Function at 0x40c1b0
Capabilities:
Create process on windows
Create process suspended
Query or enumerate registry value
Resume thread
Set environment variable
Set registry value
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10488
call fcn.004111c0
mov eax, dword [0x43d0b4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
cmp dword [0x43e284], 8
mov dword [ebp - 0x103f4], eax
mov eax, 0x43e270
cmovae eax, dword [0x43e270]
push esi
push eax
call fcn.0040f370
push 0x43e258
call fcn.0040ecc0
add esp, 8
test al, al
jne 0x40c290
mov ecx, dword [0x43e280]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x26
jb 0x40deaa
cmp dword [0x43e284], 8
mov eax, 0x43e270
push ecx
cmovae eax, dword [0x43e270]
lea ecx, [ebp - 0x102a0]
push eax
push 0x26
push str.Couldnt_find_the_configuration_file:
push 0x43e270
push dword [ebp - 0x103f4]
call fcn.00403360
lea eax, [ebp - 0x102a0]
push eax
call fcn.00406020
add esp, 4
lea ecx, [ebp - 0x102a0]
call fcn.004040e0
push 0x10
push 0x430940
push str.Couldnt_find_the_configuration_file_ColdClientLoader.ini.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00406020
mov eax, 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004111b2
mov esp, ebp
pop ebp
ret 0x10
lea eax, [ebp - 0x103d8]
push eax
call fcn.0040df60
push 0
push str.SteamClient64Dll
mov esi, eax
lea eax, [ebp - 0x103c0]
push str.SteamClient
push eax
call fcn.004092b0
push esi
push eax
lea eax, [ebp - 0x10108]
push eax
call fcn.0040eed0
add esp, 0x20
lea ecx, [ebp - 0x103c0]
call fcn.004040e0
lea ecx, [ebp - 0x103d8]
call fcn.004040e0
lea eax, [ebp - 0x103a8]
push eax
call fcn.0040df60
push 0
push str.SteamClientDll
mov esi, eax
lea eax, [ebp - 0x102e8]
push str.SteamClient
push eax
call fcn.004092b0
push esi
push eax
lea eax, [ebp - 0x100f0]
push eax
call fcn.0040eed0
add esp, 0x20
lea ecx, [ebp - 0x102e8]
call fcn.004040e0
lea ecx, [ebp - 0x103a8]
call fcn.004040e0
lea eax, [ebp - 0x10318]
push eax
call fcn.0040df60
push 0
push 0x4309ec
mov esi, eax
lea eax, [ebp - 0x10300]
push str.SteamClient
push eax
call fcn.004092b0
push esi
push eax
lea eax, [ebp - 0x100a8]
push eax
call fcn.0040eed0
add esp, 0x20
lea ecx, [ebp - 0x10300]
call fcn.004040e0
lea ecx, [ebp - 0x10318]
call fcn.004040e0
lea eax, [ebp - 0x10348]
push eax
call fcn.0040df60
push 0
push str.ExeRunDir
mov esi, eax
lea eax, [ebp - 0x10330]
push str.SteamClient
push eax
call fcn.004092b0
push esi
push eax
lea eax, [ebp - 0x100d8]
push eax
call fcn.0040eed0
add esp, 0x20
lea ecx, [ebp - 0x10330]
call fcn.004040e0
lea ecx, [ebp - 0x10348]
call fcn.004040e0
push 0
push str.ExeCommandLine
lea eax, [ebp - 0x10180]
push str.SteamClient
push eax
call fcn.004092b0
push 0
push str.AppId
lea eax, [ebp - 0x10078]
push str.SteamClient
push eax
call fcn.004092b0
push 0
push str.ForceInjectSteamClient
lea eax, [ebp - 0x10270]
push str.SteamClient
push eax
call fcn.004092b0
push 0
push str.ResumeByDebugger
lea eax, [ebp - 0x10258]
push str.Debug
push eax
call fcn.004092b0
add esp, 0x40
lea eax, [ebp - 0x10378]
push eax
call fcn.0040df60
push 0
push str.DllsToInjectFolder
mov esi, eax
lea eax, [ebp - 0x10360]
push str.Extra
push eax
call fcn.004092b0
push esi
push eax
lea eax, [ebp - 0x10138]
push eax
call fcn.0040eed0
add esp, 0x20
lea ecx, [ebp - 0x10360]
call fcn.004040e0
lea ecx, [ebp - 0x10378]
call fcn.004040e0
push 0x4308d0
push str.IgnoreInjectionError
lea eax, [ebp - 0x10240]
push str.Extra
push eax
call fcn.004092b0
push 0x430af4
push 0x430af8
lea eax, [ebp - 0x10228]
push str.Extra
push eax
