Function at 0x40cac0
Capabilities:
Accept command line arguments
Create process on windows
Create thread
Delete file
Set environment variable
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x440d30
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x320
mov eax, dword [0x45c040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [0x45eb64]
mov ecx, esi
push 0x45f8cc
call dword [0x442244]
call esi
movzx ecx, word [0x45f8cc]
add esp, 4
mov dword [0x45eb60], eax
push ecx
push eax
mov eax, dword [ebx + 4]
mov esi, dword [0x45f650]
mov ecx, esi
push eax
call dword [0x442244]
call esi
mov esi, dword [0x45f628]
add esp, 0xc
mov ecx, esi
push 0
push str.CLIENTENGINE_INTERFACE_VERSION005
call dword [0x442244]
call esi
movzx ecx, word [0x45f8cc]
add esp, 8
mov esi, dword [0x45f650]
mov dword [0x45f640], eax
push ecx
push dword [0x45eb60]
mov ecx, esi
push eax
call dword [0x442244]
call esi
add esp, 0xc
cmp dword [0x45f640], 0
jne 0x40cbc8
push str.Unable_to_get_IClientEngine__n
mov ecx, 0xc
call fcn.00414e80
add esp, 4
movzx eax, word [0x45f8cc]
push 1
push eax
push dword [0x45eb60]
mov eax, dword [ebx + 4]
mov esi, dword [0x45edc4]
mov ecx, esi
push eax
call dword [0x442244]
call esi
add esp, 0x10
xor al, al
jmp 0x40ecd9
push str.IClientEngine_Found__n
call fcn.00403aa0
mov edi, dword [0x45f640]
add esp, 4
mov eax, dword [edi]
push 0x45eb7c
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
mov edi, dword [0x45f640]
push eax
push dword [0x45eb7c]
mov dword [0x45f410], eax
mov edx, dword [edi]
mov esi, dword [edx + 0x1c]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
test al, al
jne 0x40cc25
push str.Invalid_User_or_Pipe__n
nop dword [eax]
jmp 0x40cb8d
push dword [0x45eb7c]
push dword [0x45f410]
push str.Valid_User_and_Pipe______d______d_n
call fcn.00403aa0
mov edi, dword [0x45f640]
add esp, 0xc
mov eax, dword [edi]
push dword [0x45eb7c]
push dword [0x45f410]
mov esi, dword [eax + 0x20]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
movzx ecx, word [0x45f8cc]
mov esi, dword [0x45f650]
push ecx
push dword [0x45eb60]
mov ecx, esi
mov dword [0x45f62c], eax
push eax
call dword [0x442244]
call esi
add esp, 0xc
cmp dword [0x45f62c], 0
jne 0x40cc9e
push str.Unable_to_get_IClientUser__n
jmp 0x40cb8d
push str.IClientUser_Found__n
call fcn.00403aa0
mov edi, dword [0x45f640]
add esp, 4
mov eax, dword [edi]
push dword [0x45eb7c]
push dword [0x45f410]
mov esi, dword [eax + 0x44]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
movzx ecx, word [0x45f8cc]
mov esi, dword [0x45f650]
push ecx
push dword [0x45eb60]
mov ecx, esi
mov dword [0x45f414], eax
push eax
call dword [0x442244]
call esi
add esp, 0xc
cmp dword [0x45f414], 0
jne 0x40cd08
push str.Unable_to_get_IClientApps__n
jmp 0x40cb8d
push str.IClientApps_Found__n
call fcn.00403aa0
mov edi, dword [0x45f640]
add esp, 4
mov eax, dword [edi]
push dword [0x45eb7c]
push dword [0x45f410]
mov esi, dword [eax + 0xb0]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
movzx ecx, word [0x45f8cc]
mov esi, dword [0x45f650]
push ecx
push dword [0x45eb60]
mov ecx, esi
mov dword [0x45eafc], eax
push eax
call dword [0x442244]
call esi
add esp, 0xc
cmp dword [0x45eafc], 0
jne 0x40cd75
push str.Unable_to_get_IClientAppManager__n
jmp 0x40cb8d
push str.IClientAppManager_Found__n
call fcn.00403aa0
mov edi, dword [0x45f640]
add esp, 4
mov eax, dword [edi]
push dword [0x45eb7c]
push dword [0x45f410]
mov esi, dword [eax + 0x34]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
movzx ecx, word [0x45f8cc]
mov esi, dword [0x45f650]
push ecx
push dword [0x45eb60]
mov ecx, esi
mov dword [0x45eb68], eax
push eax
call dword [0x442244]
call esi
add esp, 0xc
cmp dword [0x45eb68], 0
jne 0x40cde5
push str.Unable_to_get_IClientFriends__n
nop
jmp 0x40cb8d
push str.IClientFriends_Found__n
call fcn.00403aa0
mov edi, dword [0x45f640]
add esp, 4
mov eax, dword [edi]
push dword [0x45eb7c]
mov esi, dword [eax + 0x38]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
movzx ecx, word [0x45f8cc]
mov esi, dword [0x45f650]
push ecx
push dword [0x45eb60]
mov ecx, esi
mov dword [0x45f6a8], eax
push eax
call dword [0x442244]
call esi
add esp, 0xc
cmp dword [0x45f6a8], 0
jne 0x40ce49
push str.Unable_to_get_IClientUtils__n
jmp 0x40cb8d
push str.IClientUtils_Found__n
call fcn.00403aa0
mov edi, dword [0x45f640]
add esp, 4
mov eax, dword [edi]
push dword [0x45eb7c]
push dword [0x45f410]
mov esi, dword [eax + 0x64]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
movzx ecx, word [0x45f8cc]
mov esi, dword [0x45f650]
push ecx
push dword [0x45eb60]
mov ecx, esi
mov dword [0x45edd8], eax
push eax
call dword [0x442244]
call esi
add esp, 0xc
cmp dword [0x45edd8], 0
jne 0x40ceb3
push str.Unable_to_get_IClientRemoteStorage__n
jmp 0x40cb8d
push str.IClientRemoteStorage_Found__n
call fcn.00403aa0
