Function at 0x18000a40c
Capabilities:
Check if file exists

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x4c8]
sub rsp, 0x5a0
mov rbx, rdx
mov r12, rcx
mov eax, 0x7b
mov byte [rbp - 0x60], al
mov eax, 0x7c
mov byte [rbp - 0x5f], al
lea ecx, [rax - 0xf]
mov byte [rbp - 0x5e], cl
lea ecx, [rax - 0x13]
mov byte [rbp - 0x5d], cl
lea edx, [rax - 7]
mov byte [rbp - 0x5c], dl
lea edx, [rax - 0x15]
mov byte [rbp - 0x5b], dl
mov byte [rbp - 0x5a], cl
lea ecx, [rax - 4]
mov byte [rbp - 0x59], cl
lea ecx, [rax - 0xb]
mov byte [rbp - 0x58], cl
lea ecx, [rax - 0x46]
mov byte [rbp - 0x57], cl
mov byte [rbp - 0x56], al
lea eax, [rdx + 0xf]
mov byte [rbp - 0x55], al
lea eax, [rdx + 0xc]
mov byte [rbp - 0x54], al
xor r13d, r13d
mov byte [rbp - 0x53], r13b
mov al, byte [rbp - 0x60]
mov ecx, r13d
lea edi, [rdx - 0x66]
lea r14d, [rdx - 0x5a]
mov al, byte [rbp + rcx - 0x60]
sub al, 8
mov byte [rbp + rcx - 0x60], al
add rcx, rdi
cmp rcx, r14
jb 0x18000a498
lea rcx, [rbp - 0x60]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
mov edx, 0x79
lea ecx, [rdx - 2]
lea r11d, [rdx + 6]
lea esi, [rdx - 0x70]
lea r9d, [rdx - 0x3f]
lea r10d, [rdx - 9]
lea r15d, [rdx - 0x6d]
cmp eax, edi
jne 0x18000a813
mov word [rbp - 0x60], r11w
lea eax, [rdx + 7]
mov word [rbp - 0x5e], ax
lea eax, [rdx - 8]
mov word [rbp - 0x5c], ax
lea ecx, [rdx - 0xc]
mov word [rbp - 0x5a], cx
mov word [rbp - 0x58], dx
lea eax, [rdx - 0xe]
mov word [rbp - 0x56], ax
mov word [rbp - 0x54], cx
lea eax, [rdx + 3]
mov word [rbp - 0x52], ax
lea eax, [rdx - 4]
mov word [rbp - 0x50], ax
mov word [rbp - 0x4e], r9w
mov word [rbp - 0x4c], r10w
lea eax, [rdx - 1]
mov word [rbp - 0x4a], ax
mov word [rbp - 0x48], ax
mov word [rbp - 0x46], r15w
movzx eax, word [0x1800c194c]
add ax, r15w
mov word [rbp - 0x44], ax
movzx eax, word [0x1800c194e]
add ax, r15w
mov word [rbp - 0x42], ax
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
add ax, r15w
mov word [rbp - 0x40], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, r15w
mov word [rbp - 0x3e], ax
movzx eax, word [0x1800c1954]
add ax, r15w
mov word [rbp - 0x3c], ax
movzx eax, word [0x1800c1956]
add ax, r15w
mov word [rbp - 0x3a], ax
movzx eax, word [0x1800c1958]
add ax, r15w
mov word [rbp - 0x38], ax
movzx eax, word [0x1800c195a]
add ax, r15w
mov word [rbp - 0x36], ax
movzx eax, word [0x1800c195c]
add ax, r15w
mov word [rbp - 0x34], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, r15w
mov word [rbp - 0x32], ax
movzx eax, word [0x1800c1960]
add ax, r15w
mov word [rbp - 0x30], ax
movzx eax, word [0x1800c1962]
add ax, r15w
mov word [rbp - 0x2e], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, r15w
mov word [rbp - 0x2c], ax
mov word [rbp - 0x2a], r13w
movzx eax, word [rbp - 0x60]
mov rcx, r13
movzx eax, word [rbp + rcx*2 - 0x60]
sub ax, r15w
mov word [rbp + rcx*2 - 0x60], ax
add rcx, rdi
cmp rcx, 0x1b
jb 0x18000a5f7
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea rax, [rbp - 0x60]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000a625
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x28]
call fcn.18000f0ec
nop
mov eax, 0x7c
mov word [rsp + 0x30], ax
mov eax, 0x7d
mov word [rsp + 0x32], ax
lea ecx, [rax - 0xf]
mov word [rsp + 0x34], cx
lea edx, [rax - 0x13]
mov word [rsp + 0x36], dx
lea ecx, [rax - 7]
mov word [rsp + 0x38], cx
lea ecx, [rax - 0x15]
mov word [rsp + 0x3a], cx
mov word [rsp + 0x3c], dx
lea r8d, [rax - 4]
mov word [rsp + 0x3e], r8w
lea ecx, [rax - 0xb]
mov word [rsp + 0x40], cx
lea edx, [rax - 0x46]
mov word [rsp + 0x42], dx
