Function at 0x14000f800
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x140074040]
xor rax, rsp
mov qword [rbp + 8], rax
mov rsi, rcx
xor r15d, r15d
lea ecx, [r15 + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdi, qword [rsi]
lea rbx, [rdi + 0x440]
mov qword [rsp + 0x30], rbx
mov rcx, rbx
call fcn.1400300f4
test eax, eax
jne 0x1400101a4
mov eax, dword [rbx + 0x4c]
cmp eax, 0x7fffffff
je 0x1400101af
cmp qword [rdi + 0x4a0], 1
jae 0x14000f97b
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], r15
lea ecx, [r15 + 0x50]
call fcn.140030924
mov rcx, rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x58], 0x4f
mov qword [rsp + 0x60], 0x4f
movaps xmm0, xmmword [str.https:__flingtrainer.com_wp_content_check_for_trainer_update_get_trainer_update]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140067480]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140067490]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400674a0]
movups xmmword [rax + 0x30], xmm1
movsd xmm0, qword [0x1400674b0]
movsd qword [rax + 0x40], xmm0
mov eax, dword [0x1400674b8]
mov dword [rcx + 0x48], eax
movzx eax, word [0x1400674bc]
mov word [rcx + 0x4c], ax
movzx eax, byte [0x1400674be]
mov byte [rcx + 0x4e], al
mov byte [rcx + 0x4f], r15b
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x58]
call fcn.140014c10
lea rcx, [rdi + 0x490]
mov rdx, rax
call fcn.140001df0
mov rdx, qword [rbp - 0x40]
cmp rdx, 7
jbe 0x14000f969
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f964
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400101bf
call fcn.1400308f0
movdqa xmm0, xmmword [0x14006a750]
movdqu xmmword [rbp - 0x48], xmm0
mov word [rbp - 0x58], r15w
lea rdx, [rdi + 0x490]
lea rcx, [rbp - 0x18]
call fcn.1400113f0
nop
mov rcx, rbx
call fcn.1400300fc
nop
mov r8d, 0x7c
lea rdx, [rbp - 0x18]
lea rcx, [rsp + 0x68]
call fcn.140014020
mov rdi, rax
mov rbx, qword [rsi]
add rbx, 0x510
cmp rbx, rax
je 0x14000fa30
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000fa0f
mov rdx, qword [rbx + 8]
call fcn.140011710
mov rcx, qword [rbx]
mov rdx, qword [rbx + 0x10]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x14000f9ff
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400101cb
mov rcx, r8
call fcn.1400308f0
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov rax, qword [rdi]
mov qword [rbx], rax
mov rax, qword [rdi + 8]
mov qword [rbx + 8], rax
mov rax, qword [rdi + 0x10]
mov qword [rbx + 0x10], rax
mov qword [rdi], r15
mov qword [rdi + 8], r15
mov qword [rdi + 0x10], r15
lea rcx, [rsp + 0x68]
call fcn.140011540
mov rax, qword [rsi]
mov rdx, qword [rax + 0x510]
mov rcx, qword [rax + 0x518]
sub rcx, rdx
sar rcx, 5
cmp rcx, 1
jb 0x14001012f
lea rcx, [rbp - 0x78]
call fcn.1400113f0
nop
lea r8, [rbp - 0x78]
mov r13, qword [rbp - 0x78]
mov r14, qword [rbp - 0x60]
cmp r14, 7
cmova r8, r13
lea rax, str.false
mov rdx, qword [rbp - 0x68]
cmp rdx, 5
jne 0x14000fbf5
mov rcx, rax
test rdx, rdx
je 0x14000fab8
sub r8, rax
nop word [rax + rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x14000fbf5
add rcx, 2
sub rdx, 1
jne 0x14000faa0
mov rax, qword [rsi]
mov rbx, qword [rax + 0x530]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
mov r8d, SafeArrayUnaccessData
lea rdx, str.SyK3aYzQCG44zzWsj3
lea rcx, [rsp + 0x48]
call fcn.140002870
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
mov r8d, 4
lea rdx, str.DXWM
lea rcx, [rsp + 0x68]
call fcn.140002870
mov r9, qword [rbx]
cmp qword [r9 + 0x18], 7
