Function at 0x140015490
Capabilities:
Create process on windows
Create process suspended
Resume thread
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x650
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14004c300]
xor rax, rsp
mov qword [rsp + 0x620], rax
mov qword [rsp + 0x70], r8
xor esi, esi
mov dword [rsp + 0x60], esi
call fcn.140007410
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.1400029b0
nop
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x1400154f3
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
lea rbx, [rcx + rax*2]
mov rdi, rbx
mov rdx, rbx
call fcn.1400046b0
cmp rax, rbx
je 0x14001554b
nop dword [rax + rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14001551f
cmp cx, 0x2f
jne 0x140015528
add rax, 2
cmp rax, rbx
jne 0x140015510
cmp rax, rbx
je 0x14001554b
nop dword [rax]
lea rcx, [rdi - 2]
movzx edx, word [rcx]
cmp dx, 0x5c
je 0x14001554b
cmp dx, 0x2f
je 0x14001554b
mov rdi, rcx
cmp rax, rcx
jne 0x140015530
mov r8d, 0x3a
mov rdx, rbx
mov rcx, rdi
call fcn.14001a5c0
mov r8, rax
cmp rdi, rax
je 0x140015589
add rax, 0xfffffffffffffffe
cmp rdi, rax
je 0x140015589
cmp word [rax], 0x2e
jne 0x140015624
lea rcx, [rax - 2]
cmp rdi, rcx
jne 0x140015586
cmp word [rcx], 0x2e
je 0x140015589
mov r8, rax
sub r8, rdi
sar r8, 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
mov qword [rsp + 0x250], rsi
mov qword [rsp + 0x258], rsi
mov rdx, rdi
lea rcx, [rsp + 0x240]
call fcn.140001550
nop
lea r15, [rsp + 0x240]
cmp qword [rsp + 0x258], 7
cmova r15, qword [rsp + 0x240]
mov r14, qword [rsp + 0x250]
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x230], rsi
mov qword [rsp + 0x238], 0xf
mov byte [rsp + 0x220], 0
mov dword [rsp + 0x60], 0x5c
test r14, r14
je 0x14001574e
cmp r14, 0x7fffffff
ja 0x140018b8d
jmp 0x140015649
sub rax, 2
cmp rdi, rax
je 0x140015589
cmp word [rax], 0x2e
je 0x140015586
sub rax, 2
cmp rdi, rax
jne 0x140015631
jmp 0x140015589
mov dword [rsp + 0x20], esi
xor r9d, r9d
mov r8d, r14d
mov rdx, r15
mov ecx, 0xfde9
call fcn.140019ca4
mov rsi, rax
shr rax, 0x20
test eax, eax
jne 0x140018b98
movsxd rcx, esi
mov rdx, qword [rsp + 0x230]
cmp rcx, rdx
ja 0x1400156a7
mov qword [rsp + 0x230], rcx
lea rax, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova rax, qword [rsp + 0x220]
mov byte [rax + rcx], 0
jmp 0x14001570f
mov rbx, rcx
sub rbx, rdx
mov rdi, qword [rsp + 0x238]
mov rax, rdi
sub rax, rdx
cmp rbx, rax
ja 0x1400156f4
mov qword [rsp + 0x230], rcx
lea rax, [rsp + 0x220]
cmp rdi, 0xf
cmova rax, qword [rsp + 0x220]
lea rdi, [rax + rdx]
mov r8, rbx
xor edx, edx
mov rcx, rdi
call fcn.140035180
mov byte [rdi + rbx], 0
jmp 0x14001570f
mov byte [rsp + 0x20], 0
mov r9, rbx
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x220]
call fcn.140001b50
lea r9, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova r9, qword [rsp + 0x220]
mov dword [rsp + 0x20], esi
mov r8d, r14d
mov rdx, r15
mov ecx, 0xfde9
call fcn.140019ca4
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x140018ba4
xor esi, esi
call fcn.140007430
mov r9, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x140015761
mov rax, qword [rax]
mov r8, rax
xor edx, edx
lea rcx, [rsp + 0x220]
call fcn.140011f20
xorps xmm0, xmm0
movups xmmword [rsp + 0x280], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x290], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x280], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x290], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rcx, qword [rsp + 0x290]
mov rdx, qword [rsp + 0x298]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x140015803
lea rax, [rcx + 4]
mov qword [rsp + 0x290], rax
lea rax, [rsp + 0x280]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x280]
mov dword [rax + rcx], 0x696e692e
mov byte [rax + rcx + 4], 0
lea rax, [rsp + 0x280]
jmp 0x140015828
mov qword [rsp + 0x20], 4
lea r9, str..ini
xor r8d, r8d
mov edx, 4
lea rcx, [rsp + 0x280]
call fcn.1400019c0
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [0x14004c0d8]
cmp rdx, 0xf
jbe 0x14001587f
inc rdx
mov rcx, qword [0x14004c0c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001587a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018bae
call fcn.14001aee0
movups xmmword [0x14004c0c0], xmm6
movups xmmword [0x14004c0d0], xmm7
mov rdx, qword [rsp + 0x298]
cmp rdx, 0xf
jbe 0x1400158d0
inc rdx
mov rcx, qword [rsp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400158cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018bb4
call fcn.14001aee0
movdqa xmm6, xmmword [0x140038970]
movdqu xmmword [rsp + 0x290], xmm6
mov byte [rsp + 0x280], 0
mov rdx, qword [rsp + 0x238]
cmp rdx, 0xf
jbe 0x14001592c
inc rdx
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015927
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018bba
call fcn.14001aee0
mov qword [rsp + 0x230], rsi
mov qword [rsp + 0x238], 0xf
mov byte [rsp + 0x220], 0
mov rdx, qword [rsp + 0x258]
cmp rdx, 7
jbe 0x140015990
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001598b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018bc0
call fcn.14001aee0
movdqa xmm0, xmmword [0x140038960]
movdqu xmmword [rsp + 0x250], xmm0
mov word [rsp + 0x240], si
lea rcx, [rsp + 0x2a0]
call fcn.1400052a0
mov r13, qword [0x14004c0d0]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, 0x22
jb 0x140018bc6
lea r14, [0x14004c0c0]
mov r12, r14
cmp qword [0x14004c0d8], 0xf
cmova r12, qword [0x14004c0c0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x210], xmm1
lea r15, [r13 + 0x22]
mov edi, 0xf
lea rbx, [rsp + 0x200]
cmp r15, rdi
jbe 0x140015ad0
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x140015a41
mov rdi, rcx
movabs rsi, 0x8000000000000000
lea rax, [rsi + 0x27]
jmp 0x140015a8d
mov ebx, 0x16
cmp rdi, rbx
cmovb rdi, rbx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140015a6d
mov rbx, rsi
movabs rsi, 0x8000000000000000
mov qword [rsp + 0x200], rbx
jmp 0x140015ada
cmp rcx, 0x1000
jb 0x140015ab4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140018bcc
movabs rsi, 0x8000000000000000
mov rcx, rax
