Function at 0x4104e0
Capabilities:
Create process on windows
Delete file
Initialize winsock library
Resolve dns

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x404
mov eax, dword [0x5cd480]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push 0xc
call fcn.00534ad4
add esp, 4
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0
je 0x410520
mov ecx, dword [ebp - 0x37c]
call fcn.0040af70
mov dword [ebp - 0x380], eax
jmp 0x41052a
mov dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x380]
mov dword [0x5d6ee0], eax
push str.Steam.exe
lea ecx, [ebp - 0x140]
call fcn.00401550
push str.SteamService.exe
lea ecx, [ebp - 0x128]
call fcn.00401550
push str.steamwebhelper.exe
lea ecx, [ebp - 0x110]
call fcn.00401550
lea ecx, [ebp - 0x375]
call fcn.00401ef0
push eax
lea ecx, [ebp - 0xf8]
push ecx
lea edx, [ebp - 0x140]
push edx
lea ecx, [ebp - 0x404]
call fcn.00412500
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x3b0]
call fcn.00412570
push fcn.00401530
push 3
push 0x18
lea eax, [ebp - 0x140]
push eax
call fcn.00536358
lea ecx, [ebp - 0x3b0]
push ecx
call fcn.004050c0
add esp, 4
lea edx, [ebp - 0x360]
push edx
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
push str.steamgogo.gtx3080ti.cc
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x38c], 0
cmp dword [ebp - 0x384], 0
je 0x410627
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x384]
mov eax, dword [edx + 0xc]
mov ecx, dword [ecx + eax]
mov edx, dword [ecx]
mov dword [ebp - 0x3a4], edx
mov eax, dword [ebp - 0x3a4]
push eax
call dword [sym.imp.WS2_32.dll_inet_ntoa]
mov dword [ebp - 0x38c], eax
jmp 0x410658
push 0
push 0
push 0x5c1928
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x3a0], 0
lea ecx, [ebp - 0x3b0]
call fcn.0040af50
mov eax, dword [ebp - 0x3a0]
jmp 0x410c35
mov ecx, dword [ebp - 0x38c]
push ecx
lea edx, [ebp - 0xf4]
push edx
call fcn.0040a4a0
add esp, 8
push eax
mov ecx, 0x5d7164
call fcn.004056c0
lea ecx, [ebp - 0xf4]
call fcn.00401530
push str.:8888
mov ecx, 0x5d7164
call fcn.00406d10
push 0x5d7164
push str.http:__
lea eax, [ebp - 0xc4]
push eax
call fcn.00412880
add esp, 0xc
push eax
mov ecx, 0x5d7164
call fcn.004056c0
lea ecx, [ebp - 0xc4]
call fcn.00401530
push 0
push 0x5d717c
push str.SteamPath
lea ecx, [ebp - 0xdc]
call fcn.00401550
push eax
push str.SoftwareValveSteam
lea ecx, [ebp - 0xac]
call fcn.00401550
push eax
push reloc.WS2_32.dll_accept
call fcn.00404470
add esp, 0x14
test eax, eax
jge 0x410708
mov dword [ebp - 0x388], 1
jmp 0x410712
mov dword [ebp - 0x388], 0
mov cl, byte [ebp - 0x388]
mov byte [ebp - 0x369], cl
lea ecx, [ebp - 0xac]
call fcn.00401530
lea ecx, [ebp - 0xdc]
call fcn.00401530
movzx edx, byte [ebp - 0x369]
test edx, edx
je 0x410770
push 0
push 0
push 0x5c1994
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x39c], 0
lea ecx, [ebp - 0x3b0]
call fcn.0040af50
mov eax, dword [ebp - 0x39c]
jmp 0x410c35
mov eax, dword [ebp + 0x10]
push eax
lea ecx, [ebp - 0x34]
call fcn.00401550
lea ecx, [ebp - 0x4c]
call fcn.00405750
push 0
push str._cdkey
lea ecx, [ebp - 0x34]
call fcn.00406c80
cmp eax, 0xffffffff
je 0x4107d7
lea ecx, [ebp - 0x34]
call fcn.004015e0
push eax
push 0
push str._appid
lea ecx, [ebp - 0x34]
call fcn.00406c80
add eax, 8
push eax
lea ecx, [ebp - 0x94]
push ecx
lea ecx, [ebp - 0x34]
call fcn.00406c30
push eax
lea ecx, [ebp - 0x4c]
call fcn.004056c0
lea ecx, [ebp - 0x94]
call fcn.00401530
lea ecx, [ebp - 0x4c]
call fcn.004015e0
test eax, eax
jbe 0x4109cd
mov ecx, 0x5d7140
call fcn.00401ef0
mov dword [ebp - 0x370], eax
mov byte [ebp - 0x361], 1
lea ecx, [ebp - 0x368]
call fcn.00410c50
lea edx, [ebp - 0x3ec]
push edx
mov ecx, dword [ebp - 0x370]
call fcn.0040d530
mov eax, dword [eax]
mov dword [ebp - 0x368], eax
jmp 0x410839
push 0
lea ecx, [ebp - 0x3e8]
push ecx
lea ecx, [ebp - 0x368]
call fcn.004124d0
lea edx, [ebp - 0x3e4]
push edx
mov ecx, dword [ebp - 0x370]
call fcn.0040d4f0
push eax
lea ecx, [ebp - 0x368]
call fcn.0040d460
movzx eax, al
test eax, eax
je 0x41094c
lea ecx, [ebp - 0x188]
call fcn.0040cad0
lea ecx, [ebp - 0x188]
push ecx
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x3e0], esp
lea ecx, [ebp - 0x368]
call fcn.004124b0
add eax, 0x18
push eax
mov ecx, esi
call fcn.00405790
call fcn.005e548c
add esp, 0x1c
