Function at 0x14000f440
Capabilities:
Create process on windows
Create process suspended
Read .ini file
Resume thread
Set environment variable
Terminate process

Disassembly:
push rbp
push rbx
push rdi
push r13
lea rbp, [rsp - 0x8388]
mov eax, 0x8488
call fcn.140015a60
sub rsp, rax
mov rax, qword [0x14004d140]
xor rax, rsp
mov qword [rbp + 0x8370], rax
xor ebx, ebx
mov qword [rsp + 0x58], r8
cmp qword [0x14005e6a0], 7
lea rdi, [0x14005e688]
mov rcx, rdi
cmova rcx, qword [0x14005e688]
call fcn.140013270
lea r13, [0x14005e668]
mov rcx, r13
call fcn.140012b60
test al, al
jne 0x14000f542
mov rcx, qword [0x14005e698]
movabs rbx, 0x7ffffffffffffffe
sub rbx, rcx
cmp rbx, 0x26
jb 0x140011b1e
cmp qword [0x14005e6a0], 7
lea r9, str.Couldnt_find_the_configuration_file:
movzx edx, byte [rsp + 0x50]
mov rax, rdi
cmova rax, qword [0x14005e688]
mov r8, rdi
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x26
call fcn.140004be0
lea rcx, [rbp + 0x20]
call fcn.140007e50
lea rcx, [rbp + 0x20]
call fcn.1400088d0
mov r9d, 0x10
lea r8, [0x14003a5d0]
lea rdx, str.Couldnt_find_the_configuration_file_ColdClientLoader.ini.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.140007e50
mov eax, 1
jmp 0x140011af6
lea rcx, [rbp + 0x20]
call fcn.140011c50
xor r9d, r9d
lea r8, str.SteamClientDll
lea rdx, str.SteamClient
mov rdi, rax
lea rcx, [rbp]
call fcn.14000bbc0
mov r8, rdi
lea rcx, [rbp + 0x180]
mov rdx, rax
call fcn.140012f00
mov rdx, rax
lea rcx, [0x14004d010]
call fcn.140005d50
lea rcx, [rbp + 0x180]
call fcn.1400088d0
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x14000f5d5
mov rcx, qword [rbp]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f5d0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b24
call fcn.140015708
mov rdx, qword [rbp + 0x38]
movdqa xmm0, xmmword [0x14003b490]
mov word [rbp], bx
movdqu xmmword [rbp + 0x10], xmm0
cmp rdx, 7
jbe 0x14000f626
mov rcx, qword [rbp + 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f621
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b24
call fcn.140015708
lea rcx, [rbp + 0x20]
call fcn.140011c50
xor r9d, r9d
lea r8, str.SteamClient64Dll
lea rdx, str.SteamClient
mov rdi, rax
lea rcx, [rbp + 0x60]
call fcn.14000bbc0
mov r8, rdi
lea rcx, [rbp]
mov rdx, rax
call fcn.140012f00
mov rdx, rax
lea rcx, [0x14004d030]
call fcn.140005d50
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x14000f6aa
mov rcx, qword [rbp]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f6a5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b2a
call fcn.140015708
mov rdx, qword [rbp + 0x78]
movdqa xmm0, xmmword [0x14003b490]
mov word [rbp], bx
movdqu xmmword [rbp + 0x10], xmm0
cmp rdx, 7
jbe 0x14000f6fb
mov rcx, qword [rbp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f6f6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b2a
call fcn.140015708
mov rdx, qword [rbp + 0x38]
movdqa xmm0, xmmword [0x14003b490]
mov word [rbp + 0x60], bx
movdqu xmmword [rbp + 0x70], xmm0
cmp rdx, 7
jbe 0x14000f74c
mov rcx, qword [rbp + 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f747
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b2a
call fcn.140015708
lea rcx, [rbp + 0x20]
call fcn.140011c50
xor r9d, r9d
lea r8, [0x14003a668]
lea rdx, str.SteamClient
mov rdi, rax
lea rcx, [rbp]
call fcn.14000bbc0
mov r8, rdi
lea rcx, [rbp + 0x100]
mov rdx, rax
call fcn.140012f00
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x14000f7c4
mov rcx, qword [rbp]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f7bf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b30
call fcn.140015708
mov rdx, qword [rbp + 0x38]
movdqa xmm0, xmmword [0x14003b490]
mov word [rbp], bx
movdqu xmmword [rbp + 0x10], xmm0
cmp rdx, 7
jbe 0x14000f815
mov rcx, qword [rbp + 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f810
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b30
call fcn.140015708
lea rcx, [rbp + 0x20]
call fcn.140011c50
xor r9d, r9d
lea r8, str.ExeRunDir
lea rdx, str.SteamClient
mov rdi, rax
lea rcx, [rbp]
call fcn.14000bbc0
mov r8, rdi
lea rcx, [rbp + 0xe0]
mov rdx, rax
call fcn.140012f00
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x14000f88d
mov rcx, qword [rbp]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f888
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b36
call fcn.140015708
mov rdx, qword [rbp + 0x38]
movdqa xmm0, xmmword [0x14003b490]
mov word [rbp], bx
movdqu xmmword [rbp + 0x10], xmm0
cmp rdx, 7
jbe 0x14000f8de
mov rcx, qword [rbp + 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f8d9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b36
call fcn.140015708
mov qword [rsp + 0x84b0], rsi
mov ecx, 0x10025
mov qword [rsp + 0x84b8], r12
mov qword [rsp + 0x84c8], r14
mov qword [rsp + 0x8480], r15
call fcn.1400156cc
test rax, rax
je 0x140011b18
lea rbx, [rax + 0x27]
xor edx, edx
and rbx, 0xffffffffffffffe0
mov r8d, 0xfffe
mov rcx, rbx
mov qword [rbp + 0x40], rbx
lea r14, [rbx + 0xfffe]
mov qword [rbx - 8], rax
mov qword [rbp + 0x50], r14
call fcn.140037120
cmp qword [0x14005e680], 7
lea rdx, str.ExeCommandLine
mov rax, r13
mov qword [rbp + 0x48], r14
cmova rax, qword [0x14005e668]
lea rcx, str.SteamClient
mov qword [rsp + 0x28], rax
mov r9, rbx
xor r8d, r8d
mov dword [rsp + 0x20], 0x7fff
mov rsi, r14
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov r15d, 3
mov r12d, r15d
cmp eax, 0x7ffe
jne 0x14000fa4c
test r12d, r12d
jle 0x14000fa4c
mov rcx, rsi
sub rcx, rbx
sar rcx, 1
lea rdi, [rcx + rcx]
cmp rdi, rcx
jae 0x14000f9b2
