Function at 0x40dcc0
Capabilities:
Create process on windows
Create process suspended
Resume thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x8678
call fcn.004133f0
mov eax, dword [0x440100]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x4512a0], 7
mov eax, 0x45128c
push esi
cmova eax, dword [0x45128c]
push edi
mov edi, dword [ebp + 0x10]
push eax
call fcn.00411450
push 0x451274
call fcn.00410d70
add esp, 8
test al, al
jne 0x40dd9c
mov ecx, dword [0x45129c]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x26
jb 0x40ff01
cmp dword [0x4512a0], 7
mov eax, 0x45128c
push ecx
cmova eax, dword [0x45128c]
lea ecx, [ebp - 0x8298]
push eax
push 0x26
push str.Couldnt_find_the_configuration_file:
push 0x45128c
push dword [ebp - 0x85fc]
call fcn.00403e00
lea eax, [ebp - 0x8298]
push eax
call fcn.00406ba0
add esp, 4
lea ecx, [ebp - 0x8298]
call fcn.00404be0
push 0x10
push 0x432fb0
push str.Couldnt_find_the_configuration_file_ColdClientLoader.ini.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00406ba0
mov eax, 1
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00413212
mov esp, ebp
pop ebp
ret 0x10
lea eax, [ebp - 0x83e8]
push eax
call fcn.0040ffb0
push 0
push str.SteamClientDll
mov esi, eax
lea eax, [ebp - 0x85e0]
push str.SteamClient
push eax
call fcn.0040a2f0
push esi
push eax
lea eax, [ebp - 0x85c8]
push eax
call fcn.00410f80
mov esi, eax
add esp, 0x20
cmp esi, 0x440010
je 0x40de11
mov ecx, 0x440010
call fcn.00404be0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [0x440010], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x440020], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x85c8]
call fcn.00404be0
lea ecx, [ebp - 0x85e0]
call fcn.00404be0
lea ecx, [ebp - 0x83e8]
call fcn.00404be0
lea eax, [ebp - 0x8430]
push eax
call fcn.0040ffb0
push 0
push str.SteamClient64Dll
mov esi, eax
lea eax, [ebp - 0x8418]
push str.SteamClient
push eax
call fcn.0040a2f0
push esi
push eax
lea eax, [ebp - 0x8400]
push eax
call fcn.00410f80
mov esi, eax
add esp, 0x20
cmp esi, 0x440028
je 0x40dea7
mov ecx, 0x440028
call fcn.00404be0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [0x440028], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x440038], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
push ebx
lea ecx, [ebp - 0x8400]
call fcn.00404be0
lea ecx, [ebp - 0x8418]
call fcn.00404be0
lea ecx, [ebp - 0x8430]
call fcn.00404be0
lea eax, [ebp - 0x8460]
push eax
call fcn.0040ffb0
push 0
push 0x43303c
mov esi, eax
lea eax, [ebp - 0x8448]
push str.SteamClient
push eax
call fcn.0040a2f0
push esi
push eax
lea eax, [ebp - 0x8108]
push eax
call fcn.00410f80
add esp, 0x20
lea ecx, [ebp - 0x8448]
call fcn.00404be0
lea ecx, [ebp - 0x8460]
call fcn.00404be0
lea eax, [ebp - 0x8490]
push eax
call fcn.0040ffb0
push 0
push str.ExeRunDir
mov esi, eax
lea eax, [ebp - 0x8478]
push str.SteamClient
push eax
call fcn.0040a2f0
push esi
push eax
lea eax, [ebp - 0x8138]
push eax
call fcn.00410f80
add esp, 0x20
lea ecx, [ebp - 0x8478]
call fcn.00404be0
lea ecx, [ebp - 0x8490]
call fcn.00404be0
push 0
push str.ExeCommandLine
lea eax, [ebp - 0x8168]
push str.SteamClient
push eax
call fcn.0040a2f0
push 0
push str.AppId
lea eax, [ebp - 0x8078]
push str.SteamClient
push eax
call fcn.0040a2f0
push 0
push str.ForceInjectSteamClient
lea eax, [ebp - 0x81e0]
push str.Injection
push eax
call fcn.0040a2f0
push 0
push str.ForceInjectGameOverlayRenderer
lea eax, [ebp - 0x81c8]
push str.Injection
push eax
call fcn.0040a2f0
add esp, 0x40
lea eax, [ebp - 0x84c0]
push eax
call fcn.0040ffb0
push 0
push str.DllsToInjectFolder
mov esi, eax
lea eax, [ebp - 0x84a8]
push str.Injection
push eax
call fcn.0040a2f0
push esi
push eax
lea eax, [ebp - 0x8150]
push eax
call fcn.00410f80
add esp, 0x20
lea ecx, [ebp - 0x84a8]
call fcn.00404be0
lea ecx, [ebp - 0x84c0]
call fcn.00404be0
push 0x4329a8
push str.IgnoreInjectionError
lea eax, [ebp - 0x81b0]
push str.Injection
push eax
call fcn.0040a2f0
push 0x43315c
push 0x433160
lea eax, [ebp - 0x8198]
push str.Injection
push eax
call fcn.0040a2f0
push 0x43315c
push str.Mode
lea eax, [ebp - 0x80c0]
push str.Persistence
push eax
call fcn.0040a2f0
push 0
push str.ResumeByDebugger
lea eax, [ebp - 0x8240]
push str.Debug
push eax
call fcn.0040a2f0
add esp, 0x40
lea eax, [ebp - 0x81e0]
push eax
call fcn.0040ca20
lea eax, [ebp - 0x81c8]
push eax
call fcn.0040ca20
lea eax, [ebp - 0x81b0]
push eax
call fcn.0040ca20
lea eax, [ebp - 0x8198]
push eax
call fcn.0040ca20
lea eax, [ebp - 0x8240]
push eax
call fcn.0040ca20
mov ebx, dword [ebp - 0x80ac]
lea eax, [ebp - 0x80c0]
mov esi, dword [ebp - 0x80b0]
add esp, 0x14
cmp ebx, 7
cmova eax, dword [ebp - 0x80c0]
cmp esi, 1
jne 0x40e0f2
push esi