call fcn.004092b0
lea eax, [ebp - 0x10258]
push eax
call fcn.0040af20
lea eax, [ebp - 0x10270]
push eax
call fcn.0040af20
lea eax, [ebp - 0x10240]
push eax
call fcn.0040af20
lea eax, [ebp - 0x10228]
push eax
call fcn.0040af20
mov ecx, dword [ebp - 0x10098]
mov eax, 0x7ffffffe
sub eax, ecx
add esp, 0x30
cmp eax, 0x12
jb 0x40deaf
cmp dword [ebp - 0x10094], 8
lea eax, [ebp - 0x100a8]
push ecx
cmovae eax, dword [ebp - 0x100a8]
lea ecx, [ebp - 0x10120]
push eax
push 0x12
push str.SteamClient::Exe:
lea eax, [ebp - 0x100a8]
push eax
push dword [ebp - 0x103f4]
call fcn.00403360
lea eax, [ebp - 0x10120]
push eax
call fcn.00406020
add esp, 4
lea ecx, [ebp - 0x10120]
call fcn.004040e0
mov ecx, dword [ebp - 0x100c8]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x18
jb 0x40deb4
cmp dword [ebp - 0x100c4], 8
lea eax, [ebp - 0x100d8]
push ecx
cmovae eax, dword [ebp - 0x100d8]
lea ecx, [ebp - 0x101b0]
push eax
push 0x18
push str.SteamClient::ExeRunDir:
lea eax, [ebp - 0x100d8]
push eax
push dword [ebp - 0x103f4]
call fcn.00403360
lea eax, [ebp - 0x101b0]
push eax
call fcn.00406020
add esp, 4
lea ecx, [ebp - 0x101b0]
call fcn.004040e0
mov ecx, dword [ebp - 0x10170]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x1d
jb 0x40deb9
cmp dword [ebp - 0x1016c], 8
lea eax, [ebp - 0x10180]
push ecx
cmovae eax, dword [ebp - 0x10180]
lea ecx, [ebp - 0x101c8]
push eax
push 0x1d
push str.SteamClient::ExeCommandLine:
lea eax, [ebp - 0x10180]
push eax
push dword [ebp - 0x103f4]
call fcn.00403360
lea eax, [ebp - 0x101c8]
push eax
call fcn.00406020
add esp, 4
lea ecx, [ebp - 0x101c8]
call fcn.004040e0
mov ecx, dword [ebp - 0x10068]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x14
jb 0x40debe
cmp dword [ebp - 0x10064], 8
lea eax, [ebp - 0x10078]
push ecx
cmovae eax, dword [ebp - 0x10078]
lea ecx, [ebp - 0x101e0]
push eax
push 0x14
push str.SteamClient::AppId:
lea eax, [ebp - 0x10078]
push eax
push dword [ebp - 0x103f4]
call fcn.00403360
lea eax, [ebp - 0x101e0]
push eax
call fcn.00406020
add esp, 4
lea ecx, [ebp - 0x101e0]
call fcn.004040e0
mov ecx, dword [ebp - 0x100e0]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x1a
jb 0x40dec3
cmp dword [ebp - 0x100dc], 8
lea eax, [ebp - 0x100f0]
push ecx
cmovae eax, dword [ebp - 0x100f0]
lea ecx, [ebp - 0x101f8]
push eax
push 0x1a
push str.SteamClient::SteamClient:
lea eax, [ebp - 0x100f0]
push eax
push dword [ebp - 0x103f4]
call fcn.00403360
lea eax, [ebp - 0x101f8]
push eax
call fcn.00406020
add esp, 4
lea ecx, [ebp - 0x101f8]
call fcn.004040e0
mov ecx, dword [ebp - 0x100f8]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x1f
jb 0x40dec8
cmp dword [ebp - 0x100f4], 8
lea eax, [ebp - 0x10108]
push ecx
cmovae eax, dword [ebp - 0x10108]
lea ecx, [ebp - 0x10210]
push eax
push 0x1f
push str.SteamClient::SteamClient64Dll:
lea eax, [ebp - 0x10108]
push eax
push dword [ebp - 0x103f4]
call fcn.00403360
lea eax, [ebp - 0x10210]
push eax
call fcn.00406020
add esp, 4
lea ecx, [ebp - 0x10210]
call fcn.004040e0
mov ecx, dword [ebp - 0x10260]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x25
jb 0x40decd
cmp dword [ebp - 0x1025c], 8
lea eax, [ebp - 0x10270]
push ecx
cmovae eax, dword [ebp - 0x10270]
lea ecx, [ebp - 0x10090]
push eax
push 0x25
push str.SteamClient::ForceInjectSteamClient:
lea eax, [ebp - 0x10270]
push eax
push dword [ebp - 0x103f4]
call fcn.00403360
lea eax, [ebp - 0x10090]
push eax
call fcn.00406020
add esp, 4
lea ecx, [ebp - 0x10090]
call fcn.004040e0
mov ecx, dword [ebp - 0x10248]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x19