call fcn.14001aea4
test rax, rax
je 0x140018bd2
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
mov qword [rsp + 0x200], rbx
jmp 0x140015ada
call fcn.14001aea4
mov rbx, rax
movabs rsi, 0x8000000000000000
mov qword [rsp + 0x200], rax
jmp 0x140015ada
movabs rsi, 0x8000000000000000
mov qword [rsp + 0x210], r15
mov qword [rsp + 0x218], rdi
movups xmm0, xmmword [str.Searching_for_configuration_file:]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [0x140039a70]
movups xmmword [rbx + 0x10], xmm1
movzx eax, word [0x140039a80]
mov word [rbx + 0x20], ax
lea rcx, [rbx + 0x22]
mov r8, r13
mov rdx, r12
call fcn.140034ae0
mov byte [rbx + r15], 0
mov r13d, 0x3bc
lea rdx, [rsp + 0x200]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x140015b7c
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015b77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018bd2
call fcn.14001aee0
mov rcx, r14
call fcn.140005af0
test al, al
jne 0x140015dc3
call fcn.140007430
mov rdx, qword [rax + 0x10]
movabs rdi, 0x7fffffffffffffff
sub rdi, rdx
cmp rdi, 0x14
jb 0x140018bd8
mov r9, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140015bb9
mov r9, qword [rax]
mov qword [rsp + 0x30], 0x14
lea rcx, str.ColdClientLoader.ini
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdx
mov r8, rax
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x260]
call fcn.14000a660
mov rdx, qword [0x14004c0d8]
cmp rdx, 0xf
jbe 0x140015c29
inc rdx
mov rcx, qword [0x14004c0c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015c24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018bde
call fcn.14001aee0
movups xmm1, xmmword [rsp + 0x260]
movups xmmword [0x14004c0c0], xmm1
movups xmm0, xmmword [rsp + 0x270]
movups xmmword [0x14004c0d0], xmm0
movq r13, xmm0
movabs rdx, 0x7fffffffffffffff
mov rax, rdx
sub rax, r13
cmp rax, 0x22
jb 0x140018be4
mov r12, r14
movq rcx, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova r12, rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x210], xmm1
lea r15, [r13 + 0x22]
mov edi, 0xf
lea rbx, [rsp + 0x200]
cmp r15, rdi
jbe 0x140015d21
mov rdi, r15
or rdi, 0xf
cmp rdi, rdx
jbe 0x140015cdf
mov rdi, rdx
add rsi, 0x27
mov rcx, rsi
call fcn.14001aea4
test rax, rax
je 0x140018bf0
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140015d19
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140015cf9
xor eax, eax
jmp 0x140015d16
cmp rcx, 0x1000
jb 0x140015d11
lea rsi, [rcx + 0x27]
cmp rsi, rcx
jbe 0x140018bea
jmp 0x140015cc0
call fcn.14001aea4
mov rbx, rax
mov qword [rsp + 0x200], rbx
mov qword [rsp + 0x210], r15
mov qword [rsp + 0x218], rdi
movups xmm0, xmmword [str.Searching_for_configuration_file:]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [0x140039a70]
movups xmmword [rbx + 0x10], xmm1
movzx eax, word [0x140039a80]
mov word [rbx + 0x20], ax
lea rcx, [rbx + 0x22]
mov r8, r13
mov rdx, r12
call fcn.140034ae0
mov byte [rbx + r15], 0
mov r13d, 0xfbc
lea rdx, [rsp + 0x200]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x140015dc3
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015dbe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018bf0
call fcn.14001aee0
mov rcx, r14
call fcn.140005af0
test al, al
jne 0x140015e08
lea rdx, str.Couldnt_find_the_configuration_file
lea rcx, [0x14004da60]
call fcn.1400071d0
mov r9d, 0x10
lea r8, str.ColdClientLoader
lea rdx, str.Couldnt_find_the_configuration_file.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
jmp 0x140018b56
mov rdx, r14
lea rcx, [rsp + 0x2a0]
call fcn.1400029b0
nop
cmp qword [rax + 0x18], 7
jbe 0x140015e23
mov rax, qword [rax]
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0x21
mov rdx, rax
lea rcx, [rsp + 0xf0]
call fcn.140009e50
mov rax, qword [rsp + 0xf0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0xf0], rax
mov rax, qword [rsp + 0xf0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0xec], edx
lea rcx, [rsp + 0x2a0]
call fcn.1400052a0
cmp qword [rsp + 0x180], 0
jne 0x140015eda
lea rdx, str.Failed_to_open_the_configuration_file
lea rcx, [0x14004da60]
call fcn.1400071d0
lea rdx, str.Failed_to_open_the_configuration_file.
lea r8, str.ColdClientLoader
mov r9d, 0x10
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rsp + 0xf0]
call fcn.14000afb0
mov eax, 1
jmp 0x140018b56
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
xor r12d, r12d
mov qword [rsp + 0x230], r12
mov qword [rsp + 0x238], 0xf
mov byte [rsp + 0x220], r12b
mov rsi, 0xffffffffffffffff
nop dword [rax + rax]
xor r9d, r9d
mov r8d, 0x200
lea rdx, [rsp + 0x420]
lea rcx, [rsp + 0xf0]
call fcn.140011b20
lea rax, [rsp + 0x420]
mov rbx, rsi
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140015f40
mov rcx, qword [rsp + 0x230]
mov rdx, qword [rsp + 0x238]
mov rax, rdx
sub rax, rcx
cmp rbx, rax
ja 0x140015fa1
lea rax, [rbx + rcx]
mov qword [rsp + 0x230], rax
lea rdi, [rsp + 0x220]
cmp rdx, 0xf
cmova rdi, qword [rsp + 0x220]
add rdi, rcx
mov r8, rbx
lea rdx, [rsp + 0x420]
mov rcx, rdi
call fcn.140034ae0
mov byte [rbx + rdi], 0
jmp 0x140015fc1
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x420]
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x220]
call fcn.1400019c0
mov rax, qword [rsp + 0xf0]
movsxd rcx, dword [rax + 4]
cmp dword [rsp + rcx + 0x100], 0
je 0x140015f10
lea rdx, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova rdx, qword [rsp + 0x220]
mov r8, qword [rsp + 0x230]
lea rcx, [0x14004d9d0]
call fcn.14000c910
mov edi, eax
mov rdx, qword [rsp + 0x238]
cmp rdx, 0xf
jbe 0x14001604e
inc rdx
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016049
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018bf6
call fcn.14001aee0
lea rcx, [rsp + 0xf0]
call fcn.14000f750
cmp qword [0x14004c0d8], 0xf
cmova r14, qword [0x14004c0c0]
mov r9d, edi
mov r8, r14
lea rdx, str.result_of_parsing_ini__s__i__success__0_
lea rcx, [0x14004da60]
call fcn.1400071d0
test edi, edi
je 0x1400160a7
lea rdx, str.Failed_to_load_the_configuration_file
lea rcx, [0x14004da60]
call fcn.1400071d0
lea rdx, str.Failed_to_load_the_configuration_file.