mov edi, dword [0x45f640]
add esp, 4
mov eax, dword [edi]
push dword [0x45eb7c]
push dword [0x45f410]
mov esi, dword [eax + 0x90]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
movzx ecx, word [0x45f8cc]
mov esi, dword [0x45f650]
push ecx
push dword [0x45eb60]
mov ecx, esi
mov dword [0x45f694], eax
push eax
call dword [0x442244]
call esi
add esp, 0xc
cmp dword [0x45f694], 0
jne 0x40cf25
push str.Unable_to_get_IClientDepotBuilder__n
nop
jmp 0x40cb8d
push str.IClientDepotBuilder_Found__n
call fcn.00403aa0
mov edi, dword [0x45f640]
add esp, 4
mov eax, dword [edi]
push dword [0x45eb7c]
push dword [0x45f410]
mov esi, dword [eax + 0x3c]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
movzx ecx, word [0x45f8cc]
mov esi, dword [0x45f650]
push ecx
push dword [0x45eb60]
mov ecx, esi
mov dword [0x45e7bc], eax
push eax
call dword [0x442244]
call esi
add esp, 0xc
cmp dword [0x45e7bc], 0
jne 0x40cf8f
push str.Unable_to_get_IClientBilling__n
jmp 0x40cb8d
push str.IClientBilling_Found__n
call fcn.00403aa0
xor al, al
add esp, 4
xor edi, edi
mov byte [ebp - 0x2cd], al
mov dword [ebp - 0x2d8], edi
nop dword [eax]
mov byte [0x45eb5d], 0
mov byte [0x45ede2], 0
nop
test al, al
jne 0x40d04c
push 0x810
call fcn.0041b556
add esp, 4
mov edi, eax
mov dword [ebp - 0x2d8], edi
mov dword [ebp - 0x2d4], edi
push 0x810
push 0
push edi
call fcn.0041f350
add esp, 0xc
mov dword [edi], 0
lea eax, [edi + 0xc]
mov dword [edi + 4], 0
mov dword [edi + 8], 0
push 0x400
push 0
push eax
call fcn.00440bb0
add esp, 0xc
lea eax, [edi + 0x40c]
push 0x400
push 0
push eax
call fcn.00440bb0
add esp, 0xc
mov byte [edi + 0x80c], 1
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
mov ecx, edi
call fcn.00401660
mov byte [ebp - 0x2cd], 1
cmp byte [edi + 0x80c], 0
jne 0x40d072
push str.CommandlineLib_is_not_initialized___5__r_n
call fcn.00407f00
add esp, 4
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
int3
mov esi, 1
cmp dword [edi + 8], esi
jle 0x40d0ad
add edi, 0x10
nop
mov eax, dword [edi]
test eax, eax
je 0x40d09c
push eax
push str._Username
call fcn.0042251d
add esp, 8
test eax, eax
je 0x40d1f9
mov eax, dword [ebp - 0x2d8]
inc esi
add edi, 4
cmp esi, dword [eax + 8]
jl 0x40d080
mov edi, eax
mov ecx, edi
mov dword [ebp - 4], 0
call fcn.00401b00
mov ecx, dword [edi]
mov byte [edi + 0x80c], 0
test ecx, ecx
je 0x40d0f5
mov eax, dword [edi + 4]
test eax, eax
je 0x40d0f5
add eax, eax
push eax
push 0
push ecx
call fcn.00440bb0
add esp, 0xc
push dword [edi]
call fcn.0041b33a
add esp, 4
mov dword [edi], 0
mov dword [edi + 4], 0
push 0x810
push edi
mov dword [ebp - 4], 0xffffffff
call fcn.0041b836
mov eax, dword [0x45eb14]
add esp, 8
xor dl, dl
mov byte [ebp - 0x2cd], dl
test eax, eax
jne 0x40d36f
push eax
push eax
push dword [0x45e598]
push 0x40c8a0
push eax
push eax
call fcn.0042954c
mov esi, eax
add esp, 0x18
test esi, esi
je 0x40d365
push 0xffffffffffffffff
xorps xmm0, xmm0
push esi
movlpd qword [0x45e598], xmm0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.004154b0
push 0
mov edx, 0xc
call fcn.00414c60
add esp, 4
mov ecx, 7
call fcn.00414de0
cmp byte [0x45ede2], 1
jne 0x40d2ec
call fcn.00414ec0
push 0x208
lea eax, [ebp - 0x240]
push 0
push eax
call fcn.0041f350
add esp, 0xc
lea eax, [ebp - 0x240]
push 0x45e8f0
push str._sCredentialsNew.ini
push 0xffffffffffffffff
push 0x104
push eax
call fcn.00401640
add esp, 0x14
lea eax, [ebp - 0x240]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
nop word [eax + eax]
test eax, eax
je 0x40d2b6
push 0x40
push str.SteamLite
push str.Successfully_deleted_the_saved_Steam_credentials_
jmp 0x40d2c2
mov edi, dword ds:[ebp - 0x2d8]
test esi, esi
je 0x40d0ad
cmp byte [edi + 0x80c], 0
mov dword [0x45eb14], 1
jne 0x40d238
push str.CommandlineLib_is_not_initialized___5__r_n
call fcn.00407f00
add esp, 4
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
int3
mov esi, 1
cmp dword [edi + 8], esi
jle 0x40d273
add edi, 0x10
mov eax, dword [edi]
test eax, eax
je 0x40d264
push eax
push str._Password
call fcn.0042251d
add esp, 8
test eax, eax
je 0x40d295
mov eax, dword [ebp - 0x2d8]
inc esi
add edi, 4
cmp esi, dword [eax + 8]
jl 0x40d248
mov edi, dword [ebp - 0x2d8]
mov eax, 3
mov dl, byte [ebp - 0x2cd]
mov dword [0x45eb14], eax
mov byte [0x45e594], 1
jmp 0x40d117
test esi, esi
je 0x40d273
mov eax, dword [0x45eb14]
mov edi, dword [ebp - 0x2d8]
mov dl, byte [ebp - 0x2cd]
mov byte [0x45e594], 1
jmp 0x40d117
push 0x10
push str.SteamLite
push str.Failed_to_delete_the_saved_Steam_credentials_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
mov dword [0x45e598], 1
mov word [0x45f40c], ax
mov dword [0x45e59c], eax
mov al, byte [ebp - 0x2cd]
jmp 0x40cfb0
cmp byte [0x45e34f], 1
je 0x40d355
cmp byte [0x45eb5d], 1
jne 0x40d320
nop
call fcn.00414ec0
push 1
push 0
push 0
push str.https:__store.steampowered.com_join_
