Function at 0x10023100
Capabilities:
Create directory
Create thread
Delete file
Get file size
Link many functions at runtime
Query environment variable
Query or enumerate registry value
Resolve function by parsing pe exports
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x948
mov eax, dword [0x10063040]
xor eax, esp
mov dword [esp + 0x944], eax
push esi
push edi
push 0x208
lea eax, [esp + 0x334]
push 0
push eax
call fcn.1002de40
add esp, 0xc
mov dword [esp + 0x9c], 1
lea eax, [esp + 0x98]
mov dword [esp + 0x98], 0x104
push eax
lea eax, [esp + 0x334]
push eax
lea eax, [esp + 0xa4]
push eax
push 0x20002
push str.InstallPath
push str.SoftwareValveSteam
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
jne 0x100231b3
push str.Steam.exe
lea eax, [esp + 0x334]
push 0x104
push eax
call fcn.10036681
add esp, 0xc
lea edx, [esp + 0x330]
mov ecx, 0x10067ba0
call fcn.10008ce0
cmp al, 1
jne 0x100231b3
mov byte [0x10065e8f], al
push 0x5c
push 0x10067ba0
call fcn.1002db30
add esp, 8
test eax, eax
je 0x100231cb
xor ecx, ecx
mov word [eax], cx
push 0x5c
push 0x100662b0
call fcn.1002db30
add esp, 8
test eax, eax
je 0x100231e3
xor ecx, ecx
mov word [eax], cx
cmp byte [0x10065e8f], 0
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
jne 0x100235fc
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
push 0x1000000
push 0
push 0x10066efc
call esi
push 0x1000000
push 0
push 0x10068910
call esi
push 0x1000000
push 0
push 0x10067340
call esi
push 0x100230c0
call fcn.100362aa
add esp, 4
push 0x100230e0
call fcn.10036a60
add esp, 4
push 0x104
push 0x10067358
push 0x1005a88c
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push 0x104
push 0x10067db0
push str.SteamAppId
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test esi, esi
je 0x1002347c
test eax, eax
je 0x1002347c
push 0x10067358
push str.SoftwareGL2024AppID_s
push 0xffffffffffffffff
push 0x104
push 0x10067ec0
call fcn.10001320
add esp, 0x14
push 0x10067db0
push str.SoftwareGL2024AppID_sStats
push 0xffffffffffffffff
push 0x104
push 0x10067788
call fcn.100013e0
add esp, 0x14
push 0x10067db0
push str.SoftwareGL2024AppID_sAchievements
push 0xffffffffffffffff
push 0x104
push 0x10067a98
call fcn.100013e0
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [esp + 0x70]
add esp, 0x14
mov dword [esp + 0x5c], 0
mov dword [esp + 0xa8], 4
mov dword [esp + 0xa4], 4
push eax
push 0x20019
push 0
push 0x10067ec0
push 0x80000001
call esi
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x10023348
lea eax, [esp + 0xa4]
push eax
push 0x10063ad0
lea eax, [esp + 0xb0]
push eax
push 0
push str.StatsLimit
push dword [esp + 0x70]
call edi
push dword [esp + 0x5c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [esp + 0x60]
mov dword [esp + 0x60], 0
push eax
push 0x20019
push 0
push 0x10067ec0
push 0x80000001
mov dword [esp + 0x98], 4
mov dword [esp + 0xc0], 4
call esi
nop
test eax, eax
jne 0x100233b0
lea eax, [esp + 0xac]
push eax
push 0x10063ad4
lea eax, [esp + 0x8c]
push eax
push 0
push str.AchievementsLimit
push dword [esp + 0x74]
call edi
push dword [esp + 0x60]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [esp + 0x64]
mov dword [esp + 0x64], 0
push eax
push 0x20019
push 0
push 0x10067ec0
push 0x80000001
mov dword [esp + 0xa0], 4
mov dword [esp + 0x9c], 4
call esi
test eax, eax
jne 0x10023416
lea eax, [esp + 0x88]
push eax
push 0x10063d20
lea eax, [esp + 0x94]
push eax
push 0
push str.SkipStatsAndAchievements
push dword [esp + 0x78]
call edi
push dword [esp + 0x64]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [esp + 0x68]
mov dword [esp + 0x68], 0
push eax
push 0x20019
push 0
push 0x10067ec0
push 0x80000001
mov dword [esp + 0xa8], 4
mov dword [esp + 0xa4], 4
call esi
test eax, eax
jne 0x1002347c
lea eax, [esp + 0x90]
push eax
push 0x10066f1c
lea eax, [esp + 0x9c]
push eax
push 0
push str.DisableGL2024ServerTicket
push dword [esp + 0x7c]
call edi
push dword [esp + 0x68]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x10067ba0
push str._sServer.bin
push 0xffffffffffffffff
push 0x104
push 0x10067560
call fcn.10001320
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
add esp, 0x14
push 0
push 0x80
push 3
push 0
push 1
push 0
push 0x10067560
call edi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [eax]
cmp eax, 0xffffffff
je 0x100234cf
push eax
call esi
mov byte [0x100662af], 1
push str.GreenLuma_2024_is_loaded__r_n
