Function at 0x140036b20
Capabilities:
Read file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1400eb3c0]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov r14, rcx
xor r13d, r13d
mov edi, r13d
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [r14]
add rbx, 0x5b8
mov qword [rsp + 0x48], rbx
mov rcx, rbx
call fcn.14007f2cc
test eax, eax
jne 0x140037440
mov eax, dword [rbx + 0x4c]
cmp eax, 0x7fffffff
je 0x140037430
mov rax, qword [r14]
mov rdx, qword [rax + 0x688]
mov rcx, qword [rax + 0x690]
sub rcx, rdx
sar rcx, 5
cmp rcx, 2
jae 0x140036c02
mov rcx, rbx
call fcn.14007f2d4
inc edi
cmp edi, 0x12c
jl 0x140036b63
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.140081370
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
add rdx, 0x20
lea rcx, [rbp - 0x68]
call fcn.140008c40
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
mov r8d, 5
lea rdx, str.flxgq
lea rcx, [rbp - 0x48]
call fcn.1400043b0
nop
mov rax, qword [r14]
mov rdi, qword [rax + 0x6a8]
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 8], xmm1
mov r8d, 5
lea rsi, [0x1400b5d40]
mov rdx, rsi
lea rcx, [rbp - 8]
call fcn.1400043b0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x28]
call fcn.1400043b0
nop
lea r8, [rdi + 8]
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x28]
lea rdx, [rbp + 0x18]
mov rcx, qword [rdi]
call fcn.1400434f0
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
jbe 0x140036ced
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036ce8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003744b
call fcn.140080efc
movdqa xmm0, xmmword [0x1400b1c50]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r13w
mov rdx, qword [rbp + 0x10]
cmp rdx, 7
jbe 0x140036d3f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036d3a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037451
call fcn.140080efc
movdqa xmm0, xmmword [0x1400b1c50]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], r13w
lea r8, [rbp - 0x68]
cmp qword [rbp - 0x50], 7
cmova r8, qword [rbp - 0x68]
mov edi, 0xa
mov r12, qword [rbp + 0x30]
mov qword [rsp + 0x40], r12
mov r15, qword [rbp + 0x18]
mov qword [rsp + 0x38], r15
mov rdx, qword [rbp - 0x58]
cmp rdx, 1
jne 0x140036f72
lea rcx, [0x1400b5ef0]
test rdx, rdx
je 0x140036db8
sub r8, rcx
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140036f72
add rcx, 2
sub rdx, 1
jne 0x140036da0
lea r8, [rbp + 0x18]
cmp r12, 7
cmova r8, r15
mov rdx, qword [rbp + 0x28]
cmp rdx, 5
jne 0x140036df9
mov rcx, rdx
test rdx, rdx
je 0x14003727b
sub r8, rsi
nop dword [rax]
movzx eax, word [r8 + rsi]
cmp ax, word [rsi]
jne 0x140036df9
add rsi, 2
sub rcx, 1
jne 0x140036de0
jmp 0x14003727b
lea r8, [rbp + 0x18]
cmp r12, 7
cmova r8, r15
lea r9, str.false
cmp rdx, 5
jne 0x140036e3a
mov rcx, r9
test rdx, rdx
je 0x14003727b
sub r8, r9
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140036e3a
add rcx, 2
sub rdx, 1
jne 0x140036e21
jmp 0x14003727b
mov rax, qword [r14]
mov rdi, qword [rax + 0x6a8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
mov r8d, 5
mov rdx, r9
lea rcx, [rsp + 0x78]
call fcn.1400043b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x58]
call fcn.1400043b0
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 7
jbe 0x140036e9d
mov r9, qword [r9]
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 7
cmova r8, qword [rsp + 0x78]
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 7
cmova rdx, qword [rsp + 0x58]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 7
jbe 0x140036ecc
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x140036f14
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036f0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037457
call fcn.140080efc
movdqa xmm0, xmmword [0x1400b1c50]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r13w
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x140037276
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036f68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003745d
call fcn.140080efc
jmp 0x140037276
mov rax, qword [r14]
mov rdi, qword [rax + 0x6a8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x78]
call fcn.1400043b0
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 7
jbe 0x140036fb0
mov r9, qword [r9]
lea r8, [rbp - 0x68]
cmp qword [rbp - 0x50], 7
cmova r8, qword [rbp - 0x68]
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 7
cmova rdx, qword [rsp + 0x78]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 7
jbe 0x140036fdc
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x140037023
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003701e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037463
