Function at 0x100230a0
Capabilities:
Create directory
Create thread
Delete file
Get file size
Link many functions at runtime
Query environment variable
Query or enumerate registry value
Resolve function by parsing pe exports
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x938
mov eax, dword [0x10063040]
xor eax, esp
mov dword [esp + 0x934], eax
push esi
push edi
push 0x208
lea eax, [esp + 0x324]
push 0
push eax
call fcn.1002d740
add esp, 0xc
mov dword [esp + 0x94], 1
lea eax, [esp + 0x90]
mov dword [esp + 0x90], 0x104
push eax
lea eax, [esp + 0x324]
push eax
lea eax, [esp + 0x9c]
push eax
push 0x20002
push str.InstallPath
push str.SoftwareValveSteam
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
jne 0x10023153
push str.Steam.exe
lea eax, [esp + 0x324]
push 0x104
push eax
call fcn.10035f81
add esp, 0xc
lea edx, [esp + 0x320]
mov ecx, 0x10067958
call fcn.10008ca0
cmp al, 1
jne 0x10023153
mov byte [0x10065c47], al
push 0x5c
push 0x10067958
call fcn.1002d430
add esp, 8
test eax, eax
je 0x1002316b
xor ecx, ecx
mov word [eax], cx
push 0x5c
push 0x10066068
call fcn.1002d430
add esp, 8
test eax, eax
je 0x10023183
xor ecx, ecx
mov word [eax], cx
cmp byte [0x10065c47], 0
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
jne 0x10023594
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
push 0x1000000
push 0
push 0x10066cb4
call esi
push 0x1000000
push 0
push 0x10068924
call esi
push 0x1000000
push 0
push 0x100670f8
call esi
push 0x10023060
call fcn.10035baa
add esp, 4
push 0x10023080
call fcn.10036360
add esp, 4
push 0x104
push 0x10067110
push 0x1005a86c
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push 0x104
push 0x10067b68
push str.SteamAppId
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test esi, esi
je 0x10023419
test eax, eax
je 0x10023419
push 0x10067110
push str.SoftwareGL2024AppID_s
push 0xffffffffffffffff
push 0x104
push 0x10067c78
call fcn.100012e0
add esp, 0x14
push 0x10067b68
push str.SoftwareGL2024AppID_sStats
push 0xffffffffffffffff
push 0x104
push 0x10067540
call fcn.100013a0
add esp, 0x14
push 0x10067b68
push str.SoftwareGL2024AppID_sAchievements
push 0xffffffffffffffff
push 0x104
push 0x10067850
call fcn.100013a0
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [esp + 0x60]
add esp, 0x14
mov dword [esp + 0x4c], 0
mov dword [esp + 0x74], 4
mov dword [esp + 0x9c], 4
push eax
push 0x20019
push 0
push 0x10067c78
push 0x80000001
call esi
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x100232e6
lea eax, [esp + 0x9c]
push eax
push 0x10063ad0
lea eax, [esp + 0x7c]
push eax
push 0
push str.StatsLimit
push dword [esp + 0x60]
call edi
push dword ds:[esp + 0x4c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [esp + 0x50]
mov dword [esp + 0x50], 0
push eax
push 0x20019
push 0
push 0x10067c78
push 0x80000001
mov dword [esp + 0x90], 4
mov dword [esp + 0x8c], 4
call esi
nop dword [eax]
test eax, eax
jne 0x1002334d
lea eax, [esp + 0x78]
push eax
push 0x10063ad4
lea eax, [esp + 0x84]
push eax
push 0
push str.AchievementsLimit
push dword [esp + 0x64]
call edi
push dword [esp + 0x50]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [esp + 0x54]
mov dword [esp + 0x54], 0
push eax
push 0x20019
push 0
push 0x10067c78
push 0x80000001
mov dword [esp + 0x98], 4
mov dword [esp + 0x94], 4
call esi
test eax, eax
jne 0x100233b3
lea eax, [esp + 0x80]
push eax
push 0x10063ad8
lea eax, [esp + 0x8c]
push eax
push 0
push str.SkipStatsAndAchievements
push dword [esp + 0x68]
call edi
push dword [esp + 0x54]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [esp + 0x58]
mov dword [esp + 0x58], 0
push eax
push 0x20019
push 0
push 0x10067c78
push 0x80000001
mov dword [esp + 0xa0], 4
mov dword [esp + 0x9c], 4
call esi
test eax, eax
jne 0x10023419
lea eax, [esp + 0x88]
push eax
push 0x10066cd4
lea eax, [esp + 0x94]
push eax
push 0
push str.DisableGL2024ServerTicket
push dword [esp + 0x6c]
call edi
push dword [esp + 0x58]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x10067958
push str._sServer.bin
push 0xffffffffffffffff
push 0x104
push 0x10067318
call fcn.100012e0
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
add esp, 0x14
push 0
push 0x80
push 3
push 0
push 1
push 0
push 0x10067318
call edi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp eax, 0xffffffff
je 0x10023469
push eax
call esi
mov byte [0x10066067], 1