push 0x43315c
push eax
call fcn.00409580
add esp, 0xc
test eax, eax
je 0x40e140
lea eax, [ebp - 0x80c0]
push 0x4329a8
push eax
call fcn.00401590
add esp, 8
test al, al
je 0x40e140
lea eax, [ebp - 0x80c0]
push 0x4331ec
push eax
call fcn.00401590
add esp, 8
test al, al
je 0x40e140
push 1
push 0x43315c
lea ecx, [ebp - 0x80c0]
call fcn.00407a40
mov ebx, dword [ebp - 0x80ac]
mov esi, dword [ebp - 0x80b0]
mov ecx, dword [ebp - 0x80f8]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x12
jb 0x40ff06
cmp dword [ebp - 0x80f4], 7
lea eax, [ebp - 0x8108]
push ecx
cmova eax, dword [ebp - 0x8108]
lea ecx, [ebp - 0x8228]
push eax
push 0x12
push 0x4331f0
lea eax, [ebp - 0x8108]
push eax
push dword [ebp - 0x85fc]
call fcn.00403e00
lea eax, [ebp - 0x8228]
push eax
call fcn.00406ba0
add esp, 4
lea ecx, [ebp - 0x8228]
call fcn.00404be0
mov ecx, dword [ebp - 0x8128]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x18
jb 0x40ff0b
cmp dword [ebp - 0x8124], 7
lea eax, [ebp - 0x8138]
push ecx
cmova eax, dword [ebp - 0x8138]
lea ecx, [ebp - 0x8210]
push eax
push 0x18
push str.SteamClient::ExeRunDir:
lea eax, [ebp - 0x8138]
push eax
push dword [ebp - 0x85fc]
call fcn.00403e00
lea eax, [ebp - 0x8210]
push eax
call fcn.00406ba0
add esp, 4
lea ecx, [ebp - 0x8210]
call fcn.00404be0
mov ecx, dword [ebp - 0x8158]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x1d
jb 0x40ff10
cmp dword [ebp - 0x8154], 7
lea eax, [ebp - 0x8168]
push ecx
cmova eax, dword [ebp - 0x8168]
lea ecx, [ebp - 0x81f8]
push eax
push 0x1d
push str.SteamClient::ExeCommandLine:
lea eax, [ebp - 0x8168]
push eax
push dword [ebp - 0x85fc]
call fcn.00403e00
lea eax, [ebp - 0x81f8]
push eax
call fcn.00406ba0
add esp, 4
lea ecx, [ebp - 0x81f8]
call fcn.00404be0
mov ecx, dword [ebp - 0x8068]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x14
jb 0x40ff15
cmp dword [ebp - 0x8064], 7
lea eax, [ebp - 0x8078]
push ecx
cmova eax, dword [ebp - 0x8078]
lea ecx, [ebp - 0x8120]
push eax
push 0x14
push str.SteamClient::AppId:
lea eax, [ebp - 0x8078]
push eax
push dword [ebp - 0x85fc]
call fcn.00403e00
lea eax, [ebp - 0x8120]
push eax
call fcn.00406ba0
add esp, 4
lea ecx, [ebp - 0x8120]
call fcn.00404be0
mov ecx, dword [0x440020]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x1a
jb 0x40ff1a
cmp dword [0x440024], 7
mov eax, 0x440010
push ecx
cmova eax, dword [0x440010]
lea ecx, [ebp - 0x8358]
push eax
push 0x1a
push str.SteamClient::SteamClient:
push 0x440010
push dword [ebp - 0x85fc]
call fcn.00403e00
lea eax, [ebp - 0x8358]
push eax
call fcn.00406ba0
add esp, 4
lea ecx, [ebp - 0x8358]
call fcn.00404be0
mov ecx, dword [0x440038]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x1f
jb 0x40ff1f
cmp dword [0x44003c], 7
mov eax, 0x440028
push ecx
cmova eax, dword [0x440028]
lea ecx, [ebp - 0x8370]
push eax
push 0x1f
push str.SteamClient::SteamClient64Dll:
push 0x440028
push dword [ebp - 0x85fc]
call fcn.00403e00
lea eax, [ebp - 0x8370]
push eax
call fcn.00406ba0
add esp, 4
lea ecx, [ebp - 0x8370]
call fcn.00404be0
mov eax, 0x7ffffffe
sub eax, esi
cmp eax, 0x1d
jb 0x40ff24
push esi
cmp ebx, 7
lea eax, [ebp - 0x80c0]
lea ecx, [ebp - 0x8388]
cmova eax, dword [ebp - 0x80c0]
push eax
push 0x1d
push str.SteamClient::PersistentMode:
lea eax, [ebp - 0x80c0]
push eax
push dword [ebp - 0x85fc]
call fcn.00403e00
lea eax, [ebp - 0x8388]
push eax
call fcn.00406ba0
add esp, 4
lea ecx, [ebp - 0x8388]
call fcn.00404be0
mov ecx, dword [ebp - 0x81d0]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x25
jb 0x40ff29
cmp dword [ebp - 0x81cc], 7
lea eax, [ebp - 0x81e0]
push ecx
cmova eax, dword [ebp - 0x81e0]
lea ecx, [ebp - 0x83a0]
push eax
push 0x25
push str.SteamClient::ForceInjectSteamClient:
lea eax, [ebp - 0x81e0]
push eax
push dword [ebp - 0x85fc]
call fcn.00403e00
lea eax, [ebp - 0x83a0]
push eax
call fcn.00406ba0
add esp, 4
lea ecx, [ebp - 0x83a0]
call fcn.00404be0
mov ecx, dword [ebp - 0x81b8]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x2d
jb 0x40ff2e
cmp dword [ebp - 0x81b4], 7
lea eax, [ebp - 0x81c8]
push ecx
cmova eax, dword [ebp - 0x81c8]
lea ecx, [ebp - 0x83b8]
push eax
push 0x2d
push str.SteamClient::ForceInjectGameOverlayRenderer:
lea eax, [ebp - 0x81c8]
push eax
push dword [ebp - 0x85fc]
call fcn.00403e00
lea eax, [ebp - 0x83b8]
push eax
call fcn.00406ba0
add esp, 4
lea ecx, [ebp - 0x83b8]
call fcn.00404be0
mov ecx, dword [ebp - 0x8140]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x1f
jb 0x40ff33
cmp dword [ebp - 0x813c], 7
lea eax, [ebp - 0x8150]
push ecx
cmova eax, dword [ebp - 0x8150]
lea ecx, [ebp - 0x8340]
push eax
push 0x1f
push str.Injection::DllsToInjectFolder:
lea eax, [ebp - 0x8150]
push eax
push dword [ebp - 0x85fc]
