Function at 0x14000fef0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1400a4088]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov r14, rcx
xor r15d, r15d
mov dword [rsp + 0x30], r15d
mov edi, r15d
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [r14]
add rbx, 0x438
mov qword [rsp + 0x48], rbx
mov rcx, rbx
call fcn.14003120c
test eax, eax
je 0x14000ff6f
mov ecx, eax
call fcn.140030cc8
nop
mov rax, qword [r14]
mov rdx, qword [rax + 0x508]
mov rcx, qword [rax + 0x510]
sub rcx, rdx
sar rcx, 5
cmp rcx, 2
jae 0x14000ffb0
mov rcx, rbx
call fcn.140031230
test eax, eax
je 0x14000ffa1
mov ecx, eax
call fcn.140030cc8
nop
inc edi
cmp edi, 0x12c
jl 0x14000ff41
jmp 0x140010761
add rdx, 0x20
lea rcx, [rbp - 0x68]
call fcn.140011060
nop
movdqa xmm0, xmmword [0x140091480]
movdqu xmmword [rbp - 0x38], xmm0
mov word [rbp - 0x48], r15w
mov r8d, 5
lea rdx, str.flxgq
lea rcx, [rbp - 0x48]
call fcn.140002140
nop
movdqa xmm0, xmmword [0x140091480]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], r15w
mov r8d, 5
lea rdi, [0x14008c980]
mov rdx, rdi
lea rcx, [rbp - 8]
call fcn.140002140
nop
movdqa xmm0, xmmword [0x140091480]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r15w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x28]
call fcn.140002140
nop
mov rax, qword [r14]
mov rcx, qword [rax + 0x528]
lea r8, [rcx + 8]
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x28]
lea rdx, [rbp + 0x18]
mov rcx, qword [rcx]
call fcn.14000c380
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x1400100a4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001009f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400107a4
call fcn.140032654
movdqa xmm0, xmmword [0x140091480]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r15w
mov rdx, qword [rbp + 0x10]
cmp rdx, 8
jb 0x1400100f6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400100f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400107aa
call fcn.140032654
movdqa xmm0, xmmword [0x140091480]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], r15w
lea r8, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae r8, qword [rbp - 0x68]
mov r12, qword [rbp + 0x30]
mov r13, qword [rbp + 0x18]
cmp qword [rbp - 0x58], 1
jne 0x140010306
mov edx, 1
lea rcx, [0x14008cc04]
sub r8, rcx
nop dword [rax + rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x140010306
add rcx, 2
sub rdx, 1
jne 0x140010140
lea rdx, [rbp + 0x18]
cmp r12, 8
cmovae rdx, r13
mov r9, qword [rbp + 0x28]
cmp r9, 5
jne 0x14001018c
mov rcx, r9
sub rdx, rdi
movzx eax, word [rdi]
cmp word [rdx + rdi], ax
jne 0x14001018c
add rdi, 2
sub rcx, 1
jne 0x140010174
jmp 0x14001059e
lea r8, [rbp + 0x18]
cmp r12, 8
cmovae r8, r13
lea r10, str.false
cmp r9, 5
jne 0x1400101c9
mov rdx, r9
mov rcx, r10
sub r8, r10
nop
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x1400101c9
add rcx, 2
sub rdx, 1
jne 0x1400101b0
jmp 0x14001059e
movdqa xmm0, xmmword [0x140091480]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rsp + 0x78], r15w
mov r8d, 5
mov rdx, r10
lea rcx, [rsp + 0x78]
call fcn.140002140
nop
movdqa xmm0, xmmword [0x140091480]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x58]
call fcn.140002140
mov rax, qword [r14]
mov rcx, qword [rax + 0x528]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x140010232
mov r9, qword [r9]
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae r8, qword [rsp + 0x78]
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rdx, qword [rsp + 0x58]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x140010261
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x1400102a9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400102a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400107b0
call fcn.140032654
movdqa xmm0, xmmword [0x140091480]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x14001059e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010599
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001079e
jmp 0x140010599
movdqa xmm0, xmmword [0x140091480]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rsp + 0x78], r15w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x78]
call fcn.140002140
mov rax, qword [r14]
mov rcx, qword [rax + 0x528]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x140010347
mov r9, qword [r9]
lea r8, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae r8, qword [rbp - 0x68]