jb 0x40ded2
cmp dword [ebp - 0x10244], 8
lea eax, [ebp - 0x10258]
push ecx
cmovae eax, dword [ebp - 0x10258]
lea ecx, [ebp - 0x10168]
push eax
push 0x19
push str.Debug::ResumeByDebugger:
lea eax, [ebp - 0x10258]
push eax
push dword [ebp - 0x103f4]
call fcn.00403360
lea eax, [ebp - 0x10168]
push eax
call fcn.00406020
add esp, 4
lea ecx, [ebp - 0x10168]
call fcn.004040e0
mov ecx, dword [ebp - 0x10128]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x1b
jb 0x40ded7
cmp dword [ebp - 0x10124], 8
lea eax, [ebp - 0x10138]
push ecx
cmovae eax, dword [ebp - 0x10138]
lea ecx, [ebp - 0x10150]
push eax
push 0x1b
push str.Extra::DllsToInjectFolder:
lea eax, [ebp - 0x10138]
push eax
push dword [ebp - 0x103f4]
call fcn.00403360
lea eax, [ebp - 0x10150]
push eax
call fcn.00406020
add esp, 4
lea ecx, [ebp - 0x10150]
call fcn.004040e0
mov ecx, dword [ebp - 0x10230]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x1d
jb 0x40dedc
cmp dword [ebp - 0x1022c], 8
lea eax, [ebp - 0x10240]
push ecx
cmovae eax, dword [ebp - 0x10240]
lea ecx, [ebp - 0x10198]
push eax
push 0x1d
push str.Extra::IgnoreInjectionError:
lea eax, [ebp - 0x10240]
push eax
push dword [ebp - 0x103f4]
call fcn.00403360
lea eax, [ebp - 0x10198]
push eax
call fcn.00406020
add esp, 4
lea ecx, [ebp - 0x10198]
call fcn.004040e0
mov ecx, dword [ebp - 0x10218]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x23
jb 0x40dee1
cmp dword [ebp - 0x10214], 8
lea eax, [ebp - 0x10228]
push edi
cmovae eax, dword [ebp - 0x10228]
push ecx
push eax
push 0x23
push str.Extra::IgnoreLoaderArchDifference:
lea eax, [ebp - 0x10228]
push eax
push dword [ebp - 0x103f4]
lea ecx, [ebp - 0x102d0]
call fcn.00403360
lea eax, [ebp - 0x102d0]
push eax
call fcn.00406020
add esp, 4
lea ecx, [ebp - 0x102d0]
call fcn.004040e0
cmp dword [ebp - 0x10068], 0
je 0x40ddf7
mov ecx, dword [ebp - 0x10064]
lea eax, [ebp - 0x10078]
mov edx, dword [ebp - 0x10078]
cmp ecx, 8
cmovae eax, edx
cmp word [eax], 0
je 0x40ddf7
mov esi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
lea eax, [ebp - 0x10078]
cmp ecx, 8
cmovae eax, edx
push eax
push str.SteamAppId
call esi
cmp dword [ebp - 0x10064], 8
lea eax, [ebp - 0x10078]
cmovae eax, dword [ebp - 0x10078]
push eax
push str.SteamGameId
call esi
cmp dword [ebp - 0x10064], 8
lea eax, [ebp - 0x10078]
cmovae eax, dword [ebp - 0x10078]
push eax
push str.SteamOverlayGameId
call esi
lea eax, [ebp - 0x100a8]
push eax
call fcn.0040ecc0
add esp, 4
test al, al
jne 0x40c9f4
push str.Couldnt_find_the_requested_Exe_file
call fcn.00406020
add esp, 4
push 0x10
push 0x430940
push str.Couldnt_find_the_requested_Exe_file.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00406020
jmp 0x40de18
cmp dword [ebp - 0x100c8], 0
jne 0x40cb77
push 0
lea eax, [ebp - 0x100a8]
push eax
lea ecx, [ebp - 0x103f0]
call fcn.00401400
mov edi, eax
cmp dword [eax + 0x14], 8
jb 0x40ca1f
mov edi, dword [eax]
mov eax, dword [eax + 0x10]
lea esi, [edi + eax*2]
push esi
push edi
call fcn.00405630
add esp, 8
cmp eax, esi
je 0x40ca85
movzx ecx, word [eax]
cmp ecx, 0x5c
je 0x40ca40
cmp ecx, 0x2f
jne 0x40ca47
add eax, 2
cmp eax, esi
jne 0x40ca33
cmp eax, esi
je 0x40ca85
nop dword [eax + eax]
movzx edx, word [esi - 2]
cmp edx, 0x5c
je 0x40ca67
cmp edx, 0x2f
je 0x40ca67
add esi, 0xfffffffe
cmp eax, esi
jne 0x40ca50
jmp 0x40ca85
cmp eax, esi
je 0x40ca85
nop dword [eax + eax]
movzx edx, word [esi - 2]
cmp edx, 0x5c
je 0x40ca7e
cmp edx, 0x2f
jne 0x40ca85
add esi, 0xfffffffe
cmp eax, esi
jne 0x40ca70
sub esi, edi
mov dword [ebp - 0x10050], 0
