Function at 0x140038380
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x1400da080]
xor rax, rsp
mov qword [rbp + 0x30], rax
xor r12d, r12d
mov edi, r12d
mov r15, qword [rcx]
lea rbx, [r15 + 0x4c0]
mov qword [rsp + 0x48], rbx
nop word [rax + rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rbx
call fcn.140073074
test eax, eax
jne 0x140038ce2
mov rcx, qword [r15 + 0x590]
mov rax, qword [r15 + 0x598]
sub rax, rcx
sar rax, 5
cmp rax, 2
jae 0x140038445
mov rcx, rbx
call fcn.14007307c
inc edi
cmp edi, 0x12c
jl 0x1400383d0
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.140074280
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdi, [rcx + 0x20]
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
mov r14, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x140038464
mov rdi, qword [rdi]
movabs r13, 0x7ffffffffffffffe
cmp r14, 8
jae 0x140038489
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x78], 7
jmp 0x140038514
mov rsi, r14
or rsi, 7
cmp rsi, r13
cmova rsi, r13
lea rcx, [rsi + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x140038cd6
add rcx, rcx
cmp rcx, 0x1000
jb 0x1400384e9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140038cd6
mov rcx, rax
call fcn.1400742d4
mov rcx, rax
test rax, rax
je 0x140038d22
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400384f8
test rcx, rcx
je 0x1400384f5
call fcn.1400742d4
jmp 0x1400384f8
mov rax, r12
mov qword [rsp + 0x70], rax
lea r8, [r14*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.1400766b0
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r12w
mov r8d, 5
lea rdx, str.flxgq
lea rcx, [rbp - 0x30]
call fcn.140005030
nop
mov rdi, qword [r15 + 0x5b0]
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r12w
mov r8d, 5
lea rsi, [0x1400c6cb0]
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.140005030
nop
mov qword [rbp - 0x10], r12
mov qword [rbp], r12
mov qword [rbp + 8], 7
mov word [rbp - 0x10], r12w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x10]
call fcn.140005030
nop
lea r8, [rdi + 8]
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x10]
lea rdx, [rbp + 0x10]
mov rcx, qword [rdi]
call fcn.1400323a0
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x140038604
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400385ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038cea
call fcn.1400742a0
mov qword [rbp], r12
mov qword [rbp + 8], 7
mov word [rbp - 0x10], r12w
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x140038655
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038650
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038cf0
call fcn.1400742a0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r12w
lea r9, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r9, qword [rsp + 0x70]
mov r14d, 0xa
cmp qword [rbp - 0x80], 1
jne 0x1400386c2
lea r8d, [r14 - 9]
lea rax, [0x1400c6e90]
movzx ecx, word [r9]
mov edx, 0x31
cmp cx, dx
jb 0x1400386c2
sub r9, rax
cmp cx, dx
ja 0x1400386c2
cmp r8, 1
je 0x1400387e3
dec r8
add rax, 2
movzx ecx, word [r9 + rax]
movzx edx, word [rax]
cmp cx, dx
jae 0x1400386a2
mov rdi, qword [r15 + 0x5b0]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x50]
call fcn.140005030
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 8
jb 0x140038700
mov r9, qword [r9]
lea r8, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r8, qword [rsp + 0x70]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 8
jb 0x14003872f
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140038777
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038772
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038cf6
call fcn.1400742a0
mov r14, qword [rbp - 0x80]
mov rax, r13
sub rax, r14
cmp rax, 0x1c
jb 0x140038d02
lea r13, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r13, qword [rsp + 0x70]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
lea r12, [r14 + 0x1c]
mov edi, 7
lea rsi, [rsp + 0x50]
cmp r12, rdi
jbe 0x1400389e5
mov rdi, r12
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
jbe 0x1400389c2
mov rdi, rax
jmp 0x1400389cf
lea r8, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
setae dil
mov r9, qword [rbp + 0x10]
cmovae r8, r9
mov r11, qword [rbp + 0x20]
cmp r11, 5
jne 0x140038839
mov rdx, r11
movzx eax, word [r8]
mov ecx, 0x45
cmp ax, cx
jb 0x140038839
sub r8, rsi
cmp ax, cx
ja 0x140038839
cmp rdx, 1
je 0x140038b69
dec rdx
add rsi, 2
movzx eax, word [rsi + r8]
movzx ecx, word [rsi]
cmp ax, cx
jae 0x140038819
lea r10, [rbp + 0x10]
test dil, dil
cmovne r10, r9
lea rsi, str.false
cmp r11, 5
jne 0x14003888b
mov r9, r11