mov byte [ebp - 0x36a], al
movzx edx, byte [ebp - 0x36a]
test edx, edx
jne 0x41090d
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x398], eax
mov ecx, dword [ebp - 0x398]
push ecx
lea edx, [ebp - 0x3dc]
push edx
mov ecx, dword [ebp - 0x370]
call fcn.0040d570
mov eax, dword [eax]
mov dword [ebp - 0x368], eax
lea ecx, [ebp - 0x3f0]
push ecx
mov ecx, dword [ebp - 0x370]
call fcn.0040d4f0
push eax
lea ecx, [ebp - 0x368]
call fcn.0040d940
movzx edx, al
test edx, edx
je 0x41090d
lea ecx, [ebp - 0x188]
call fcn.0040cb00
jmp 0x41094c
lea ecx, [ebp - 0x368]
call fcn.004124b0
add eax, 0x18
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040d890
test eax, eax
jne 0x41093c
mov byte [ebp - 0x361], 0
lea ecx, [ebp - 0x188]
call fcn.0040cb00
jmp 0x41094c
lea ecx, [ebp - 0x188]
call fcn.0040cb00
jmp 0x410825
movzx eax, byte [ebp - 0x361]
test eax, eax
je 0x4109cd
lea ecx, [ebp - 0x1d0]
call fcn.0040cad0
lea ecx, [ebp - 0x1d0]
push ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c0], esp
lea edx, [ebp - 0x4c]
push edx
call fcn.00405790
call fcn.005e548c
add esp, 0x1c
mov byte [ebp - 0x36b], al
movzx eax, byte [ebp - 0x36b]
cmp eax, 1
jne 0x4109c2
sub esp, 0x48
mov ecx, esp
mov dword [ebp - 0x3c4], esp
lea edx, [ebp - 0x1d0]
push edx
call fcn.0040e020
mov ecx, 0x5d7140
call fcn.0040cee0
mov ecx, 0x5d7140
call fcn.0040cfb0
lea ecx, [ebp - 0x1d0]
call fcn.0040cb00
push 0x64
push 0x5d6ee8
push 0x67
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x64
push 0x5d7078
push 0x68
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x64
push 0x5d6e18
push 0x6d
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_LoadStringW]
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004112d0
add esp, 0x10
mov ecx, 0x5d7140
call fcn.00401ef0
mov dword [ebp - 0x3c8], eax
lea ecx, [ebp - 0x3fc]
push ecx
mov ecx, 0x5d7140
call fcn.0040cb30
push eax
mov ecx, dword [0x5d6ee0]
call fcn.004125e0
lea ecx, [ebp - 0x3fc]
call fcn.0040b0a0
mov ecx, dword [0x5d6ee0]
call fcn.004053b0
test eax, eax
jbe 0x410c1a
lea ecx, [ebp - 0x3bc]
call fcn.0040af70
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3cc], esp
push str..dll
call fcn.00401550
push 0
lea edx, [ebp - 0x3bc]
push edx
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x3d0], esp
push 0
push eax
call fcn.004065a0
add esp, 8
call fcn.00406940
add esp, 0x38
lea ecx, [ebp - 0x3bc]
mov dword [ebp - 0x390], ecx
mov ecx, dword [ebp - 0x390]
call fcn.00405400
mov dword [ebp - 0x374], eax
mov ecx, dword [ebp - 0x390]
call fcn.004053e0
mov dword [ebp - 0x394], eax
jmp 0x410aef
mov edx, dword [ebp - 0x374]
add edx, 0x18
mov dword [ebp - 0x374], edx
mov eax, dword [ebp - 0x374]
cmp eax, dword [ebp - 0x394]
je 0x410bad
mov ecx, dword [ebp - 0x374]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.00405790
mov byte [ebp - 0x36c], 0
lea edx, [ebp - 0x36c]
push edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3d4], esp
lea eax, [ebp - 0x1c]
push eax
call fcn.00405790
lea ecx, [ebp - 0x64]
push ecx
call fcn.00404c20
add esp, 0x20
push 0
push str.Steamtools
lea ecx, [ebp - 0x64]
call fcn.00406c80
cmp eax, 0xffffffff
je 0x410b61
lea ecx, [ebp - 0x1c]
call fcn.00405680
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
push str.version.dll
lea ecx, [ebp - 0x1c]
call fcn.00406c80
cmp eax, 0xffffffff
jne 0x410b89
push 0
push str.hid.dll
lea ecx, [ebp - 0x1c]
call fcn.00406c80
cmp eax, 0xffffffff
je 0x410b98
lea ecx, [ebp - 0x1c]
call fcn.00405680
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x64]
call fcn.00401530
lea ecx, [ebp - 0x1c]
call fcn.00401530
jmp 0x410ae0
call fcn.005f340e
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x3d8], esp
mov edx, dword [0x5d6ee0]
push edx
call fcn.0040d790
call fcn.005ecf88
add esp, 0xc
call fcn.00411275
push 1
push 0
push 0
push str._steam.exe
push 0x5d717c
lea eax, [ebp - 0x7c]
push eax
call fcn.00407b50
add esp, 0xc
mov ecx, eax
call fcn.00405680
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x7c]
call fcn.00401530
lea ecx, [ebp - 0x3bc]
call fcn.0040af50
lea ecx, [ebp - 0x4c]
call fcn.00401530
lea ecx, [ebp - 0x34]
call fcn.00401530
lea ecx, [ebp - 0x3b0]
call fcn.0040af50
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00535cb4
mov esp, ebp
pop ebp
ret 0x10