mov word [rsp + 0x44], ax
lea eax, [rcx + 5]
mov word [rsp + 0x46], ax
lea eax, [rcx + 2]
mov word [rsp + 0x48], ax
mov word [rsp + 0x4a], si
movzx eax, word [0x1800c196c]
add ax, si
mov word [rsp + 0x4c], ax
movzx eax, word [0x1800c196e]
add ax, si
mov word [rsp + 0x4e], ax
movzx eax, word [0x1800c1970]
add ax, si
mov word [rsp + 0x50], ax
movzx eax, word [0x1800c1972]
add ax, si
mov word [rsp + 0x52], ax
movzx eax, word [0x1800c1974]
add ax, si
mov word [rsp + 0x54], ax
movzx eax, word [0x1800c1976]
add ax, si
mov word [rsp + 0x56], ax
movzx eax, word [0x1800c1978]
add ax, si
mov word [rsp + 0x58], ax
movzx eax, word [0x1800c197a]
add ax, si
mov word [rsp + 0x5a], ax
movzx eax, word [0x1800c197c]
add ax, si
mov word [rsp + 0x5c], ax
movzx eax, word [0x1800c197e]
add ax, si
mov word [rsp + 0x5e], ax
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
add ax, si
mov word [rsp + 0x60], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rsp + 0x62], ax
movzx eax, word [0x1800c1984]
add ax, si
mov word [rsp + 0x64], ax
mov word [rsp + 0x66], r13w
movzx eax, word [rsp + 0x30]
mov rcx, r13
movzx eax, word [rsp + rcx*2 + 0x30]
sub ax, si
mov word [rsp + rcx*2 + 0x30], ax
add rcx, rdi
cmp rcx, 0x1b
jb 0x18000a77b
lea rcx, [r12 + 0x238]
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x60]
call fcn.18000e9a0
mov rcx, qword [rax]
add rcx, 0x30
lea rdx, [rsp + 0x30]
call fcn.18000d6dc
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
jbe 0x18000a7f8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a7f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ba7f
call fcn.180095ea4
movdqa xmm0, xmmword [0x1800db7a0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r13w
mov ecx, 0x77
lea r10d, [rcx - 7]
mov eax, 0x76
mov byte [rbp - 0x60], al
mov byte [rbp - 0x5f], cl
mov eax, 0x68
mov byte [rbp - 0x5e], al
mov byte [rbp - 0x5d], 0x64
mov byte [rbp - 0x5c], r10b
mov byte [rbp - 0x5b], 0x62
mov byte [rbp - 0x5a], 0x64
mov byte [rbp - 0x59], reloc.WS2_32.dll_WSAStartup
mov eax, WSASetLastError
mov byte [rbp - 0x58], al
mov eax, 0x39
mov byte [rbp - 0x57], al
mov eax, 0x37
mov byte [rbp - 0x56], al
mov byte [rbp - 0x55], 0x31
mov byte [rbp - 0x54], cl
mov eax, WSACleanup
mov byte [rbp - 0x53], al
mov eax, WSASetLastError
mov byte [rbp - 0x52], al
mov byte [rbp - 0x51], r13b
mov al, byte [rbp - 0x60]
mov rcx, r13
mov al, byte [rbp + rcx - 0x60]
sub al, 3
mov byte [rbp + rcx - 0x60], al
add rcx, rdi
cmp rcx, 0xf
jb 0x18000a873
lea rcx, [rbp - 0x60]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
mov ecx, 0x81
lea r8d, [rcx - 7]
lea r9d, [rcx - 0x3e]
lea r10d, [rcx - 0x40]
lea r11d, [rcx - 0x46]
cmp eax, edi
jne 0x18000ac2d
lea eax, [rcx - 1]
mov word [rsp + 0x30], ax
mov word [rsp + 0x32], cx
lea eax, [rcx - 0xf]
mov word [rsp + 0x34], ax
lea eax, [rcx - 0x13]
mov word [rsp + 0x36], ax
mov word [rsp + 0x38], r8w
lea edx, [rcx - 0x15]
mov word [rsp + 0x3a], dx
mov word [rsp + 0x3c], ax
lea eax, [rcx - 4]
mov word [rsp + 0x3e], ax
lea eax, [rcx - 0xb]
mov word [rsp + 0x40], ax
mov word [rsp + 0x42], r9w
mov word [rsp + 0x44], r10w
mov word [rsp + 0x46], r11w
lea eax, [rcx - 0x10]
mov word [rsp + 0x48], ax
lea eax, [rcx - 8]
mov word [rsp + 0x4a], ax
mov word [rsp + 0x4c], ax
mov word [rsp + 0x4e], r14w
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
add ax, r14w
mov word [rsp + 0x50], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, r14w
mov word [rsp + 0x52], ax
movzx eax, word [0x1800c19a4]
add ax, r14w
mov word [rsp + 0x54], ax
movzx eax, word [0x1800c19a6]