sar esi, 1
lea ecx, [ebp - 0x10060]
push esi
xorps xmm0, xmm0
mov dword [ebp - 0x1004c], 0
push edi
movups xmmword [ebp - 0x10060], xmm0
call fcn.00401750
lea eax, [ebp - 0x10060]
push eax
lea ecx, [ebp - 0x102b8]
call fcn.00403100
lea eax, [ebp - 0x102b8]
push eax
lea ecx, [ebp - 0x100d8]
call fcn.004046d0
lea ecx, [ebp - 0x102b8]
call fcn.004040e0
mov ecx, dword [ebp - 0x1004c]
cmp ecx, 8
jb 0x40cb23
mov edx, dword [ebp - 0x10060]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40cb19
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
xor eax, eax
mov dword [ebp - 0x10050], 0
lea ecx, [ebp - 0x103f0]
mov dword [ebp - 0x1004c], 7
mov word [ebp - 0x10060], ax
call fcn.004040e0
lea eax, [ebp - 0x100d8]
push eax
lea eax, [ebp - 0x10390]
push str.Setting_ExeRunDir_to:
push eax
call fcn.00401590
push eax
call fcn.00406020
add esp, 0x10
lea ecx, [ebp - 0x10390]
call fcn.004040e0
lea eax, [ebp - 0x100d8]
push eax
call fcn.0040eb60
add esp, 4
test al, al
jne 0x40cbb5
push str.Couldnt_find_the_requested_Exe_run_dir
call fcn.00406020
add esp, 4
push 0x10
push 0x430940
push str.Couldnt_find_the_requested_Exe_run_dir.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00406020
jmp 0x40de18
lea eax, [ebp - 0x10108]
push eax
call fcn.0040ecc0
add esp, 4
test al, al
jne 0x40cbf3
push str.Couldnt_find_the_requested_SteamClient64Dll
call fcn.00406020
add esp, 4
push 0x10
push 0x430940
push str.Couldnt_find_the_requested_SteamClient64Dll.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00406020
jmp 0x40de18
lea eax, [ebp - 0x100f0]
push eax
call fcn.0040ecc0
add esp, 4
test al, al
jne 0x40cc31
push str.Couldnt_find_the_requested_SteamClientDll
call fcn.00406020
add esp, 4
push 0x10
push 0x430940
push str.Couldnt_find_the_requested_SteamClientDll.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00406020
jmp 0x40de18
cmp dword [ebp - 0x10128], 0
je 0x40cc78
lea eax, [ebp - 0x10138]
push eax
call fcn.0040eb60
add esp, 4
test al, al
jne 0x40cc78
push str.Couldnt_find_the_requested_folder_of_dlls_to_inject
call fcn.00406020
add esp, 4
push 0x10
push 0x430940
push str.Couldnt_find_the_requested_folder_of_dlls_to_inject.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00406020
jmp 0x40de18
push ebx
lea eax, [ebp - 0x100a8]
push eax
lea eax, [ebp - 0x10444]
push eax
call fcn.004094a0
mov esi, dword [ebp - 0x10444]
add esp, 8
cmp esi, dword [ebp - 0x10440]
jne 0x40ccbb
push str.Couldnt_read_the_exe_header
call fcn.00406020
add esp, 4
push 0x10
push 0x430940
push str.Couldnt_read_the_exe_header.
jmp 0x40cec9
push esi
call fcn.0040e5e0
mov bh, al
push esi
mov byte [ebp - 0x1040c], bh
call fcn.0040e600
add esp, 8
test bh, bh
jne 0x40cea8
test al, al
je 0x40ceb0
mov ecx, str.Detected_exe_arch:_x32
test bh, bh
mov eax, str.Detected_exe_arch:_x64
cmovne eax, ecx
push eax
call fcn.00406020
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add esp, 4
push 0
call esi
push eax
call fcn.0040e5e0
add esp, 4
mov bl, al
push 0
call esi
push eax
call fcn.0040e5e0
test al, al
mov edx, str.Detected_loader_arch:_x32
mov ecx, str.Detected_loader_arch:_x64
cmovne ecx, edx
push ecx
call fcn.00406020
mov edi, dword [sym.imp.USER32.dll_MessageBoxA]
add esp, 8
cmp bl, bh
je 0x40cd61
push str.Arch_of_loader_and_requested_exe_are_different__it_is_advised_to_use_the_appropriate_one
call fcn.00406020
add esp, 4
cmp dword [ebp - 0x10218], 0
jne 0x40cd61
push 0
push 0x430940
push str.Arch_of_loader_and_requested_exe_are_different__nit_is_advised_to_use_the_appropriate_one.
