Function at 0x1400118d0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140084048]
xor rax, rsp
mov qword [rbp + 0x40], rax
mov rsi, rcx
xor r12d, r12d
mov edi, r12d
nop
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [rsi]
add rbx, 0x448
mov qword [rsp + 0x50], rbx
mov rcx, rbx
call fcn.140035038
test eax, eax
jne 0x140012069
mov rax, qword [rsi]
mov rdx, qword [rax + 0x518]
mov rcx, qword [rax + 0x520]
sub rcx, rdx
sar rcx, 5
cmp rcx, 2
jae 0x14001199c
mov rcx, rbx
call fcn.140035040
inc edi
cmp edi, 0x12c
jl 0x140011910
mov rcx, qword [rbp + 0x40]
xor rcx, rsp
call fcn.1400357b0
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
add rdx, 0x20
lea rcx, [rbp - 0x60]
call fcn.1400126f0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8d, 5
lea rdx, str.flxgq
lea rcx, [rbp - 0x40]
call fcn.1400023e0
nop
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
mov r8d, 5
lea rdi, [0x140070500]
mov rdx, rdi
lea rcx, [rbp]
call fcn.1400023e0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x20]
call fcn.1400023e0
nop
mov rax, qword [rsi]
mov rcx, qword [rax + 0x538]
lea r8, [rcx + 8]
lea rax, [rbp]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x20]
lea rdx, [rbp + 0x20]
mov rcx, qword [rcx]
call fcn.14000e5b0
nop
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x140011a87
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011a82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012071
call fcn.1400357d0
movdqa xmm0, xmmword [0x140079710]
movdqu xmmword [rbp - 0x10], xmm0
mov word [rbp - 0x20], r12w
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x140011ad9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011ad4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012077
call fcn.1400357d0
movdqa xmm0, xmmword [0x140079710]
movdqu xmmword [rbp + 0x10], xmm0
mov word [rbp], r12w
lea r8, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae r8, qword [rbp - 0x60]
mov r15, qword [rbp + 0x38]
mov r14, qword [rbp + 0x20]
mov rdx, qword [rbp - 0x50]
cmp rdx, 1
jne 0x140011cea
lea rcx, [0x14007078c]
test rdx, rdx
je 0x140011b38
sub r8, rcx
nop
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x140011cea
add rcx, 2
sub rdx, 1
jne 0x140011b20
lea r8, [rbp + 0x20]
cmp r15, 8
cmovae r8, r14
mov rdx, qword [rbp + 0x30]
cmp rdx, 5
jne 0x140011b79
mov rcx, rdx
test rdx, rdx
je 0x140011ea4
sub r8, rdi
nop dword [rax]
movzx eax, word [rdi]
cmp word [rdi + r8], ax
jne 0x140011b79
add rdi, 2
sub rcx, 1
jne 0x140011b60
jmp 0x140011ea4
lea r8, [rbp + 0x20]
cmp r15, 8
cmovae r8, r14
lea r9, str.false
cmp rdx, 5
jne 0x140011bba
mov rcx, r9
test rdx, rdx
je 0x140011ea4
sub r8, r9
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x140011bba
add rcx, 2
sub rdx, 1
jne 0x140011ba1
jmp 0x140011ea4
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, 5
mov rdx, r9
lea rcx, [rsp + 0x60]
call fcn.1400023e0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x80]
call fcn.1400023e0
mov rax, qword [rsi]
mov rcx, qword [rax + 0x538]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x140011c1b
mov r9, qword [r9]
lea r8, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae r8, qword [rsp + 0x60]
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x140011c48
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140011c8e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011c89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001207d
call fcn.1400357d0
movdqa xmm0, xmmword [0x140079710]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r12w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140011ea4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011e9f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012063
jmp 0x140011e9f
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x60]
call fcn.1400023e0
mov rax, qword [rsi]
mov rcx, qword [rax + 0x538]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x140011d29
mov r9, qword [r9]
lea r8, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae r8, qword [rbp - 0x60]
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rdx, qword [rsp + 0x60]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x140011d56
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140011d9e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011d99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012083
call fcn.1400357d0
movabs rax, 0x7ffffffffffffffe
mov rcx, qword [rbp - 0x50]
sub rax, rcx
cmp rax, 0x1c
jb 0x140012089
lea rax, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rax, qword [rbp - 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x1c
lea r9, str.https:__flingtrainer.com_cn_
lea rcx, [rsp + 0x60]
call fcn.140002f20
nop
mov r8d, 5
lea rdx, [0x140070790]
lea rcx, [rsp + 0x60]
call fcn.140003070
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x140011e5a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011e55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001208f
call fcn.1400357d0
movups xmmword [rbp - 0x40], xmm6
movups xmmword [rbp - 0x30], xmm7
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140011ea4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011e9f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012095
call fcn.1400357d0
lea rdi, [0x1400878e0]
mov qword [rsp + 0x58], rdi
mov rcx, rdi
call fcn.140035038
test eax, eax
jne 0x14001209b
mov rcx, qword [rsi]
mov dword [rsp + 0x48], 0xa
mov dword [rsp + 0x40], r12d
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x40]
lea r8d, [rax + 4]
lea rdx, [rsp + 0x48]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], 7
mov qword [rbp - 0x68], reloc.OLEAUT32.dll_SafeArrayDestroy
mov rax, qword [str.CHADURL]
mov dword [rbp - 0x80], eax
movzx eax, word [0x1400707e4]
mov word [rbp - 0x7c], ax
movzx eax, byte [0x1400707e6]
mov byte [rbp - 0x7a], al
mov byte [rbp - 0x79], 0
lea rdx, [rbp - 0x80]
mov rcx, qword [rsi]
call fcn.14000c4b0
mov rcx, qword [rsi]
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x48], r12d
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x48]
mov r8d, 4
lea rdx, [rsp + 0x40]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x40], 1
jne 0x140011f7d
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x60]
call fcn.1400126f0
mov rdx, rax
mov rcx, qword [rsi]
call fcn.14000c570
nop
mov rcx, rdi
call fcn.140035040
nop
cmp r15, 8
jb 0x140011fc2
lea rdx, [r15*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140011fb9
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400120a3
mov rcx, r14
call fcn.1400357d0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x140012003
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011ffd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400120a9
call fcn.1400357d0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14001203f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001203a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001205d
call fcn.1400357d0
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r12w
mov rcx, rbx
call fcn.140035040
jmp 0x14001196a
call fcn.14003c3d8
nop
call fcn.14003c3d8
nop
mov ecx, eax
call fcn.140034ca0
nop
call fcn.14003c3d8
nop
call fcn.14003c3d8
nop
call fcn.14003c3d8
nop
call fcn.14003c3d8
int3
call fcn.140001300
nop
call fcn.14003c3d8
nop
call fcn.14003c3d8
int3
mov ecx, eax
call fcn.140034ca0
nop
call fcn.14003c3d8
nop
call fcn.14003c3d8
int3