Function at 0x18000a498
Capabilities:
Check if file exists

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x7e8]
sub rsp, 0x8c0
mov rbx, rdx
mov r12, rcx
mov eax, 0x7c
mov byte [rsp + 0x30], al
lea r15d, [rax + 1]
mov byte [rsp + 0x31], r15b
lea eax, [r15 - 0xf]
mov byte [rsp + 0x32], al
lea eax, [r15 - 0x13]
mov byte [rsp + 0x33], al
lea ecx, [rax + 0xc]
mov byte [rsp + 0x34], cl
lea ecx, [rax - 2]
mov byte [rsp + 0x35], cl
mov byte [rsp + 0x36], al
lea eax, [rcx + 0x11]
mov byte [rsp + 0x37], al
lea eax, [rcx + 0xa]
mov byte [rsp + 0x38], al
lea eax, [rcx - 0x31]
mov byte [rsp + 0x39], al
mov byte [rsp + 0x3a], r15b
lea eax, [rcx + 0xf]
mov byte [rsp + 0x3b], al
lea eax, [rcx + 0xc]
mov byte [rsp + 0x3c], al
xor r13d, r13d
mov byte [rsp + 0x3d], r13b
mov al, byte [rsp + 0x30]
mov ecx, r13d
lea edi, [r15 - 0x7c]
lea r14d, [r15 - 0x74]
mov al, byte [rsp + rcx + 0x30]
sub al, r14b
mov byte [rsp + rcx + 0x30], al
add rcx, rdi
cmp rcx, 0xd
jb 0x18000a537
lea rcx, [rsp + 0x30]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
mov ecx, WSASetLastError
lea edx, [rcx + 6]
lea esi, [rcx - 0x68]
lea r10d, [rcx + 8]
lea r8d, [rcx - 9]
cmp eax, edi
jne 0x18000a8ad
lea eax, [rcx + 0xf]
mov word [rbp - 0x7c], ax
mov word [rbp - 0x7a], r15w
lea eax, [rcx + 1]
mov word [rbp - 0x78], ax
lea eax, [rcx - 3]
mov word [rbp - 0x76], ax
lea edx, [rcx + 9]
mov word [rbp - 0x74], dx
lea edx, [rcx - 5]
mov word [rbp - 0x72], dx
mov word [rbp - 0x70], ax
lea eax, [rcx + 0xc]
mov word [rbp - 0x6e], ax
lea eax, [rcx + 5]
mov word [rbp - 0x6c], ax
lea eax, [rcx - 0x36]
mov word [rbp - 0x6a], ax
mov word [rbp - 0x68], cx
mov word [rbp - 0x66], r10w
mov word [rbp - 0x64], r10w
mov word [rbp - 0x62], r14w
movzx eax, word [0x1800c08f4]
add ax, r14w
mov word [rbp - 0x60], ax
movzx eax, word [0x1800c08f6]
add ax, r14w
mov word [rbp - 0x5e], ax
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
add ax, r14w
mov word [rbp - 0x5c], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, r14w
mov word [rbp - 0x5a], ax
movzx eax, word [0x1800c08fc]
add ax, r14w
mov word [rbp - 0x58], ax
movzx eax, word [0x1800c08fe]
add ax, r14w
mov word [rbp - 0x56], ax
movzx eax, word [0x1800c0900]
add ax, r14w
mov word [rbp - 0x54], ax
movzx eax, word [0x1800c0902]
add ax, r14w
mov word [rbp - 0x52], ax
movzx eax, word [0x1800c0904]
add ax, r14w
mov word [rbp - 0x50], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, r14w
mov word [rbp - 0x4e], ax
movzx eax, word [0x1800c0908]
add ax, r14w
mov word [rbp - 0x4c], ax
movzx eax, word [0x1800c090a]
add ax, r14w
mov word [rbp - 0x4a], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, r14w
mov word [rbp - 0x48], ax
mov word [rbp - 0x46], r13w
movzx eax, word [rbp - 0x7c]
mov rcx, r13
movzx eax, word [rbp + rcx*2 - 0x7c]
sub ax, r14w
mov word [rbp + rcx*2 - 0x7c], ax
add rcx, rdi
cmp rcx, 0x1b
jb 0x18000a694
xorps xmm0, xmm0
movups xmmword [rbp + 0x228], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x238], xmm1
lea rax, [rbp - 0x7c]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000a6c8
lea rdx, [rbp - 0x7c]
lea rcx, [rbp + 0x228]
call fcn.18000f420
nop
mov eax, 0x78
mov word [rbp - 4], ax
mov eax, 0x79
mov word [rbp - 2], ax
lea ecx, [rax - 0xf]
mov word [rbp], cx
lea edx, [rax - 0x13]
mov word [rbp + 2], dx
lea ecx, [rax - 7]
mov word [rbp + 4], cx
lea r8d, [rax - 0x15]
mov word [rbp + 6], r8w
mov word [rbp + 8], dx
lea ecx, [rax - 4]
mov word [rbp + 0xa], cx
lea ecx, [rax - 0xb]
mov word [rbp + 0xc], cx
lea ecx, [rax - 0x46]
mov word [rbp + 0xe], cx
mov word [rbp + 0x10], ax
lea eax, [rdx + 0xd]