call fcn.00403e00
lea eax, [ebp - 0x8340]
push eax
call fcn.00406ba0
add esp, 4
lea ecx, [ebp - 0x8340]
call fcn.00404be0
mov ecx, dword [ebp - 0x81a0]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x21
jb 0x40ff38
cmp dword [ebp - 0x819c], 7
lea eax, [ebp - 0x81b0]
push ecx
cmova eax, dword [ebp - 0x81b0]
lea ecx, [ebp - 0x83d0]
push eax
push 0x21
push str.Injection::IgnoreInjectionError:
lea eax, [ebp - 0x81b0]
push eax
push dword [ebp - 0x85fc]
call fcn.00403e00
lea eax, [ebp - 0x83d0]
push eax
call fcn.00406ba0
add esp, 4
lea ecx, [ebp - 0x83d0]
call fcn.00404be0
mov ecx, dword [ebp - 0x8188]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x27
jb 0x40ff3d
cmp dword [ebp - 0x8184], 7
lea eax, [ebp - 0x8198]
push ecx
cmova eax, dword [ebp - 0x8198]
lea ecx, [ebp - 0x8328]
push eax
push 0x27
push str.Injection::IgnoreLoaderArchDifference:
lea eax, [ebp - 0x8198]
push eax
push dword [ebp - 0x85fc]
call fcn.00403e00
lea eax, [ebp - 0x8328]
push eax
call fcn.00406ba0
add esp, 4
lea ecx, [ebp - 0x8328]
call fcn.00404be0
mov ecx, dword [ebp - 0x8230]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x19
jb 0x40ff42
cmp dword [ebp - 0x822c], 7
lea eax, [ebp - 0x8240]
push ecx
cmova eax, dword [ebp - 0x8240]
lea ecx, [ebp - 0x8310]
push eax
push 0x19
push str.Debug::ResumeByDebugger:
lea eax, [ebp - 0x8240]
push eax
push dword [ebp - 0x85fc]
call fcn.00403e00
lea eax, [ebp - 0x8310]
push eax
call fcn.00406ba0
add esp, 4
lea ecx, [ebp - 0x8310]
call fcn.00404be0
push 0x440028
call fcn.00410d70
add esp, 4
test al, al
jne 0x40e680
push str.Couldnt_find_the_requested_SteamClient64Dll
call fcn.00406ba0
add esp, 4
push 0x10
push 0x432fb0
push str.Couldnt_find_the_requested_SteamClient64Dll.
jmp 0x40e7a6
push 0x440010
call fcn.00410d70
add esp, 4
test al, al
jne 0x40e6af
push str.Couldnt_find_the_requested_SteamClientDll
call fcn.00406ba0
add esp, 4
push 0x10
push 0x432fb0
push str.Couldnt_find_the_requested_SteamClientDll.
jmp 0x40e7a6
lea eax, [ebp - 0x8108]
push eax
call fcn.00410d70
add esp, 4
test al, al
jne 0x40e6e0
push str.Couldnt_find_the_requested_Exe_file
call fcn.00406ba0
add esp, 4
push 0x10
push 0x432fb0
push str.Couldnt_find_the_requested_Exe_file.
jmp 0x40e7a6
cmp dword [ebp - 0x8128], 0
jne 0x40e77a
push 0
lea eax, [ebp - 0x8108]
push eax
lea ecx, [ebp - 0x84f0]
call fcn.00401500
lea ecx, [ebp - 0x84d8]
push ecx
mov ecx, eax
call fcn.0040b2e0
push eax
lea ecx, [ebp - 0x82f8]
call fcn.00403aa0
lea eax, [ebp - 0x82f8]
push eax
lea ecx, [ebp - 0x8138]
call fcn.004051d0
lea ecx, [ebp - 0x82f8]
call fcn.00404be0
lea ecx, [ebp - 0x84d8]
call fcn.00404be0
lea ecx, [ebp - 0x84f0]
call fcn.00404be0
lea eax, [ebp - 0x8138]
push eax
lea eax, [ebp - 0x8508]
push str.Setting_ExeRunDir_to:
push eax
call fcn.004017a0
push eax
call fcn.00406ba0
add esp, 0x10
lea ecx, [ebp - 0x8508]
call fcn.00404be0
lea eax, [ebp - 0x8138]
push eax
call fcn.00410c10
add esp, 4
test al, al
jne 0x40e7bd
push str.Couldnt_find_the_requested_Exe_run_dir
call fcn.00406ba0
add esp, 4
push 0x10
push 0x432fb0
push str.Couldnt_find_the_requested_Exe_run_dir.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00406ba0
mov esi, 1
jmp 0x40fe73
xor bh, bh
cmp dword [ebp - 0x8140], 0
je 0x40e7fe
lea eax, [ebp - 0x8150]
push eax
call fcn.00410c10
mov bh, al
add esp, 4
test bh, bh
jne 0x40e7fe
push str.Couldnt_find_the_requested_folder_of_dlls_to_inject
call fcn.00406ba0
add esp, 4
push 0x10
push 0x432fb0
push str.Couldnt_find_the_requested_folder_of_dlls_to_inject.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea eax, [ebp - 0x8108]
push eax
lea eax, [ebp - 0x8634]
push eax
call fcn.0040a4e0
mov esi, dword [ebp - 0x8634]
add esp, 8
cmp esi, dword [ebp - 0x8630]
jne 0x40e840
push str.Couldnt_read_the_exe_header
call fcn.00406ba0
add esp, 4
push 0x10
push 0x432fb0
push str.Couldnt_read_the_exe_header.
jmp 0x40ea30
push esi
call fcn.00410630
mov bl, al
push esi
mov byte [ebp - 0x8604], bl
call fcn.00410670
add esp, 8
test bl, bl
jne 0x40ea0f
test al, al
je 0x40ea17
mov ecx, str.Detected_exe_arch:_x32
test bl, bl
mov eax, str.Detected_exe_arch:_x64
cmovne eax, ecx
push eax
call fcn.00406ba0
cmp byte [0x4512b0], 0
mov ecx, str.Detected_loader_arch:_x64
mov eax, str.Detected_loader_arch:_x32
cmove eax, ecx
push eax
call fcn.00406ba0
add esp, 8
cmp byte [0x4512b0], bl
je 0x40e8cc
push str.Arch_of_loader_and_requested_exe_are_different__it_is_advised_to_use_the_appropriate_one
call fcn.00406ba0
add esp, 4
cmp dword [ebp - 0x8188], 0
jne 0x40e8cc
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0
push 0x432fb0
push str.Arch_of_loader_and_requested_exe_are_different__nit_is_advised_to_use_the_appropriate_one.