lea rsi, [rbx + rdi*2]
jmp 0x14000f9f7
jbe 0x14000f9fb
mov rax, r14
sub rax, rbx
sar rax, 1
cmp rdi, rax
jbe 0x14000f9e1
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp + 0x40]
call fcn.1400032f0
mov r14, qword [rbp + 0x50]
mov rsi, qword [rbp + 0x48]
mov rbx, qword [rbp + 0x40]
jmp 0x14000f9fb
sub rdi, rcx
xor edx, edx
add rdi, rdi
mov rcx, rsi
mov r8, rdi
call fcn.140037120
add rsi, rdi
mov qword [rbp + 0x48], rsi
cmp qword [0x14005e680], 7
lea rdx, str.ExeCommandLine
mov rax, r13
lea rcx, str.SteamClient
cmova rax, qword [0x14005e668]
mov rdi, rsi
mov qword [rsp + 0x28], rax
sub rdi, rbx
sar rdi, 1
mov r9, rbx
xor r8d, r8d
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ecx, eax
dec r12d
lea rdx, [rdi - 1]
cmp rcx, rdx
je 0x14000f991
xorps xmm0, xmm0
mov r8d, eax
xor r12d, r12d
lea rcx, [rbp + 0x120]
mov rdx, rbx
mov qword [rbp + 0x130], r12
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x138], r12
call fcn.140001a30
test rbx, rbx
je 0x14000fab7
sub r14, rbx
mov rax, rbx
sar r14, 1
add r14, r14
cmp r14, 0x1000
jb 0x14000faac
mov rbx, qword [rbx - 8]
add r14, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b18
mov rdx, r14
mov rcx, rbx
call fcn.140015708
xor r9d, r9d
lea r8, str.AppId
lea rdx, str.SteamClient
lea rcx, [rbp + 0xa0]
call fcn.14000bbc0
mov ecx, 0x10025
call fcn.1400156cc
test rax, rax
je 0x140011b18
lea rbx, [rax + 0x27]
xor edx, edx
and rbx, 0xffffffffffffffe0
mov r8d, 0xfffe
mov rcx, rbx
mov qword [rbp + 0x40], rbx
lea r14, [rbx + 0xfffe]
mov qword [rbx - 8], rax
mov qword [rbp + 0x50], r14
call fcn.140037120
cmp qword [0x14005e680], 7
lea rdx, str.ForceInjectSteamClient
mov rax, r13
mov qword [rbp + 0x48], r14
cmova rax, qword [0x14005e668]
lea rcx, str.Injection
mov qword [rsp + 0x28], rax
mov r9, rbx
xor r8d, r8d
mov dword [rsp + 0x20], 0x7fff
mov rsi, r14
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
cmp eax, 0x7ffe
jne 0x14000fc1b
nop
test r15d, r15d
jle 0x14000fc1b
mov rcx, rsi
sub rcx, rbx
sar rcx, 1
lea rdi, [rcx + rcx]
cmp rdi, rcx
jae 0x14000fb81
lea rsi, [rbx + rdi*2]
jmp 0x14000fbc6
jbe 0x14000fbca
mov rax, r14
sub rax, rbx
sar rax, 1
cmp rdi, rax
jbe 0x14000fbb0
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp + 0x40]
call fcn.1400032f0
mov r14, qword [rbp + 0x50]
mov rsi, qword [rbp + 0x48]
mov rbx, qword [rbp + 0x40]
jmp 0x14000fbca
sub rdi, rcx
xor edx, edx
add rdi, rdi
mov rcx, rsi
mov r8, rdi
call fcn.140037120
add rsi, rdi
mov qword [rbp + 0x48], rsi
cmp qword [0x14005e680], 7
lea rdx, str.ForceInjectSteamClient
mov rax, r13
lea rcx, str.Injection
cmova rax, qword [0x14005e668]
mov rdi, rsi
mov qword [rsp + 0x28], rax
sub rdi, rbx
sar rdi, 1
mov r9, rbx
xor r8d, r8d
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ecx, eax
dec r15d
lea rdx, [rdi - 1]
cmp rcx, rdx
je 0x14000fb60
xorps xmm0, xmm0
mov r8d, eax
mov rdx, rbx
mov qword [rbp + 0x170], r12
lea rcx, [rbp + 0x160]
mov qword [rbp + 0x178], r12
movups xmmword [rbp + 0x160], xmm0
call fcn.140001a30
test rbx, rbx
je 0x14000fc83
sub r14, rbx
mov rax, rbx
sar r14, 1
add r14, r14
cmp r14, 0x1000
jb 0x14000fc78
mov rbx, qword [rbx - 8]
add r14, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b18
mov rdx, r14
mov rcx, rbx
call fcn.140015708
lea rcx, [rbp + 0x60]
call fcn.140011c50
xor r9d, r9d
lea r8, str.DllsToInjectFolder
lea rdx, str.Injection
mov rdi, rax
lea rcx, [rbp]
call fcn.14000bbc0
mov r8, rdi
lea rcx, [rbp + 0x140]
mov rdx, rax
call fcn.140012f00
mov r8, qword [rbp + 0x18]
cmp r8, 7
jbe 0x14000fcd2
mov rdx, qword [rbp]
lea rcx, [rbp]
call fcn.140006b40
mov r8, qword [rbp + 0x78]
movdqa xmm0, xmmword [0x14003b490]
mov word [rbp], r12w
movdqu xmmword [rbp + 0x10], xmm0
cmp r8, 7
jbe 0x14000fcfb
mov rdx, qword [rbp + 0x60]
lea rcx, [rbp + 0x60]
call fcn.140006b40
lea r13, [0x140039f90]
mov r9, r13
lea r8, str.IgnoreInjectionError
lea rdx, str.Injection
lea rcx, [rbp + 0x1a0]
call fcn.14000bbc0
lea rbx, [0x14003a754]
mov r9, rbx
lea r8, [0x14003a758]
lea rdx, str.Injection
lea rcx, [rbp + 0x1e0]
call fcn.14000bbc0
mov r9, rbx
lea r8, str.Mode
lea rdx, str.Persistence
lea rcx, [rbp + 0x80]
call fcn.14000bbc0
xor r9d, r9d
lea r8, str.ResumeByDebugger
lea rdx, str.Debug
lea rcx, [rbp + 0x1c0]
call fcn.14000bbc0
lea rcx, [rbp + 0x160]
call fcn.14000e290
lea rcx, [rbp + 0x1a0]
call fcn.14000e290
lea rcx, [rbp + 0x1e0]
call fcn.14000e290
lea rcx, [rbp + 0x1c0]
call fcn.14000e290
mov r9, qword [rbp + 0x98]
lea r8, [rbp + 0x80]
mov r10, qword [rbp + 0x80]
lea r15, [0x14003a7ec]
mov rcx, qword [rbp + 0x90]
cmp r9, 7
mov r14d, 1
cmova r8, r10
cmp rcx, r14
jne 0x14000fe0d
mov rdi, rcx
mov rdx, rbx
test rcx, rcx
je 0x14000feb3
sub r8, rbx
movzx eax, word [rdx + r8]
cmp ax, word [rdx]
jne 0x14000fe0d
add rdx, 2
sub rdi, r14
jne 0x14000fdf5
jmp 0x14000feb3
cmp r9, 7
lea r8, [rbp + 0x80]
cmova r8, r10
cmp rcx, r14
jne 0x14000fe48
mov rdi, rcx
mov rdx, r13
test rcx, rcx
je 0x14000feb3
sub r8, r13
movzx eax, word [r8 + rdx]
cmp ax, word [rdx]
jne 0x14000fe48
add rdx, 2
sub rdi, r14
jne 0x14000fe33
jmp 0x14000feb3
cmp r9, 7
lea rdi, [rbp + 0x80]
cmova rdi, r10
cmp rcx, r14
jne 0x14000fe7b
mov rdx, r15
test rcx, rcx
je 0x14000feb3
sub rdi, r15
movzx eax, word [rdi + rdx]
cmp ax, word [rdx]
jne 0x14000fe7b
add rdx, 2
sub rcx, r14
jne 0x14000fe67
jmp 0x14000feb3
cmp r9, r14
jb 0x14000fe9e
cmp r9, 7
mov qword [rbp + 0x90], r14
lea rax, [rbp + 0x80]
cmova rax, r10
mov dword [rax], 0x30
jmp 0x14000feb3
mov r9, rbx
lea rcx, [rbp + 0x80]
xor r8d, r8d
mov rdx, r14
call fcn.140002280