push 0
call edi
cmp dword [ebp - 0x10128], 0
mov esi, dword [ebp - 0x10230]
mov dword [ebp - 0x10408], 0
mov dword [ebp - 0x10404], 0
mov dword [ebp - 0x10400], 0
mov dword [ebp - 0x10418], esi
je 0x40cfe6
xor eax, eax
mov dword [ebp - 0x100b0], 0
xorps xmm0, xmm0
mov dword [ebp - 0x100ac], 7
movups xmmword [ebp - 0x100c0], xmm0
mov word [ebp - 0x100c0], ax
lea eax, [ebp - 0x100c0]
push eax
push dword [ebp - 0x1040c]
lea eax, [ebp - 0x10138]
push eax
lea eax, [ebp - 0x1003c]
push eax
call fcn.00407530
mov edi, eax
add esp, 0x10
lea eax, [ebp - 0x10408]
cmp eax, edi
je 0x40cf44
mov esi, dword [ebp - 0x10408]
test esi, esi
je 0x40cf10
mov ebx, dword [ebp - 0x10404]
cmp esi, ebx
je 0x40ce69
nop word [eax + eax]
mov ecx, dword [esi + 0x14]
cmp ecx, 8
jb 0x40ce49
mov eax, dword [esi]
lea ecx, [ecx*2 + 2]
cmp ecx, 0x1000
jb 0x40ce3f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40deeb
mov eax, edx
push ecx
push eax
call fcn.00410f4e
add esp, 8
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
add esi, 0x18
cmp esi, ebx
jne 0x40ce10
mov esi, dword [ebp - 0x10408]
mov ecx, dword [ebp - 0x10400]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x40ceec
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40deeb
jmp 0x40ceec
test al, al
je 0x40cce2
push str.The_requested_exe_is_invalid__neither_32_nor_64_bit_
call fcn.00406020
add esp, 4
push 0x10
push 0x430940
push str.The_requested_exe_is_invalid__neither_32_nor_64_bit_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00406020
lea ecx, [ebp - 0x10444]
mov esi, 1
call fcn.00404180
pop ebx
jmp 0x40de1d
push ecx
push esi
call fcn.00410f4e
mov bh, byte [ebp - 0x1040c]
add esp, 8
mov dword [ebp - 0x10404], 0
mov dword [ebp - 0x10400], 0
mov eax, dword [edi]
mov esi, dword [ebp - 0x10418]
mov dword [ebp - 0x10408], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x10404], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x10400], eax
mov dword [edi], 0
mov dword [edi + 4], 0
mov dword [edi + 8], 0
lea ecx, [ebp - 0x1003c]
call fcn.00406a40
cmp dword [ebp - 0x100b0], 0
je 0x40cfd5
test esi, esi
jne 0x40cfd5
push str._nContinue__
lea eax, [ebp - 0x100c0]
push eax
lea eax, [ebp - 0x20]
push str.The_following_dlls_cannot_be_injected:_n
push eax
call fcn.00401590
add esp, 0xc
push eax
lea eax, [ebp - 0x10288]
push eax
call fcn.004014b0
add esp, 0xc
cmp dword [eax + 0x14], 8
jb 0x40cf91
mov eax, dword [eax]
push 4
push str.ColdClientLoader
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x10288]
mov esi, eax
call fcn.004040e0
lea ecx, [ebp - 0x20]
call fcn.004040e0
cmp esi, 6
je 0x40cfd5
call fcn.00406020
lea ecx, [ebp - 0x100c0]
call fcn.004040e0
mov esi, 1
jmp 0x40ddde
lea ecx, [ebp - 0x100c0]
call fcn.004040e0
mov edi, dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [ebp - 0x103f8], 0
mov dword [ebp - 0x10438], 0x771f810d
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push 0x4000
mov dword [ebp - 0x10434], eax
lea eax, [ebp - 0xc030]
push 0
push eax
mov byte [ebp - 0x103f9], 0
mov dword [ebp - 0x1041c], 1
call fcn.00412ae0
push 0x4000
lea eax, [ebp - 0x10030]
push 0
push eax
call fcn.00412ae0
add esp, 0x18
mov dword [ebp - 0x10414], 0x2000
lea eax, [ebp - 0x103f8]
mov dword [ebp - 0x10420], 0x2000
push eax
push 0xf003f
push 0
push str.SoftwareValveSteamActiveProcess
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x40d2d9
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x10414]
push eax
lea eax, [ebp - 0xc030]
mov byte [ebp - 0x103f9], 1
push eax
lea eax, [ebp - 0x1041c]
push eax
push 0
push str.SteamClientDll
push dword [ebp - 0x103f8]
call esi
lea eax, [ebp - 0x10420]
push eax
lea eax, [ebp - 0x10030]
push eax
lea eax, [ebp - 0x1041c]
push eax
push 0
push str.SteamClientDll64
push dword [ebp - 0x103f8]
call esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea eax, [ebp - 0x10438]
push 4
push eax
push 4
push 0
push str.ActiveUser
push dword [ebp - 0x103f8]
call esi
push 4
lea eax, [ebp - 0x10434]
push eax
push 4
push 0
push 0x431388
push dword [ebp - 0x103f8]
call esi
mov eax, dword [ebp - 0x100e0]
cmp dword [ebp - 0x100dc], 8
lea ecx, [eax*2 + 2]
push ecx
lea eax, [ebp - 0x100f0]
cmovae eax, dword [ebp - 0x100f0]
push eax
push 1
push 0
push str.SteamClientDll
push dword [ebp - 0x103f8]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [ebp - 0x100f8]
cmp dword [ebp - 0x100f4], 8
lea ecx, [eax*2 + 2]
push ecx
lea eax, [ebp - 0x10108]
cmovae eax, dword [ebp - 0x10108]
push eax
push 1
push 0
push str.SteamClientDll64
push dword [ebp - 0x103f8]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push 7
push str.Public
push 1
push 0
push str.Universe
push dword [ebp - 0x103f8]
call esi
push dword [ebp - 0x103f8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x44
lea eax, [ebp - 0x10488]
push 0
push eax
call fcn.00412ae0
add esp, 0xc
lea eax, [ebp - 0x10488]
mov ecx, 0x44
nop dword [eax + eax]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40d1c0
xorps xmm0, xmm0
mov dword [ebp - 0x10488], 0x44
movups xmmword [ebp - 0x10430], xmm0
mov ecx, 0x10
lea eax, [ebp - 0x10430]
nop word [eax + eax]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40d1f0
push 0x8000
push ecx
lea eax, [ebp - 0x8030]
push eax
call fcn.00412ae0
cmp dword [ebp - 0x1016c], 8
lea ecx, [ebp - 0x10180]
push dword [ebp - 0x103f4]
cmovae ecx, dword [ebp - 0x10180]
lea eax, [ebp - 0x100a8]
cmp dword [ebp - 0x10094], 8
push ecx
cmovae eax, dword [ebp - 0x100a8]
push eax
push str.__ls___ls__ls
lea eax, [ebp - 0x8030]
push 0x4000
push eax
call fcn.0040c170
add esp, 0x24
lea edx, [ebp - 0x10430]
cmp dword [ebp - 0x100c4], 8
lea eax, [ebp - 0x100d8]
lea ecx, [ebp - 0x100a8]
cmovae eax, dword [ebp - 0x100d8]
cmp dword [ebp - 0x10094], 8
push edx
cmovae ecx, dword [ebp - 0x100a8]
lea edx, [ebp - 0x10488]
push edx
push eax
push 0
push 4
push 1
push 0
push 0
lea eax, [ebp - 0x8030]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x40d364
push str.Unable_to_load_the_requested_EXE_file
call fcn.00406020
add esp, 4
push 0x10
push 0x430940
push str.Unable_to_load_the_requested_EXE_file.
