Function at 0x10008c19
Capabilities:
Check if file exists

Disassembly:
mov eax, 0x100895e8
call fcn.1008863c
sub esp, 0x840
push ebx
push esi
push edi
push 0x76
pop eax
push 0x77
mov byte [ebp - 0x24], al
mov esi, ecx
pop eax
push 0x68
pop ecx
push 0x64
pop edx
mov byte [ebp - 0x23], al
mov byte [ebp - 0x22], cl
push 0x70
pop ecx
mov byte [ebp - 0x21], dl
mov byte [ebp - 0x20], cl
push 0x62
pop ecx
mov byte [ebp - 0x1f], cl
push 0x73
pop ecx
mov byte [ebp - 0x1e], dl
mov byte [ebp - 0x1d], cl
push 0x6c
pop ecx
mov byte [ebp - 0x1c], cl
push 0x31
pop ecx
mov byte [ebp - 0x1b], cl
mov byte [ebp - 0x1a], al
push 0x71
pop eax
mov byte [ebp - 0x19], al
push 0x6e
pop eax
mov byte [ebp - 0x18], al
mov byte [ebp - 0x17], 0
mov al, byte [ebp - 0x24]
xor eax, eax
sub byte [ebp + eax - 0x24], 3
inc eax
cmp eax, 0xd
jb 0x10008c7f
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
lea eax, [ebp - 0x24]
push eax
call ebx
xor edi, edi
inc edi
mov dword [ebp - 0x7c], edi
push 3
pop ecx
cmp eax, edi
jne 0x10008fd9
push 0x76
pop eax
mov word [ebp - 0xb4], ax
push 0x77
pop eax
mov word [ebp - 0xb2], ax
push 0x68
pop eax
mov word [ebp - 0xb0], ax
push 0x64
pop edx
mov word [ebp - 0xae], dx
push 0x70
pop eax
mov word [ebp - 0xac], ax
push 0x62
pop eax
mov word [ebp - 0xaa], ax
mov word [ebp - 0xa8], dx
push 0x73
pop eax
mov word [ebp - 0xa6], ax
push 0x6c
pop eax
mov word [ebp - 0xa4], ax
push 0x31
pop eax
mov word [ebp - 0xa2], ax
push 0x67
pop eax
mov word [ebp - 0xa0], ax
push 0x6f
pop eax
mov word [ebp - 0x9e], ax
mov word [ebp - 0x9c], ax
mov ax, word [0x1008ec48]
add ax, cx
mov word [ebp - 0x9a], cx
mov word [ebp - 0x98], ax
mov ax, word [0x1008ec4a]
add ax, cx
mov word [ebp - 0x96], ax
mov ax, word [0x1008ec4c]
add ax, cx
mov word [ebp - 0x94], ax
mov ax, word [0x1008ec4e]
add ax, cx
mov word [ebp - 0x92], ax
mov ax, word [0x1008ec50]
add ax, cx
mov word [ebp - 0x90], ax
mov ax, word [0x1008ec52]
add ax, cx
mov word [ebp - 0x8e], ax
mov ax, word [0x1008ec54]
add ax, cx
mov word [ebp - 0x8c], ax
mov ax, word [0x1008ec56]
add ax, cx
mov word [ebp - 0x8a], ax
mov ax, word [0x1008ec58]
add ax, cx
mov word [ebp - 0x88], ax
mov ax, word [0x1008ec5a]
add ax, cx
mov word [ebp - 0x86], ax
mov ax, word [0x1008ec5c]
add ax, cx
mov word [ebp - 0x84], ax
mov ax, word [0x1008ec5e]
add ax, cx
mov word [ebp - 0x82], ax
mov ax, word [0x1008ec60]
add ax, cx
mov word [ebp - 0x80], ax
xor eax, eax
mov word [ebp - 0x7e], ax
mov ax, word [ebp - 0xb4]
xor eax, eax
sub word [ebp + eax*2 - 0xb4], cx
inc eax
cmp eax, 0x1b
jb 0x10008e06
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x35c]
call fcn.1000ad53
and dword [ebp - 4], 0
push 0x76
pop eax
mov word [ebp - 0xec], ax
push 0x77
pop eax
mov word [ebp - 0xea], ax
push 0x68
pop ecx
mov word [ebp - 0xe8], cx
push 0x64
pop edx
mov word [ebp - 0xe6], dx
push 0x70
pop ecx
mov word [ebp - 0xe4], cx
push 0x62
pop ecx
mov word [ebp - 0xe2], cx
mov word [ebp - 0xe0], dx
push 0x73
pop ecx
mov word [ebp - 0xde], cx
push 0x6c
pop ecx
mov word [ebp - 0xdc], cx
push 0x31
pop ecx
mov word [ebp - 0xda], cx
mov word [ebp - 0xd8], ax
push 0x71
pop eax
mov word [ebp - 0xd6], ax
push 0x6e
pop eax
mov word [ebp - 0xd4], ax
mov ax, word [0x1008ec64]
push 3
pop ecx