push str.GreenLuma_2024_is_loaded__r_n
call fcn.100020e0
add esp, 4
push 0x10068508
push str.Exe______s_r_n
call fcn.100023a0
add esp, 8
cmp byte [0x10066067], 0
jne 0x10023510
push 0x208
lea eax, [esp + 0x52c]
push 0
push eax
call fcn.1002d740
add esp, 0xc
mov dword [esp + 0x60], 1
lea eax, [esp + 0x68]
mov dword [esp + 0x68], 0x104
push eax
lea eax, [esp + 0x52c]
push eax
lea eax, [esp + 0x68]
push eax
push 0x20002
push str.InstallPath
push str.SoftwareValveSteam
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegGetValueW]
test eax, eax
je 0x10023506
push 0x10
push str.GreenLuma_2024
push str.Failed_to_get_Steam_path_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea eax, [esp + 0x528]
push eax
jmp 0x10023515
push 0x10067958
push str._sPatchingDone.bin
push 0xffffffffffffffff
push 0x104
push 0x10065e50
call fcn.100012e0
add esp, 0x14
push 0x10067958
push str._sLumaCEG_Plugin_x86.dll
push 0xffffffffffffffff
push 0x104
push 0x10066278
call fcn.100012e0
add esp, 0x14
push 0
push 0x80
push 3
push 0
push 1
push 0
push 0x10066278
call edi
cmp eax, 0xffffffff
je 0x10023820
push eax
call esi
push 0x10066278
push str.LumaCEG_Plugin_Dll______s_r_n
call fcn.100023a0
add esp, 8
push 8
push 0
push 0x10066278
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
jmp 0x10023820
push str.appcache_appinfo.vdf
call edi
push str.appcachepackageinfo.vdf
call edi
mov edx, str.User32.dll
mov ecx, 0x10072ba8
call fcn.10008ca0
cmp al, 1
jne 0x100236f5
mov byte [0x10065c45], al
mov byte [0x10065c46], al
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileW]
push str.GreenLuma_2024_is_loaded__r_n
call fcn.100020e0
add esp, 4
push 0x10068508
push str.Exe______s_r_n
call fcn.100023a0
push 0x10066068
push str._sNoQuestion.bin
push 0xffffffffffffffff
push 0x104
push 0x10068950
call fcn.100012e0
add esp, 0x1c
push 0x10066068
push str._sAppList_
push 0xffffffffffffffff
push 0x104
push 0x10066ef0
call fcn.100012e0
add esp, 0x14
push 0x10066068
push str._sAppList0.txt
push 0xffffffffffffffff
push 0x104
push 0x10066ce0
call fcn.100012e0
add esp, 0x14
push 0x10067958
push str._s_binx64launcher.exe
push 0xffffffffffffffff
push 0x104
push 0x10067648
call fcn.100012e0
add esp, 0x14
cmp byte [0x10065c45], 1
jne 0x100237ce
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push 0x10067648
call esi
mov dword [esp + 0x60], eax
cmp eax, 0xffffffff
je 0x100237af
lea ecx, [esp + 0x68]
mov dword [esp + 0x68], 0
push ecx
push eax
mov dword [esp + 0x74], 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
push dword ds:[esp + 0x60]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x10023793
cmp dword [esp + 0x6c], 0
jl 0x100237e8
jg 0x100236e9
cmp dword [esp + 0x68], 0x30d40
jbe 0x100237e8
push 0x10068d60
call edi
jmp 0x100237e8
cmp byte [0x10065c45], 0
nop dword [eax]
jne 0x100235c3
push 0x10066068
push str._sStealthMode.bin
push 0xffffffffffffffff
push 0x104
push 0x10068d60
call fcn.100012e0
add esp, 0x14
push 0x10066068
push str._sPatchingDone.bin
push 0xffffffffffffffff
push 0x104
push 0x10065e50
call fcn.100012e0
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileW]
add esp, 0x14
push 0
push 0x80
push 3
push 0
push 1
push 0
push 0x10068d60
call esi
cmp eax, 0xffffffff
je 0x1002377c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [0x10065c45], 1
jmp 0x100235c9
push 0x1000000
push 0
push 0x10066cb4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
jmp 0x100235c9
push 0x10
push str.GreenLuma_2024
push str.Failed_to_get_size_of_x64launcher.exe_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10
push str.GreenLuma_2024
push str.Failed_to_open_x64launcher.exe_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10023060
call fcn.10035baa
add esp, 4
push 0x10023080
call fcn.10036360
add esp, 4
push 0
push 0x80
push 3
push 0
push 1
push 0
push 0x10068950
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x10023820
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10068950
call edi
mov byte [0x10065c46], 1
push 0x10072ba8
push str.GreenLuma_2024_Dll______s_r_n
call fcn.100023a0
add esp, 8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str.PID______lu_r_n_r_n
mov dword [0x10072fd8], eax
call fcn.100020e0
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
add esp, 8
cmp byte [0x10065c47], 1
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