jbe 0x14000fb20
mov r9, qword [r9]
lea r8, [rsp + 0x48]
cmp qword [rsp + 0x60], 7
cmova r8, qword [rsp + 0x48]
lea rdx, [rsp + 0x68]
cmp qword [rbp - 0x80], 7
cmova rdx, qword [rsp + 0x68]
lea rcx, [rbx + 8]
cmp qword [rcx + 0x18], 7
jbe 0x14000fb4f
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x80]
cmp rdx, 7
jbe 0x14000fb96
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fb91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400101c5
call fcn.1400308f0
movdqa xmm0, xmmword [0x14006a750]
movdqu xmmword [rsp + 0x78], xmm0
mov word [rsp + 0x68], r15w
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x1400100f3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fbeb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400101d1
call fcn.1400308f0
jmp 0x1400100f3
lea r12, [0x140077830]
mov qword [rsp + 0x40], r12
mov rcx, r12
call fcn.1400300f4
test eax, eax
jne 0x1400101d7
cmp dword [0x14007787c], 0x7fffffff
je 0x1400101e2
mov rcx, qword [rsi]
mov dword [rsp + 0x30], 0xa
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x38]
lea r8d, [rax + 4]
lea rdx, [rsp + 0x30]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], 5
mov edi, reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rsp + 0x60], rdi
mov eax, dword [str.WMURL]
mov dword [rsp + 0x48], eax
movzx eax, byte [0x14006737c]
mov byte [rsp + 0x4c], al
mov byte [rsp + 0x4d], 0
lea rdx, [rsp + 0x48]
mov rcx, qword [rsi]
call fcn.14000a910
mov rcx, qword [rsi]
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
lea r8d, [rdi - 0xb]
lea rdx, [rsp + 0x38]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x38], 1
jne 0x14000fe11
mov rax, qword [rsi]
mov qword [rsp + 0x30], rax
mov r15, qword [0x1400777f0]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 0x39
jb 0x1400101f7
lea r12, [0x1400777e0]
cmp qword [0x1400777f8], rdi
cmova r12, qword [0x1400777e0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xor edx, edx
mov qword [rsp + 0x78], rdx
mov qword [rbp - 0x80], rdx
lea r14, [r15 + 0x39]
lea rbx, [rsp + 0x68]
cmp r14, rdi
jbe 0x14000fda0
mov rdi, r14
or rdi, 0xf
cmp rdi, rcx
jbe 0x14000fd61
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140030924
test rax, rax
je 0x1400101fd
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14000fd9b
mov eax, SafeArrayGetElement
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14000fd89
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001019e
jmp 0x14000fd42
test rcx, rcx
je 0x14000fd98
call fcn.140030924
mov rbx, rax
jmp 0x14000fd9b
mov rbx, rdx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x80], rdi
movups xmm0, xmmword [str.https:__flingtrainer.com_download_wemod_trainer.php_name]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [0x140067390]
movups xmmword [rbx + 0x10], xmm1
movups xmm0, xmmword [0x1400673a0]
movups xmmword [rbx + 0x20], xmm0
movsd xmm0, qword [0x1400673b0]
movsd qword [rbx + 0x30], xmm0
movzx eax, byte [0x1400673b8]
mov byte [rbx + 0x38], al
lea rcx, [rbx + 0x39]
mov r8, r15
mov rdx, r12
call fcn.1400539f0
mov byte [rbx + r14], 0
lea rdx, [rsp + 0x68]
mov rcx, qword [rsp + 0x30]
call fcn.14000a910
mov r14, qword [rbp - 0x60]
xor r15d, r15d
lea r12, [0x140077830]
mov rax, qword [rsi]
mov rbx, qword [rax + 0x530]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
mov r8d, 5
lea rdx, [0x140067160]
lea rcx, [rsp + 0x68]
call fcn.140002870
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
mov r8d, 4
lea rdx, str.DXWM