add ax, r14w
mov word [rsp + 0x56], ax
movzx eax, word [0x1800c19a8]
add ax, r14w
mov word [rsp + 0x58], ax
movzx eax, word [0x1800c19aa]
add ax, r14w
mov word [rsp + 0x5a], ax
movzx eax, word [0x1800c19ac]
add ax, r14w
mov word [rsp + 0x5c], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, r14w
mov word [rsp + 0x5e], ax
movzx eax, word [0x1800c19b0]
add ax, r14w
mov word [rsp + 0x60], ax
movzx eax, word [0x1800c19b2]
add ax, r14w
mov word [rsp + 0x62], ax
movzx eax, word [0x1800c19b4]
add ax, r14w
mov word [rsp + 0x64], ax
movzx eax, word [0x1800c19b6]
add ax, r14w
mov word [rsp + 0x66], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, r14w
mov word [rsp + 0x68], ax
movzx eax, word [0x1800c19ba]
add ax, r14w
mov word [rsp + 0x6a], ax
movzx eax, word [0x1800c19bc]
add ax, r14w
mov word [rsp + 0x6c], ax
mov word [rsp + 0x6e], r13w
movzx eax, word [rsp + 0x30]
mov rcx, r13
movzx eax, word [rsp + rcx*2 + 0x30]
sub ax, r14w
mov word [rsp + rcx*2 + 0x30], ax
add rcx, rdi
cmp rcx, 0x1f
jb 0x18000aa18
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea rax, [rsp + 0x30]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000aa47
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.18000f0ec
nop
lea rcx, [r12 + 0x238]
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x60]
call fcn.18000e9a0
mov rcx, qword [rax]
add rcx, 0x30
mov eax, 0x7b
mov word [rsp + 0x30], ax
lea edx, [rax + 1]
mov word [rsp + 0x32], dx
lea eax, [rdx - 0xf]
mov word [rsp + 0x34], ax
lea eax, [rdx - 0x13]
mov word [rsp + 0x36], ax
lea r8d, [rdx - 7]
mov word [rsp + 0x38], r8w
lea r8d, [rdx - 0x15]
mov word [rsp + 0x3a], r8w
mov word [rsp + 0x3c], ax
lea eax, [rdx - 4]
mov word [rsp + 0x3e], ax
lea eax, [rdx - 0xb]
mov word [rsp + 0x40], ax
lea eax, [rdx - 0x3e]
mov word [rsp + 0x42], ax
lea eax, [rdx - 0x40]
mov word [rsp + 0x44], ax
lea eax, [rdx - 0x46]
mov word [rsp + 0x46], ax
mov word [rsp + 0x48], dx
lea eax, [rdx - 6]
mov word [rsp + 0x4a], ax
lea eax, [rdx - 9]
mov word [rsp + 0x4c], ax
lea r8d, [rdx - 0x74]
mov word [rsp + 0x4e], r8w
movzx eax, word [0x1800c19c0]
add ax, r8w
mov word [rsp + 0x50], ax
movzx eax, word [0x1800c19c2]
add ax, r8w
mov word [rsp + 0x52], ax
movzx eax, word [0x1800c19c4]
add ax, r8w
mov word [rsp + 0x54], ax
movzx eax, word [0x1800c19c6]
add ax, r8w
mov word [rsp + 0x56], ax
movzx eax, word [0x1800c19c8]
add ax, r8w
mov word [rsp + 0x58], ax
movzx eax, word [0x1800c19ca]
add ax, r8w
mov word [rsp + 0x5a], ax
movzx eax, word [0x1800c19cc]
add ax, r8w
mov word [rsp + 0x5c], ax
movzx eax, word [0x1800c19ce]
add ax, r8w
mov word [rsp + 0x5e], ax
movzx eax, word [0x1800c19d0]
add ax, r8w
mov word [rsp + 0x60], ax
movzx eax, word [0x1800c19d2]
add ax, r8w
mov word [rsp + 0x62], ax
movzx eax, word [0x1800c19d4]
add ax, r8w
mov word [rsp + 0x64], ax
movzx eax, word [0x1800c19d6]
add ax, r8w
mov word [rsp + 0x66], ax
movzx eax, word [0x1800c19d8]
add ax, r8w
mov word [rsp + 0x68], ax
movzx eax, word [0x1800c19da]
add ax, r8w
mov word [rsp + 0x6a], ax
movzx eax, word [0x1800c19dc]
add ax, r8w
mov word [rsp + 0x6c], ax
mov word [rsp + 0x6e], r13w
movzx eax, word [rsp + 0x30]
mov rdx, r13
movzx eax, word [rsp + rdx*2 + 0x30]
sub ax, r8w
mov word [rsp + rdx*2 + 0x30], ax
add rdx, rdi
cmp rdx, 0x1f
jb 0x18000abfc
lea rdx, [rsp + 0x30]
call fcn.18000d6dc
nop
lea rcx, [rbp - 0x28]
call fcn.18000d918
mov r8d, 0x7a
mov byte [rbp - 0x60], 0x7f
mov byte [rbp - 0x5f], reloc.WS2_32.dll_WSASetLastError
mov ecx, 0x77
mov byte [rbp - 0x5e], cl
lea edx, [rcx - 6]
mov byte [rbp - 0x5d], dl
mov byte [rbp - 0x5c], r8b
lea r9d, [rcx - 8]
mov byte [rbp - 0x5b], r9b
lea eax, [rcx + 7]
mov byte [rbp - 0x5a], al
mov byte [rbp - 0x59], 0x85
lea eax, [rcx + 5]
mov byte [rbp - 0x58], al
mov byte [rbp - 0x57], 0x80
mov byte [rbp - 0x56], dl
mov byte [rbp - 0x55], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp - 0x54], WSASetLastError
mov byte [rbp - 0x53], al
mov byte [rbp - 0x52], al
mov byte [rbp - 0x51], 0x80
lea eax, [rcx - 2]
mov byte [rbp - 0x50], al
mov byte [rbp - 0x4f], r9b
mov byte [rbp - 0x4e], cl
mov byte [rbp - 0x4d], dl
mov byte [rbp - 0x4c], 0x80
mov byte [rbp - 0x4b], 0x3a
mov byte [rbp - 0x4a], 0x80
mov byte [rbp - 0x49], r8b
mov byte [rbp - 0x48], cl
mov byte [rbp - 0x47], r13b
mov al, byte [rbp - 0x60]
mov rcx, r13
mov al, byte [rbp + rcx - 0x60]
sub al, r15b
mov byte [rbp + rcx - 0x60], al
add rcx, rdi
cmp rcx, 0x19
jb 0x18000aca5
lea rcx, [rbp - 0x60]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
mov r8d, 0x82
lea r15d, [r8 - 6]
cmp eax, edi
jne 0x18000b212
mov word [rsp + 0x30], r15w
lea ecx, [r8 - 0x15]
mov word [rsp + 0x32], cx
lea r10d, [r8 - 0xe]
mov word [rsp + 0x34], r10w
lea edx, [rcx + 1]
mov word [rsp + 0x36], dx
lea eax, [rcx + 0xa]
mov word [rsp + 0x38], ax
lea r9d, [r8 - 0x16]
mov word [rsp + 0x3a], r9w
lea eax, [rcx + 0xe]
mov word [rsp + 0x3c], ax
mov word [rsp + 0x3e], r8w
lea r8d, [r15 - 3]
mov word [rsp + 0x40], r8w
lea eax, [rcx + 0x10]
mov word [rsp + 0x42], ax
mov word [rsp + 0x44], dx
mov word [rsp + 0x46], cx
lea r11d, [r15 - 0x12]
mov word [rsp + 0x48], r11w
mov word [rsp + 0x4a], r8w
mov word [rsp + 0x4c], r8w
mov word [rsp + 0x4e], ax
lea r8d, [r15 - 0xa]
mov word [rsp + 0x50], r8w
mov word [rsp + 0x52], r9w
mov word [rsp + 0x54], r10w
mov word [rsp + 0x56], dx
mov word [rsp + 0x58], ax
lea eax, [rcx - 0x36]
mov word [rsp + 0x5a], ax
mov word [rsp + 0x5c], cx
lea eax, [rcx + 8]
mov word [rsp + 0x5e], ax
mov word [rsp + 0x60], ax
mov word [rsp + 0x62], si
movzx eax, word [0x1800c1a14]
add ax, si
mov word [rsp + 0x64], ax
movzx eax, word [0x1800c1a16]
add ax, si
mov word [rsp + 0x66], ax
movzx eax, word [str.sdkencryptedappticket.tnk]
add ax, si
mov word [rsp + 0x68], ax
movzx eax, word [0x1800c1a1a]
add ax, si
mov word [rsp + 0x6a], ax
movzx eax, word [0x1800c1a1c]
add ax, si
mov word [rsp + 0x6c], ax
movzx eax, word [0x1800c1a1e]
add ax, si
mov word [rsp + 0x6e], ax
movzx eax, word [0x1800c1a20]
add ax, si
mov word [rsp + 0x70], ax
movzx eax, word [0x1800c1a22]
add ax, si
mov word [rsp + 0x72], ax
movzx eax, word [0x1800c1a24]
add ax, si
mov word [rsp + 0x74], ax
movzx eax, word [0x1800c1a26]
add ax, si
mov word [rsp + 0x76], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, si
mov word [rsp + 0x78], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rsp + 0x7a], ax
movzx eax, word [0x1800c1a2c]
add ax, si
mov word [rsp + 0x7c], ax
movzx eax, word [0x1800c1a2e]
add ax, si
mov word [rsp + 0x7e], ax
movzx eax, word [0x1800c1a30]
add ax, si
mov word [rbp - 0x80], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, si
mov word [rbp - 0x7e], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, si
mov word [rbp - 0x7c], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp - 0x7a], ax
movzx eax, word [0x1800c1a38]
add ax, si
mov word [rbp - 0x78], ax
movzx eax, word [0x1800c1a3a]
add ax, si
mov word [rbp - 0x76], ax
movzx eax, word [0x1800c1a3c]
add ax, si
mov word [rbp - 0x74], ax
movzx eax, word [0x1800c1a3e]
add ax, si
mov word [rbp - 0x72], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp - 0x70], ax
movzx eax, word [0x1800c1a42]
add ax, si
mov word [rbp - 0x6e], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp - 0x6c], ax
mov word [rbp - 0x6a], r13w
movzx eax, word [rsp + 0x30]
mov rcx, r13
movzx eax, word [rsp + rcx*2 + 0x30]
sub ax, si
mov word [rsp + rcx*2 + 0x30], ax
add rcx, rdi
cmp rcx, 0x33
jb 0x18000af05
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea rax, [rsp + 0x30]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000af33
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.18000f0ec
nop
mov eax, 0x7e
mov word [rsp + 0x30], ax
lea edx, [rax - 0xf]
mov word [rsp + 0x32], dx
lea r9d, [rax - 8]
mov word [rsp + 0x34], r9w
lea r10d, [rax - 0xe]
mov word [rsp + 0x36], r10w
lea r8d, [rax - 5]
mov word [rsp + 0x38], r8w
lea ecx, [rax - 0x10]
mov word [rsp + 0x3a], cx
lea eax, [rdx + 0xe]
mov word [rsp + 0x3c], ax
lea eax, [rdx + 0x15]
mov word [rsp + 0x3e], ax
lea eax, [rdx + 0xc]
mov word [rsp + 0x40], ax
lea r11d, [rdx + 0x10]
mov word [rsp + 0x42], r11w
mov word [rsp + 0x44], r10w
mov word [rsp + 0x46], dx
lea edx, [rcx - 2]
mov word [rsp + 0x48], dx
mov word [rsp + 0x4a], ax
mov word [rsp + 0x4c], ax
mov word [rsp + 0x4e], r11w
lea eax, [rcx + 6]
mov word [rsp + 0x50], ax
mov word [rsp + 0x52], cx
mov word [rsp + 0x54], r9w
mov word [rsp + 0x56], r10w
mov word [rsp + 0x58], r11w
lea eax, [rcx - 0x35]
mov word [rsp + 0x5a], ax
mov word [rsp + 0x5c], r11w
mov word [rsp + 0x5e], r8w
mov word [rsp + 0x60], r9w
lea edx, [rcx - 0x63]
mov word [rsp + 0x62], dx
movzx eax, word [0x1800c1a4c]
add ax, dx
mov word [rsp + 0x64], ax
movzx eax, word [0x1800c1a4e]
add ax, dx
mov word [rsp + 0x66], ax
movzx eax, word [0x1800c1a50]
add ax, dx
mov word [rsp + 0x68], ax
movzx eax, word [0x1800c1a52]
add ax, dx
mov word [rsp + 0x6a], ax
movzx eax, word [0x1800c1a54]
add ax, dx
mov word [rsp + 0x6c], ax
movzx eax, word [0x1800c1a56]
add ax, dx
mov word [rsp + 0x6e], ax
movzx eax, word [0x1800c1a58]
add ax, dx
mov word [rsp + 0x70], ax
movzx eax, word [0x1800c1a5a]
add ax, dx
mov word [rsp + 0x72], ax
movzx eax, word [0x1800c1a5c]
add ax, dx
mov word [rsp + 0x74], ax
movzx eax, word [0x1800c1a5e]
add ax, dx
mov word [rsp + 0x76], ax
movzx eax, word [0x1800c1a60]
add ax, dx
mov word [rsp + 0x78], ax
movzx eax, word [0x1800c1a62]
add ax, dx
mov word [rsp + 0x7a], ax
movzx eax, word [0x1800c1a64]
add ax, dx
mov word [rsp + 0x7c], ax
movzx eax, word [0x1800c1a66]
add ax, dx
mov word [rsp + 0x7e], ax
movzx eax, word [0x1800c1a68]
add ax, dx
mov word [rbp - 0x80], ax
movzx eax, word [0x1800c1a6a]
add ax, dx
mov word [rbp - 0x7e], ax
movzx eax, word [0x1800c1a6c]
add ax, dx
mov word [rbp - 0x7c], ax
movzx eax, word [0x1800c1a6e]
add ax, dx
mov word [rbp - 0x7a], ax
movzx eax, word [str.sdkencryptedappticket64.dll]
add ax, dx
mov word [rbp - 0x78], ax
movzx eax, word [0x1800c1a72]
add ax, dx
mov word [rbp - 0x76], ax
movzx eax, word [0x1800c1a74]
add ax, dx
mov word [rbp - 0x74], ax
movzx eax, word [0x1800c1a76]
add ax, dx
mov word [rbp - 0x72], ax
movzx eax, word [0x1800c1a78]
add ax, dx
mov word [rbp - 0x70], ax
movzx eax, word [0x1800c1a7a]
add ax, dx
mov word [rbp - 0x6e], ax
movzx eax, word [0x1800c1a7c]
add ax, dx
mov word [rbp - 0x6c], ax
mov word [rbp - 0x6a], r13w
movzx eax, word [rsp + 0x30]
mov rcx, r13
movzx eax, word [rsp + rcx*2 + 0x30]
sub ax, dx
mov word [rsp + rcx*2 + 0x30], ax
add rcx, rdi
cmp rcx, 0x33
jb 0x18000b183
lea rcx, [r12 + 0x238]
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x60]
call fcn.18000e9a0
mov rcx, qword [rax]
add rcx, 0x30
lea rdx, [rsp + 0x30]
call fcn.18000d6dc
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
jbe 0x18000b200
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b1fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ba85
call fcn.180095ea4
movdqa xmm0, xmmword [0x1800db7a0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r13w
mov byte [rbp - 0x60], r15b
mov edx, WSASetLastError
mov byte [rbp - 0x5f], dl
lea r11d, [rdx + 7]
mov byte [rbp - 0x5e], r11b
lea r8d, [rdx + 1]
mov byte [rbp - 0x5d], r8b
lea eax, [rdx + 0xa]
mov byte [rbp - 0x5c], al
lea r10d, [rdx - 1]
mov byte [rbp - 0x5b], r10b
mov byte [rbp - 0x5a], 0x7b
mov byte [rbp - 0x59], 0x82
lea r9d, [rdx + 0xc]
mov byte [rbp - 0x58], r9b
lea ecx, [rdx + 0x10]
mov byte [rbp - 0x57], cl
mov byte [rbp - 0x56], r8b
mov byte [rbp - 0x55], dl
lea edx, [rax - 0xd]
mov byte [rbp - 0x54], dl
mov byte [rbp - 0x53], r9b
mov byte [rbp - 0x52], r9b
mov byte [rbp - 0x51], cl
lea edx, [rax - 5]
mov byte [rbp - 0x50], dl
mov byte [rbp - 0x4f], r10b
mov byte [rbp - 0x4e], r11b
mov byte [rbp - 0x4d], r8b
mov byte [rbp - 0x4c], cl
lea edx, [rax - 0x38]
mov byte [rbp - 0x4b], dl
lea edx, [rax - 0x3a]
mov byte [rbp - 0x4a], dl
lea edx, [rax - 0x40]
mov byte [rbp - 0x49], dl
mov byte [rbp - 0x48], cl
mov byte [rbp - 0x47], al
mov byte [rbp - 0x46], r11b
mov byte [rbp - 0x45], r13b
mov al, byte [rbp - 0x60]
mov rcx, r13
mov al, byte [rbp + rcx - 0x60]
sub al, sil
mov byte [rbp + rcx - 0x60], al
add rcx, rdi
cmp rcx, 0x1b
jb 0x18000b2a5
lea rcx, [rbp - 0x60]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp eax, edi
jne 0x18000b87f
mov word [rsp + 0x30], r15w
mov ecx, WSASetLastError
mov word [rsp + 0x32], cx
lea r9d, [rcx + 7]
mov word [rsp + 0x34], r9w
lea edx, [rcx + 1]
mov word [rsp + 0x36], dx
lea eax, [rcx + 0xa]
mov word [rsp + 0x38], ax
lea r8d, [rcx - 1]
mov word [rsp + 0x3a], r8w
lea eax, [rcx + 0xe]
mov word [rsp + 0x3c], ax
lea eax, [rcx + 0x15]
mov word [rsp + 0x3e], ax
lea eax, [rcx + 0xc]
mov word [rsp + 0x40], ax
lea r15d, [rcx + 0x10]
mov word [rsp + 0x42], r15w
mov word [rsp + 0x44], dx
mov word [rsp + 0x46], cx
lea r11d, [rcx - 3]
mov word [rsp + 0x48], r11w
mov word [rsp + 0x4a], ax
mov word [rsp + 0x4c], ax
mov word [rsp + 0x4e], r15w
lea eax, [rcx + 5]
mov word [rsp + 0x50], ax
mov word [rsp + 0x52], r8w
mov word [rsp + 0x54], r9w
mov word [rsp + 0x56], dx
mov word [rsp + 0x58], r15w
lea eax, [rcx - 0x2e]
mov word [rsp + 0x5a], ax
lea eax, [rcx - 0x30]
mov word [rsp + 0x5c], ax
lea edx, [rcx - 0x36]
mov word [rsp + 0x5e], dx
mov word [rsp + 0x60], cx
lea eax, [rcx + 8]
mov word [rsp + 0x62], ax
mov word [rsp + 0x64], ax
mov word [rsp + 0x66], si
movzx eax, word [str.sdkencryptedappticket64.tnk]
add ax, si
mov word [rsp + 0x68], ax
movzx eax, word [0x1800c1aaa]
add ax, si
mov word [rsp + 0x6a], ax
movzx eax, word [0x1800c1aac]
add ax, si
mov word [rsp + 0x6c], ax
movzx eax, word [0x1800c1aae]
add ax, si
mov word [rsp + 0x6e], ax
movzx eax, word [0x1800c1ab0]
add ax, si
mov word [rsp + 0x70], ax
movzx eax, word [0x1800c1ab2]
add ax, si
mov word [rsp + 0x72], ax
movzx eax, word [0x1800c1ab4]
add ax, si
mov word [rsp + 0x74], ax
movzx eax, word [0x1800c1ab6]
add ax, si
mov word [rsp + 0x76], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, si
mov word [rsp + 0x78], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rsp + 0x7a], ax
movzx eax, word [0x1800c1abc]
add ax, si
mov word [rsp + 0x7c], ax
movzx eax, word [0x1800c1abe]
add ax, si