jne 0x10023e71
push 0
push 0x80
push 3
push 0
push 1
push 0
push 0x10066ce0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x10023928
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x10065c46], 1
nop dword [eax]
je 0x10023ac6
push 0x24
push str.GreenLuma_2024
push str.Use_saved_AppList_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
nop word [eax + eax]
sub eax, 6
je 0x10023ac6
sub eax, 1
jne 0x10023928
xor esi, esi
push 0x208
lea eax, [esp + 0x11c]
push 0
push eax
call fcn.1002d740
add esp, 0xc
lea eax, [esp + 0x118]
push esi
push 0x10066ef0
push str._s_zu.txt
push 0xffffffffffffffff
push 0x104
push eax
call fcn.100012e0
add esp, 0x18
lea eax, [esp + 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
inc esi
cmp esi, 0x96
jb 0x100238d0
call dword [sym.imp.KERNEL32.dll_AllocConsole]
push 0
mov dword [0x10066270], eax
call fcn.10034ae5
add esp, 4
push eax
push 0x1005ad9c
push 0x1005ada0
push 0x10068920
call fcn.100349fd
push 1
call fcn.10034ae5
add esp, 0x14
push eax
push 0x1005adb0
push 0x1005adb4
push 0x10066cb0
call fcn.100349fd
push 2
call fcn.10034ae5
add esp, 0x14
push eax
push 0x1005adb0
push 0x1005adb4
push 0x10068504
call fcn.100349fd
xorps xmm0, xmm0
mov dword [esp + 0xc0], 0
push str.How_many_Games_DLC_would_you_like_to_add___1_150_:
movaps xmmword [esp + 0xb4], xmm0
call fcn.10001260
add esp, 0x14
push 0
call fcn.10034ae5
add esp, 4
push eax
lea eax, [esp + 0xa4]
push 0xa
push eax
call fcn.1003619e
add esp, 0xc
test eax, eax
je 0x10023aa8
nop dword [eax + eax]
lea ecx, [esp + 0xa0]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100239f0
sub ecx, edx
sar ecx, 1
lea ecx, [ecx*2 - 2]
cmp ecx, 0x14
jae 0x10024e2e
xor eax, eax
push 0xa
push eax
mov word [esp + ecx + 0xa8], ax
lea eax, [esp + 0xa8]
push eax
call fcn.1003545b
add esp, 0xc
mov esi, eax
mov dword [esp + 0x20], esi
call fcn.100362a0
cmp dword ds:[eax], 0x22
je 0x10023e55
test esi, esi
je 0x10023a56
cmp esi, 0x96
jle 0x10023bee
xorps xmm0, xmm0
mov dword [esp + 0xb0], 0
push str.How_many_Games_DLC_would_you_like_to_add___1_150_:
movaps xmmword [esp + 0xa4], xmm0
call fcn.10001260
add esp, 4
push 0
call fcn.10034ae5
add esp, 4
push eax
lea eax, [esp + 0xa4]
push 0xa
push eax
call fcn.1003619e
add esp, 0xc
test eax, eax
jne 0x100239e0
push 0x10
push str.GreenLuma_2024
push str.Failed_to_read_answer_to_question_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [esp + 0x10], 0
nop
push 0x208
lea eax, [esp + 0x11c]
push 0
push eax
call fcn.1002d740
add esp, 0xc
lea eax, [esp + 0x118]
push dword [esp + 0x10]
push 0x10066ef0
push str._s_zu.txt
push 0xffffffffffffffff
push 0x104
push eax
call fcn.100012e0
push 0x100539e8
lea eax, [esp + 0x134]
mov dword [esp + 0x78], 0
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.10035756
add esp, 0x24
test eax, eax
jne 0x10023d30
push dword [esp + 0x5c]
mov dword [esp + 0xd4], eax
xorps xmm0, xmm0
lea eax, [esp + 0xc4]
movaps xmmword [esp + 0xc4], xmm0
push 0x14
push eax
call fcn.10036193
add esp, 0xc
test eax, eax
je 0x10023bd2
push dword [esp + 0x5c]
call fcn.100358f2
add esp, 4
lea eax, [esp + 0xc0]
push 0xa
push 0
push eax
call fcn.10035415
mov ecx, dword [esp + 0x1c]
add esp, 0xc
mov dword [ecx*4 + 0x100682a8], eax
call fcn.100362a0
cmp dword [eax], 0x22
je 0x10023bb6
mov eax, dword [esp + 0x10]
inc eax
mov dword [esp + 0x10], eax
cmp eax, 0x96
jb 0x10023ad0
jmp 0x10023d30
push 0x10
push str.GreenLuma_2024
push str.strtol__ERANGE___1_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10
push str.GreenLuma_2024
push str.Failed_to_read_AppIDs_from_AppList_folder_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
xor esi, esi
cmp dword [esp + 0x20], esi
jle 0x10023d2a
mov ecx, str._nAppID:
nop
test esi, esi
mov eax, str.AppID:
cmove eax, ecx
push eax
call fcn.10001260
add esp, 4
xorps xmm0, xmm0
movaps xmmword [esp + 0xe0], xmm0
movaps xmmword [esp + 0xf0], xmm0
movq qword [esp + 0x100], xmm0
push 0
call fcn.10034ae5
add esp, 4
push eax
lea eax, [esp + 0xe4]
push 0x14
push eax
call fcn.1003619e
add esp, 0xc
test eax, eax
je 0x10023e39
lea ecx, [esp + 0xe0]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10023c60
sub ecx, edx
sar ecx, 1
lea ecx, [ecx*2 - 2]
cmp ecx, 0x28
jae 0x10024e2e
xor eax, eax
push 0xa
push eax
mov word [esp + ecx + 0xe8], ax
lea eax, [esp + 0xe8]
push eax
call fcn.1003545b