jmp 0x140015ead
lea rcx, [rsp + 0xf0]
call fcn.14000afb0
call fcn.140007430
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x1400160c6
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x3c0], rcx
mov qword [rsp + 0x3c8], rax
mov qword [rsp + 0x20], r12
lea r9, [0x140038760]
lea r8, str.SteamClientDll
lea rdx, str.SteamClient
lea rcx, [0x14004d9d0]
call fcn.14000c660
mov qword [rsp + 0x60], rax
mov rcx, rsi
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x140016110
mov qword [rsp + 0x68], rcx
movaps xmm0, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x3c0], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x3c0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x2a0]
call fcn.140006620
mov rdx, rax
lea rcx, [0x14004c0e0]
call fcn.140007380
lea rcx, [rsp + 0x2a0]
call fcn.140003e90
call fcn.140007430
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140016182
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x3c0], rcx
mov qword [rsp + 0x3c8], rax
mov qword [rsp + 0x20], r12
lea r9, [0x140038760]
lea r8, str.SteamClient64Dll
lea rdx, str.SteamClient
lea rcx, [0x14004d9d0]
call fcn.14000c660
mov qword [rsp + 0x60], rax
mov rcx, rsi
inc rcx
cmp byte [rax + rcx], 0
jne 0x1400161c4
mov qword [rsp + 0x68], rcx
movaps xmm0, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x3c0], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x3c0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x2a0]
call fcn.140006620
mov rdx, rax
lea rcx, [0x14004c100]
call fcn.140007380
lea rcx, [rsp + 0x2a0]
call fcn.140003e90
call fcn.140007430
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140016236
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x3c0], rcx
mov qword [rsp + 0x3c8], rax
mov qword [rsp + 0x20], r12
lea r9, [0x140038760]
lea r8, [0x140039c0c]
lea rdx, str.SteamClient
lea rcx, [0x14004d9d0]
call fcn.14000c660
mov qword [rsp + 0x60], rax
mov rcx, rsi
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x140016280
mov qword [rsp + 0x68], rcx
movaps xmm0, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x3c0], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x3c0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x2a0]
call fcn.140006620
mov rdx, rax
lea r14, [0x14004c120]
mov rcx, r14
call fcn.140007380
lea rcx, [rsp + 0x2a0]
call fcn.140003e90
call fcn.140007430
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x1400162f5
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x3c0], rcx
mov qword [rsp + 0x3c8], rax
mov qword [rsp + 0x20], r12
lea r9, [0x140038760]
lea r8, str.ExeRunDir
lea rdx, str.SteamClient
lea rcx, [0x14004d9d0]
call fcn.14000c660
mov qword [rsp + 0x60], rax
mov rcx, rsi
inc rcx
cmp byte [rax + rcx], 0
jne 0x140016337
mov qword [rsp + 0x68], rcx
movaps xmm0, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x3c0], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x3c0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x2a0]
call fcn.140006620
mov rdx, rax
lea rbx, [0x14004c140]
mov rcx, rbx
call fcn.140007380
lea rcx, [rsp + 0x2a0]
call fcn.140003e90
mov qword [rsp + 0x20], r12
lea r9, [0x140038760]
lea r8, str.ExeCommandLine
lea rdx, str.SteamClient
lea rcx, [0x14004d9d0]
call fcn.14000c660
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x1400163c3
mov rdx, rax
lea r15, [0x14004c160]
mov rcx, r15
call fcn.140006f50
mov qword [rsp + 0x20], r12
lea r9, [0x140038760]
lea r8, str.AppId
lea rdx, str.SteamClient
lea rcx, [0x14004d9d0]
call fcn.14000c660
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140016410
mov rdx, rax
lea rcx, [0x14004c180]
call fcn.140006f50
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.ForceInjectSteamClient
lea rdx, str.Injection
lea rcx, [0x14004d9d0]
call fcn.14000c580
mov byte [0x14004d9c5], al
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.ForceInjectGameOverlayRenderer
lea rdx, str.Injection
lea rcx, [0x14004d9d0]
call fcn.14000c580
mov byte [0x14004d9c6], al
call fcn.140007430
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14001648b
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x3c0], rcx
mov qword [rsp + 0x3c8], rax
mov qword [rsp + 0x20], r12
lea r9, [0x140038760]
lea r8, str.DllsToInjectFolder
lea rdx, str.Injection
lea rcx, [0x14004d9d0]
call fcn.14000c660
mov qword [rsp + 0x60], rax
mov rcx, rsi
nop dword [rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x1400164d0
mov qword [rsp + 0x68], rcx
movaps xmm0, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x3c0], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x3c0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x2a0]
call fcn.140006620
mov rdx, rax
lea rcx, [0x14004c1a0]
call fcn.140007380
lea rcx, [rsp + 0x2a0]
call fcn.140003e90
mov qword [rsp + 0x20], r12
mov r9b, 1
lea r8, str.IgnoreInjectionError
lea rdx, str.Injection
lea rcx, [0x14004d9d0]
call fcn.14000c580
mov byte [0x14004d9c7], al
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.IgnoreLoaderArchDifference
lea rdx, str.Injection
lea rcx, [0x14004d9d0]
call fcn.14000c580
mov byte [0x14004d9c8], al
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.Mode
lea rdx, str.Persistence
lea rcx, [0x14004d9d0]
call fcn.14000c660
test rax, rax
je 0x140016661
cmp byte [rax], 0
je 0x140016661
xorps xmm0, xmm0
movups xmmword [rsp + 0x3e0], xmm0
movups xmmword [rsp + 0x3f0], xmm0
movups xmmword [rsp + 0x400], xmm0
movups xmmword [rsp + 0x410], xmm0
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400165d7
inc rsi
cmp rsi, 0x40
ja 0x140016661
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0x3e0]
call fcn.140034ae0
lea rax, [rsp + 0x3e0]
mov qword [rsp + 0x60], rax
cmp byte [rsp + 0x3e0], 0x30
jne 0x14001663b
movzx eax, byte [rsp + 0x3e1]
sub al, 0x58
test al, 0xdf
jne 0x14001663b
cmp byte [rsp + 0x3e2], 0
je 0x140016661
lea rcx, [rsp + 0x3e2]
mov r8d, 0x10
jmp 0x140016649
lea rcx, [rsp + 0x3e0]
mov r8d, 0xa
lea rdx, [rsp + 0x60]
call fcn.140021d38
mov rcx, qword [rsp + 0x60]
cmp byte [rcx], 0
cmovne eax, r12d
jmp 0x140016664
mov eax, r12d
mov dword [0x14004da58], eax
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.ResumeByDebugger
lea rdx, str.Debug
lea rcx, [0x14004d9d0]
call fcn.14000c580
mov byte [0x14004d9c9], al
cmp dword [0x14004da58], 2
jbe 0x1400166a2
mov dword [0x14004da58], r12d
movabs rdi, 0x7fffffffffffffff
mov rax, rdi
mov rcx, qword [0x14004c130]
sub rax, rcx
cmp rax, 0x12
jb 0x140018bfc
mov rax, r14
cmp qword [0x14004c138], 0xf
cmova rax, qword [0x14004c120]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x12
lea r9, str.SteamClient::Exe:
mov r8, r14
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x260]
call fcn.14000a660
bts r13d, 0xc
lea rdx, [rsp + 0x260]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x260]
call fcn.140003e90
mov rax, rdi
mov rcx, qword [0x14004c150]
sub rax, rcx
cmp rax, 0x18
jb 0x140018c02
mov rax, rbx
cmp qword [0x14004c158], 0xf
cmova rax, qword [0x14004c140]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x18
lea r9, str.SteamClient::ExeRunDir:
mov r8, rbx
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x260]
call fcn.14000a660
bts r13d, 0xd
lea rdx, [rsp + 0x260]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x260]
call fcn.140003e90
mov rax, rdi
mov rcx, qword [0x14004c170]
sub rax, rcx
cmp rax, 0x1d
jb 0x140018c08
mov rax, r15
cmp qword [0x14004c178], 0xf
cmova rax, qword [0x14004c160]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x1d
lea r9, str.SteamClient::ExeCommandLine:
mov r8, r15
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x260]
call fcn.14000a660
bts r13d, 0xe
lea rdx, [rsp + 0x260]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x260]
call fcn.140003e90
mov rax, rdi
mov rcx, qword [0x14004c190]
sub rax, rcx
cmp rax, 0x14
jb 0x140018c0e
lea rax, [0x14004c180]
cmp qword [0x14004c198], 0xf
cmova rax, qword [0x14004c180]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x14
lea r9, str.SteamClient::AppId:
lea r8, [0x14004c180]
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x260]
call fcn.14000a660
bts r13d, 0xf
lea rdx, [rsp + 0x260]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x260]
call fcn.140003e90
mov rax, rdi
mov rcx, qword [0x14004c0f0]
sub rax, rcx
cmp rax, 0x1a
jb 0x140018c14
lea rax, [0x14004c0e0]
cmp qword [0x14004c0f8], 0xf
cmova rax, qword [0x14004c0e0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x1a
lea r9, str.SteamClient::SteamClient:
lea r8, [0x14004c0e0]
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x260]
call fcn.14000a660
bts r13d, 0x10
lea rdx, [rsp + 0x260]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x260]
call fcn.140003e90
mov rax, rdi
mov rcx, qword [0x14004c110]
sub rax, rcx
cmp rax, 0x1f
jb 0x140018c1a
lea rax, [0x14004c100]
cmp qword [0x14004c118], 0xf
cmova rax, qword [0x14004c100]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x1f
lea r9, str.SteamClient::SteamClient64Dll:
lea r8, [0x14004c100]
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x260]
call fcn.14000a660
bts r13d, 0x11
lea rdx, [rsp + 0x260]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x260]
call fcn.140003e90
mov edx, dword [0x14004da58]
lea rcx, [rsp + 0x3d5]
test edx, edx
jns 0x1400169e5
neg edx
call fcn.1400098b0
dec rax
mov byte [rax], 0x2d
jmp 0x1400169ea
call fcn.1400098b0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x3d5]
mov rdx, rax
lea rcx, [rsp + 0x2e0]
call fcn.140007e60
or r13d, 0xc0000
mov r9d, 0x1d
lea r8, str.SteamClient::PersistentMode:
xor edx, edx
lea rcx, [rsp + 0x2e0]
call fcn.140011f20
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x210], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x200], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x210], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r13d, 0x14
lea rdx, [rsp + 0x200]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x140016ac4
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016abf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018c20
call fcn.14001aee0
movdqu xmmword [rsp + 0x210], xmm6
mov byte [rsp + 0x200], 0
mov r8, qword [rsp + 0x2f8]
cmp r8, 0xf
jbe 0x140016af8
mov rdx, qword [rsp + 0x2e0]
lea rcx, [rsp + 0x2e0]
call fcn.14000d490
movzx edx, byte [0x14004d9c5]
lea rcx, [rsp + 0x2e0]
call fcn.1400147d0
nop
mov r9d, 0x25
lea r8, str.SteamClient::ForceInjectSteamClient:
xor edx, edx
mov rcx, rax
call fcn.140011f20
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x210], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x200], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x210], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r13d, 0x15
lea rdx, [rsp + 0x200]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x140016bbe
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016bb9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018c26
call fcn.14001aee0
movdqu xmmword [rsp + 0x210], xmm6
mov byte [rsp + 0x200], 0
mov r8, qword [rsp + 0x2f8]
cmp r8, 0xf
jbe 0x140016bf2
mov rdx, qword [rsp + 0x2e0]
lea rcx, [rsp + 0x2e0]
call fcn.14000d490
movzx edx, byte [0x14004d9c6]
lea rcx, [rsp + 0x2e0]
call fcn.1400147d0
nop
mov r9d, 0x2d
lea r8, str.SteamClient::ForceInjectGameOverlayRenderer:
xor edx, edx
mov rcx, rax
call fcn.140011f20
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x210], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x200], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x210], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r13d, 0x16
lea rdx, [rsp + 0x200]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x140016cb8
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016cb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018c2c
call fcn.14001aee0
movdqu xmmword [rsp + 0x210], xmm6
mov byte [rsp + 0x200], 0
mov r8, qword [rsp + 0x2f8]
cmp r8, 0xf
jbe 0x140016cec
mov rdx, qword [rsp + 0x2e0]
lea rcx, [rsp + 0x2e0]
call fcn.14000d490
mov rax, rdi
mov rcx, qword [0x14004c1b0]
sub rax, rcx
cmp rax, 0x1f
jb 0x140018c32
lea rax, [0x14004c1a0]
cmp qword [0x14004c1b8], 0xf
cmova rax, qword [0x14004c1a0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x1f
lea r9, str.Injection::DllsToInjectFolder:
lea r8, [0x14004c1a0]
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x260]
call fcn.14000a660
bts r13d, 0x17
lea rdx, [rsp + 0x260]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x260]
call fcn.140003e90
movzx edx, byte [0x14004d9c7]
lea rcx, [rsp + 0x2a0]
call fcn.1400147d0
nop
mov r9d, 0x21
lea r8, str.Injection::IgnoreInjectionError:
xor edx, edx
mov rcx, rax
call fcn.140011f20
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x210], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x200], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x210], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r13d, 0x18
lea rdx, [rsp + 0x200]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x140016e3a
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016e35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018c38
call fcn.14001aee0
movdqu xmmword [rsp + 0x210], xmm6
mov byte [rsp + 0x200], 0
lea rcx, [rsp + 0x2a0]
call fcn.140003e90
movzx edx, byte [0x14004d9c8]
lea rcx, [rsp + 0x2a0]
call fcn.1400147d0
nop
mov r9d, 0x27
lea r8, str.Injection::IgnoreLoaderArchDifference:
xor edx, edx
mov rcx, rax
call fcn.140011f20
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x210], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x200], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x210], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r13d, 0x19
lea rdx, [rsp + 0x200]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x140016f1e
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016f19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018c3e
call fcn.14001aee0
movdqu xmmword [rsp + 0x210], xmm6
mov byte [rsp + 0x200], 0
lea rcx, [rsp + 0x2a0]
call fcn.140003e90
movzx edx, byte [0x14004d9c9]
lea rcx, [rsp + 0x2a0]
call fcn.1400147d0
nop
mov r9d, 0x19
lea r8, str.Debug::ResumeByDebugger:
xor edx, edx
mov rcx, rax
call fcn.140011f20
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x210], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x200], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x210], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r13d, 0x1a
lea rdx, [rsp + 0x200]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x140017002
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016ffd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018c44
call fcn.14001aee0
movdqu xmmword [rsp + 0x210], xmm6
mov byte [rsp + 0x200], 0
lea rcx, [rsp + 0x2a0]
call fcn.140003e90
lea rcx, [0x14004c100]
call fcn.140005af0
test al, al
jne 0x140017069
lea rdx, str.Couldnt_find_the_requested_SteamClient64Dll
lea rcx, [0x14004da60]
call fcn.1400071d0
mov r9d, 0x10
lea r8, str.ColdClientLoader
lea rdx, str.Couldnt_find_the_requested_SteamClient64Dll.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
jmp 0x140018b56
lea rcx, [0x14004c0e0]