mov word [rsp + 0x7e], ax
movzx eax, word [0x1800c1ac0]
add ax, si
mov word [rbp - 0x80], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, si
mov word [rbp - 0x7e], ax
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
add ax, si
mov word [rbp - 0x7c], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp - 0x7a], ax
movzx eax, word [0x1800c1ac8]
add ax, si
mov word [rbp - 0x78], ax
movzx eax, word [0x1800c1aca]
add ax, si
mov word [rbp - 0x76], ax
movzx eax, word [0x1800c1acc]
add ax, si
mov word [rbp - 0x74], ax
movzx eax, word [0x1800c1ace]
add ax, si
mov word [rbp - 0x72], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp - 0x70], ax
movzx eax, word [0x1800c1ad2]
add ax, si
mov word [rbp - 0x6e], ax
movzx eax, word [0x1800c1ad4]
add ax, si
mov word [rbp - 0x6c], ax
movzx eax, word [0x1800c1ad6]
add ax, si
mov word [rbp - 0x6a], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
add ax, si
mov word [rbp - 0x68], ax
movzx eax, word [0x1800c1ada]
add ax, si
mov word [rbp - 0x66], ax
movzx eax, word [0x1800c1adc]
add ax, si
mov word [rbp - 0x64], ax
mov word [rbp - 0x62], r13w
movzx eax, word [rsp + 0x30]
mov rcx, r13
movzx eax, word [rsp + rcx*2 + 0x30]
sub ax, si
mov word [rsp + rcx*2 + 0x30], ax
add rcx, rdi
cmp rcx, rdx
jb 0x18000b526
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea rax, [rsp + 0x30]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000b553
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.18000f0ec
nop
mov eax, 0x80
mov word [rsp + 0x30], ax
lea ecx, [rax - 0xf]
mov word [rsp + 0x32], cx
lea r9d, [rax - 8]
mov word [rsp + 0x34], r9w
lea r10d, [rax - 0xe]
mov word [rsp + 0x36], r10w
lea r8d, [rax - 5]
mov word [rsp + 0x38], r8w
lea edx, [rax - 0x10]
mov word [rsp + 0x3a], dx
lea eax, [rcx + 0xe]
mov word [rsp + 0x3c], ax
lea eax, [rcx + 0x15]
mov word [rsp + 0x3e], ax
mov word [rsp + 0x40], r15w
lea r11d, [rcx + 0x10]
mov word [rsp + 0x42], r11w
mov word [rsp + 0x44], r10w
mov word [rsp + 0x46], cx
lea eax, [rcx - 3]
mov word [rsp + 0x48], ax
mov word [rsp + 0x4a], r15w
mov word [rsp + 0x4c], r15w
mov word [rsp + 0x4e], r11w
lea eax, [rcx + 5]
mov word [rsp + 0x50], ax
mov word [rsp + 0x52], dx
mov word [rsp + 0x54], r9w
mov word [rsp + 0x56], r10w
mov word [rsp + 0x58], r11w
lea eax, [rcx - 0x2e]
mov word [rsp + 0x5a], ax
lea eax, [rcx - 0x30]
mov word [rsp + 0x5c], ax
lea eax, [rcx - 0x36]
mov word [rsp + 0x5e], ax
mov word [rsp + 0x60], r11w
mov word [rsp + 0x62], r8w
mov word [rsp + 0x64], r9w
mov word [rsp + 0x66], r14w
movzx eax, word [str.FAKES]
add ax, r14w
mov word [rsp + 0x68], ax
movzx eax, word [0x1800c1ae2]
add ax, r14w
mov word [rsp + 0x6a], ax
movzx eax, word [0x1800c1ae4]
add ax, r14w
mov word [rsp + 0x6c], ax
movzx eax, word [0x1800c1ae6]
add ax, r14w
mov word [rsp + 0x6e], ax
movzx eax, word [str.HIDES]
add ax, r14w
mov word [rsp + 0x70], ax
movzx eax, word [0x1800c1aea]
add ax, r14w
mov word [rsp + 0x72], ax
movzx eax, word [0x1800c1aec]
add ax, r14w
mov word [rsp + 0x74], ax
movzx eax, word [0x1800c1aee]
add ax, r14w
mov word [rsp + 0x76], ax
movzx eax, word [str.INPUTS]
add ax, r14w
mov word [rsp + 0x78], ax
movzx eax, word [0x1800c1af2]
add ax, r14w
mov word [rsp + 0x7a], ax
movzx eax, word [0x1800c1af4]
add ax, r14w
mov word [rsp + 0x7c], ax
movzx eax, word [0x1800c1af6]
add ax, r14w
mov word [rsp + 0x7e], ax
movzx eax, word [0x1800c1af8]
add ax, r14w
mov word [rbp - 0x80], ax
movzx eax, word [0x1800c1afa]
add ax, r14w
mov word [rbp - 0x7e], ax
movzx eax, word [0x1800c1afc]
add ax, r14w