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x40d2ca
mov ecx, dword [ebp - 0x2f8]
mov dword [ebp - 0x2e8], ecx
mov ecx, dword [ebp - 0x300]
mov dword [ebp - 0x2ec], ecx
mov ecx, dword [ebp - 0x308]
mov dword [ebp - 0x2f0], ecx
mov ecx, dword [ebp - 0x310]
mov dword [ebp - 0x2f4], ecx
jmp 0x40e021
xor dl, dl
mov cl, 1
call fcn.004097c0
nop
jmp 0x40cb9a
push str._nFailed_to_create_login_menu__n
jmp 0x40cb8d
mov ecx, dword [ebp - 0x2f8]
mov dword [ebp - 0x2e8], ecx
mov ecx, dword [ebp - 0x300]
mov dword [ebp - 0x2ec], ecx
mov ecx, dword [ebp - 0x308]
mov dword [ebp - 0x2f0], ecx
mov ecx, dword [ebp - 0x310]
mov dword [ebp - 0x2f4], ecx
cmp byte [0x45e594], 1
jne 0x40d786
test dl, dl
jne 0x40d433
push 0x810
call fcn.0041b556
add esp, 4
mov edi, eax
mov dword [ebp - 0x2d8], edi
mov dword [ebp - 0x2d4], edi
push 0x810
push 0
push edi
call fcn.0041f350
add esp, 0xc
mov dword [edi], 0
lea eax, [edi + 0xc]
mov dword [edi + 4], 0
mov dword [edi + 8], 0
push 0x400
push 0
push eax
call fcn.00440bb0
add esp, 0xc
lea eax, [edi + 0x40c]
push 0x400
push 0
push eax
call fcn.00440bb0
add esp, 0xc
mov byte [edi + 0x80c], 1
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
mov ecx, edi
call fcn.00401660
push ecx
push str._Username
mov ecx, edi
call fcn.00401ba0
mov edi, eax
test edi, edi
je 0x40e6b5
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push edi
push 0x80
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov esi, eax
test esi, esi
je 0x40e69e
push esi
call fcn.0041b33f
add esp, 4
mov dword [ebp - 0x2e0], eax
push esi
push 0
push eax
call fcn.0041f350
add esp, 0xc
push 0
push 0
push esi
push dword [ebp - 0x2e0]
push 0xffffffffffffffff
push edi
push 0x80
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [0x45eb14]
cmp eax, 1
jne 0x40d645
mov esi, dword [ebp - 0x2d8]
push ecx
push str._Password
mov ecx, esi
call fcn.00401ba0
mov edi, eax
test edi, edi
je 0x40e614
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push edi
push 0x80
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword ds:[ebp - 0x2dc], eax
test eax, eax
je 0x40e5fc
push eax
call fcn.0041b33f
add esp, 4
mov esi, eax
mov dword [ebp - 0x2d4], esi
push dword [ebp - 0x2dc]
push 0
push esi
call fcn.0041f350
add esp, 0xc
push 0
push 0
push dword [ebp - 0x2dc]
push esi
push 0xffffffffffffffff
push edi
push 0x80
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movzx eax, word [0x45f8cc]
mov esi, dword [0x45edc4]
mov ecx, esi
push 0
push eax
push dword [0x45eb60]
push dword [0x45f62c]
call dword [0x442244]
call esi
mov edi, dword [0x45f62c]
add esp, 0x10
mov eax, dword [edi]
push dword [ebp - 0x2e0]
mov esi, dword [eax + 0xc4]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
mov edi, dword [0x45f62c]
cmp al, 1
sete al
movzx eax, al
mov ecx, dword [edi]
push eax
push dword [ebp - 0x2d4]
mov esi, dword [ecx + 0xd8]
mov ecx, esi
push dword [ebp - 0x2e0]
call dword [0x442244]
mov ecx, edi
call esi
mov eax, dword [ebp - 0x2e8]
mov edi, dword [0x45f62c]
and eax, 0xff0fffff
mov dword [ebp - 0x2f8], eax
mov byte [ebp - 0x2f5], 0
and dword [ebp - 0x2f8], 0xfff00000
mov eax, dword [edi]
mov byte [ebp - 0x2f5], 1
mov ecx, dword [ebp - 0x2f8]
and ecx, 0xff100001
mov esi, dword [eax + 4]
or ecx, 0x100001
push ecx
mov dword [ebp - 0x2e8], ecx
mov ecx, esi
push 0
call dword [0x442244]
mov ecx, edi
call esi
push dword [ebp - 0x2dc]
mov esi, dword [ebp - 0x2d4]
push 0
push esi
call fcn.00440bb0
add esp, 0xc
push esi
call fcn.0041b33a
add esp, 4
jmp 0x40d705
cmp eax, 3
jne 0x40d705
movzx eax, word [0x45f8cc]
mov esi, dword [0x45edc4]
mov ecx, esi
push 0
push eax
push dword [0x45eb60]
push dword [0x45f62c]
call dword [0x442244]
call esi
mov edi, dword [0x45f62c]
add esp, 0x10
mov eax, dword [edi]
push dword [ebp - 0x2e0]
mov esi, dword [eax + 0xc4]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
cmp al, 1
jne 0x40e628
mov edi, dword [0x45f62c]
push 1
push dword [ebp - 0x2e0]
mov eax, dword [edi]
mov esi, dword [eax + 0xc8]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
mov edi, dword [0x45f62c]
mov eax, dword ds:[edi]
mov ecx, dword [eax + 4]
mov esi, dword [eax + 0x28]
lea eax, [ebp - 0x32c]
mov dword [ebp - 0x2d4], ecx
mov ecx, esi
push eax
call dword [0x442244]
mov ecx, edi
call esi
mov esi, dword [ebp - 0x2d4]
mov ecx, esi
push dword [eax + 4]
push dword [eax]
call dword [0x442244]
mov ecx, dword [0x45f62c]
call esi
push dword [ebp - 0x2e0]
call fcn.0041b33a
mov esi, dword [ebp - 0x2d8]
add esp, 4
test esi, esi
je 0x40d779
mov ecx, esi
mov dword [ebp - 4], 6
call fcn.00401b00
mov ecx, dword [esi]
mov byte [esi + 0x80c], 0
test ecx, ecx
je 0x40d764
mov eax, dword [esi + 4]
test eax, eax
je 0x40d764
add eax, eax
push eax
push 0
push ecx
call fcn.00440bb0
add esp, 0xc
push dword [esi]
call fcn.0041b33a
add esp, 4