add ax, cx
mov word [ebp - 0xd2], cx
mov word [ebp - 0xd0], ax
mov ax, word [0x1008ec66]
add ax, cx
mov word [ebp - 0xce], ax
mov ax, word [0x1008ec68]
add ax, cx
mov word [ebp - 0xcc], ax
mov ax, word [0x1008ec6a]
add ax, cx
mov word [ebp - 0xca], ax
mov ax, word [0x1008ec6c]
add ax, cx
mov word [ebp - 0xc8], ax
mov ax, word [0x1008ec6e]
add ax, cx
mov word [ebp - 0xc6], ax
mov ax, word [0x1008ec70]
add ax, cx
mov word [ebp - 0xc4], ax
mov ax, word [0x1008ec72]
add ax, cx
mov word [ebp - 0xc2], ax
mov ax, word [str.steam_api64.dll]
add ax, cx
mov word [ebp - 0xc0], ax
mov ax, word [0x1008ec76]
add ax, cx
mov word [ebp - 0xbe], ax
mov ax, word [0x1008ec78]
add ax, cx
mov word [ebp - 0xbc], ax
mov ax, word [0x1008ec7a]
add ax, cx
mov word [ebp - 0xba], ax
mov ax, word [0x1008ec7c]
add ax, cx
mov word [ebp - 0xb8], ax
xor eax, eax
mov word [ebp - 0xb6], ax
mov ax, word [ebp - 0xec]
xor eax, eax
sub word [ebp + eax*2 - 0xec], cx
inc eax
cmp eax, 0x1b
jb 0x10008f92
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x324]
push eax
lea ecx, [esi + 0x1ac]
call fcn.1000ba23
lea ecx, [ebp - 0xec]
push ecx
mov ecx, dword [eax]
add ecx, 0x20
call fcn.1000acad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x35c]
call fcn.1000b157
push 0x7c
pop eax
mov byte [ebp - 0x3c], al
push 0x7d
pop eax
mov byte [ebp - 0x3b], al
push 0x6e
pop edx
mov byte [ebp - 0x3a], dl
push 0x6a
pop edx
mov byte [ebp - 0x39], dl
push 0x68
mov byte [ebp - 0x38], 0x76
pop ecx
mov byte [ebp - 0x37], cl
push 0x79
mov byte [ebp - 0x36], dl
pop ecx
mov byte [ebp - 0x35], cl
push 0x72
pop ecx
mov byte [ebp - 0x34], cl
mov byte [ebp - 0x33], 0x3f
mov byte [ebp - 0x32], 0x3d
mov byte [ebp - 0x31], 0x37
mov byte [ebp - 0x30], al
push 0x77
pop eax
mov byte [ebp - 0x2f], al
push 0x74
pop eax
mov byte [ebp - 0x2e], al
mov byte [ebp - 0x2d], 0
mov al, byte [ebp - 0x3c]
xor eax, eax
sub byte [ebp + eax - 0x3c], 9
inc eax
cmp eax, 0xf
jb 0x1000902e
lea eax, [ebp - 0x3c]
push eax
call ebx
mov dword [ebp - 0x78], 0x7f
mov dword [ebp - 0x28], 0x80
mov dword [ebp - 0x10], 0x75
mov dword [ebp - 0x2c], 0x7a
push 0x6d
pop edx
push 4
pop ecx
cmp eax, edi
jne 0x1000940e
push 0x77
pop eax
mov word [ebp - 0x12c], ax
push 0x78
pop eax
mov word [ebp - 0x12a], ax
push 0x69
pop eax
mov word [ebp - 0x128], ax
push 0x65
pop eax
mov word [ebp - 0x126], ax
push 0x71
pop eax
mov word [ebp - 0x124], ax
push 0x63
pop eax
mov word [ebp - 0x122], ax
push 0x65
pop eax
mov word [ebp - 0x120], ax
push 0x74
pop eax
mov word [ebp - 0x11e], ax
mov word [ebp - 0x11c], dx
push 0x3a
pop eax
mov word [ebp - 0x11a], ax
push 0x38
pop eax
mov word [ebp - 0x118], ax
push 0x32
pop eax
mov word [ebp - 0x116], ax
push 0x68
pop eax
mov word [ebp - 0x114], ax
push 0x70
pop eax
mov word [ebp - 0x112], ax
mov word [ebp - 0x110], ax
mov ax, word [0x1008ec94]
add ax, cx
mov word [ebp - 0x10e], cx
mov word [ebp - 0x10c], ax
mov ax, word [0x1008ec96]
add ax, cx
mov word [ebp - 0x10a], ax
mov ax, word [0x1008ec98]
add ax, cx
mov word [ebp - 0x108], ax
mov ax, word [0x1008ec9a]
add ax, cx
mov word [ebp - 0x106], ax
mov ax, word [0x1008ec9c]
add ax, cx
mov word [ebp - 0x104], ax
mov ax, word [0x1008ec9e]
add ax, cx
mov word [ebp - 0x102], ax
mov ax, word [0x1008eca0]
