Function at 0x40dbb0
Capabilities:
Create process on windows
Create process suspended
Resume thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x8624
call fcn.00413360
mov eax, dword [0x440100]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
cmp dword [0x4512a0], 7
mov dword [ebp - 0x8558], eax
mov eax, 0x45128c
cmova eax, dword [0x45128c]
push esi
push eax
call fcn.004113c0
push 0x451274
call fcn.00410cf0
add esp, 8
test al, al
jne 0x40dc90
mov ecx, dword [0x45129c]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x26
jb 0x40fe8a
cmp dword [0x4512a0], 7
mov eax, 0x45128c
push ecx
cmova eax, dword [0x45128c]
lea ecx, [ebp - 0x81e0]
push eax
push 0x26
push str.Couldnt_find_the_configuration_file:
push 0x45128c
push dword [ebp - 0x8554]
call fcn.00403ce0
lea eax, [ebp - 0x81e0]
push eax
call fcn.00406a80
add esp, 4
lea ecx, [ebp - 0x81e0]
call fcn.00404ac0
push 0x10
push 0x433020
push str.Couldnt_find_the_configuration_file_ColdClientLoader.ini.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00406a80
mov eax, 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00413182
mov esp, ebp
pop ebp
ret 0x10
call fcn.0040ff50
mov ecx, eax
cmp dword [eax + 0x14], 7
jbe 0x40dc9f
mov ecx, dword [eax]
mov eax, dword [eax + 0x10]
push 0
push str.SteamClientDll
mov dword [ebp - 0x8598], eax
lea eax, [ebp - 0x83d0]
push str.SteamClient
push eax
mov dword [ebp - 0x859c], ecx
call fcn.0040a1b0
add esp, 0x10
mov ecx, eax
cmp dword [eax + 0x14], 7
jbe 0x40dcd3
mov ecx, dword [eax]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x85c8], eax
lea eax, [ebp - 0x859c]
push eax
lea eax, [ebp - 0x85cc]
mov dword [ebp - 0x85cc], ecx
push eax
lea eax, [ebp - 0x83b8]
push eax
call fcn.00410ef0
mov esi, eax
add esp, 0xc
cmp esi, 0x440010
je 0x40dd3d
mov ecx, 0x440010
call fcn.00404ac0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [0x440010], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x440020], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x83b8]
call fcn.00404ac0
lea ecx, [ebp - 0x83d0]
call fcn.00404ac0
call fcn.0040ff50
mov ecx, eax
cmp dword [eax + 0x14], 7
jbe 0x40dd62
mov ecx, dword [eax]
mov eax, dword [eax + 0x10]
push 0
push str.SteamClient64Dll
mov dword [ebp - 0x85c0], eax
lea eax, [ebp - 0x8538]
push str.SteamClient
push eax
mov dword [ebp - 0x85c4], ecx
call fcn.0040a1b0
add esp, 0x10
mov ecx, eax
cmp dword [eax + 0x14], 7
jbe 0x40dd96
mov ecx, dword [eax]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x85d0], eax
lea eax, [ebp - 0x85c4]
push eax
lea eax, [ebp - 0x85d4]
mov dword [ebp - 0x85d4], ecx
push eax
lea eax, [ebp - 0x83e8]
push eax
call fcn.00410ef0
mov esi, eax
add esp, 0xc
cmp esi, 0x440028
je 0x40de00
mov ecx, 0x440028
call fcn.00404ac0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [0x440028], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x440038], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x83e8]
call fcn.00404ac0
lea ecx, [ebp - 0x8538]
call fcn.00404ac0
call fcn.0040ff50
mov ecx, eax
cmp dword [eax + 0x14], 7
jbe 0x40de25
mov ecx, dword [eax]
mov eax, dword [eax + 0x10]
push 0
push 0x4330ac
mov dword [ebp - 0x85b8], eax
lea eax, [ebp - 0x8400]
push str.SteamClient
push eax
mov dword [ebp - 0x85bc], ecx
call fcn.0040a1b0
add esp, 0x10
mov ecx, eax
cmp dword [eax + 0x14], 7
jbe 0x40de59
mov ecx, dword [eax]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x85b0], eax
lea eax, [ebp - 0x85bc]
push eax
lea eax, [ebp - 0x85b4]
mov dword [ebp - 0x85b4], ecx
push eax
lea eax, [ebp - 0x8120]
push eax
call fcn.00410ef0
add esp, 0xc
lea ecx, [ebp - 0x8400]
call fcn.00404ac0
call fcn.0040ff50
mov ecx, eax
cmp dword [eax + 0x14], 7
jbe 0x40de9f
mov ecx, dword [eax]
mov eax, dword [eax + 0x10]
push 0
push str.ExeRunDir
mov dword [ebp - 0x85a8], eax
lea eax, [ebp - 0x8418]
push str.SteamClient
push eax
mov dword [ebp - 0x85ac], ecx
call fcn.0040a1b0
add esp, 0x10
mov ecx, eax
cmp dword [eax + 0x14], 7
jbe 0x40ded3
mov ecx, dword [eax]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x85a0], eax
lea eax, [ebp - 0x85ac]
push eax
lea eax, [ebp - 0x85a4]
mov dword [ebp - 0x85a4], ecx
push eax
lea eax, [ebp - 0x8138]
push eax
call fcn.00410ef0
add esp, 0xc
lea ecx, [ebp - 0x8418]
call fcn.00404ac0
push 0
push str.ExeCommandLine
lea eax, [ebp - 0x8168]
push str.SteamClient
push eax
call fcn.0040a1b0
push 0
push str.AppId
lea eax, [ebp - 0x8060]
push str.SteamClient
push eax
call fcn.0040a1b0
push 0
push str.ForceInjectSteamClient
lea eax, [ebp - 0x8258]
push str.Injection
push eax
call fcn.0040a1b0
push 0
push str.ForceInjectGameOverlayRenderer
lea eax, [ebp - 0x8240]
push str.Injection
push eax
call fcn.0040a1b0
add esp, 0x40
call fcn.0040ff50
mov ecx, eax
cmp dword [eax + 0x14], 7
jbe 0x40df7c
mov ecx, dword [eax]
mov eax, dword [eax + 0x10]
push 0
push str.DllsToInjectFolder
mov dword [ebp - 0x8580], eax
lea eax, [ebp - 0x8430]
push str.Injection
push eax
