Function at 0x1400905b0
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x2e0
mov rax, qword [0x1401940c0]
xor rax, rsp
mov qword [rsp + 0x2d8], rax
xor r15d, r15d
mov dword [rsp + 0x48], r15d
cmp dword [0x14022ec90], r15d
jne 0x140090601
call fcn.1400910d0
test al, al
je 0x140090efa
xor edx, edx
mov r8d, 0xf8
lea rcx, [rsp + 0x180]
call fcn.140123830
lea rcx, [0x140000000]
lea rax, [rcx + 0x17a8e8]
mov qword [rsp + 0x180], rax
lea rax, [rcx + 0x17a840]
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x220], r15
mov qword [rsp + 0x228], r15
mov dword [rsp + 0x230], r15d
mov qword [rsp + 0x238], r15
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x240], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x250], xmm1
movdqa xmmword [rsp + 0x260], xmm0
mov byte [rsp + 0x270], r15b
mov dword [rsp + 0x48], 1
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rsp + 0x218], rax
mov dword [rsp + 0x214], 0x80
mov qword [rsp + 0x188], r15
xor r8d, r8d
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x218]
call fcn.14000f590
nop
mov rax, qword [rsp + 0x190]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x190], rax
mov rax, qword [rsp + 0x190]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x18c], edx
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_iostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x180], rax
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x20]
mov dword [rsp + rcx + 0x17c], edx
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x180], rax
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x17c], edx
lea rcx, [rsp + 0x198]
call fcn.14000f160
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0x198], rax
mov qword [rsp + 0x200], r15
mov dword [rsp + 0x208], r15d
lea rdx, str.HWID
lea rcx, [rsp + 0x190]
call fcn.140093190
mov edx, dword [0x14022ec90]
mov rcx, rax
call fcn.140091a20
mov rcx, rax
lea rdx, str.gamecsgo
call fcn.140093190
mov rcx, rax
lea rdx, [0x14017a650]
call fcn.140093190
mov rcx, rax
lea rdx, [0x140179264]
call fcn.140093190
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x158], xmm0
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x170], 0xf
mov byte [rsp + 0x158], 0
mov dword [rsp + 0x48], 0x21
xor eax, eax
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rax
mov rcx, r15
mov edx, dword [rsp + 0x208]
mov eax, edx
and al, 0x22
cmp al, 2
je 0x14009085a
mov rax, qword [rsp + 0x1d8]
mov rbx, qword [rax]
test rbx, rbx
je 0x14009085a
mov rax, qword [rsp + 0x1b8]
mov r9, qword [rax]
cmp rbx, qword [rsp + 0x200]
cmovb rbx, qword [rsp + 0x200]
sub rbx, r9
mov rcx, r9
jmp 0x140090898
test dl, 4
jne 0x1400908d1
mov rax, qword [rsp + 0x1d0]
mov rdx, qword [rax]
mov rbx, r15
test rdx, rdx
je 0x140090893
mov rax, qword [rsp + 0x1b0]
mov r9, qword [rax]
mov rax, qword [rsp + 0x1e8]
movsxd rbx, dword [rax]
add rbx, rdx
sub rbx, r9
mov rcx, r9
jmp 0x140090898
mov r9, qword [rsp + 0x68]
test rcx, rcx
je 0x1400908d1
lea rcx, [rsp + 0x158]
cmp rbx, 0xf
ja 0x1400908c8
mov qword [rsp + 0x168], rbx
mov r8, rbx
mov rdx, r9
call fcn.140123190
mov byte [rsp + rbx + 0x158], 0
jmp 0x1400908d1
mov rdx, rbx
call fcn.140011e20
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0xc8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xd8], xmm1
mov r8d, 0x2f
lea rdx, str.Content_Type:_application_x_www_form_urlencoded
lea rcx, [rsp + 0xc8]
call fcn.140003300
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xb8], xmm1
mov r12d, 0x14
mov r8d, r12d
lea rdx, str.auth_hwidAuthExtrim_
lea rcx, [rsp + 0xa8]
call fcn.140003300
nop
lea rax, [rsp + 0x158]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x20], rax
lea r9, [0x14022f000]
lea r8d, [r12 - 0x13]
lea rdx, [rsp + 0x280]
