Function at 0x140013340
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1400a6088]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov r14, rcx
xor r15d, r15d
mov dword [rsp + 0x30], r15d
mov edi, r15d
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [r14]
add rbx, 0x540
mov qword [rsp + 0x48], rbx
mov rcx, rbx
call fcn.140033e6c
test eax, eax
je 0x1400133bf
mov ecx, eax
call fcn.140033928
nop
mov rax, qword [r14]
mov rdx, qword [rax + 0x610]
mov rcx, qword [rax + 0x618]
sub rcx, rdx
sar rcx, 5
cmp rcx, 2
jae 0x140013400
mov rcx, rbx
call fcn.140033e90
test eax, eax
je 0x1400133f1
mov ecx, eax
call fcn.140033928
nop
inc edi
cmp edi, 0x12c
jl 0x140013391
jmp 0x140013bb1
add rdx, 0x20
lea rcx, [rbp - 0x68]
call fcn.1400144b0
nop
movdqa xmm0, xmmword [0x140092c40]
movdqu xmmword [rbp - 0x38], xmm0
mov word [rbp - 0x48], r15w
mov r8d, 5
lea rdx, str.flxgq
lea rcx, [rbp - 0x48]
call fcn.140003f60
nop
movdqa xmm0, xmmword [0x140092c40]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], r15w
mov r8d, 5
lea rdi, [0x14008fa60]
mov rdx, rdi
lea rcx, [rbp - 8]
call fcn.140003f60
nop
movdqa xmm0, xmmword [0x140092c40]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r15w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x28]
call fcn.140003f60
nop
mov rax, qword [r14]
mov rcx, qword [rax + 0x630]
lea r8, [rcx + 8]
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x28]
lea rdx, [rbp + 0x18]
mov rcx, qword [rcx]
call fcn.14000f900
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x1400134f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400134ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013bf4
call fcn.1400352b4
movdqa xmm0, xmmword [0x140092c40]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r15w
mov rdx, qword [rbp + 0x10]
cmp rdx, 8
jb 0x140013546
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013541
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013bfa
call fcn.1400352b4
movdqa xmm0, xmmword [0x140092c40]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], r15w
lea r8, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae r8, qword [rbp - 0x68]
mov r12, qword [rbp + 0x30]
mov r13, qword [rbp + 0x18]
cmp qword [rbp - 0x58], 1
jne 0x140013756
mov edx, 1
lea rcx, [0x14008fce4]
sub r8, rcx
nop dword [rax + rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x140013756
add rcx, 2
sub rdx, 1
jne 0x140013590
lea rdx, [rbp + 0x18]
cmp r12, 8
cmovae rdx, r13
mov r9, qword [rbp + 0x28]
cmp r9, 5
jne 0x1400135dc
mov rcx, r9
sub rdx, rdi
movzx eax, word [rdi]
cmp word [rdx + rdi], ax
jne 0x1400135dc
add rdi, 2
sub rcx, 1
jne 0x1400135c4
jmp 0x1400139ee
lea r8, [rbp + 0x18]
cmp r12, 8
cmovae r8, r13
lea r10, str.false
cmp r9, 5
jne 0x140013619
mov rdx, r9
mov rcx, r10
sub r8, r10
nop
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x140013619
add rcx, 2
sub rdx, 1
jne 0x140013600
jmp 0x1400139ee
movdqa xmm0, xmmword [0x140092c40]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rsp + 0x78], r15w
mov r8d, 5
mov rdx, r10
lea rcx, [rsp + 0x78]
call fcn.140003f60
nop
movdqa xmm0, xmmword [0x140092c40]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x58]
call fcn.140003f60
mov rax, qword [r14]
mov rcx, qword [rax + 0x630]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x140013682
mov r9, qword [r9]
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae r8, qword [rsp + 0x78]
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rdx, qword [rsp + 0x58]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x1400136b1
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x1400136f9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400136f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013c00
call fcn.1400352b4
movdqa xmm0, xmmword [0x140092c40]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1400139ee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400139e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013bee
jmp 0x1400139e9
movdqa xmm0, xmmword [0x140092c40]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rsp + 0x78], r15w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x78]
call fcn.140003f60
mov rax, qword [r14]
mov rcx, qword [rax + 0x630]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x140013797
mov r9, qword [r9]
lea r8, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae r8, qword [rbp - 0x68]