call fcn.10002120
add esp, 4
push 0x100684f0
push str.Exe______s_r_n
call fcn.100023e0
add esp, 8
cmp byte [0x100662af], 0
jne 0x10023578
push 0x208
lea eax, [esp + 0x53c]
push 0
push eax
call fcn.1002de40
add esp, 0xc
mov dword [esp + 0x70], 1
lea eax, [esp + 0x78]
mov dword [esp + 0x78], 0x104
push eax
lea eax, [esp + 0x53c]
push eax
lea eax, [esp + 0x78]
push eax
push 0x20002
push str.InstallPath
push str.SoftwareValveSteam
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
je 0x1002356e
push 0x10
push str.GreenLuma_2024
push str.Failed_to_get_Steam_path_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea eax, [esp + 0x538]
push eax
jmp 0x1002357d
push 0x10067ba0
push str._sPatchingDone.bin
push 0xffffffffffffffff
push 0x104
push 0x10066098
call fcn.10001320
add esp, 0x14
push 0x10067ba0
push str._sLumaCEG_Plugin_x86.dll
push 0xffffffffffffffff
push 0x104
push 0x100664c0
call fcn.10001320
add esp, 0x14
push 0
push 0x80
push 3
push 0
push 1
push 0
push 0x100664c0
call edi
cmp eax, 0xffffffff
je 0x10023882
push eax
call esi
push 0x100664c0
push str.LumaCEG_Plugin_Dll______s_r_n
call fcn.100023e0
add esp, 8
push 8
push 0
push 0x100664c0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
jmp 0x10023882
push str.appcache_appinfo.vdf
call edi
push str.appcachepackageinfo.vdf
call edi
mov edx, str.User32.dll
mov ecx, 0x10072b98
call fcn.10008ce0
nop dword [eax]
cmp al, 1
jne 0x10023765
mov byte [0x10065e8d], al
mov byte [0x10065e8e], al
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileW]
push str.GreenLuma_2024_is_loaded__r_n
nop dword [eax]
call fcn.10002120
add esp, 4
push 0x100684f0
push str.Exe______s_r_n
call fcn.100023e0
push 0x100662b0
push str._sNoQuestion.bin
push 0xffffffffffffffff
push 0x104
push 0x10068938
call fcn.10001320
add esp, 0x1c
push 0x100662b0
push str._sAppList_
push 0xffffffffffffffff
push 0x104
push 0x10067138
call fcn.10001320
add esp, 0x14
push 0x100662b0
push str._sAppList0.txt
push 0xffffffffffffffff
push 0x104
push 0x10066f28
call fcn.10001320
add esp, 0x14
push 0x10067ba0
push str._s_binx64launcher.exe
push 0xffffffffffffffff
push 0x104
push 0x10067890
call fcn.10001320
add esp, 0x14
cmp byte [0x10065e8d], 1
jne 0x10023834
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push 0x10067890
call esi
mov dword ds:[esp + 0x70], eax
cmp eax, 0xffffffff
je 0x10023818
lea ecx, [esp + 0x78]
mov dword [esp + 0x78], 0
push ecx
push eax
mov dword [esp + 0x84], 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
push dword [esp + 0x70]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x100237fc
cmp dword [esp + 0x7c], 0
jl 0x1002384e
jg 0x10023757
cmp dword [esp + 0x78], 0x30d40
jbe 0x1002384e
push 0x10068d48
call edi
nop
jmp 0x1002384e
cmp byte [0x10065e8d], 0
jne 0x10023632
push 0x100662b0
push str._sStealthMode.bin
push 0xffffffffffffffff
push 0x104
push 0x10068d48
call fcn.10001320
add esp, 0x14
push 0x100662b0
push str._sPatchingDone.bin
push 0xffffffffffffffff
push 0x104
push 0x10066098
call fcn.10001320
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileW]
add esp, 0x14
push 0
push 0x80
push 3
push 0
push 1
push 0
push 0x10068d48
call esi
cmp eax, 0xffffffff
je 0x100237e5
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [0x10065e8d], 1
nop dword [eax]
jmp 0x10023638
push 0x1000000
push 0
push 0x10066efc
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
jmp 0x10023638
push 0x10
push str.GreenLuma_2024
push str.Failed_to_get_size_of_x64launcher.exe_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10
push str.GreenLuma_2024
push str.Failed_to_open_x64launcher.exe_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x100230c0
call fcn.100362aa
add esp, 4
push 0x100230e0
call fcn.10036a60
add esp, 4
push 0
push 0x80
push 3
push 0
push 1
push 0
push 0x10068938
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x10023882
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10068938
call edi
mov byte [0x10065e8e], 1
push 0x10072b98
push str.GreenLuma_2024_Dll______s_r_n
call fcn.100023e0
add esp, 8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str.PID______lu_r_n_r_n
mov dword [0x10072dbc], eax
call fcn.10002120
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
add esp, 8
cmp byte [0x10065e8f], 1
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
jne 0x10023e4e
push 0
push 0x80
push 3
push 0
push 1
push 0
push 0x10066f28