add ax, cx
mov word [ebp - 0x100], ax
mov ax, word [0x1008eca2]
add ax, cx
mov word [ebp - 0xfe], ax
mov ax, word [0x1008eca4]
add ax, cx
mov word [ebp - 0xfc], ax
mov ax, word [0x1008eca6]
add ax, cx
mov word [ebp - 0xfa], ax
mov ax, word [0x1008eca8]
add ax, cx
mov word [ebp - 0xf8], ax
mov ax, word [0x1008ecaa]
add ax, cx
mov word [ebp - 0xf6], ax
mov ax, word [0x1008ecac]
add ax, cx
mov word [ebp - 0xf4], ax
mov ax, word [0x1008ecae]
add ax, cx
mov word [ebp - 0xf2], ax
mov ax, word [0x1008ecb0]
add ax, cx
mov word [ebp - 0xf0], ax
xor eax, eax
mov word [ebp - 0xee], ax
mov ax, word [ebp - 0x12c]
xor eax, eax
sub word [ebp + eax*2 - 0x12c], cx
inc eax
cmp eax, 0x1f
jb 0x10009202
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x374]
call fcn.1000ad53
lea eax, [ebp - 0x374]
mov dword [ebp - 4], edi
push eax
lea eax, [ebp - 0x32c]
push eax
lea ecx, [esi + 0x1ac]
call fcn.1000ba23
push 0x71
mov ecx, dword [eax]
mov eax, dword [ebp - 0x78]
add ecx, 0x20
mov word [ebp - 0x16c], ax
mov eax, dword [ebp - 0x28]
mov word [ebp - 0x16a], ax
pop eax
mov word [ebp - 0x168], ax
push 0x6d
pop edx
mov word [ebp - 0x166], dx
push 0x79
pop eax
mov word [ebp - 0x164], ax
push 0x6b
pop eax
mov word [ebp - 0x162], ax
mov word [ebp - 0x160], dx
push 0x7c
pop eax
mov word [ebp - 0x15e], ax
mov eax, dword [ebp - 0x10]
mov word [ebp - 0x15c], ax
push 0x42
pop eax
mov word [ebp - 0x15a], ax
push 0x40
pop eax
mov word [ebp - 0x158], ax
push 0x3a
pop eax
mov word [ebp - 0x156], ax
mov eax, dword [ebp - 0x28]
mov word [ebp - 0x154], ax
mov eax, dword [ebp - 0x2c]
mov word [ebp - 0x152], ax
push 0x77
pop eax
mov word [ebp - 0x150], ax
mov ax, word [0x1008ecb4]
push 0xc
pop edx
add ax, dx
mov word [ebp - 0x14e], dx
mov word [ebp - 0x14c], ax
mov ax, word [0x1008ecb6]
add ax, dx
mov word [ebp - 0x14a], ax
mov ax, word [0x1008ecb8]
add ax, dx
mov word [ebp - 0x148], ax
mov ax, word [0x1008ecba]
add ax, dx
mov word [ebp - 0x146], ax
mov ax, word [0x1008ecbc]
add ax, dx
mov word [ebp - 0x144], ax
mov ax, word [0x1008ecbe]
add ax, dx
mov word [ebp - 0x142], ax
mov ax, word [0x1008ecc0]
add ax, dx
mov word [ebp - 0x140], ax
mov ax, word [0x1008ecc2]
add ax, dx
mov word [ebp - 0x13e], ax
mov ax, word [0x1008ecc4]
add ax, dx
mov word [ebp - 0x13c], ax
mov ax, word [0x1008ecc6]
add ax, dx
mov word [ebp - 0x13a], ax
mov ax, word [0x1008ecc8]
add ax, dx
mov word [ebp - 0x138], ax
mov ax, word [0x1008ecca]
add ax, dx
mov word [ebp - 0x136], ax
mov ax, word [0x1008eccc]
add ax, dx
mov word [ebp - 0x134], ax
mov ax, word [0x1008ecce]
add ax, dx
mov word [ebp - 0x132], ax
mov ax, word [str.sdkencryptedappticket.dll]
add ax, dx
mov word [ebp - 0x130], ax
xor eax, eax
mov word [ebp - 0x12e], ax
mov ax, word [ebp - 0x16c]
xor eax, eax
sub word [ebp + eax*2 - 0x16c], dx
inc eax
cmp eax, 0x1f
jb 0x100093e2
lea eax, [ebp - 0x16c]
push eax
call fcn.1000acad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x374]
call fcn.1000b157
push 0x6d
pop edx
push 0x7c
pop eax
mov byte [ebp - 0x56], al
mov byte [ebp - 0x55], dl
push 0x74
pop eax
mov byte [ebp - 0x54], al
push 0x6e
pop edx
mov byte [ebp - 0x53], dl
push 0x77
pop ecx
mov byte [ebp - 0x52], cl
push 0x6c
pop eax
mov byte [ebp - 0x51], al
push 0x7b
pop eax