mov rax, rsi
movzx ecx, word [r10]
mov edx, 0x66
cmp cx, dx
jb 0x14003888b
sub r10, rsi
cmp cx, dx
ja 0x14003888b
cmp r9, 1
je 0x140038b69
dec r9
add rax, 2
movzx ecx, word [rax + r10]
movzx edx, word [rax]
cmp cx, dx
jae 0x14003886b
mov rdi, qword [r15 + 0x5b0]
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r12w
mov r8d, 5
mov rdx, rsi
lea rcx, [rbp - 0x50]
call fcn.140005030
nop
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x50]
call fcn.140005030
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 8
jb 0x1400388f1
mov r9, qword [r9]
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae r8, qword [rbp - 0x50]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 8
jb 0x14003891e
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140038966
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038961
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038cfc
call fcn.1400742a0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r12w
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x140038b69
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038b64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038cdc
jmp 0x140038b64
cmp rdi, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rsp + 0x50]
call fcn.14001d7c0
mov rsi, rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], rdi
movups xmm0, xmmword [str.https:__flingtrainer.com_cn_]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [0x1400c70e8]
movups xmmword [rsi + 0x10], xmm1
movups xmm0, xmmword [0x1400c70f8]
movups xmmword [rsi + 0x20], xmm0
movsd xmm1, qword [0x1400c7108]
movsd qword [rsi + 0x30], xmm1
lea rcx, [rsi + 0x38]
lea r8, [r14 + r14]
mov rdx, r13
call fcn.1400766b0
xor eax, eax
mov word [rsi + r12*2], ax
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
mov rax, rdx
sub rax, rcx
cmp rax, 5
jb 0x140038a89
lea rsi, [rcx + 5]
mov qword [rsp + 0x60], rsi
lea rdi, [rsp + 0x50]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x50]
lea rcx, [rdi + rcx*2]
mov r14d, 0xa
mov r8d, r14d
lea rdx, str..html
call fcn.1400766b0
xor r12d, r12d
mov word [rdi + rsi*2], r12w
lea rax, [rsp + 0x50]
jmp 0x140038ab6
mov qword [rsp + 0x20], 5
lea r9, str..html
movzx r8d, byte [rsp + 0x34]
mov edx, 5
lea rcx, [rsp + 0x50]
call fcn.14002b4e0
xor r12d, r12d
lea r14d, [r12 + 0xa]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x38], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x140038b1f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038b11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038d08
call fcn.1400742a0
movups xmm0, xmmword [rbp - 0x50]
movups xmm1, xmmword [rsp + 0x38]
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm1
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140038b69
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038b64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038d0e
call fcn.1400742a0
lea rdi, [0x1400de5b0]
mov qword [rbp - 0x50], rdi
mov rcx, rdi
call fcn.140073074
test eax, eax
jne 0x140038d14
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x30]
lea r8d, [rax + 4]
lea rdx, [rsp + 0x38]
mov rcx, qword [r15 + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], reloc.OLEAUT32.dll_SafeArrayDestroy
mov r8d, 7
lea rdx, str.CHADURL
lea rcx, [rbp - 0x70]
call fcn.140015a60
lea rdx, [rbp - 0x70]
mov rcx, r15
call fcn.14002fe90
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x38]
mov r8d, 4
lea rdx, [rsp + 0x30]
mov rcx, qword [r15 + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x30], 1
jne 0x140038c26
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x70]
call fcn.14001d720
mov rdx, rax
mov rcx, r15
call fcn.14002ff50
nop
mov rcx, rdi
call fcn.14007307c
nop
lea rcx, [rbp + 0x10]
call fcn.14001d610
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x140038c7a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038c74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038d1c
call fcn.1400742a0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x140038cb7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038cb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038d22
call fcn.1400742a0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r12w
mov rcx, rbx
call fcn.14007307c
jmp 0x140038418
call fcn.140001df0
nop
call fcn.14007abbc
nop
mov ecx, eax
call fcn.1400719a4
nop
call fcn.14007abbc
nop
call fcn.14007abbc
int3
call fcn.14007abbc
nop
call fcn.14007abbc
nop
call fcn.140001f20
nop
call fcn.14007abbc
nop
call fcn.14007abbc
int3
mov ecx, eax
call fcn.1400719a4
nop
call fcn.14007abbc
nop
call fcn.14007abbc
int3