mov rcx, qword [rbp + 0x110]
movabs rbx, 0x7ffffffffffffffe
mov rax, rbx
sub rax, rcx
cmp rax, 0x12
jb 0x140011b3c
cmp qword [rbp + 0x118], 7
lea rax, [rbp + 0x100]
movzx edx, byte [rsp + 0x50]
lea r9, [0x14003a7f0]
cmova rax, qword [rbp + 0x100]
lea r8, [rbp + 0x100]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x12
call fcn.140004be0
lea rcx, [rbp]
call fcn.140007e50
mov r8, qword [rbp + 0x18]
cmp r8, 7
jbe 0x14000ff3a
mov rdx, qword [rbp]
lea rcx, [rbp]
call fcn.140006b40
mov rcx, qword [rbp + 0xf0]
mov rax, rbx
sub rax, rcx
cmp rax, 0x18
jb 0x140011b42
cmp qword [rbp + 0xf8], 7
lea rax, [rbp + 0xe0]
movzx edx, byte [rsp + 0x50]
lea r9, str.SteamClient::ExeRunDir:
cmova rax, qword [rbp + 0xe0]
lea r8, [rbp + 0xe0]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x18
call fcn.140004be0
lea rcx, [rbp]
call fcn.140007e50
mov r8, qword [rbp + 0x18]
cmp r8, 7
jbe 0x14000ffb7
mov rdx, qword [rbp]
lea rcx, [rbp]
call fcn.140006b40
mov rcx, qword [rbp + 0x130]
mov rax, rbx
sub rax, rcx
cmp rax, 0x1d
jb 0x140011b48
cmp qword [rbp + 0x138], 7
lea rax, [rbp + 0x120]
movzx edx, byte [rsp + 0x50]
lea r9, str.SteamClient::ExeCommandLine:
cmova rax, qword [rbp + 0x120]
lea r8, [rbp + 0x120]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x1d
call fcn.140004be0
lea rcx, [rbp]
call fcn.140007e50
mov r8, qword [rbp + 0x18]
cmp r8, 7
jbe 0x140010034
mov rdx, qword [rbp]
lea rcx, [rbp]
call fcn.140006b40
mov rcx, qword [rbp + 0xb0]
mov rax, rbx
sub rax, rcx
cmp rax, 0x14
jb 0x140011b4e
cmp qword [rbp + 0xb8], 7
lea rax, [rbp + 0xa0]
movzx edx, byte [rsp + 0x50]
lea r9, str.SteamClient::AppId:
cmova rax, qword [rbp + 0xa0]
lea r8, [rbp + 0xa0]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x14
call fcn.140004be0
lea rcx, [rbp]
call fcn.140007e50
mov r8, qword [rbp + 0x18]
cmp r8, 7
jbe 0x1400100b1
mov rdx, qword [rbp]
lea rcx, [rbp]
call fcn.140006b40
mov rcx, qword [0x14004d020]
mov rax, rbx
sub rax, rcx
cmp rax, 0x1a
jb 0x140011b54
cmp qword [0x14004d028], 7
lea rax, [0x14004d010]
movzx edx, byte [rsp + 0x50]
lea r9, str.SteamClient::SteamClient:
cmova rax, qword [0x14004d010]
lea r8, [0x14004d010]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x1a
call fcn.140004be0
lea rcx, [rbp]
call fcn.140007e50
mov r8, qword [rbp + 0x18]
cmp r8, 7
jbe 0x14001012e
mov rdx, qword [rbp]
lea rcx, [rbp]
call fcn.140006b40
mov rcx, qword [0x14004d040]
mov rax, rbx
sub rax, rcx
cmp rax, 0x1f
jb 0x140011b5a
cmp qword [0x14004d048], 7
lea rax, [0x14004d030]
movzx edx, byte [rsp + 0x50]
lea r9, str.SteamClient::SteamClient64Dll:
cmova rax, qword [0x14004d030]
lea r8, [0x14004d030]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x1f
call fcn.140004be0
lea rcx, [rbp + 0x20]
call fcn.140007e50
lea rcx, [rbp + 0x20]
call fcn.1400088d0
mov rcx, qword [rbp + 0x90]
mov rax, rbx
sub rax, rcx
cmp rax, 0x1d
jb 0x140011b60
cmp qword [rbp + 0x98], 7
lea rax, [rbp + 0x80]
movzx edx, byte [rsp + 0x50]
lea r9, str.SteamClient::PersistentMode:
cmova rax, qword [rbp + 0x80]
lea r8, [rbp + 0x80]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x1d
call fcn.140004be0
lea rcx, [rbp + 0x20]
call fcn.140007e50
lea rcx, [rbp + 0x20]
call fcn.1400088d0
mov rcx, qword [rbp + 0x170]
mov rax, rbx
sub rax, rcx
cmp rax, 0x25
jb 0x140011b66
cmp qword [rbp + 0x178], 7
lea rax, [rbp + 0x160]
movzx edx, byte [rsp + 0x50]
lea r9, str.SteamClient::ForceInjectSteamClient:
cmova rax, qword [rbp + 0x160]
lea r8, [rbp + 0x160]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x25
call fcn.140004be0
lea rcx, [rbp + 0x20]
call fcn.140007e50
lea rcx, [rbp + 0x20]
call fcn.1400088d0
mov rcx, qword [rbp + 0x150]
mov rax, rbx
sub rax, rcx
cmp rax, 0x1f
jb 0x140011b6c
cmp qword [rbp + 0x158], 7
lea rax, [rbp + 0x140]
movzx edx, byte [rsp + 0x50]
lea r9, str.Injection::DllsToInjectFolder:
cmova rax, qword [rbp + 0x140]
lea r8, [rbp + 0x140]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x1f
call fcn.140004be0
lea rcx, [rbp + 0x20]
call fcn.140007e50
lea rcx, [rbp + 0x20]
call fcn.1400088d0
mov rcx, qword [rbp + 0x1b0]
mov rax, rbx
sub rax, rcx
cmp rax, 0x21
jb 0x140011b72
cmp qword [rbp + 0x1b8], 7
lea rax, [rbp + 0x1a0]
movzx edx, byte [rsp + 0x50]
lea r9, str.Injection::IgnoreInjectionError:
cmova rax, qword [rbp + 0x1a0]
lea r8, [rbp + 0x1a0]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x21
call fcn.140004be0
lea rcx, [rbp + 0x20]
call fcn.140007e50
lea rcx, [rbp + 0x20]
call fcn.1400088d0
mov rcx, qword [rbp + 0x1f0]
mov rax, rbx
sub rax, rcx
cmp rax, 0x27
jb 0x140011b78
cmp qword [rbp + 0x1f8], 7
lea rax, [rbp + 0x1e0]
movzx edx, byte [rsp + 0x50]
lea r9, str.Injection::IgnoreLoaderArchDifference:
cmova rax, qword [rbp + 0x1e0]
lea r8, [rbp + 0x1e0]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x27
call fcn.140004be0
lea rcx, [rbp + 0x20]
call fcn.140007e50
lea rcx, [rbp + 0x20]
call fcn.1400088d0
mov rcx, qword [rbp + 0x1d0]
mov rax, rbx
sub rax, rcx
cmp rax, 0x19
jb 0x140011b7e
cmp qword [rbp + 0x1d8], 7
lea rax, [rbp + 0x1c0]
movzx edx, byte [rsp + 0x50]
lea r9, str.Debug::ResumeByDebugger:
cmova rax, qword [rbp + 0x1c0]
lea r8, [rbp + 0x1c0]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x19
call fcn.140004be0
lea rcx, [rbp + 0x20]
call fcn.140007e50
lea rcx, [rbp + 0x20]
call fcn.1400088d0
lea rcx, [0x14004d030]
call fcn.140012b60
test al, al
jne 0x14001045f
lea rcx, str.Couldnt_find_the_requested_SteamClient64Dll
call fcn.1400134d0
lea rdx, str.Couldnt_find_the_requested_SteamClient64Dll.
