Function at 0x140034b0c
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0x100
mov rax, qword [0x1400db380]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rsi, rcx
xor r13d, r13d
lea ecx, [r13 + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0xf]
mov rcx, qword [rsi]
call fcn.140037334
nop
lea r8d, [r13 + 0x7c]
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x51]
call fcn.140044eac
mov rbx, rax
mov rdi, qword [rsi]
mov r14d, 0x670
add rdi, r14
cmp rdi, rax
je 0x140034ba3
mov rcx, rdi
call fcn.140024084
mov rcx, qword [rbx]
mov qword [rdi], rcx
mov rcx, qword [rbx + 8]
mov qword [rdi + 8], rcx
mov rax, qword [rbx + 0x10]
mov qword [rdi + 0x10], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
lea rcx, [rbp - 0x51]
call fcn.140024084
mov rax, qword [rsi]
mov rdx, qword [rax + r14]
mov rcx, qword [rax + r14 + 8]
sub rcx, rdx
sar rcx, 5
mov edi, 1
cmp rcx, rdi
jb 0x14003512b
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
mov qword [rbp - 0x21], r13
mov qword [rbp - 0x19], r13
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 7
jbe 0x140034bea
mov rdx, qword [rdx]
lea rcx, [rbp - 0x31]
call fcn.140003604
nop
lea rdx, [rbp - 0x31]
mov r14, qword [rbp - 0x31]
mov r12, qword [rbp - 0x19]
cmp r12, 7
cmova rdx, r14
lea rax, str.false
mov rcx, qword [rbp - 0x21]
mov ebx, 5
cmp rcx, rbx
jne 0x140034d6e
mov r8, rax
test rcx, rcx
je 0x140034c44
sub rdx, rax
movzx eax, word [rdx + r8]
cmp ax, word [r8]
jne 0x140034d6e
add r8, 2
sub rcx, rdi
jne 0x140034c2c
mov rax, qword [rsi]
mov rbx, qword [rax + 0x690]
xorps xmm0, xmm0
movups xmmword [rbp - 0x71], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x61], xmm1
mov r8d, SafeArrayUnaccessData
lea rdx, str.SyK3aYzQCG44zzWsj3
lea rcx, [rbp - 0x71]
call fcn.140003434
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x41], xmm1
mov r8d, 4
lea rdx, str.DXWM
lea rcx, [rbp - 0x51]
call fcn.140003434
mov r9, qword [rbx]
cmp qword [r9 + 0x18], 7
jbe 0x140034ca6
mov r9, qword [r9]
lea r8, [rbp - 0x71]
cmp qword [rbp - 0x59], 7
cmova r8, qword [rbp - 0x71]
lea rdx, [rbp - 0x51]
cmp qword [rbp - 0x39], 7
cmova rdx, qword [rbp - 0x51]
lea rcx, [rbx + 8]
cmp qword [rcx + 0x18], 7
jbe 0x140034cd0
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ebx, 0x1000
mov rdx, qword [rbp - 0x39]
cmp rdx, 7
jbe 0x140034d17
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, rbx
jb 0x140034d12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035162
call fcn.140078ab8
movdqa xmm0, xmmword [0x1400a6e70]
movdqu xmmword [rbp - 0x41], xmm0
mov word [rbp - 0x51], r13w
mov rdx, qword [rbp - 0x59]
cmp rdx, 7
jbe 0x1400350f7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, rbx
jb 0x140034d64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035168
call fcn.140078ab8
jmp 0x1400350f7
lea rax, [0x1400ddd80]
mov qword [rbp - 0x79], rax
mov rcx, rax
call fcn.14007691c
test eax, eax
jne 0x14003516e
cmp dword [0x1400dddcc], 0x7fffffff
je 0x140035176
lea edx, [rax + 0xa]
mov rcx, qword [rsi]
call fcn.14003fc44
xorps xmm0, xmm0
movups xmmword [rbp - 0x71], xmm0
mov qword [rbp - 0x61], rbx
mov qword [rbp - 0x59], reloc.OLEAUT32.dll_SafeArrayDestroy
mov eax, dword [str.WMURL]
mov dword [rbp - 0x71], eax
mov al, byte [0x1400ab098]
mov byte [rbp - 0x6d], al
mov byte [rbp - 0x6c], r13b
lea rdx, [rbp - 0x71]
mov rcx, qword [rsi]
call fcn.14003c420
mov rcx, qword [rsi]
mov dword [rsp + 0x44], r13d
mov dword [rsp + 0x48], r13d
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x48]
mov r8d, 4
lea rdx, [rsp + 0x44]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x44], edi
jne 0x140034e79
mov rbx, qword [rsi]
mov rcx, qword [0x1400ddc90]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0x39
jb 0x14003518b
lea r8, [0x1400ddc80]