mov word [rbp + 0x12], ax
lea eax, [rdx + 0xa]
mov word [rbp + 0x14], ax
mov word [rbp + 0x16], si
movzx eax, word [0x1800c0914]
add ax, si
mov word [rbp + 0x18], ax
movzx eax, word [0x1800c0916]
add ax, si
mov word [rbp + 0x1a], ax
movzx eax, word [0x1800c0918]
add ax, si
mov word [rbp + 0x1c], ax
movzx eax, word [0x1800c091a]
add ax, si
mov word [rbp + 0x1e], ax
movzx eax, word [0x1800c091c]
add ax, si
mov word [rbp + 0x20], ax
movzx eax, word [0x1800c091e]
add ax, si
mov word [rbp + 0x22], ax
movzx eax, word [0x1800c0920]
add ax, si
mov word [rbp + 0x24], ax
movzx eax, word [0x1800c0922]
add ax, si
mov word [rbp + 0x26], ax
movzx eax, word [0x1800c0924]
add ax, si
mov word [rbp + 0x28], ax
movzx eax, word [0x1800c0926]
add ax, si
mov word [rbp + 0x2a], ax
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
add ax, si
mov word [rbp + 0x2c], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp + 0x2e], ax
movzx eax, word [0x1800c092c]
add ax, si
mov word [rbp + 0x30], ax
mov word [rbp + 0x32], r13w
movzx eax, word [rbp - 4]
mov rcx, r13
movzx eax, word [rbp + rcx*2 - 4]
sub ax, si
mov word [rbp + rcx*2 - 4], ax
add rcx, rdi
cmp rcx, 0x1b
jb 0x18000a804
lea rcx, [r12 + 0x238]
lea r8, [rbp + 0x228]
lea rdx, [rbp + 0x2c8]
call fcn.18000ec94
mov rcx, qword [rax]
add rcx, 0x30
lea rdx, [rbp - 4]
call fcn.18000d75c
nop
mov rdx, qword [rbp + 0x240]
cmp rdx, 7
jbe 0x18000a88c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a887
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000bd5e
call fcn.18009529c
movdqa xmm0, xmmword [0x1800da290]
movdqu xmmword [rbp + 0x238], xmm0
mov word [rbp + 0x228], r13w
mov edx, reloc.WS2_32.dll_WSAStartup
lea r8d, [rdx - 0xf]
mov eax, 0x76
mov byte [rsp + 0x3e], al
mov eax, 0x77
mov byte [rsp + 0x3f], al
lea ecx, [rax - 0xf]
mov byte [rsp + 0x40], cl
mov byte [rsp + 0x41], r8b
lea ecx, [rax - 7]
mov byte [rsp + 0x42], cl
lea ecx, [rax - 0x15]
mov byte [rsp + 0x43], cl
mov byte [rsp + 0x44], r8b
mov byte [rsp + 0x45], dl
lea ecx, [rax - 0xb]
mov byte [rsp + 0x46], cl
lea ecx, [rax - 0x3e]
mov byte [rsp + 0x47], cl
mov byte [rsp + 0x48], 0x37
lea ecx, [rax - 0x46]
mov byte [rsp + 0x49], cl
mov byte [rsp + 0x4a], al
lea eax, [rcx + 0x40]
mov byte [rsp + 0x4b], al
lea eax, [rcx + 0x3d]
mov byte [rsp + 0x4c], al
mov byte [rsp + 0x4d], r13b
mov al, byte [rsp + 0x3e]
mov rcx, r13
mov esi, 3
mov al, byte [rsp + rcx + 0x3e]
sub al, sil
mov byte [rsp + rcx + 0x3e], al
add rcx, rdi
cmp rcx, 0xf
jb 0x18000a91f
lea rcx, [rsp + 0x3e]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
mov ecx, WSASetLastError
lea r8d, [rcx - 8]
cmp eax, edi
jne 0x18000ac8a
lea eax, [rcx + 7]
mov word [rbp - 0x44], ax
lea eax, [rcx + 8]
mov word [rbp - 0x42], ax
lea eax, [rcx - 7]
mov word [rbp - 0x40], ax
lea eax, [rcx - 0xb]
mov word [rbp - 0x3e], ax
lea edx, [rcx + 1]
mov word [rbp - 0x3c], dx
lea edx, [rcx - 0xd]
mov word [rbp - 0x3a], dx
mov word [rbp - 0x38], ax
lea eax, [rcx + 4]
mov word [rbp - 0x36], ax
lea eax, [rcx - 3]
mov word [rbp - 0x34], ax
lea eax, [rcx - 0x36]
mov word [rbp - 0x32], ax
lea eax, [rcx - 0x38]
mov word [rbp - 0x30], ax
lea eax, [rcx - 0x3e]
mov word [rbp - 0x2e], ax
mov word [rbp - 0x2c], r8w
mov word [rbp - 0x2a], cx
mov word [rbp - 0x28], cx
mov word [rbp - 0x26], si
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
add ax, si
mov word [rbp - 0x24], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp - 0x22], ax
movzx eax, word [0x1800c094c]
add ax, si
mov word [rbp - 0x20], ax
movzx eax, word [0x1800c094e]
add ax, si
mov word [rbp - 0x1e], ax
movzx eax, word [0x1800c0950]