call fcn.140080efc
mov r15, qword [rbp - 0x58]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r15
cmp rax, 0x1c
jb 0x140037469
lea r13, [rbp - 0x68]
cmp qword [rbp - 0x50], 7
cmova r13, qword [rbp - 0x68]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
lea r12, [r15 + 0x1c]
mov esi, 7
lea rdi, [rsp + 0x58]
cmp r12, rsi
jbe 0x140037108
mov rsi, r12
or rsi, 7
cmp rsi, rcx
jbe 0x140037096
mov rsi, rcx
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x1400370c6
cmp rsi, 0xa
mov eax, 0xa
cmovb rsi, rax
lea rcx, [rsi + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14003746f
add rcx, rcx
cmp rcx, 0x1000
jb 0x1400370f2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003746f
mov rcx, rax
call fcn.140080ec0
test rax, rax
je 0x14003747b
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140037103
test rcx, rcx
je 0x140037101
call fcn.140080ec0
mov rdi, rax
jmp 0x140037103
xor edi, edi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], rsi
movups xmm0, xmmword [str.https:__flingtrainer.com_cn_]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x1400b6148]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [0x1400b6158]
movups xmmword [rdi + 0x20], xmm0
movsd xmm0, qword [0x1400b6168]
movsd qword [rdi + 0x30], xmm0
lea rcx, [rdi + 0x38]
lea r8, [r15 + r15]
mov rdx, r13
call fcn.1400a8810
xor r13d, r13d
mov word [rdi + r12*2], r13w
mov rsi, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
sub rax, rsi
cmp rax, 5
jb 0x1400371a6
lea rax, [rsi + 5]
mov qword [rsp + 0x68], rax
lea rdi, [rsp + 0x58]
cmp rcx, 7
cmova rdi, qword [rsp + 0x58]
lea rcx, [rdi + rsi*2]
lea r8d, [r13 + 0xa]
lea rdx, str..html
call fcn.1400a8810
mov word [rdi + rsi*2 + 0xa], r13w
lea rax, [rsp + 0x58]
jmp 0x1400371cb
mov qword [rsp + 0x20], 5
lea r9, str..html
movzx r8d, byte [rsp + 0x30]
mov edx, 5
lea rcx, [rsp + 0x58]
call fcn.14002ba70
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov rdx, qword [rbp - 0x30]
cmp rdx, 7
jbe 0x140037222
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003721d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140037475
call fcn.140080efc
movups xmmword [rbp - 0x48], xmm6
movups xmmword [rbp - 0x38], xmm7
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x14003726c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140037267
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003747b
call fcn.140080efc
mov r12, qword [rsp + 0x40]
mov r15, qword [rsp + 0x38]
mov edi, 0xa
lea rsi, [0x1400edbe0]
mov qword [rsp + 0x50], rsi
mov rcx, rsi
call fcn.14007f2cc
test eax, eax
jne 0x140037481
cmp dword [0x1400edc2c], 0x7fffffff
je 0x14003748c
mov edx, edi
mov rcx, qword [r14]
call fcn.140043bc0
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x70], reloc.OLEAUT32.dll_SafeArrayDestroy
mov rax, qword [str.CHADURL]
mov dword [rsp + 0x58], eax
movzx eax, word [0x1400b617c]
mov word [rsp + 0x5c], ax
movzx eax, byte [0x1400b617e]
mov byte [rsp + 0x5e], al
mov byte [rsp + 0x5f], 0
lea rdx, [rsp + 0x58]
mov rcx, qword [r14]
call fcn.14003ee70
mov rcx, qword [r14]
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x38]
mov r8d, 4
lea rdx, [rsp + 0x40]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x40], 1
jne 0x14003734c
mov rdi, qword [r14]
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x78]
call fcn.140008c40
mov rdx, rax
mov rcx, rdi
call fcn.14003ef40
nop
mov rcx, rsi
call fcn.14007f2d4
nop
cmp r12, 7
jbe 0x140037391
lea rdx, [r12*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x140037388
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400374a1
mov rcx, r15
call fcn.140080efc
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 7
jbe 0x1400373d2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400373cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400374a7
call fcn.140080efc
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x140037412
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003740d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400374ad
call fcn.140080efc
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r13w
mov rcx, rbx
call fcn.14007f2d4
jmp 0x140036bcb
dec eax
mov dword [rbx + 0x4c], eax
mov ecx, 6
call fcn.14007f548
int3
mov ecx, 5
call fcn.14007f548
nop
call fcn.140087eec
nop
call fcn.140087eec
nop
call fcn.140087eec
nop
call fcn.140087eec
int3
call fcn.140087eec
int3
call fcn.140028d10
int3
call fcn.140028660
nop
call fcn.140087eec
nop
call fcn.140087eec
int3
mov ecx, 5
call fcn.14007f548
int3
mov dword [0x1400edc2c], 0x7ffffffe
mov ecx, 6
call fcn.14007f548
nop
call fcn.140087eec
nop
call fcn.140087eec
nop
call fcn.140087eec
int3