push 0
call edi
call fcn.00406020
mov esi, 1
jmp 0x40ddde
push 0
lea eax, [ebp - 0x103f8]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
push str.SoftwareValveSteamActiveProcess
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
je 0x40d0cf
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x10288]
push eax
call fcn.0040b010
push eax
lea eax, [ebp - 0x20]
push str.Unable_to_patch_Steam_process_informations_on_the_Windows_registry__ActiveProcess___error_
push eax
call fcn.00401440
push eax
call fcn.00406020
add esp, 0x18
lea ecx, [ebp - 0x20]
call fcn.00404090
lea ecx, [ebp - 0x10288]
call fcn.00404090
push 0x10
push 0x430940
push str.Unable_to_patch_Steam_process_informations_on_the_Windows_registry.
push 0
call edi
call fcn.00406020
mov esi, 1
jmp 0x40ddde
cmp dword [ebp - 0x10260], 0
je 0x40d396
lea ecx, [ebp - 0x10408]
lea eax, [ebp - 0x100f0]
test bh, bh
jne 0x40d383
lea eax, [ebp - 0x10108]
push eax
push dword [ebp - 0x10408]
lea eax, [ebp - 0x103f4]
push eax
call fcn.00409af0
mov eax, dword [ebp - 0x10404]
mov esi, dword [ebp - 0x10408]
mov dword [ebp - 0x103f4], eax
cmp esi, eax
je 0x40db82
mov ecx, dword [esi + 0x10]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x10
jb 0x40deaa
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x40d3cd
mov eax, dword [esi]
push ecx
push eax
push 0x10
push str.Injecting_dll:_
push esi
push dword [ebp - 0x103f4]
lea ecx, [ebp - 0x10120]
call fcn.00403360
push str._...
lea eax, [ebp - 0x10120]
push eax
lea eax, [ebp - 0x10090]
push eax
call fcn.004014b0
push eax
call fcn.00406020
mov ecx, dword [ebp - 0x1007c]
add esp, 0x10
cmp ecx, 8
jb 0x40d449
mov edx, dword [ebp - 0x10090]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40d43f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
mov ecx, dword [ebp - 0x1010c]
xor eax, eax
mov dword [ebp - 0x10080], 0
mov dword [ebp - 0x1007c], 7
mov word [ebp - 0x10090], ax
cmp ecx, 8
jb 0x40d4a6
mov edx, dword [ebp - 0x10120]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40d49c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
lea eax, [ebp - 0x1040c]
mov dword [ebp - 0x1040c], 0
push eax
push esi
push dword [ebp - 0x10430]
call fcn.0040e620
mov edi, eax
add esp, 0xc
test edi, edi
je 0x40db66
lea eax, [ebp - 6]
push edi
push eax
call fcn.00401e90
add esp, 8
lea ecx, [ebp - 0x1040d]
push ecx
lea ecx, [ebp - 6]
push ecx
push eax
lea ecx, [ebp - 0x102a0]
call fcn.00401330
lea eax, [ebp - 0x101b0]
push edi
push eax
call fcn.0040e430
push eax
lea eax, [ebp - 0x101c8]
push eax
call fcn.0040edb0
mov edx, dword [ebp - 0x1040c]
xorps xmm0, xmm0
mov ecx, edx
mov dword [ebp - 0x10050], 0
add esp, 0x10
mov dword [ebp - 0x1004c], 0
mov ebx, eax
movups xmmword [ebp - 0x10060], xmm0
lea edi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40d540
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x10060]
call fcn.004016b0
lea eax, [ebp - 0x10060]
push eax
lea eax, [ebp - 0x101e0]
push eax
call fcn.0040edb0
mov edx, dword [esi + 0x10]
mov ecx, 0x7ffffffe
sub ecx, edx
add esp, 8
mov edi, eax
cmp ecx, 0x1a
jb 0x40deaa
cmp dword [esi + 0x14], 8
mov ecx, esi
jb 0x40d58b
mov ecx, dword [esi]
push edx
push ecx
push 0x1a
push str.Failed_to_inject_the_dll:
push esi
push dword [ebp - 0x103f4]
lea ecx, [ebp - 0x10168]
call fcn.00403360
push 0x430704
lea eax, [ebp - 0x10168]
push eax
lea eax, [ebp - 0x101f8]
push eax
call fcn.004014b0
add esp, 0xc
lea ecx, [ebp - 0x10150]
push edi
push eax
push dword [ebp - 0x103f4]
call fcn.004031b0
push 0x430704
lea eax, [ebp - 0x10150]
push eax
lea eax, [ebp - 0x10210]
push eax
call fcn.004014b0
add esp, 0xc
lea ecx, [ebp - 0x10198]
push ebx
push eax
push dword [ebp - 0x103f4]
call fcn.004031b0
push 1
push 0x430704
lea ecx, [ebp - 0x10198]
call fcn.00407020
mov dword [ebp - 0x10038], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x10048], xmm0
mov dword [ebp - 0x10034], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
push 0xd
push str.Error_code_
movups xmmword [ebp - 0x10048], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x10038], xmm0
mov word [eax], cx
lea ecx, [ebp - 0x10048]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
call fcn.00407020
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x10120], xmm0