mov dword [esi], 0
mov dword [esi + 4], 0
push 0x810
push esi
mov dword [ebp - 4], 0xffffffff
call fcn.0041b836
add esp, 8
xor al, al
mov byte [ebp - 0x2cd], al
jmp 0x40db97
cmp eax, 1
jne 0x40da0c
push 0x202
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, eax
mov dword [ebp - 0x2dc], edi
test edi, edi
je 0x40e798
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapSize]
push 0x101
mov dword [ebp - 0x2d4], eax
call fcn.0041b33f
add esp, 4
mov esi, eax
push 0x101
push 0
push esi
call fcn.0041f350
add esp, 0xc
mov dword [0x45f698], esi
cmp byte [0x45eb1d], 0
jne 0x40d8aa
push 0
push 0x40b9e0
push 0
push 0x71
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov esi, eax
test esi, esi
je 0x40e72f
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x244], 0
push 0
lea eax, [ebp - 0x25c]
movq qword [ebp - 0x24c], xmm0
push eax
movups xmmword [ebp - 0x25c], xmm0
call dword [sym.imp.USER32.dll_GetMessageA]
nop
test eax, eax
je 0x40d8aa
lea eax, [ebp - 0x25c]
push eax
push esi
call dword [sym.imp.USER32.dll_IsDialogMessageA]
test eax, eax
jne 0x40d893
lea eax, ds:[ebp - 0x25c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x25c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 0
push 0
push 0
lea eax, [ebp - 0x25c]
push eax
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x40d864
mov ecx, edi
call fcn.004089e0
mov byte [ebp - 0x2e1], al
cmp al, 1
jne 0x40d99d
movzx ecx, word [0x45f8cc]
mov esi, dword [0x45edc4]
push 0
push ecx
push dword [0x45eb60]
mov ecx, esi
push dword [0x45f62c]
call dword [0x442244]
call esi
mov edi, dword [0x45f62c]
add esp, 0x10
mov eax, dword [edi]
push dword [ebp - 0x2dc]
mov esi, dword [eax + 0xc4]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
mov ecx, dword [ebp - 0x2dc]
cmp al, 1
mov edi, dword [0x45f62c]
sete al
movzx eax, al
push eax
mov esi, dword [edi]
lea eax, [ecx + 0x101]
push eax
push ecx
mov esi, dword [esi + 0xd8]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
mov eax, dword [ebp - 0x2ec]
mov edi, dword [0x45f62c]
and eax, 0xff0fffff
mov dword [ebp - 0x300], eax
mov byte [ebp - 0x2fd], 0
and dword [ebp - 0x300], 0xfff00000
mov eax, dword [edi]
mov byte [ebp - 0x2fd], 1
mov ecx, dword [ebp - 0x300]
and ecx, 0xff100001
mov esi, dword [eax + 4]
or ecx, 0x100001
push ecx
mov dword [ebp - 0x2ec], ecx
mov ecx, esi
push 0
call dword [0x442244]
mov ecx, edi
call esi
mov edi, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x2d4]
cmp eax, 0xffffffff
je 0x40d9b8
test eax, eax
je 0x40d9b8
push eax
push 0
push edi
call fcn.00440bb0
add esp, 0xc
push 0x101
push 0
push dword [0x45f698]
call fcn.00440bb0
add esp, 0xc
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov esi, dword [0x45f698]
push esi
call fcn.0041b33a
add esp, 4
test esi, esi
je 0x40d9fa
mov dword [0x45f698], 0x8123
cmp byte [ebp - 0x2e1], 0
je 0x40e694
jmp 0x40db97
cmp eax, 2
jne 0x40db97
push 0x101
call fcn.0041b33f
add esp, 4
mov esi, eax
push 0x101
push 0
push esi
call fcn.0041f350
add esp, 0xc
mov dword [0x45eb4c], esi
push 0
push 0x40bb80
push 0
push 0x72
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov esi, eax
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x260], 0
push 0
lea eax, [ebp - 0x278]
movq qword [ebp - 0x268], xmm0
push eax
movups xmmword [ebp - 0x278], xmm0
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x40dad5
lea eax, [ebp - 0x278]
push eax
push esi
call dword [sym.imp.USER32.dll_IsDialogMessageA]
nop
test eax, eax
jne 0x40dabe
lea eax, [ebp - 0x278]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x278]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 0
push 0
push 0
lea eax, [ebp - 0x278]
push eax
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x40da90
mov edi, dword [0x45f62c]
push dword [0x45eb4c]
mov eax, dword [edi]
mov esi, dword [eax + 0xc4]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
cmp al, 1
jne 0x40e7a5
mov edi, dword [0x45f62c]
push 1
push dword [0x45eb4c]
mov eax, dword [edi]
mov esi, dword [eax + 0xc8]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
mov edi, dword [0x45f62c]
mov eax, dword ds:[edi]
mov ecx, dword [eax + 4]
mov esi, dword [eax + 0x28]
lea eax, [ebp - 0x324]
mov dword [ebp - 0x2d4], ecx
mov ecx, esi
push eax
call dword [0x442244]
mov ecx, edi
call esi
mov esi, dword [ebp - 0x2d4]
mov ecx, esi
push dword [eax + 4]
push dword [eax]
call dword [0x442244]
mov ecx, dword [0x45f62c]
call esi
push 0x101
push 0
push dword [0x45eb4c]
call fcn.00440bb0
mov esi, dword [0x45eb4c]
add esp, 0xc
push esi
call fcn.0041b33a
add esp, 4
test esi, esi
je 0x40db97
mov dword [0x45eb4c], 0x8123
movzx eax, word [0x45f630]
xorps xmm0, xmm0
mov esi, dword [0x45edc4]
mov ecx, esi
push 0
push eax
push dword [0x45f65c]
movups xmmword [ebp - 0x2cc], xmm0
push dword [0x45e360]
call dword [0x442244]
call esi
