Function at 0x1400119f0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1400ab088]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov r14, rcx
xor r15d, r15d
mov dword [rsp + 0x30], r15d
mov edi, r15d
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [r14]
add rbx, 0x4e0
mov qword [rsp + 0x48], rbx
mov rcx, rbx
call fcn.140033b0c
test eax, eax
je 0x140011a6f
mov ecx, eax
call fcn.1400335c8
nop
mov rax, qword [r14]
mov rdx, qword [rax + 0x5b0]
mov rcx, qword [rax + 0x5b8]
sub rcx, rdx
sar rcx, 5
cmp rcx, 2
jae 0x140011ab0
mov rcx, rbx
call fcn.140033b30
test eax, eax
je 0x140011aa1
mov ecx, eax
call fcn.1400335c8
nop
inc edi
cmp edi, 0x12c
jl 0x140011a41
jmp 0x140012261
add rdx, 0x20
lea rcx, [rbp - 0x68]
call fcn.140012b00
nop
movdqa xmm0, xmmword [0x1400971e0]
movdqu xmmword [rbp - 0x38], xmm0
mov word [rbp - 0x48], r15w
mov r8d, 5
lea rdx, str.flxgq
lea rcx, [rbp - 0x48]
call fcn.1400021b0
nop
movdqa xmm0, xmmword [0x1400971e0]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], r15w
mov r8d, 5
lea rdi, [0x140092a80]
mov rdx, rdi
lea rcx, [rbp - 8]
call fcn.1400021b0
nop
movdqa xmm0, xmmword [0x1400971e0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r15w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x28]
call fcn.1400021b0
nop
mov rax, qword [r14]
mov rcx, qword [rax + 0x5d0]
lea r8, [rcx + 8]
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x28]
lea rdx, [rbp + 0x18]
mov rcx, qword [rcx]
call fcn.14000df70
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x140011ba4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011b9f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400122a4
call fcn.140034f54
movdqa xmm0, xmmword [0x1400971e0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r15w
mov rdx, qword [rbp + 0x10]
cmp rdx, 8
jb 0x140011bf6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011bf1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400122aa
call fcn.140034f54
movdqa xmm0, xmmword [0x1400971e0]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], r15w
lea r8, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae r8, qword [rbp - 0x68]
mov r12, qword [rbp + 0x30]
mov r13, qword [rbp + 0x18]
cmp qword [rbp - 0x58], 1
jne 0x140011e06
mov edx, 1
lea rcx, [0x140092d04]
sub r8, rcx
nop dword [rax + rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x140011e06
add rcx, 2
sub rdx, 1
jne 0x140011c40
lea rdx, [rbp + 0x18]
cmp r12, 8
cmovae rdx, r13
mov r9, qword [rbp + 0x28]
cmp r9, 5
jne 0x140011c8c
mov rcx, r9
sub rdx, rdi
movzx eax, word [rdi]
cmp word [rdx + rdi], ax
jne 0x140011c8c
add rdi, 2
sub rcx, 1
jne 0x140011c74
jmp 0x14001209e
lea r8, [rbp + 0x18]
cmp r12, 8
cmovae r8, r13
lea r10, str.false
cmp r9, 5
jne 0x140011cc9
mov rdx, r9
mov rcx, r10
sub r8, r10
nop
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x140011cc9
add rcx, 2
sub rdx, 1
jne 0x140011cb0
jmp 0x14001209e
movdqa xmm0, xmmword [0x1400971e0]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rsp + 0x78], r15w
mov r8d, 5
mov rdx, r10
lea rcx, [rsp + 0x78]
call fcn.1400021b0
nop
movdqa xmm0, xmmword [0x1400971e0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x58]
call fcn.1400021b0
mov rax, qword [r14]
mov rcx, qword [rax + 0x5d0]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x140011d32
mov r9, qword [r9]
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae r8, qword [rsp + 0x78]
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rdx, qword [rsp + 0x58]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x140011d61
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x140011da9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011da4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400122b0
call fcn.140034f54
movdqa xmm0, xmmword [0x1400971e0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x14001209e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012099
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001229e
jmp 0x140012099
movdqa xmm0, xmmword [0x1400971e0]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rsp + 0x78], r15w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x78]
call fcn.1400021b0
mov rax, qword [r14]
mov rcx, qword [rax + 0x5d0]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x140011e47
mov r9, qword [r9]
lea r8, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae r8, qword [rbp - 0x68]
