Function at 0x1400349b4
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0x100
mov rax, qword [0x1400d5380]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rsi, rcx
xor r13d, r13d
lea ecx, [r13 + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0xf]
mov rcx, qword [rsi]
call fcn.1400371dc
nop
lea r8d, [r13 + 0x7c]
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x51]
call fcn.140044d54
mov rbx, rax
mov rdi, qword [rsi]
mov r14d, 0x670
add rdi, r14
cmp rdi, rax
je 0x140034a4b
mov rcx, rdi
call fcn.140023f6c
mov rcx, qword [rbx]
mov qword [rdi], rcx
mov rcx, qword [rbx + 8]
mov qword [rdi + 8], rcx
mov rax, qword [rbx + 0x10]
mov qword [rdi + 0x10], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
lea rcx, [rbp - 0x51]
call fcn.140023f6c
mov rax, qword [rsi]
mov rdx, qword [rax + r14]
mov rcx, qword [rax + r14 + 8]
sub rcx, rdx
sar rcx, 5
mov edi, 1
cmp rcx, rdi
jb 0x140034fd3
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
mov qword [rbp - 0x21], r13
mov qword [rbp - 0x19], r13
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 7
jbe 0x140034a92
mov rdx, qword [rdx]
lea rcx, [rbp - 0x31]
call fcn.1400034e8
nop
lea rdx, [rbp - 0x31]
mov r14, qword [rbp - 0x31]
mov r12, qword [rbp - 0x19]
cmp r12, 7
cmova rdx, r14
lea rax, str.false
mov rcx, qword [rbp - 0x21]
mov ebx, 5
cmp rcx, rbx
jne 0x140034c16
mov r8, rax
test rcx, rcx
je 0x140034aec
sub rdx, rax
movzx eax, word [rdx + r8]
cmp ax, word [r8]
jne 0x140034c16
add r8, 2
sub rcx, rdi
jne 0x140034ad4
mov rax, qword [rsi]
mov rbx, qword [rax + 0x690]
xorps xmm0, xmm0
movups xmmword [rbp - 0x71], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x61], xmm1
mov r8d, SafeArrayUnaccessData
lea rdx, str.SyK3aYzQCG44zzWsj3
lea rcx, [rbp - 0x71]
call fcn.140003318
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x41], xmm1
mov r8d, 4
lea rdx, str.DXWM
lea rcx, [rbp - 0x51]
call fcn.140003318
mov r9, qword [rbx]
cmp qword [r9 + 0x18], 7
jbe 0x140034b4e
mov r9, qword [r9]
lea r8, [rbp - 0x71]
cmp qword [rbp - 0x59], 7
cmova r8, qword [rbp - 0x71]
lea rdx, [rbp - 0x51]
cmp qword [rbp - 0x39], 7
cmova rdx, qword [rbp - 0x51]
lea rcx, [rbx + 8]
cmp qword [rcx + 0x18], 7
jbe 0x140034b78
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ebx, 0x1000
mov rdx, qword [rbp - 0x39]
cmp rdx, 7
jbe 0x140034bbf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, rbx
jb 0x140034bba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003500a
call fcn.140077818
movdqa xmm0, xmmword [0x1400a2e10]
movdqu xmmword [rbp - 0x41], xmm0
mov word [rbp - 0x51], r13w
mov rdx, qword [rbp - 0x59]
cmp rdx, 7
jbe 0x140034f9f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, rbx
jb 0x140034c0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035010
call fcn.140077818
jmp 0x140034f9f
lea rax, [0x1400d7d80]
mov qword [rbp - 0x79], rax
mov rcx, rax
call fcn.14007567c
test eax, eax
jne 0x140035016
cmp dword [0x1400d7dcc], 0x7fffffff
je 0x14003501e
lea edx, [rax + 0xa]
mov rcx, qword [rsi]
call fcn.14003faec
xorps xmm0, xmm0
movups xmmword [rbp - 0x71], xmm0
mov qword [rbp - 0x61], rbx
mov qword [rbp - 0x59], reloc.OLEAUT32.dll_SafeArrayDestroy
mov eax, dword [str.WMURL]
mov dword [rbp - 0x71], eax
mov al, byte [0x1400a7028]
mov byte [rbp - 0x6d], al
mov byte [rbp - 0x6c], r13b
lea rdx, [rbp - 0x71]
mov rcx, qword [rsi]
call fcn.14003c2c8
mov rcx, qword [rsi]
mov dword [rsp + 0x44], r13d
mov dword [rsp + 0x48], r13d
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x48]
mov r8d, 4
lea rdx, [rsp + 0x44]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x44], edi
jne 0x140034d21
mov rbx, qword [rsi]
mov rcx, qword [0x1400d7c90]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0x39
jb 0x140035033
lea r8, [0x1400d7c80]