mov dword [ebp - 0x8584], ecx
call fcn.0040a1b0
add esp, 0x10
mov ecx, eax
cmp dword [eax + 0x14], 7
jbe 0x40dfb0
mov ecx, dword [eax]
mov eax, dword [eax + 0x10]
push ebx
mov dword [ebp - 0x8578], eax
lea eax, [ebp - 0x8584]
push edi
push eax
lea eax, [ebp - 0x857c]
mov dword [ebp - 0x857c], ecx
push eax
lea eax, [ebp - 0x8180]
push eax
call fcn.00410ef0
add esp, 0xc
lea ecx, [ebp - 0x8430]
call fcn.00404ac0
push 0x4329a8
push str.IgnoreInjectionError
lea eax, [ebp - 0x8228]
push str.Injection
push eax
call fcn.0040a1b0
push 0x4331cc
push 0x4331d0
lea eax, [ebp - 0x8210]
push str.Injection
push eax
call fcn.0040a1b0
push 0x4331cc
push str.Mode
lea eax, [ebp - 0x8090]
push str.Persistence
push eax
call fcn.0040a1b0
push 0
push str.ResumeByDebugger
lea eax, [ebp - 0x81f8]
push str.Debug
push eax
call fcn.0040a1b0
add esp, 0x40
lea eax, [ebp - 0x8258]
push eax
call fcn.0040c910
lea eax, [ebp - 0x8240]
push eax
call fcn.0040c910
lea eax, [ebp - 0x8228]
push eax
call fcn.0040c910
lea eax, [ebp - 0x8210]
push eax
call fcn.0040c910
lea eax, [ebp - 0x81f8]
push eax
call fcn.0040c910
mov edi, dword [ebp - 0x807c]
lea eax, [ebp - 0x8090]
mov ebx, dword [ebp - 0x8090]
add esp, 0x14
mov esi, dword [ebp - 0x8080]
cmp edi, 7
cmova eax, ebx
cmp esi, 1
jne 0x40e0ca
push esi
push 0x4331cc
push eax
call fcn.00409440
add esp, 0xc
test eax, eax
je 0x40e11e
lea eax, [ebp - 0x8090]
push 0x4329a8
push eax
call fcn.00401470
add esp, 8
test al, al
je 0x40e11e
lea eax, [ebp - 0x8090]
push 0x43325c
push eax
call fcn.00401470
add esp, 8
test al, al
je 0x40e11e
push 1
push 0x4331cc
lea ecx, [ebp - 0x8090]
call fcn.00407920
mov edi, dword [ebp - 0x807c]
mov esi, dword [ebp - 0x8080]
mov ebx, dword [ebp - 0x8090]
mov ecx, dword [ebp - 0x8110]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x12
jb 0x40fe8f
cmp dword [ebp - 0x810c], 7
lea eax, [ebp - 0x8120]
push ecx
cmova eax, dword [ebp - 0x8120]
lea ecx, [ebp - 0x81c8]
push eax
push 0x12
push 0x433260
lea eax, [ebp - 0x8120]
push eax
push dword [ebp - 0x8554]
call fcn.00403ce0
lea eax, [ebp - 0x81c8]
push eax
call fcn.00406a80
add esp, 4
lea ecx, [ebp - 0x81c8]
call fcn.00404ac0
mov ecx, dword [ebp - 0x8128]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x18
jb 0x40fe94
cmp dword [ebp - 0x8124], 7
lea eax, [ebp - 0x8138]
push ecx
cmova eax, dword [ebp - 0x8138]
lea ecx, [ebp - 0x8310]
push eax
push 0x18
push str.SteamClient::ExeRunDir:
lea eax, [ebp - 0x8138]
push eax
push dword [ebp - 0x8554]
call fcn.00403ce0
lea eax, [ebp - 0x8310]
push eax
call fcn.00406a80
add esp, 4
lea ecx, [ebp - 0x8310]
call fcn.00404ac0
mov ecx, dword [ebp - 0x8158]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x1d
jb 0x40fe99
cmp dword [ebp - 0x8154], 7
lea eax, [ebp - 0x8168]
push ecx
cmova eax, dword [ebp - 0x8168]
lea ecx, [ebp - 0x8328]
push eax
push 0x1d
push str.SteamClient::ExeCommandLine:
lea eax, [ebp - 0x8168]
push eax
push dword [ebp - 0x8554]
call fcn.00403ce0
lea eax, [ebp - 0x8328]
push eax
call fcn.00406a80
add esp, 4
lea ecx, [ebp - 0x8328]
call fcn.00404ac0
mov ecx, dword [ebp - 0x8050]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x14
jb 0x40fe9e
cmp dword [ebp - 0x804c], 7
lea eax, [ebp - 0x8060]
push ecx
cmova eax, dword [ebp - 0x8060]
lea ecx, [ebp - 0x8340]
push eax
push 0x14
push str.SteamClient::AppId:
lea eax, [ebp - 0x8060]
push eax
push dword [ebp - 0x8554]
call fcn.00403ce0
lea eax, [ebp - 0x8340]
push eax
call fcn.00406a80
add esp, 4
lea ecx, [ebp - 0x8340]
call fcn.00404ac0
mov ecx, dword [0x440020]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x1a
jb 0x40fea3
cmp dword [0x440024], 7
mov eax, 0x440010
push ecx
cmova eax, dword [0x440010]
lea ecx, [ebp - 0x8358]
push eax
push 0x1a
push str.SteamClient::SteamClient:
push 0x440010
push dword [ebp - 0x8554]
call fcn.00403ce0
lea eax, [ebp - 0x8358]
push eax
call fcn.00406a80
add esp, 4
lea ecx, [ebp - 0x8358]
call fcn.00404ac0
mov ecx, dword [0x440038]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x1f
jb 0x40fea8
cmp dword [0x44003c], 7
mov eax, 0x440028
push ecx
cmova eax, dword [0x440028]
lea ecx, [ebp - 0x8370]
push eax
push 0x1f
push str.SteamClient::SteamClient64Dll:
push 0x440028
push dword [ebp - 0x8554]
call fcn.00403ce0
lea eax, [ebp - 0x8370]
push eax
call fcn.00406a80
add esp, 4
lea ecx, [ebp - 0x8370]
call fcn.00404ac0
mov eax, 0x7ffffffe
sub eax, esi
cmp eax, 0x1d
jb 0x40fead
push esi
cmp edi, 7
lea eax, [ebp - 0x8090]
lea ecx, [ebp - 0x83a0]
cmova eax, ebx
push eax
push 0x1d
push str.SteamClient::PersistentMode:
lea eax, [ebp - 0x8090]
push eax
push dword [ebp - 0x8554]
call fcn.00403ce0
lea eax, [ebp - 0x83a0]
push eax
call fcn.00406a80
add esp, 4
lea ecx, [ebp - 0x83a0]
call fcn.00404ac0
mov ecx, dword [ebp - 0x8248]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x25
jb 0x40feb2
cmp dword [ebp - 0x8244], 7
lea eax, [ebp - 0x8258]
push ecx
cmova eax, dword [ebp - 0x8258]
lea ecx, [ebp - 0x8298]