add ax, si
mov word [rbp - 0x1c], ax
movzx eax, word [0x1800c0952]
add ax, si
mov word [rbp - 0x1a], ax
movzx eax, word [0x1800c0954]
add ax, si
mov word [rbp - 0x18], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, si
mov word [rbp - 0x16], ax
movzx eax, word [0x1800c0958]
add ax, si
mov word [rbp - 0x14], ax
movzx eax, word [0x1800c095a]
add ax, si
mov word [rbp - 0x12], ax
movzx eax, word [0x1800c095c]
add ax, si
mov word [rbp - 0x10], ax
movzx eax, word [0x1800c095e]
add ax, si
mov word [rbp - 0xe], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp - 0xc], ax
movzx eax, word [0x1800c0962]
add ax, si
mov word [rbp - 0xa], ax
movzx eax, word [0x1800c0964]
add ax, si
mov word [rbp - 8], ax
mov word [rbp - 6], r13w
movzx eax, word [rbp - 0x44]
mov rcx, r13
movzx eax, word [rbp + rcx*2 - 0x44]
sub ax, si
mov word [rbp + rcx*2 - 0x44], ax
add rcx, rdi
cmp rcx, 0x1f
jb 0x18000aa8f
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2b8], xmm1
lea rax, [rbp - 0x44]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000aac2
lea rdx, [rbp - 0x44]
lea rcx, [rbp + 0x2a8]
call fcn.18000f420
nop
lea rcx, [r12 + 0x238]
lea r8, [rbp + 0x2a8]
lea rdx, [rbp + 0x2d8]
call fcn.18000ec94
mov rcx, qword [rax]
add rcx, 0x30
mov eax, 0x77
mov word [rbp + 0x34], ax
lea edx, [rax + 1]
mov word [rbp + 0x36], dx
lea eax, [rdx - 0xf]
mov word [rbp + 0x38], ax
lea r8d, [rdx - 0x13]
mov word [rbp + 0x3a], r8w
lea eax, [rdx - 7]
mov word [rbp + 0x3c], ax
lea eax, [rdx - 0x15]
mov word [rbp + 0x3e], ax
mov word [rbp + 0x40], r8w
lea eax, [rdx - 4]
mov word [rbp + 0x42], ax
lea eax, [rdx - 0xb]
mov word [rbp + 0x44], ax
lea eax, [rdx - 0x3e]
mov word [rbp + 0x46], ax
lea eax, [rdx - 0x40]
mov word [rbp + 0x48], ax
lea eax, [rdx - 0x46]
mov word [rbp + 0x4a], ax
mov word [rbp + 0x4c], dx
lea eax, [rdx - 6]
mov word [rbp + 0x4e], ax
lea edx, [rax - 3]
mov word [rbp + 0x50], dx
lea r8d, [rax - 0x6e]
mov word [rbp + 0x52], r8w
movzx eax, word [0x1800c0968]
add ax, r8w
mov word [rbp + 0x54], ax
movzx eax, word [0x1800c096a]
add ax, r8w
mov word [rbp + 0x56], ax
movzx eax, word [0x1800c096c]
add ax, r8w
mov word [rbp + 0x58], ax
movzx eax, word [0x1800c096e]
add ax, r8w
mov word [rbp + 0x5a], ax
movzx eax, word [0x1800c0970]
add ax, r8w
mov word [rbp + 0x5c], ax
movzx eax, word [0x1800c0972]
add ax, r8w
mov word [rbp + 0x5e], ax
movzx eax, word [0x1800c0974]
add ax, r8w
mov word [rbp + 0x60], ax
movzx eax, word [0x1800c0976]
add ax, r8w
mov word [rbp + 0x62], ax
movzx eax, word [0x1800c0978]
add ax, r8w
mov word [rbp + 0x64], ax
movzx eax, word [0x1800c097a]
add ax, r8w
mov word [rbp + 0x66], ax
movzx eax, word [0x1800c097c]
add ax, r8w
mov word [rbp + 0x68], ax
movzx eax, word [0x1800c097e]
add ax, r8w
mov word [rbp + 0x6a], ax
movzx eax, word [0x1800c0980]
add ax, r8w
mov word [rbp + 0x6c], ax
movzx eax, word [0x1800c0982]
add ax, r8w
mov word [rbp + 0x6e], ax
movzx eax, word [0x1800c0984]
add ax, r8w
mov word [rbp + 0x70], ax
mov word [rbp + 0x72], r13w
movzx eax, word [rbp + 0x34]
mov rdx, r13
movzx eax, word [rbp + rdx*2 + 0x34]
sub ax, r8w
mov word [rbp + rdx*2 + 0x34], ax
add rdx, rdi
cmp rdx, 0x1f
jb 0x18000ac5d
lea rdx, [rbp + 0x34]
call fcn.18000d75c
nop
lea rcx, [rbp + 0x2a8]
call fcn.18000dbd4
mov eax, 0x7c
mov byte [rsp + 0x4e], al
lea r8d, [rax - 0xf]
mov byte [rsp + 0x4f], r8b
lea r9d, [rax - 8]
mov byte [rsp + 0x50], r9b
lea edx, [rax - 0xe]
mov byte [rsp + 0x51], dl
lea eax, [rdx + 9]
mov byte [rsp + 0x52], al
lea ecx, [rdx - 2]
mov byte [rsp + 0x53], cl
lea eax, [rdx + 0xd]
mov byte [rsp + 0x54], al