push 0
call eax
mov eax, dword [ebp - 0x81a0]
mov dword [ebp - 0x8614], eax
test bh, bh
je 0x40eaa5
xor eax, eax
mov dword [ebp - 0x8038], 0
xorps xmm0, xmm0
mov dword [ebp - 0x8034], 7
movups xmmword [ebp - 0x8048], xmm0
mov word [ebp - 0x8048], ax
lea eax, [ebp - 0x8048]
push eax
push dword [ebp - 0x8604]
lea eax, [ebp - 0x8150]
push eax
lea eax, [ebp - 0x8264]
push eax
call fcn.00408310
mov esi, eax
add esp, 0x10
cmp esi, 0x4512a4
je 0x40e96b
mov ecx, 0x4512a4
call fcn.004075c0
mov ecx, dword [esi]
mov dword [0x4512a4], ecx
mov ecx, dword [esi + 4]
mov dword [0x4512a8], ecx
mov eax, dword [esi + 8]
mov dword [0x4512ac], eax
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
lea ecx, [ebp - 0x8264]
call fcn.004075c0
cmp dword [ebp - 0x8038], 0
je 0x40ea48
cmp dword [ebp - 0x8614], 0
jne 0x40ea48
push str._nContinue__
lea eax, [ebp - 0x8048]
push eax
lea eax, [ebp - 0x8538]
push str.The_following_dlls_cannot_be_injected:_n
push eax
call fcn.004017a0
add esp, 0xc
push eax
lea eax, [ebp - 0x8520]
push eax
call fcn.004016c0
add esp, 0xc
cmp dword [eax + 0x14], 7
jbe 0x40e9c8
mov eax, dword [eax]
push 4
push str.ColdClientLoader
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x8520]
mov esi, eax
call fcn.00404be0
lea ecx, [ebp - 0x8538]
call fcn.00404be0
cmp esi, 6
je 0x40ea48
call fcn.00406ba0
lea ecx, [ebp - 0x8048]
call fcn.00404be0
mov esi, 1
jmp 0x40fe68
test al, al
je 0x40e867
push str.The_requested_exe_is_invalid__neither_32_nor_64_bit_
call fcn.00406ba0
add esp, 4
push 0x10
push 0x432fb0
push str.The_requested_exe_is_invalid__neither_32_nor_64_bit_
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call eax
call fcn.00406ba0
mov esi, 1
jmp 0x40fe68
mov ecx, dword [ebp - 0x8034]
cmp ecx, 7
jbe 0x40ea88
mov edx, dword [ebp - 0x8048]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40ea7e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ff47
push ecx
push edx
call fcn.00412fae
add esp, 8
xor eax, eax
mov dword [ebp - 0x8038], 0
mov dword [ebp - 0x8034], 7
mov word [ebp - 0x8048], ax
cmp dword [ebp - 0x81b8], 0
je 0x40ed96
xorps xmm0, xmm0
test bl, bl
je 0x40ec2e
cmp dword [0x440024], 7
lea ecx, [ebp - 0x8060]
push dword [0x440020]
mov eax, 0x440010
mov dword [ebp - 0x8050], 0
cmova eax, dword [0x440010]
push eax
movups xmmword [ebp - 0x8060], xmm0
mov dword [ebp - 0x804c], 0
call fcn.00401a30
lea eax, [ebp - 0x85f8]
push eax
lea ecx, [ebp - 0x8060]
call fcn.0040b2e0
push eax
lea ecx, [ebp - 0x82c8]
call fcn.00403aa0
push str.GameOverlayRenderer.dll
lea ecx, [ebp - 0x82e0]
call fcn.00403ba0
lea eax, [ebp - 0x82c8]
push eax
lea eax, [ebp - 0x82e0]
push eax
lea eax, [ebp - 0x80a8]
push eax
call fcn.00410f80
add esp, 0xc
lea ecx, [ebp - 0x82e0]
call fcn.00404be0
lea ecx, [ebp - 0x82c8]
call fcn.00404be0
lea ecx, [ebp - 0x85f8]
call fcn.00404be0
mov ecx, dword [ebp - 0x804c]
cmp ecx, 7
jbe 0x40eba9
mov edx, dword [ebp - 0x8060]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40eb9f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ff4c
push ecx
push edx
call fcn.00412fae
add esp, 8
xor eax, eax
mov dword [ebp - 0x8050], 0
mov word [ebp - 0x8060], ax
lea eax, [ebp - 0x80a8]
push eax
mov dword [ebp - 0x804c], 7
call fcn.00410d70
add esp, 4
test al, al
jne 0x40ec05
push str.Couldnt_find_GameOverlayRenderer.dll
call fcn.00406ba0
add esp, 4
push 0x10
push 0x432fb0
push str.Couldnt_find_GameOverlayRenderer.dll.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x80a8]
jmp 0x40ed91
lea eax, [ebp - 0x80a8]
mov ecx, 0x4512a4
push eax
push dword [0x4512a4]
lea eax, [ebp - 0x85fc]
push eax
call fcn.0040aac0
lea ecx, [ebp - 0x80a8]
jmp 0x40ed91
cmp dword [0x44003c], 7
lea ecx, [ebp - 0x80d8]
push dword [0x440038]
mov eax, 0x440028
mov dword [ebp - 0x80c8], 0
cmova eax, dword [0x440028]
push eax
movups xmmword [ebp - 0x80d8], xmm0
mov dword [ebp - 0x80c4], 0
call fcn.00401a30
lea eax, [ebp - 0x8550]
push eax
lea ecx, [ebp - 0x80d8]
call fcn.0040b2e0
push eax
lea ecx, [ebp - 0x8258]
call fcn.00403aa0
push str.GameOverlayRenderer64.dll
lea ecx, [ebp - 0x82b0]
call fcn.00403ba0
lea eax, [ebp - 0x8258]
push eax
lea eax, [ebp - 0x82b0]
push eax
lea eax, [ebp - 0x8180]
push eax
call fcn.00410f80
add esp, 0xc
lea ecx, [ebp - 0x82b0]
call fcn.00404be0
lea ecx, [ebp - 0x8258]
call fcn.00404be0
lea ecx, [ebp - 0x8550]
call fcn.00404be0
mov ecx, dword [ebp - 0x80c4]
cmp ecx, 7
jbe 0x40ed1a
mov edx, dword [ebp - 0x80d8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40ed10
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ff51
push ecx
push edx
call fcn.00412fae
add esp, 8
xor eax, eax
mov dword [ebp - 0x80c8], 0
mov word [ebp - 0x80d8], ax
lea eax, [ebp - 0x8180]
push eax
mov dword [ebp - 0x80c4], 7
call fcn.00410d70
add esp, 4
test al, al
jne 0x40ed6d
push str.Couldnt_find_GameOverlayRenderer64.dll
call fcn.00406ba0
add esp, 4
push 0x10
push 0x432fb0
push str.Couldnt_find_GameOverlayRenderer64.dll.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x40ed8b