call fcn.14008fd40
nop
lea rcx, [rsp + 0xa8]
call fcn.14000e650
nop
lea rcx, [rsp + 0xc8]
call fcn.14000e650
nop
mov qword [rsp + 0xa0], r15
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x48]
call fcn.1400490c0
mov rdx, rax
movzx ecx, byte [0x14022eff0]
movzx eax, byte [rax]
mov byte [0x14022eff0], al
mov byte [rdx], cl
lea rcx, [rdx + 8]
mov rax, qword [0x14022eff8]
mov r8, qword [rcx]
mov qword [0x14022eff8], r8
mov qword [rcx], rax
movzx edx, byte [rdx]
call fcn.14000df20
nop
cmp byte [0x14022eff0], 1
sete dil
mov byte [rsp + 0x40], dil
mov r13, qword [0x14022eff8]
jne 0x140090c7e
mov r14, qword [r13]
mov rbx, qword [r14 + 8]
mov rsi, r14
mov r12d, 5
cmp byte [rbx + 0x19], 0
jne 0x140090a7a
nop
lea rcx, [rbx + 0x20]
mov rdi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140090a32
mov rcx, qword [rcx]
mov r8, rdi
cmp rdi, r12
cmova r8, r12
lea rdx, str.error
call fcn.140123c70
test eax, eax
je 0x140090a52
jns 0x140090a5d
mov al, 0xff
jmp 0x140090a5f
cmp rdi, r12
jae 0x140090a5b
mov al, 0xff
jmp 0x140090a5f
jbe 0x140090a69
mov al, 1
test al, al
jns 0x140090a69
mov rbx, qword [rbx + 0x10]
jmp 0x140090a6f
mov rsi, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140090a20
movzx edi, byte [rsp + 0x40]
cmp byte [rsi + 0x19], 0
jne 0x140090c78
lea rcx, [rsi + 0x20]
mov rbx, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140090a96
mov rcx, qword [rcx]
mov r8, rbx
cmp rbx, 5
cmova r8, r12
lea rdx, str.error
call fcn.140123c70
test eax, eax
je 0x140090ab7
jns 0x140090ac3
mov al, 0xff
jmp 0x140090ac5
cmp rbx, 5
jae 0x140090ac1
mov al, 0xff
jmp 0x140090ac5
jbe 0x140090acd
mov al, 1
test al, al
jg 0x140090c78
cmp rsi, r14
je 0x140090c78
test dil, dil
je 0x140090c57
mov rsi, r14
mov rbx, qword [r14 + 8]
mov r14d, 3
cmp byte [rbx + 0x19], 0
jne 0x140090b55
nop dword [rax]
nop word [rax + rax]
lea rcx, [rbx + 0x20]
mov rdi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140090b12
mov rcx, qword [rcx]
mov r8, rdi
cmp rdi, r14
cmova r8, r14
lea rdx, [0x14017a6a0]
call fcn.140123c70
test eax, eax
je 0x140090b32
jns 0x140090b3d
mov al, 0xff
jmp 0x140090b3f
cmp rdi, r14
jae 0x140090b3b
mov al, 0xff
jmp 0x140090b3f
jbe 0x140090b49
mov al, 1
test al, al
jns 0x140090b49
mov rbx, qword [rbx + 0x10]
jmp 0x140090b4f
mov rsi, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140090b00
cmp byte [rsi + 0x19], 0
jne 0x140090c57
lea rcx, [rsi + 0x20]
mov rbx, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140090b71
mov rcx, qword [rcx]
mov r8, rbx
cmp rbx, 3
cmova r8, r14
lea rdx, [0x14017a6a0]
call fcn.140123c70
test eax, eax
je 0x140090b92
jns 0x140090b9e
mov al, 0xff
jmp 0x140090ba0
cmp rbx, 3
jae 0x140090b9c
mov al, 0xff
jmp 0x140090ba0
jbe 0x140090ba8
mov al, 1
test al, al
jg 0x140090c57
cmp rsi, qword [r13]
je 0x140090c57
mov r9d, 0x20010
lea r8, [0x14017a678]
lea rdx, [0x14017a740]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, [0x14017a6a0]
lea rcx, [0x14022eff0]
call fcn.14000ff30
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
movdqa xmm1, xmmword [0x14017c350]
movdqu xmmword [rsp + 0x78], xmm1
mov byte [rsp + 0x68], 0
mov dword [rsp + 0x48], 0x51
cmp byte [rax], 3
jne 0x140090f2e
mov rdx, qword [rax + 8]
lea rcx, [rsp + 0x68]
call fcn.14000c7d0
lea r8, [rsp + 0x68]
cmp qword [rsp + 0x80], 0xf
cmova r8, qword [rsp + 0x68]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
nop
lea rcx, [rsp + 0x68]
call fcn.14000e650
jmp 0x140090ed1
mov r9d, 0x20010
lea r8, [0x14017a678]
lea rdx, [0x14017a6f8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x140090ed1
mov r12d, 0x14
lea rsi, [0x14022eff0]
mov qword [rsp + 0x68], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
movabs rax, 0x8000000000000000
