Function at 0x140062de0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
lea rbp, [rax - 0x18]
sub rsp, 0x110
cmp byte [0x14021bd10], 0
je 0x1400633a5
mov qword [rax - 0x10], rbx
lea rcx, [0x14021b568]
mov qword [rax - 0x18], rsi
xor r9d, r9d
mov qword [rax - 0x38], r14
mov edx, 0xc0000000
xor r14d, r14d
mov qword [rax - 0x40], r15
mov qword [rsp + 0x30], r14
mov r15d, r14d
mov dword [rsp + 0x28], 0x80
mov ebx, r14d
mov qword [rax - 0x20], rdi
lea r8d, [r14 + 3]
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x50], rax
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x14006335b
mov edi, 0x400000
lea rdx, [0x1401ae572]
mov ecx, edi
call fcn.14002ec60
test rax, rax
je 0x14006335b
mov qword [rsp + 0xf0], r12
lea r9, [r14 - 1]
mov r15, rax
mov r12d, edi
xor eax, eax
mov dword [rbp + 0x28], edi
lea rdi, [0x14021b268]
mov qword [rsp + 0xe8], r13
mov ecx, 0x3e
mov qword [rsp + 0x60], r14
rep stosd dword [rdi], eax
lea edx, [rax + 0x40]
mov dword [0x14021b268], 3
lea rcx, [0x14021b26c]
mov r13d, r14d
lea r8, str.Copyright_2000_2024__MetaQuotes_Ltd.
call fcn.14003c5c8
lea r9, [r14 - 1]
lea r8, str.cookies
lea edx, [r14 + 0x10]
lea rcx, [0x14021b2ec]
call fcn.14003c5c8
mov eax, 0x40000000
mov r14d, r12d
mov edi, eax
and edi, eax
mov eax, 0xf8
cmp r12d, eax
mov dword [rbp + 0x38], edi
cmova r14d, eax
test r14d, r14d
je 0x14006329d
mov r8d, r14d
mov eax, r12d
test r15, r15
jne 0x140062f25
call fcn.140040da4
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x140062f50
mov rcx, r15
cmp rax, r8
jb 0x140062f3b
lea rdx, [0x14021b268]
call fcn.14014dae0
jmp 0x140062f55
mov r8, rax
xor edx, edx
call fcn.14014e180
call fcn.140040da4
mov dword [rax], 0x22
call fcn.140040c34
cmp r14d, ebx
mov dl, 1
mov byte [rbp + 0x20], dl
cmova ebx, r14d
cmp r14d, 0xf8
jne 0x14006329f
cmp dword [0x14021bd00], r13d
je 0x140063284
mov rax, qword [0x14021bcf8]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140063284
mov r10d, r13d
mov ecx, 0x8c8
mov qword [rsp + 0x48], r10
nop dword [rax]
cmp qword [rax + 0x8c0], 0
je 0x14006322c
cmp word [rax], 0
je 0x14006322c
cmp byte [rax + 0x80], 0
je 0x14006322c
cmp byte [rax + 0xc0], 0
je 0x14006322c
test r15, r15
je 0x14006322c
test edi, edi
je 0x14006322c
cmp r14d, ebx
ja 0x14006322c
cmp r14d, r12d
ja 0x14006322c
mov eax, r12d
sub eax, r14d
cmp eax, ecx
jae 0x1400631b3
cmp rsi, 0xffffffffffffffff
je 0x140063227
test edi, edi
je 0x1400630a1
cmp ebx, 1
jb 0x1400630a1
test dl, dl
je 0x1400630a1
xor r9d, r9d
mov qword [rsp + 0x70], r13
lea r8, [rsp + 0x74]
mov edx, r10d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x70], eax
cmp eax, 0xffffffff
jne 0x140063052
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x14006317f
cmp qword [rsp + 0x70], 0xffffffffffffffff
je 0x14006317f
xor eax, eax
mov dword [rbp + 0x30], eax
test ebx, ebx
je 0x14006308b
lea r9, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r8d, ebx
mov rdx, r15
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140063088
mov dword [rbp + 0x30], eax
jmp 0x14006308b
mov eax, dword [rbp + 0x30]
lock add qword [0x1401f4d68], rax
cmp ebx, dword [rbp + 0x30]
jne 0x14006317f
xor al, al
mov byte [rbp + 0x20], al
mov eax, r14d
add r13, rax
mov r12, r13
and r12d, 0xfff
sub r13, r12
lea edi, [r12 + 0x400000]
cmp edi, dword [rbp + 0x28]
jbe 0x1400630ee
mov ecx, edi
lea rdx, [0x1401ae572]
call fcn.14002ec60
mov rsi, rax
test rax, rax
je 0x140063175
mov rcx, r15
call fcn.14002ec58
mov r15, rsi
mov dword [rbp + 0x28], edi
mov rsi, qword [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x78], r13
lea r8, [rsp + 0x7c]
mov edx, r13d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x78], eax