movzx eax, word [0x45f630]
add esp, 0x10
mov esi, dword [0x45edc4]
mov ecx, esi
push 0
push eax
push dword [0x45f65c]
push dword [0x45e584]
call dword [0x442244]
call esi
add esp, 0x10
nop dword [eax]
nop dword [eax + eax]
mov esi, dword [0x45e360]
lea eax, [ebp - 0x2cc]
push eax
push dword [0x45eb7c]
mov ecx, esi
call dword [0x442244]
call esi
add esp, 8
test al, al
je 0x40dfb3
nop dword [eax + eax]
mov eax, dword [ebp - 0x2c8]
cmp eax, 0x65
je 0x40eb4d
nop
cmp eax, 0x66
jne 0x40df6a
mov esi, dword [ebp - 0x2c4]
mov eax, dword [esi]
cmp eax, 0x3f
jne 0x40ddd2
push str._nSteam_Guard_has_rejected_the_connection._An_access_code_has_been_sent_to_your_email_address._n
nop
call fcn.00403aa0
add esp, 4
push 0
push 0x40b880
push 0
push 0x70
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov esi, eax
test esi, esi
je 0x40e7ef
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x27c], 0
push 0
lea eax, [ebp - 0x294]
movq qword [ebp - 0x284], xmm0
push eax
movups xmmword [ebp - 0x294], xmm0
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x40dd15
nop word [eax + eax]
lea eax, [ebp - 0x294]
push eax
push esi
call dword [sym.imp.USER32.dll_IsDialogMessageA]
nop
test eax, eax
jne 0x40dcfe
lea eax, [ebp - 0x294]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x294]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 0
push 0
push 0
lea eax, [ebp - 0x294]
push eax
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x40dcd0
mov ecx, 0x45eb8c
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40dd20
sub ecx, edx
je 0x40e7e5
call fcn.004154b0
movzx eax, word [0x45f8cc]
mov esi, dword [0x45edc4]
mov ecx, esi
push 0
push eax
push dword [0x45eb60]
push dword [0x45f62c]
call dword [0x442244]
call esi
mov edi, dword [0x45f62c]
add esp, 0x10
mov eax, dword [edi]
push 0
push 0x45eb8c
mov esi, dword [eax + 0x2b8]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
push 0xa
push 0
push 0x45eb8c
call fcn.00440bb0
mov eax, dword [ebp - 0x2f0]
and eax, 0xff0fffff
mov dword [ebp - 0x308], eax
mov byte [ebp - 0x305], 0
and dword [ebp - 0x308], 0xfff00000
mov byte [ebp - 0x305], 1
mov ecx, dword [ebp - 0x308]
and ecx, 0xff100001
or ecx, 0x100001
mov dword [ebp - 0x2f0], ecx
jmp 0x40df4b
cmp eax, 0x55
jne 0x40dfc5
push str._nSteam_Guard_key_required_from_mobile_authenticator_n
call fcn.00403aa0
add esp, 4
push 0
push 0x40b880
push 0
push 0x70
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov esi, eax
test esi, esi
je 0x40e7ef
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x298], 0
push 0
lea eax, [ebp - 0x2b0]
movq qword [ebp - 0x2a0], xmm0
push eax
movups xmmword [ebp - 0x2b0], xmm0
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x40de95
nop word [eax + eax]
lea eax, [ebp - 0x2b0]
push eax
push esi
call dword [sym.imp.USER32.dll_IsDialogMessageA]
nop
test eax, eax
jne 0x40de7e
lea eax, [ebp - 0x2b0]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x2b0]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 0
push 0
push 0
lea eax, [ebp - 0x2b0]
push eax
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x40de50
mov eax, 0x45eb8c
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40dea0
sub eax, edx
je 0x40e7e5
call fcn.004154b0
movzx eax, word [0x45f8cc]
mov esi, dword [0x45edc4]
mov ecx, esi
push 0
push eax
push dword [0x45eb60]
push dword [0x45f62c]
call dword [0x442244]
call esi
mov edi, dword [0x45f62c]
add esp, 0x10
mov eax, dword [edi]
push 0x45eb8c
mov esi, dword [eax + 0xdc]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
push 0xa
push 0
push 0x45eb8c
call fcn.00440bb0
mov eax, dword [ebp - 0x2f4]
and eax, 0xff0fffff
mov dword [ebp - 0x310], eax
mov byte [ebp - 0x30d], 0
and dword [ebp - 0x310], 0xfff00000
mov byte [ebp - 0x30d], 1
mov ecx, dword [ebp - 0x310]
and ecx, 0xff100001
or ecx, 0x100001
mov dword [ebp - 0x2f4], ecx
mov edi, dword [0x45f62c]
add esp, 0xc
mov eax, dword [edi]
push ecx
push 0
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
push dword [0x45eb7c]
mov esi, dword [0x45e584]
mov ecx, esi
call dword [0x442244]
nop
call esi
mov esi, dword [0x45e360]
lea eax, ds:[ebp - 0x2cc]
add esp, 4
mov ecx, esi
push eax
push dword [0x45eb7c]
call dword [0x442244]
call esi
add esp, 8
test al, al
jne 0x40dc30
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
nop dword [eax + eax]
jmp 0x40dc00
cmp eax, 0x41
je 0x40eb1f
cmp eax, 0x58
je 0x40eb1f
mov ecx, 0xc
cmp eax, 5
jne 0x40eaf9
cmp dword [0x45eb14], 0
push str._nIncorrect_Password__n
jne 0x40eb29
nop dword [eax + eax]
call fcn.00414e80
mov esi, dword [0x45e584]
add esp, 4
mov ecx, esi
push dword [0x45eb7c]
call dword [0x442244]
call esi
add esp, 4
mov eax, dword [0x45eb14]
test eax, eax
jne 0x40e5eb
cmp dword [0x45e370], eax
jne 0x40e25c
push eax
push dword [0x45eb48]
mov edx, str.ImmDisableIME
mov ecx, str.Imm32.dll