add esp, 0xc
mov dword [esi*4 + 0x100682a8], eax
call fcn.100362a0
cmp dword [eax], 0x22
je 0x10023e1d
push 0
push 0x10066ef0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0x208
lea eax, [esp + 0x734]
push 0
push eax
call fcn.1002d740
add esp, 0xc
lea eax, [esp + 0x730]
push esi
push 0x10066ef0
push str._s_u.txt
push 0xffffffffffffffff
push 0x104
push eax
call fcn.100012e0
push dword [esi*4 + 0x100682a8]
lea eax, [esp + 0x74c]
push 0x1005af50
push eax
call fcn.10002be0
inc esi
add esp, 0x24
mov ecx, str._nAppID:
cmp esi, dword [esp + 0x20]
jl 0x10023c00
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
call fcn.10026af0
cmp dword [0x100731f0], 0
nop dword [eax]
jne 0x10024de6
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapCreate]
mov dword [0x100731f0], eax
xor ecx, ecx
mov edx, 0x100731ec
xchg dword [edx], ecx
test eax, eax
je 0x10024def
mov edx, str.User32.dll
mov ecx, 0x10072ba8
call fcn.10008ca0
test al, al
jne 0x10024028
lea eax, [esp + 0x98]
mov dword [esp + 0x64], 1
push eax
push 0x10068718
lea eax, [esp + 0x6c]
mov dword [esp + 0xa0], 0x104
push eax
push 2
push str.SteamClientDll
push str.SoftwareValveSteamActiveProcess
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegGetValueW]
nop dword [eax + eax]
test eax, eax
je 0x10024009
push str.Getting_paths_from_registry_failed__using_local_r_n
call fcn.100020e0
add esp, 4
mov ecx, 0x208
mov eax, 0x10068718
nop
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x10023de0
push 0x10066068
push str._s_steamclient.dll
push 0xffffffffffffffff
push 0x104
push 0x10068718
call fcn.100012e0
add esp, 0x14
push 8
push 0
push 0x10068718
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
jmp 0x1002402f
push 0x10
push str.GreenLuma_2024
push str.wcstol__ERANGE___3_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10
push str.GreenLuma_2024
push str.Failed_to_read_AppID_from_console_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10
push str.GreenLuma_2024
push str.wcstol__ERANGE___2_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10066068
push str._sGreenLuma2024_FilesAchievementUnlocked.wav
push 0xffffffffffffffff
push 0x104
push 0x10067e90
call fcn.100012e0
add esp, 0x14
push 0x10067110
push 0x10066068
push str._sAppOwnershipTicketsTicket._s
push 0xffffffffffffffff
push 0x104
push 0x100668a0
call fcn.100012e0
push 0x10067110
push 0x10066068
push str._sEncryptedAppTicketsEncryptedTicket._s
push 0xffffffffffffffff
push 0x104
push 0x10068b58
call fcn.100012e0
push 0x10066068
push str._sWhitelist.txt
push 0xffffffffffffffff
push 0x104
push 0x10072fe0
call fcn.100012e0
add esp, 0x44
push 0x10066068
push str._sBlacklist.txt
push 0xffffffffffffffff
push 0x104
push 0x10066690
call fcn.100012e0
add esp, 0x14
push 0x10066068
push str._sDenuvoActivationBypass.dll
push 0xffffffffffffffff
push 0x104
push 0x10066aa8
call fcn.100012e0
add esp, 0x14
push 0x10066068
push str._sDenuvoOfflineActivationBypass.dll
push 0xffffffffffffffff
push 0x104
push 0x10066488
call fcn.100012e0
add esp, 0x14
push str.DenuvoActivationBypass.dll
call esi
mov dword [0x10072db4], eax
test eax, eax
jne 0x10023f6c
push str.DenuvoOfflineActivationBypass.dll
call esi
mov dword [0x10072db4], eax
test eax, eax
je 0x10023d30
push str.GetDenuvoCallResult
push eax
call edi
push str.GetDenuvoID
push dword [0x10072db4]
mov dword [0x10068944], eax
call edi
push str.RequestDenuvoAppTicket
push dword [0x10072db4]
mov dword [0x10067c70], eax
call edi
push str.GetDenuvoAppTicket
push dword [0x10072db4]
mov dword [0x10068948], eax
call edi
push str.ShutdownDenuvoDll
push dword [0x10072db4]
mov dword [0x10067534], eax
call edi
cmp dword [0x10068944], 0
mov dword [0x10066060], eax
je 0x10024e0e
cmp dword [0x10067c70], 0
je 0x10024e0e
cmp dword [0x10068948], 0
je 0x10024e0e
cmp dword [0x10067534], 0
je 0x10024e0e
test eax, eax
je 0x10024e0e
mov byte [0x10066275], 1
jmp 0x10023d30
push str.Got_Steamclient_dll_paths_from_registry_r_n
call fcn.100020e0
add esp, 4
push 8
push 0
push 0x10068718
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
jmp 0x1002402f
push str.steamclient.dll
call esi
mov dword [0x10068714], eax
test eax, eax
je 0x10024dc7
push str.Steamclient.dll_is_loaded__r_n
call fcn.100020e0
add esp, 4
push 0x10068718
push str.Steamclient______s_r_n_r_n
call fcn.100023a0
add esp, 8
cmp byte [0x10065c45], 0