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rdx, qword [rsp + 0x78]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x140010373
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1400103bb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400103b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400107b6
call fcn.140032654
nop
movdqa xmm0, xmmword [0x140091480]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov dword [rsp + 0x30], 3
mov rdx, qword [rbp - 0x58]
add rdx, 0x1c
lea rcx, [rsp + 0x58]
call fcn.140002d90
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1c
jb 0x140010434
lea rsi, [rcx + 0x1c]
mov qword [rsp + 0x68], rsi
lea rdi, [rsp + 0x58]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x58]
lea rcx, [rdi + rcx*2]
mov r8d, 0x38
lea rdx, str.https:__flingtrainer.com_cn_
call fcn.140050cc0
mov word [rdi + rsi*2], r15w
jmp 0x140010453
mov qword [rsp + 0x20], 0x1c
lea r9, str.https:__flingtrainer.com_cn_
mov edx, 0x1c
lea rcx, [rsp + 0x58]
call fcn.1400030d0
lea r9, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae r9, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x58]
mov r15, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
sub rax, r15
cmp rsi, rax
ja 0x1400104b0
lea rax, [r15 + rsi]
mov qword [rsp + 0x68], rax
lea rdi, [rsp + 0x58]
cmp rcx, 8
cmovae rdi, qword [rsp + 0x58]
lea r8, [rsi + rsi]
lea rcx, [rdi + r15*2]
mov rdx, r9
call fcn.140050cc0
lea rax, [r15 + rsi]
xor r15d, r15d
mov word [rdi + rax*2], r15w
jmp 0x1400104c5
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.1400030d0
xor r15d, r15d
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 5
jb 0x140010515
lea rsi, [rcx + 5]
mov qword [rsp + 0x68], rsi
lea rdi, [rsp + 0x58]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x58]
lea rcx, [rdi + rcx*2]
mov r8d, 0xa
lea rdx, [0x14008cc08]
call fcn.140050cc0
mov word [rdi + rsi*2], r15w
lea rax, [rsp + 0x58]
jmp 0x140010534
mov qword [rsp + 0x20], 5
lea r9, [0x14008cc08]
mov edx, 5
lea rcx, [rsp + 0x58]
call fcn.1400030d0
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rcx, [rbp - 0x48]
call fcn.140001f00
movups xmmword [rbp - 0x48], xmm6
movups xmmword [rbp - 0x38], xmm7
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14001059e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010599
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400107bc
call fcn.140032654
lea rdi, [0x1400a9940]
mov qword [rsp + 0x50], rdi
mov rcx, rdi
call fcn.14003120c
test eax, eax
je 0x1400105be
mov ecx, eax
call fcn.140030cc8
nop
mov rcx, qword [r14]
mov dword [rsp + 0x38], 0xa
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
mov r8d, 4
lea rdx, [rsp + 0x38]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
mov r8d, 7
lea rdx, str.CHADURL
lea rcx, [rsp + 0x78]
call fcn.1400022f0
lea rdx, [rsp + 0x78]
mov rcx, qword [r14]
call fcn.14000a220
mov rcx, qword [r14]
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x38]
mov r8d, 4
lea rdx, [rsp + 0x30]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x30], 1
jne 0x14001066f
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x78]
call fcn.140011060
mov rdx, rax
mov rcx, qword [r14]
call fcn.14000a2e0
nop
mov rcx, rdi
call fcn.140031230
test eax, eax
je 0x140010683
mov ecx, eax
call fcn.140030cc8
nop
cmp r12, 8
jb 0x1400106bf
lea rdx, [r12*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x1400106b6
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400107c2
mov rcx, r13
call fcn.140032654
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 8
jb 0x140010700
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400106fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400107c8
call fcn.140032654
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x14001073c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010737
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010798
call fcn.140032654
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r15w
mov rcx, rbx
call fcn.140031230
test eax, eax
je 0x140010761
mov ecx, eax
call fcn.140030cc8
nop
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.140032630
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140053be4
nop
call fcn.140053be4
nop
call fcn.140053be4
nop
call fcn.140053be4
nop
call fcn.140053be4
nop
call fcn.140053be4
int3
call fcn.140053be4
nop
call fcn.140053be4
nop
call fcn.140053be4
int3