mov qword [rsp + 0x80], rax
movzx ecx, byte [rsi]
mov edx, ecx
sub edx, 1
je 0x140090ce4
cmp edx, 1
je 0x140090cd5
sub ecx, 1
je 0x140090ce4
cmp ecx, 1
je 0x140090cd5
mov qword [rsp + 0x80], 1
jmp 0x140090cf0
mov rax, qword [rsi + 8]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x78], rcx
jmp 0x140090cf0
mov rax, qword [rsi + 8]
mov rcx, qword [rax]
mov qword [rsp + 0x70], rcx
test dil, dil
je 0x140090dbb
mov r13, qword [r13]
mov rbx, qword [r13 + 8]
mov r14, r13
cmp byte [rbx + 0x19], 0
jne 0x140090d67
nop word [rax + rax]
lea rcx, [rbx + 0x20]
mov rdi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140090d22
mov rcx, qword [rcx]
mov r8, rdi
cmp rdi, 0x14
cmova r8, r12
lea rdx, str.license_diff_minutes
call fcn.140123c70
test eax, eax
je 0x140090d43
jns 0x140090d4f
mov al, 0xff
jmp 0x140090d51
cmp rdi, 0x14
jae 0x140090d4d
mov al, 0xff
jmp 0x140090d51
jbe 0x140090d5b
mov al, 1
test al, al
jns 0x140090d5b
mov rbx, qword [rbx + 0x10]
jmp 0x140090d61
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140090d10
cmp byte [r14 + 0x19], 0
jne 0x140090db3
lea rcx, [r14 + 0x20]
mov rbx, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140090d80
mov rcx, qword [rcx]
mov r8, rbx
cmp rbx, 0x14
cmova r8, r12
lea rdx, str.license_diff_minutes
call fcn.140123c70
test eax, eax
je 0x140090da1
jns 0x140090dad
mov al, 0xff
jmp 0x140090daf
cmp rbx, 0x14
jae 0x140090dab
mov al, 0xff
jmp 0x140090daf
jbe 0x140090db6
mov al, 1
test al, al
jle 0x140090db6
mov r14, r13
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x48], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
movabs rax, 0x8000000000000000
mov qword [rsp + 0x60], rax
movzx ecx, byte [rsi]
mov edx, ecx
sub edx, 1
je 0x140090e14
cmp edx, 1
je 0x140090e05
sub ecx, 1
je 0x140090e14
cmp ecx, 1
je 0x140090e05
mov qword [rsp + 0x60], 1
jmp 0x140090e20
mov rax, qword [rsi + 8]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x58], rcx
jmp 0x140090e20
mov rax, qword [rsi + 8]
mov rcx, qword [rax]
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x68]
call fcn.14001ad30
test al, al
je 0x140090ea4
lea rdx, str.license_diff_minutes
mov rcx, rsi
call fcn.14000ff30
movzx edx, byte [rax]
mov r8d, edx
sub r8d, 5
je 0x140090e80
sub r8d, 1
je 0x140090e70
cmp r8d, 1
jne 0x140090f89
add rax, 8
cmp dl, 7
cmovne rax, r15
cvttsd2si rcx, qword [rax]
jmp 0x140090e8f
add rax, 8
cmp dl, 6
cmovne rax, r15
mov rcx, qword [rax]
jmp 0x140090e8f
sub dl, 5
cmp dl, 1
ja 0x140090e8c
lea r15, [rax + 8]
mov rcx, qword [r15]
cmp byte [0x14022ebd8], 0
jne 0x140090ea4
test rcx, rcx
jns 0x140090ea4
mov byte [0x14022ebd8], 1
lea rcx, [rsp + 0x280]
call fcn.14000e650
nop
lea rcx, [rsp + 0x158]
call fcn.14000e650
nop
lea rcx, [rsp + 0x180]
call fcn.140090fe0
mov al, 1
jmp 0x140090efc
lea rcx, [rsp + 0x280]
call fcn.14000e650
nop
lea rcx, [rsp + 0x158]
call fcn.14000e650
nop
lea rcx, [rsp + 0x180]
call fcn.140090fe0
xor al, al
mov rcx, qword [rsp + 0x2d8]
xor rcx, rsp
call fcn.1400f1a50
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov rcx, rax
call fcn.14000e480
mov rdx, rax
lea rcx, [rsp + 0xc8]
call fcn.1400032c0
nop
mov r8, rax
lea rdx, str.type_must_be_string__but_is
lea rcx, [rsp + 0xa8]
call fcn.14000fd00
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0xe8]
call fcn.140010e20
lea rdx, [0x140192830]
lea rcx, [rsp + 0xe8]
call fcn.1400f3dd4
nop
mov rcx, rax
call fcn.14000e480
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.1400032c0
nop
mov r8, rax
lea rdx, str.type_must_be_number__but_is
lea rcx, [rsp + 0x48]
call fcn.14000fd00
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x120]
call fcn.140010e20
lea rdx, [0x140192830]
lea rcx, [rsp + 0x120]
call fcn.1400f3dd4
int3