push eax
push 0x25
push str.SteamClient::ForceInjectSteamClient:
lea eax, [ebp - 0x8258]
push eax
push dword [ebp - 0x8554]
call fcn.00403ce0
lea eax, [ebp - 0x8298]
push eax
call fcn.00406a80
add esp, 4
lea ecx, [ebp - 0x8298]
call fcn.00404ac0
mov ecx, dword [ebp - 0x8230]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x2d
jb 0x40feb7
cmp dword [ebp - 0x822c], 7
lea eax, [ebp - 0x8240]
push ecx
cmova eax, dword [ebp - 0x8240]
lea ecx, [ebp - 0x82b0]
push eax
push 0x2d
push str.SteamClient::ForceInjectGameOverlayRenderer:
lea eax, [ebp - 0x8240]
push eax
push dword [ebp - 0x8554]
call fcn.00403ce0
lea eax, [ebp - 0x82b0]
push eax
call fcn.00406a80
add esp, 4
lea ecx, [ebp - 0x82b0]
call fcn.00404ac0
mov ecx, dword [ebp - 0x8170]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x1f
jb 0x40febc
cmp dword [ebp - 0x816c], 7
lea eax, [ebp - 0x8180]
push ecx
cmova eax, dword [ebp - 0x8180]
lea ecx, [ebp - 0x82c8]
push eax
push 0x1f
push str.Injection::DllsToInjectFolder:
lea eax, [ebp - 0x8180]
push eax
push dword [ebp - 0x8554]
call fcn.00403ce0
lea eax, [ebp - 0x82c8]
push eax
call fcn.00406a80
add esp, 4
lea ecx, [ebp - 0x82c8]
call fcn.00404ac0
mov ecx, dword [ebp - 0x8218]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x21
jb 0x40fec1
cmp dword [ebp - 0x8214], 7
lea eax, [ebp - 0x8228]
push ecx
cmova eax, dword [ebp - 0x8228]
lea ecx, [ebp - 0x82e0]
push eax
push 0x21
push str.Injection::IgnoreInjectionError:
lea eax, [ebp - 0x8228]
push eax
push dword [ebp - 0x8554]
call fcn.00403ce0
lea eax, [ebp - 0x82e0]
push eax
call fcn.00406a80
add esp, 4
lea ecx, [ebp - 0x82e0]
call fcn.00404ac0
mov ecx, dword [ebp - 0x8200]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x27
jb 0x40fec6
cmp dword [ebp - 0x81fc], 7
lea eax, [ebp - 0x8210]
push ecx
cmova eax, dword [ebp - 0x8210]
lea ecx, [ebp - 0x82f8]
push eax
push 0x27
push str.Injection::IgnoreLoaderArchDifference:
lea eax, [ebp - 0x8210]
push eax
push dword [ebp - 0x8554]
call fcn.00403ce0
lea eax, [ebp - 0x82f8]
push eax
call fcn.00406a80
add esp, 4
lea ecx, [ebp - 0x82f8]
call fcn.00404ac0
mov ecx, dword [ebp - 0x81e8]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x19
jb 0x40fecb
cmp dword [ebp - 0x81e4], 7
lea eax, [ebp - 0x81f8]
push ecx
cmova eax, dword [ebp - 0x81f8]
lea ecx, [ebp - 0x8388]
push eax
push 0x19
push str.Debug::ResumeByDebugger:
lea eax, [ebp - 0x81f8]
push eax
push dword [ebp - 0x8554]
call fcn.00403ce0
lea eax, [ebp - 0x8388]
push eax
call fcn.00406a80
add esp, 4
lea ecx, [ebp - 0x8388]
call fcn.00404ac0
push 0x440028
call fcn.00410cf0
add esp, 4
test al, al
jne 0x40e65a
push str.Couldnt_find_the_requested_SteamClient64Dll
call fcn.00406a80
add esp, 4
push 0x10
push 0x433020
push str.Couldnt_find_the_requested_SteamClient64Dll.
jmp 0x40e780
push 0x440010
call fcn.00410cf0
add esp, 4
test al, al
jne 0x40e689
push str.Couldnt_find_the_requested_SteamClientDll
call fcn.00406a80
add esp, 4
push 0x10
push 0x433020
push str.Couldnt_find_the_requested_SteamClientDll.
jmp 0x40e780
lea eax, [ebp - 0x8120]
push eax
call fcn.00410cf0
add esp, 4
test al, al
jne 0x40e6ba
push str.Couldnt_find_the_requested_Exe_file
call fcn.00406a80
add esp, 4
push 0x10
push 0x433020
push str.Couldnt_find_the_requested_Exe_file.
jmp 0x40e780
cmp dword [ebp - 0x8128], 0
jne 0x40e754
push 0
lea eax, [ebp - 0x8120]
push eax
lea ecx, [ebp - 0x8460]
call fcn.004013e0
lea ecx, [ebp - 0x8448]
push ecx
mov ecx, eax
call fcn.0040b1a0
push eax
lea ecx, [ebp - 0x81b0]
call fcn.00403980
lea eax, [ebp - 0x81b0]
push eax
lea ecx, [ebp - 0x8138]
call fcn.004050b0
lea ecx, [ebp - 0x81b0]
call fcn.00404ac0
lea ecx, [ebp - 0x8448]
call fcn.00404ac0
lea ecx, [ebp - 0x8460]
call fcn.00404ac0
lea eax, [ebp - 0x8138]
push eax
lea eax, [ebp - 0x8478]
push str.Setting_ExeRunDir_to:
push eax
call fcn.00401680
push eax
call fcn.00406a80
add esp, 0x10
lea ecx, [ebp - 0x8478]
call fcn.00404ac0
lea eax, [ebp - 0x8138]
push eax
call fcn.00410b90
add esp, 4
test al, al
jne 0x40e797
push str.Couldnt_find_the_requested_Exe_run_dir
call fcn.00406a80
add esp, 4
push 0x10
push 0x433020
push str.Couldnt_find_the_requested_Exe_run_dir.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00406a80
mov esi, 1
jmp 0x40fdfc
mov edi, dword [sym.imp.USER32.dll_MessageBoxA]
xor bh, bh
cmp dword [ebp - 0x8170], 0
je 0x40e7da
lea eax, [ebp - 0x8180]
push eax
call fcn.00410b90
mov bh, al
add esp, 4
test bh, bh
jne 0x40e7da
push str.Couldnt_find_the_requested_folder_of_dlls_to_inject
call fcn.00406a80
add esp, 4
push 0x10
push 0x433020
push str.Couldnt_find_the_requested_folder_of_dlls_to_inject.
push 0
call edi
lea eax, [ebp - 0x8120]
push eax
lea eax, [ebp - 0x85e0]
push eax
call fcn.0040a3a0
mov esi, dword [ebp - 0x85e0]
add esp, 8
cmp esi, dword [ebp - 0x85dc]
jne 0x40e82a
push str.Couldnt_read_the_exe_header
call fcn.00406a80
add esp, 4
push 0x10
push 0x433020
push str.Couldnt_read_the_exe_header.