push eax
push 0x45f684
sub esp, 8
push 1
call fcn.00407a00
add esp, 0x1c
test al, al
je 0x40e84f
push str.EnumProcesses
push dword [0x45eb50]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x45e8e4], eax
nop
test eax, eax
jne 0x40e0ba
push eax
push dword [0x45eb3c]
mov edx, str.EnumProcesses
mov ecx, str.psapi.dll
push eax
push 0x45edc8
sub esp, 8
push 1
call fcn.00407a00
add esp, 0x1c
test al, al
je 0x40e7f9
mov eax, dword [0x45edc8]
mov dword [0x45e8e4], eax
push 0
push dword [0x45f69c]
mov edx, str.CreateDesktopExW
mov ecx, str.User32.dll
push 0
push 0x45f648
sub esp, 8
push 1
call fcn.00407a00
add esp, 0x1c
test al, al
je 0x40e845
push 0
push dword [0x45f69c]
mov edx, str.SwitchDesktop
mov ecx, str.User32.dll
push 0
push 0x45eb78
sub esp, 8
push 1
call fcn.00407a00
add esp, 0x1c
test al, al
je 0x40e839
push 0
push dword [0x45f69c]
mov edx, str.CloseDesktop
mov ecx, str.User32.dll
push 0
push 0x45eb00
sub esp, 8
push 1
call fcn.00407a00
add esp, 0x1c
test al, al
je 0x40e82f
push 0
push dword [0x45f69c]
mov edx, str.GetThreadDesktop
mov ecx, str.User32.dll
push 0
push 0x45f68c
sub esp, 8
push 1
call fcn.00407a00
add esp, 0x1c
test al, al
je 0x40e825
push 0
push dword [0x45f69c]
mov edx, str.SetThreadDesktop
mov ecx, str.User32.dll
push 0
push 0x45eb04
sub esp, 8
push 1
call fcn.00407a00
add esp, 0x1c
test al, al
je 0x40e819
push 0
push dword [0x45f69c]
mov edx, str.OpenInputDesktop
mov ecx, str.User32.dll
push 0
push 0x45f638
sub esp, 8
push 1
call fcn.00407a00
add esp, 0x1c
test al, al
je 0x40e80f
push 0
push dword [0x45edbc]
mov edx, str.ConvertStringSecurityDescriptorToSecurityDescriptorW
mov ecx, str.Advapi32.dll
push 0
push 0x45edd0
sub esp, 8
push 1
call fcn.00407a00
add esp, 0x1c
test al, al
je 0x40e805
mov eax, dword [0x45f684]
mov esi, dword [0x45f68c]
mov dword [0x45edb8], eax
mov eax, dword [0x45f648]
mov dword [0x45eb38], eax
mov eax, dword [0x45eb78]
mov dword [0x45edec], eax
mov eax, dword [0x45eb00]
mov dword [0x45e8e8], eax
mov eax, dword [0x45eb04]
mov dword [0x45f8b8], eax
mov eax, dword [0x45f638]
mov dword [0x45eb40], eax
mov eax, dword [0x45edd0]
mov dword [0x45edac], esi
mov dword [0x45e370], eax
jmp 0x40e262
mov esi, dword [0x45edac]
mov byte [0x45edb2], 0
mov byte [0x45f41c], 0
mov dword [0x45eb88], 0
nop word [eax + eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
mov ecx, esi
call dword [0x442244]
call esi
mov dword [ebp - 0x2e0], eax
test eax, eax
je 0x40eaef
mov esi, dword [0x45e370]
lea eax, [ebp - 0x2b8]
push 0
push eax
push 1
push str.D:_D_OICI_GA___BG__D_OICI_GA___AN__D_OICI_GA___AU__D_OICI_GA___BA__D_OICI_GA___BU_
mov ecx, esi
mov dword [ebp - 0x2b8], 0
mov dword [ebp - 0x2bc], 0xc
mov dword [ebp - 0x2b4], 0
call dword [0x442244]
call esi
nop dword [eax]
test eax, eax
je 0x40eae5
mov esi, dword [0x45eb2c]
lea eax, [ebp - 0x34]
push 0
push 0x14
push eax
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push 0x81
mov ecx, esi
movups xmmword [ebp - 0x34], xmm0
call dword [0x442244]
call esi
test eax, eax
jne 0x40ead7
push 0x190
push eax
lea eax, [ebp - 0x1c8]
push eax
call fcn.0041f350
add esp, 0xc
xor esi, esi
mov al, byte [ebp - 0x34]
test al, al
je 0x40e348
cmp al, 0x14
jae 0x40e348
movzx eax, al
cmp esi, eax
je 0x40e3ae
movzx eax, byte ds:[ebp + esi - 0x34]
xorps xmm0, xmm0
movq qword [ebp - 0x20], xmm0
mov word [ebp - 0x18], 0
push eax
lea eax, [ebp - 0x20]
cmp esi, 0xa
ja 0x40e36c
push 0x452060
jmp 0x40e371
push 0x452068
push 0xffffffffffffffff
push 5
push eax
call fcn.00401640
add esp, 0x14
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c8]
push 0xc8
push eax
call fcn.00429db9
add esp, 0xc
lea eax, [ebp - 0x20]
push 0xa
push 0
push eax
call fcn.00440bb0
inc esi
add esp, 0xc
cmp esi, 0x14
jb 0x40e332
push 0x14
lea eax, [ebp - 0x34]
push 0
push eax
call fcn.00440bb0
mov esi, dword [0x45eb38]
lea eax, [ebp - 0x2bc]
add esp, 0xc
mov ecx, esi
push 0
push 0x7530
push eax
push 0x106
push 0
push 0
push 0
lea eax, [ebp - 0x1c8]
push eax
call dword [0x442244]
call esi
mov edi, eax
lea eax, [ebp - 0x1c8]
push 0x190
push 0
push eax
mov dword [ebp - 0x2dc], edi
call fcn.00440bb0
mov eax, dword [ebp - 0x2b8]
add esp, 0xc
test eax, eax
je 0x40e41d
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
nop dword [eax]
test edi, edi
je 0x40eacd
push 0
push 0
push edi
push 0x40bd20
xorps xmm0, xmm0
push 0
push 0
movlpd qword [ebp - 0x31c], xmm0
call fcn.0042954c
add esp, 0x18
mov dword [ebp - 0x31c], eax
test eax, eax
je 0x40eaa5
mov esi, dword [0x45edec]
mov ecx, esi
push edi
call dword [0x442244]
call esi
test eax, eax
je 0x40ea05
push 8
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, eax
test edi, edi
je 0x40e945
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapSize]
push 0
push 0
push edi
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2e0]
