Function at 0x140017f30
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x14007e040]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov esi, edx
mov r14, rcx
xor r15d, r15d
cmp qword [0x1400818f0], r15
je 0x140018262
cmp qword [0x140081990], r15
je 0x140018262
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x1400819b0]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0x3d
jb 0x140018293
lea rax, [0x1400819a0]
cmp qword [0x1400819b8], 0x10
cmovae rax, qword [0x1400819a0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x3d
lea r9, str.https:__flingtrainer.com_wp_content_check_for_trainer_update_
lea rcx, [rbp - 0x59]
call fcn.14000c9e0
lea rdx, [rbp - 0x59]
lea rcx, [rbp + 7]
call fcn.14001ab90
nop
lea r9, [rbp + 7]
mov rbx, qword [rbp + 7]
mov rdi, qword [rbp + 0x1f]
cmp rdi, 8
cmovae r9, rbx
mov r10, qword [rbp + 0x17]
cmp r10, 5
jne 0x140018042
mov rdx, r10
lea r8, [0x140070530]
test r10, r10
je 0x140018035
sub r9, r8
nop dword [rax]
movzx eax, word [r8]
cmp word [r8 + r9], ax
jne 0x140018042
add r8, 2
sub rdx, 1
jne 0x140018020
test esi, esi
jle 0x14001822b
jmp 0x140018218
cmp r10, 2
jbe 0x140018214
lea rax, [rbp + 7]
cmp rdi, 8
cmovae rax, rbx
mov esi, 1
cmp word [rax], 0x22
jne 0x14001809c
mov eax, esi
cmp r10, rax
cmovb rax, r10
lea rcx, [rbp + 7]
cmp rdi, 8
cmovae rcx, rbx
sub r10, rax
mov qword [rbp + 0x17], r10
lea r8, [r10*2 + 2]
lea rdx, [rcx + rax*2]
call fcn.140036480
mov rdi, qword [rbp + 0x1f]
mov r10, qword [rbp + 0x17]
mov rbx, qword [rbp + 7]
lea rax, [rbp + 7]
cmp rdi, 8
cmovae rax, rbx
cmp word [rax + r10*2 - 2], 0x22
jne 0x140018102
lea rdx, [r10 - 1]
cmp r10, rdx
jb 0x140018299
mov rax, r10
sub rax, rdx
cmp rax, rsi
cmovb rsi, rax
lea rax, [rbp + 7]
cmp rdi, 8
cmovae rax, rbx
lea rcx, [rax + rdx*2]
sub r10, rsi
mov qword [rbp + 0x17], r10
sub r10, rdx
lea r8, [r10*2 + 2]
lea rdx, [rcx + rsi*2]
call fcn.140036480
mov rdi, qword [rbp + 0x1f]
mov r10, qword [rbp + 0x17]
mov rbx, qword [rbp + 7]
lea rcx, [rbp + 7]
cmp rdi, 8
cmovae rcx, rbx
mov qword [rsp + 0x20], 3
lea r9, [0x1400708a0]
xor r8d, r8d
mov rdx, r10
call fcn.140006300
test rax, rax
jne 0x1400181e3
lea rax, [rbp - 0x39]
mov qword [rbp - 0x69], rax
lea rdx, [0x1400818e0]
lea rcx, [rbp - 0x39]
call fcn.140018420
mov rbx, rax
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x19]
call fcn.140018420
nop
mov rdx, rbx
mov rcx, rax
call fcn.14001bd20
movzx ebx, al
lea rcx, [0x1400819f0]
call fcn.140033608
test eax, eax
jne 0x140018285
mov dword [rbp - 0x69], 7
mov dword [rbp - 0x61], r15d
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0x61]
lea r8d, [rax + 4]
lea rdx, [rbp - 0x69]
mov rcx, qword [r14 + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, r15d
test bl, bl
setne al
mov dword [rbp - 0x61], eax
mov dword [rbp - 0x69], r15d
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0x69]
mov r8d, 4
lea rdx, [rbp - 0x61]
mov rcx, qword [r14 + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rcx, [0x1400819f0]
call fcn.140033610
mov rdi, qword [rbp + 0x1f]
mov rbx, qword [rbp + 7]
cmp rdi, 8
jb 0x140018262
lea rdx, [rdi*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14001825a
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001828d
jmp 0x14001825a
test esi, esi
jle 0x1400181e3
lea edx, [rsi - 1]
mov rcx, r14
call fcn.140017f30
mov rbx, qword [rbp + 7]
mov rdi, qword [rbp + 0x1f]
cmp rdi, 8
jb 0x140018262
lea rdx, [rdi*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14001825a
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001828d
mov rcx, rbx
call fcn.140034040
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140034020
mov rbx, qword [rsp + 0x120]
add rsp, 0xe0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov ecx, eax
call fcn.140033190
nop
call fcn.14003aa14
int3
call fcn.1400012a0
nop
call fcn.140006030
int3