push 0
call edi
call fcn.00406a80
mov esi, 1
jmp 0x40fdf1
push esi
call fcn.004105b0
mov bl, al
push esi
mov byte [ebp - 0x855c], bl
call fcn.004105f0
add esp, 8
test bl, bl
jne 0x40e9f4
test al, al
je 0x40e9fc
mov ecx, str.Detected_exe_arch:_x32
test bl, bl
mov eax, str.Detected_exe_arch:_x64
cmovne eax, ecx
push eax
call fcn.00406a80
cmp byte [0x4512b0], 0
mov ecx, str.Detected_loader_arch:_x64
mov eax, str.Detected_loader_arch:_x32
cmove eax, ecx
push eax
call fcn.00406a80
add esp, 8
cmp byte [0x4512b0], bl
je 0x40e8b1
push str.Arch_of_loader_and_requested_exe_are_different__it_is_advised_to_use_the_appropriate_one
call fcn.00406a80
add esp, 4
cmp dword [ebp - 0x8200], 0
jne 0x40e8b1
push 0
push 0x433020
push str.Arch_of_loader_and_requested_exe_are_different__nit_is_advised_to_use_the_appropriate_one.
push 0
call edi
mov eax, dword [ebp - 0x8218]
mov dword [ebp - 0x8568], eax
test bh, bh
je 0x40ea85
xor eax, eax
mov dword [ebp - 0x8038], 0
xorps xmm0, xmm0
mov dword [ebp - 0x8034], 7
movups xmmword [ebp - 0x8048], xmm0
mov word [ebp - 0x8048], ax
lea eax, [ebp - 0x8048]
push eax
push dword [ebp - 0x855c]
lea eax, [ebp - 0x8180]
push eax
lea eax, [ebp - 0x8264]
push eax
call fcn.004081f0
mov esi, eax
add esp, 0x10
cmp esi, 0x4512a4
je 0x40e950
mov ecx, 0x4512a4
call fcn.004074a0
mov ecx, dword [esi]
mov dword [0x4512a4], ecx
mov ecx, dword [esi + 4]
mov dword [0x4512a8], ecx
mov eax, dword [esi + 8]
mov dword [0x4512ac], eax
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
lea ecx, [ebp - 0x8264]
call fcn.004074a0
cmp dword [ebp - 0x8038], 0
je 0x40ea28
cmp dword [ebp - 0x8568], 0
jne 0x40ea28
push str._nContinue__
lea eax, [ebp - 0x8048]
push eax
lea eax, [ebp - 0x84a8]
push str.The_following_dlls_cannot_be_injected:_n
push eax
call fcn.00401680
add esp, 0xc
push eax
lea eax, [ebp - 0x8490]
push eax
call fcn.004015a0
add esp, 0xc
cmp dword [eax + 0x14], 7
jbe 0x40e9ad
mov eax, dword [eax]
push 4
push str.ColdClientLoader
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x8490]
mov esi, eax
call fcn.00404ac0
lea ecx, [ebp - 0x84a8]
call fcn.00404ac0
cmp esi, 6
je 0x40ea28
call fcn.00406a80
lea ecx, [ebp - 0x8048]
call fcn.00404ac0
mov esi, 1
jmp 0x40fdf1
test al, al
je 0x40e851
push str.The_requested_exe_is_invalid__neither_32_nor_64_bit_
call fcn.00406a80
add esp, 4
push 0x10
push 0x433020
push str.The_requested_exe_is_invalid__neither_32_nor_64_bit_
push 0
call edi
call fcn.00406a80
mov esi, 1
jmp 0x40fdf1
mov ecx, dword [ebp - 0x8034]
cmp ecx, 7
jbe 0x40ea68
mov edx, dword [ebp - 0x8048]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40ea5e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fed0
push ecx
push edx
call fcn.00412f1e
add esp, 8
xor eax, eax
mov dword [ebp - 0x8038], 0
mov dword [ebp - 0x8034], 7
mov word [ebp - 0x8048], ax
cmp dword [ebp - 0x8230], 0
je 0x40edac
xorps xmm0, xmm0
test bl, bl
je 0x40ec29
cmp dword [0x440024], 7
lea ecx, [ebp - 0x8108]
push dword [0x440020]
mov eax, 0x440010
mov dword [ebp - 0x80f8], 0
cmova eax, dword [0x440010]
push eax
movups xmmword [ebp - 0x8108], xmm0
mov dword [ebp - 0x80f4], 0
call fcn.00401910
lea eax, [ebp - 0x8550]
push eax
lea ecx, [ebp - 0x8108]
call fcn.0040b1a0
push eax
lea ecx, [ebp - 0x8150]
call fcn.00403980
cmp dword [ebp - 0x813c], 7
lea eax, [ebp - 0x8150]
mov dword [ebp - 0x8574], str.GameOverlayRenderer.dll
cmova eax, dword [ebp - 0x8150]
mov dword [ebp - 0x8560], eax
mov eax, dword [ebp - 0x8140]
mov dword [ebp - 0x855c], eax
lea eax, [ebp - 0x8560]
push eax
lea eax, [ebp - 0x8574]
mov dword [ebp - 0x8570], 0x17
push eax
lea eax, [ebp - 0x8078]
push eax
call fcn.00410ef0
add esp, 0xc
lea ecx, [ebp - 0x8150]
call fcn.00404ac0
lea ecx, [ebp - 0x8550]
call fcn.00404ac0
mov ecx, dword [ebp - 0x80f4]
cmp ecx, 7
jbe 0x40eba8
mov edx, dword [ebp - 0x8108]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40eb9e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fed5
push ecx
push edx
call fcn.00412f1e
add esp, 8
xor eax, eax
mov dword [ebp - 0x80f8], 0
mov word [ebp - 0x8108], ax
lea eax, [ebp - 0x8078]
push eax
mov dword [ebp - 0x80f4], 7
call fcn.00410cf0
add esp, 4
test al, al
jne 0x40ec00
push str.Couldnt_find_GameOverlayRenderer.dll
call fcn.00406a80
add esp, 4
push 0x10
push 0x433020
push str.Couldnt_find_GameOverlayRenderer.dll.
