Function at 0x18000a418
Capabilities:
Check if file exists
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x4c8]
sub rsp, 0x5a0
mov rbx, rdx
mov r12, rcx
mov eax, 0x7c
mov byte [rbp - 0x60], al
lea ecx, [rax + 1]
mov byte [rbp - 0x5f], cl
lea eax, [rcx - 0xf]
mov byte [rbp - 0x5e], al
lea eax, [rcx - 0x13]
mov byte [rbp - 0x5d], al
lea edx, [rcx - 7]
mov byte [rbp - 0x5c], dl
lea edx, [rcx - 0x15]
mov byte [rbp - 0x5b], dl
mov byte [rbp - 0x5a], al
lea eax, [rcx - 4]
mov byte [rbp - 0x59], al
lea eax, [rcx - 0xb]
mov byte [rbp - 0x58], al
lea eax, [rcx - 0x46]
mov byte [rbp - 0x57], al
mov byte [rbp - 0x56], cl
lea eax, [rcx - 6]
mov byte [rbp - 0x55], al
lea eax, [rcx - 9]
mov byte [rbp - 0x54], al
xor r13d, r13d
mov byte [rbp - 0x53], r13b
mov al, byte [rbp - 0x60]
mov ecx, r13d
lea esi, [rdx - 0x5f]
lea r14d, [rdx - 0x67]
mov al, byte [rbp + rcx - 0x60]
sub al, sil
mov byte [rbp + rcx - 0x60], al
add rcx, r14
cmp rcx, 0xd
jb 0x18000a4a2
lea rcx, [rbp - 0x60]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
mov edx, 0x64
lea ecx, [rdx + 8]
lea edi, [rdx - 0x61]
lea r9d, [rdx + 0xf]
lea r10d, [rdx - 0x33]
lea r11d, [rdx + 3]
lea r15d, [rdx + 0xb]
cmp eax, r14d
jne 0x18000a80a
lea eax, [rdx + 0x12]
mov word [rbp - 0x60], ax
lea eax, [rdx + 0x13]
mov word [rbp - 0x5e], ax
lea eax, [rdx + 4]
mov word [rbp - 0x5c], ax
mov word [rbp - 0x5a], dx
lea eax, [rdx + 0xc]
mov word [rbp - 0x58], ax
lea eax, [rdx - 2]
mov word [rbp - 0x56], ax
mov word [rbp - 0x54], dx
mov word [rbp - 0x52], r9w
mov word [rbp - 0x50], cx
mov word [rbp - 0x4e], r10w
mov word [rbp - 0x4c], r11w
mov word [rbp - 0x4a], r15w
mov word [rbp - 0x48], r15w
mov word [rbp - 0x46], di
movzx eax, word [0x1800c094c]
add ax, di
mov word [rbp - 0x44], ax
movzx eax, word [0x1800c094e]
add ax, di
mov word [rbp - 0x42], ax
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
add ax, di
mov word [rbp - 0x40], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, di
mov word [rbp - 0x3e], ax
movzx eax, word [0x1800c0954]
add ax, di
mov word [rbp - 0x3c], ax
movzx eax, word [0x1800c0956]
add ax, di
mov word [rbp - 0x3a], ax
movzx eax, word [0x1800c0958]
add ax, di
mov word [rbp - 0x38], ax
movzx eax, word [0x1800c095a]
add ax, di
mov word [rbp - 0x36], ax
movzx eax, word [0x1800c095c]
add ax, di
mov word [rbp - 0x34], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, di
mov word [rbp - 0x32], ax
movzx eax, word [0x1800c0960]
add ax, di
mov word [rbp - 0x30], ax
movzx eax, word [0x1800c0962]
add ax, di
mov word [rbp - 0x2e], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, di
mov word [rbp - 0x2c], ax
mov word [rbp - 0x2a], r13w
movzx eax, word [rbp - 0x60]
mov rcx, r13
movzx eax, word [rbp + rcx*2 - 0x60]
sub ax, di
mov word [rbp + rcx*2 - 0x60], ax
add rcx, r14
cmp rcx, 0x1b
jb 0x18000a5f2
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea rax, [rbp - 0x60]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000a61f
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x28]
call fcn.18000f088
nop
mov eax, 0x7c
mov word [rsp + 0x30], ax
lea ecx, [rax + 1]
mov word [rsp + 0x32], cx
lea eax, [rcx - 0xf]
mov word [rsp + 0x34], ax
lea eax, [rcx - 0x13]
mov word [rsp + 0x36], ax
lea edx, [rcx - 7]
mov word [rsp + 0x38], dx
lea edx, [rcx - 0x15]
mov word [rsp + 0x3a], dx
mov word [rsp + 0x3c], ax
lea eax, [rcx - 4]
mov word [rsp + 0x3e], ax
lea eax, [rcx - 0xb]
mov word [rsp + 0x40], ax
lea eax, [rcx - 0x46]
mov word [rsp + 0x42], ax
mov word [rsp + 0x44], cx