jmp 0x1400106cc
lea rcx, [0x14004d010]
call fcn.140012b60
test al, al
jne 0x140010487
lea rcx, str.Couldnt_find_the_requested_SteamClientDll
call fcn.1400134d0
lea rdx, str.Couldnt_find_the_requested_SteamClientDll.
jmp 0x1400106cc
lea rcx, [rbp + 0x100]
call fcn.140012b60
test al, al
jne 0x1400104af
lea rcx, str.Couldnt_find_the_requested_Exe_file
call fcn.1400134d0
lea rdx, str.Couldnt_find_the_requested_Exe_file.
jmp 0x1400106cc
cmp qword [rbp + 0xf0], r12
jne 0x1400106a9
cmp qword [rbp + 0x118], 7
lea rdx, [rbp + 0x100]
mov r8, qword [rbp + 0x110]
lea rcx, [rbp + 0x200]
cmova rdx, qword [rbp + 0x100]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x200], xmm0
movdqu xmmword [rbp + 0x210], xmm1
call fcn.140001a30
mov rax, qword [rbp + 0x210]
lea rsi, [rbp + 0x200]
cmp qword [rbp + 0x218], 7
cmova rsi, qword [rbp + 0x200]
mov rcx, rsi
lea rdi, [rsi + rax*2]
mov rdx, rdi
call fcn.140006dd0
cmp rax, rdi
je 0x14001059c
nop dword [rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14001053f
cmp cx, 0x2f
jne 0x140010548
add rax, 2
cmp rax, rdi
jne 0x140010530
cmp rax, rdi
je 0x14001059c
nop dword [rax]
movzx ecx, word [rdi - 2]
lea rdx, [rdi - 2]
cmp cx, 0x5c
je 0x14001056e
cmp cx, 0x2f
je 0x14001056e
mov rdi, rdx
cmp rax, rdx
jne 0x140010550
jmp 0x14001059c
cmp rax, rdi
je 0x14001059c
nop dword [rax]
nop word [rax + rax]
movzx ecx, word [rdi - 2]
lea rdx, [rdi - 2]
cmp cx, 0x5c
je 0x140010594
cmp cx, 0x2f
jne 0x14001059c
mov rdi, rdx
cmp rax, rdx
jne 0x140010580
xorps xmm0, xmm0
lea rcx, [rbp + 0x60]
xorps xmm1, xmm1
sub rdi, rsi
sar rdi, 1
mov rdx, rsi
mov r8, rdi
movups xmmword [rbp + 0x60], xmm0
movdqu xmmword [rbp + 0x70], xmm1
call fcn.140001a30
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.140004880
mov r8, qword [rbp + 0xf8]
cmp r8, 7
jbe 0x1400105ed
mov rdx, qword [rbp + 0xe0]
lea rcx, [rbp + 0xe0]
call fcn.140006b40
movups xmm0, xmmword [rbp + 0x20]
mov r8, qword [rbp + 0x78]
movups xmm1, xmmword [rbp + 0x30]
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm1
cmp r8, 7
jbe 0x14001061a
mov rdx, qword [rbp + 0x60]
lea rcx, [rbp + 0x60]
call fcn.140006b40
mov r8, qword [rbp + 0x218]
cmp r8, 7
jbe 0x14001063a
mov rdx, qword [rbp + 0x200]
lea rcx, [rbp + 0x200]
call fcn.140006b40
mov rcx, qword [rbp + 0xf0]
mov rax, rbx
sub rax, rcx
cmp rax, 0x16
jb 0x140011b84
cmp qword [rbp + 0xf8], 7
lea rax, [rbp + 0xe0]
movzx edx, byte [rsp + 0x50]
lea r9, str.Setting_ExeRunDir_to:
cmova rax, qword [rbp + 0xe0]
lea r8, [rbp + 0xe0]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x16
call fcn.140004be0
lea rcx, [rbp + 0x20]
call fcn.140007e50
lea rcx, [rbp + 0x20]
call fcn.1400088d0
lea rcx, [rbp + 0xe0]
call fcn.140012a00
test al, al
jne 0x1400106eb
lea rcx, str.Couldnt_find_the_requested_Exe_run_dir
call fcn.1400134d0
lea rdx, str.Couldnt_find_the_requested_Exe_run_dir.
mov r9d, 0x10
lea r8, [0x14003a5d0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.140007e50
jmp 0x1400117b0
cmp qword [rbp + 0x150], 0
je 0x140010731
lea rcx, [rbp + 0x140]
call fcn.140012a00
movzx r12d, al
test al, al
jne 0x140010731
lea rcx, str.Couldnt_find_the_requested_folder_of_dlls_to_inject
call fcn.1400134d0
mov r9d, 0x10
lea r8, [0x14003a5d0]
lea rdx, str.Couldnt_find_the_requested_folder_of_dlls_to_inject.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rdx, [rbp + 0x100]
lea rcx, [rsp + 0x70]
call fcn.14000bdf0
mov rdi, qword [rsp + 0x70]
cmp rdi, qword [rsp + 0x78]
jne 0x140010766
lea rcx, str.Couldnt_read_the_exe_header
call fcn.1400134d0
lea rdx, str.Couldnt_read_the_exe_header.