mov byte [rsp + 0x55], 0x82
lea eax, [rdx + 0xb]
mov byte [rsp + 0x56], al
mov byte [rsp + 0x57], r15b
mov byte [rsp + 0x58], dl
mov byte [rsp + 0x59], r8b
mov byte [rsp + 0x5a], 0x6a
mov byte [rsp + 0x5b], al
mov byte [rsp + 0x5c], al
mov byte [rsp + 0x5d], r15b
lea eax, [rdx + 4]
mov byte [rsp + 0x5e], al
mov byte [rsp + 0x5f], cl
mov byte [rsp + 0x60], r9b
mov byte [rsp + 0x61], dl
mov byte [rsp + 0x62], r15b
lea eax, [rdx - 0x37]
mov byte [rsp + 0x63], al
mov byte [rsp + 0x64], r15b
lea r15d, [r8 + 0xa]
mov byte [rsp + 0x65], r15b
mov byte [rsp + 0x66], r9b
mov byte [rsp + 0x67], r13b
mov al, byte [rsp + 0x4e]
mov rcx, r13
mov al, byte [rsp + rcx + 0x4e]
sub al, r14b
mov byte [rsp + rcx + 0x4e], al
add rcx, rdi
cmp rcx, 0x19
jb 0x18000ad2c
lea rcx, [rsp + 0x4e]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
mov r14d, 0x7c
cmp eax, edi
jne 0x18000b39a
lea eax, [r14 - 6]
mov word [rbp + 0x74], ax
lea r9d, [r14 - 0x15]
mov word [rbp + 0x76], r9w
lea ecx, [rax - 8]
mov word [rbp + 0x78], cx
lea edx, [rax - 0xe]
mov word [rbp + 0x7a], dx
lea eax, [rcx + 3]
mov word [rbp + 0x7c], ax
lea r10d, [r14 - 0x16]
mov word [rbp + 0x7e], r10w
lea eax, [rcx + 7]
mov word [rbp + 0x80], ax
mov word [rbp + 0x82], r14w
lea eax, [rcx + 5]
mov word [rbp + 0x84], ax
mov word [rbp + 0x86], r15w
mov word [rbp + 0x88], dx
mov word [rbp + 0x8a], r9w
lea r8d, [r14 - 0x18]
mov word [rbp + 0x8c], r8w
mov word [rbp + 0x8e], ax
mov word [rbp + 0x90], ax
mov word [rbp + 0x92], r15w
lea eax, [rcx - 2]
mov word [rbp + 0x94], ax
mov word [rbp + 0x96], r10w
mov word [rbp + 0x98], cx
mov word [rbp + 0x9a], dx
mov word [rbp + 0x9c], r15w
lea eax, [rcx - 0x3d]
mov word [rbp + 0x9e], ax
mov word [rbp + 0xa0], r9w
lea eax, [rcx + 1]
mov word [rbp + 0xa2], ax
mov word [rbp + 0xa4], ax
mov word [rbp + 0xa6], si
movzx eax, word [0x1800c09bc]
add ax, si
mov word [rbp + 0xa8], ax
movzx eax, word [0x1800c09be]
add ax, si
mov word [rbp + 0xaa], ax
movzx eax, word [str.sdkencryptedappticket.tnk]
add ax, si
mov word [rbp + 0xac], ax
movzx eax, word [0x1800c09c2]
add ax, si
mov word [rbp + 0xae], ax
movzx eax, word [0x1800c09c4]
add ax, si
mov word [rbp + 0xb0], ax
movzx eax, word [0x1800c09c6]
add ax, si
mov word [rbp + 0xb2], ax
movzx eax, word [0x1800c09c8]
add ax, si
mov word [rbp + 0xb4], ax
movzx eax, word [0x1800c09ca]
add ax, si
mov word [rbp + 0xb6], ax
movzx eax, word [0x1800c09cc]
add ax, si
mov word [rbp + 0xb8], ax
movzx eax, word [0x1800c09ce]
add ax, si
mov word [rbp + 0xba], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, si
mov word [rbp + 0xbc], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp + 0xbe], ax
movzx eax, word [0x1800c09d4]
add ax, si
mov word [rbp + 0xc0], ax
movzx eax, word [0x1800c09d6]
add ax, si
mov word [rbp + 0xc2], ax
movzx eax, word [0x1800c09d8]
add ax, si
mov word [rbp + 0xc4], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, si
mov word [rbp + 0xc6], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, si
mov word [rbp + 0xc8], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp + 0xca], ax
movzx eax, word [0x1800c09e0]
add ax, si
mov word [rbp + 0xcc], ax
movzx eax, word [0x1800c09e2]
add ax, si
mov word [rbp + 0xce], ax
movzx eax, word [0x1800c09e4]
add ax, si
mov word [rbp + 0xd0], ax
movzx eax, word [0x1800c09e6]
add ax, si
mov word [rbp + 0xd2], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp + 0xd4], ax
movzx eax, word [0x1800c09ea]
add ax, si
mov word [rbp + 0xd6], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp + 0xd8], ax
mov word [rbp + 0xda], r13w
movzx eax, word [rbp + 0x74]