mov byte [ebp - 0x50], al
mov byte [ebp - 0x4f], 0x82
push 0x79
pop eax
mov byte [ebp - 0x4e], al
push 0x7d
pop eax
mov byte [ebp - 0x4d], al
mov byte [ebp - 0x4c], dl
mov byte [ebp - 0x4b], 0x6d
mov byte [ebp - 0x4a], 0x6a
mov byte [ebp - 0x49], 0x79
mov byte [ebp - 0x48], 0x79
mov byte [ebp - 0x47], al
mov byte [ebp - 0x46], 0x72
mov byte [ebp - 0x45], 0x6c
mov byte [ebp - 0x44], 0x74
mov byte [ebp - 0x43], dl
mov byte [ebp - 0x42], al
mov byte [ebp - 0x41], 0x37
mov byte [ebp - 0x40], al
push 0x74
pop eax
mov byte [ebp - 0x3f], cl
mov byte [ebp - 0x3e], al
mov byte [ebp - 0x3d], 0
mov al, byte [ebp - 0x56]
xor eax, eax
sub byte [ebp + eax - 0x56], 9
inc eax
cmp eax, 0x19
jb 0x10009486
lea eax, [ebp - 0x56]
push eax
call ebx
cmp eax, edi
jne 0x10009a1c
mov eax, dword [ebp - 0x28]
mov word [ebp - 0x1d4], ax
push 0x71
pop eax
mov word [ebp - 0x1d2], ax
push 0x78
pop eax
mov word [ebp - 0x1d0], ax
push 0x72
pop edx
mov word [ebp - 0x1ce], dx
push 0x7b
pop eax
mov word [ebp - 0x1cc], ax
push 0x70
pop eax
mov word [ebp - 0x1ca], ax
mov eax, dword [ebp - 0x78]
mov word [ebp - 0x1c8], ax
lea eax, [edx + 0x14]
mov word [ebp - 0x1c6], ax
add eax, 0xfffffffb
push 0x7d
pop ecx
mov word [ebp - 0x1c4], cx
mov word [ebp - 0x1c2], ax
mov word [ebp - 0x1c0], dx
push 0x71
pop edx
mov word [ebp - 0x1be], dx
push 0x6e
pop edx
mov word [ebp - 0x1bc], dx
mov word [ebp - 0x1ba], cx
mov word [ebp - 0x1b8], cx
mov word [ebp - 0x1b6], ax
push 0x76
pop ecx
mov word [ebp - 0x1b4], cx
push 0x70
pop ecx
mov word [ebp - 0x1b2], cx
push 0x78
pop ecx
mov word [ebp - 0x1b0], cx
push 0x72
pop ecx
mov word [ebp - 0x1ae], cx
mov word [ebp - 0x1ac], ax
push 0x3b
pop eax
mov word [ebp - 0x1aa], ax
push 0x71
pop eax
mov word [ebp - 0x1a8], ax
push 0x79
pop eax
mov word [ebp - 0x1a6], ax
mov word [ebp - 0x1a4], ax
mov ax, word [str.sdkencryptedappticket.tnk]
push 0xd
pop ecx
add ax, cx
mov word [ebp - 0x1a2], cx
mov word [ebp - 0x1a0], ax
mov ax, word [0x1008ed06]
add ax, cx
mov word [ebp - 0x19e], ax
mov ax, word [0x1008ed08]
add ax, cx
mov word [ebp - 0x19c], ax
mov ax, word [0x1008ed0a]
add ax, cx
mov word [ebp - 0x19a], ax
mov ax, word [0x1008ed0c]
add ax, cx
mov word [ebp - 0x198], ax
mov ax, word [0x1008ed0e]
add ax, cx
mov word [ebp - 0x196], ax
mov ax, word [0x1008ed10]
add ax, cx
mov word [ebp - 0x194], ax
mov ax, word [0x1008ed12]
add ax, cx
mov word [ebp - 0x192], ax
mov ax, word [0x1008ed14]
add ax, cx
mov word [ebp - 0x190], ax
mov ax, word [0x1008ed16]
add ax, cx
mov word [ebp - 0x18e], ax
mov ax, word [0x1008ed18]
add ax, cx
mov word [ebp - 0x18c], ax
mov ax, word [0x1008ed1a]
add ax, cx
mov word [ebp - 0x18a], ax
mov ax, word [0x1008ed1c]
add ax, cx
mov word [ebp - 0x188], ax
mov ax, word [0x1008ed1e]
add ax, cx
mov word [ebp - 0x186], ax
mov ax, word [0x1008ed20]
add ax, cx
mov word [ebp - 0x184], ax
mov ax, word [0x1008ed22]
add ax, cx
mov word [ebp - 0x182], ax
mov ax, word [0x1008ed24]
add ax, cx
mov word [ebp - 0x180], ax
mov ax, word [0x1008ed26]
add ax, cx
mov word [ebp - 0x17e], ax
mov ax, word [0x1008ed28]
add ax, cx
mov word [ebp - 0x17c], ax
mov ax, word [0x1008ed2a]
add ax, cx
mov word [ebp - 0x17a], ax
mov ax, word [0x1008ed2c]
add ax, cx
mov word [ebp - 0x178], ax
mov ax, word [0x1008ed2e]
