Function at 0x140001590
Capabilities:
Execute command
Self delete
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x188]
sub rsp, 0x260
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14000b010]
xor rax, rsp
mov qword [rbp + 0x130], rax
xor ebx, ebx
lea rcx, [0x1400075dc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rbx
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], bl
movups xmmword [rbp - 0x48], xmm0
movdqa xmm1, xmmword [0x140007c50]
movdqu xmmword [rbp - 0x38], xmm1
mov byte [rbp - 0x48], bl
lea rdx, str._nProgram_full_path:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004910
lea rdx, [rsp + 0x78]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140004ae0
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rsi, qword [rbp - 0x78]
sub rax, rsi
cmp rax, 6
jb 0x140001f8d
lea r15, [rsp + 0x78]
mov r12, qword [rsp + 0x78]
mov r13, qword [rbp - 0x70]
cmp r13, 0x10
cmovae r15, r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea r14, [rsi + 6]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
movabs rax, 0x8000000000000000
lea edx, [rbx + 7]
cmp r14, rbx
jbe 0x1400016fe
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400016c5
mov rbx, rcx
add rax, 0x27
mov rcx, rax
call fcn.140005360
test rax, rax
je 0x14000190b
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400016f9
cmp rbx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400016e8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001f7b
jmp 0x1400016a6
test rcx, rcx
je 0x1400016f7
call fcn.140005360
mov rdi, rax
jmp 0x1400016f9
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rbx
mov eax, dword [str.cd__d]
mov dword [rdi], eax
movzx eax, word [0x14000762c]
mov word [rdi + 4], ax
lea rcx, [rdi + 6]
mov r8, rsi
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r14], 0
mov r8d, 0xf
lea rdx, str.__sigcheck__a
lea rcx, [rsp + 0x50]
call fcn.140004740
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x78]
cmp r13, 0x10
cmovae rdx, r12
mov r8, rsi
lea rcx, [rbp - 0x68]
call fcn.140004740
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x40], xmm1
xor r13d, r13d
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
lea r8d, [r13 + 0x18]
lea rdx, str.SteamSetup.exe_temp.ini
lea rcx, [rsp + 0x30]
call fcn.140004740
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x14000182d
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001828
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001828
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000539c
movups xmmword [rbp - 0x48], xmm6
movups xmmword [rbp - 0x38], xmm7
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x140001875
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001870
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001870
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000539c
movdqa xmm0, xmmword [0x140007c50]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x1400018c6
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400018c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400018c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000539c
movdqa xmm0, xmmword [0x140007c50]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140001917
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001912
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001912
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000539c
call fcn.1400014d0
lea rcx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae rcx, qword [rbp - 0x48]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memset
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r15, qword [rbp - 0x78]
sub rax, r15
mov qword [rsp + 0x70], rax
cmp rax, 9
jb 0x140001f93
lea r14, [rsp + 0x78]
mov r12, qword [rsp + 0x78]
cmp qword [rbp - 0x70], 0x10
cmovae r14, r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
lea rsi, [r15 + 9]
mov ebx, 0xf
lea rdi, [rsp + 0x30]
cmp rsi, rbx
jbe 0x140001a1a
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400019d3
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140005360
test rax, rax
je 0x1400019fc
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140001a15
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140001a03
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001f81
jmp 0x1400019b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140001a12
call fcn.140005360
mov rdi, rax
jmp 0x140001a15
mov rdi, r13
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rbx
mov r8, r15
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str._temp.ini]
movsd qword [rdi + r15], xmm0
movzx eax, byte [0x140007638]
mov byte [rdi + r15 + 8], al
mov byte [rdi + rsi], 0
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0x10
cmovae rdx, qword [rsp + 0x30]
lea rcx, [rbp + 0x20]
call fcn.140004210
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x20], rax
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x1c], edx
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x140001ad0
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001acb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001acb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000539c
movdqa xmm0, xmmword [0x140007c50]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
cmp qword [rbp + 0xb0], 0
je 0x140001f56
lea rdx, str.open
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140004910
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], 0xb
mov qword [rbp + 0x10], 0xf
movsd xmm0, qword [str.Valve_Corp.]
movsd qword [rbp - 8], xmm0
movzx eax, word [0x140007670]
mov word [rbp], ax
movzx eax, byte [0x140007672]
mov byte [rbp + 2], al
mov byte [rbp + 3], 0
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x20]
mov dl, 0xa
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x20]
call fcn.1400050e0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
mov r15, qword [rbp - 0x28]
mov r13, qword [rbp - 0x10]
test al, al
je 0x140001e47
lea rdi, [rbp - 0x28]
cmp r13, 0x10
cmovae rdi, r15
mov rax, qword [rbp - 0x18]
cmp rax, 0xb
jb 0x140001b55
lea rsi, [rax + rdi]
movsx r14d, byte [rbp - 8]
lea r8, [rsi - 0xa]
sub r8, rdi
mov edx, r14d
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140001b55
nop word [rax + rax]
mov r8d, 0xb
lea rdx, [rbp - 8]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140001c18
inc rbx
lea r8, [rsi - 0xa]
sub r8, rbx
mov edx, r14d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140001be0
jmp 0x140001b55
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
je 0x140001b55
lea rcx, [rbp + 0x30]
call fcn.140004680
test rax, rax
jne 0x140001c4f
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x20]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
cmp qword [rsp + 0x70], 0x30
jb 0x140001f75
lea r14, [rsp + 0x78]
cmp qword [rbp - 0x70], 0x10
cmovae r14, r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov rax, qword [rbp - 0x78]
lea rsi, [rax + 0x30]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp rsi, rbx
jbe 0x140001d22
mov rbx, rsi
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x140001cdf
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140005360
test rax, rax
je 0x140001ddb
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rax, qword [rbp - 0x78]
jmp 0x140001d1d
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140001d08
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001f87
jmp 0x140001cbc
test rcx, rcx
je 0x140001d1b
call fcn.140005360
mov rdi, rax
mov rax, qword [rbp - 0x78]
jmp 0x140001d1d
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rbx
movups xmm0, xmmword [0x140007690]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x1400076a0]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [0x1400076b0]
movups xmmword [rdi + 0x20], xmm0
lea rcx, [rdi + 0x30]
mov r8, rax
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
mov r8d, 0x10
lea rdx, str.SteamSetup.exe_
lea rcx, [rsp + 0x50]
call fcn.140004740
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140001de7
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001de2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001de2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000539c
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rcx, qword [rbp - 0x68]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.cd__d_C:MVEUGame__del_temp.ini
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x140001e47
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001e41
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001e41
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000539c
nop
cmp r13, 0x10
jb 0x140001e82
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140001e79
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001e79
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14000539c
nop
lea rcx, [rbp + 0x20]
call fcn.140001fa0
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x140001eca
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001ec5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001ec5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000539c
movdqa xmm0, xmmword [0x140007c50]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
mov rax, qword [rbp - 0x70]
cmp rax, 0x10
jb 0x140001f1a
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140001f12
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001f12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.14000539c
xor eax, eax
mov rcx, qword [rbp + 0x130]
xor rcx, rsp
call fcn.140005340
lea r11, [rsp + 0x260]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbp + 0x20]
call fcn.1400041d0
lea rcx, str.cd__d_C:MVEUGame__del_temp.ini
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.1400011b0
nop
call fcn.140001110
int3
call fcn.140001110
nop
call fcn.140001110
nop
call fcn.1400011b0
int3
call fcn.1400011b0
int3