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x1002398e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x10065e8e], 1
nop dword [eax]
je 0x10023b2f
push 0x24
push str.GreenLuma_2024
push str.Use_saved_AppList_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
nop word [eax + eax]
sub eax, 6
je 0x10023b2f
sub eax, 1
jne 0x1002398e
xor esi, esi
push 0x208
lea eax, [esp + 0x12c]
push 0
push eax
call fcn.1002de40
add esp, 0xc
lea eax, [esp + 0x128]
push esi
push 0x10067138
push str._s_zu.txt
push 0xffffffffffffffff
push 0x104
push eax
call fcn.10001320
add esp, 0x18
lea eax, [esp + 0x128]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
inc esi
cmp esi, 0x92
jb 0x10023930
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
call dword [sym.imp.KERNEL32.dll_AllocConsole]
push 0
mov dword [0x100664b8], eax
call fcn.100351e5
add esp, 4
push eax
push 0x1005adbc
push 0x1005adc0
push 0x1006890c
call fcn.100350fd
push 1
call fcn.100351e5
add esp, 0x14
push eax
push 0x1005add0
push 0x1005add4
push 0x10066ef8
call fcn.100350fd
push 2
call fcn.100351e5
add esp, 0x14
push eax
push 0x1005add0
push 0x1005add4
push 0x100686f8
call fcn.100350fd
xorps xmm0, xmm0
mov dword [esp + 0xd0], 0
push str.How_many_Games_DLC_would_you_like_to_add___1_146_:
movaps xmmword [esp + 0xc4], xmm0
call fcn.100012a0
add esp, 0x14
push 0
call fcn.100351e5
add esp, 4
push eax
lea eax, [esp + 0xb4]
push 0xa
push eax
call fcn.1003689e
add esp, 0xc
test eax, eax
je 0x10023b13
nop dword [eax + eax]
lea ecx, [esp + 0xb0]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10023a60
sub ecx, edx
sar ecx, 1
lea ecx, [ecx*2 - 2]
cmp ecx, 0x14
jae 0x10024eee
xor eax, eax
push 0xa
push eax
mov word [esp + ecx + 0xb8], ax
lea eax, [esp + 0xb8]
push eax
call fcn.10035b5b
add esp, 0xc
mov dword [esp + 0x20], eax
call fcn.100369a0
cmp dword [eax], 0x22
je 0x10023e2e
mov eax, dword [esp + 0x20]
test eax, eax
je 0x10023acb
nop word [eax + eax]
cmp eax, 0x92
jle 0x10023c86
xorps xmm0, xmm0
mov dword [esp + 0xc0], 0
push str.How_many_Games_DLC_would_you_like_to_add___1_146_:
movaps xmmword [esp + 0xb4], xmm0
call fcn.100012a0
add esp, 4
push 0
call fcn.100351e5
add esp, 4
push eax
lea eax, [esp + 0xb4]
push 0xa
push eax
call fcn.1003689e
add esp, 0xc
test eax, eax
jne 0x10023a50
push 0x10
push str.GreenLuma_2024
push str.Failed_to_read_answer_to_question_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [esp + 0x10], 0
nop word [eax + eax]
push 0x208
lea eax, [esp + 0x12c]
push 0
push eax
call fcn.1002de40
add esp, 0xc
lea eax, [esp + 0x128]
push dword [esp + 0x10]
push 0x10067138
push str._s_zu.txt
push 0xffffffffffffffff
push 0x104
push eax
call fcn.10001320
push 0x10053a08
lea eax, [esp + 0x144]
mov dword [esp + 0x88], 0
push eax
lea eax, [esp + 0x8c]
push eax
call fcn.10035e56
add esp, 0x24
test eax, eax
jne 0x10023fe4
push dword [esp + 0x6c]
mov dword [esp + 0xe4], eax
xorps xmm0, xmm0
lea eax, [esp + 0xd4]
movaps xmmword [esp + 0xd4], xmm0
push 0x14
push eax
call fcn.10036893
add esp, 0xc
test eax, eax
je 0x10023c66
push dword ds:[esp + 0x6c]
call fcn.10035ff2
add esp, 4
lea eax, [esp + 0xd0]
push 0xa
push 0
push eax
call fcn.10035b15
mov ecx, dword [esp + 0x1c]
add esp, 0xc
mov dword [esp + 0x50], eax
lea eax, [esp + 0x4c]
mov ecx, dword [ecx*4 + 0x10063ad8]
push eax
lea eax, [esp + 0x58]
mov dword [esp + 0x50], ecx
push eax
call fcn.10025600
nop
call fcn.100369a0
cmp dword [eax], 0x22
je 0x10023c45
mov eax, dword [esp + 0x10]
inc eax
mov dword [esp + 0x10], eax
cmp eax, 0x92
jb 0x10023b40
nop
jmp 0x10023fe4
push 0x10
push str.GreenLuma_2024
push str.strtol__ERANGE___1_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10
push str.GreenLuma_2024
push str.Failed_to_read_AppIDs_from_AppList_folder_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
xor ecx, ecx
mov dword [esp + 0x10], ecx
test eax, eax
jle 0x10023fe4
mov edx, str._nAppID:
nop dword [eax]
test ecx, ecx
mov eax, str.AppID:
cmove eax, edx
push eax
call fcn.100012a0
add esp, 4
xorps xmm0, xmm0
movaps xmmword [esp + 0xf0], xmm0
movaps xmmword [esp + 0x100], xmm0
movq qword [esp + 0x110], xmm0
push 0
call fcn.100351e5
add esp, 4
push eax
lea eax, [esp + 0xf4]
push 0x14
push eax
call fcn.1003689e
add esp, 0xc
test eax, eax
je 0x10023e11
lea ecx, [esp + 0xf0]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10023d00
sub ecx, edx
sar ecx, 1