push 0
call edi
lea ecx, [ebp - 0x8078]
jmp 0x40eda7
lea eax, [ebp - 0x8078]
mov ecx, 0x4512a4
push eax
push dword [0x4512a4]
lea eax, [ebp - 0x8554]
push eax
call fcn.0040a980
lea ecx, [ebp - 0x8078]
jmp 0x40eda7
cmp dword [0x44003c], 7
lea ecx, [ebp - 0x80f0]
push dword [0x440038]
mov eax, 0x440028
mov dword [ebp - 0x80e0], 0
cmova eax, dword [0x440028]
push eax
movups xmmword [ebp - 0x80f0], xmm0
mov dword [ebp - 0x80dc], 0
call fcn.00401910
lea eax, [ebp - 0x84c0]
push eax
lea ecx, [ebp - 0x80f0]
call fcn.0040b1a0
push eax
lea ecx, [ebp - 0x80a8]
call fcn.00403980
cmp dword [ebp - 0x8094], 7
lea eax, [ebp - 0x80a8]
mov dword [ebp - 0x8560], str.GameOverlayRenderer64.dll
cmova eax, dword [ebp - 0x80a8]
mov dword [ebp - 0x8574], eax
mov eax, dword [ebp - 0x8098]
mov dword [ebp - 0x8570], eax
lea eax, [ebp - 0x8574]
push eax
lea eax, [ebp - 0x8560]
mov dword [ebp - 0x855c], 0x19
push eax
lea eax, [ebp - 0x8198]
push eax
call fcn.00410ef0
add esp, 0xc
lea ecx, [ebp - 0x80a8]
call fcn.00404ac0
lea ecx, [ebp - 0x84c0]
call fcn.00404ac0
mov ecx, dword [ebp - 0x80dc]
cmp ecx, 7
jbe 0x40ed34
mov edx, dword [ebp - 0x80f0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40ed2a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40feda
push ecx
push edx
call fcn.00412f1e
add esp, 8
xor eax, eax
mov dword [ebp - 0x80e0], 0
mov word [ebp - 0x80f0], ax
lea eax, [ebp - 0x8198]
push eax
mov dword [ebp - 0x80dc], 7
call fcn.00410cf0
add esp, 4
test al, al
jne 0x40ed83
push str.Couldnt_find_GameOverlayRenderer64.dll
call fcn.00406a80
add esp, 4
push 0x10
push 0x433020
push str.Couldnt_find_GameOverlayRenderer64.dll.
push 0
call edi
jmp 0x40eda1
lea eax, [ebp - 0x8198]
mov ecx, 0x4512a4
push eax
push dword [0x4512a4]
lea eax, [ebp - 0x8554]
push eax
call fcn.0040a980
lea ecx, [ebp - 0x8198]
call fcn.00404ac0
cmp dword [ebp - 0x8248], 0
je 0x40eddc
lea eax, [ebp - 0x856c]
mov ecx, 0x4512a4
test bl, bl
je 0x40edcb
push 0x440010
jmp 0x40edd0
push 0x440028
push dword [0x4512a4]
push eax
call fcn.0040a980
lea eax, [ebp - 0x8090]
push 0x43325c
push eax
call fcn.00401470
add esp, 8
test al, al
je 0x40ee58
cmp dword [ebp - 0x8050], 0
je 0x40ee31
cmp dword [ebp - 0x804c], 7
lea eax, [ebp - 0x8060]
cmova eax, dword [ebp - 0x8060]
cmp word [eax], 0
je 0x40ee31
lea eax, [ebp - 0x8060]
push eax
call fcn.0040c620
mov ebx, dword [ebp - 0x8558]
add esp, 4
jmp 0x40f08d
push str.You_forgot_to_set_the_AppId
call fcn.00406a80
add esp, 4
push 0x10
push 0x433020
push str.You_forgot_to_set_the_AppId.
push 0
call edi
mov esi, 1
jmp 0x40fdf1
lea ecx, [ebp - 0x8060]
call fcn.00407f50
mov ebx, dword [ebp - 0x8558]
test ebx, ebx
je 0x40ee9b
cmp word [ebx], 0
je 0x40ee9b
push ebx
lea ecx, [ebp - 0x84d8]
call fcn.00403a80
push eax
lea ecx, [ebp - 0x80c0]
call fcn.00403930
lea ecx, [ebp - 0x84d8]
call fcn.00404ac0
jmp 0x40ef31
xorps xmm0, xmm0
mov dword [ebp - 0x80c8], 0
xor eax, eax
mov dword [ebp - 0x80c4], 7
movups xmmword [ebp - 0x80d8], xmm0
mov word [ebp - 0x80d8], ax
lea ecx, [ebp - 0x80c0]
lea eax, [ebp - 0x80d8]
push eax
call fcn.00403930
mov ecx, dword [ebp - 0x80c4]
cmp ecx, 7
jbe 0x40ef14
mov edx, dword [ebp - 0x80d8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40ef0a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fedf
push ecx
push edx
call fcn.00412f1e
add esp, 8
xor eax, eax
mov dword [ebp - 0x80c8], 0
mov dword [ebp - 0x80c4], 7
mov word [ebp - 0x80d8], ax
push 0x433b04
lea eax, [ebp - 0x80c0]
push eax
lea eax, [ebp - 0x8508]
push 0x433b08
push eax
call fcn.00401680
add esp, 0xc
push eax
lea eax, [ebp - 0x84f0]
push eax
call fcn.004015a0
push eax
call fcn.00406a80
add esp, 0x10
lea ecx, [ebp - 0x84f0]
call fcn.00404ac0
lea ecx, [ebp - 0x8508]
call fcn.00404ac0
push 0
push str.steam:__run_
lea ecx, [ebp - 0x80c0]
call fcn.00409da0
lea ecx, [ebp - 0x80c0]
push 0
test eax, eax
jne 0x40efd8
push 0x433b74
call fcn.00409e80
push eax
push 0xd
lea eax, [ebp - 0x8520]
push eax
lea ecx, [ebp - 0x80c0]
call fcn.0040c830
push eax
lea ecx, [ebp - 0x8060]
call fcn.004050b0
lea ecx, [ebp - 0x8520]
call fcn.00404ac0
mov eax, str.persistent_mode_2_got_steam_launch_cmd_1
jmp 0x40f029
push str.____steam:__rungameid_
call fcn.00409da0
test eax, eax
jne 0x40f024
push eax
push 0x433b74
lea ecx, [ebp - 0x80c0]
call fcn.00409e80
push eax
push 0x17
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x80c0]
call fcn.0040c830
push eax
lea ecx, [ebp - 0x8060]
call fcn.004050b0
lea ecx, [ebp - 0x20]
call fcn.00404ac0
mov eax, str.persistent_mode_2_got_steam_launch_cmd_2
jmp 0x40f029
mov eax, str.persistent_mode_2_didnt_detect_a_valid_steam_launch_cmd
push eax
call fcn.00406a80
add esp, 4
cmp dword [ebp - 0x8050], 0
je 0x40f075
lea eax, [ebp - 0x8060]
push eax
call fcn.0040c620
lea eax, [ebp - 0x8060]
push eax
lea eax, [ebp - 0x8280]
push str.persistent_mode_2_will_use_app_id_
push eax
call fcn.00401680
push eax
call fcn.00406a80
add esp, 0x14
lea ecx, [ebp - 0x8280]
call fcn.00404ac0
jmp 0x40f082
push str.persistent_mode_2_didnt_find_app_id
call fcn.00406a80
add esp, 4
lea ecx, [ebp - 0x80c0]
call fcn.00404ac0
call fcn.0040b660
test al, al
jne 0x40f0b5
call fcn.00406a80
push 0x10
push 0x433020
push str.Unable_to_patch_Registry__HKCU_.
push 0
call edi
mov esi, 1
jmp 0x40fdf1
call fcn.0040b8e0
test al, al
jne 0x40f0e2
call fcn.00407c20
call fcn.00406a80
push 0x10
push 0x433020
push str.Unable_to_patch_Registry__HKLM_.