add ax, cx
mov word [ebp - 0x176], ax
mov ax, word [0x1008ed30]
add ax, cx
mov word [ebp - 0x174], ax
mov ax, word [0x1008ed32]
add ax, cx
mov word [ebp - 0x172], ax
mov ax, word [0x1008ed34]
add ax, cx
mov word [ebp - 0x170], ax
xor eax, eax
mov word [ebp - 0x16e], ax
mov ax, word [ebp - 0x1d4]
xor eax, eax
sub word [ebp + eax*2 - 0x1d4], cx
inc eax
cmp eax, 0x33
jb 0x10009733
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x38c]
call fcn.1000ad53
mov dword [ebp - 4], 2
push 0x74
pop eax
mov word [ebp - 0x23c], ax
push 0x65
pop eax
mov word [ebp - 0x23a], ax
push 0x6c
pop edx
push 0x66
mov word [ebp - 0x238], dx
pop eax
mov word [ebp - 0x236], ax
push 0x6f
pop eax
mov word [ebp - 0x234], ax
push 0x64
pop eax
mov word [ebp - 0x232], ax
push 0x73
pop eax
mov word [ebp - 0x230], ax
mov eax, dword [ebp - 0x2c]
mov word [ebp - 0x22e], ax
mov eax, dword [ebp - 0x10]
push 0x71
pop ecx
mov word [ebp - 0x22c], cx
mov word [ebp - 0x22a], ax
push 0x66
pop eax
mov word [ebp - 0x228], ax
push 0x65
pop eax
mov word [ebp - 0x226], ax
push 0x62
pop eax
mov word [ebp - 0x224], ax
mov eax, dword [ebp - 0x10]
mov word [ebp - 0x222], cx
mov word [ebp - 0x220], cx
mov word [ebp - 0x21e], ax
push 0x6a
pop ecx
mov word [ebp - 0x21c], cx
mov ecx, dword [ebp - 0x10]
push 0x64
pop eax
mov word [ebp - 0x21a], ax
mov word [ebp - 0x218], dx
push 0x66
pop eax
mov word [ebp - 0x216], ax
mov word [ebp - 0x214], cx
push 0x2f
pop eax
mov word [ebp - 0x212], ax
mov word [ebp - 0x210], cx
push 0x6f
pop eax
mov word [ebp - 0x20e], ax
mov ax, word [0x1008ed38]
inc ax
mov word [ebp - 0x20c], dx
mov word [ebp - 0x20a], di
mov word [ebp - 0x208], ax
mov ax, word [0x1008ed3a]
inc ax
mov word [ebp - 0x206], ax
mov ax, word [0x1008ed3c]
inc ax
mov word [ebp - 0x204], ax
mov ax, word [0x1008ed3e]
inc ax
mov word [ebp - 0x202], ax
mov ax, word [0x1008ed40]
inc ax
mov word [ebp - 0x200], ax
mov ax, word [0x1008ed42]
inc ax
mov word [ebp - 0x1fe], ax
mov ax, word [0x1008ed44]
inc ax
mov word [ebp - 0x1fc], ax
mov ax, word [0x1008ed46]
inc ax
mov word [ebp - 0x1fa], ax
mov ax, word [0x1008ed48]
inc ax
mov word [ebp - 0x1f8], ax
mov ax, word [0x1008ed4a]
inc ax
mov word [ebp - 0x1f6], ax
mov ax, word [0x1008ed4c]
inc ax
mov word [ebp - 0x1f4], ax
mov ax, word [0x1008ed4e]
inc ax
mov word [ebp - 0x1f2], ax
mov ax, word [0x1008ed50]
inc ax
mov word [ebp - 0x1f0], ax
mov ax, word [0x1008ed52]
inc ax
mov word [ebp - 0x1ee], ax
mov ax, word [str.sdkencryptedappticket64.dll]
inc ax
mov word [ebp - 0x1ec], ax
mov ax, word [0x1008ed56]
inc ax
mov word [ebp - 0x1ea], ax
mov ax, word [0x1008ed58]
inc ax
mov word [ebp - 0x1e8], ax
mov ax, word [0x1008ed5a]
inc ax
mov word [ebp - 0x1e6], ax
mov ax, word [0x1008ed5c]
inc ax
mov word [ebp - 0x1e4], ax
mov ax, word [0x1008ed5e]
inc ax
mov word [ebp - 0x1e2], ax
mov ax, word [0x1008ed60]
inc ax
mov word [ebp - 0x1e0], ax
mov ax, word [0x1008ed62]
inc ax
mov word [ebp - 0x1de], ax
mov ax, word [0x1008ed64]
inc ax
mov word [ebp - 0x1dc], ax
mov ax, word [0x1008ed66]
inc ax
mov word [ebp - 0x1da], ax
mov ax, word [0x1008ed68]
inc ax
mov word [ebp - 0x1d8], ax
xor eax, eax
mov word [ebp - 0x1d6], ax
mov ax, word [ebp - 0x23c]
xor eax, eax
sub word [ebp + eax*2 - 0x23c], di
inc eax