lea eax, [rcx - 6]
mov word [rsp + 0x46], ax
lea eax, [rcx - 9]
mov word [rsp + 0x48], ax
mov word [rsp + 0x4a], si
movzx eax, word [0x1800c096c]
add ax, si
mov word [rsp + 0x4c], ax
movzx eax, word [0x1800c096e]
add ax, si
mov word [rsp + 0x4e], ax
movzx eax, word [0x1800c0970]
add ax, si
mov word [rsp + 0x50], ax
movzx eax, word [0x1800c0972]
add ax, si
mov word [rsp + 0x52], ax
movzx eax, word [0x1800c0974]
add ax, si
mov word [rsp + 0x54], ax
movzx eax, word [0x1800c0976]
add ax, si
mov word [rsp + 0x56], ax
movzx eax, word [0x1800c0978]
add ax, si
mov word [rsp + 0x58], ax
movzx eax, word [0x1800c097a]
add ax, si
mov word [rsp + 0x5a], ax
movzx eax, word [0x1800c097c]
add ax, si
mov word [rsp + 0x5c], ax
movzx eax, word [0x1800c097e]
add ax, si
mov word [rsp + 0x5e], ax
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
add ax, si
mov word [rsp + 0x60], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rsp + 0x62], ax
movzx eax, word [0x1800c0984]
add ax, si
mov word [rsp + 0x64], ax
mov word [rsp + 0x66], r13w
movzx eax, word [rsp + 0x30]
mov rcx, r13
movzx eax, word [rsp + rcx*2 + 0x30]
sub ax, si
mov word [rsp + rcx*2 + 0x30], ax
add rcx, r14
cmp rcx, 0x1b
jb 0x18000a771
lea rcx, [r12 + 0x238]
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x60]
call fcn.18000e93c
mov rcx, qword [rax]
add rcx, 0x30
lea rdx, [rsp + 0x30]
call fcn.18000d678
nop
mov rdx, qword [rbp - 0x10]
mov eax, 7
cmp rdx, rax
jbe 0x18000a7f2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a7ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ba1c
call fcn.180095c98
movdqa xmm0, xmmword [0x1800da7a0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r13w
mov r9d, reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x60], 0x7d
mov ecx, 0x7e
mov byte [rbp - 0x5f], cl
mov byte [rbp - 0x5e], r15b
lea edx, [rcx - 0x13]
mov byte [rbp - 0x5d], dl
lea eax, [rcx - 7]
mov byte [rbp - 0x5c], al
lea eax, [rcx - 0x15]
mov byte [rbp - 0x5b], al
mov byte [rbp - 0x5a], dl
lea eax, [rcx - 4]
mov byte [rbp - 0x59], al
mov byte [rbp - 0x58], r9b
lea eax, [rcx - 0x3e]
mov byte [rbp - 0x57], al
lea eax, [rcx - 0x40]
mov byte [rbp - 0x56], al
lea eax, [rcx - 0x46]
mov byte [rbp - 0x55], al
mov byte [rbp - 0x54], cl
lea eax, [rcx - 6]
mov byte [rbp - 0x53], al
lea r15d, [rcx - 9]
mov byte [rbp - 0x52], r15b
mov byte [rbp - 0x51], r13b
mov al, byte [rbp - 0x60]
mov rcx, r13
mov al, byte [rbp + rcx - 0x60]
sub al, 0xa
mov byte [rbp + rcx - 0x60], al
add rcx, r14
cmp rcx, 0xf
jb 0x18000a866
lea rcx, [rbp - 0x60]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
mov ecx, WSACleanup
cmp eax, r14d
jne 0x18000ac08
lea eax, [rcx + 5]
mov word [rsp + 0x30], ax
lea eax, [rcx + 6]
mov word [rsp + 0x32], ax
lea eax, [rcx - 9]
mov word [rsp + 0x34], ax
lea eax, [rcx - 0xd]
mov word [rsp + 0x36], ax
lea ecx, [rax + 0xc]
mov word [rsp + 0x38], cx
lea ecx, [rax - 2]
mov word [rsp + 0x3a], cx
mov word [rsp + 0x3c], ax
lea eax, [rcx + 0x11]
mov word [rsp + 0x3e], ax
lea eax, [rcx + 0xa]
mov word [rsp + 0x40], ax
lea eax, [rcx - 0x29]
mov word [rsp + 0x42], ax
lea eax, [rcx - 0x2b]
mov word [rsp + 0x44], ax
lea eax, [rcx - 0x31]
mov word [rsp + 0x46], ax
lea eax, [rcx + 5]
mov word [rsp + 0x48], ax
lea eax, [rcx + 0xd]
mov word [rsp + 0x4a], ax
mov word [rsp + 0x4c], ax
mov word [rsp + 0x4e], di
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
add ax, di
mov word [rsp + 0x50], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, di
mov word [rsp + 0x52], ax