mov rcx, r13
lea r14d, [r9 - 0x34]
movzx eax, word [rbp + rcx*2 + 0x74]
sub ax, si
mov word [rbp + rcx*2 + 0x74], ax
add rcx, rdi
cmp rcx, r14
jb 0x18000afeb
xorps xmm0, xmm0
movups xmmword [rbp + 0x248], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x258], xmm1
lea rax, [rbp + 0x74]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000b01d
lea rdx, [rbp + 0x74]
lea rcx, [rbp + 0x248]
call fcn.18000f420
nop
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rbp + 0x14c], ax
lea r10d, [rax - 0xf]
mov word [rbp + 0x14e], r10w
lea r15d, [rax - 8]
mov word [rbp + 0x150], r15w
lea r11d, [rax - 0xe]
mov word [rbp + 0x152], r11w
lea edx, [rax - 5]
mov word [rbp + 0x154], dx
lea ecx, [rax - 0x10]
mov word [rbp + 0x156], cx
lea eax, [rdx + 4]
mov word [rbp + 0x158], ax
lea esi, [rdx + 0xb]
mov word [rbp + 0x15a], si
lea r8d, [r10 + 0xc]
mov word [rbp + 0x15c], r8w
lea r9d, [r10 + 0x10]
mov word [rbp + 0x15e], r9w
mov word [rbp + 0x160], r11w
mov word [rbp + 0x162], r10w
lea eax, [rdx - 0xd]
mov word [rbp + 0x164], ax
mov word [rbp + 0x166], r8w
mov word [rbp + 0x168], r8w
mov word [rbp + 0x16a], r9w
lea eax, [rdx - 5]
mov word [rbp + 0x16c], ax
mov word [rbp + 0x16e], cx
mov word [rbp + 0x170], r15w
mov word [rbp + 0x172], r11w
mov word [rbp + 0x174], r9w
lea eax, [rdx - 0x40]
mov word [rbp + 0x176], ax
mov word [rbp + 0x178], r9w
mov word [rbp + 0x17a], dx
mov word [rbp + 0x17c], r15w
mov word [rbp + 0x17e], di
movzx eax, word [0x1800c09f4]
add ax, di
mov word [rbp + 0x180], ax
movzx eax, word [0x1800c09f6]
add ax, di
mov word [rbp + 0x182], ax
movzx eax, word [0x1800c09f8]
add ax, di
mov word [rbp + 0x184], ax
movzx eax, word [0x1800c09fa]
add ax, di
mov word [rbp + 0x186], ax
movzx eax, word [0x1800c09fc]
add ax, di
mov word [rbp + 0x188], ax
movzx eax, word [0x1800c09fe]
add ax, di
mov word [rbp + 0x18a], ax
movzx eax, word [0x1800c0a00]
add ax, di
mov word [rbp + 0x18c], ax
movzx eax, word [0x1800c0a02]
add ax, di
mov word [rbp + 0x18e], ax
movzx eax, word [0x1800c0a04]
add ax, di
mov word [rbp + 0x190], ax
movzx eax, word [0x1800c0a06]
add ax, di
mov word [rbp + 0x192], ax
movzx eax, word [0x1800c0a08]
add ax, di
mov word [rbp + 0x194], ax
movzx eax, word [0x1800c0a0a]
add ax, di
mov word [rbp + 0x196], ax
movzx eax, word [0x1800c0a0c]
add ax, di
mov word [rbp + 0x198], ax
movzx eax, word [0x1800c0a0e]
add ax, di
mov word [rbp + 0x19a], ax
movzx eax, word [0x1800c0a10]
add ax, di
mov word [rbp + 0x19c], ax
movzx eax, word [0x1800c0a12]
add ax, di
mov word [rbp + 0x19e], ax
movzx eax, word [0x1800c0a14]
add ax, di
mov word [rbp + 0x1a0], ax
movzx eax, word [0x1800c0a16]
add ax, di
mov word [rbp + 0x1a2], ax
movzx eax, word [str.sdkencryptedappticket64.dll]
add ax, di
mov word [rbp + 0x1a4], ax
movzx eax, word [0x1800c0a1a]
add ax, di
mov word [rbp + 0x1a6], ax
movzx eax, word [0x1800c0a1c]
add ax, di
mov word [rbp + 0x1a8], ax
movzx eax, word [0x1800c0a1e]
add ax, di
mov word [rbp + 0x1aa], ax
movzx eax, word [0x1800c0a20]
add ax, di
mov word [rbp + 0x1ac], ax
movzx eax, word [0x1800c0a22]
add ax, di
mov word [rbp + 0x1ae], ax
movzx eax, word [0x1800c0a24]
add ax, di
mov word [rbp + 0x1b0], ax
mov word [rbp + 0x1b2], r13w
movzx eax, word [rbp + 0x14c]
mov rcx, r13
lea r14d, [r10 - 0x32]
movzx eax, word [rbp + rcx*2 + 0x14c]
sub ax, di
mov word [rbp + rcx*2 + 0x14c], ax
add rcx, rdi
cmp rcx, r14
jb 0x18000b2ea
lea rcx, [r12 + 0x238]
lea r8, [rbp + 0x248]
lea rdx, [rbp + 0x2e8]
call fcn.18000ec94
mov rcx, qword [rax]
add rcx, 0x30
lea rdx, [rbp + 0x14c]
call fcn.18000d75c
nop
mov rdx, qword [rbp + 0x260]
cmp rdx, 7