jne 0x10024aa0
push str.steamclient.dll
call esi
test eax, eax
jne 0x1002407d
mov dword [esp + 0x1c], 0xb
jmp 0x100240a9
push str.CreateInterface
push eax
call edi
test eax, eax
jne 0x10024093
mov dword [esp + 0x1c], 0xc
jmp 0x100240a9
push 0x1006893c
mov edx, 0x10003da0
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x1c], eax
push str.steamclient.dll
call esi
test eax, eax
jne 0x100240be
mov dword [esp + 0x18], 0xb
jmp 0x100240e9
push str.Steam_BGetCallback
push eax
call edi
test eax, eax
jne 0x100240d4
mov dword [esp + 0x18], 0xc
jmp 0x100240e9
push 0x10067b60
mov edx, 0x10004620
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x18], eax
push str.steamclient.dll
call esi
test eax, eax
jne 0x100240fe
mov dword [esp + 0x10], 0xb
jmp 0x10024129
push str.Steam_FreeLastCallback
push eax
call edi
test eax, eax
jne 0x10024114
mov dword [esp + 0x10], 0xc
jmp 0x10024129
push 0x10067528
mov edx, 0x100047e0
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x10], eax
push str.steamclient.dll
call esi
test eax, eax
jne 0x1002413e
mov dword [esp + 0x14], 0xb
jmp 0x10024169
push str.Steam_GetAPICallResult
push eax
call edi
test eax, eax
jne 0x10024154
mov dword [esp + 0x14], 0xc
jmp 0x10024169
push 0x1006689c
mov edx, 0x100048a0
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x14], eax
push str.CreateInterface
push dword [0x10068714]
call edi
mov ecx, eax
call fcn.10027080
push str.Steam_BGetCallback
push dword [0x10068714]
mov esi, eax
call edi
mov ecx, eax
call fcn.10027080
push str.Steam_FreeLastCallback
push dword [0x10068714]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, eax
call fcn.10027080
push str.Steam_GetAPICallResult
push dword [0x10068714]
mov dword ds:[esp + 0x28], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, eax
call fcn.10027080
mov ecx, esi
mov dword [esp + 0x30], eax
call fcn.10027140
mov ecx, dword ds:[esp + 0x1c]
push eax
call fcn.10027140
push eax
push str.CreateInterface_Hook______s______s_r_n
call fcn.100020e0
add esp, 0xc
mov ecx, edi
call fcn.10027140
mov ecx, dword ds:[esp + 0x18]
push eax
call fcn.10027140
push eax
push str.Steam_BGetCallback_Hook______s______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x2c]
add esp, 0xc
call fcn.10027140
mov ecx, dword [esp + 0x10]
push eax
call fcn.10027140
push eax
push str.Steam_FreeLastCallback_Hook______s______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x3c]
add esp, 0xc
call fcn.10027140
mov ecx, dword [esp + 0x14]
push eax
call fcn.10027140
push eax
push str.Steam_GetAPICallResult_Hook______s______s_r_n_r_n
call fcn.100020e0
add esp, 0xc
cmp byte [0x10065c45], 0
jne 0x10024aa0
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.ntdll.dll
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x10024284
mov eax, 0xb
jmp 0x100242a8
push str.NtCreateUserProcess
push eax
call esi
test eax, eax
jne 0x10024297
mov eax, 0xc
jmp 0x100242a8
push 0x10072dc0
mov edx, 0x10003020
mov ecx, eax
call fcn.10026c40
push str.ntdll.dll
mov dword [0x10072dcc], eax
call edi
test eax, eax
jne 0x100242bf
mov eax, 0xb
jmp 0x100242e5
push str.NtResumeThread
push eax
call esi
test eax, eax
jne 0x100242d2
mov eax, 0xc
jmp 0x100242e5
push 0x10067530
mov edx, 0x10003ca0
mov ecx, eax
call fcn.10026c40
push str.ntdll.dll
mov dword [0x10072db8], eax
call edi
test eax, eax
jne 0x100242ff
mov dword [esp + 0x34], 0xb
jmp 0x1002432a
push str.LdrLoadDll
push eax
call esi
test eax, eax
jne 0x10024315
mov dword [esp + 0x34], 0xc
jmp 0x1002432a
push 0x10067e8c
mov edx, 0x10008ee0
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x34], eax
push str.ntdll.dll
call edi
test eax, eax
jne 0x1002433f
mov dword [esp + 0x38], 0xb
jmp 0x1002436a
push str.LdrGetDllHandleEx
push eax
call esi
test eax, eax
jne 0x10024355
mov dword [esp + 0x38], 0xc
jmp 0x1002436a
push 0x10072db0
mov edx, 0x10008f60
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x38], eax
push str.ntdll.dll
call edi
test eax, eax
jne 0x1002437f
mov dword [esp + 0x3c], 0xb
jmp 0x100243aa
push str.LdrGetDllFullName
push eax
call esi
test eax, eax
jne 0x10024395
mov dword [esp + 0x3c], 0xc
jmp 0x100243aa
push 0x10066ccc
mov edx, 0x10008fe0
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x3c], eax
push str.ntdll.dll
call edi
test eax, eax
jne 0x100243bf
mov dword [esp + 0x40], 0xb
jmp 0x100243ea
push str.LdrGetDllHandleByMapping