movzx eax, word [0x1800c09a4]
add ax, di
mov word [rsp + 0x54], ax
movzx eax, word [0x1800c09a6]
add ax, di
mov word [rsp + 0x56], ax
movzx eax, word [0x1800c09a8]
add ax, di
mov word [rsp + 0x58], ax
movzx eax, word [0x1800c09aa]
add ax, di
mov word [rsp + 0x5a], ax
movzx eax, word [0x1800c09ac]
add ax, di
mov word [rsp + 0x5c], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, di
mov word [rsp + 0x5e], ax
movzx eax, word [0x1800c09b0]
add ax, di
mov word [rsp + 0x60], ax
movzx eax, word [0x1800c09b2]
add ax, di
mov word [rsp + 0x62], ax
movzx eax, word [0x1800c09b4]
add ax, di
mov word [rsp + 0x64], ax
movzx eax, word [0x1800c09b6]
add ax, di
mov word [rsp + 0x66], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, di
mov word [rsp + 0x68], ax
movzx eax, word [0x1800c09ba]
add ax, di
mov word [rsp + 0x6a], ax
movzx eax, word [0x1800c09bc]
add ax, di
mov word [rsp + 0x6c], ax
mov word [rsp + 0x6e], r13w
movzx eax, word [rsp + 0x30]
mov rcx, r13
movzx eax, word [rsp + rcx*2 + 0x30]
sub ax, di
mov word [rsp + rcx*2 + 0x30], ax
add rcx, r14
cmp rcx, 0x1f
jb 0x18000a9f7
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea rax, [rsp + 0x30]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000aa25
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.18000f088
nop
lea rcx, [r12 + 0x238]
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x60]
call fcn.18000e93c
mov rcx, qword [rax]
add rcx, 0x30
mov eax, 0x7f
mov word [rsp + 0x30], ax
lea r8d, [rax + 1]
mov word [rsp + 0x32], r8w
lea eax, [r8 - 0xf]
mov word [rsp + 0x34], ax
lea edx, [rax - 4]
mov word [rsp + 0x36], dx
lea eax, [rdx + 0xc]
mov word [rsp + 0x38], ax
lea eax, [rdx - 2]
mov word [rsp + 0x3a], ax
mov word [rsp + 0x3c], dx
lea eax, [rdx + 0xf]
mov word [rsp + 0x3e], ax
mov word [rsp + 0x40], r15w
lea eax, [rdx - 0x2b]
mov word [rsp + 0x42], ax
lea eax, [rdx - 0x2d]
mov word [rsp + 0x44], ax
lea eax, [rdx - 0x33]
mov word [rsp + 0x46], ax
mov word [rsp + 0x48], r8w
lea eax, [rdx + 0xd]
mov word [rsp + 0x4a], ax
lea eax, [rdx + 0xa]
mov word [rsp + 0x4c], ax
lea r8d, [rdx - 0x61]
mov word [rsp + 0x4e], r8w
movzx eax, word [0x1800c09c0]
add ax, r8w
mov word [rsp + 0x50], ax
movzx eax, word [0x1800c09c2]
add ax, r8w
mov word [rsp + 0x52], ax
movzx eax, word [0x1800c09c4]
add ax, r8w
mov word [rsp + 0x54], ax
movzx eax, word [0x1800c09c6]
add ax, r8w
mov word [rsp + 0x56], ax
movzx eax, word [0x1800c09c8]
add ax, r8w
mov word [rsp + 0x58], ax
movzx eax, word [0x1800c09ca]
add ax, r8w
mov word [rsp + 0x5a], ax
movzx eax, word [0x1800c09cc]
add ax, r8w
mov word [rsp + 0x5c], ax
movzx eax, word [0x1800c09ce]
add ax, r8w
mov word [rsp + 0x5e], ax
movzx eax, word [0x1800c09d0]
add ax, r8w
mov word [rsp + 0x60], ax
movzx eax, word [0x1800c09d2]
add ax, r8w
mov word [rsp + 0x62], ax
movzx eax, word [0x1800c09d4]
add ax, r8w
mov word [rsp + 0x64], ax
movzx eax, word [0x1800c09d6]
add ax, r8w
mov word [rsp + 0x66], ax
movzx eax, word [0x1800c09d8]
add ax, r8w
mov word [rsp + 0x68], ax
movzx eax, word [0x1800c09da]
add ax, r8w
mov word [rsp + 0x6a], ax
movzx eax, word [0x1800c09dc]
add ax, r8w
mov word [rsp + 0x6c], ax
mov word [rsp + 0x6e], r13w
movzx eax, word [rsp + 0x30]
mov rdx, r13
movzx eax, word [rsp + rdx*2 + 0x30]
sub ax, r8w
mov word [rsp + rdx*2 + 0x30], ax
add rdx, r14
cmp rdx, 0x1f
jb 0x18000abd8
lea rdx, [rsp + 0x30]
call fcn.18000d678
nop
lea rcx, [rbp - 0x28]
call fcn.18000d8b4
mov ecx, WSACleanup
mov eax, reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x60], al