lea ecx, [ecx*2 - 2]
cmp ecx, 0x28
jae 0x10024eee
xor eax, eax
push 0xa
push eax
mov word [esp + ecx + 0xf8], ax
lea eax, [esp + 0xf8]
push eax
call fcn.10035b5b
mov ecx, dword ds:[esp + 0x1c]
add esp, 0xc
mov dword [esp + 0x24], eax
mov dword [esp + 0x50], eax
lea eax, [esp + 0x4c]
mov ecx, dword [ecx*4 + 0x10063ad8]
push eax
lea eax, [esp + 0x58]
mov dword [esp + 0x50], ecx
push eax
call fcn.10025600
call fcn.100369a0
cmp dword [eax], 0x22
je 0x10023df5
push 0
push 0x10067138
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0x208
lea eax, [esp + 0x744]
push 0
push eax
call fcn.1002de40
add esp, 0xc
lea eax, [esp + 0x740]
push dword [esp + 0x10]
push 0x10067138
push str._s_u.txt
push 0xffffffffffffffff
push 0x104
push eax
call fcn.10001320
push dword [esp + 0x3c]
lea eax, [esp + 0x75c]
push 0x1005af70
push eax
call fcn.10002c20
mov ecx, dword [esp + 0x34]
add esp, 0x24
inc ecx
mov edx, str._nAppID:
mov dword [esp + 0x10], ecx
cmp ecx, dword [esp + 0x20]
jl 0x10023ca0
jmp 0x10023fe4
push 0x10
push str.GreenLuma_2024
push str.wcstol__ERANGE___3_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10
push str.GreenLuma_2024
push str.Failed_to_read_AppID_from_console_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10
push str.GreenLuma_2024
push str.wcstol__ERANGE___2_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x100662b0
push str._sGreenLuma2024_FilesAchievementUnlocked.wav
push 0xffffffffffffffff
push 0x104
push 0x100680d8
call fcn.10001320
add esp, 0x14
push 0x10067358
push 0x100662b0
push str._sAppOwnershipTicketsTicket._s
push 0xffffffffffffffff
push 0x104
push 0x10066ae8
call fcn.10001320
push 0x10067358
push 0x100662b0
push str._sEncryptedAppTicketsEncryptedTicket._s
push 0xffffffffffffffff
push 0x104
push 0x10068b40
call fcn.10001320
push 0x100662b0
push str._sWhitelist.txt
push 0xffffffffffffffff
push 0x104
push 0x10072fc8
call fcn.10001320
add esp, 0x44
push 0x100662b0
push str._sBlacklist.txt
push 0xffffffffffffffff
push 0x104
push 0x100668d8
call fcn.10001320
add esp, 0x14
push 0x100662b0
push str._sDenuvoActivationBypass.dll
push 0xffffffffffffffff
push 0x104
push 0x10066cf0
call fcn.10001320
add esp, 0x14
push 0x100662b0
push str._sDenuvoOfflineActivationBypass.dll
push 0xffffffffffffffff
push 0x104
push 0x100666d0
call fcn.10001320
add esp, 0x14
push str.DenuvoActivationBypass.dll
call esi
mov dword [0x10072da0], eax
test eax, eax
jne 0x10023f4c
push str.DenuvoOfflineActivationBypass.dll
call esi
mov dword [0x10072da0], eax
test eax, eax
je 0x10023fe4
push str.GetDenuvoCallResult
push eax
call edi
push str.GetDenuvoID
push dword [0x10072da0]
mov dword [0x10068930], eax
call edi
push str.RequestDenuvoAppTicket
push dword [0x10072da0]
mov dword [0x10067eb8], eax
call edi
push str.GetDenuvoAppTicket
push dword [0x10072da0]
mov dword [0x10068934], eax
call edi
push str.ShutdownDenuvoDll
push dword [0x10072da0]
mov dword [0x1006777c], eax
call edi
cmp dword [0x10068930], 0
mov dword [0x100662a8], eax
je 0x10024ece
cmp dword [0x10067eb8], 0
je 0x10024ece
cmp dword [0x10068934], 0
je 0x10024ece
cmp dword [0x1006777c], 0
je 0x10024ece
test eax, eax
je 0x10024ece
mov byte [0x100664bd], 1
call fcn.100271b0
cmp dword [0x100731dc], 0
jne 0x10024ea6
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapCreate]
mov dword [0x100731dc], eax
xor ecx, ecx
mov edx, 0x100731d8
xchg dword [edx], ecx
test eax, eax
je 0x10024eaf
mov edx, str.User32.dll
mov ecx, 0x10072b98
call fcn.10008ce0
test al, al
jne 0x100240ea
lea eax, [esp + 0xa0]
mov dword [esp + 0x74], 1
push eax
push 0x10068700
lea eax, [esp + 0x7c]
mov dword [esp + 0xa8], 0x104
push eax
push 2
push str.SteamClientDll
push str.SoftwareValveSteamActiveProcess
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
je 0x100240cc
push str.Getting_paths_from_registry_failed__using_local_r_n
nop dword [eax]
call fcn.10002120
add esp, 4
mov ecx, 0x208
mov eax, 0x10068700
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x10024092
push 0x100662b0
push str._s_steamclient.dll
push 0xffffffffffffffff
push 0x104
push 0x10068700
call fcn.10001320
add esp, 0x14
push 8
push 0
push 0x10068700
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
jmp 0x100240f1
push str.Got_Steamclient_dll_paths_from_registry_r_n
call fcn.10002120
add esp, 4
push 8
push 0
push 0x10068700
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
jmp 0x100240f1