movq xmm0, qword [eax + 0x10]
mov word [eax], cx
lea ecx, [ebp - 0x100c0]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
lea eax, [ebp - 0x102a0]
push eax
lea eax, [ebp - 0x10120]
movq qword [ebp - 0x10110], xmm0
push eax
push dword [ebp - 0x103f4]
call fcn.004031b0
push 0x430704
lea eax, [ebp - 0x100c0]
push eax
lea eax, [ebp - 0x10090]
push eax
call fcn.004014b0
mov ecx, dword [ebp - 0x100ac]
add esp, 0xc
cmp ecx, 8
jb 0x40d712
mov edx, dword [ebp - 0x100c0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40d708
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
mov ecx, dword [ebp - 0x1010c]
xor eax, eax
mov dword [ebp - 0x100b0], 0
mov dword [ebp - 0x100ac], 7
mov word [ebp - 0x100c0], ax
cmp ecx, 8
jb 0x40d76f
mov edx, dword [ebp - 0x10120]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40d765
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
mov ecx, dword [ebp - 0x10034]
cmp ecx, 8
jb 0x40d7af
mov edx, dword [ebp - 0x10048]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40d7a5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
mov ecx, dword [ebp - 0x10184]
xor eax, eax
mov dword [ebp - 0x10038], 0
mov dword [ebp - 0x10034], 7
mov word [ebp - 0x10048], ax
cmp ecx, 8
jb 0x40d80c
mov edx, dword [ebp - 0x10198]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40d802
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
mov ecx, dword [ebp - 0x101fc]
xor eax, eax
mov dword [ebp - 0x10188], 0
mov dword [ebp - 0x10184], 7
mov word [ebp - 0x10198], ax
cmp ecx, 8
jb 0x40d869
mov edx, dword [ebp - 0x10210]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40d85f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
mov ecx, dword [ebp - 0x1013c]
xor eax, eax
mov dword [ebp - 0x10200], 0
mov dword [ebp - 0x101fc], 7
mov word [ebp - 0x10210], ax
cmp ecx, 8
jb 0x40d8c6
mov edx, dword [ebp - 0x10150]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40d8bc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
mov ecx, dword [ebp - 0x101e4]
xor eax, eax
mov dword [ebp - 0x10140], 0
mov dword [ebp - 0x1013c], 7
mov word [ebp - 0x10150], ax
cmp ecx, 8
jb 0x40d923
mov edx, dword [ebp - 0x101f8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40d919
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
mov ecx, dword [ebp - 0x10154]
xor eax, eax
mov dword [ebp - 0x101e8], 0
mov dword [ebp - 0x101e4], 7
mov word [ebp - 0x101f8], ax
cmp ecx, 8
jb 0x40d980
mov edx, dword [ebp - 0x10168]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40d976
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
mov ecx, dword [ebp - 0x101cc]
xor eax, eax
mov dword [ebp - 0x10158], 0
mov dword [ebp - 0x10154], 7
mov word [ebp - 0x10168], ax
cmp ecx, 8
jb 0x40d9dd
mov edx, dword [ebp - 0x101e0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40d9d3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
mov ecx, dword [ebp - 0x1004c]
xor eax, eax
mov dword [ebp - 0x101d0], 0
mov dword [ebp - 0x101cc], 7
mov word [ebp - 0x101e0], ax
cmp ecx, 0x10
jb 0x40da34
mov edx, dword [ebp - 0x10060]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40da2a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
mov ecx, dword [ebp - 0x101b4]
mov dword [ebp - 0x10050], 0
mov dword [ebp - 0x1004c], 0xf
mov byte [ebp - 0x10060], 0
cmp ecx, 8
jb 0x40da8f
mov edx, dword [ebp - 0x101c8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40da85
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
mov ecx, dword [ebp - 0x1019c]
xor eax, eax
mov dword [ebp - 0x101b8], 0
mov dword [ebp - 0x101b4], 7
mov word [ebp - 0x101c8], ax
cmp ecx, 0x10
jb 0x40dae6
mov edx, dword [ebp - 0x101b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40dadc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
mov ecx, dword [ebp - 0x1028c]
mov dword [ebp - 0x101a0], 0
mov dword [ebp - 0x1019c], 0xf
mov byte [ebp - 0x101b0], 0
cmp ecx, 8
jb 0x40db41
mov edx, dword [ebp - 0x102a0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40db37
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee6
push ecx
push edx
call fcn.00410f4e
add esp, 8
lea eax, [ebp - 0x10090]
push eax
call fcn.00406020
add esp, 4
cmp dword [ebp - 0x10418], 0