cmp eax, 0x33
jb 0x100099d5
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x334]
push eax
lea ecx, [esi + 0x1ac]
call fcn.1000ba23
lea ecx, [ebp - 0x23c]
push ecx
mov ecx, dword [eax]
add ecx, 0x20
call fcn.1000acad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38c]
call fcn.1000b157
push 0x71
mov byte [ebp - 0x72], 0x80
pop eax
mov byte [ebp - 0x71], al
push 0x78
pop eax
mov byte [ebp - 0x70], al
push 0x72
pop ecx
mov byte [ebp - 0x6f], cl
push 0x7b
pop eax
mov byte [ebp - 0x6e], al
mov eax, dword [ebp - 0x78]
push 0x70
pop edx
mov byte [ebp - 0x6d], dl
mov byte [ebp - 0x6c], al
mov byte [ebp - 0x6b], 0x86
push 0x7d
pop eax
mov byte [ebp - 0x6a], al
mov byte [ebp - 0x69], 0x81
mov byte [ebp - 0x68], cl
push 0x71
pop ecx
mov byte [ebp - 0x67], cl
push 0x6e
pop ecx
mov byte [ebp - 0x66], cl
mov byte [ebp - 0x65], al
mov byte [ebp - 0x64], al
push 0x76
pop eax
mov byte [ebp - 0x63], 0x81
mov byte [ebp - 0x62], al
push 0x78
pop ecx
mov byte [ebp - 0x61], dl
mov byte [ebp - 0x60], cl
push 0x72
pop eax
mov byte [ebp - 0x5f], al
mov byte [ebp - 0x5e], 0x81
mov byte [ebp - 0x5d], 0x43
push 0x3b
mov byte [ebp - 0x5c], 0x41
pop eax
mov byte [ebp - 0x5b], al
mov byte [ebp - 0x5a], 0x81
push 0x7b
pop eax
mov byte [ebp - 0x59], al
mov byte [ebp - 0x58], cl
mov byte [ebp - 0x57], 0
mov al, byte [ebp - 0x72]
xor eax, eax
sub byte [ebp + eax - 0x72], 0xd
inc eax
cmp eax, 0x1b
jb 0x10009aa8
lea eax, [ebp - 0x72]
push eax
call ebx
push 5
pop ebx
cmp eax, edi
jne 0x1000a0b9
push 0x78
pop eax
mov word [ebp - 0x2ac], ax
push 0x69
pop eax
mov word [ebp - 0x2aa], ax
push 0x70
pop ecx
push 0x6a
pop eax
push 0x73
mov word [ebp - 0x2a8], cx
mov word [ebp - 0x2a6], ax
pop eax
mov word [ebp - 0x2a4], ax
push 0x68
pop eax
mov word [ebp - 0x2a2], ax
push 0x77
pop eax
mov word [ebp - 0x2a0], ax
mov edi, dword [ebp - 0x10]
push 0x7e
pop eax
mov word [ebp - 0x29e], ax
push 0x79
pop edx
mov word [ebp - 0x29c], di
push 0x6a
pop eax
mov word [ebp - 0x29a], dx
mov word [ebp - 0x298], ax
push 0x69
pop eax
mov word [ebp - 0x296], ax
push 0x66
pop eax
mov word [ebp - 0x294], ax
mov word [ebp - 0x292], di
mov word [ebp - 0x290], di
push 0x6e
pop eax
mov word [ebp - 0x28e], dx
mov word [ebp - 0x28c], ax
push 0x68
pop eax
mov word [ebp - 0x28a], ax
push 0x6a
mov word [ebp - 0x288], cx
pop eax
mov word [ebp - 0x286], ax
push 0x3b
mov word [ebp - 0x284], dx
pop eax
mov word [ebp - 0x282], ax
push 0x39
pop eax
mov word [ebp - 0x280], ax
push 0x33
pop edi
mov word [ebp - 0x27e], di
push 0x69
pop eax
mov word [ebp - 0x27c], ax
push 0x71
pop eax
mov word [ebp - 0x27a], ax
mov word [ebp - 0x278], ax
mov ax, word [str.sdkencryptedappticket64.tnk]
add ax, bx
mov word [ebp - 0x276], bx
mov word [ebp - 0x274], ax
mov ax, word [0x1008ed8e]
add ax, bx
mov word [ebp - 0x272], ax
mov ax, word [0x1008ed90]
add ax, bx
mov word [ebp - 0x270], ax
mov ax, word [0x1008ed92]
add ax, bx
mov word [ebp - 0x26e], ax
mov ax, word [0x1008ed94]
add ax, bx
mov word [ebp - 0x26c], ax
mov ax, word [0x1008ed96]
add ax, bx
mov word [ebp - 0x26a], ax
mov ax, word [0x1008ed98]
add ax, bx
mov word [ebp - 0x268], ax
mov ax, word [0x1008ed9a]
add ax, bx
mov word [ebp - 0x266], ax
mov ax, word [0x1008ed9c]
add ax, bx
mov word [ebp - 0x264], ax