mov rax, r8
cmp qword [0x1400ddc98], 0xf
cmova rax, qword [0x1400ddc80]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x39
lea r9, str.https:__flingtrainer.com_download_wemod_trainer.php_name
mov dl, byte [rsp + 0x40]
lea rcx, [rbp - 0x71]
call fcn.140008708
lea rdx, [rbp - 0x71]
mov rcx, rbx
call fcn.14003c420
mov rax, qword [rsi]
mov rbx, qword [rax + 0x690]
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x41], xmm1
mov r8d, 5
lea rdx, [0x1400aacf8]
lea rcx, [rbp - 0x51]
call fcn.140003434
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x71], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x61], xmm1
mov r8d, 4
lea rdx, str.DXWM
lea rcx, [rbp - 0x71]
call fcn.140003434
nop
lea r8, [rbx + 8]
lea rax, [rbp - 0x51]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x71]
lea rdx, [rbp - 0x11]
mov rcx, qword [rbx]
call fcn.14003f624
lea r8, [rbp - 0x11]
cmp qword [rbp + 7], 7
cmova r8, qword [rbp - 0x11]
mov rdx, qword [rbp - 1]
cmp rdx, 0x12
jne 0x140034f28
lea rcx, str.SyK3aYzQCG44zzWsj3
test rdx, rdx
je 0x140034f2b
sub r8, rcx
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140034f28
add rcx, 2
sub rdx, rdi
jne 0x140034f13
jmp 0x140034f2b
mov dil, r13b
lea rcx, [rbp - 0x11]
call fcn.140024228
nop
mov ebx, 0x1000
mov rdx, qword [rbp - 0x59]
cmp rdx, 7
jbe 0x140034f76
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, rbx
jb 0x140034f71
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035191
call fcn.140078ab8
movdqa xmm0, xmmword [0x1400a6e70]
movdqu xmmword [rbp - 0x61], xmm0
mov word [rbp - 0x71], r13w
mov rdx, qword [rbp - 0x39]
cmp rdx, 7
jbe 0x140034fc4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, rbx
jb 0x140034fbf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035197
call fcn.140078ab8
test dil, dil
je 0x1400350ea
mov rax, qword [rsi]
mov rdi, qword [rax + 0x690]
xorps xmm0, xmm0
movups xmmword [rbp - 0x71], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x61], xmm1
mov r8d, 5
lea rdx, str.false
lea rcx, [rbp - 0x71]
call fcn.140003434
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x41], xmm1
mov r8d, 4
lea rdx, str.DXWM
lea rcx, [rbp - 0x51]
call fcn.140003434
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 7
jbe 0x14003502f
mov r9, qword [r9]
lea r8, [rbp - 0x71]
cmp qword [rbp - 0x59], 7
cmova r8, qword [rbp - 0x71]
lea rdx, [rbp - 0x51]
cmp qword [rbp - 0x39], 7
cmova rdx, qword [rbp - 0x51]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 7
jbe 0x140035059
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x39]
cmp rdx, 7
jbe 0x14003509b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, rbx
jb 0x140035096
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003519d
call fcn.140078ab8
movdqa xmm0, xmmword [0x1400a6e70]
movdqu xmmword [rbp - 0x41], xmm0
mov word [rbp - 0x51], r13w
mov rdx, qword [rbp - 0x59]
cmp rdx, 7
jbe 0x1400350ea
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x71]
mov rax, rcx
cmp rdx, rbx
jb 0x1400350e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400351a3
call fcn.140078ab8
nop
lea rcx, [0x1400ddd80]
call fcn.140076924
nop
cmp r12, 7
jbe 0x14003512b
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, rbx
jb 0x140035122
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003515c
mov rcx, r14
call fcn.140078ab8
nop
lea rcx, [rbp + 0xf]
call fcn.140024228
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140078f30
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret
call fcn.14007faac
nop
call fcn.14007faac
nop
call fcn.14007faac
int3
mov ecx, ebx
call fcn.140076b98
int3
mov dword [0x1400dddcc], 0x7ffffffe
mov ecx, 6
call fcn.140076b98
nop
call fcn.14002448c
nop
call fcn.14007faac
nop
call fcn.14007faac
nop
call fcn.14007faac
nop
call fcn.14007faac
int3