call fcn.140005af0
test al, al
jne 0x1400170b2
lea rdx, str.Couldnt_find_the_requested_SteamClientDll
lea rcx, [0x14004da60]
call fcn.1400071d0
mov r9d, 0x10
lea r8, str.ColdClientLoader
lea rdx, str.Couldnt_find_the_requested_SteamClientDll.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
jmp 0x140018b56
mov rcx, r14
call fcn.140005af0
test al, al
jne 0x1400170f7
lea rdx, str.Couldnt_find_the_requested_Exe_file
lea rcx, [0x14004da60]
call fcn.1400071d0
mov r9d, 0x10
lea r8, str.ColdClientLoader
lea rdx, str.Couldnt_find_the_requested_Exe_file.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
jmp 0x140018b56
cmp qword [0x14004c150], 0
jne 0x1400171eb
mov rdx, r14
lea rcx, [rsp + 0x260]
call fcn.1400029b0
nop
lea rdx, [rsp + 0x300]
mov rcx, rax
call fcn.1400060c0
nop
lea rdx, [rsp + 0x2a0]
mov rcx, rax
call fcn.1400149c0
mov rdx, rax
mov rcx, rbx
call fcn.140007380
lea rcx, [rsp + 0x2a0]
call fcn.140003e90
nop
lea rcx, [rsp + 0x300]
call fcn.1400052a0
nop
lea rcx, [rsp + 0x260]
call fcn.1400052a0
mov rax, rdi
mov rcx, qword [0x14004c150]
sub rax, rcx
cmp rax, 0x16
jb 0x140018c4a
mov rax, rbx
cmp qword [0x14004c158], 0xf
cmova rax, qword [0x14004c140]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x16
lea r9, str.Setting_ExeRunDir_to:
mov r8, rbx
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x260]
call fcn.14000a660
bts r13d, 0x1b
lea rdx, [rsp + 0x260]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x260]
call fcn.140003e90
mov rcx, rbx
call fcn.140005830
test al, al
jne 0x140017230
lea rdx, str.Couldnt_find_the_requested_Exe_run_dir
lea rcx, [0x14004da60]
call fcn.1400071d0
mov r9d, 0x10
lea r8, str.ColdClientLoader
lea rdx, str.Couldnt_find_the_requested_Exe_run_dir.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
jmp 0x140018b56
xor bl, bl
cmp qword [0x14004c1b0], 0
je 0x14001727e
lea rcx, [0x14004c1a0]
call fcn.140005830
movzx ebx, al
test al, al
jne 0x14001727e
lea rdx, str.Couldnt_find_the_requested_folder_of_dlls_to_inject
lea rcx, [0x14004da60]
call fcn.1400071d0
mov r9d, 0x30
lea r8, str.ColdClientLoader
lea rdx, str.Couldnt_find_the_requested_folder_of_dlls_to_inject.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, r14
lea rcx, [rsp + 0x220]
call fcn.140011d00
mov rdi, rax
lea rcx, [0x14004da40]
cmp rcx, rax
je 0x1400172cd
call fcn.14000ade0
mov rcx, qword [rdi]
mov qword [0x14004da40], rcx
mov rcx, qword [rdi + 8]
mov qword [0x14004da48], rcx
mov rcx, qword [rdi + 0x10]
mov qword [0x14004da50], rcx
mov qword [rdi], r12
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
lea rcx, [rsp + 0x220]
call fcn.14000ade0
mov rcx, qword [0x14004da40]
cmp rcx, qword [0x14004da48]
jne 0x140017323
lea rdx, str.Couldnt_read_the_exe_header
lea rcx, [0x14004da60]
call fcn.1400071d0
mov r9d, 0x10
lea r8, str.ColdClientLoader
lea rdx, str.Couldnt_read_the_exe_header.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
jmp 0x140018b56
call fcn.140007b90
movzx esi, al
mov rcx, qword [0x14004da40]
call fcn.140007bd0
lea rcx, [0x14004da60]
cmp sil, al
jne 0x140017375
lea rdx, str.The_requested_exe_is_invalid__neither_32_nor_64_bit_
call fcn.1400071d0
mov r9d, 0x10
lea r8, str.ColdClientLoader
lea rdx, str.The_requested_exe_is_invalid__neither_32_nor_64_bit_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
jmp 0x140018b56
lea rax, str.Detected_exe_arch:_x64
lea rdx, str.Detected_exe_arch:_x32
test sil, sil
cmove rdx, rax
call fcn.1400071d0
lea rdx, str.Detected_loader_arch:_x32
lea rax, str.Detected_loader_arch:_x64
cmp byte [0x14004d9c4], 0
cmove rdx, rax
lea rcx, [0x14004da60]
call fcn.1400071d0
cmp byte [0x14004d9c4], sil
je 0x1400173f2
lea rdx, str.Arch_of_loader_and_requested_exe_are_different__it_is_advised_to_use_the_appropriate_one
lea rcx, [0x14004da60]
call fcn.1400071d0
cmp byte [0x14004d9c8], 0
jne 0x1400173f2
xor r9d, r9d
lea r8, str.ColdClientLoader
lea rdx, str.Arch_of_loader_and_requested_exe_are_different__nit_is_advised_to_use_the_appropriate_one.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
test bl, bl
je 0x140017617
xorps xmm0, xmm0
movups xmmword [rsp + 0x280], xmm0
mov qword [rsp + 0x290], r12
mov qword [rsp + 0x298], 0xf
mov byte [rsp + 0x280], 0
lea r8, [rsp + 0x280]
movzx edx, sil
lea rcx, [rsp + 0x220]
call fcn.14000f7f0
mov rdi, rax
lea rbx, [0x14004dae0]
cmp rbx, rax
je 0x14001747c
mov rcx, rbx
call fcn.14000e9b0
mov rcx, qword [rdi]
mov qword [0x14004dae0], rcx
mov rcx, qword [rdi + 8]
mov qword [0x14004dae8], rcx
mov rcx, qword [rdi + 0x10]
mov qword [0x14004daf0], rcx
mov qword [rdi], r12
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
lea rcx, [rsp + 0x220]
call fcn.14000e9b0
mov rcx, qword [rsp + 0x290]
test rcx, rcx
je 0x1400175f2
cmp byte [0x14004d9c7], 0
jne 0x1400175f2
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0x27
jb 0x140018c50
lea rax, [rsp + 0x280]
cmp qword [rsp + 0x298], 0xf
cmova rax, qword [rsp + 0x280]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x27
lea r9, str.The_following_dlls_cannot_be_injected:_n
lea r8, [rsp + 0x280]
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x260]
call fcn.14000a660
nop
mov r8d, 0xb
lea rdx, str._nContinue__
lea rcx, [rsp + 0x260]
call fcn.1400054c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x250], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x240], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x250], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x240]
cmp qword [rsp + 0x258], 0xf
cmova rdx, qword [rsp + 0x240]
mov r9d, 4
lea r8, str.ColdClientLoader
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edi, eax
mov r8, qword [rsp + 0x258]
cmp r8, 0xf
jbe 0x1400175b8
mov rdx, qword [rsp + 0x240]
lea rcx, [rsp + 0x240]
call fcn.14000d490
movdqu xmmword [rsp + 0x250], xmm6
mov byte [rsp + 0x240], 0
lea rcx, [rsp + 0x260]
call fcn.140003e90
cmp edi, 6
je 0x1400175f2
lea rcx, [rsp + 0x280]
call fcn.140003e90
mov eax, 1
jmp 0x140018b56
mov r8, qword [rsp + 0x298]
cmp r8, 0xf
jbe 0x14001761e
mov rdx, qword [rsp + 0x280]
lea rcx, [rsp + 0x280]
call fcn.14000d490
jmp 0x14001761e
lea rbx, [0x14004dae0]
cmp byte [0x14004d9c6], 0
je 0x14001789c
lea rcx, [rsp + 0x260]
test sil, sil
je 0x140017768
lea rdx, [0x14004c0e0]
call fcn.1400029b0
nop
lea rdx, [rsp + 0x300]
mov rcx, rax
call fcn.1400060c0
nop
lea rdx, [rsp + 0x2a0]
mov rcx, rax
call fcn.1400149c0
nop
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140017678
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x3c0], rcx
mov qword [rsp + 0x3c8], rax
lea rax, str.GameOverlayRenderer.dll
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 0x17
movaps xmm0, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x3c0], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x3c0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x2e0]
call fcn.140006620
nop
lea rcx, [rsp + 0x2a0]
call fcn.140003e90
nop
lea rcx, [rsp + 0x300]
call fcn.1400052a0
nop
lea rcx, [rsp + 0x260]
call fcn.1400052a0
lea rcx, [rsp + 0x2e0]
call fcn.140005af0
test al, al
jne 0x140017743
lea rdx, str.Couldnt_find_GameOverlayRenderer.dll
lea rcx, [0x14004da60]
call fcn.1400071d0
mov r9d, 0x30
lea r8, str.ColdClientLoader
lea rdx, str.Couldnt_find_GameOverlayRenderer.dll_to_inject.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x140017763
lea r9, [rsp + 0x2e0]
mov r8, qword [0x14004dae0]
lea rdx, [rsp + 0x3c0]
mov rcx, rbx
call fcn.140012030
nop
jmp 0x14001788f
lea rdx, [0x14004c100]
call fcn.1400029b0
nop
lea rdx, [rsp + 0x300]