jmp 0x1400109a6
mov rcx, rdi
call fcn.140012380
mov rcx, rdi
movzx esi, al
call fcn.1400123b0
test sil, sil
jne 0x14001098b
test al, al
je 0x140010993
lea rax, str.Detected_exe_arch:_x64
test sil, sil
lea rcx, str.Detected_exe_arch:_x32
cmove rcx, rax
call fcn.1400134d0
cmp byte [0x14005e644], 0
lea rax, str.Detected_loader_arch:_x64
lea rcx, str.Detected_loader_arch:_x32
cmove rcx, rax
call fcn.1400134d0
cmp byte [0x14005e644], sil
je 0x1400107fa
lea rcx, str.Arch_of_loader_and_requested_exe_are_different__it_is_advised_to_use_the_appropriate_one
call fcn.1400134d0
cmp qword [rbp + 0x1f0], 0
jne 0x1400107fa
xor r9d, r9d
lea r8, [0x14003a5d0]
lea rdx, str.Arch_of_loader_and_requested_exe_are_different__nit_is_advised_to_use_the_appropriate_one.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [0x14005e6a8]
test r12b, r12b
je 0x140010af7
xorps xmm0, xmm0
lea r9, [rbp + 0xc0]
xor r12d, r12d
lea rdx, [rbp + 0x140]
mov eax, 7
mov qword [rbp + 0xd0], r12
movups xmmword [rbp + 0xc0], xmm0
movzx r8d, sil
mov word [rbp + 0xc0], r12w
lea rcx, [rbp + 0x40]
mov qword [rbp + 0xd8], rax
call fcn.1400093e0
lea rcx, [0x14005e6a8]
mov rdi, rax
cmp rcx, rax
je 0x14001088c
call fcn.140008840
mov rcx, qword [rdi]
mov qword [0x14005e6a8], rcx
mov rcx, qword [rdi + 8]
mov qword [0x14005e6b0], rcx
mov rcx, qword [rdi + 0x10]
mov qword [0x14005e6b8], rcx
mov qword [rdi], r12
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
lea rcx, [rbp + 0x40]
call fcn.140008840
mov rcx, qword [rbp + 0xd0]
test rcx, rcx
je 0x1400109c5
cmp qword [rbp + 0x1b0], r12
jne 0x1400109c5
mov rax, rbx
sub rax, rcx
cmp rax, 0x27
jb 0x140011b8a
cmp qword [rbp + 0xd8], 7
lea rax, [rbp + 0xc0]
movzx edx, byte [rsp + 0x50]
lea r9, str.The_following_dlls_cannot_be_injected:_n
cmova rax, qword [rbp + 0xc0]
lea r8, [rbp + 0xc0]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x27
call fcn.140004be0
lea r8, str._nContinue__
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x180]
call fcn.140001720
cmp qword [rax + 0x18], 7
jbe 0x140010929
mov rax, qword [rax]
mov r9d, 4
lea r8, str.ColdClientLoader
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, [rbp + 0x180]
mov edi, eax
call fcn.1400088d0
lea rcx, [rbp + 0x20]
call fcn.1400088d0
cmp edi, 6
je 0x1400109c5
call fcn.140007e50
mov r8, qword [rbp + 0xd8]
cmp r8, 7
jbe 0x1400117a3
mov rdx, qword [rbp + 0xc0]
lea rcx, [rbp + 0xc0]
call fcn.140006b40
jmp 0x1400117a3
test al, al
je 0x14001078a
lea rcx, str.The_requested_exe_is_invalid__neither_32_nor_64_bit_
call fcn.1400134d0
lea rdx, str.The_requested_exe_is_invalid__neither_32_nor_64_bit_
mov r9d, 0x10
lea r8, [0x14003a5d0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.140007e50
jmp 0x1400117a3
mov r8, qword [rbp + 0xd8]
cmp r8, 7
jbe 0x1400109e5
mov rdx, qword [rbp + 0xc0]
lea rcx, [rbp + 0xc0]
call fcn.140006b40
lea rcx, [0x14005e6a8]
cmp qword [rbp + 0x170], 0
je 0x140010a1a
mov r8, qword [0x14005e6a8]
lea rdx, [rsp + 0x60]
lea r9, [0x14004d010]
test sil, sil
jne 0x140010a15
lea r9, [0x14004d030]
call fcn.14000c1d0
cmp qword [rbp + 0x98], 7
lea rdi, [rbp + 0x80]
mov rdx, qword [rbp + 0x90]
cmova rdi, qword [rbp + 0x80]
cmp rdx, r14
jne 0x140010e1d
mov rcx, r15
test rdx, rdx
je 0x140010a66
sub rdi, r15
nop dword [rax]
movzx eax, word [rdi + rcx]
cmp ax, word [rcx]
jne 0x140010e1d
add rcx, 2
sub rdx, r14
jne 0x140010a50
cmp qword [rbp + 0xb8], 7
lea rax, [rbp + 0xa0]
mov rsi, qword [rsp + 0x58]
cmova rax, qword [rbp + 0xa0]
mov qword [rbp + 0xb0], r12
mov word [rax], r12w
test rsi, rsi
je 0x140010aff
cmp word [rsi], 0
je 0x140010aff
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x60], xmm0
mov r8, 0xffffffffffffffff
movdqu xmmword [rbp + 0x70], xmm1
nop
inc r8
cmp word [rsi + r8*2], 0
jne 0x140010ab0
mov rdx, rsi
lea rcx, [rbp + 0x60]
call fcn.140001a30
lea rax, [rbp + 0x60]
movups xmm0, xmmword [rax]
lea rcx, [rbp + 0x60]
movups xmm1, xmmword [rax + 0x10]
mov word [rbp + 0x60], r12w
movups xmmword [rbp + 0x40], xmm0
movdqa xmm0, xmmword [0x14003b490]
movdqu xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x50], xmm1
call fcn.1400088d0
jmp 0x140010b3f
xor r12d, r12d
jmp 0x1400109ec
movdqa xmm1, xmmword [0x14003b490]
lea rax, [rbp + 0xc0]
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov word [rbp + 0xc0], r12w
movdqu xmmword [rbp + 0xd0], xmm1
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov word [rbp + 0xc0], r12w
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm1
mov rcx, qword [rbp + 0x50]
mov rax, rbx
sub rax, rcx
cmp rax, 0x34
jb 0x140011b90
cmp qword [rbp + 0x58], 7
lea rax, [rbp + 0x40]
movzx edx, byte [rsp + 0x50]
lea r9, str.persistent_mode_2_detecting_steam_launch_cmd_from:_
cmova rax, qword [rbp + 0x40]
lea r8, [rbp + 0x40]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x34
call fcn.140004be0
lea r8, [0x14003af70]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x180]
call fcn.140001720
mov rcx, rax
call fcn.140007e50
lea rcx, [rbp + 0x180]
call fcn.1400088d0
lea rcx, [rbp + 0x20]
call fcn.1400088d0
xor r8d, r8d
lea rdx, str.steam:__run_
