Function at 0x14003cc00
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x1400f2688]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov r15, rcx
xor r12d, r12d
mov edi, r12d
nop dword [rax + rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [r15]
add rbx, 0x5a0
mov qword [rsp + 0x48], rbx
mov rcx, rbx
call fcn.1400857fc
test eax, eax
jne 0x14003d509
mov rax, qword [r15]
mov rdx, qword [rax + 0x670]
mov rcx, qword [rax + 0x678]
sub rcx, rdx
sar rcx, 5
cmp rcx, 2
jae 0x14003ccc7
mov rcx, rbx
call fcn.140085804
inc edi
cmp edi, 0x12c
jl 0x14003cc40
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.140088250
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rsi, [rdx + 0x20]
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
mov r14, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 8
jb 0x14003cce6
mov rsi, qword [rsi]
movabs r13, 0x7ffffffffffffffe
cmp r14, 8
jae 0x14003cd08
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x78], 7
jmp 0x14003cd40
mov rdi, r14
or rdi, 7
cmp rdi, r13
cmova rdi, r13
lea rdx, [rdi + 1]
lea rcx, [rsp + 0x70]
call fcn.140029380
mov qword [rsp + 0x70], rax
lea r8, [r14*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.14008a080
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r12w
mov r8d, 5
lea rdx, str.flxgq
lea rcx, [rbp - 0x30]
call fcn.140029620
nop
mov rax, qword [r15]
mov rdi, qword [rax + 0x690]
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r12w
mov r8d, 5
lea rsi, [0x1400bac40]
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.140029620
nop
mov qword [rbp - 0x10], r12
mov qword [rbp], r12
mov qword [rbp + 8], 7
mov word [rbp - 0x10], r12w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x10]
call fcn.140029620
nop
lea r8, [rdi + 8]
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x10]
lea rdx, [rbp + 0x10]
mov rcx, qword [rdi]
call fcn.140049cd0
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x14003ce33
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ce2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d511
call fcn.140087c4c
mov qword [rbp], r12
mov qword [rbp + 8], 7
mov word [rbp - 0x10], r12w
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x14003ce84
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ce7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d517
call fcn.140087c4c
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r12w
lea r9, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r9, qword [rsp + 0x70]
mov r14d, 0xa
cmp qword [rbp - 0x80], 1
jne 0x14003cef6
lea edx, [r14 - 9]
lea rax, [0x1400bae40]
movzx ecx, word [r9]
mov r8d, 0x31
cmp cx, r8w
jb 0x14003cef6
sub r9, rax
cmp cx, r8w
ja 0x14003cef6
cmp rdx, 1
je 0x14003d01a
dec rdx
add rax, 2
movzx ecx, word [r9 + rax]
movzx r8d, word [rax]
cmp cx, r8w
jae 0x14003ced4
mov rax, qword [r15]
mov rdi, qword [rax + 0x690]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x50]
call fcn.140029620
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 8
jb 0x14003cf37
mov r9, qword [r9]
lea r8, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r8, qword [rsp + 0x70]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 8
jb 0x14003cf66
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14003cfae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003cfa9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d51d
call fcn.140087c4c
mov r14, qword [rbp - 0x80]
mov rax, r13
sub rax, r14
cmp rax, 0x1c
jb 0x14003d529
lea r13, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r13, qword [rsp + 0x70]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
lea r12, [r14 + 0x1c]
mov edi, 7
lea rsi, [rsp + 0x50]
cmp r12, rdi
jbe 0x14003d21f
mov rdi, r12
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
jbe 0x14003d1fc
mov rdi, rax
jmp 0x14003d209
lea r8, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
setae dil
mov r9, qword [rbp + 0x10]
cmovae r8, r9
