14001be40
mov rcx, qword [rax]
mov eax, 5
lea edx, [rax + 0x3b]
cmp byte [rcx + 0x50], 0
je 0x1400261db
mov byte [rcx + 0x50], 0
mov dword [rcx + rdx], eax
lea rcx, [rsp + 0x3e0]
call fcn.140003ae0
add rbx, 0x20
cmp rbx, rdi
lea rdx, [0x14010717c]
jne 0x140025830
nop
call fcn.140079f00
lea rax, str.GrenadeToolKit.txt
mov qword [rsp + 0x390], rax
mov qword [rsp + 0x398], 0x12
call fcn.1400811e0
movaps xmm0, xmmword [rsp + 0x390]
movdqa xmmword [rsp + 0x390], xmm0
lea r8, [rsp + 0x390]
mov edx, eax
lea rcx, [rsp + 0x3a0]
call fcn.1400050a0
nop
lea rcx, [rsp + 0x3a0]
call fcn.1400065c0
movzx ebx, al
lea rcx, [rsp + 0x3a0]
call fcn.140003a60
test bl, bl
je 0x140026279
mov dword [0x140128128], 0x28
mov ecx, 8
call fcn.140081eb0
lea rcx, [0x140021680]
mov qword [rax], rcx
mov qword [rsp + 0x390], rax
lea rcx, [rsp + 0x3c8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x14001fe80]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x3c0], rax
test rax, rax
je 0x140026470
cmp dword [rsp + 0x3c8], 0
je 0x140026464
movaps xmm0, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x390], xmm0
lea rcx, [rsp + 0x390]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
nop word [rax + rax]
test eax, eax
jne 0x140026464
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x3c0], xmm0
lea rax, [rsp + 0x3e0]
mov qword [rsp + 0x390], rax
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rsp + 0x3e0], rax
lea rax, [0x1400143e0]
mov qword [rsp + 0x3e8], rax
lea rax, [rsp + 0x3e0]
mov qword [rsp + 0x418], rax
lea rax, [rsp + 0x3a0]
mov qword [rsp + 0x3c0], rax
movups xmmword [rsp + 0x3a0], xmm0
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x3b8], rsi
mov r8d, 7
lea rdx, str.SDL_app
lea rcx, [rsp + 0x3a0]
call fcn.140007180
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
mov r8d, 0x10
lea rdx, str.Counter_Strike_2
lea rcx, [rsp + 0x60]
call fcn.140007180
nop
lea r9, [rsp + 0x3e0]
lea r8, [rsp + 0x3a0]
lea rdx, [rsp + 0x60]
call fcn.140077920
nop
lea rax, vtable.std::wstring_convert_class_std::codecvt_utf8_wchar_t__1114111__0___wchar_t__class_std::allocator_wchar_t___class_std::allocator_char__.0
mov qword [rsp + 0x460], rax
lea rcx, [rsp + 0x4a0]
call fcn.140003a60
lea rcx, ds:[rsp + 0x480]
call fcn.140003ae0
mov rcx, qword [rsp + 0x478]
test rcx, rcx
je 0x14002642b
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x14002642b
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
xor eax, eax
mov rcx, qword [rsp + 0x600]
xor rcx, rsp
call fcn.140081d70
lea r11, [rsp + 0x620]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword ds:[rsp + 0x3c8], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rcx, [0x14010dee0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, 5
mov rcx, qword [0x140129d40]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, str.Failed_to_start_driver._Contact_Zapy_for_support._n_nIf_youd_like_to_fix_it_yourself__try_these_things:_n_Disable_your_antivirus_n_Disable_core_isolation_n_Uninstall_anticheats_like_Faceit_n_Update_windows_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003f80
mov ecx, 0xea60
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.1400045e0
int3
call fcn.1400045e0
int3
nop
call fcn.1400045e0
int3
call fcn.1400045e0
int3
call fcn.1400045e0
int3
call fcn.1400045e0
int3
call fcn.1400045e0
int3
nop
call fcn.1400045e0
int3
call fcn.1400045e0
int3
call fcn.1400045e0
int3
call fcn.1400045e0
int3
call fcn.1400045e0
int3
nop
call fcn.1400045e0
int3
call fcn.1400045e0
int3
call fcn.1400045e0
int3
call fcn.1400045e0
int3
call fcn.1400045e0
int3
nop
call fcn.1400045e0
int3
call fcn.1400045e0
int3