mov r14d, 0x7c
jbe 0x18000b380
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b37b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000bd64
call fcn.18009529c
movdqa xmm0, xmmword [0x1800da290]
movdqu xmmword [rbp + 0x258], xmm0
mov word [rbp + 0x248], r13w
jmp 0x18000b3a3
mov esi, 0x7a
lea r15d, [rsi - 0xe]
mov byte [rsp + 0x68], 0x7b
mov byte [rsp + 0x69], r15b
mov r8d, reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x6a], r8b
lea ecx, [r8 - 6]
mov byte [rsp + 0x6b], cl
lea edx, [rcx + 9]
mov byte [rsp + 0x6c], dl
lea eax, [rcx - 2]
mov byte [rsp + 0x6d], al
mov byte [rsp + 0x6e], sil
mov byte [rsp + 0x6f], 0x81
lea r9d, [r8 + 5]
mov byte [rsp + 0x70], r9b
mov byte [rsp + 0x71], r14b
mov byte [rsp + 0x72], cl
mov byte [rsp + 0x73], r15b
mov byte [rsp + 0x74], 0x69
mov byte [rsp + 0x75], r9b
mov byte [rsp + 0x76], r9b
mov byte [rsp + 0x77], r14b
mov byte [rsp + 0x78], WSACleanup
mov byte [rsp + 0x79], al
mov byte [rsp + 0x7a], r8b
mov byte [rsp + 0x7b], cl
mov byte [rsp + 0x7c], r14b
lea eax, [rcx - 0x2f]
mov byte [rsp + 0x7d], al
lea eax, [rcx - 0x31]
mov byte [rsp + 0x7e], al
lea eax, [rcx - 0x37]
mov byte [rsp + 0x7f], al
mov byte [rbp - 0x80], r14b
mov byte [rbp - 0x7f], dl
mov byte [rbp - 0x7e], r8b
mov byte [rbp - 0x7d], r13b
mov al, byte [rsp + 0x68]
mov rcx, r13
lea esi, [rdx - 0x6e]
mov al, byte [rsp + rcx + 0x68]
sub al, sil
mov byte [rsp + rcx + 0x68], al
add rcx, rdi
cmp rcx, 0x1b
jb 0x18000b448
lea rcx, [rsp + 0x68]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp eax, edi
jne 0x18000bb3d
mov eax, 0x75
mov word [rbp + 0xdc], ax
lea r10d, [rax - 0xf]
mov word [rbp + 0xde], r10w
lea ecx, [rax - 8]
mov word [rbp + 0xe0], cx
lea r8d, [rax - 0xe]
mov word [rbp + 0xe2], r8w
lea eax, [rcx + 3]
mov word [rbp + 0xe4], ax
lea r9d, [r10 - 1]
mov word [rbp + 0xe6], r9w
lea eax, [rcx + 7]
mov word [rbp + 0xe8], ax
lea eax, [rcx + 0xe]
mov word [rbp + 0xea], ax
lea eax, [rcx + 5]
mov word [rbp + 0xec], ax
lea edx, [rcx + 9]
mov word [rbp + 0xee], dx
mov word [rbp + 0xf0], r8w
mov word [rbp + 0xf2], r10w
lea r11d, [r10 - 3]
mov word [rbp + 0xf4], r11w
mov word [rbp + 0xf6], ax
mov word [rbp + 0xf8], ax
mov word [rbp + 0xfa], dx
lea eax, [rcx - 2]
mov word [rbp + 0xfc], ax
mov word [rbp + 0xfe], r9w
mov word [rbp + 0x100], cx
mov word [rbp + 0x102], r8w
mov word [rbp + 0x104], dx
lea eax, [rcx - 0x35]
mov word [rbp + 0x106], ax
lea eax, [rcx - 0x37]
mov word [rbp + 0x108], ax
lea eax, [rcx - 0x3d]
mov word [rbp + 0x10a], ax
mov word [rbp + 0x10c], r10w
lea eax, [rcx + 1]
mov word [rbp + 0x10e], ax
mov word [rbp + 0x110], ax
lea edx, [rcx - 0x6b]
mov word [rbp + 0x112], dx
movzx eax, word [str.sdkencryptedappticket64.tnk]
add ax, dx
mov word [rbp + 0x114], ax
movzx eax, word [0x1800c0a52]
add ax, dx
mov word [rbp + 0x116], ax
movzx eax, word [0x1800c0a54]
add ax, dx
mov word [rbp + 0x118], ax
movzx eax, word [0x1800c0a56]
add ax, dx
mov word [rbp + 0x11a], ax
movzx eax, word [0x1800c0a58]
add ax, dx
mov word [rbp + 0x11c], ax
movzx eax, word [0x1800c0a5a]
add ax, dx
mov word [rbp + 0x11e], ax
movzx eax, word [0x1800c0a5c]
add ax, dx
mov word [rbp + 0x120], ax
movzx eax, word [0x1800c0a5e]
add ax, dx
mov word [rbp + 0x122], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, dx
mov word [rbp + 0x124], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, dx
mov word [rbp + 0x126], ax
movzx eax, word [0x1800c0a64]
add ax, dx
mov word [rbp + 0x128], ax
movzx eax, word [0x1800c0a66]
add ax, dx
mov word [rbp + 0x12a], ax
movzx eax, word [0x1800c0a68]
add ax, dx
mov word [rbp + 0x12c], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, dx
mov word [rbp + 0x12e], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, dx
mov word [rbp + 0x130], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, dx
mov word [rbp + 0x132], ax
movzx eax, word [0x1800c0a70]
add ax, dx
mov word [rbp + 0x134], ax
movzx eax, word [0x1800c0a72]
add ax, dx
mov word [rbp + 0x136], ax
movzx eax, word [0x1800c0a74]
add ax, dx
mov word [rbp + 0x138], ax
movzx eax, word [0x1800c0a76]
add ax, dx
mov word [rbp + 0x13a], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, dx
mov word [rbp + 0x13c], ax
movzx eax, word [0x1800c0a7a]
add ax, dx
mov word [rbp + 0x13e], ax
movzx eax, word [0x1800c0a7c]
add ax, dx
mov word [rbp + 0x140], ax
movzx eax, word [0x1800c0a7e]
add ax, dx
mov word [rbp + 0x142], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, dx
mov word [rbp + 0x144], ax
movzx eax, word [0x1800c0a82]
add ax, dx
mov word [rbp + 0x146], ax
movzx eax, word [0x1800c0a84]
add ax, dx
mov word [rbp + 0x148], ax
mov word [rbp + 0x14a], r13w
movzx eax, word [rbp + 0xdc]
mov rcx, r13
lea esi, [rdx + 0x35]
movzx eax, word [rbp + rcx*2 + 0xdc]
sub ax, dx
mov word [rbp + rcx*2 + 0xdc], ax
add rcx, rdi
cmp rcx, rsi
jb 0x18000b755
xorps xmm0, xmm0
movups xmmword [rbp + 0x268], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x278], xmm1
lea rax, [rbp + 0xdc]
or r8, 0xffffffffffffffff
lea esi, [r8 + 9]
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000b794
lea rdx, [rbp + 0xdc]
lea rcx, [rbp + 0x268]
call fcn.18000f420
nop
mov eax, 0x7b
mov word [rbp + 0x1b4], ax
mov word [rbp + 0x1b6], r15w
lea r9d, [rax - 8]
mov word [rbp + 0x1b8], r9w
lea edx, [rax - 0xe]
mov word [rbp + 0x1ba], dx
lea r8d, [rax - 5]
mov word [rbp + 0x1bc], r8w
lea ecx, [rax - 0x10]
mov word [rbp + 0x1be], cx
lea eax, [rdx + 0xd]
mov word [rbp + 0x1c0], ax
lea eax, [rdx + 0x14]
mov word [rbp + 0x1c2], ax
lea eax, [rdx + 0xb]
mov word [rbp + 0x1c4], ax
mov word [rbp + 0x1c6], r14w
mov word [rbp + 0x1c8], dx
mov word [rbp + 0x1ca], r15w
lea r10d, [r9 - 0xa]
mov word [rbp + 0x1cc], r10w
mov word [rbp + 0x1ce], ax
mov word [rbp + 0x1d0], ax
mov word [rbp + 0x1d2], r14w
lea eax, [rdx + 4]
mov word [rbp + 0x1d4], ax
mov word [rbp + 0x1d6], cx
mov word [rbp + 0x1d8], r9w
mov word [rbp + 0x1da], dx
mov word [rbp + 0x1dc], r14w
lea eax, [rdx - 0x2f]
mov word [rbp + 0x1de], ax
lea eax, [rdx - 0x31]
mov word [rbp + 0x1e0], ax
lea eax, [rdx - 0x37]
mov word [rbp + 0x1e2], ax
mov word [rbp + 0x1e4], r14w
mov word [rbp + 0x1e6], r8w
mov word [rbp + 0x1e8], r9w
mov word [rbp + 0x1ea], si
movzx eax, word [str.FAKES]
add ax, si
mov word [rbp + 0x1ec], ax
movzx eax, word [0x1800c0a8a]
add ax, si
mov word [rbp + 0x1ee], ax
movzx eax, word [0x1800c0a8c]
add ax, si
mov word [rbp + 0x1f0], ax
movzx eax, word [0x1800c0a8e]
add ax, si
mov word [rbp + 0x1f2], ax
movzx eax, word [str.HIDES]
add ax, si
mov word [rbp + 0x1f4], ax
movzx eax, word [0x1800c0a92]
add ax, si
mov word [rbp + 0x1f6], ax
movzx eax, word [0x1800c0a94]
add ax, si
mov word [rbp + 0x1f8], ax
movzx eax, word [0x1800c0a96]
add ax, si
mov word [rbp + 0x1fa], ax
movzx eax, word [str.INPUTS]
add ax, si
mov word [rbp + 0x1fc], ax
movzx eax, word [0x1800c0a9a]
add ax, si
mov word [rbp + 0x1fe], ax
movzx eax, word [0x1800c0a9c]
add ax, si
mov word [rbp + 0x200], ax
movzx eax, word [0x1800c0a9e]
add ax, si
mov word [rbp + 0x202], ax
movzx eax, word [0x1800c0aa0]
add ax, si
mov word [rbp + 0x204], ax
movzx eax, word [0x1800c0aa2]
add ax, si
mov word [rbp + 0x206], ax
movzx eax, word [0x1800c0aa4]
add ax, si
mov word [rbp + 0x208], ax