push eax
call esi
test eax, eax
jne 0x100243d5
mov dword [esp + 0x40], 0xc
jmp 0x100243ea
push 0x10067954
mov edx, 0x10009040
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x40], eax
push str.ntdll.dll
call edi
test eax, eax
jne 0x100243ff
mov dword [esp + 0x44], 0xb
jmp 0x1002442a
push str.LdrGetDllHandleByName
push eax
call esi
test eax, eax
jne 0x10024415
mov dword [esp + 0x44], 0xc
jmp 0x1002442a
push 0x10067644
mov edx, 0x100090c0
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x44], eax
push str.ntdll.dll
call edi
test eax, eax
jne 0x1002443f
mov dword [esp + 0x48], 0xb
jmp 0x1002446a
push str.LdrQueryProcessModuleInformation
push eax
call esi
test eax, eax
jne 0x10024455
mov dword [esp + 0x48], 0xc
jmp 0x1002446a
push 0x1006894c
mov edx, 0x10009140
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x48], eax
push str.ntdll.dll
call edi
test eax, eax
jne 0x1002447f
mov dword [esp + 0x30], 0xb
jmp 0x100244aa
push str.LdrEnumerateLoadedModules
push eax
call esi
test eax, eax
jne 0x10024495
mov dword [esp + 0x30], 0xc
jmp 0x100244aa
push 0x10066484
mov edx, 0x10009280
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x30], eax
push str.ntdll.dll
call edi
test eax, eax
jne 0x100244bf
mov dword [esp + 0x20], 0xb
jmp 0x100244ea
push str.RtlLockModuleSection
push eax
call esi
test eax, eax
jne 0x100244d5
mov dword [esp + 0x20], 0xc
jmp 0x100244ea
push 0x10066cdc
mov edx, 0x100092e0
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x20], eax
push str.kernel32.dll
call edi
test eax, eax
je 0x1002451d
push str.Module32NextW
push eax
call esi
nop dword [eax]
test eax, eax
je 0x1002451d
push 0x10067538
mov edx, 0x10009300
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x18], eax
test eax, eax
je 0x1002455d
push str.KernelBase.dll
call edi
test eax, eax
jne 0x10024532
mov dword [esp + 0x18], 0xb
jmp 0x1002455d
push str.Module32NextW
push eax
call esi
test eax, eax
jne 0x10024548
mov dword [esp + 0x18], 0xc
jmp 0x1002455d
push 0x10067538
mov edx, 0x10009300
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x18], eax
push str.KernelBase.dll
call edi
test eax, eax
je 0x100246f7
push str.EnumProcessModules
push eax
call esi
test eax, eax
je 0x100246f7
push 0x10068940
mov edx, 0x10009380
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x100246f7
push str.KernelBase.dll
nop
call edi
test eax, eax
jne 0x100245b0
mov dword [esp + 0x24], 0xb
jmp 0x100245db
push str.EnumProcessModulesEx
push eax
call esi
test eax, eax
jne 0x100245c6
mov dword [esp + 0x24], 0xc
jmp 0x100245db
push 0x10068500
mov edx, 0x100096c0
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x24], eax
push str.KernelBase.dll
call edi
test eax, eax
jne 0x100245f0
mov dword [esp + 0x28], 0xb
jmp 0x1002461b
push str.GetModuleInformation
push eax
call esi
test eax, eax
jne 0x10024606
mov dword [esp + 0x28], 0xc
jmp 0x1002461b
push 0x100731e8
mov edx, 0x10009a40
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x28], eax
push str.KernelBase.dll
call edi
test eax, eax
jne 0x10024630
mov dword [esp + 0x2c], 0xb
jmp 0x1002465b
push str.GetModuleBaseNameW
push eax
call esi
test eax, eax
jne 0x10024646
mov dword [esp + 0x2c], 0xc
jmp 0x1002465b
push 0x10067e84
mov edx, 0x10009b00
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x2c], eax
push str.KernelBase.dll
call edi
test eax, eax
jne 0x10024670
mov dword [esp + 0x14], 0xb
jmp 0x1002469b
push 0x1005b628
push eax
call esi
test eax, eax
jne 0x10024686
mov dword [esp + 0x14], 0xc
jmp 0x1002469b
push 0x10072fdc
mov edx, 0x10009be0
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x14], eax
push str.KernelBase.dll
call edi
test eax, eax
jne 0x100246b8
mov dword [esp + 0x10], 0xb
push str.KernelBase.dll
jmp 0x10024880
push str.GetModuleFileNameExW
push eax
call esi
test eax, eax
jne 0x100246d8
mov dword [esp + 0x10], 0xc
push str.KernelBase.dll
jmp 0x10024880
push 0x10066058
mov edx, 0x10009ca0
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x10], eax
push str.KernelBase.dll
jmp 0x10024880
push str.Psapi.dll
call edi
nop
test eax, eax
jne 0x1002470e
mov dword [esp + 0x1c], 0xb
jmp 0x10024739
push str.EnumProcessModules
push eax
call esi
test eax, eax
jne 0x10024724
mov dword [esp + 0x1c], 0xc
jmp 0x10024739
push 0x10068940
mov edx, 0x10009380
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x1c], eax