push 0
call edi
mov esi, 1
jmp 0x40fdf1
call fcn.0040b250
lea eax, [ebp - 0x8090]
push 0x43325c
push eax
call fcn.00401470
add esp, 8
test al, al
jne 0x40f10c
cmp dword [ebp - 0x8050], 0
je 0x40fd63
push 0x44
lea eax, [ebp - 0x8624]
push 0
push eax
call fcn.00414c80
add esp, 0xc
lea eax, [ebp - 0x8624]
mov ecx, 0x44
nop word [eax + eax]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40f130
xorps xmm0, xmm0
mov dword [ebp - 0x8624], 0x44
movups xmmword [ebp - 0x8594], xmm0
mov ecx, 0x10
lea eax, [ebp - 0x8594]
nop word [eax + eax]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x40f160
push str.spawning_the_requested_EXE_file
call fcn.00406a80
push 0x8000
lea eax, [ebp - 0x8030]
push 0
push eax
call fcn.00414c80
cmp dword [ebp - 0x8154], 7
lea ecx, [ebp - 0x8168]
push ebx
cmova ecx, dword [ebp - 0x8168]
lea eax, [ebp - 0x8120]
cmp dword [ebp - 0x810c], 7
push ecx
cmova eax, dword [ebp - 0x8120]
push eax
push str.__ls___ls__ls
lea eax, [ebp - 0x8030]
push 0x4000
push eax
call fcn.0040db70
add esp, 0x28
lea edx, [ebp - 0x8594]
cmp dword [ebp - 0x8124], 7
lea eax, [ebp - 0x8138]
lea ecx, [ebp - 0x8120]
cmova eax, dword [ebp - 0x8138]
cmp dword [ebp - 0x810c], 7
push edx
cmova ecx, dword [ebp - 0x8120]
lea edx, [ebp - 0x8624]
push edx
push eax
push 0
push 4
push 1
push 0
push 0
lea eax, [ebp - 0x8030]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x40f25a
push str.Unable_to_load_the_requested_EXE_file
call fcn.00406a80
add esp, 4
call fcn.00407c20
call fcn.00407dc0
call fcn.00407a70
call fcn.00406a80
push 0x10
push 0x433020
push str.Unable_to_load_the_requested_EXE_file.
push 0
call edi
mov esi, 1
jmp 0x40fdf1
mov ecx, dword [0x4512a8]
mov eax, 0x2aaaaaab
sub ecx, dword [0x4512a4]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
lea eax, [ebp - 0x8033]
push eax
call fcn.004026c0
add esp, 8
lea ecx, [ebp - 0x8561]
push ecx
lea ecx, [ebp - 0x8033]
push ecx
push eax
lea ecx, [ebp - 0x81b0]
call fcn.00401200
push str._dlls
lea eax, [ebp - 0x81b0]
push eax
lea eax, [ebp - 0x20]
push str.injecting
push eax
call fcn.00401530
add esp, 0xc
push eax
lea eax, [ebp - 0x8280]
push eax
call fcn.004014c0
push eax
call fcn.00406a80
add esp, 0x10
lea ecx, [ebp - 0x8280]
call fcn.00404a70
lea ecx, [ebp - 0x20]
call fcn.00404a70
lea ecx, [ebp - 0x81b0]
call fcn.00404a70
mov eax, dword [0x4512a8]
mov esi, dword [0x4512a4]
mov dword [ebp - 0x855c], eax
cmp esi, eax
je 0x40f9c6
nop dword [eax + eax]
mov ecx, dword [esi + 0x10]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x10
jb 0x40fe8a
cmp dword [esi + 0x14], 7
mov eax, esi
jbe 0x40f32d
mov eax, dword [esi]
push ecx
push eax
push 0x10
push str.Injecting_dll:_
push esi
push dword [ebp - 0x8554]
lea ecx, [ebp - 0x8078]
call fcn.00403ce0
push str._...
lea eax, [ebp - 0x8078]
push eax
lea eax, [ebp - 0x80a8]
push eax
call fcn.004015a0
push eax
call fcn.00406a80
mov ecx, dword [ebp - 0x8094]
add esp, 0x10
cmp ecx, 7
jbe 0x40f3a9
mov edx, dword [ebp - 0x80a8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f39f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fed0
push ecx
push edx
call fcn.00412f1e
add esp, 8
mov ecx, dword [ebp - 0x8064]
xor eax, eax
mov dword [ebp - 0x8098], 0
mov dword [ebp - 0x8094], 7
mov word [ebp - 0x80a8], ax
cmp ecx, 7
jbe 0x40f406
mov edx, dword [ebp - 0x8078]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f3fc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fed0
push ecx
push edx
call fcn.00412f1e
add esp, 8
lea eax, [ebp - 0x8558]
mov dword [ebp - 0x8558], 0
push eax
push esi
push dword [ebp - 0x8594]
call fcn.00410630
mov edi, eax
add esp, 0xc
test edi, edi
je 0x40f9a4
lea eax, [ebp - 6]
push edi
push eax
call fcn.00402700
add esp, 8
lea ecx, [ebp - 0x8561]
push ecx
lea ecx, [ebp - 6]
push ecx
push eax
lea ecx, [ebp - 0x81b0]
call fcn.004012c0
lea eax, [ebp - 0x8280]
push edi
push eax
call fcn.00410400
add esp, 8
mov ecx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x40f46e
mov ecx, dword [eax]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x8570], eax
lea eax, [ebp - 0x8574]
push eax
lea eax, [ebp - 0x8078]
mov dword [ebp - 0x8574], ecx
push eax
call fcn.00410de0
mov ecx, dword [ebp - 0x8558]
add esp, 8
mov ebx, eax
mov dword [ebp - 0x857c], ecx
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40f4a4
lea eax, [ebp - 0x857c]
sub ecx, edx
push eax
lea eax, [ebp - 0x8198]
mov dword [ebp - 0x8578], ecx
push eax
call fcn.00410de0
mov edx, dword [esi + 0x10]
mov ecx, 0x7ffffffe
sub ecx, edx
add esp, 8
mov edi, eax
cmp ecx, 0x1a
jb 0x40fe8a
cmp dword [esi + 0x14], 7
mov ecx, esi
jbe 0x40f4e8
mov ecx, dword [esi]
push edx
push ecx
push 0x1a
push str.Failed_to_inject_the_dll:
push esi
push dword [ebp - 0x8554]
lea ecx, [ebp - 0x8108]
call fcn.00403ce0
push 0x4327dc
lea eax, [ebp - 0x8108]
push eax
lea eax, [ebp - 0x81e0]
push eax
call fcn.004015a0
add esp, 0xc
lea ecx, [ebp - 0x80f0]
push edi
push eax
push dword [ebp - 0x8554]
call fcn.00403ad0
push 0x4327dc
lea eax, [ebp - 0x80f0]
push eax
lea eax, [ebp - 0x81c8]
push eax
call fcn.004015a0
add esp, 0xc
lea ecx, [ebp - 0x80d8]
push ebx
push eax
push dword [ebp - 0x8554]