lea rcx, [rbp + 0x40]
call fcn.14000b7b0
xor r8d, r8d
lea rcx, [rbp + 0x40]
test rax, rax
jne 0x140010c78
lea rdx, [0x14003afec]
call fcn.14000b8c0
mov r8, rax
xorps xmm0, xmm0
mov rax, qword [rbp + 0x50]
xorps xmm1, xmm1
movups xmmword [rbp], xmm0
movdqu xmmword [rbp + 0x10], xmm1
cmp rax, 0xd
jb 0x140011b96
add rax, 0xfffffffffffffff3
lea rdx, [rbp + 0x40]
cmp rax, r8
lea rcx, [rbp]
cmovb r8, rax
cmp qword [rbp + 0x58], 7
cmova rdx, qword [rbp + 0x40]
add rdx, 0x1a
call fcn.140001a30
mov r8, qword [rbp + 0xb8]
cmp r8, 7
jbe 0x140010c56
mov rdx, qword [rbp + 0xa0]
lea rcx, [rbp + 0xa0]
call fcn.140006b40
movups xmm0, xmmword [rbp]
lea rcx, str.persistent_mode_2_got_steam_launch_cmd_1
movups xmm1, xmmword [rbp + 0x10]
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm1
jmp 0x140010d0b
lea rdx, str.____steam:__rungameid_
call fcn.14000b7b0
test rax, rax
jne 0x140010d04
xor r8d, r8d
lea rdx, [0x14003afec]
lea rcx, [rbp + 0x40]
call fcn.14000b8c0
mov r8, rax
xorps xmm0, xmm0
mov rax, qword [rbp + 0x50]
xorps xmm1, xmm1
movups xmmword [rbp], xmm0
movdqu xmmword [rbp + 0x10], xmm1
cmp rax, 0x17
jb 0x140011b96
add rax, 0xffffffffffffffe9
lea rdx, [rbp + 0x40]
cmp rax, r8
lea rcx, [rbp]
cmovb r8, rax
cmp qword [rbp + 0x58], 7
cmova rdx, qword [rbp + 0x40]
add rdx, 0x2e
call fcn.140001a30
lea rdx, [rbp]
lea rcx, [rbp + 0xa0]
call fcn.140005d50
lea rcx, [rbp]
call fcn.1400088d0
lea rcx, str.persistent_mode_2_got_steam_launch_cmd_2
jmp 0x140010d0b
lea rcx, str.persistent_mode_2_didnt_detect_a_valid_steam_launch_cmd
call fcn.1400134d0
cmp qword [rbp + 0xb0], 0
je 0x140010df8
cmp qword [rbp + 0xb8], 7
lea rdx, [rbp + 0xa0]
lea rcx, str.SteamAppId
cmova rdx, qword [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
cmp qword [rbp + 0xb8], 7
lea rdx, [rbp + 0xa0]
lea rcx, str.SteamGameId
cmova rdx, qword [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
cmp qword [rbp + 0xb8], 7
lea rdx, [rbp + 0xa0]
lea rcx, str.SteamOverlayGameId
cmova rdx, qword [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov rcx, qword [rbp + 0xb0]
sub rbx, rcx
cmp rbx, 0x24
jb 0x140011b9c
cmp qword [rbp + 0xb8], 7
lea rax, [rbp + 0xa0]
movzx edx, byte [rsp + 0x50]
lea r9, str.persistent_mode_2_will_use_app_id_
cmova rax, qword [rbp + 0xa0]
lea r8, [rbp + 0xa0]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x24
call fcn.140004be0
lea rcx, [rbp + 0x20]
call fcn.140007e50
lea rcx, [rbp + 0x20]
call fcn.1400088d0
jmp 0x140010e04
lea rcx, str.persistent_mode_2_didnt_find_app_id
call fcn.1400134d0
mov r8, qword [rbp + 0x58]
cmp r8, 7
jbe 0x140010e5d
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.140006b40
jmp 0x140010e5d
cmp qword [rbp + 0xb0], 0
je 0x14001177b
cmp qword [rbp + 0xb8], 7
lea rax, [rbp + 0xa0]
cmova rax, qword [rbp + 0xa0]
cmp word [rax], 0
je 0x14001177b
lea rcx, [rbp + 0xa0]
call fcn.14000df90
mov rsi, qword [rsp + 0x58]
call fcn.14000cf60
test al, al
jne 0x140010e77
call fcn.140007e50
lea rdx, str.Unable_to_patch_Registry__HKCU_.
jmp 0x14001178e
call fcn.14000d2c0
test al, al
jne 0x140010e96
call fcn.140008d40
call fcn.140007e50
lea rdx, str.Unable_to_patch_Registry__HKLM_.
jmp 0x14001178e
call fcn.14000ca20
mov r10, qword [rbp + 0x98]
lea r8, [rbp + 0x80]
mov r9, qword [rbp + 0x80]
cmp r10, 7
mov rcx, qword [rbp + 0x90]
cmova r8, r9
cmp rcx, r14
jne 0x140010ef3
mov rdi, rcx
mov rdx, r15
test rcx, rcx
je 0x140010ee5
sub r8, r15
movzx eax, word [r8 + rdx]
cmp ax, word [rdx]
jne 0x140010ef3
add rdx, 2
sub rdi, r14
jne 0x140010ed2
cmp qword [rbp + 0xb0], 0
je 0x14001166a
xorps xmm0, xmm0
lea rdi, [rbp - 0x70]
xor eax, eax
mov ecx, 0x68
movups xmmword [rbp - 0x6c], xmm0
mov dword [rbp - 0xc], eax
movups xmmword [rbp - 0x5c], xmm0
mov qword [rbp + 0x50], rax
movups xmmword [rbp - 0x4c], xmm0
movups xmmword [rbp - 0x3c], xmm0
movups xmmword [rbp - 0x2c], xmm0
movups xmmword [rbp - 0x1c], xmm0
rep stosb byte [rdi], al
movups xmmword [rbp + 0x40], xmm0
lea rdi, [rbp + 0x40]
mov dword [rbp - 0x70], 0x68
mov ecx, 0x18
rep stosb byte [rdi], al
lea rcx, str.spawning_the_requested_EXE_file
call fcn.1400134d0
xor edx, edx
lea rcx, [rbp + 0x370]
mov r8d, 0x8000
call fcn.140037120
cmp qword [rbp + 0x138], 7
lea rax, [rbp + 0x120]
lea r9, [rbp + 0x100]
mov qword [rsp + 0x28], rsi
cmova rax, qword [rbp + 0x120]
lea r8, str.__ls___ls__ls
cmp qword [rbp + 0x118], 7
lea rcx, [rbp + 0x370]
mov edx, 0x4000
mov qword [rsp + 0x20], rax
cmova r9, qword [rbp + 0x100]
call fcn.14000f3e0
cmp qword [rbp + 0xf8], 7
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x48], rdx
lea rax, [rbp + 0xe0]
cmova rax, qword [rbp + 0xe0]
lea rdx, [rbp - 0x70]
cmp qword [rbp + 0x118], 7
lea rcx, [rbp + 0x100]
mov qword [rsp + 0x40], rdx
lea rdx, [rbp + 0x370]
cmova rcx, qword [rbp + 0x100]
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], r14d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x140011042
lea rcx, str.Unable_to_load_the_requested_EXE_file
call fcn.1400134d0
call fcn.140008d40
call fcn.140008f50
call fcn.140008b40
call fcn.140007e50
lea rdx, str.Unable_to_load_the_requested_EXE_file.