push str.Psapi.dll
nop
call edi
test eax, eax
jne 0x10024750
mov dword [esp + 0x24], 0xb
jmp 0x1002477b
push str.EnumProcessModulesEx
push eax
call esi
test eax, eax
jne 0x10024766
mov dword [esp + 0x24], 0xc
jmp 0x1002477b
push 0x10068500
mov edx, 0x100096c0
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x24], eax
push str.Psapi.dll
call edi
test eax, eax
jne 0x10024790
mov dword [esp + 0x28], 0xb
jmp 0x100247bb
push str.GetModuleInformation
push eax
call esi
test eax, eax
jne 0x100247a6
mov dword [esp + 0x28], 0xc
jmp 0x100247bb
push 0x100731e8
mov edx, 0x10009a40
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x28], eax
push str.Psapi.dll
call edi
test eax, eax
jne 0x100247d0
mov dword [esp + 0x2c], 0xb
jmp 0x100247fb
push str.GetModuleBaseNameW
push eax
call esi
test eax, eax
jne 0x100247e6
mov dword [esp + 0x2c], 0xc
jmp 0x100247fb
push 0x10067e84
mov edx, 0x10009b00
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x2c], eax
push str.KernelBase.dll
call edi
test eax, eax
jne 0x10024810
mov dword [esp + 0x14], 0xb
jmp 0x1002483b
push 0x1005b628
push eax
call esi
test eax, eax
jne 0x10024826
mov dword [esp + 0x14], 0xc
jmp 0x1002483b
push 0x10072fdc
mov edx, 0x10009be0
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x14], eax
push str.Psapi.dll
call edi
test eax, eax
jne 0x10024850
mov dword [esp + 0x10], 0xb
jmp 0x1002487b
push str.GetModuleFileNameExW
push eax
call esi
test eax, eax
jne 0x10024866
mov dword [esp + 0x10], 0xc
jmp 0x1002487b
push 0x10066058
mov edx, 0x10009ca0
mov ecx, eax
call fcn.10026c40
mov dword [esp + 0x10], eax
push str.Psapi.dll
call edi
test eax, eax
jne 0x1002488b
lea esi, [eax + 0xb]
jmp 0x100248af
push str.GetMappedFileNameW
push eax
call esi
test eax, eax
jne 0x1002489c
lea esi, [eax + 0xc]
jmp 0x100248af
push 0x10066cd8
mov edx, 0x10009d80
mov ecx, eax
call fcn.10026c40
mov esi, eax
call fcn.10026af0
cmp dword [0x100731f0], 0
je 0x100248cb
mov ecx, 1
call fcn.10026a60
mov edi, eax
jmp 0x100248d0
mov edi, 2
xor eax, eax
mov ecx, 0x100731ec
xchg dword [ecx], eax
mov ecx, dword [0x10072dcc]
call fcn.10027140
push eax
push str.NtCreateUserProcess_Hook______s_r_n
call fcn.100020e0
mov ecx, dword [0x10072db8]
add esp, 8
call fcn.10027140
push eax
push str.NtResumeThread_Hook______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x3c]
add esp, 8
call fcn.10027140
push eax
push str.LdrLoadDll_Hook______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x40]
add esp, 8
call fcn.10027140
push eax
push str.LdrGetDllHandleEx_Hook______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x44]
add esp, 8
call fcn.10027140
push eax
push str.LdrGetDllFullName_Hook______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x48]
add esp, 8
call fcn.10027140
push eax
push str.LdrGetDllHandleByMapping_Hook______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x4c]
add esp, 8
call fcn.10027140
push eax
push str.LdrGetDllHandleByName_Hook______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x50]
add esp, 8
call fcn.10027140
push eax
push str.LdrQueryProcessModuleInformation_Hook______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x38]
add esp, 8
call fcn.10027140
push eax
push str.LdrEnumerateLoadedModules_Hook______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x28]
add esp, 8
call fcn.10027140
push eax
push str.RtlLockModuleSection_Hook______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x20]
add esp, 8
call fcn.10027140
push eax
push str.Module32NextW_Hook______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x24]
add esp, 8
call fcn.10027140
push eax
push str.EnumProcessModules_Hook______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x2c]
add esp, 8
call fcn.10027140
push eax
push str.EnumProcessModulesEx_Hook______s_r_n
call fcn.100020e0
add esp, 8
mov ecx, dword [esp + 0x28]
call fcn.10027140
push eax
push str.GetModuleInformation_Hook______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x34]
add esp, 8
call fcn.10027140
push eax
push str.GetModuleBaseNameW_Hook______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x1c]
add esp, 8
call fcn.10027140
push eax
push str.GetModuleFileNameW_Hook______s_r_n
call fcn.100020e0
mov ecx, dword [esp + 0x18]
add esp, 8
call fcn.10027140
push eax
push str.GetModuleFileNameExW_Hook______s_r_n
call fcn.100020e0