call fcn.00403ad0
push str.Error_code_
push 0x4327dc
lea eax, [ebp - 0x80d8]
push eax
lea eax, [ebp - 0x8150]
push eax
call fcn.004015a0
add esp, 0xc
push eax
lea eax, [ebp - 0x80a8]
push eax
call fcn.004015a0
add esp, 0xc
lea ecx, [ebp - 0x81b0]
push ecx
push eax
push dword [ebp - 0x8554]
lea ecx, [ebp - 0x80c0]
call fcn.00403ad0
push 0x4327dc
lea eax, [ebp - 0x80c0]
push eax
lea eax, [ebp - 0x8048]
push eax
call fcn.004015a0
mov ecx, dword [ebp - 0x80ac]
add esp, 0xc
cmp ecx, 7
jbe 0x40f603
mov edx, dword [ebp - 0x80c0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f5f9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fed0
push ecx
push edx
call fcn.00412f1e
add esp, 8
mov ecx, dword [ebp - 0x8094]
xor eax, eax
mov dword [ebp - 0x80b0], 0
mov dword [ebp - 0x80ac], 7
mov word [ebp - 0x80c0], ax
cmp ecx, 7
jbe 0x40f660
mov edx, dword [ebp - 0x80a8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f656
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fed0
push ecx
push edx
call fcn.00412f1e
add esp, 8
mov ecx, dword [ebp - 0x813c]
xor eax, eax
mov dword [ebp - 0x8098], 0
mov dword [ebp - 0x8094], 7
mov word [ebp - 0x80a8], ax
cmp ecx, 7
jbe 0x40f6bd
mov edx, dword [ebp - 0x8150]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f6b3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fed0
push ecx
push edx
call fcn.00412f1e
add esp, 8
mov ecx, dword [ebp - 0x80c4]
xor eax, eax
mov dword [ebp - 0x8140], 0
mov dword [ebp - 0x813c], 7
mov word [ebp - 0x8150], ax
cmp ecx, 7
jbe 0x40f71a
mov edx, dword [ebp - 0x80d8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f710
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fed0
push ecx
push edx
call fcn.00412f1e
add esp, 8
mov ecx, dword [ebp - 0x81b4]
xor eax, eax
mov dword [ebp - 0x80c8], 0
mov dword [ebp - 0x80c4], 7
mov word [ebp - 0x80d8], ax
cmp ecx, 7
jbe 0x40f777
mov edx, dword [ebp - 0x81c8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f76d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fed0
push ecx
push edx
call fcn.00412f1e
add esp, 8
mov ecx, dword [ebp - 0x80dc]
xor eax, eax
mov dword [ebp - 0x81b8], 0
mov dword [ebp - 0x81b4], 7
mov word [ebp - 0x81c8], ax
cmp ecx, 7
jbe 0x40f7d4
mov edx, dword [ebp - 0x80f0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f7ca
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fed0
push ecx
push edx
call fcn.00412f1e
add esp, 8
mov ecx, dword [ebp - 0x81cc]
xor eax, eax
mov dword [ebp - 0x80e0], 0
mov dword [ebp - 0x80dc], 7
mov word [ebp - 0x80f0], ax
cmp ecx, 7
jbe 0x40f831
mov edx, dword [ebp - 0x81e0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f827
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fed0
push ecx
push edx
call fcn.00412f1e
add esp, 8
mov ecx, dword [ebp - 0x80f4]
xor eax, eax
mov dword [ebp - 0x81d0], 0
mov dword [ebp - 0x81cc], 7
mov word [ebp - 0x81e0], ax
cmp ecx, 7
jbe 0x40f88e
mov edx, dword [ebp - 0x8108]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f884
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fed0
push ecx
push edx
call fcn.00412f1e
add esp, 8
mov ecx, dword [ebp - 0x8184]
xor eax, eax
mov dword [ebp - 0x80f8], 0
mov dword [ebp - 0x80f4], 7
mov word [ebp - 0x8108], ax
cmp ecx, 7
jbe 0x40f8eb
mov edx, dword [ebp - 0x8198]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f8e1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fed0
push ecx
push edx
call fcn.00412f1e
add esp, 8
mov ecx, dword [ebp - 0x8064]
xor eax, eax
mov dword [ebp - 0x8188], 0
mov dword [ebp - 0x8184], 7
mov word [ebp - 0x8198], ax
cmp ecx, 7
jbe 0x40f948
mov edx, dword [ebp - 0x8078]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40f93e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40fed0
push ecx
push edx
call fcn.00412f1e
add esp, 8
xor eax, eax
mov dword [ebp - 0x8068], 0
lea ecx, [ebp - 0x8280]
mov dword [ebp - 0x8064], 7
mov word [ebp - 0x8078], ax
call fcn.00404a70
lea ecx, [ebp - 0x81b0]
call fcn.00404ac0
lea eax, [ebp - 0x8048]
push eax
call fcn.00406a80
add esp, 4
cmp dword [ebp - 0x8568], 0
je 0x40fa46
lea ecx, [ebp - 0x8048]
call fcn.00404ac0
jmp 0x40f9b1
push str.Injected_
call fcn.00406a80
add esp, 4
add esi, 0x18
cmp esi, dword [ebp - 0x855c]
jne 0x40f310
mov edi, dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [ebp - 0x81e8], 0
jne 0x40fcb9
push str.resuming_the_main_thread_of_the_exe
call fcn.00406a80
lea eax, [ebp - 0x8090]
push 0x43325c
push eax
call fcn.00401420
add esp, 0xc
test al, al
je 0x40fca2
lea eax, [ebp - 0x8584]
push eax
call fcn.0040ad70
mov ecx, dword [ebp - 0x8580]
add esp, 4
cmp ecx, 0x7ffffffe
jg 0x40fab7
mov eax, dword [ebp - 0x8584]
jl 0x40fa2d
cmp eax, 0xd5fa0dff
jae 0x40fab7
add eax, 0x2a05f200
mov dword [ebp - 0x8568], eax
adc ecx, 1
mov dword [ebp - 0x8558], ecx
jmp 0x40fad0
push 1
push dword [ebp - 0x8594]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push dword [ebp - 0x8594]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x8590]
call esi
call fcn.00407c20
call fcn.00407dc0
call fcn.00407a70
call fcn.00406a80
cmp dword [ebp - 0x8034], 7
lea eax, [ebp - 0x8048]
push 0x10
cmova eax, dword [ebp - 0x8048]