push str.steamclient.dll
call esi
mov dword [0x10068908], eax
test eax, eax
je 0x10024e87
push str.Steamclient.dll_is_loaded__r_n
call fcn.10002120
add esp, 4
push 0x10068700
push str.Steamclient______s_r_n_r_n
call fcn.100023e0
add esp, 8
cmp byte [0x10065e8d], 0
jne 0x10024b54
push str.steamclient.dll
call esi
test eax, eax
jne 0x1002413f
mov dword [esp + 0x1c], 0xb
jmp 0x1002416a
push str.CreateInterface
push eax
call edi
test eax, eax
jne 0x10024155
mov dword [esp + 0x1c], 0xc
jmp 0x1002416a
push 0x10068928
mov edx, 0x10003de0
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x1c], eax
push str.steamclient.dll
call esi
test eax, eax
jne 0x1002417f
mov dword [esp + 0x18], 0xb
jmp 0x100241aa
push str.Steam_BGetCallback
push eax
call edi
test eax, eax
jne 0x10024195
mov dword [esp + 0x18], 0xc
jmp 0x100241aa
push 0x10067da8
mov edx, 0x10004660
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x18], eax
push str.steamclient.dll
call esi
test eax, eax
jne 0x100241bf
mov dword [esp + 0x10], 0xb
jmp 0x100241ea
push str.Steam_FreeLastCallback
push eax
call edi
test eax, eax
jne 0x100241d5
mov dword [esp + 0x10], 0xc
jmp 0x100241ea
push 0x10067770
mov edx, 0x10004820
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x10], eax
push str.steamclient.dll
call esi
test eax, eax
jne 0x100241ff
mov dword [esp + 0x14], 0xb
jmp 0x1002422a
push str.Steam_GetAPICallResult
push eax
call edi
test eax, eax
jne 0x10024215
mov dword [esp + 0x14], 0xc
jmp 0x1002422a
push 0x10066ae4
mov edx, 0x100048e0
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x14], eax
push str.CreateInterface
push dword [0x10068908]
call edi
mov edx, 1
mov ecx, eax
call fcn.10027740
push str.Steam_BGetCallback
push dword [0x10068908]
mov esi, eax
call edi
mov edx, 1
mov ecx, eax
call fcn.10027740
push str.Steam_FreeLastCallback
push dword [0x10068908]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, 1
mov ecx, eax
call fcn.10027740
push str.Steam_GetAPICallResult
push dword [0x10068908]
mov dword [esp + 0x28], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, 1
mov ecx, eax
call fcn.10027740
mov ecx, esi
mov dword [esp + 0x24], eax
call fcn.10027840
mov ecx, dword [esp + 0x1c]
push eax
call fcn.10027840
push eax
push str.CreateInterface_Hook______s______s_r_n
call fcn.10002120
add esp, 0xc
mov ecx, edi
call fcn.10027840
mov ecx, dword [esp + 0x18]
push eax
call fcn.10027840
push eax
push str.Steam_BGetCallback_Hook______s______s_r_n
call fcn.10002120
mov ecx, dword [esp + 0x2c]
add esp, 0xc
call fcn.10027840
mov ecx, dword [esp + 0x10]
push eax
call fcn.10027840
push eax
push str.Steam_FreeLastCallback_Hook______s______s_r_n
call fcn.10002120
mov ecx, dword [esp + 0x30]
add esp, 0xc
call fcn.10027840
mov ecx, dword [esp + 0x14]
push eax
call fcn.10027840
push eax
push str.Steam_GetAPICallResult_Hook______s______s_r_n_r_n
call fcn.10002120
add esp, 0xc
cmp byte [0x10065e8d], 0
jne 0x10024b54
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.ntdll.dll
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x10024355
mov eax, 0xb
jmp 0x1002437c
push str.NtCreateUserProcess
push eax
call esi
nop dword [eax]
test eax, eax
jne 0x1002436b
mov eax, 0xc
jmp 0x1002437c
push 0x10072dac
mov edx, 0x10003080
mov ecx, eax
call fcn.10027300
push str.ntdll.dll
mov dword [0x10072db8], eax
call edi
test eax, eax
jne 0x10024393
mov eax, 0xb
jmp 0x100243b7
push str.NtResumeThread
push eax
call esi
test eax, eax
jne 0x100243a6
mov eax, 0xc
jmp 0x100243b7
push 0x10067778
mov edx, 0x10003d00
mov ecx, eax
call fcn.10027300
push str.ntdll.dll
mov dword [0x10072da4], eax
call edi
test eax, eax
jne 0x100243d1
mov dword [esp + 0x34], 0xb
jmp 0x100243fc
push str.LdrLoadDll
push eax
call esi
test eax, eax
jne 0x100243e7
mov dword [esp + 0x34], 0xc
jmp 0x100243fc
push 0x100680d0
mov edx, 0x10008f20
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x34], eax
push str.ntdll.dll
call edi
test eax, eax
jne 0x10024411
mov dword [esp + 0x38], 0xb
jmp 0x1002443c
push str.LdrGetDllHandleEx
push eax
call esi
test eax, eax
jne 0x10024427
mov dword [esp + 0x38], 0xc
jmp 0x1002443c
push 0x10072b94
mov edx, 0x10008fa0
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x38], eax
push str.ntdll.dll
call edi
test eax, eax
jne 0x10024451
mov dword [esp + 0x3c], 0xb
jmp 0x1002447c
push str.LdrGetDllFullName
push eax
call esi
test eax, eax
jne 0x10024467