add esp, 8
mov ecx, esi
call fcn.10027140
push eax
push str.GetMappedFileNameW_Hook______s_r_n
call fcn.100020e0
add esp, 8
mov ecx, edi
call fcn.10027140
push eax
push str.Enable_Hooks______s_r_n_r_n
call fcn.100020e0
add esp, 8
cmp byte [0x10065c47], 1
jne 0x10024ce8
push dword [0x10068714]
call dword [0x10066480]
mov ecx, dword [0x10068714]
mov edi, eax
push str.xxxxxxxxxxxx
push 0x1005b924
mov edx, dword [edi + 0x50]
call fcn.10001d40
add esp, 8
mov dword [0x10067e80], eax
test eax, eax
je 0x10024b3d
push str.InternalGetInt_Pattern_found_r_n
call fcn.100020e0
mov ecx, dword [0x10067e80]
add esp, 4
mov edx, 0x10002cc0
mov dword [0x10068098], ecx
push 0x10068098
call fcn.10026c40
mov ecx, dword [0x10067e80]
mov esi, eax
call fcn.10027080
mov ecx, eax
call fcn.10027140
push eax
mov ecx, esi
call fcn.10027140
push eax
push str.InternalGetInt_Hook______s______s_r_n_r_n
call fcn.100020e0
add esp, 0xc
jmp 0x10024b4a
push str.InternalGetInt_Pattern__0_r_n_r_n
call fcn.100020e0
add esp, 4
cmp byte [0x10065c45], 0
jne 0x10024bfb
mov esi, dword [edi + 0x50]
mov edx, esi
mov ecx, dword [0x10068714]
push str.xxxxxxxxxxxxx
push 0x1005b9ac
call fcn.10001d40
mov edi, eax
add esp, 8
test edi, edi
jne 0x10024bad
mov ecx, dword [0x10068714]
mov edx, esi
push str.xxxxxxxxxxxxx
push 0x1005b9bc
call fcn.10001d40
mov edi, eax
add esp, 8
test edi, edi
jne 0x10024bad
push str.GetLegacyCDKey_Pattern__0_r_n_r_n
nop
call fcn.100020e0
add esp, 4
jmp 0x10024bfb
push str.GetLegacyCDKey_Pattern_found_r_n
call fcn.100020e0
add esp, 4
mov dword [0x10068710], edi
mov edx, 0x10004a60
mov ecx, edi
push 0x10068710
call fcn.10026c40
mov ecx, edi
mov esi, eax
call fcn.10027080
mov ecx, eax
call fcn.10027140
push eax
mov ecx, esi
call fcn.10027140
push eax
push str.GetLegacyCDKey_Hook______s______s_r_n_r_n
call fcn.100020e0
add esp, 0xc
cmp dword [0x10066270], 1
jne 0x10024c46
mov eax, dword [0x10068920]
test eax, eax
je 0x10024c16
push eax
call fcn.100358f2
add esp, 4
mov eax, dword [0x10066cb0]
test eax, eax
je 0x10024c28
push eax
call fcn.100358f2
add esp, 4
mov eax, dword [0x10068504]
test eax, eax
je 0x10024c3a
push eax
call fcn.100358f2
add esp, 4
nop word [eax + eax]
call dword [sym.imp.KERNEL32.dll_FreeConsole]
push 0x208
call fcn.1002c1cf
add esp, 4
mov esi, eax
push 0x208
push 0
push esi
call fcn.1002d740
add esp, 0xc
push 0x10067958
push str._spackage_beta
push 0xffffffffffffffff
push 0x104
push esi
call fcn.100012e0
add esp, 0x14
push 0
push 0x80
push 3
push 0
push 1
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x10024cc7
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.You_are_using_Steam_beta_files__GreenLuma_might_not_work_correctly__r_n
call fcn.100020e0
add esp, 4
push 0x30
push str.Beta
push str.You_are_using_Steam_beta_files__GreenLuma_might_not_work_correctly_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, 0x208
mov eax, esi
nop
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x10024cd0
push esi
call fcn.1002bc75
add esp, 4
cmp byte [0x10065c45], 1
jne 0x10024d15
push 0
push 0
push 0
push 0x10022fa0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x10024d94
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, str.User32.dll
mov ecx, 0x10072ba8
call fcn.10008ca0
test al, al
jne 0x10024d7e
push 0
push 0x80
push 2
push 0
push 2
push 0x40000000
push 0x10065e50
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x10024daf
push 0
lea eax, [esp + 0x68]
mov dword [esp + 0x68], 0
push eax
push 1
push 0x1005bb6c
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x93c]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.1002bc62
mov esp, ebp
pop ebp
ret
mov edi, dword [sym.imp.USER32.dll_MessageBoxW]
push 0x10
push str.GreenLuma_2024
push str.Stealth_mode_failed___2_
push 0
call edi
jmp 0x10024d1b
push 0x10
push str.GreenLuma_2024
push 0x1005bb70
push 0
call edi
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10
push str.GreenLuma_2024
push str.Unable_to_load_Steamclient.dll_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
mov ecx, 0x100731ec
xchg dword [ecx], eax
push 0x10
push str.GreenLuma_2024
push str.Unable_to_initialize_MinHook
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10
push str.GreenLuma_2024
push str.Failed_to_get_functions_from_bypass_dll_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.1002bd9c
int3