jmp 0x14001178e
mov rdx, qword [0x14005e6b0]
lea rcx, [rbp + 0xd5]
sub rdx, qword [0x14005e6a8]
sar rdx, 5
call fcn.140003450
lea r9, [rsp + 0x50]
mov rdx, rax
lea r8, [rbp + 0xd5]
lea rcx, [rbp + 0x20]
call fcn.140001350
lea r8, [rbp + 0x20]
lea rdx, str.injecting
lea rcx, [rbp + 0x180]
call fcn.1400015f0
mov r8d, 5
lea rdx, str._dlls
mov rcx, rax
call fcn.1400089c0
xorps xmm0, xmm0
lea rcx, [rbp + 0x60]
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.140007e50
mov r8, qword [rbp + 0x78]
cmp r8, 0xf
jbe 0x1400110f1
mov rdx, qword [rbp + 0x60]
lea rcx, [rbp + 0x60]
call fcn.140006b00
movdqa xmm0, xmmword [0x14003b4a0]
lea rcx, [rbp + 0x180]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
call fcn.140005940
lea rcx, [rbp + 0x20]
call fcn.140005940
mov rax, qword [0x14005e6b0]
mov r12, qword [0x14005e6a8]
mov qword [rsp + 0x60], rax
cmp r12, rax
je 0x140011499
movzx edi, byte [rsp + 0x50]
movzx ebx, byte [rsp + 0x50]
movzx esi, byte [rsp + 0x50]
mov r8, r12
lea rdx, str.Injecting_dll:_
lea rcx, [rbp + 0x220]
call fcn.140001790
mov rdx, rax
lea r8, str._...
lea rcx, [rbp + 0x180]
call fcn.140001720
mov rcx, rax
call fcn.140007e50
lea rcx, [rbp + 0x180]
call fcn.1400088d0
lea rcx, [rbp + 0x220]
call fcn.1400088d0
mov rcx, qword [rbp + 0x40]
lea r8, [rsp + 0x58]
xor eax, eax
mov rdx, r12
mov qword [rsp + 0x58], rax
call fcn.1400123e0
mov r14d, eax
test eax, eax
je 0x14001147e
mov edx, eax
lea rcx, [rbp + 0x36a]
call fcn.140003490
lea r9, [rsp + 0x50]
mov rdx, rax
lea r8, [rbp + 0x36a]
lea rcx, [rbp + 0x180]
call fcn.140001490
mov edx, r14d
lea rcx, [rbp + 0x280]
call fcn.1400121a0
mov rdx, rax
lea rcx, [rbp + 0x260]
call fcn.140012da0
mov rdx, qword [rsp + 0x58]
xorps xmm0, xmm0
mov qword [rsp + 0x68], rax
mov r8, 0xffffffffffffffff
xor eax, eax
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xd8], rax
movups xmmword [rbp + 0xc0], xmm0
inc r8
cmp byte [rdx + r8], al
jne 0x140011223
lea rcx, [rbp + 0xc0]
call fcn.140001920
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x320]
call fcn.140012da0
mov r8, r12
lea rdx, str.Failed_to_inject_the_dll:
lea rcx, [rbp + 0x300]
mov r14, rax
call fcn.140001790
mov rdx, rax
lea r8, [0x140039da4]
lea rcx, [rbp + 0x2e0]
call fcn.140001720
mov r9, r14
lea rcx, [rbp + 0x220]
mov r8, rax
movzx edx, dil
call fcn.1400049b0
mov r14d, 1
lea rdx, [0x140039da4]
mov r8d, r14d
lea rcx, [rbp + 0x220]
call fcn.140008a50
mov r9, qword [rsp + 0x68]
lea r8, [rbp + 0x20]
xor ecx, ecx
movzx edx, bl
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rcx
mov word [rax], cx
lea rcx, [rbp + 0x2a0]
movups xmmword [rbp + 0x20], xmm0
mov qword [rax + 0x18], 7
movups xmmword [rbp + 0x30], xmm1
call fcn.1400049b0
mov r8d, r14d
lea rdx, [0x140039da4]
lea rcx, [rbp + 0x2a0]
call fcn.140008a50
xor ecx, ecx
lea r8d, [r14 + 0xc]
mov qword [rbp + 0x70], rcx
lea rdx, str.Error_code_
mov qword [rbp + 0x78], rcx
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], rcx
mov word [rax], cx
lea rcx, [rbp + 0x60]
mov qword [rax + 0x18], 7
call fcn.140008a50
xor ecx, ecx
lea r9, [rbp + 0x180]
lea r8, [rbp + 0x240]
movzx edx, sil
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rcx
mov word [rax], cx
lea rcx, [rbp + 0x2c0]
movups xmmword [rbp + 0x240], xmm0
mov qword [rax + 0x18], 7
movups xmmword [rbp + 0x250], xmm1
call fcn.1400049b0
lea r8, [0x140039da4]
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp]
call fcn.140001720
lea rcx, [rbp + 0x2c0]
call fcn.1400088d0
lea rcx, [rbp + 0x240]
call fcn.1400088d0
lea rcx, [rbp + 0x60]
call fcn.1400088d0
lea rcx, [rbp + 0x2a0]
call fcn.1400088d0
lea rcx, [rbp + 0x20]
call fcn.1400088d0
lea rcx, [rbp + 0x220]
call fcn.1400088d0
lea rcx, [rbp + 0x2e0]
call fcn.1400088d0
lea rcx, [rbp + 0x300]
call fcn.1400088d0
lea rcx, [rbp + 0x320]
call fcn.1400088d0
mov r8, qword [rbp + 0xd8]
cmp r8, 0xf
jbe 0x14001141e
mov rdx, qword [rbp + 0xc0]
lea rcx, [rbp + 0xc0]
call fcn.140006b00
xor eax, eax
mov qword [rbp + 0xd8], 0xf
lea rcx, [rbp + 0x260]
mov qword [rbp + 0xd0], rax
mov byte [rbp + 0xc0], al
call fcn.1400088d0
lea rcx, [rbp + 0x280]
call fcn.140005940
lea rcx, [rbp + 0x180]
call fcn.1400088d0
lea rcx, [rbp]
call fcn.140007e50
cmp qword [rbp + 0x1b0], 0
je 0x140011517
lea rcx, [rbp]
call fcn.1400088d0
jmp 0x14001148a
lea rcx, str.Injected_
call fcn.1400134d0
add r12, 0x20
cmp r12, qword [rsp + 0x60]
jne 0x140011142
cmp qword [rbp + 0x1d0], 0
jne 0x14001157d
lea rcx, str.resuming_the_main_thread_of_the_exe
call fcn.1400134d0
cmp qword [rbp + 0x98], 7
lea rdi, [rbp + 0x80]
mov rdx, qword [rbp + 0x90]
cmova rdi, qword [rbp + 0x80]
cmp rdx, 1
jne 0x140011508
mov rcx, r15
test rdx, rdx
je 0x1400114f5
sub rdi, r15
movzx eax, word [rdi + rcx]
cmp ax, word [rcx]
jne 0x140011508
add rcx, 2
sub rdx, 1
jne 0x1400114e2
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x60], 5
call fcn.1400037b0
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x140011632
mov rcx, qword [rbp + 0x40]
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140008d40
call fcn.140008f50
call fcn.140008b40
call fcn.140007e50
cmp qword [rbp + 0x18], 7
lea rdx, [rbp]
mov r9d, 0x10
lea r8, str.ColdClientLoader
cmova rdx, qword [rbp]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, [rbp]
call fcn.1400088d0
jmp 0x1400117a3
mov edx, dword [rbp + 0x50]
lea rcx, [rbp + 0x260]
call fcn.14000e410
mov r8, rax
lea rdx, str.Attach_a_debugger_now_to_PID
lea rcx, [rbp + 0x280]
call fcn.1400015f0
mov r8d, 0x1b
lea rdx, str._and_resume_its_main_thread
mov rcx, rax
call fcn.1400089c0
xorps xmm0, xmm0
lea rcx, [rbp + 0x280]