mov byte [rbp - 0x5f], 0x65
lea edi, [rax - 8]
mov byte [rbp - 0x5e], dil
mov byte [rbp - 0x5d], 0x66
lea eax, [rdi + 3]
mov byte [rbp - 0x5c], al
mov byte [rbp - 0x5b], 0x64
mov byte [rbp - 0x5a], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x59], 0x7a
mov byte [rbp - 0x58], cl
mov byte [rbp - 0x57], r15b
mov byte [rbp - 0x56], 0x66
mov byte [rbp - 0x55], 0x65
mov byte [rbp - 0x54], 0x62
mov byte [rbp - 0x53], cl
mov byte [rbp - 0x52], cl
mov byte [rbp - 0x51], r15b
mov byte [rbp - 0x50], 0x6a
mov byte [rbp - 0x4f], 0x64
mov byte [rbp - 0x4e], dil
mov byte [rbp - 0x4d], 0x66
mov byte [rbp - 0x4c], r15b
mov byte [rbp - 0x4b], 0x2f
mov byte [rbp - 0x4a], r15b
mov byte [rbp - 0x49], al
mov byte [rbp - 0x48], dil
mov byte [rbp - 0x47], r13b
mov al, byte [rbp - 0x60]
mov rcx, r13
mov al, byte [rbp + rcx - 0x60]
sub al, r14b
mov byte [rbp + rcx - 0x60], al
add rcx, r14
cmp rcx, 0x19
jb 0x18000ac7b
lea rcx, [rbp - 0x60]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp eax, r14d
jne 0x18000b1da
mov eax, 0x7d
mov word [rsp + 0x30], ax
lea r10d, [rax - 0xf]
mov word [rsp + 0x32], r10w
mov word [rsp + 0x34], r15w
lea ecx, [rax - 0xe]
mov word [rsp + 0x36], cx
lea eax, [rcx + 9]
mov word [rsp + 0x38], ax
lea r9d, [r10 - 1]
mov word [rsp + 0x3a], r9w
lea eax, [rcx + 0xd]
mov word [rsp + 0x3c], ax
lea eax, [rcx + 0x14]
mov word [rsp + 0x3e], ax
lea edx, [rcx + 0xb]
mov word [rsp + 0x40], dx
lea eax, [rcx + 0xf]
mov word [rsp + 0x42], ax
mov word [rsp + 0x44], cx
mov word [rsp + 0x46], r10w
lea r8d, [r10 - 3]
mov word [rsp + 0x48], r8w
mov word [rsp + 0x4a], dx
mov word [rsp + 0x4c], dx
mov word [rsp + 0x4e], ax
lea edx, [rcx + 4]
mov word [rsp + 0x50], dx
mov word [rsp + 0x52], r9w
mov word [rsp + 0x54], r15w
mov word [rsp + 0x56], cx
mov word [rsp + 0x58], ax
lea eax, [rcx - 0x37]
mov word [rsp + 0x5a], ax
mov word [rsp + 0x5c], r10w
lea eax, [rcx + 7]
mov word [rsp + 0x5e], ax
mov word [rsp + 0x60], ax
lea edx, [rcx - 0x65]
mov word [rsp + 0x62], dx
movzx eax, word [0x1800c0a14]
add ax, dx
mov word [rsp + 0x64], ax
movzx eax, word [0x1800c0a16]
add ax, dx
mov word [rsp + 0x66], ax
movzx eax, word [str.sdkencryptedappticket.tnk]
add ax, dx
mov word [rsp + 0x68], ax
movzx eax, word [0x1800c0a1a]
add ax, dx
mov word [rsp + 0x6a], ax
movzx eax, word [0x1800c0a1c]
add ax, dx
mov word [rsp + 0x6c], ax
movzx eax, word [0x1800c0a1e]
add ax, dx
mov word [rsp + 0x6e], ax
movzx eax, word [0x1800c0a20]
add ax, dx
mov word [rsp + 0x70], ax
movzx eax, word [0x1800c0a22]
add ax, dx
mov word [rsp + 0x72], ax
movzx eax, word [0x1800c0a24]
add ax, dx
mov word [rsp + 0x74], ax
movzx eax, word [0x1800c0a26]
add ax, dx
mov word [rsp + 0x76], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, dx
mov word [rsp + 0x78], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, dx
mov word [rsp + 0x7a], ax
movzx eax, word [0x1800c0a2c]
add ax, dx
mov word [rsp + 0x7c], ax
movzx eax, word [0x1800c0a2e]
add ax, dx
mov word [rsp + 0x7e], ax
movzx eax, word [0x1800c0a30]
add ax, dx
mov word [rbp - 0x80], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, dx
mov word [rbp - 0x7e], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, dx
mov word [rbp - 0x7c], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, dx
mov word [rbp - 0x7a], ax
movzx eax, word [0x1800c0a38]
add ax, dx
mov word [rbp - 0x78], ax
movzx eax, word [0x1800c0a3a]
add ax, dx
mov word [rbp - 0x76], ax
movzx eax, word [0x1800c0a3c]
add ax, dx
mov word [rbp - 0x74], ax