je 0x40db9c
lea ecx, [ebp - 0x10090]
call fcn.004040e0
jmp 0x40db73
push str.Injected_
call fcn.00406020
add esp, 4
add esi, 0x18
cmp esi, dword [ebp - 0x103f4]
jne 0x40d3b0
cmp dword [ebp - 0x10248], 0
jne 0x40dbfe
push dword [ebp - 0x1042c]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x40dcf6
push 1
push dword [ebp - 0x10430]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push dword [ebp - 0x10430]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x1042c]
call esi
cmp dword [ebp - 0x1007c], 8
lea eax, [ebp - 0x10090]
push 0x10
cmovae eax, dword [ebp - 0x10090]
push str.ColdClientLoader
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.00406020
lea ecx, [ebp - 0x10090]
call fcn.004040e0
mov esi, 1
jmp 0x40ddde
push dword [ebp - 0x10428]
lea eax, [ebp - 0x10288]
push eax
call fcn.0040b010
push eax
lea eax, [ebp - 0x20]
push str.Attach_a_debugger_now_to_PID
push eax
call fcn.00401440
add esp, 0x14
mov ecx, eax
push 0x1b
push str._and_resume_its_main_thread
call fcn.00406d20
mov dword [ebp - 0x10038], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x10034], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x10048], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x10048], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x10038], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
call fcn.00404090
lea ecx, [ebp - 0x10288]
call fcn.00404090
lea eax, [ebp - 0x10048]
push eax
call fcn.00406020
add esp, 4
lea eax, [ebp - 0x10048]
cmp dword [ebp - 0x10034], 0x10
cmovae eax, dword [ebp - 0x10048]
push 0
push 0x430940
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x10034]
cmp ecx, 0x10
jb 0x40dcf6
mov edx, dword [ebp - 0x10048]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40dcec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40def0
push ecx
push edx
call fcn.00410f4e
add esp, 8
push 0xffffffffffffffff
push dword [ebp - 0x1042c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x10430]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x1042c]
call esi
cmp byte [ebp - 0x103f9], 0
je 0x40ddd7
lea eax, [ebp - 0x103f8]
push eax
push 0xf003f
push 0
push str.SoftwareValveSteamActiveProcess
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x40dd99
push dword [ebp - 0x10414]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea eax, [ebp - 0xc030]
push eax
push 1
push 0
push str.SteamClientDll
push dword [ebp - 0x103f8]
call ebx
push dword [ebp - 0x10420]
lea eax, [ebp - 0x10030]
push eax
push 1
push 0
push str.SteamClientDll64
push dword [ebp - 0x103f8]
call ebx
push dword [ebp - 0x103f8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x40ddd7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x10288]
push eax
call fcn.0040b010
push eax
lea eax, [ebp - 0x20]
push str.Unable_to_restore_the_original_Steam_process_informations_in_the_Windows_registry__error_
push eax
call fcn.00401440
push eax
call fcn.00406020
add esp, 0x18
lea ecx, [ebp - 0x20]
call fcn.00404090
lea ecx, [ebp - 0x10288]
call fcn.00404090
call fcn.00406020
xor esi, esi
lea ecx, [ebp - 0x10408]
call fcn.00406a40
lea ecx, [ebp - 0x10444]
call fcn.00404180
pop ebx
jmp 0x40de1d
push str.You_forgot_to_set_the_AppId
call fcn.00406020
add esp, 4
push 0x10
push 0x430940
push str.You_forgot_to_set_the_AppId.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esi, 1
lea ecx, [ebp - 0x10228]
call fcn.004040e0
lea ecx, [ebp - 0x10240]
call fcn.004040e0
lea ecx, [ebp - 0x10138]
call fcn.004040e0
lea ecx, [ebp - 0x10258]
call fcn.004040e0
lea ecx, [ebp - 0x10270]
call fcn.004040e0
lea ecx, [ebp - 0x10078]
call fcn.004040e0
lea ecx, [ebp - 0x10180]
call fcn.004040e0
lea ecx, [ebp - 0x100d8]
call fcn.004040e0
lea ecx, [ebp - 0x100a8]
call fcn.004040e0
lea ecx, [ebp - 0x100f0]
call fcn.004040e0
lea ecx, [ebp - 0x10108]
call fcn.004040e0
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
xor ecx, ebp
pop esi
call fcn.004111b2
mov esp, ebp
pop ebp
ret 0x10
call fcn.00406ad0
call fcn.00406ad0
call fcn.00406ad0
call fcn.00406ad0
call fcn.00406ad0
call fcn.00406ad0
call fcn.00406ad0
call fcn.00406ad0
call fcn.00406ad0
call fcn.00406ad0
call fcn.00406ad0
call fcn.00406ad0
call fcn.00415b7f
call fcn.00415b7f
call fcn.00415b7f
int3