push 0x40c180
mov dword [edi], eax
mov eax, dword [ebp - 0x2dc]
push 0
push 0
mov dword [edi + 4], eax
call fcn.0042954c
add esp, 0x18
mov dword [ebp - 0x318], eax
push 0xffffffffffffffff
test eax, eax
je 0x40e859
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov esi, dword ds:[ebp - 0x31c]
push 0xffffffffffffffff
push esi
mov byte [0x45edb2], 1
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor esi, esi
nop dword [eax + eax]
push dword [ebp + esi*4 - 0x31c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
inc esi
cmp esi, 2
jb 0x40e510
push dword [ebp - 0x2e0]
mov esi, dword [0x45edec]
mov ecx, esi
call dword [0x442244]
call esi
push dword [ebp - 0x2dc]
mov esi, dword [0x45e8e8]
mov ecx, esi
call dword [0x442244]
call esi
mov eax, dword [ebp - 0x2d4]
cmp eax, 0xffffffff
je 0x40e570
nop dword [eax]
test eax, eax
je 0x40e570
push eax
push 0
push edi
call fcn.00440bb0
add esp, 0xc
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp byte [0x45f41c], 1
jne 0x40e5ba
push 0x30
push str.Secure_Desktop
push str.A_process_was_running_inside_the_secure_desktop__SteamLite_attempted_to_terminate_it
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x30
push str.Secure_Desktop
push 0x45f6b0
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [0x45eb88], 0
je 0x40e5d8
push 0x10
push str.Secure_Desktop
call fcn.00405e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp byte [0x45cce4], 1
nop
jne 0x40db97
jmp 0x40cb9a
mov edi, dword [ebp - 0x2d8]
mov dl, byte [ebp - 0x2cd]
jmp 0x40d39f
nop dword [eax]
test esi, esi
je 0x40cb9a
mov dword [ebp - 4], 4
jmp 0x40e6cf
test esi, esi
je 0x40cb9a
mov dword [ebp - 4], 3
jmp 0x40e6cf
mov esi, dword [ebp - 0x2d8]
test esi, esi
je 0x40e694
mov ecx, esi
mov dword [ebp - 4], 5
call fcn.00401b00
mov ecx, dword [esi]
mov byte [esi + 0x80c], 0
test ecx, ecx
je 0x40e67f
mov eax, dword [esi + 4]
test eax, eax
je 0x40e67f
add eax, eax
push eax
push 0
push ecx
call fcn.00440bb0
add esp, 0xc
push dword [esi]
call fcn.0041b33a
add esp, 4
mov dword [esi], 0
mov dword [esi + 4], 0
push 0x810
push esi
mov dword [ebp - 4], 0xffffffff
call fcn.0041b836
add esp, 8
push str._nNo_login_information_is_saved__n
jmp 0x40cb8d
mov esi, dword [ebp - 0x2d8]
test esi, esi
je 0x40cb9a
mov dword [ebp - 4], 2
jmp 0x40e6cf
mov esi, dword ds:[ebp - 0x2d8]
test esi, esi
je 0x40cb9a
mov dword [ebp - 4], 1
mov ecx, esi
call fcn.00401b00
mov ecx, dword ds:[esi]
mov byte [esi + 0x80c], 0
test ecx, ecx
je 0x40e715
mov eax, dword [esi + 4]
test eax, eax
je 0x40e715
add eax, eax
push eax
push 0
push ecx
call fcn.00440bb0
add esp, 0xc
push dword [esi]
call fcn.0041b33a
add esp, 4
mov dword [esi], 0
mov dword [esi + 4], 0
push 0x810
push esi
mov dword [ebp - 4], 0xffffffff
call fcn.0041b836
add esp, 8
jmp 0x40cb9a
mov eax, dword [ebp - 0x2d4]
cmp eax, 0xffffffff
je 0x40e74a
test eax, eax
je 0x40e74a
push eax
push 0
push edi
call fcn.00440bb0
add esp, 0xc
push 0x101
push 0
push dword [0x45f698]
call fcn.00440bb0
add esp, 0xc
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov esi, dword [0x45f698]
push esi
call fcn.0041b33a
add esp, 4
test esi, esi
je 0x40e78e
mov dword [0x45f698], 0x8123
push str._nFailed_to_spawn_Master_Password_box__n
jmp 0x40cb8d
push str._nHeapAlloc__Saved__Failed__n
nop dword [eax]
jmp 0x40cb8d
push 0x101
push 0
push dword [0x45eb4c]
call fcn.00440bb0
mov esi, dword [0x45eb4c]
add esp, 0xc
push esi
call fcn.0041b33a
add esp, 4
test esi, esi
je 0x40e7d7
mov dword [0x45eb4c], 0x8123
push str._nNo_login_information_is_saved__n
nop dword [eax]
jmp 0x40cb8d
push str._nExit_from_Steam_Guard_code_box__n
jmp 0x40eb24
push str._nFailed_to_spawn_Steam_Guard_code_box__n
jmp 0x40eb24
push str._nUnable_to_get_EnumProcesses__n
nop
jmp 0x40cb8d
push str._nUnable_to_get_ConvertStringSecurityDescriptorToSecurityDescriptorW__n
jmp 0x40cb8d
push str._nUnable_to_get_OpenInputDesktop__n
jmp 0x40cb8d
push str._nUnable_to_get_SetThreadDesktop__n
nop
jmp 0x40cb8d
push str._nUnable_to_get_GetThreadDesktop__n
jmp 0x40cb8d
push str._nUnable_to_get_CloseDesktop__n
jmp 0x40cb8d
push str._nUnable_to_get_SwitchDesktop__n
nop
jmp 0x40cb8d
push str._nUnable_to_get_CreateDesktopExW__n
jmp 0x40cb8d
push str._nUnable_to_get_ImmDisableIME__n
jmp 0x40cb8d
mov esi, dword [ebp - 0x31c]
push esi
mov byte [0x45edb2], 1
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str._n_beginthreadex_Desktop_Failed___2__n
mov ecx, 0xc
call fcn.00414e80
mov esi, dword [0x45edec]
add esp, 4
mov ecx, esi
push dword [ebp - 0x2e0]
call dword [0x442244]
call esi
push dword [ebp - 0x2dc]
mov esi, dword [0x45e8e8]
mov ecx, esi
call dword [0x442244]
call esi
mov eax, dword [ebp - 0x2d4]
cmp eax, 0xffffffff
je 0x40e8d0
nop
test eax, eax
je 0x40e8d0
push eax
push 0
push edi
call fcn.00440bb0
add esp, 0xc
