Function at 0x14004ac54
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0x100
mov rax, qword [0x140113440]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rsi, rcx
xor r13d, r13d
lea ecx, [r13 + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0xf]
mov rcx, qword [rsi]
call fcn.14004d584
nop
lea r8d, [r13 + 0x7c]
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x51]
call fcn.14005209c
mov rbx, rax
mov rdi, qword [rsi]
mov r14d, 0x590
add rdi, r14
cmp rdi, rax
je 0x14004aceb
mov rcx, rdi
call fcn.140024f64
mov rcx, qword [rbx]
mov qword [rdi], rcx
mov rcx, qword [rbx + 8]
mov qword [rdi + 8], rcx
mov rax, qword [rbx + 0x10]
mov qword [rdi + 0x10], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
lea rcx, [rbp - 0x51]
call fcn.140024f64
mov rax, qword [rsi]
mov rdx, qword [rax + r14]
mov rcx, qword [rax + r14 + 8]
sub rcx, rdx
sar rcx, 5
mov edi, 1
cmp rcx, rdi
jb 0x14004b273
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
mov qword [rbp - 0x21], r13
mov qword [rbp - 0x19], r13
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 7
jbe 0x14004ad32
mov rdx, qword [rdx]
lea rcx, [rbp - 0x31]
call fcn.140003698
nop
lea rdx, [rbp - 0x31]
mov r14, qword [rbp - 0x31]
mov r12, qword [rbp - 0x19]
cmp r12, 7
cmova rdx, r14
lea rax, str.false
mov rcx, qword [rbp - 0x21]
mov ebx, 5
cmp rcx, rbx
jne 0x14004aeb6
mov r8, rax
test rcx, rcx
je 0x14004ad8c
sub rdx, rax
movzx eax, word [rdx + r8]
cmp ax, word [r8]
jne 0x14004aeb6
add r8, 2
sub rcx, rdi
jne 0x14004ad74
mov rax, qword [rsi]
mov rbx, qword [rax + 0x5b0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x71], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x61], xmm1
mov r8d, SafeArrayUnaccessData
lea rdx, str.SyK3aYzQCG44zzWsj3
lea rcx, [rbp - 0x71]
call fcn.1400034c8
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x41], xmm1
mov r8d, 4
lea rdx, str.DXWM
lea rcx, [rbp - 0x51]
call fcn.1400034c8
mov r9, qword [rbx]
cmp qword [r9 + 0x18], 7
jbe 0x14004adee
mov r9, qword [r9]
lea r8, [rbp - 0x71]
cmp qword [rbp - 0x59], 7
cmova r8, qword [rbp - 0x71]
lea rdx, [rbp - 0x51]
cmp qword [rbp - 0x39], 7
cmova rdx, qword [rbp - 0x51]
lea rcx, [rbx + 8]
cmp qword [rcx + 0x18], 7
jbe 0x14004ae18
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ebx, 0x1000
mov rdx, qword [rbp - 0x39]
cmp rdx, 7
jbe 0x14004ae5f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, rbx
jb 0x14004ae5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b2aa
call fcn.14008ba88
movdqa xmm0, xmmword [0x1400bbea0]
movdqu xmmword [rbp - 0x41], xmm0
mov word [rbp - 0x51], r13w
mov rdx, qword [rbp - 0x59]
cmp rdx, 7
jbe 0x14004b23f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, rbx
jb 0x14004aeac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b2b0
call fcn.14008ba88
jmp 0x14004b23f
lea rax, [0x140126d10]
mov qword [rbp - 0x79], rax
mov rcx, rax
call fcn.1400898ec
test eax, eax
jne 0x14004b2b6
cmp dword [0x140126d5c], 0x7fffffff
je 0x14004b2be
lea edx, [rax + 0xa]
mov rcx, qword [rsi]
call fcn.140056608
xorps xmm0, xmm0
movups xmmword [rbp - 0x71], xmm0
mov qword [rbp - 0x61], rbx
mov qword [rbp - 0x59], reloc.OLEAUT32.dll_SafeArrayDestroy
mov eax, dword [str.WMURL]
mov dword [rbp - 0x71], eax
mov al, byte [0x1400c4238]
mov byte [rbp - 0x6d], al
mov byte [rbp - 0x6c], r13b
lea rdx, [rbp - 0x71]
mov rcx, qword [rsi]
call fcn.14005289c
mov rcx, qword [rsi]
mov dword [rsp + 0x44], r13d
mov dword [rsp + 0x48], r13d
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x48]
mov r8d, 4
lea rdx, [rsp + 0x44]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x44], edi
jne 0x14004afc1
mov rbx, qword [rsi]
mov rcx, qword [0x140126c20]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0x39
jb 0x14004b2d3