mov dword [esp + 0x3c], 0xc
jmp 0x1002447c
push 0x10066f14
mov edx, 0x10009020
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x3c], eax
push str.ntdll.dll
call edi
test eax, eax
jne 0x10024491
mov dword [esp + 0x40], 0xb
jmp 0x100244bc
push str.LdrGetDllHandleByMapping
push eax
call esi
test eax, eax
jne 0x100244a7
mov dword [esp + 0x40], 0xc
jmp 0x100244bc
push 0x10067b9c
mov edx, 0x10009080
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x40], eax
push str.ntdll.dll
call edi
test eax, eax
jne 0x100244d1
mov dword [esp + 0x44], 0xb
jmp 0x100244fc
push str.LdrGetDllHandleByName
push eax
call esi
test eax, eax
jne 0x100244e7
mov dword [esp + 0x44], 0xc
jmp 0x100244fc
push 0x1006788c
mov edx, 0x10009100
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x44], eax
push str.ntdll.dll
call edi
test eax, eax
jne 0x10024511
mov dword [esp + 0x48], 0xb
jmp 0x1002453c
push str.LdrQueryProcessModuleInformation
push eax
call esi
test eax, eax
jne 0x10024527
mov dword [esp + 0x48], 0xc
jmp 0x1002453c
push 0x10072b90
mov edx, 0x10009180
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x48], eax
push str.ntdll.dll
call edi
test eax, eax
jne 0x10024551
mov dword [esp + 0x24], 0xb
jmp 0x1002457c
push str.LdrEnumerateLoadedModules
push eax
call esi
test eax, eax
jne 0x10024567
mov dword [esp + 0x24], 0xc
jmp 0x1002457c
push 0x100666cc
mov edx, 0x100092c0
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x24], eax
push str.ntdll.dll
call edi
test eax, eax
jne 0x10024591
mov dword [esp + 0x20], 0xb
jmp 0x100245bc
push str.RtlLockModuleSection
push eax
call esi
test eax, eax
jne 0x100245a7
mov dword [esp + 0x20], 0xc
jmp 0x100245bc
push 0x10066f24
mov edx, 0x10009320
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x20], eax
push str.kernel32.dll
call edi
test eax, eax
je 0x100245ed
push str.Module32NextW
push eax
call esi
test eax, eax
je 0x100245ed
push 0x10067780
mov edx, 0x10009340
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x18], eax
test eax, eax
je 0x1002462d
push str.KernelBase.dll
call edi
test eax, eax
jne 0x10024602
mov dword [esp + 0x18], 0xb
jmp 0x1002462d
push str.Module32NextW
push eax
call esi
test eax, eax
jne 0x10024618
mov dword [esp + 0x18], 0xc
jmp 0x1002462d
push 0x10067780
mov edx, 0x10009340
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x18], eax
push str.KernelBase.dll
call edi
test eax, eax
je 0x100247c5
push str.EnumProcessModules
push eax
call esi
test eax, eax
je 0x100247c5
push 0x1006892c
mov edx, 0x100093c0
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x100247c5
push str.KernelBase.dll
call edi
test eax, eax
jne 0x1002467e
mov dword [esp + 0x30], 0xb
jmp 0x100246a9
push str.EnumProcessModulesEx
push eax
call esi
test eax, eax
jne 0x10024694
mov dword [esp + 0x30], 0xc
jmp 0x100246a9
push 0x100682e4
mov edx, 0x10009700
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x30], eax
push str.KernelBase.dll
call edi
test eax, eax
jne 0x100246be
mov dword [esp + 0x28], 0xb
jmp 0x100246e9
push str.GetModuleInformation
push eax
call esi
test eax, eax
jne 0x100246d4
mov dword [esp + 0x28], 0xc
jmp 0x100246e9
push 0x100731d4
mov edx, 0x10009a80
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x28], eax
push str.KernelBase.dll
call edi
test eax, eax
jne 0x100246fe
mov dword [esp + 0x2c], 0xb
jmp 0x10024729
push str.GetModuleBaseNameW
push eax
call esi
test eax, eax
jne 0x10024714
mov dword [esp + 0x2c], 0xc
jmp 0x10024729
push 0x100680c8
mov edx, 0x10009b40
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x2c], eax
push str.KernelBase.dll
call edi
test eax, eax
jne 0x1002473e
mov dword [esp + 0x14], 0xb
jmp 0x10024769
push 0x1005b648
push eax
call esi
test eax, eax
jne 0x10024754
mov dword [esp + 0x14], 0xc
jmp 0x10024769
push 0x100731d0
mov edx, 0x10009c20
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x14], eax
push str.KernelBase.dll
call edi
test eax, eax
jne 0x10024786
mov dword [esp + 0x10], 0xb
push str.KernelBase.dll
jmp 0x1002494e
push str.GetModuleFileNameExW
push eax
call esi
test eax, eax
jne 0x100247a5
mov dword ds:[esp + 0x10], 0xc
push str.KernelBase.dll
jmp 0x1002494e
push 0x100662a0
mov edx, 0x10009ce0
mov ecx, eax
call fcn.10027300
mov dword ds:[esp + 0x10], eax
push str.KernelBase.dll
jmp 0x1002494e
push str.Psapi.dll
call edi
test eax, eax
jne 0x100247da
mov dword [esp + 0x1c], 0xb
jmp 0x10024809