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp byte [0x45f41c], 1
jne 0x40e91a
push 0x30
push str.Secure_Desktop
push str.A_process_was_running_inside_the_secure_desktop__SteamLite_attempted_to_terminate_it
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x30
push str.Secure_Desktop
push 0x45f6b0
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [0x45eb88], 0
je 0x40cb9a
push 0x10
push str.Secure_Desktop
call fcn.00405e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
nop dword [eax]
jmp 0x40cb9a
mov esi, dword [ebp - 0x31c]
push 0xffffffffffffffff
push esi
mov byte [0x45edb2], 1
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str._nHeapAlloc_Desktop_Failed__n
mov ecx, 0xc
call fcn.00414e80
mov esi, dword [0x45edec]
add esp, 4
mov ecx, esi
push dword [ebp - 0x2e0]
call dword [0x442244]
call esi
push dword ds:[ebp - 0x2dc]
mov esi, dword [0x45e8e8]
mov ecx, esi
call dword [0x442244]
call esi
cmp byte [0x45f41c], 1
jne 0x40e9da
push 0x30
push str.Secure_Desktop
push str.A_process_was_running_inside_the_secure_desktop__SteamLite_attempted_to_terminate_it
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x30
push str.Secure_Desktop
push 0x45f6b0
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [0x45eb88], 0
je 0x40cb9a
push 0x10
push str.Secure_Desktop
call fcn.00405e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
nop dword [eax]
jmp 0x40cb9a
mov esi, dword [ebp - 0x31c]
push 0xffffffffffffffff
push esi
mov byte [0x45edb2], 1
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str._nSwitchDesktop_Failed__n
mov ecx, 0xc
call fcn.00414e80
mov esi, dword [0x45e8e8]
add esp, 4
mov ecx, esi
push edi
call dword [0x442244]
call esi
cmp byte [0x45f41c], 1
jne 0x40ea7a
push 0x30
push str.Secure_Desktop
push str.A_process_was_running_inside_the_secure_desktop__SteamLite_attempted_to_terminate_it
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x30
push str.Secure_Desktop
push 0x45f6b0
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [0x45eb88], 0
je 0x40cb9a
push 0x10
push str.Secure_Desktop
call fcn.00405e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
nop dword [eax]
jmp 0x40cb9a
push str._n_beginthreadex_Desktop_Failed___1__n
mov ecx, 0xc
call fcn.00414e80
mov esi, dword [0x45e8e8]
add esp, 4
mov ecx, esi
push edi
call dword [0x442244]
call esi
jmp 0x40cb9a
push str._nCreateDesktopEx_Failed__n
jmp 0x40cb8d
push str._nBCryptGenRandom_Failed__n
nop dword [eax]
jmp 0x40cb8d
push str._nFailed_to_convert_DACL__n
jmp 0x40cb8d
push str._nGetThreadDesktop_Failed___1__n
jmp 0x40cb8d
call fcn.00414de0
mov ecx, dword [esi]
call fcn.00405860
push eax
push str._nLogon_failed______s_n
call fcn.00403aa0
add esp, 8
mov ecx, 7
call fcn.00414de0
jmp 0x40eb31
push str._nIncorrect_Steam_Guard_Key__n
mov ecx, 0xc
call fcn.00414e80
add esp, 4
mov esi, dword [0x45e584]
mov ecx, esi
push dword [0x45eb7c]
call dword [0x442244]
call esi
jmp 0x40cb97
movzx eax, word [0x45f8cc]
mov esi, dword [0x45edc4]
mov ecx, esi
push 0
push eax
push dword [0x45eb60]
push dword [0x45f62c]
call dword [0x442244]
call esi
mov edi, dword [0x45f62c]
add esp, 0x10
mov eax, dword [edi]
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
test al, al
jne 0x40ec04
mov edi, dword [0x45f62c]
mov eax, dword [edi]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
cmp eax, 4
je 0x40ec04
mov edi, dword [0x45f62c]
mov eax, dword [edi]
mov esi, dword [eax + 0x28]
lea eax, [ebp - 0x324]
push eax
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
cmp dword [eax], 0
jne 0x40ec04
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [0x45f62c]
mov eax, dword [edi]
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
nop dword [eax]
test al, al
je 0x40eb95
push str._nSuccessfully_logged_in__n
call fcn.00403aa0
add esp, 4
lea eax, [ebp - 0xd8]
push 0xa0
push 0
push eax
call fcn.0041f350
mov edi, dword [0x45f62c]
add esp, 0xc
mov eax, dword [edi]
mov esi, dword [eax + 0x28]
lea eax, [ebp - 0x324]
push eax
mov ecx, esi
call dword [0x442244]
mov ecx, edi
call esi
push dword ds:[eax + 4]
push dword [eax]
lea eax, [ebp - 0xd8]
push str._llu
push 0xffffffffffffffff
push 0x50
push eax
call fcn.00401640
add esp, 0x18
lea eax, [ebp - 0xd8]
push eax
push str.STEAMID
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
push 0x4522cc
push 0x4522d0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
xor eax, eax
mov word [0x45f40c], ax
call fcn.004154b0
push dword [0x45eb7c]
mov esi, dword [0x45e584]
mov ecx, esi
call dword [0x442244]
call esi
movzx eax, word [0x45f8cc]
add esp, 4
push 1
push eax
push dword [0x45eb60]
mov eax, dword [ebx + 4]
mov esi, dword [0x45edc4]
mov ecx, esi
push eax
call dword [0x442244]
call esi
add esp, 0x10
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041b32c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret