Function at 0x140034000
Capabilities:
Check if file exists
Get file attributes
Read file on windows
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x1400de0c0]
xor rax, rsp
mov qword [rbp + 8], rax
xor r14d, r14d
lea rdx, [0x1400e2210]
mov r9, qword [0x1400e2220]
cmp qword [0x1400e2228], 0xf
jbe 0x140034051
mov rdx, qword [0x1400e2210]
add r9, rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
cmp rdx, r9
jne 0x140034080
movdqa xmm0, xmmword [0x1400ce080]
movdqu xmmword [rsp + 0x78], xmm0
mov word [rsp + 0x68], r14w
jmp 0x14003408e
sub r9, rdx
lea rcx, [rsp + 0x68]
call fcn.140021ef0
nop
lea rcx, [rbp - 0x58]
call fcn.140042ea0
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x12
jb 0x1400340df
lea rsi, [rcx + 0x12]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp rdx, 7
jbe 0x1400340c2
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
mov r8d, 0x24
lea rdx, str._trainer_settings_
call fcn.1400a0560
mov word [rdi + rsi*2], r14w
jmp 0x140034105
mov qword [rsp + 0x20], SafeArrayUnaccessData
lea r9, str._trainer_settings_
movzx r8d, byte [rsp + 0x30]
mov edx, 0x12
mov rcx, rbx
call fcn.14002bd40
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x68], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
lea r9, [rsp + 0x68]
lea r8, [rbp - 0x78]
lea rcx, [rsp + 0x48]
call fcn.14003bf20
nop
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x140034181
lea rax, [rcx + 4]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x48]
cmp rdx, 7
cmova rax, qword [rsp + 0x48]
movabs rdx, 0x69006e0069002e
mov qword [rax + rcx*2], rdx
mov word [rax + rcx*2 + 8], r14w
lea rax, [rsp + 0x48]
jmp 0x1400341a6
mov qword [rsp + 0x20], 4
lea r9, str..ini
movzx r8d, byte [rsp + 0x30]
mov edx, 4
lea rcx, [rsp + 0x48]
call fcn.14002bd40
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x140034216
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034211
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034687
call fcn.140078e00
movdqa xmm0, xmmword [0x1400ce080]
movdqu xmmword [rsp + 0x58], xmm0
mov word [rsp + 0x48], r14w
mov rdx, qword [rbp - 0x60]
cmp rdx, 7
jbe 0x14003426b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034265
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003468d
call fcn.140078e00
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 7
jbe 0x1400342ab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400342a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034693
call fcn.140078e00
movdqa xmm0, xmmword [0x1400ce080]
movdqu xmmword [rbp - 0x48], xmm0
mov word [rbp - 0x58], r14w
mov rdx, qword [rbp - 0x80]
cmp rdx, 7
jbe 0x1400342fe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400342f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034699
call fcn.140078e00
lea rcx, [rbp - 0x38]
cmp qword [rbp - 0x20], 7
cmova rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14003461c
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
movdqa xmm1, xmmword [0x1400ce090]
movdqu xmmword [rbp - 0x48], xmm1
mov byte [rbp - 0x58], 0
movups xmmword [rsp + 0x48], xmm0
movdqa xmm1, xmmword [reloc.OLEAUT32.dll_SafeArrayDestroy]
movdqu xmmword [rsp + 0x58], xmm1
movsd xmm0, qword [str.GamePassExePath]
movsd qword [rsp + 0x48], xmm0
mov eax, dword [0x1400c9180]
mov dword [rsp + 0x50], eax
movzx eax, word [0x1400c9184]
mov word [rsp + 0x54], ax
movzx eax, byte [0x1400c9186]
mov byte [rsp + 0x56], al
mov byte [rsp + 0x57], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
movdqa xmm1, xmmword [reloc.OLEAUT32.dll_SysStringLen]
movdqu xmmword [rsp + 0x78], xmm1
mov eax, dword [str.Bypass]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1400c918c]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x6e], 0
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x38]
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x18]
call fcn.140033b50
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x140034408
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034403
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003469f
call fcn.140078e00
movdqa xmm0, xmmword [0x1400ce090]
movdqu xmmword [rsp + 0x78], xmm0
mov byte [rsp + 0x68], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x140034458
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034453
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400346a5
call fcn.140078e00
movdqa xmm0, xmmword [0x1400ce090]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x1400344a6
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400344a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400346ab
call fcn.140078e00
movdqa xmm0, xmmword [0x1400ce090]
movdqu xmmword [rbp - 0x48], xmm0
mov byte [rbp - 0x58], 0
cmp qword [rbp - 8], 3
jbe 0x1400345cb
mov rbx, qword [0x1400e1c30]
lea rdi, [0x1400e2280]
mov qword [rsp + 0x40], rdi
mov rcx, rdi
call fcn.140077e88
test eax, eax
jne 0x1400346b1
cmp dword [0x1400e22cc], 0x7fffffff
je 0x1400346bc
mov dword [rsp + 0x38], 0xa
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x34]
lea r8d, [rax + 4]
lea rdx, [rsp + 0x38]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x60], r14
mov ecx, 0x20
call fcn.140078e34
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x68], SafeArrayUnaccessData
mov qword [rbp - 0x60], 0x1f
movups xmm0, xmmword [str.SET_GAMEPASS_EXE_PATH]
movups xmmword [rax], xmm0
mov ecx, dword [0x1400c95c8]
mov dword [rax + 0x10], ecx
movzx ecx, byte [0x1400c95cc]
mov byte [rax + 0x14], cl
mov byte [rax + 0x15], 0
lea rdx, [rbp - 0x78]
mov rcx, rbx
call fcn.140030c60
mov dword [rsp + 0x34], r14d
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x38]
mov r8d, 4
lea rdx, [rsp + 0x34]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x34], 1
jne 0x1400345c2
lea rdx, [rbp - 0x18]
lea rcx, [rbp - 0x78]
call fcn.14001db40
mov rdx, rax
mov rcx, rbx
call fcn.140030d20
nop
mov rcx, rdi
call fcn.140077e90
nop
mov rdx, qword [rbp]
cmp rdx, 7
jbe 0x14003460b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034606
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400346d1
call fcn.140078e00
mov qword [rbp - 8], r14
mov qword [rbp], 7
mov word [rbp - 0x18], r14w
mov rdx, qword [rbp - 0x20]
cmp rdx, 7
jbe 0x140034658
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034653
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034681
call fcn.140078e00
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.140078de0
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call fcn.14007fef0
nop
call fcn.14007fef0
nop
call fcn.14007fef0
nop
call fcn.14007fef0
nop
call fcn.14007fef0
nop
call fcn.14007fef0
nop
call fcn.14007fef0
nop
call fcn.14007fef0
int3
mov ecx, 5
call fcn.140077dd8
int3
mov dword [0x1400e22cc], 0x7ffffffe
mov ecx, 6
call fcn.140077dd8
nop
call fcn.14007fef0
int3