lea rcx, [rsp + 0x48]
call fcn.140002870
nop
lea r8, [rbx + 8]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x48]
lea rdx, [rbp - 0x38]
mov rcx, qword [rbx]
call fcn.14000c990
lea r8, [rbp - 0x38]
mov r9, qword [rbp - 0x38]
mov r10, qword [rbp - 0x20]
cmp r10, 7
cmova r8, r9
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x12
jne 0x14000fed8
lea rcx, str.SyK3aYzQCG44zzWsj3
test rdx, rdx
je 0x14000fed4
sub r8, rcx
nop dword [rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x14000fed8
add rcx, 2
sub rdx, 1
jne 0x14000fec0
mov bl, 1
jmp 0x14000feda
xor bl, bl
cmp r10, 7
jbe 0x14000ff16
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x14000ff0d
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010203
mov rcx, r9
call fcn.1400308f0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x14000ff58
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ff53
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010209
call fcn.1400308f0
movdqa xmm0, xmmword [0x14006a750]
movdqu xmmword [rsp + 0x58], xmm0
mov word [rsp + 0x48], r15w
mov rdx, qword [rbp - 0x80]
cmp rdx, 7
jbe 0x14000ffad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ffa8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001020f
call fcn.1400308f0
test bl, bl
je 0x1400100ea
mov rax, qword [rsi]
mov rbx, qword [rax + 0x530]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
mov r8d, 5
lea rdx, str.false
lea rcx, [rsp + 0x48]
call fcn.140002870
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
mov r8d, 4
lea rdx, str.DXWM
lea rcx, [rsp + 0x68]
call fcn.140002870
mov r9, qword [rbx]
cmp qword [r9 + 0x18], 7
jbe 0x14001001d
mov r9, qword [r9]
lea r8, [rsp + 0x48]
cmp qword [rsp + 0x60], 7
cmova r8, qword [rsp + 0x48]
lea rdx, [rsp + 0x68]
cmp qword [rbp - 0x80], 7
cmova rdx, qword [rsp + 0x68]
lea rcx, [rbx + 8]
cmp qword [rcx + 0x18], 7
jbe 0x14001004c
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x80]
cmp rdx, 7
jbe 0x140010093
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001008e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010215
call fcn.1400308f0
movdqa xmm0, xmmword [0x14006a750]
movdqu xmmword [rsp + 0x78], xmm0
mov word [rsp + 0x68], r15w
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x1400100ea
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400100e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001021b
call fcn.1400308f0
nop
mov rcx, r12
call fcn.1400300fc
nop
cmp r14, 7
jbe 0x14001012f
lea rdx, [r14*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x140010126
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010221
mov rcx, r13
call fcn.1400308f0
nop
mov rdx, qword [rbp]
cmp rdx, 7
jbe 0x14001016b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010166
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010198
call fcn.1400308f0
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.1400308d0
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400377ec
nop
call fcn.140001260
nop
mov ecx, 5
call fcn.14002ffb8
int3
dec eax
mov dword [rbx + 0x4c], eax
mov ecx, 6
call fcn.14002ffb8
nop
call fcn.1400377ec
nop
call fcn.1400377ec
nop
call fcn.1400377ec
nop
call fcn.1400377ec
int3
mov ecx, 5
call fcn.14002ffb8
int3
mov dword [0x14007787c], 0x7ffffffe
mov ecx, 6
call fcn.14002ffb8
nop
call fcn.140001300
int3
call fcn.1400377ec
nop
call fcn.1400377ec
nop
call fcn.1400377ec
nop
call fcn.1400377ec
nop
call fcn.1400377ec
nop
call fcn.1400377ec
nop
call fcn.1400377ec
int3