lea r8, [0x140126c10]
mov rax, r8
cmp qword [0x140126c28], 0xf
cmova rax, qword [0x140126c10]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x39
lea r9, str.https:__flingtrainer.com_download_wemod_trainer.php_name
mov dl, byte [rsp + 0x40]
lea rcx, [rbp - 0x71]
call fcn.140008ed4
lea rdx, [rbp - 0x71]
mov rcx, rbx
call fcn.14005289c
mov rax, qword [rsi]
mov rbx, qword [rax + 0x5b0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x41], xmm1
mov r8d, 5
lea rdx, [0x1400c3e98]
lea rcx, [rbp - 0x51]
call fcn.1400034c8
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x71], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x61], xmm1
mov r8d, 4
lea rdx, str.DXWM
lea rcx, [rbp - 0x71]
call fcn.1400034c8
nop
lea r8, [rbx + 8]
lea rax, [rbp - 0x51]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x71]
lea rdx, [rbp - 0x11]
mov rcx, qword [rbx]
call fcn.140055f58
lea r8, [rbp - 0x11]
cmp qword [rbp + 7], 7
cmova r8, qword [rbp - 0x11]
mov rdx, qword [rbp - 1]
cmp rdx, 0x12
jne 0x14004b070
lea rcx, str.SyK3aYzQCG44zzWsj3
test rdx, rdx
je 0x14004b073
sub r8, rcx
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x14004b070
add rcx, 2
sub rdx, rdi
jne 0x14004b05b
jmp 0x14004b073
mov dil, r13b
lea rcx, [rbp - 0x11]
call fcn.140025108
nop
mov ebx, 0x1000
mov rdx, qword [rbp - 0x59]
cmp rdx, 7
jbe 0x14004b0be
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, rbx
jb 0x14004b0b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b2d9
call fcn.14008ba88
movdqa xmm0, xmmword [0x1400bbea0]
movdqu xmmword [rbp - 0x61], xmm0
mov word [rbp - 0x71], r13w
mov rdx, qword [rbp - 0x39]
cmp rdx, 7
jbe 0x14004b10c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, rbx
jb 0x14004b107
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b2df
call fcn.14008ba88
test dil, dil
je 0x14004b232
mov rax, qword [rsi]
mov rdi, qword [rax + 0x5b0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x71], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x61], xmm1
mov r8d, 5
lea rdx, str.false
lea rcx, [rbp - 0x71]
call fcn.1400034c8
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x41], xmm1
mov r8d, 4
lea rdx, str.DXWM
lea rcx, [rbp - 0x51]
call fcn.1400034c8
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 7
jbe 0x14004b177
mov r9, qword [r9]
lea r8, [rbp - 0x71]
cmp qword [rbp - 0x59], 7
cmova r8, qword [rbp - 0x71]
lea rdx, [rbp - 0x51]
cmp qword [rbp - 0x39], 7
cmova rdx, qword [rbp - 0x51]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 7
jbe 0x14004b1a1
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x39]
cmp rdx, 7
jbe 0x14004b1e3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, rbx
jb 0x14004b1de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b2e5
call fcn.14008ba88
movdqa xmm0, xmmword [0x1400bbea0]
movdqu xmmword [rbp - 0x41], xmm0
mov word [rbp - 0x51], r13w
mov rdx, qword [rbp - 0x59]
cmp rdx, 7
jbe 0x14004b232
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, rbx
jb 0x14004b22c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b2eb
call fcn.14008ba88
nop
lea rcx, [0x140126d10]
call fcn.1400898f4
nop
cmp r12, 7
jbe 0x14004b273
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, rbx
jb 0x14004b26a
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b2a4
mov rcx, r14
call fcn.14008ba88
nop
lea rcx, [rbp + 0xf]
call fcn.140025108
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.14008bf00
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret
call fcn.140092a80
nop
call fcn.140092a80
nop
call fcn.140092a80
int3
mov ecx, ebx
call fcn.140089b68
int3
mov dword [0x140126d5c], 0x7ffffffe
mov ecx, 6
call fcn.140089b68
nop
call fcn.14002536c
nop
call fcn.140092a80
nop
call fcn.140092a80
nop
call fcn.140092a80
nop
call fcn.140092a80
int3