movzx eax, word [0x1800c0aa6]
add ax, si
mov word [rbp + 0x20a], ax
movzx eax, word [0x1800c0aa8]
add ax, si
mov word [rbp + 0x20c], ax
movzx eax, word [0x1800c0aaa]
add ax, si
mov word [rbp + 0x20e], ax
movzx eax, word [0x1800c0aac]
add ax, si
mov word [rbp + 0x210], ax
movzx eax, word [0x1800c0aae]
add ax, si
mov word [rbp + 0x212], ax
movzx eax, word [0x1800c0ab0]
add ax, si
mov word [rbp + 0x214], ax
movzx eax, word [0x1800c0ab2]
add ax, si
mov word [rbp + 0x216], ax
movzx eax, word [0x1800c0ab4]
add ax, si
mov word [rbp + 0x218], ax
movzx eax, word [0x1800c0ab6]
add ax, si
mov word [rbp + 0x21a], ax
movzx eax, word [str.steam_api.tnk]
add ax, si
mov word [rbp + 0x21c], ax
movzx eax, word [0x1800c0aba]
add ax, si
mov word [rbp + 0x21e], ax
movzx eax, word [0x1800c0abc]
add ax, si
mov word [rbp + 0x220], ax
mov word [rbp + 0x222], r13w
movzx eax, word [rbp + 0x1b4]
mov rcx, r13
lea r13d, [r9 - 0x3c]
movzx eax, word [rbp + rcx*2 + 0x1b4]
sub ax, si
mov word [rbp + rcx*2 + 0x1b4], ax
add rcx, rdi
cmp rcx, r13
jb 0x18000ba8f
lea rcx, [r12 + 0x238]
lea r8, [rbp + 0x268]
lea rdx, [rbp + 0x2f8]
call fcn.18000ec94
mov rcx, qword [rax]
add rcx, 0x30
lea rdx, [rbp + 0x1b4]
call fcn.18000d75c
nop
mov rdx, qword [rbp + 0x280]
cmp rdx, 7
mov r13d, 0
jbe 0x18000bb25
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000bb20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000bd52
call fcn.18009529c
movdqa xmm0, xmmword [0x1800da290]
movdqu xmmword [rbp + 0x278], xmm0
mov word [rbp + 0x268], r13w
mov byte [rbp + 0x800], 0x4c
mov byte [rbp + 0x801], 0x47
mov byte [rbp + 0x802], 0x51
mov byte [rbp + 0x803], 0x4b
mov byte [rbp + 0x804], 0x59
mov byte [rbp + 0x805], r13b
mov al, byte [rbp + 0x800]
mov rcx, r13
mov al, byte [rbp + rcx + 0x800]
sub al, 6
mov byte [rbp + rcx + 0x800], al
add rcx, rdi
cmp rcx, 5
jb 0x18000bb70
lea rdx, [rbp + 0x800]
mov rcx, rbx
call fcn.18006e6b0
mov rsi, rax
test rax, rax
je 0x18000bd31
xor edx, edx
mov rcx, rax
call fcn.18006e59c
mov r15d, edi
jmp 0x18000bd25
mov r9d, 0x80
lea r8, [rbp + 0x320]
mov rdx, rbx
mov rcx, rsi
call fcn.180006ebc
or rcx, 0xffffffffffffffff
mov r14, rcx
inc r14
cmp byte [rbx + r14], r13b
jne 0x18000bbd5
lea rax, [rbp + 0x320]
mov rdi, rcx
inc rdi
cmp byte [rax + rdi], r13b
jne 0x18000bbe8
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x3a0]
call fcn.1800970a0
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x5b0]
call fcn.1800970a0
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x3a0]
mov qword [rsp + 0x20], rax
mov r9d, r14d
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x20], rax
mov r9d, edi
lea r8, [rbp + 0x320]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xorps xmm0, xmm0
movups xmmword [rbp + 0x288], xmm0
mov qword [rbp + 0x298], r13
mov qword [rbp + 0x2a0], r13
lea rax, [rbp + 0x3a0]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000bc88
lea rdx, [rbp + 0x3a0]
lea rcx, [rbp + 0x288]
call fcn.18000f420
nop
lea r8, [rbp + 0x288]
lea rdx, [rbp + 0x308]
lea rcx, [r12 + 0x238]
call fcn.18000ec94
mov rcx, qword [rax]
add rcx, 0x30
lea rdx, [rbp + 0x5b0]
call fcn.18000d75c
nop
mov rdx, qword [rbp + 0x2a0]
cmp rdx, 7
jbe 0x18000bd17
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000bd12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000bd58
call fcn.18009529c
mov edx, r15d
mov rcx, rsi
call fcn.18006e59c
inc r15d
test rax, rax
mov rbx, rax
jne 0x18000bbb6
lea r11, [rsp + 0x8c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800995a0
int3
call fcn.1800995a0
int3
call fcn.1800995a0
int3
call fcn.1800995a0
int3