push str.EnumProcessModules
push eax
call esi
test eax, eax
jne 0x100247f0
mov dword [esp + 0x1c], 0xc
jmp 0x10024809
push 0x1006892c
mov edx, 0x100093c0
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x1c], eax
push str.Psapi.dll
call edi
test eax, eax
jne 0x1002481e
mov dword [esp + 0x30], 0xb
jmp 0x10024849
push str.EnumProcessModulesEx
push eax
call esi
test eax, eax
jne 0x10024834
mov dword [esp + 0x30], 0xc
jmp 0x10024849
push 0x100682e4
mov edx, 0x10009700
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x30], eax
push str.Psapi.dll
call edi
test eax, eax
jne 0x1002485e
mov dword [esp + 0x28], 0xb
jmp 0x10024889
push str.GetModuleInformation
push eax
call esi
test eax, eax
jne 0x10024874
mov dword [esp + 0x28], 0xc
jmp 0x10024889
push 0x100731d4
mov edx, 0x10009a80
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x28], eax
push str.Psapi.dll
call edi
test eax, eax
jne 0x1002489e
mov dword [esp + 0x2c], 0xb
jmp 0x100248c9
push str.GetModuleBaseNameW
push eax
call esi
test eax, eax
jne 0x100248b4
mov dword [esp + 0x2c], 0xc
jmp 0x100248c9
push 0x100680c8
mov edx, 0x10009b40
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x2c], eax
push str.KernelBase.dll
call edi
test eax, eax
jne 0x100248de
mov dword [esp + 0x14], 0xb
jmp 0x10024909
push 0x1005b648
push eax
call esi
test eax, eax
jne 0x100248f4
mov dword [esp + 0x14], 0xc
jmp 0x10024909
push 0x100731d0
mov edx, 0x10009c20
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x14], eax
push str.Psapi.dll
call edi
test eax, eax
jne 0x1002491e
mov dword [esp + 0x10], 0xb
jmp 0x10024949
push str.GetModuleFileNameExW
push eax
call esi
test eax, eax
jne 0x10024934
mov dword [esp + 0x10], 0xc
jmp 0x10024949
push 0x100662a0
mov edx, 0x10009ce0
mov ecx, eax
call fcn.10027300
mov dword [esp + 0x10], eax
push str.Psapi.dll
call edi
test eax, eax
jne 0x10024959
lea edi, [eax + 0xb]
jmp 0x1002497e
push str.GetMappedFileNameW
push eax
call esi
test eax, eax
jne 0x1002496b
lea edi, [eax + 0xc]
jmp 0x1002497e
push 0x10066f20
mov edx, 0x10009dc0
mov ecx, eax
call fcn.10027300
mov edi, eax
mov edx, 1
xor ecx, ecx
call fcn.10027740
mov ecx, dword [0x10072db8]
mov esi, eax
call fcn.10027840
push eax
push str.NtCreateUserProcess_Hook______s_r_n
call fcn.10002120
mov ecx, dword [0x10072da4]
add esp, 8
call fcn.10027840
push eax
push str.NtResumeThread_Hook______s_r_n
call fcn.10002120
mov ecx, dword [esp + 0x3c]
add esp, 8
call fcn.10027840
push eax
push str.LdrLoadDll_Hook______s_r_n
call fcn.10002120
mov ecx, dword ds:[esp + 0x40]
add esp, 8
call fcn.10027840
push eax
push str.LdrGetDllHandleEx_Hook______s_r_n
call fcn.10002120
mov ecx, dword [esp + 0x44]
add esp, 8
call fcn.10027840
push eax
push str.LdrGetDllFullName_Hook______s_r_n
call fcn.10002120
mov ecx, dword [esp + 0x48]
add esp, 8
call fcn.10027840
push eax
push str.LdrGetDllHandleByMapping_Hook______s_r_n
call fcn.10002120
mov ecx, dword [esp + 0x4c]
add esp, 8
call fcn.10027840
push eax
push str.LdrGetDllHandleByName_Hook______s_r_n
call fcn.10002120
mov ecx, dword ds:[esp + 0x50]
add esp, 8
call fcn.10027840
push eax
push str.LdrQueryProcessModuleInformation_Hook______s_r_n
call fcn.10002120
mov ecx, dword [esp + 0x2c]
add esp, 8
call fcn.10027840
push eax
push str.LdrEnumerateLoadedModules_Hook______s_r_n
call fcn.10002120
mov ecx, dword [esp + 0x28]
add esp, 8
call fcn.10027840
push eax
push str.RtlLockModuleSection_Hook______s_r_n
call fcn.10002120
mov ecx, dword [esp + 0x20]
add esp, 8
call fcn.10027840
push eax
push str.Module32NextW_Hook______s_r_n
call fcn.10002120
mov ecx, dword ds:[esp + 0x24]
add esp, 8
call fcn.10027840
push eax
push str.EnumProcessModules_Hook______s_r_n
call fcn.10002120
mov ecx, dword [esp + 0x38]
add esp, 8
call fcn.10027840
push eax
push str.EnumProcessModulesEx_Hook______s_r_n
call fcn.10002120
mov ecx, dword [esp + 0x30]
add esp, 8
call fcn.10027840
push eax
push str.GetModuleInformation_Hook______s_r_n
call fcn.10002120
mov ecx, dword [esp + 0x34]
add esp, 8
call fcn.10027840
push eax
push str.GetModuleBaseNameW_Hook______s_r_n
call fcn.10002120
mov ecx, dword ds:[esp + 0x1c]
add esp, 8
call fcn.10027840
push eax
push str.GetModuleFileNameW_Hook______s_r_n
call fcn.10002120
mov ecx, dword [esp + 0x18]
add esp, 8
call fcn.10027840
push eax
push str.GetModuleFileNameExW_Hook______s_r_n
call fcn.10002120
add esp, 8
mov ecx, edi
call fcn.10027840