movzx eax, word [0x1800c0a3e]
add ax, dx
mov word [rbp - 0x72], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, dx
mov word [rbp - 0x70], ax
movzx eax, word [0x1800c0a42]
add ax, dx
mov word [rbp - 0x6e], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, dx
mov word [rbp - 0x6c], ax
mov word [rbp - 0x6a], r13w
movzx eax, word [rsp + 0x30]
mov rcx, r13
movzx eax, word [rsp + rcx*2 + 0x30]
sub ax, dx
mov word [rsp + rcx*2 + 0x30], ax
add rcx, r14
cmp rcx, 0x33
jb 0x18000aed4
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea rax, [rsp + 0x30]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000af02
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.18000f088
nop
mov eax, 0x7a
mov word [rsp + 0x30], ax
lea edx, [rax - 0xf]
mov word [rsp + 0x32], dx
lea r9d, [rax - 8]
mov word [rsp + 0x34], r9w
mov word [rsp + 0x36], di
mov word [rsp + 0x38], r15w
lea eax, [rdx - 1]
mov word [rsp + 0x3a], ax
lea ecx, [rdx + 0xe]
mov word [rsp + 0x3c], cx
lea ecx, [rdx + 0x15]
mov word [rsp + 0x3e], cx
lea ecx, [rdx + 0xc]
mov word [rsp + 0x40], cx
lea r8d, [rdx + 0x10]
mov word [rsp + 0x42], r8w
mov word [rsp + 0x44], di
mov word [rsp + 0x46], dx
lea edx, [rax - 2]
mov word [rsp + 0x48], dx
mov word [rsp + 0x4a], cx
mov word [rsp + 0x4c], cx
mov word [rsp + 0x4e], r8w
lea ecx, [rax + 6]
mov word [rsp + 0x50], cx
mov word [rsp + 0x52], ax
mov word [rsp + 0x54], r9w
mov word [rsp + 0x56], di
mov word [rsp + 0x58], r8w
lea eax, [rdx - 0x33]
mov word [rsp + 0x5a], ax
mov word [rsp + 0x5c], r8w
mov word [rsp + 0x5e], r15w
mov word [rsp + 0x60], r9w
lea edx, [rcx - 0x69]
mov word [rsp + 0x62], dx
movzx eax, word [0x1800c0a4c]
add ax, dx
mov word [rsp + 0x64], ax
movzx eax, word [0x1800c0a4e]
add ax, dx
mov word [rsp + 0x66], ax
movzx eax, word [0x1800c0a50]
add ax, dx
mov word [rsp + 0x68], ax
movzx eax, word [0x1800c0a52]
add ax, dx
mov word [rsp + 0x6a], ax
movzx eax, word [0x1800c0a54]
add ax, dx
mov word [rsp + 0x6c], ax
movzx eax, word [0x1800c0a56]
add ax, dx
mov word [rsp + 0x6e], ax
movzx eax, word [0x1800c0a58]
add ax, dx
mov word [rsp + 0x70], ax
movzx eax, word [0x1800c0a5a]
add ax, dx
mov word [rsp + 0x72], ax
movzx eax, word [0x1800c0a5c]
add ax, dx
mov word [rsp + 0x74], ax
movzx eax, word [0x1800c0a5e]
add ax, dx
mov word [rsp + 0x76], ax
movzx eax, word [0x1800c0a60]
add ax, dx
mov word [rsp + 0x78], ax
movzx eax, word [0x1800c0a62]
add ax, dx
mov word [rsp + 0x7a], ax
movzx eax, word [0x1800c0a64]
add ax, dx
mov word [rsp + 0x7c], ax
movzx eax, word [0x1800c0a66]
add ax, dx
mov word [rsp + 0x7e], ax
movzx eax, word [0x1800c0a68]
add ax, dx
mov word [rbp - 0x80], ax
movzx eax, word [0x1800c0a6a]
add ax, dx
mov word [rbp - 0x7e], ax
movzx eax, word [0x1800c0a6c]
add ax, dx
mov word [rbp - 0x7c], ax
movzx eax, word [0x1800c0a6e]
add ax, dx
mov word [rbp - 0x7a], ax
movzx eax, word [str.sdkencryptedappticket64.dll]
add ax, dx
mov word [rbp - 0x78], ax
movzx eax, word [0x1800c0a72]
add ax, dx
mov word [rbp - 0x76], ax
movzx eax, word [0x1800c0a74]
add ax, dx
mov word [rbp - 0x74], ax
movzx eax, word [0x1800c0a76]
add ax, dx
mov word [rbp - 0x72], ax
movzx eax, word [0x1800c0a78]
add ax, dx
mov word [rbp - 0x70], ax
movzx eax, word [0x1800c0a7a]
add ax, dx
mov word [rbp - 0x6e], ax
movzx eax, word [0x1800c0a7c]
add ax, dx
mov word [rbp - 0x6c], ax
mov word [rbp - 0x6a], r13w
movzx eax, word [rsp + 0x30]
mov rcx, r13
movzx eax, word [rsp + rcx*2 + 0x30]
sub ax, dx
mov word [rsp + rcx*2 + 0x30], ax
add rcx, r14
cmp rcx, 0x33