mov rcx, rax
call fcn.1400060c0
nop
lea rdx, [rsp + 0x2a0]
mov rcx, rax
call fcn.1400149c0
nop
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x1400177a4
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x3c0], rcx
mov qword [rsp + 0x3c8], rax
lea rax, str.GameOverlayRenderer64.dll
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 0x19
movaps xmm0, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x3c0], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x3c0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x2e0]
call fcn.140006620
nop
lea rcx, [rsp + 0x2a0]
call fcn.140003e90
nop
lea rcx, [rsp + 0x300]
call fcn.1400052a0
nop
lea rcx, [rsp + 0x260]
call fcn.1400052a0
lea rcx, [rsp + 0x2e0]
call fcn.140005af0
test al, al
jne 0x14001786f
lea rdx, str.Couldnt_find_GameOverlayRenderer64.dll
lea rcx, [0x14004da60]
call fcn.1400071d0
mov r9d, 0x30
lea r8, str.ColdClientLoader
lea rdx, str.Couldnt_find_GameOverlayRenderer64.dll_to_inject.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14001788f
lea r9, [rsp + 0x2e0]
mov r8, qword [0x14004dae0]
lea rdx, [rsp + 0x3c0]
mov rcx, rbx
call fcn.140012030
nop
lea rcx, [rsp + 0x2e0]
call fcn.140003e90
cmp byte [0x14004d9c5], 0
je 0x1400178cf
mov r8, qword [0x14004dae0]
lea rdx, [rsp + 0x3c0]
mov rcx, rbx
test sil, sil
lea r9, [0x14004c0e0]
jne 0x1400178ca
lea r9, [0x14004c100]
call fcn.140012030
cmp dword [0x14004da58], 2
je 0x140017970
cmp qword [0x14004c190], 0
je 0x140017937
lea rax, [0x14004c180]
cmp qword [0x14004c198], 0xf
cmova rax, qword [0x14004c180]
cmp byte [rax], 0
je 0x140017937
xor edx, edx
mov r8d, 0xa
lea rcx, [0x14004c180]
call fcn.140014630
nop
lea rcx, [0x14004c180]
call fcn.1400143d0
mov rbx, qword [rsp + 0x70]
jmp 0x140017e80
lea rdx, str.You_forgot_to_set_the_AppId
lea rcx, [0x14004da60]
call fcn.1400071d0
mov r9d, 0x10
lea r8, str.ColdClientLoader
lea rdx, str.You_forgot_to_set_the_AppId.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
jmp 0x140018b56
mov qword [0x14004c190], r12
lea rdi, [0x14004c180]
mov rax, rdi
cmp qword [0x14004c198], 0xf
cmova rax, qword [0x14004c180]
mov byte [rax], 0
mov rbx, qword [rsp + 0x70]
test rbx, rbx
je 0x1400179ba
cmp word [rbx], 0
je 0x1400179ba
mov rdx, rbx
lea rcx, [rsp + 0x2a0]
call fcn.14000a790
or r13d, 1
jmp 0x1400179eb
xorps xmm0, xmm0
movups xmmword [rsp + 0x2c0], xmm0
movdqa xmm1, xmmword [0x140038960]
movdqu xmmword [rsp + 0x2d0], xmm1
mov word [rsp + 0x2c0], r12w
lea rax, [rsp + 0x2c0]
or r13d, 2
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x230], r12
mov qword [rsp + 0x238], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x220], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x230], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
test r13b, 2
je 0x140017a5a
and r13d, 0xfffffffd
mov r8, qword [rsp + 0x2d8]
cmp r8, 7
jbe 0x140017a5a
mov rdx, qword [rsp + 0x2c0]
lea rcx, [rsp + 0x2c0]
call fcn.14000d4d0
test r13b, 1
je 0x140017a71
and r13d, 0xfffffffe
lea rcx, [rsp + 0x2a0]
call fcn.1400052a0
lea r8, [rsp + 0x220]
lea rdx, str.persistent_mode_2_detecting_steam_launch_cmd_from:_
lea rcx, [rsp + 0x300]
call fcn.1400083d0
nop
mov r8d, 1
lea rdx, [0x14003a410]
mov rcx, rax
call fcn.140005550
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x210], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x200], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x210], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
bts r13d, 0x1c
lea rdx, [rsp + 0x200]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
mov r8, qword [rsp + 0x218]
cmp r8, 7
jbe 0x140017b1e
mov rdx, qword [rsp + 0x200]
lea rcx, [rsp + 0x200]
call fcn.14000d4d0
movdqa xmm0, xmmword [0x140038960]
movdqu xmmword [rsp + 0x210], xmm0
mov word [rsp + 0x200], r12w
lea rcx, [rsp + 0x300]
call fcn.1400052a0
xor r8d, r8d
lea rdx, str.____steam:__run_
lea rcx, [rsp + 0x220]
call fcn.140011760
xor r8d, r8d
lea rcx, [rsp + 0x220]
test rax, rax
jne 0x140017c7f
lea rdx, [0x14003a48c]
call fcn.140011870
mov r8, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x210], xmm1
mov rax, qword [rsp + 0x230]
cmp rax, 0x11
jb 0x140018c56
add rax, 0xffffffffffffffef
cmp rax, r8
cmovb r8, rax
lea rdx, [rsp + 0x220]
cmp qword [rsp + 0x238], 7
cmova rdx, qword [rsp + 0x220]
add rdx, 0x22
lea rcx, [rsp + 0x200]
call fcn.140001550
nop
lea rax, [rsp + 0x200]
cmp qword [rsp + 0x218], 7
cmova rax, qword [rsp + 0x200]
mov qword [rsp + 0x3c0], rax
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x3c8], rax
movaps xmm0, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x3c0], xmm0
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x300]
call fcn.140006850
mov rdx, rax
mov rcx, rdi
call fcn.140007380
lea rcx, [rsp + 0x300]
call fcn.140003e90
nop
mov r8, qword [rsp + 0x218]
cmp r8, 7
jbe 0x140017c73
mov rdx, qword [rsp + 0x200]
lea rcx, [rsp + 0x200]
call fcn.14000d4d0
lea rdx, str.persistent_mode_2_got_steam_launch_cmd_1
jmp 0x140017d9c
lea rdx, str.____steam:__rungameid_
call fcn.140011760
test rax, rax
jne 0x140017d95
xor r8d, r8d
lea rdx, [0x14003a48c]
lea rcx, [rsp + 0x220]
call fcn.140011870
mov r8, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x2c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2d0], xmm1
mov rax, qword [rsp + 0x230]
cmp rax, 0x17
jb 0x140018c5c
add rax, 0xffffffffffffffe9
cmp rax, r8
cmovb r8, rax
lea rdx, [rsp + 0x220]
cmp qword [rsp + 0x238], 7
cmova rdx, qword [rsp + 0x220]
add rdx, 0x2e
lea rcx, [rsp + 0x2c0]
call fcn.140001550
nop
lea rax, [rsp + 0x2c0]
cmp qword [rsp + 0x2d8], 7
cmova rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x3c0], rax
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x3c8], rax
movaps xmm0, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x3c0], xmm0
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x300]
call fcn.140006850
mov rdx, rax
mov rcx, rdi
call fcn.140007380
lea rcx, [rsp + 0x300]
call fcn.140003e90
nop
lea rcx, [rsp + 0x2c0]
call fcn.1400052a0
lea rdx, str.persistent_mode_2_got_steam_launch_cmd_2
jmp 0x140017d9c
lea rdx, str.persistent_mode_2_didnt_detect_a_valid_steam_launch_cmd
lea rcx, [0x14004da60]
call fcn.1400071d0
cmp qword [0x14004c190], 0
je 0x140017e49
mov rcx, rdi
call fcn.1400143d0
movabs rax, 0x7fffffffffffffff
mov rcx, qword [0x14004c190]
sub rax, rcx
cmp rax, 0x24
jb 0x140018c62
mov rax, rdi
cmp qword [0x14004c198], 0xf
cmova rax, qword [0x14004c180]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x24
lea r9, str.persistent_mode_2_will_use_app_id_
mov r8, rdi
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x260]
call fcn.14000a660
or r13d, 0x80000000
lea rdx, [rsp + 0x260]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x260]
call fcn.140003e90
jmp 0x140017e5d
lea rdx, str.persistent_mode_2_didnt_find_app_id
lea rcx, [0x14004da60]
call fcn.1400071d0
nop
mov r8, qword [rsp + 0x238]
cmp r8, 7
jbe 0x140017e80
mov rdx, qword [rsp + 0x220]
lea rcx, [rsp + 0x220]
call fcn.14000d4d0
call fcn.140012d80
test al, al
jne 0x140017ed6
call fcn.14000ee80
call fcn.14000f140
call fcn.14000f3d0
call fcn.14000ea80
lea rdx, str.Unable_to_patch_Registry__HKCU_.
lea rcx, [0x14004da60]
call fcn.1400071d0
mov r9d, 0x10
lea r8, str.ColdClientLoader
lea rdx, str.Unable_to_patch_Registry__HKCU_.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
jmp 0x140018b56
call fcn.1400132a0
test al, al
jne 0x140017f2c
call fcn.14000ee80
call fcn.14000f140
call fcn.14000f3d0
call fcn.14000ea80
lea rdx, str.Unable_to_patch_Registry__HKCU_2_.