mov word [rbp - 0x7c], ax
movzx eax, word [0x1800c1afe]
add ax, r14w
mov word [rbp - 0x7a], ax
movzx eax, word [0x1800c1b00]
add ax, r14w
mov word [rbp - 0x78], ax
movzx eax, word [0x1800c1b02]
add ax, r14w
mov word [rbp - 0x76], ax
movzx eax, word [0x1800c1b04]
add ax, r14w
mov word [rbp - 0x74], ax
movzx eax, word [0x1800c1b06]
add ax, r14w
mov word [rbp - 0x72], ax
movzx eax, word [0x1800c1b08]
add ax, r14w
mov word [rbp - 0x70], ax
movzx eax, word [0x1800c1b0a]
add ax, r14w
mov word [rbp - 0x6e], ax
movzx eax, word [0x1800c1b0c]
add ax, r14w
mov word [rbp - 0x6c], ax
movzx eax, word [0x1800c1b0e]
add ax, r14w
mov word [rbp - 0x6a], ax
movzx eax, word [str.steam_api.tnk]
add ax, r14w
mov word [rbp - 0x68], ax
movzx eax, word [0x1800c1b12]
add ax, r14w
mov word [rbp - 0x66], ax
movzx eax, word [0x1800c1b14]
add ax, r14w
mov word [rbp - 0x64], ax
mov word [rbp - 0x62], r13w
movzx eax, word [rsp + 0x30]
mov rcx, r13
lea r13d, [r9 - 0x41]
movzx eax, word [rsp + rcx*2 + 0x30]
sub ax, r14w
mov word [rsp + rcx*2 + 0x30], ax
add rcx, rdi
cmp rcx, r13
jb 0x18000b7ea
lea rcx, [r12 + 0x238]
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x60]
call fcn.18000e9a0
mov rcx, qword [rax]
add rcx, 0x30
lea rdx, [rsp + 0x30]
call fcn.18000d6dc
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
mov r13d, 0
jbe 0x18000b86d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b868
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ba73
call fcn.180095ea4
movdqa xmm0, xmmword [0x1800db7a0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r13w
mov byte [rbp + 0x4e0], 0x51
mov byte [rbp + 0x4e1], 0x4c
mov byte [rbp + 0x4e2], 0x56
mov byte [rbp + 0x4e3], 0x50
mov byte [rbp + 0x4e4], 0x5e
mov byte [rbp + 0x4e5], r13b
mov al, byte [rbp + 0x4e0]
mov rcx, r13
mov al, byte [rbp + rcx + 0x4e0]
sub al, 0xb
mov byte [rbp + rcx + 0x4e0], al
add rcx, rdi
cmp rcx, 5
jb 0x18000b8b2
lea rdx, [rbp + 0x4e0]
mov rcx, rbx
call fcn.18006ef08
mov rsi, rax
test rax, rax
je 0x18000ba52
xor edx, edx
mov rcx, rax
call fcn.18006edf4
mov r15d, edi
jmp 0x18000ba46
mov r9d, 0x80
lea r8, [rbp]
mov rdx, rbx
mov rcx, rsi
call fcn.180006d9c
or rcx, 0xffffffffffffffff
mov r14, rcx
inc r14
cmp byte [rbx + r14], r13b
jne 0x18000b914
lea rax, [rbp]
mov rdi, rcx
inc rdi
cmp byte [rax + rdi], r13b
jne 0x18000b924
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x80]
call fcn.180097dc0
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x290]
call fcn.180097dc0
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x80]
mov qword [rsp + 0x20], rax
mov r9d, r14d
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x290]
mov qword [rsp + 0x20], rax
mov r9d, edi
lea r8, [rbp]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], r13
lea rax, [rbp + 0x80]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000b9b8
lea rdx, [rbp + 0x80]
lea rcx, [rbp - 0x28]
call fcn.18000f0ec
nop
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x60]
lea rcx, [r12 + 0x238]
call fcn.18000e9a0
mov rcx, qword [rax]
add rcx, 0x30
lea rdx, [rbp + 0x290]
call fcn.18000d6dc
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
jbe 0x18000ba38
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ba33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ba79
call fcn.180095ea4
mov edx, r15d
mov rcx, rsi
call fcn.18006edf4
inc r15d
test rax, rax
mov rbx, rax
jne 0x18000b8f8
lea r11, [rsp + 0x5a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18009a2c0
int3
call fcn.18009a2c0
int3
call fcn.18009a2c0
int3
call fcn.18009a2c0
int3