lea eax, [ebp - 0x8180]
mov ecx, 0x4512a4
push eax
push dword [0x4512a4]
lea eax, [ebp - 0x85fc]
push eax
call fcn.0040aac0
lea ecx, [ebp - 0x8180]
call fcn.00404be0
cmp dword [ebp - 0x81d0], 0
je 0x40edc6
lea eax, [ebp - 0x8618]
mov ecx, 0x4512a4
test bl, bl
je 0x40edb5
push 0x440010
jmp 0x40edba
push 0x440028
push dword [0x4512a4]
push eax
call fcn.0040aac0
lea eax, [ebp - 0x80c0]
push 0x4331ec
push eax
call fcn.00401590
add esp, 8
test al, al
je 0x40ee40
cmp dword [ebp - 0x8068], 0
je 0x40ee15
cmp dword [ebp - 0x8064], 7
lea eax, [ebp - 0x8078]
cmova eax, dword [ebp - 0x8078]
cmp word [eax], 0
je 0x40ee15
lea eax, [ebp - 0x8078]
push eax
call fcn.0040c760
add esp, 4
jmp 0x40f06f
push str.You_forgot_to_set_the_AppId
call fcn.00406ba0
add esp, 4
push 0x10
push 0x432fb0
push str.You_forgot_to_set_the_AppId.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esi, 1
jmp 0x40fe68
lea ecx, [ebp - 0x8078]
call fcn.00408070
test edi, edi
je 0x40ee7d
cmp word [edi], 0
je 0x40ee7d
push edi
lea ecx, [ebp - 0x8568]
call fcn.00403ba0
push eax
lea ecx, [ebp - 0x8090]
call fcn.00403a50
lea ecx, [ebp - 0x8568]
call fcn.00404be0
jmp 0x40ef13
xorps xmm0, xmm0
mov dword [ebp - 0x80e0], 0
xor eax, eax
mov dword [ebp - 0x80dc], 7
movups xmmword [ebp - 0x80f0], xmm0
mov word [ebp - 0x80f0], ax
lea ecx, [ebp - 0x8090]
lea eax, [ebp - 0x80f0]
push eax
call fcn.00403a50
mov ecx, dword [ebp - 0x80dc]
cmp ecx, 7
jbe 0x40eef6
mov edx, dword [ebp - 0x80f0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40eeec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ff56
push ecx
push edx
call fcn.00412fae
add esp, 8
xor eax, eax
mov dword [ebp - 0x80e0], 0
mov dword [ebp - 0x80dc], 7
mov word [ebp - 0x80f0], ax
push 0x433a94
lea eax, [ebp - 0x8090]
push eax
lea eax, [ebp - 0x8598]
push 0x433a98
push eax
call fcn.004017a0
add esp, 0xc
push eax
lea eax, [ebp - 0x8580]
push eax
call fcn.004016c0
push eax
call fcn.00406ba0
add esp, 0x10
lea ecx, [ebp - 0x8580]
call fcn.00404be0
lea ecx, [ebp - 0x8598]
call fcn.00404be0
push 0
push str.steam:__run_
lea ecx, [ebp - 0x8090]
call fcn.00409ee0
lea ecx, [ebp - 0x8090]
push 0
test eax, eax
jne 0x40efba
push 0x433b04
call fcn.00409fc0
push eax
push 0xd
lea eax, [ebp - 0x85b0]
push eax
lea ecx, [ebp - 0x8090]
call fcn.0040c940
push eax
lea ecx, [ebp - 0x8078]
call fcn.004051d0
lea ecx, [ebp - 0x85b0]
call fcn.00404be0
mov eax, str.persistent_mode_2_got_steam_launch_cmd_1
jmp 0x40f00b
push str.____steam:__rungameid_
call fcn.00409ee0
test eax, eax
jne 0x40f006
push eax
push 0x433b04
lea ecx, [ebp - 0x8090]
call fcn.00409fc0
push eax
push 0x17
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x8090]
call fcn.0040c940
push eax
lea ecx, [ebp - 0x8078]
call fcn.004051d0
lea ecx, [ebp - 0x20]
call fcn.00404be0
mov eax, str.persistent_mode_2_got_steam_launch_cmd_2
jmp 0x40f00b
mov eax, str.persistent_mode_2_didnt_detect_a_valid_steam_launch_cmd
push eax
call fcn.00406ba0
add esp, 4
cmp dword [ebp - 0x8068], 0
je 0x40f057
lea eax, [ebp - 0x8078]
push eax
call fcn.0040c760
lea eax, [ebp - 0x8078]
push eax
lea eax, [ebp - 0x8280]
push str.persistent_mode_2_will_use_app_id_
push eax
call fcn.004017a0
push eax
call fcn.00406ba0
add esp, 0x14
lea ecx, [ebp - 0x8280]
call fcn.00404be0
jmp 0x40f064
push str.persistent_mode_2_didnt_find_app_id
call fcn.00406ba0
add esp, 4
lea ecx, [ebp - 0x8090]
call fcn.00404be0
call fcn.0040b7a0
test al, al
jne 0x40f09b
call fcn.00406ba0
push 0x10
push 0x432fb0
push str.Unable_to_patch_Registry__HKCU_.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esi, 1
jmp 0x40fe68
call fcn.0040ba20
test al, al
jne 0x40f0cc
call fcn.00407d40
call fcn.00406ba0
push 0x10
push 0x432fb0
push str.Unable_to_patch_Registry__HKLM_.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esi, 1
jmp 0x40fe68
call fcn.0040b390
lea eax, [ebp - 0x80c0]
push 0x4331ec
push eax
call fcn.00401590
add esp, 8
test al, al
jne 0x40f0f6
cmp dword [ebp - 0x8068], 0
je 0x40fdd6
push 0x44
lea eax, [ebp - 0x8678]
push 0
push eax
call fcn.00414d10
add esp, 0xc
lea eax, [ebp - 0x8678]
mov ecx, 0x44
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40f114
xorps xmm0, xmm0
mov dword [ebp - 0x8678], 0x44
movups xmmword [ebp - 0x8628], xmm0
mov ecx, 0x10
lea eax, [ebp - 0x8628]
nop
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40f140
push str.spawning_the_requested_EXE_file
call fcn.00406ba0
push 0x8000
lea eax, [ebp - 0x8030]
push 0
push eax
call fcn.00414d10
cmp dword [ebp - 0x8154], 7
lea ecx, [ebp - 0x8168]
push edi
cmova ecx, dword [ebp - 0x8168]
lea eax, [ebp - 0x8108]
cmp dword [ebp - 0x80f4], 7
push ecx
cmova eax, dword [ebp - 0x8108]
push eax
push str.__ls___ls__ls
lea eax, [ebp - 0x8030]
push 0x4000
push eax
call fcn.0040dc80
add esp, 0x28
lea edx, [ebp - 0x8628]
cmp dword [ebp - 0x8124], 7
lea eax, [ebp - 0x8138]
lea ecx, [ebp - 0x8108]
cmova eax, dword [ebp - 0x8138]
cmp dword [ebp - 0x80f4], 7
push edx