push str.ColdClientLoader
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x8048]
call fcn.00404ac0
mov esi, 1
jmp 0x40fdf1
mov dword [ebp - 0x8568], 0xffffffff
mov dword [ebp - 0x8558], 0x7fffffff
nop dword [eax + eax]
call fcn.00411807
mov edi, eax
mov esi, edx
mov dword [ebp - 0x8554], edi
mov dword [ebp - 0x856c], esi
call fcn.004117f0
mov ebx, eax
mov eax, edx
mov dword [ebp - 0x855c], ebx
mov dword [ebp - 0x8598], eax
cmp edi, 0x989680
jne 0x40fb20
test esi, esi
jne 0x40fb20
mov ecx, 0x64
mul ecx
mov ebx, eax
mov eax, dword [ebp - 0x855c]
mul ecx
add ebx, edx
mov esi, eax
jmp 0x40fbe5
cmp edi, 0x16e3600
jne 0x40fb8a
test esi, esi
jne 0x40fb8a
push esi
push edi
push eax
push ebx
call fcn.00413190
push 0
push 0x16e3600
mov esi, edx
mov edi, eax
push esi
push edi
call fcn.00413320
sub ebx, eax
mov eax, dword [ebp - 0x8598]
push 0
push 0x3b9aca00
sbb eax, edx
push eax
push ebx
call fcn.00413320
push 0
push 0x16e3600
push edx
push eax
call fcn.00413190
mov dword [ebp - 0x855c], eax
mov ecx, 0x3b9aca00
mov eax, esi
mov ebx, edx
mov esi, dword [ebp - 0x855c]
mul ecx
mov ecx, eax
mov eax, edi
jmp 0x40fbd8
push ebx
push esi
push edi
push eax
push ebx
call fcn.00413240
mov esi, ebx
pop ebx
nop
push 0
push 0x3b9aca00
push esi
push ecx
mov ebx, eax
mov edi, edx
call fcn.00413320
push dword [ebp - 0x856c]
push dword [ebp - 0x8554]
push edx
push eax
call fcn.00413190
mov esi, eax
mov dword [ebp - 0x8554], edx
mov ecx, 0x3b9aca00
mov eax, edi
mul ecx
mov ecx, eax
mov eax, ebx
mov ebx, dword [ebp - 0x8554]
mov edx, 0x3b9aca00
mul edx
add ecx, edx
add esi, eax
adc ebx, ecx
mov dword [ebp - 0x855c], esi
cmp ebx, dword [ebp - 0x8558]
jg 0x40fca2
jl 0x40fc05
cmp esi, dword [ebp - 0x8568]
jae 0x40fca2
call fcn.004118c2
push 0
push 0x64
push edx
push eax
call fcn.00413320
mov ecx, dword [ebp - 0x8558]
mov esi, eax
mov eax, dword [ebp - 0x8568]
mov edi, edx
sub eax, dword [ebp - 0x855c]
mov dword [ebp - 0x8554], eax
sbb ecx, ebx
mov dword [ebp - 0x856c], ecx
mov edx, ecx
mov ecx, eax
call fcn.00413390
comisd xmm0, xmmword [0x433f78]
jbe 0x40fc5a
add esi, 0xad160000
adc edi, 0x311cd
jmp 0x40fc66
add esi, dword [ebp - 0x8554]
adc edi, dword [ebp - 0x856c]
push 0
push 0x3b9aca00
push edi
push esi
call fcn.00413190
mov dword [ebp - 0x8268], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x8264], edx
sub esi, eax
lea eax, [ebp - 0x8268]
push eax
mov dword [ebp - 0x8260], esi
call fcn.004118e9
add esp, 4
jmp 0x40fad0
push dword [ebp - 0x8590]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov edi, dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x40fd3f
push str._and_resume_its_main_thread
push dword [ebp - 0x858c]
lea eax, [ebp - 0x20]
push eax
call fcn.0040ca00
push eax
lea eax, [ebp - 0x8280]
push str.Attach_a_debugger_now_to_PID
push eax
call fcn.00401530
add esp, 0x14
push eax
lea eax, [ebp - 0x8078]
push eax
call fcn.004014c0
add esp, 0xc
lea ecx, [ebp - 0x8280]
call fcn.00404a70
lea ecx, [ebp - 0x20]
call fcn.00404a70
lea eax, [ebp - 0x8078]
push eax
call fcn.00406a80
add esp, 4
lea eax, [ebp - 0x8078]
cmp dword [ebp - 0x8064], 0xf
cmova eax, dword [ebp - 0x8078]
push 0
push 0x433020
push eax
push 0
call edi
lea ecx, [ebp - 0x8078]
call fcn.00404a70
push 0xffffffffffffffff
push dword [ebp - 0x8590]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x8594]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x8590]
call esi
lea eax, [ebp - 0x8090]
push 0x4329a8
push eax
call fcn.00401420
add esp, 8
test al, al
je 0x40fd89
push 0
push str.Cold_Client_Loader__waiting_
push str.Press_OK_when_you_have_finished_playing_to_close_the_loader
jmp 0x40fdb6
lea eax, [ebp - 0x8090]
push 0x43325c
push eax
call fcn.00401420
add esp, 8
test al, al
je 0x40fdba
cmp dword [ebp - 0x8050], 0
jne 0x40fdba
push 0
push str.Cold_Client_Loader__waiting_
push str.Start_the_game__then_press_OK_when_you_have_finished_playing_to_close_the_loader
push 0
call edi
lea eax, [ebp - 0x8090]
push 0x43325c
push eax
call fcn.00401470
add esp, 8
test al, al
jne 0x40fddb
cmp dword [ebp - 0x8050], 0
jne 0x40fdea
call fcn.00407c20
call fcn.00407dc0
call fcn.00407a70
call fcn.00406a80
xor esi, esi
lea ecx, [ebp - 0x85e0]
call fcn.00404b60
lea ecx, [ebp - 0x81f8]
call fcn.00404ac0
lea ecx, [ebp - 0x8090]
call fcn.00404ac0
lea ecx, [ebp - 0x8210]
call fcn.00404ac0
lea ecx, [ebp - 0x8228]
call fcn.00404ac0
lea ecx, [ebp - 0x8180]
call fcn.00404ac0
lea ecx, [ebp - 0x8240]
call fcn.00404ac0
lea ecx, [ebp - 0x8258]
call fcn.00404ac0
lea ecx, [ebp - 0x8060]
call fcn.00404ac0
lea ecx, [ebp - 0x8168]
call fcn.00404ac0
lea ecx, [ebp - 0x8138]
call fcn.00404ac0
lea ecx, [ebp - 0x8120]
call fcn.00404ac0
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop ebx
xor ecx, ebp
pop esi
call fcn.00413182
mov esp, ebp
pop ebp
ret 0x10
call fcn.00407530
call fcn.00407530
call fcn.00407530
call fcn.00407530
call fcn.00407530
call fcn.00407530
call fcn.00407530
call fcn.00407530
call fcn.00407530
call fcn.00407530
call fcn.00407530
call fcn.00407530
call fcn.00407530
call fcn.00407530
call fcn.00417d1f
call fcn.00417d1f
call fcn.00417d1f
call fcn.00417d1f
int3