jb 0x18000b147
lea rcx, [r12 + 0x238]
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x60]
call fcn.18000e93c
mov rcx, qword [rax]
add rcx, 0x30
lea rdx, [rsp + 0x30]
call fcn.18000d678
nop
mov rdx, qword [rbp - 0x10]
mov eax, 7
cmp rdx, rax
jbe 0x18000b1c8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b1c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ba22
call fcn.180095c98
movdqa xmm0, xmmword [0x1800da7a0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r13w
mov eax, reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x60], al
mov byte [rbp - 0x5f], 0x65
mov byte [rbp - 0x5e], dil
mov byte [rbp - 0x5d], 0x66
mov eax, WSASetLastError
mov byte [rbp - 0x5c], al
mov byte [rbp - 0x5b], 0x64
lea ecx, [rax + 4]
mov byte [rbp - 0x5a], cl
lea ecx, [rax + 0xb]
mov byte [rbp - 0x59], cl
lea ecx, [rax + 2]
mov byte [rbp - 0x58], cl
mov byte [rbp - 0x57], r15b
mov byte [rbp - 0x56], 0x66
mov byte [rbp - 0x55], 0x65
mov byte [rbp - 0x54], 0x62
mov byte [rbp - 0x53], cl
mov byte [rbp - 0x52], cl
mov byte [rbp - 0x51], r15b
lea ecx, [rax - 5]
mov byte [rbp - 0x50], cl
mov byte [rbp - 0x4f], 0x64
mov byte [rbp - 0x4e], dil
mov byte [rbp - 0x4d], 0x66
mov byte [rbp - 0x4c], r15b
mov byte [rbp - 0x4b], 0x37
mov byte [rbp - 0x4a], 0x35
mov byte [rbp - 0x49], 0x2f
mov byte [rbp - 0x48], r15b
mov byte [rbp - 0x47], al
mov byte [rbp - 0x46], dil
mov byte [rbp - 0x45], r13b
mov al, byte [rbp - 0x60]
mov rcx, r13
mov al, byte [rbp + rcx - 0x60]
sub al, r14b
mov byte [rbp + rcx - 0x60], al
add rcx, r14
cmp rcx, 0x1b
jb 0x18000b25d
lea rcx, [rbp - 0x60]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp eax, r14d
jne 0x18000b817
mov eax, 0x7c
mov word [rsp + 0x30], ax
lea r8d, [rax - 0xf]
mov word [rsp + 0x32], r8w
lea edx, [rax - 8]
mov word [rsp + 0x34], dx
lea r10d, [rax - 0xe]
mov word [rsp + 0x36], r10w
lea eax, [rdx + 3]
mov word [rsp + 0x38], ax
mov word [rsp + 0x3a], di
lea eax, [rdx + 7]
mov word [rsp + 0x3c], ax
lea eax, [rdx + 0xe]
mov word [rsp + 0x3e], ax
lea r9d, [r8 + 0xc]
mov word [rsp + 0x40], r9w
lea ecx, [rdx + 9]
mov word [rsp + 0x42], cx
mov word [rsp + 0x44], r10w
mov word [rsp + 0x46], r8w
lea eax, [rdx - 0xa]
mov word [rsp + 0x48], ax
mov word [rsp + 0x4a], r9w
mov word [rsp + 0x4c], r9w
mov word [rsp + 0x4e], cx
lea eax, [rdx - 2]
mov word [rsp + 0x50], ax
mov word [rsp + 0x52], di
mov word [rsp + 0x54], dx
mov word [rsp + 0x56], r10w
mov word [rsp + 0x58], cx
lea eax, [rdx - 0x35]
mov word [rsp + 0x5a], ax
lea eax, [rdx - 0x37]
mov word [rsp + 0x5c], ax
lea edx, [rcx - 0x46]
mov word [rsp + 0x5e], dx
mov word [rsp + 0x60], r8w
mov word [rsp + 0x62], r15w
mov word [rsp + 0x64], r15w
mov word [rsp + 0x66], si
movzx eax, word [str.sdkencryptedappticket64.tnk]
add ax, si
mov word [rsp + 0x68], ax
movzx eax, word [0x1800c0aaa]
add ax, si
mov word [rsp + 0x6a], ax
movzx eax, word [0x1800c0aac]
add ax, si
mov word [rsp + 0x6c], ax
movzx eax, word [0x1800c0aae]
add ax, si
mov word [rsp + 0x6e], ax
movzx eax, word [0x1800c0ab0]
add ax, si
mov word [rsp + 0x70], ax
movzx eax, word [0x1800c0ab2]
add ax, si
mov word [rsp + 0x72], ax
movzx eax, word [0x1800c0ab4]
add ax, si
mov word [rsp + 0x74], ax
movzx eax, word [0x1800c0ab6]
add ax, si
mov word [rsp + 0x76], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, si
mov word [rsp + 0x78], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rsp + 0x7a], ax
movzx eax, word [0x1800c0abc]
add ax, si
mov word [rsp + 0x7c], ax
movzx eax, word [0x1800c0abe]