cmova ecx, dword [ebp - 0x8108]
lea edx, [ebp - 0x8678]
push edx
push eax
push 0
push 4
push 1
push 0
push 0
lea eax, [ebp - 0x8030]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x40f23e
push str.Unable_to_load_the_requested_EXE_file
call fcn.00406ba0
add esp, 4
call fcn.00407d40
call fcn.00407ee0
call fcn.00407b90
call fcn.00406ba0
push 0x10
push 0x432fb0
push str.Unable_to_load_the_requested_EXE_file.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esi, 1
jmp 0x40fe68
mov ecx, dword [0x4512a8]
mov eax, 0x2aaaaaab
sub ecx, dword [0x4512a4]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
lea eax, [ebp - 0x8033]
push eax
call fcn.004027e0
add esp, 8
lea ecx, [ebp - 0x8605]
push ecx
lea ecx, [ebp - 0x8033]
push ecx
push eax
lea ecx, [ebp - 0x8258]
call fcn.00401320
push str._dlls
lea eax, [ebp - 0x8258]
push eax
lea eax, [ebp - 0x20]
push str.injecting
push eax
call fcn.00401650
add esp, 0xc
push eax
lea eax, [ebp - 0x8280]
push eax
call fcn.004015e0
push eax
call fcn.00406ba0
add esp, 0x10
lea ecx, [ebp - 0x8280]
call fcn.00404b90
lea ecx, [ebp - 0x20]
call fcn.00404b90
lea ecx, [ebp - 0x8258]
call fcn.00404b90
mov eax, dword [0x4512a8]
mov esi, dword [0x4512a4]
mov dword [ebp - 0x8604], eax
cmp esi, eax
je 0x40fa39
nop
mov ecx, dword [esi + 0x10]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x10
jb 0x40ff01
cmp dword [esi + 0x14], 7
mov eax, esi
jbe 0x40f30d
mov eax, dword [esi]
push ecx
push eax
push 0x10
push str.Injecting_dll:_
push esi
push dword [ebp - 0x85fc]
lea ecx, [ebp - 0x80a8]
call fcn.00403e00
push str._...
lea eax, [ebp - 0x80a8]
push eax
lea eax, [ebp - 0x8120]
push eax
call fcn.004016c0
push eax
call fcn.00406ba0
mov ecx, dword [ebp - 0x810c]
add esp, 0x10
cmp ecx, 7
jbe 0x40f389
mov edx, dword [ebp - 0x8120]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f37f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ff47
push ecx
push edx
call fcn.00412fae
add esp, 8
mov ecx, dword [ebp - 0x8094]
xor eax, eax
mov dword [ebp - 0x8110], 0
mov dword [ebp - 0x810c], 7
mov word [ebp - 0x8120], ax
cmp ecx, 7
jbe 0x40f3e6
mov edx, dword [ebp - 0x80a8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f3dc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ff47
push ecx
push edx
call fcn.00412fae
add esp, 8
lea eax, [ebp - 0x8610]
mov dword [ebp - 0x8610], 0
push eax
push esi
push dword [ebp - 0x8628]
call fcn.004106b0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x40fa1d
lea eax, [ebp - 6]
push edi
push eax
call fcn.00402820
add esp, 8
lea ecx, [ebp - 0x8605]
push ecx
lea ecx, [ebp - 6]
push ecx
push eax
lea ecx, [ebp - 0x8298]
call fcn.004013e0
lea eax, [ebp - 0x80a8]
push edi
push eax
call fcn.00410480
push eax
lea eax, [ebp - 0x8180]
push eax
call fcn.00410e60
mov edx, dword [ebp - 0x8610]
xorps xmm0, xmm0
mov ecx, edx
mov dword [ebp - 0x8080], 0
add esp, 0x10
mov dword [ebp - 0x807c], 0
mov ebx, eax
movups xmmword [ebp - 0x8090], xmm0
lea edi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40f480
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x8090]
call fcn.004019a0
lea eax, [ebp - 0x8090]
push eax
lea eax, [ebp - 0x8228]
push eax
call fcn.00410e60
mov edx, dword [esi + 0x10]
mov ecx, 0x7ffffffe
sub ecx, edx
add esp, 8
mov edi, eax
cmp ecx, 0x1a
jb 0x40ff01
cmp dword [esi + 0x14], 7
mov ecx, esi
jbe 0x40f4cb
mov ecx, dword [esi]
push edx
push ecx
push 0x1a
push str.Failed_to_inject_the_dll:
push esi
push dword [ebp - 0x85fc]
lea ecx, [ebp - 0x8120]
call fcn.00403e00
push 0x4327dc
lea eax, [ebp - 0x8120]
push eax
lea eax, [ebp - 0x8210]
push eax
call fcn.004016c0
add esp, 0xc
lea ecx, [ebp - 0x80d8]
push edi
push eax
push dword [ebp - 0x85fc]
call fcn.00403bf0
push 0x4327dc
lea eax, [ebp - 0x80d8]
push eax
lea eax, [ebp - 0x8280]
push eax
call fcn.004016c0
add esp, 0xc
lea ecx, [ebp - 0x80f0]
push ebx
push eax
push dword [ebp - 0x85fc]
call fcn.00403bf0
push 1
push 0x4327dc
lea ecx, [ebp - 0x80f0]
call fcn.004079d0
mov dword [ebp - 0x8050], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x8060], xmm0
mov dword [ebp - 0x804c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
push 0xd
push str.Error_code_
movups xmmword [ebp - 0x8060], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x8050], xmm0
mov word [eax], cx
lea ecx, [ebp - 0x8060]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
call fcn.004079d0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x81f8], xmm0
movq xmm0, qword [eax + 0x10]
mov word [eax], cx
lea ecx, [ebp - 0x8258]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
lea eax, [ebp - 0x8298]
push eax
lea eax, [ebp - 0x81f8]
movq qword [ebp - 0x81e8], xmm0
push eax
push dword [ebp - 0x85fc]
call fcn.00403bf0
push 1
push 0x4327dc
lea ecx, [ebp - 0x8258]
call fcn.004079d0
xorps xmm0, xmm0
mov dword [ebp - 0x8038], 0
movups xmmword [ebp - 0x8048], xmm0
mov dword [ebp - 0x8034], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x8048], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x8038], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