lea rcx, [0x14004da60]
call fcn.1400071d0
mov r9d, 0x10
lea r8, str.ColdClientLoader
lea rdx, str.Unable_to_patch_Registry__HKCU_2_.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
jmp 0x140018b56
call fcn.1400138c0
call fcn.1400125a0
cmp dword [0x14004da58], 2
jne 0x140017f4d
cmp qword [0x14004c190], 0
je 0x140018b14
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x84], xmm0
movups xmmword [rsp + 0x94], xmm0
movups xmmword [rsp + 0xa4], xmm0
movups xmmword [rsp + 0xb4], xmm0
movups xmmword [rsp + 0xc4], xmm0
movups xmmword [rsp + 0xd4], xmm0
mov dword [rsp + 0xe4], eax
lea rdi, [rsp + 0x80]
mov ecx, 0x68
rep stosb byte [rdi], al
mov dword [rsp + 0x80], 0x68
movups xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x230], rax
lea rdi, [rsp + 0x220]
mov ecx, 0x18
rep stosb byte [rdi], al
lea rdx, str.spawning_the_requested_EXE_file
lea rcx, [0x14004da60]
call fcn.1400071d0
cmp qword [0x14004c138], 0xf
cmova r14, qword [0x14004c120]
mov qword [rsp + 0x3c0], r14
mov rax, qword [0x14004c130]
mov qword [rsp + 0x3c8], rax
movaps xmm0, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x3c0], xmm0
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x200]
call fcn.140006a50
nop
mov edx, 1
lea rcx, [rsp + 0xf0]
call fcn.14000a7d0
nop
lea rdx, [0x14003a604]
lea rcx, [rsp + 0x100]
call fcn.140007fa0
lea rdx, [rsp + 0x200]
cmp qword [rsp + 0x218], 7
cmova rdx, qword [rsp + 0x200]
mov r8, qword [rsp + 0x210]
mov rcx, rax
call fcn.140009440
lea rdx, [0x14003a5fc]
mov rcx, rax
call fcn.140007fa0
mov rdi, rax
cmp qword [0x14004c178], 0xf
cmova r15, qword [0x14004c160]
mov qword [rsp + 0x3c0], r15
mov rcx, qword [0x14004c170]
mov qword [rsp + 0x3c8], rcx
movaps xmm0, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x3c0], xmm0
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x2a0]
call fcn.140006a50
nop
mov rdx, rax
mov rcx, rdi
call fcn.140008260
mov rcx, rax
lea rdx, [0x14003a5f8]
call fcn.140007fa0
mov rcx, rax
mov rdx, rbx
call fcn.140007fa0
nop
lea rcx, [rsp + 0x2a0]
call fcn.1400052a0
lea rdx, [rsp + 0x340]
lea rcx, [rsp + 0xf0]
call fcn.1400146c0
nop
lea rdx, [rsp + 0x70]
lea rcx, [0x14004c140]
call fcn.14000af20
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x3c0], xmm0
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x2a0]
call fcn.140006a50
mov rcx, rax
call fcn.14000ea70
lea rdx, [rsp + 0x340]
cmp qword [rsp + 0x358], 7
cmova rdx, qword [rsp + 0x340]
lea rcx, [rsp + 0x200]
cmp qword [rsp + 0x218], 7
cmova rcx, qword [rsp + 0x200]
lea rdi, [rsp + 0x220]
mov qword [rsp + 0x48], rdi
lea rdi, [rsp + 0x80]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov edi, eax
lea rcx, [rsp + 0x2a0]
call fcn.1400052a0
test edi, edi
jne 0x14001829e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rsp + 0x300]
call fcn.1400148a0
nop
mov r8, rax
lea rdx, str.Unable_to_load_the_requested_EXE_file__error_
lea rcx, [rsp + 0x2a0]
call fcn.140008360
nop
mov rdx, rax
lea rcx, [0x14004da60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x2a0]
call fcn.140003e90
nop
lea rcx, [rsp + 0x300]
call fcn.140003e90
call fcn.14000ee80
call fcn.14000f140
call fcn.14000f3d0
call fcn.14000ea80
mov r9d, 0x10
lea r8, str.ColdClientLoader
lea rdx, str.Unable_to_load_the_requested_EXE_file.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rsp + 0x340]
call fcn.1400052a0
nop
lea rcx, [rsp + 0xf0]
call fcn.14000b050
nop
lea rcx, [rsp + 0x200]
call fcn.1400052a0
mov eax, 1
jmp 0x140018b56
mov rdx, qword [0x14004dae8]
sub rdx, qword [0x14004dae0]
sar rdx, 5
lea rcx, [rsp + 0x260]
call fcn.140014930
nop
mov r8, rax
lea rdx, str.injecting
lea rcx, [rsp + 0x300]
call fcn.140008360
nop
lea r8, str._dlls
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.1400082f0
nop
mov rdx, rax
lea rcx, [0x14004da60]
call fcn.140006f40
nop
lea rcx, [rsp + 0x2a0]
call fcn.140003e90
nop
lea rcx, [rsp + 0x300]
call fcn.140003e90
nop
lea rcx, [rsp + 0x260]
call fcn.140003e90
mov r14, qword [0x14004dae0]
mov qword [rsp + 0x60], r14
mov rax, qword [0x14004dae8]
mov qword [rsp + 0x3c0], rax
cmp r14, rax
je 0x14001889f
movzx edi, byte [rsp + 0x50]
movzx ebx, byte [rsp + 0x50]
movzx esi, byte [rsp + 0x50]
nop word [rax + rax]
mov rcx, qword [r14 + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0x10
jb 0x140018c68
mov rax, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x140018388
mov rax, qword [r14]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x10
lea r9, str.Injecting_dll:_
mov r8, r14
movzx edx, dil
lea rcx, [rsp + 0x260]
call fcn.14000a660
bts r13d, 0x1e
mov r8d, 5
lea rdx, [0x14003a674]
lea rcx, [rsp + 0x260]
call fcn.1400054c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
mov qword [rsp + 0x250], r12
mov qword [rsp + 0x258], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x240], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x250], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r13d, 0x1d
lea rdx, [rsp + 0x240]
lea rcx, [0x14004da60]
call fcn.140006f40
nop
mov r8, qword [rsp + 0x258]
cmp r8, 0xf
jbe 0x140018453
mov rdx, qword [rsp + 0x240]
lea rcx, [rsp + 0x240]
call fcn.14000d490
mov qword [rsp + 0x250], r12
mov qword [rsp + 0x258], 0xf
mov byte [rsp + 0x240], 0
lea rcx, [rsp + 0x260]
call fcn.140003e90
mov qword [rsp + 0x70], r12
lea r8, [rsp + 0x70]
mov rdx, r14
mov rcx, qword [rsp + 0x220]
call fcn.140007c10
mov r15d, eax
test eax, eax
je 0x140018875
mov edx, eax
lea rcx, [rsp + 0x3e0]
call fcn.1400148a0
mov r12, rax
mov edx, r15d
lea rcx, [rsp + 0x3a0]
call fcn.1400079b0
mov r15, rax
mov r14, qword [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rsp + 0x320], xmm0
xor eax, eax
mov qword [rsp + 0x330], rax
mov qword [rsp + 0x338], rax
mov r8d, 0x1a
lea rdx, str.Failed_to_inject_the_dll:
lea rcx, [rsp + 0x320]
call fcn.140001440
nop
mov r8, qword [rsp + 0x60]
lea rdx, [rsp + 0x320]
lea rcx, [rsp + 0x380]
call fcn.140008280
nop
mov r8d, 1
lea rdx, [0x140038f54]
mov rcx, rax
call fcn.1400054c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x280], xmm0
xor ecx, ecx
mov qword [rsp + 0x290], rcx
mov qword [rsp + 0x298], rcx
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x280], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x290], xmm1
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 0xf
mov byte [rax], cl
mov r8, r14
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x360]
call fcn.1400082f0
nop
mov r8d, 1
lea rdx, [0x140038f54]
mov rcx, rax
call fcn.1400054c0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x2e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x2f0], xmm1
xor r14d, r14d