add ax, si
mov word [rsp + 0x7e], ax
movzx eax, word [0x1800c0ac0]
add ax, si
mov word [rbp - 0x80], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, si
mov word [rbp - 0x7e], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, si
mov word [rbp - 0x7c], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp - 0x7a], ax
movzx eax, word [0x1800c0ac8]
add ax, si
mov word [rbp - 0x78], ax
movzx eax, word [0x1800c0aca]
add ax, si
mov word [rbp - 0x76], ax
movzx eax, word [0x1800c0acc]
add ax, si
mov word [rbp - 0x74], ax
movzx eax, word [0x1800c0ace]
add ax, si
mov word [rbp - 0x72], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp - 0x70], ax
movzx eax, word [0x1800c0ad2]
add ax, si
mov word [rbp - 0x6e], ax
movzx eax, word [0x1800c0ad4]
add ax, si
mov word [rbp - 0x6c], ax
movzx eax, word [0x1800c0ad6]
add ax, si
mov word [rbp - 0x6a], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp - 0x68], ax
movzx eax, word [0x1800c0ada]
add ax, si
mov word [rbp - 0x66], ax
movzx eax, word [0x1800c0adc]
add ax, si
mov word [rbp - 0x64], ax
mov word [rbp - 0x62], r13w
movzx eax, word [rsp + 0x30]
mov rcx, r13
movzx eax, word [rsp + rcx*2 + 0x30]
sub ax, si
mov word [rsp + rcx*2 + 0x30], ax
add rcx, r14
cmp rcx, rdx
jb 0x18000b4dd
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea rax, [rsp + 0x30]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000b50a
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.18000f088
nop
mov eax, 0x7b
mov word [rsp + 0x30], ax
mov word [rsp + 0x32], di
lea ecx, [rax - 8]
mov word [rsp + 0x34], cx
lea r10d, [rax - 0xe]
mov word [rsp + 0x36], r10w
lea r8d, [rax - 5]
mov word [rsp + 0x38], r8w
lea edx, [rax - 0x10]
mov word [rsp + 0x3a], dx
lea eax, [rcx + 7]
mov word [rsp + 0x3c], ax
lea eax, [rcx + 0xe]
mov word [rsp + 0x3e], ax
lea eax, [rcx + 5]
mov word [rsp + 0x40], ax
lea r9d, [rcx + 9]
mov word [rsp + 0x42], r9w
mov word [rsp + 0x44], r10w
mov word [rsp + 0x46], di
lea r11d, [rcx - 0xa]
mov word [rsp + 0x48], r11w
mov word [rsp + 0x4a], ax
mov word [rsp + 0x4c], ax
mov word [rsp + 0x4e], r9w
lea eax, [rcx - 2]
mov word [rsp + 0x50], ax
mov word [rsp + 0x52], dx
mov word [rsp + 0x54], cx
mov word [rsp + 0x56], r10w
mov word [rsp + 0x58], r9w
lea eax, [rcx - 0x35]
mov word [rsp + 0x5a], ax
lea eax, [rcx - 0x37]
mov word [rsp + 0x5c], ax
lea eax, [rcx - 0x3d]
mov word [rsp + 0x5e], ax
mov word [rsp + 0x60], r9w
mov word [rsp + 0x62], r8w
mov word [rsp + 0x64], cx
lea edx, [rcx - 0x6b]
mov word [rsp + 0x66], dx
movzx eax, word [str.FAKES]
add ax, dx
mov word [rsp + 0x68], ax
movzx eax, word [0x1800c0ae2]
add ax, dx
mov word [rsp + 0x6a], ax
movzx eax, word [0x1800c0ae4]
add ax, dx
mov word [rsp + 0x6c], ax
movzx eax, word [0x1800c0ae6]
add ax, dx
mov word [rsp + 0x6e], ax
movzx eax, word [str.HIDES]
add ax, dx
mov word [rsp + 0x70], ax
movzx eax, word [0x1800c0aea]
add ax, dx
mov word [rsp + 0x72], ax
movzx eax, word [0x1800c0aec]
add ax, dx
mov word [rsp + 0x74], ax
movzx eax, word [0x1800c0aee]
add ax, dx
mov word [rsp + 0x76], ax
movzx eax, word [str.INPUTS]
add ax, dx
mov word [rsp + 0x78], ax
movzx eax, word [0x1800c0af2]
add ax, dx
mov word [rsp + 0x7a], ax
movzx eax, word [0x1800c0af4]
add ax, dx
mov word [rsp + 0x7c], ax
movzx eax, word [0x1800c0af6]
add ax, dx
mov word [rsp + 0x7e], ax
movzx eax, word [0x1800c0af8]
add ax, dx
mov word [rbp - 0x80], ax
movzx eax, word [0x1800c0afa]
add ax, dx
mov word [rbp - 0x7e], ax
movzx eax, word [0x1800c0afc]
add ax, dx
mov word [rbp - 0x7c], ax