xor ecx, ecx
mov word [eax], cx
lea ecx, [ebp - 0x8258]
call fcn.00404be0
mov eax, dword [ebp - 0x81e4]
cmp eax, 7
jbe 0x40f67d
push eax
push dword [ebp - 0x81f8]
lea eax, [ebp - 0x81f8]
push eax
call fcn.00405f20
add esp, 0xc
mov eax, dword [ebp - 0x804c]
cmp eax, 7
jbe 0x40f69e
push eax
push dword [ebp - 0x8060]
lea eax, [ebp - 0x8060]
push eax
call fcn.00405f20
add esp, 0xc
mov ecx, dword [ebp - 0x80dc]
xor eax, eax
mov dword [ebp - 0x8050], 0
mov dword [ebp - 0x804c], 7
mov word [ebp - 0x8060], ax
cmp ecx, 7
jbe 0x40f6fb
mov edx, dword [ebp - 0x80f0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f6f1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ff47
push ecx
push edx
call fcn.00412fae
add esp, 8
xor eax, eax
mov dword [ebp - 0x80e0], 0
lea ecx, [ebp - 0x8280]
mov dword [ebp - 0x80dc], 7
mov word [ebp - 0x80f0], ax
call fcn.00404be0
mov ecx, dword [ebp - 0x80c4]
cmp ecx, 7
jbe 0x40f763
mov edx, dword [ebp - 0x80d8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f759
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ff47
push ecx
push edx
call fcn.00412fae
add esp, 8
mov ecx, dword [ebp - 0x81fc]
xor eax, eax
mov dword [ebp - 0x80c8], 0
mov dword [ebp - 0x80c4], 7
mov word [ebp - 0x80d8], ax
cmp ecx, 7
jbe 0x40f7c0
mov edx, dword [ebp - 0x8210]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f7b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ff47
push ecx
push edx
call fcn.00412fae
add esp, 8
mov ecx, dword [ebp - 0x810c]
xor eax, eax
mov dword [ebp - 0x8200], 0
mov dword [ebp - 0x81fc], 7
mov word [ebp - 0x8210], ax
cmp ecx, 7
jbe 0x40f81d
mov edx, dword [ebp - 0x8120]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f813
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ff47
push ecx
push edx
call fcn.00412fae
add esp, 8
mov ecx, dword [ebp - 0x8214]
xor eax, eax
mov dword [ebp - 0x8110], 0
mov dword [ebp - 0x810c], 7
mov word [ebp - 0x8120], ax
cmp ecx, 7
jbe 0x40f87a
mov edx, dword [ebp - 0x8228]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f870
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ff47
push ecx
push edx
call fcn.00412fae
add esp, 8
mov ecx, dword [ebp - 0x807c]
xor eax, eax
mov dword [ebp - 0x8218], 0
mov dword [ebp - 0x8214], 7
mov word [ebp - 0x8228], ax
cmp ecx, 0xf
jbe 0x40f8d1
mov edx, dword [ebp - 0x8090]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40f8c7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ff47
push ecx
push edx
call fcn.00412fae
add esp, 8
mov ecx, dword [ebp - 0x816c]
mov dword [ebp - 0x8080], 0
mov dword [ebp - 0x807c], 0xf
mov byte [ebp - 0x8090], 0
cmp ecx, 7
jbe 0x40f92c
mov edx, dword [ebp - 0x8180]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f922
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ff47
push ecx
push edx
call fcn.00412fae
add esp, 8
mov ecx, dword [ebp - 0x8094]
xor eax, eax
mov dword [ebp - 0x8170], 0
mov dword [ebp - 0x816c], 7
mov word [ebp - 0x8180], ax
cmp ecx, 0xf
jbe 0x40f983
mov edx, dword [ebp - 0x80a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40f979
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ff47
push ecx
push edx
call fcn.00412fae
add esp, 8
mov ecx, dword [ebp - 0x8284]
mov dword [ebp - 0x8098], 0
mov dword [ebp - 0x8094], 0xf
mov byte [ebp - 0x80a8], 0
cmp ecx, 7
jbe 0x40f9de
mov edx, dword [ebp - 0x8298]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f9d4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ff47
push ecx
push edx
call fcn.00412fae
add esp, 8
lea eax, [ebp - 0x8048]
push eax
call fcn.00406ba0
add esp, 4
cmp dword [ebp - 0x8614], 0
je 0x40fab9
mov eax, dword [ebp - 0x8034]
cmp eax, 7
jbe 0x40fa2a
push eax
push dword [ebp - 0x8048]
lea eax, [ebp - 0x8048]
push eax
call fcn.00405f20
add esp, 0xc
jmp 0x40fa2a
push str.Injected_
call fcn.00406ba0
add esp, 4
add esi, 0x18
cmp esi, dword [ebp - 0x8604]
jne 0x40f2f0
cmp dword [ebp - 0x8230], 0
jne 0x40fd28
push str.resuming_the_main_thread_of_the_exe
call fcn.00406ba0
lea eax, [ebp - 0x80c0]
push 0x4331ec
push eax
call fcn.00401540
add esp, 0xc
test al, al
je 0x40fd17
lea eax, [ebp - 0x8600]
push eax
call fcn.0040aeb0
mov ecx, dword [ebp - 0x85fc]
add esp, 4
cmp ecx, 0x7ffffffe
jg 0x40fb2a
mov eax, dword [ebp - 0x8600]
jl 0x40faa0
cmp eax, 0xd5fa0dff
jae 0x40fb2a
add eax, 0x2a05f200
mov dword [ebp - 0x8614], eax
adc ecx, 1
mov dword [ebp - 0x8610], ecx
jmp 0x40fb40
push 1
push dword [ebp - 0x8628]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push dword [ebp - 0x8628]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x8624]
call esi
call fcn.00407d40
call fcn.00407ee0
call fcn.00407b90
call fcn.00406ba0
cmp dword [ebp - 0x8034], 7
lea eax, [ebp - 0x8048]
push 0x10
cmova eax, dword [ebp - 0x8048]
push str.ColdClientLoader
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x8048]
call fcn.00404be0
mov esi, 1
jmp 0x40fe68
mov dword [ebp - 0x8614], 0xffffffff