mov ax, word [0x1008ed9e]
add ax, bx
mov word [ebp - 0x262], ax
mov ax, word [0x1008eda0]
add ax, bx
mov word [ebp - 0x260], ax
mov ax, word [0x1008eda2]
add ax, bx
mov word [ebp - 0x25e], ax
mov ax, word [0x1008eda4]
add ax, bx
mov word [ebp - 0x25c], ax
mov ax, word [0x1008eda6]
add ax, bx
mov word [ebp - 0x25a], ax
mov ax, word [0x1008eda8]
add ax, bx
mov word [ebp - 0x258], ax
mov ax, word [0x1008edaa]
add ax, bx
mov word [ebp - 0x256], ax
mov ax, word [0x1008edac]
add ax, bx
mov word [ebp - 0x254], ax
mov ax, word [0x1008edae]
add ax, bx
mov word [ebp - 0x252], ax
mov ax, word [0x1008edb0]
add ax, bx
mov word [ebp - 0x250], ax
mov ax, word [0x1008edb2]
add ax, bx
mov word [ebp - 0x24e], ax
mov ax, word [0x1008edb4]
add ax, bx
mov word [ebp - 0x24c], ax
mov ax, word [0x1008edb6]
add ax, bx
mov word [ebp - 0x24a], ax
mov ax, word [0x1008edb8]
add ax, bx
mov word [ebp - 0x248], ax
mov ax, word [0x1008edba]
add ax, bx
mov word [ebp - 0x246], ax
mov ax, word [0x1008edbc]
add ax, bx
mov word [ebp - 0x244], ax
mov ax, word [0x1008edbe]
add ax, bx
mov word [ebp - 0x242], ax
mov ax, word [0x1008edc0]
add ax, bx
mov word [ebp - 0x240], ax
xor eax, eax
mov word [ebp - 0x23e], ax
mov ax, word [ebp - 0x2ac]
xor eax, eax
sub word [ebp + eax*2 - 0x2ac], bx
inc eax
cmp eax, 0x37
jb 0x10009d89
lea eax, [ebp - 0x2ac]
push eax
lea ecx, [ebp - 0x3a4]
call fcn.1000ad53
push 0x78
pop eax
mov dword [ebp - 4], 3
mov word [ebp - 0x31c], ax
push 0x69
pop eax
mov word [ebp - 0x31a], ax
push 0x70
pop ecx
push 0x6a
pop eax
mov word [ebp - 0x318], cx
mov word [ebp - 0x316], ax
push 0x73
pop eax
mov word [ebp - 0x314], ax
push 0x68
pop eax
mov word [ebp - 0x312], ax
push 0x77
pop eax
mov word [ebp - 0x310], ax
push 0x7e
pop eax
mov word [ebp - 0x30e], ax
mov eax, dword [ebp - 0x10]
mov word [ebp - 0x30c], ax
push 0x79
pop edx
mov word [ebp - 0x30a], dx
push 0x6a
pop eax
mov word [ebp - 0x308], ax
push 0x69
pop eax
mov word [ebp - 0x306], ax
push 0x66
pop eax
mov word [ebp - 0x304], ax
mov eax, dword [ebp - 0x10]
mov word [ebp - 0x302], ax
mov word [ebp - 0x300], ax
mov word [ebp - 0x2fe], dx
push 0x6e
pop eax
mov word [ebp - 0x2fc], ax
push 0x68
pop eax
mov word [ebp - 0x2fa], ax
mov word [ebp - 0x2f8], cx
push 0x6a
pop eax
mov word [ebp - 0x2f6], ax
mov word [ebp - 0x2f4], dx
push 0x3b
pop eax
mov word [ebp - 0x2f2], ax
push 0x39
pop eax
mov word [ebp - 0x2f0], ax
mov word [ebp - 0x2ee], di
mov word [ebp - 0x2ec], dx
push 0x73
pop eax
mov word [ebp - 0x2ea], ax
mov ax, word [str.FAKES]
add ax, bx
mov word [ebp - 0x2e8], cx
mov word [ebp - 0x2e6], bx
mov word [ebp - 0x2e4], ax
mov ax, word [0x1008edc6]
add ax, bx
mov word [ebp - 0x2e2], ax
mov ax, word [0x1008edc8]
add ax, bx
mov word [ebp - 0x2e0], ax
mov ax, word [0x1008edca]
add ax, bx
mov word [ebp - 0x2de], ax
mov ax, word [str.INPUTS]
add ax, bx
mov word [ebp - 0x2dc], ax
mov ax, word [0x1008edce]
add ax, bx
mov word [ebp - 0x2da], ax
mov ax, word [0x1008edd0]
add ax, bx
mov word [ebp - 0x2d8], ax
mov ax, word [0x1008edd2]
add ax, bx
mov word [ebp - 0x2d6], ax
mov ax, word [0x1008edd4]
add ax, bx
mov word [ebp - 0x2d4], ax
mov ax, word [0x1008edd6]
add ax, bx
mov word [ebp - 0x2d2], ax
mov ax, word [0x1008edd8]
add ax, bx