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.140005940
lea rcx, [rbp + 0x260]
call fcn.140005940
lea rcx, [rbp + 0x60]
call fcn.140007e50
cmp qword [rbp + 0x78], 0xf
lea rdx, [rbp + 0x60]
lea r8, [0x14003a5d0]
cmova rdx, qword [rbp + 0x60]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp + 0x60]
call fcn.140005940
mov rcx, qword [rbp + 0x48]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r10, qword [rbp + 0x98]
mov rcx, qword [rbp + 0x90]
mov r9, qword [rbp + 0x80]
cmp r10, 7
lea rdi, [rbp + 0x80]
cmova rdi, r9
cmp rcx, 1
jne 0x1400116af
mov rdx, rcx
test rcx, rcx
je 0x1400116a6
sub rdi, r13
nop word [rax + rax]
movzx eax, word [rdi + r13]
cmp ax, word [r13]
jne 0x1400116af
add r13, 2
sub rdx, 1
jne 0x140011690
lea rdx, str.Press_OK_when_you_have_finished_playing_to_close_the_loader
jmp 0x1400116f7
cmp r10, 7
lea r8, [rbp + 0x80]
cmova r8, r9
cmp rcx, 1
jne 0x14001171e
mov rdi, rcx
mov rdx, r15
test rcx, rcx
je 0x1400116e6
sub r8, r15
movzx eax, word [r8 + rdx]
cmp ax, word [rdx]
jne 0x14001171e
add rdx, 2
sub rdi, 1
jne 0x1400116d2
cmp qword [rbp + 0xb0], 0
jne 0x14001171e
lea rdx, str.Start_the_game__then_press_OK_when_you_have_finished_playing_to_close_the_loader
xor r9d, r9d
lea r8, str.Cold_Client_Loader__waiting_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov r9, qword [rbp + 0x80]
mov rcx, qword [rbp + 0x90]
mov r10, qword [rbp + 0x98]
cmp r10, 7
lea rdx, [rbp + 0x80]
cmova rdx, r9
cmp rcx, 1
jne 0x14001175f
test rcx, rcx
je 0x140011755
sub rdx, r15
nop dword [rax + rax]
movzx eax, word [r15 + rdx]
cmp ax, word [r15]
jne 0x14001175f
add r15, 2
sub rcx, 1
jne 0x140011740
cmp qword [rbp + 0xb0], 0
jne 0x14001176e
call fcn.140008d40
call fcn.140008f50
call fcn.140008b40
call fcn.140007e50
xor r12d, r12d
mov r14d, r12d
jmp 0x1400117a6
lea rcx, str.You_forgot_to_set_the_AppId
call fcn.1400134d0
lea rdx, str.You_forgot_to_set_the_AppId.
mov r9d, 0x10
lea r8, [0x14003a5d0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor r12d, r12d
lea rcx, [rsp + 0x70]
call fcn.140005a20
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 7
jbe 0x1400117f6
mov rcx, qword [rbp + 0x1c0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400117f1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b12
call fcn.140015708
mov rdx, qword [rbp + 0x98]
cmp rdx, 7
jbe 0x14001183c
mov rcx, qword [rbp + 0x80]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011837
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b12
call fcn.140015708
mov rdx, qword [rbp + 0x1f8]
mov edi, 7
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], rdi
mov word [rbp + 0x80], r12w
cmp rdx, rdi
jbe 0x14001189c
mov rcx, qword [rbp + 0x1e0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011897
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b12
call fcn.140015708
mov rdx, qword [rbp + 0x1b8]
cmp rdx, rdi
jbe 0x1400118e1
mov rcx, qword [rbp + 0x1a0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400118dc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b12
call fcn.140015708
mov rdx, qword [rbp + 0x158]
cmp rdx, rdi
jbe 0x140011926
mov rcx, qword [rbp + 0x140]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011921
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b12
call fcn.140015708
mov rdx, qword [rbp + 0x178]
mov qword [rbp + 0x150], r12
mov qword [rbp + 0x158], rdi
mov word [rbp + 0x140], r12w
cmp rdx, rdi
jbe 0x140011981
mov rcx, qword [rbp + 0x160]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001197c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b12
call fcn.140015708
mov rdx, qword [rbp + 0xb8]
cmp rdx, rdi
jbe 0x1400119c6
mov rcx, qword [rbp + 0xa0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400119c1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b12
call fcn.140015708
mov rdx, qword [rbp + 0x138]
mov qword [rbp + 0xb0], r12
mov qword [rbp + 0xb8], rdi
mov word [rbp + 0xa0], r12w
cmp rdx, rdi
jbe 0x140011a21
mov rcx, qword [rbp + 0x120]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011a1c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b12
call fcn.140015708
mov rdx, qword [rbp + 0xf8]
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x138], rdi
mov word [rbp + 0x120], r12w
cmp rdx, rdi
jbe 0x140011a7c
mov rcx, qword [rbp + 0xe0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011a77
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b12
call fcn.140015708
mov rdx, qword [rbp + 0x118]
mov qword [rbp + 0xf0], r12
mov qword [rbp + 0xf8], rdi
mov word [rbp + 0xe0], r12w
cmp rdx, rdi
jbe 0x140011ad3
mov rcx, qword [rbp + 0x100]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011ace
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011b12
call fcn.140015708
mov r12, qword [rsp + 0x84b8]
mov eax, r14d
mov r14, qword [rsp + 0x84c8]
mov rsi, qword [rsp + 0x84b0]
mov r15, qword [rsp + 0x8480]
mov rcx, qword [rbp + 0x8370]
xor rcx, rsp
call fcn.140015ac0
add rsp, 0x8488
pop r13
pop rdi
pop rbx
pop rbp
ret
call fcn.14001c51c
int3
call fcn.14001c51c
int3
call fcn.140008960
int3
call fcn.14001c51c
int3
call fcn.14001c51c
int3
call fcn.14001c51c
int3
call fcn.14001c51c
int3
call fcn.140008960
int3
call fcn.140008960
int3
call fcn.140008960
int3
call fcn.140008960
int3
call fcn.140008960
int3
call fcn.140008960
int3
call fcn.140008960
int3
call fcn.140008960
int3
call fcn.140008960
int3
call fcn.140008960
int3
call fcn.140008960
int3
call fcn.140008960
int3
call fcn.140008960
int3
call fcn.140008960
int3
call fcn.140008960
int3
call fcn.1400089a0
int3
call fcn.140008960
int3