cmp eax, 0xffffffff
jne 0x14006311a
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x14006317a
cmp qword [rsp + 0x78], 0xffffffffffffffff
je 0x14006317a
test r15, r15
je 0x140063188
xor eax, eax
mov ebx, eax
nop dword [rax + rax]
mov r8d, edi
mov edx, ebx
sub r8d, ebx
mov dword [rsp + 0x5c], eax
add rdx, r15
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x5c]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140063169
mov eax, dword [rsp + 0x5c]
test eax, eax
je 0x140063169
add ebx, eax
mov eax, 0
cmp ebx, edi
jb 0x140063130
mov eax, ebx
lock add qword [0x1401f4d70], rax
jmp 0x14006318a
mov rsi, qword [rsp + 0x50]
mov r13, qword [rsp + 0x60]
movzx edx, byte [rbp + 0x20]
jmp 0x140063222
xor ebx, ebx
xor dl, dl
mov qword [rsp + 0x60], r13
mov byte [rbp + 0x20], dl
mov r14d, r12d
cmp r12d, ebx
ja 0x1400631de
cmp r12d, dword [rbp + 0x28]
ja 0x1400631de
mov r12d, dword [rbp + 0x28]
mov r10, r13
mov qword [rsp + 0x48], r13
mov ecx, 0x8c8
mov eax, r12d
sub eax, r14d
cmp eax, ecx
mov edi, eax
cmova edi, ecx
test edi, edi
je 0x140063227
mov ecx, r14d
mov r8d, edi
mov edx, eax
add rcx, r15
jne 0x1400631e8
call fcn.140040da4
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x14006320e
mov r10d, r13d
mov qword [rsp + 0x48], r10
jmp 0x140063227
cmp rdx, r8
jb 0x1400631f9
mov rdx, qword [rsp + 0x40]
call fcn.14014dae0
jmp 0x140063213
mov r8, rdx
xor edx, edx
call fcn.14014e180
call fcn.140040da4
mov dword [rax], 0x22
call fcn.140040c34
add r14d, edi
mov dl, 1
cmp r14d, ebx
mov byte [rbp + 0x20], dl
cmova ebx, r14d
mov r10, qword [rsp + 0x48]
mov rax, qword [rsp + 0x40]
mov rcx, qword [0x14021bcf8]
test rcx, rcx
je 0x140063294
cmp rax, rcx
jb 0x140063294
mov eax, dword [0x14021bd00]
mov edx, dword [0x14021bd08]
dec eax
mov r9, qword [rsp + 0x40]
imul eax, edx
add rax, rcx
cmp r9, rax
jae 0x140063290
mov r12d, dword [rbp + 0x28]
mov eax, edx
movzx edx, byte [rbp + 0x20]
add rax, r9
mov edi, dword [rbp + 0x38]
mov ecx, 0x8c8
mov qword [rsp + 0x40], rax
jne 0x140062fa0
mov byte [0x14021bd10], 0
jmp 0x1400632a2
mov r10d, r13d
mov byte [0x14021bd10], 0
jmp 0x1400632a2
movzx edx, byte [rbp + 0x20]
mov byte [0x14021bd10], 0
jmp 0x1400632a2
xor dl, dl
mov r10d, r13d
mov r12, qword [rsp + 0xf0]
cmp rsi, 0xffffffffffffffff
je 0x14006332b
test r15, r15
je 0x14006333b
cmp ebx, 1
jb 0x14006332b
test dl, dl
je 0x14006332b
xor r9d, r9d
mov qword [rsp + 0x50], r13
lea r8, [rsp + 0x54]
mov edx, r10d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [rsp + 0x50], eax
cmp eax, 0xffffffff
jne 0x1400632ee
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x14006332b
cmp qword [rsp + 0x50], 0xffffffffffffffff
je 0x14006332b
xor eax, eax
mov dword [rbp + 0x38], eax
test ebx, ebx
je 0x140063323
lea r9, [rbp + 0x38]
mov qword [rsp + 0x20], rax
mov r8d, ebx
mov rdx, r15
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140063320
mov dword [rbp + 0x38], eax
jmp 0x140063323
mov eax, dword [rbp + 0x38]
lock add qword [0x1401f4d68], rax
test r15, r15
je 0x14006333b
mov rcx, r15
call fcn.14002ec58
xor r15d, r15d
mov r13, qword [rsp + 0xe8]
cmp rsi, 0xffffffffffffffff
je 0x140063361
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rsi, 0xffffffffffffffff
jmp 0x140063361
cmp rsi, 0xffffffffffffffff
jne 0x14006336e
test r15, r15
je 0x14006336e
mov rcx, r15
call fcn.14002ec58
mov r15, qword [rsp + 0xd8]
mov r14, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0xf8]
mov rbx, qword [rsp + 0x108]
cmp rsi, 0xffffffffffffffff
je 0x14006339d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rsi, qword [rsp + 0x100]
add rsp, 0x110
pop rbp
ret