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rdx, qword [rsp + 0x78]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x1400137c3
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x14001380b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013805
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013c06
call fcn.1400352b4
nop
movdqa xmm0, xmmword [0x140092c40]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov dword [rsp + 0x30], 3
mov rdx, qword [rbp - 0x58]
add rdx, 0x1c
lea rcx, [rsp + 0x58]
call fcn.140005550
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1c
jb 0x140013884
lea rsi, [rcx + 0x1c]
mov qword [rsp + 0x68], rsi
lea rdi, [rsp + 0x58]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x58]
lea rcx, [rdi + rcx*2]
mov r8d, 0x38
lea rdx, str.https:__flingtrainer.com_cn_
call fcn.140053920
mov word [rdi + rsi*2], r15w
jmp 0x1400138a3
mov qword [rsp + 0x20], 0x1c
lea r9, str.https:__flingtrainer.com_cn_
mov edx, 0x1c
lea rcx, [rsp + 0x58]
call fcn.140005a70
lea r9, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae r9, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x58]
mov r15, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
sub rax, r15
cmp rsi, rax
ja 0x140013900
lea rax, [r15 + rsi]
mov qword [rsp + 0x68], rax
lea rdi, [rsp + 0x58]
cmp rcx, 8
cmovae rdi, qword [rsp + 0x58]
lea r8, [rsi + rsi]
lea rcx, [rdi + r15*2]
mov rdx, r9
call fcn.140053920
lea rax, [r15 + rsi]
xor r15d, r15d
mov word [rdi + rax*2], r15w
jmp 0x140013915
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.140005a70
xor r15d, r15d
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 5
jb 0x140013965
lea rsi, [rcx + 5]
mov qword [rsp + 0x68], rsi
lea rdi, [rsp + 0x58]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x58]
lea rcx, [rdi + rcx*2]
mov r8d, 0xa
lea rdx, [0x14008fce8]
call fcn.140053920
mov word [rdi + rsi*2], r15w
lea rax, [rsp + 0x58]
jmp 0x140013984
mov qword [rsp + 0x20], 5
lea r9, [0x14008fce8]
mov edx, 5
lea rcx, [rsp + 0x58]
call fcn.140005a70
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rcx, [rbp - 0x48]
call fcn.140003d20
movups xmmword [rbp - 0x48], xmm6
movups xmmword [rbp - 0x38], xmm7
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x1400139ee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400139e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013c0c
call fcn.1400352b4
lea rdi, [0x1400ab930]
mov qword [rsp + 0x50], rdi
mov rcx, rdi
call fcn.140033e6c
test eax, eax
je 0x140013a0e
mov ecx, eax
call fcn.140033928
nop
mov rcx, qword [r14]
mov dword [rsp + 0x38], 0xa
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
mov r8d, 4
lea rdx, [rsp + 0x38]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
mov r8d, 7
lea rdx, str.CHADURL
lea rcx, [rsp + 0x78]
call fcn.140004110
lea rdx, [rsp + 0x78]
mov rcx, qword [r14]
call fcn.14000d7a0
mov rcx, qword [r14]
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x38]
mov r8d, 4
lea rdx, [rsp + 0x30]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x30], 1
jne 0x140013abf
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x78]
call fcn.1400144b0
mov rdx, rax
mov rcx, qword [r14]
call fcn.14000d860
nop
mov rcx, rdi
call fcn.140033e90
test eax, eax
je 0x140013ad3
mov ecx, eax
call fcn.140033928
nop
cmp r12, 8
jb 0x140013b0f
lea rdx, [r12*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x140013b06
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013c12
mov rcx, r13
call fcn.1400352b4
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 8
jb 0x140013b50
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013b4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013c18
call fcn.1400352b4
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x140013b8c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013b87
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013be8
call fcn.1400352b4
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r15w
mov rcx, rbx
call fcn.140033e90
test eax, eax
je 0x140013bb1
mov ecx, eax
call fcn.140033928
nop
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.140035290
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14005674c
nop
call fcn.14005674c
nop
call fcn.14005674c
nop
call fcn.14005674c
nop
call fcn.14005674c
nop
call fcn.14005674c
int3
call fcn.14005674c
nop
call fcn.14005674c
nop
call fcn.14005674c
int3