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rdx, qword [rsp + 0x78]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x140011e73
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x140011ebb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011eb5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400122b6
call fcn.140034f54
nop
movdqa xmm0, xmmword [0x1400971e0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov dword [rsp + 0x30], 3
mov rdx, qword [rbp - 0x58]
add rdx, 0x1c
lea rcx, [rsp + 0x58]
call fcn.140002e00
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1c
jb 0x140011f34
lea rsi, [rcx + 0x1c]
mov qword [rsp + 0x68], rsi
lea rdi, [rsp + 0x58]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x58]
lea rcx, [rdi + rcx*2]
mov r8d, 0x38
lea rdx, str.https:__flingtrainer.com_cn_
call fcn.1400535c0
mov word [rdi + rsi*2], r15w
jmp 0x140011f53
mov qword [rsp + 0x20], 0x1c
lea r9, str.https:__flingtrainer.com_cn_
mov edx, 0x1c
lea rcx, [rsp + 0x58]
call fcn.1400030c0
lea r9, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae r9, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x58]
mov r15, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
sub rax, r15
cmp rsi, rax
ja 0x140011fb0
lea rax, [r15 + rsi]
mov qword [rsp + 0x68], rax
lea rdi, [rsp + 0x58]
cmp rcx, 8
cmovae rdi, qword [rsp + 0x58]
lea r8, [rsi + rsi]
lea rcx, [rdi + r15*2]
mov rdx, r9
call fcn.1400535c0
lea rax, [r15 + rsi]
xor r15d, r15d
mov word [rdi + rax*2], r15w
jmp 0x140011fc5
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.1400030c0
xor r15d, r15d
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 5
jb 0x140012015
lea rsi, [rcx + 5]
mov qword [rsp + 0x68], rsi
lea rdi, [rsp + 0x58]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x58]
lea rcx, [rdi + rcx*2]
mov r8d, 0xa
lea rdx, [0x140092d08]
call fcn.1400535c0
mov word [rdi + rsi*2], r15w
lea rax, [rsp + 0x58]
jmp 0x140012034
mov qword [rsp + 0x20], 5
lea r9, [0x140092d08]
mov edx, 5
lea rcx, [rsp + 0x58]
call fcn.1400030c0
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rcx, [rbp - 0x48]
call fcn.140001f20
movups xmmword [rbp - 0x48], xmm6
movups xmmword [rbp - 0x38], xmm7
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14001209e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012099
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400122bc
call fcn.140034f54
lea rdi, [0x1400b0c70]
mov qword [rsp + 0x50], rdi
mov rcx, rdi
call fcn.140033b0c
test eax, eax
je 0x1400120be
mov ecx, eax
call fcn.1400335c8
nop
mov rcx, qword [r14]
mov dword [rsp + 0x38], 0xa
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
mov r8d, 4
lea rdx, [rsp + 0x38]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
mov r8d, 7
lea rdx, str.CHADURL
lea rcx, [rsp + 0x78]
call fcn.140002360
lea rdx, [rsp + 0x78]
mov rcx, qword [r14]
call fcn.14000be00
mov rcx, qword [r14]
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x38]
mov r8d, 4
lea rdx, [rsp + 0x30]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x30], 1
jne 0x14001216f
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x78]
call fcn.140012b00
mov rdx, rax
mov rcx, qword [r14]
call fcn.14000bec0
nop
mov rcx, rdi
call fcn.140033b30
test eax, eax
je 0x140012183
mov ecx, eax
call fcn.1400335c8
nop
cmp r12, 8
jb 0x1400121bf
lea rdx, [r12*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x1400121b6
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400122c2
mov rcx, r13
call fcn.140034f54
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 8
jb 0x140012200
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400121fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400122c8
call fcn.140034f54
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x14001223c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012237
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012298
call fcn.140034f54
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r15w
mov rcx, rbx
call fcn.140033b30
test eax, eax
je 0x140012261
mov ecx, eax
call fcn.1400335c8
nop
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.140034f30
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400566cc
nop
call fcn.1400566cc
nop
call fcn.1400566cc
nop
call fcn.1400566cc
nop
call fcn.1400566cc
nop
call fcn.1400566cc
int3
call fcn.1400566cc
nop
call fcn.1400566cc
nop
call fcn.1400566cc
int3