mov word [ebp - 0x2d0], ax
mov ax, word [0x1008edda]
add ax, bx
mov word [ebp - 0x2ce], ax
mov ax, word [0x1008eddc]
add ax, bx
mov word [ebp - 0x2cc], ax
mov ax, word [0x1008edde]
add ax, bx
mov word [ebp - 0x2ca], ax
mov ax, word [str.DOWN]
add ax, bx
mov word [ebp - 0x2c8], ax
mov ax, word [0x1008ede2]
add ax, bx
mov word [ebp - 0x2c6], ax
mov ax, word [0x1008ede4]
add ax, bx
mov word [ebp - 0x2c4], ax
mov ax, word [0x1008ede6]
add ax, bx
mov word [ebp - 0x2c2], ax
mov ax, word [str.LEFT]
add ax, bx
mov word [ebp - 0x2c0], ax
mov ax, word [0x1008edea]
add ax, bx
mov word [ebp - 0x2be], ax
mov ax, word [0x1008edec]
add ax, bx
mov word [ebp - 0x2bc], ax
mov ax, word [0x1008edee]
add ax, bx
mov word [ebp - 0x2ba], ax
mov ax, word [str.RIGHT]
add ax, bx
mov word [ebp - 0x2b8], ax
mov ax, word [0x1008edf2]
add ax, bx
mov word [ebp - 0x2b6], ax
mov ax, word [0x1008edf4]
add ax, bx
mov word [ebp - 0x2b4], ax
mov ax, word [0x1008edf6]
add ax, bx
mov word [ebp - 0x2b2], ax
mov ax, word [str.START]
add ax, bx
mov word [ebp - 0x2b0], ax
xor eax, eax
mov word [ebp - 0x2ae], ax
mov ax, word [ebp - 0x31c]
xor eax, eax
sub word [ebp + eax*2 - 0x31c], bx
inc eax
cmp eax, 0x37
jb 0x1000a072
lea eax, [ebp - 0x3a4]
push eax
lea eax, [ebp - 0x33c]
push eax
lea ecx, [esi + 0x1ac]
call fcn.1000ba23
lea ecx, [ebp - 0x31c]
push ecx
mov ecx, dword [eax]
add ecx, 0x20
call fcn.1000acad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a4]
call fcn.1000b157
mov byte [ebp - 0x16], 0x4e
mov byte [ebp - 0x15], 0x49
mov byte [ebp - 0x14], 0x53
mov byte [ebp - 0x13], 0x4d
mov byte [ebp - 0x12], 0x5b
mov byte [ebp - 0x11], 0
mov al, byte [ebp - 0x16]
xor eax, eax
sub byte [ebp + eax - 0x16], 8
inc eax
cmp eax, ebx
jb 0x1000a0d6
mov ecx, dword [ebp + 8]
lea edx, [ebp - 0x16]
call fcn.10059d36
mov ecx, eax
mov dword [ebp - 0x2c], ecx
test ecx, ecx
je 0x1000a20c
xor edx, edx
call fcn.10059c36
mov ebx, eax
test ebx, ebx
je 0x1000a20c
lea eax, [esi + 0x1ac]
mov dword [ebp + 8], eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x43c]
mov edx, ebx
push eax
call fcn.10005846
mov esi, ebx
pop ecx
pop ecx
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x1000a12a
lea edi, [ebp - 0x43c]
sub esi, ecx
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x1000a13c
push 0x208
lea eax, [ebp - 0x644]
sub edi, ecx
push 0
push eax
call sub.msvcrt.dll_memset
push 0x208
lea eax, [ebp - 0x84c]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0x18
lea eax, [ebp - 0x644]
push 0x104
push eax
push esi
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
call ebx
push 0x104
lea eax, [ebp - 0x84c]
push eax
push edi
lea eax, [ebp - 0x43c]
push eax
push 0
push 0
call ebx
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x3bc]
call fcn.1000ad53
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x344]
mov dword [ebp - 4], 4
push eax
call fcn.1000ba23
lea ecx, [ebp - 0x84c]
push ecx
mov ecx, dword [eax]
add ecx, 0x20
call fcn.1000acad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3bc]
call fcn.1000b157
mov edi, dword [ebp - 0x7c]
mov edx, edi
mov ecx, dword [ebp - 0x2c]
call fcn.10059c36
mov ebx, eax
inc edi
mov dword [ebp - 0x7c], edi
test ebx, ebx
jne 0x1000a112
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4