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
mov r9, r15
lea r8, [rsp + 0x2e0]
movzx edx, sil
lea rcx, [rsp + 0x2a0]
call fcn.14000a460
nop
mov r8d, 1
lea rdx, [0x140038f54]
lea rcx, [rsp + 0x2a0]
call fcn.1400054c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
mov qword [rsp + 0x250], r14
mov qword [rsp + 0x258], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x240], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x250], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
mov r8d, 0xd
lea rdx, str.Error_code_
lea rcx, [rsp + 0x240]
call fcn.1400054c0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x260], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x270], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
mov r9, r12
lea r8, [rsp + 0x260]
movzx edx, bl
lea rcx, [rsp + 0x300]
call fcn.14000a460
nop
mov r8d, 1
lea rdx, [0x140038f54]
lea rcx, [rsp + 0x300]
call fcn.1400054c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x2c0], xmm0
xor r12d, r12d
mov qword [rsp + 0x2d0], r12
mov qword [rsp + 0x2d8], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x2c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x2d0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea rcx, [rsp + 0x300]
call fcn.140003e90
nop
lea rcx, [rsp + 0x260]
call fcn.140003e90
nop
mov r8, qword [rsp + 0x258]
cmp r8, 0xf
jbe 0x14001873d
mov rdx, qword [rsp + 0x240]
lea rcx, [rsp + 0x240]
call fcn.14000d490
mov qword [rsp + 0x250], r12
mov qword [rsp + 0x258], 0xf
mov byte [rsp + 0x240], 0
lea rcx, [rsp + 0x2a0]
call fcn.140003e90
nop
mov r8, qword [rsp + 0x2f8]
cmp r8, 0xf
jbe 0x14001878b
mov rdx, qword [rsp + 0x2e0]
lea rcx, [rsp + 0x2e0]
call fcn.14000d490
nop
lea rcx, [rsp + 0x360]
call fcn.140003e90
nop
mov r8, qword [rsp + 0x298]
cmp r8, 0xf
jbe 0x1400187bc
mov rdx, qword [rsp + 0x280]
lea rcx, [rsp + 0x280]
call fcn.14000d490
mov qword [rsp + 0x290], r12
mov qword [rsp + 0x298], 0xf
mov byte [rsp + 0x280], 0
lea rcx, [rsp + 0x380]
call fcn.140003e90
nop
mov r8, qword [rsp + 0x338]
cmp r8, 0xf
jbe 0x140018809
mov rdx, qword [rsp + 0x320]
lea rcx, [rsp + 0x320]
call fcn.14000d490
mov qword [rsp + 0x330], r12
mov qword [rsp + 0x338], 0xf
mov byte [rsp + 0x320], 0
lea rcx, [rsp + 0x3a0]
call fcn.140003e90
nop
lea rcx, [rsp + 0x3e0]
call fcn.140003e90
lea rdx, [rsp + 0x2c0]
lea rcx, [0x14004da60]
call fcn.140006f40
cmp byte [0x14004d9c7], 0
je 0x1400188f4
lea rcx, [rsp + 0x2c0]
call fcn.140003e90
mov r14, qword [rsp + 0x60]
jmp 0x140018888
lea rdx, str.Injected_
lea rcx, [0x14004da60]
call fcn.1400071d0
add r14, 0x20
mov qword [rsp + 0x60], r14
cmp r14, qword [rsp + 0x3c0]
jne 0x140018360
cmp byte [0x14004d9c9], 0
jne 0x14001896f
lea rdx, str.resuming_the_main_thread_of_the_exe
lea rcx, [0x14004da60]
call fcn.1400071d0
cmp dword [0x14004da58], 2
jne 0x1400188e1
mov qword [rsp + 0x3c0], 5
lea rcx, [rsp + 0x3c0]
call fcn.140009bd0
mov rcx, qword [rsp + 0x228]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x140018a98
mov edx, 1
mov rcx, qword [rsp + 0x220]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [rsp + 0x220]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x228]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.14000ee80
call fcn.14000f140
call fcn.14000f3d0
call fcn.14000ea80
lea rcx, [rsp + 0x2c0]
call fcn.14000ea60
mov rdx, rax
mov r9d, 0x10
lea r8, str.ColdClientLoader
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rsp + 0x2c0]
call fcn.140003e90
jmp 0x14001826b
mov edx, dword [rsp + 0x230]
lea rcx, [rsp + 0x3e0]
call fcn.1400148a0
nop
mov r9d, 0x1d
lea r8, str.Attach_a_debugger_now_to_PID
xor edx, edx
mov rcx, rax
call fcn.140011f20
xorps xmm0, xmm0
movups xmmword [rsp + 0x2e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2f0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x2e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x2f0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 0x1b
lea rdx, str._and_resume_its_main_thread
lea rcx, [rsp + 0x2e0]
call fcn.1400054c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x2c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2d0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x2c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x2d0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rsp + 0x2e0]
call fcn.140003e90
nop
lea rcx, [rsp + 0x3e0]
call fcn.140003e90
lea rdx, [rsp + 0x2c0]
lea rcx, [0x14004da60]
call fcn.140006f40
lea rdx, [rsp + 0x2c0]
cmp qword [rsp + 0x2d8], 0xf
cmova rdx, qword [rsp + 0x2c0]
xor r9d, r9d
lea r8, str.ColdClientLoader
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rsp + 0x2c0]
call fcn.140003e90
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x228]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x220]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x228]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rsp + 0x340]
call fcn.1400052a0
nop
lea rcx, [rsp + 0xf0]
call fcn.14000b050
nop
lea rcx, [rsp + 0x200]
call fcn.1400052a0
mov eax, dword [0x14004da58]
cmp eax, 1
jne 0x140018b05
lea rdx, str.Press_OK_when_you_have_finished_playing_to_close_the_loader
jmp 0x140018b1b
cmp eax, 2
jne 0x140018b40
cmp qword [0x14004c190], 0
jne 0x140018b54
lea rdx, str.Start_the_game__then_press_OK_when_you_have_finished_playing_to_close_the_loader
xor r9d, r9d
lea r8, str.Cold_Client_Loader__waiting_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [0x14004da58], 2
jne 0x140018b40
cmp qword [0x14004c190], 0
jne 0x140018b54
call fcn.14000ee80
call fcn.14000f140
call fcn.14000f3d0
call fcn.14000ea80
xor eax, eax
mov rcx, qword [rsp + 0x620]
xor rcx, rsp
call fcn.14001b060
lea r11, [rsp + 0x650]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, 0x16
call fcn.140005220
int3
shr rsi, 0x20
mov ecx, esi
call fcn.140005260
int3
shr rcx, 0x20
call fcn.140005260
nop
call fcn.140020d74
nop
call fcn.140020d74
nop
call fcn.140020d74
nop
call fcn.140020d74
nop
call fcn.140005310
int3
call fcn.1400050c0
int3
call fcn.140020d74
int3
call fcn.140005310
int3
call fcn.140020d74
int3
call fcn.140005310
int3
call fcn.1400050c0
int3
call fcn.140020d74
nop
call fcn.140020d74
nop
call fcn.140005310
int3
call fcn.140005310
int3
call fcn.140005310
int3
call fcn.140005310
int3
call fcn.140005310
int3
call fcn.140005310
nop
call fcn.140020d74
nop
call fcn.140020d74
nop
call fcn.140020d74
nop
call fcn.140005310
nop
call fcn.140020d74
nop
call fcn.140020d74
nop
call fcn.140020d74
nop
call fcn.140005310
nop
call fcn.140005310
nop
call fcn.140005330
int3
call fcn.140005330
int3
call fcn.140005310
nop
call fcn.140005310
int3