movzx eax, word [0x1800c0afe]
add ax, dx
mov word [rbp - 0x7a], ax
movzx eax, word [0x1800c0b00]
add ax, dx
mov word [rbp - 0x78], ax
movzx eax, word [0x1800c0b02]
add ax, dx
mov word [rbp - 0x76], ax
movzx eax, word [0x1800c0b04]
add ax, dx
mov word [rbp - 0x74], ax
movzx eax, word [0x1800c0b06]
add ax, dx
mov word [rbp - 0x72], ax
movzx eax, word [0x1800c0b08]
add ax, dx
mov word [rbp - 0x70], ax
movzx eax, word [0x1800c0b0a]
add ax, dx
mov word [rbp - 0x6e], ax
movzx eax, word [0x1800c0b0c]
add ax, dx
mov word [rbp - 0x6c], ax
movzx eax, word [0x1800c0b0e]
add ax, dx
mov word [rbp - 0x6a], ax
movzx eax, word [str.steam_api.tnk]
add ax, dx
mov word [rbp - 0x68], ax
movzx eax, word [0x1800c0b12]
add ax, dx
mov word [rbp - 0x66], ax
movzx eax, word [0x1800c0b14]
add ax, dx
mov word [rbp - 0x64], ax
mov word [rbp - 0x62], r13w
movzx eax, word [rsp + 0x30]
mov rcx, r13
lea esi, [rdx + 0x2f]
movzx eax, word [rsp + rcx*2 + 0x30]
sub ax, dx
mov word [rsp + rcx*2 + 0x30], ax
add rcx, r14
cmp rcx, rsi
jb 0x18000b782
lea rcx, [r12 + 0x238]
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x60]
call fcn.18000e93c
mov rcx, qword [rax]
add rcx, 0x30
lea rdx, [rsp + 0x30]
call fcn.18000d678
nop
mov rdx, qword [rbp - 0x10]
mov eax, 7
cmp rdx, rax
lea esi, [rax + 2]
jbe 0x18000b805
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b800
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ba10
call fcn.180095c98
movdqa xmm0, xmmword [0x1800da7a0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r13w
mov byte [rbp + 0x4e0], 0x4f
mov byte [rbp + 0x4e1], 0x4a
mov byte [rbp + 0x4e2], 0x54
mov byte [rbp + 0x4e3], 0x4e
mov byte [rbp + 0x4e4], 0x5c
mov byte [rbp + 0x4e5], r13b
mov al, byte [rbp + 0x4e0]
mov rcx, r13
mov al, byte [rbp + rcx + 0x4e0]
sub al, sil
mov byte [rbp + rcx + 0x4e0], al
add rcx, r14
cmp rcx, 5
jb 0x18000b84a
lea rdx, [rbp + 0x4e0]
mov rcx, rbx
call fcn.18006ecfc
mov rsi, rax
test rax, rax
je 0x18000b9ef
xor edx, edx
mov rcx, rax
call fcn.18006ebe8
mov r15d, r14d
jmp 0x18000b9e3
mov r9d, 0x80
lea r8, [rbp]
mov rdx, rbx
mov rcx, rsi
call fcn.180006d9c
or rcx, 0xffffffffffffffff
mov r14, rcx
inc r14
cmp byte [rbx + r14], r13b
jne 0x18000b8ad
lea rax, [rbp]
mov rdi, rcx
inc rdi
cmp byte [rax + rdi], r13b
jne 0x18000b8bd
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x80]
call fcn.180097bb0
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x290]
call fcn.180097bb0
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x80]
mov qword [rsp + 0x20], rax
mov r9d, r14d
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x290]
mov qword [rsp + 0x20], rax
mov r9d, edi
lea r8, [rbp]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], r13
lea rax, [rbp + 0x80]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000b951
lea rdx, [rbp + 0x80]
lea rcx, [rbp - 0x28]
call fcn.18000f088
nop
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x60]
lea rcx, [r12 + 0x238]
call fcn.18000e93c
mov rcx, qword [rax]
add rcx, 0x30
lea rdx, [rbp + 0x290]
call fcn.18000d678
nop
mov rdx, qword [rbp - 0x10]
mov eax, 7
cmp rdx, rax
jbe 0x18000b9d5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b9d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ba16
call fcn.180095c98
mov edx, r15d
mov rcx, rsi
call fcn.18006ebe8
inc r15d
test rax, rax
mov rbx, rax
jne 0x18000b891
lea r11, [rsp + 0x5a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18009a0b0
int3
call fcn.18009a0b0
int3
call fcn.18009a0b0
int3
call fcn.18009a0b0
int3