push eax
push str.GetMappedFileNameW_Hook______s_r_n
call fcn.10002120
add esp, 8
mov ecx, esi
call fcn.10027840
push eax
push str.Enable_Hooks______s_r_n_r_n
call fcn.10002120
add esp, 8
cmp byte [0x10065e8f], 1
nop dword [eax + eax]
jne 0x10024da8
push dword [0x10068908]
call dword [0x100666c8]
mov ecx, dword [0x10068908]
mov edi, eax
push str.xxxxxxxxxxxx
push 0x1005b944
mov edx, dword [edi + 0x50]
call fcn.10001d80
add esp, 8
mov dword [0x10067ebc], eax
test eax, eax
je 0x10024bf6
push str.InternalGetInt_Pattern_found_r_n
call fcn.10002120
mov ecx, dword [0x10067ebc]
add esp, 4
mov edx, 0x10002d00
mov dword [0x100680d4], ecx
push 0x100680d4
call fcn.10027300
mov ecx, dword [0x10067ebc]
mov edx, 1
mov esi, eax
call fcn.10027740
mov ecx, eax
call fcn.10027840
push eax
mov ecx, esi
call fcn.10027840
push eax
push str.InternalGetInt_Hook______s______s_r_n_r_n
call fcn.10002120
add esp, 0xc
jmp 0x10024c08
push str.InternalGetInt_Pattern__0_r_n_r_n
nop dword [eax + eax]
call fcn.10002120
add esp, 4
cmp byte [0x10065e8d], 0
jne 0x10024cbc
mov esi, dword [edi + 0x50]
mov edx, esi
mov ecx, dword [0x10068908]
push str.xxxxxxxxxxxxx
push 0x1005b9cc
call fcn.10001d80
mov edi, eax
add esp, 8
test edi, edi
jne 0x10024c6d
mov ecx, dword [0x10068908]
mov edx, esi
push str.xxxxxxxxxxxxx
push 0x1005b9dc
call fcn.10001d80
mov edi, eax
add esp, 8
test edi, edi
jne 0x10024c6d
push str.GetLegacyCDKey_Pattern__0_r_n_r_n
nop dword [eax]
call fcn.10002120
add esp, 4
jmp 0x10024cbc
push str.GetLegacyCDKey_Pattern_found_r_n
call fcn.10002120
add esp, 4
mov dword [0x100686fc], edi
mov edx, 0x10004aa0
mov ecx, edi
push 0x100686fc
call fcn.10027300
mov edx, 1
mov ecx, edi
mov esi, eax
call fcn.10027740
mov ecx, eax
call fcn.10027840
push eax
mov ecx, esi
call fcn.10027840
push eax
push str.GetLegacyCDKey_Hook______s______s_r_n_r_n
call fcn.10002120
add esp, 0xc
cmp dword [0x100664b8], 1
jne 0x10024d06
mov eax, dword [0x1006890c]
test eax, eax
je 0x10024cd7
push eax
call fcn.10035ff2
add esp, 4
mov eax, dword [0x10066ef8]
nop dword [eax]
test eax, eax
je 0x10024ced
push eax
call fcn.10035ff2
add esp, 4
mov eax, dword [0x100686f8]
test eax, eax
je 0x10024cff
push eax
call fcn.10035ff2
add esp, 4
nop
call dword [sym.imp.KERNEL32.dll_FreeConsole]
push 0x208
call fcn.1002c8cf
add esp, 4
mov esi, eax
push 0x208
push 0
push esi
call fcn.1002de40
add esp, 0xc
push 0x10067ba0
push str._spackage_beta
push 0xffffffffffffffff
push 0x104
push esi
call fcn.10001320
add esp, 0x14
push 0
push 0x80
push 3
push 0
push 1
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x10024d87
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.You_are_using_Steam_beta_files__GreenLuma_might_not_work_correctly__r_n
call fcn.10002120
add esp, 4
push 0x30
push str.Beta
push str.You_are_using_Steam_beta_files__GreenLuma_might_not_work_correctly_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, 0x208
mov eax, esi
nop
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x10024d90
push esi
call fcn.1002c375
add esp, 4
cmp byte [0x10065e8d], 1
jne 0x10024dd5
push 0
push 0
push 0
push 0x10022fe0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x10024e54
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, str.User32.dll
mov ecx, 0x10072b98
call fcn.10008ce0
test al, al
jne 0x10024e3e
push 0
push 0x80
push 2
push 0
push 2
push 0x40000000
push 0x10066098
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x10024e6f
push 0
lea eax, [esp + 0x78]
mov dword [esp + 0x78], 0
push eax
push 1
push 0x1005bb8c
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x94c]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.1002c362
mov esp, ebp
pop ebp
ret
mov edi, dword [sym.imp.USER32.dll_MessageBoxW]
push 0x10
push str.GreenLuma_2024
push str.Stealth_mode_failed___2_
push 0
call edi
jmp 0x10024ddb
push 0x10
push str.GreenLuma_2024
push 0x1005bb90
push 0
call edi
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10
push str.GreenLuma_2024
push str.Unable_to_load_Steamclient.dll_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
mov ecx, 0x100731d8
xchg dword [ecx], eax
push 0x10
push str.GreenLuma_2024
push str.Unable_to_initialize_MinHook
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10
push str.GreenLuma_2024
push str.Failed_to_get_functions_from_bypass_dll_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.1002c49c
int3