mov rax, r8
cmp qword [0x1400d7c98], 0xf
cmova rax, qword [0x1400d7c80]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x39
lea r9, str.https:__flingtrainer.com_download_wemod_trainer.php_name
mov dl, byte [rsp + 0x40]
lea rcx, [rbp - 0x71]
call fcn.1400085ec
lea rdx, [rbp - 0x71]
mov rcx, rbx
call fcn.14003c2c8
mov rax, qword [rsi]
mov rbx, qword [rax + 0x690]
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x41], xmm1
mov r8d, 5
lea rdx, [0x1400a6c88]
lea rcx, [rbp - 0x51]
call fcn.140003318
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x71], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x61], xmm1
mov r8d, 4
lea rdx, str.DXWM
lea rcx, [rbp - 0x71]
call fcn.140003318
nop
lea r8, [rbx + 8]
lea rax, [rbp - 0x51]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x71]
lea rdx, [rbp - 0x11]
mov rcx, qword [rbx]
call fcn.14003f4cc
lea r8, [rbp - 0x11]
cmp qword [rbp + 7], 7
cmova r8, qword [rbp - 0x11]
mov rdx, qword [rbp - 1]
cmp rdx, 0x12
jne 0x140034dd0
lea rcx, str.SyK3aYzQCG44zzWsj3
test rdx, rdx
je 0x140034dd3
sub r8, rcx
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140034dd0
add rcx, 2
sub rdx, rdi
jne 0x140034dbb
jmp 0x140034dd3
mov dil, r13b
lea rcx, [rbp - 0x11]
call fcn.140024110
nop
mov ebx, 0x1000
mov rdx, qword [rbp - 0x59]
cmp rdx, 7
jbe 0x140034e1e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, rbx
jb 0x140034e19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035039
call fcn.140077818
movdqa xmm0, xmmword [0x1400a2e10]
movdqu xmmword [rbp - 0x61], xmm0
mov word [rbp - 0x71], r13w
mov rdx, qword [rbp - 0x39]
cmp rdx, 7
jbe 0x140034e6c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, rbx
jb 0x140034e67
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003503f
call fcn.140077818
test dil, dil
je 0x140034f92
mov rax, qword [rsi]
mov rdi, qword [rax + 0x690]
xorps xmm0, xmm0
movups xmmword [rbp - 0x71], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x61], xmm1
mov r8d, 5
lea rdx, str.false
lea rcx, [rbp - 0x71]
call fcn.140003318
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x41], xmm1
mov r8d, 4
lea rdx, str.DXWM
lea rcx, [rbp - 0x51]
call fcn.140003318
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 7
jbe 0x140034ed7
mov r9, qword [r9]
lea r8, [rbp - 0x71]
cmp qword [rbp - 0x59], 7
cmova r8, qword [rbp - 0x71]
lea rdx, [rbp - 0x51]
cmp qword [rbp - 0x39], 7
cmova rdx, qword [rbp - 0x51]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 7
jbe 0x140034f01
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x39]
cmp rdx, 7
jbe 0x140034f43
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, rbx
jb 0x140034f3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035045
call fcn.140077818
movdqa xmm0, xmmword [0x1400a2e10]
movdqu xmmword [rbp - 0x41], xmm0
mov word [rbp - 0x51], r13w
mov rdx, qword [rbp - 0x59]
cmp rdx, 7
jbe 0x140034f92
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, rbx
jb 0x140034f8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003504b
call fcn.140077818
nop
lea rcx, [0x1400d7d80]
call fcn.140075684
nop
cmp r12, 7
jbe 0x140034fd3
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, rbx
jb 0x140034fca
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035004
mov rcx, r14
call fcn.140077818
nop
lea rcx, [rbp + 0xf]
call fcn.140024110
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140077c90
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret
call fcn.14007e634
nop
call fcn.14007e634
nop
call fcn.14007e634
int3
mov ecx, ebx
call fcn.1400758f8
int3
mov dword [0x1400d7dcc], 0x7ffffffe
mov ecx, 6
call fcn.1400758f8
nop
call fcn.140024374
nop
call fcn.14007e634
nop
call fcn.14007e634
nop
call fcn.14007e634
nop
call fcn.14007e634
int3