mov dword [ebp - 0x8610], 0x7fffffff
nop
call fcn.00411897
mov edi, eax
mov esi, edx
mov dword [ebp - 0x85fc], edi
mov dword [ebp - 0x8618], esi
call fcn.00411880
mov ebx, eax
mov eax, edx
mov dword [ebp - 0x8604], ebx
mov dword [ebp - 0x860c], eax
cmp edi, 0x989680
jne 0x40fb90
test esi, esi
jne 0x40fb90
mov ecx, 0x64
mul ecx
mov ebx, eax
mov eax, dword [ebp - 0x8604]
mul ecx
add ebx, edx
mov esi, eax
jmp 0x40fc55
cmp edi, 0x16e3600
jne 0x40fbfa
test esi, esi
jne 0x40fbfa
push esi
push edi
push eax
push ebx
call fcn.00413220
push 0
push 0x16e3600
mov esi, edx
mov edi, eax
push esi
push edi
call fcn.004133b0
sub ebx, eax
mov eax, dword [ebp - 0x860c]
push 0
push 0x3b9aca00
sbb eax, edx
push eax
push ebx
call fcn.004133b0
push 0
push 0x16e3600
push edx
push eax
call fcn.00413220
mov dword [ebp - 0x860c], eax
mov ecx, 0x3b9aca00
mov eax, esi
mov ebx, edx
mov esi, dword [ebp - 0x860c]
mul ecx
mov ecx, eax
mov eax, edi
jmp 0x40fc48
push ebx
push esi
push edi
push eax
push ebx
call fcn.004132d0
mov esi, ebx
pop ebx
nop
push 0
push 0x3b9aca00
push esi
push ecx
mov ebx, eax
mov edi, edx
call fcn.004133b0
push dword [ebp - 0x8618]
push dword [ebp - 0x85fc]
push edx
push eax
call fcn.00413220
mov esi, eax
mov dword [ebp - 0x85fc], edx
mov ecx, 0x3b9aca00
mov eax, edi
mul ecx
mov ecx, eax
mov eax, ebx
mov ebx, dword [ebp - 0x85fc]
mov edx, 0x3b9aca00
mul edx
add ecx, edx
add esi, eax
adc ebx, ecx
mov dword [ebp - 0x860c], esi
cmp ebx, dword [ebp - 0x8610]
jg 0x40fd17
jl 0x40fc75
cmp esi, dword [ebp - 0x8614]
jae 0x40fd17
call fcn.00411952
push 0
push 0x64
push edx
push eax
call fcn.004133b0
mov edi, dword [ebp - 0x8614]
mov esi, eax
sub edi, dword [ebp - 0x860c]
mov eax, dword [ebp - 0x8610]
mov ecx, edi
sbb eax, ebx
mov dword [ebp - 0x8604], edx
mov edx, eax
mov dword [ebp - 0x85fc], eax
call fcn.00413420
comisd xmm0, xmmword [0x433f08]
jbe 0x40fccd
mov eax, dword [ebp - 0x8604]
add esi, 0xad160000
adc eax, 0x311cd
jmp 0x40fcdb
mov eax, dword [ebp - 0x85fc]
add esi, edi
adc eax, dword [ebp - 0x8604]
push 0
push 0x3b9aca00
push eax
push esi
call fcn.00413220
mov dword [ebp - 0x8268], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x8264], edx
sub esi, eax
lea eax, [ebp - 0x8268]
push eax
mov dword [ebp - 0x8260], esi
call fcn.00411979
add esp, 4
jmp 0x40fb40
push dword [ebp - 0x8624]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x40fdb2
push str._and_resume_its_main_thread
push dword [ebp - 0x8620]
lea eax, [ebp - 0x20]
push eax
call fcn.0040cb10
push eax
lea eax, [ebp - 0x8280]
push str.Attach_a_debugger_now_to_PID
push eax
call fcn.00401650
add esp, 0x14
push eax
lea eax, [ebp - 0x80a8]
push eax
call fcn.004015e0
add esp, 0xc
lea ecx, [ebp - 0x8280]
call fcn.00404b90
lea ecx, [ebp - 0x20]
call fcn.00404b90
lea eax, [ebp - 0x80a8]
push eax
call fcn.00406ba0
add esp, 4
lea eax, [ebp - 0x80a8]
cmp dword [ebp - 0x8094], 0xf
cmova eax, dword [ebp - 0x80a8]
push 0
push 0x432fb0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x80a8]
call fcn.00404b90
push 0xffffffffffffffff
push dword [ebp - 0x8624]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x8628]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x8624]
call esi
lea eax, [ebp - 0x80c0]
push 0x4329a8
push eax
call fcn.00401540
add esp, 8
test al, al
je 0x40fdfc
push 0
push str.Cold_Client_Loader__waiting_
push str.Press_OK_when_you_have_finished_playing_to_close_the_loader
jmp 0x40fe29
lea eax, [ebp - 0x80c0]
push 0x4331ec
push eax
call fcn.00401540
add esp, 8
test al, al
je 0x40fe31
cmp dword [ebp - 0x8068], 0
jne 0x40fe31
push 0
push str.Cold_Client_Loader__waiting_
push str.Start_the_game__then_press_OK_when_you_have_finished_playing_to_close_the_loader
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea eax, [ebp - 0x80c0]
push 0x4331ec
push eax
call fcn.00401590
add esp, 8
test al, al
jne 0x40fe52
cmp dword [ebp - 0x8068], 0
jne 0x40fe61
call fcn.00407d40
call fcn.00407ee0
call fcn.00407b90
call fcn.00406ba0
xor esi, esi
lea ecx, [ebp - 0x8634]
call fcn.00404c80
lea ecx, [ebp - 0x8240]
call fcn.00404be0
lea ecx, [ebp - 0x80c0]
call fcn.00404be0
lea ecx, [ebp - 0x8198]
call fcn.00404be0
lea ecx, [ebp - 0x81b0]
call fcn.00404be0
lea ecx, [ebp - 0x8150]
call fcn.00404be0
lea ecx, [ebp - 0x81c8]
call fcn.00404be0
lea ecx, [ebp - 0x81e0]
call fcn.00404be0
lea ecx, [ebp - 0x8078]
call fcn.00404be0
lea ecx, [ebp - 0x8168]
call fcn.00404be0
lea ecx, [ebp - 0x8138]
call fcn.00404be0
lea ecx, [ebp - 0x8108]
call fcn.00404be0
mov ecx, dword [ebp - 4]
mov eax, esi
pop ebx
pop edi
xor ecx, ebp
pop esi
call fcn.00413212
mov esp, ebp
pop ebp
ret 0x10
call fcn.00407650
call fcn.00407650
call fcn.00407650
call fcn.00407650
call fcn.00407650
call fcn.00407650
call fcn.00407650
call fcn.00407650
call fcn.00407650
call fcn.00407650
call fcn.00407650
call fcn.00407650
call fcn.00407650
call fcn.00407650
call fcn.00417daf
call fcn.00417daf
call fcn.00417daf
call fcn.00417daf
int3