mov r11, qword [rbp + 0x20]
cmp r11, 5
jne 0x14003d070
mov rdx, r11
movzx eax, word [r8]
mov ecx, 0x45
cmp ax, cx
jb 0x14003d070
sub r8, rsi
cmp ax, cx
ja 0x14003d070
cmp rdx, 1
je 0x14003d3a3
dec rdx
add rsi, 2
movzx eax, word [rsi + r8]
movzx ecx, word [rsi]
cmp ax, cx
jae 0x14003d050
lea r10, [rbp + 0x10]
test dil, dil
cmovne r10, r9
lea rsi, str.false
cmp r11, 5
jne 0x14003d0c2
mov r9, r11
mov rax, rsi
movzx ecx, word [r10]
mov edx, 0x66
cmp cx, dx
jb 0x14003d0c2
sub r10, rsi
cmp cx, dx
ja 0x14003d0c2
cmp r9, 1
je 0x14003d3a3
dec r9
add rax, 2
movzx ecx, word [rax + r10]
movzx edx, word [rax]
cmp cx, dx
jae 0x14003d0a2
mov rax, qword [r15]
mov rdi, qword [rax + 0x690]
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r12w
mov r8d, 5
mov rdx, rsi
lea rcx, [rbp - 0x50]
call fcn.140029620
nop
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x50]
call fcn.140029620
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 8
jb 0x14003d12b
mov r9, qword [r9]
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae r8, qword [rbp - 0x50]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 8
jb 0x14003d158
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14003d1a0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d19b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d523
call fcn.140087c4c
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r12w
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x14003d3a3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d39e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d503
jmp 0x14003d39e
cmp rdi, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rsp + 0x50]
call fcn.140029380
mov rsi, rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], rdi
movups xmm0, xmmword [str.https:__flingtrainer.com_cn_]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [0x1400bb098]
movups xmmword [rsi + 0x10], xmm1
movups xmm0, xmmword [0x1400bb0a8]
movups xmmword [rsi + 0x20], xmm0
movsd xmm1, qword [0x1400bb0b8]
movsd qword [rsi + 0x30], xmm1
lea rcx, [rsi + 0x38]
lea r8, [r14 + r14]
mov rdx, r13
call fcn.14008a080
xor eax, eax
mov word [rsi + r12*2], ax
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
mov rax, rdx
sub rax, rcx
cmp rax, 5
jb 0x14003d2c3
lea rsi, [rcx + 5]
mov qword [rsp + 0x60], rsi
lea rdi, [rsp + 0x50]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x50]
lea rcx, [rdi + rcx*2]
mov r14d, 0xa
mov r8d, r14d
lea rdx, str..html
call fcn.14008a080
xor r12d, r12d
mov word [rdi + rsi*2], r12w
lea rax, [rsp + 0x50]
jmp 0x14003d2f0
mov qword [rsp + 0x20], 5
lea r9, str..html
movzx r8d, byte [rsp + 0x30]
mov edx, 5
lea rcx, [rsp + 0x50]
call fcn.140005170
xor r12d, r12d
lea r14d, [r12 + 0xa]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x38], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14003d359
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d34b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d52f
call fcn.140087c4c
movups xmm0, xmmword [rbp - 0x50]
movups xmm1, xmmword [rsp + 0x38]
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm1
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14003d3a3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d39e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d535
call fcn.140087c4c
lea rsi, [0x1400f5060]
mov qword [rbp - 0x50], rsi
mov rcx, rsi
call fcn.1400857fc
test eax, eax
jne 0x14003d53b
mov edx, r14d
mov rcx, qword [r15]
call fcn.14004a2f0
mov rdi, qword [r15]
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], reloc.OLEAUT32.dll_SafeArrayDestroy
mov r8d, 7
lea rdx, str.CHADURL
lea rcx, [rbp - 0x70]
call fcn.1400294c0
lea rdx, [rbp - 0x70]
mov rcx, rdi
call fcn.140045ca0
mov rcx, qword [r15]
mov dword [rsp + 0x34], r12d
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x38]
mov r8d, 4
lea rdx, [rsp + 0x34]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x34], 1
jne 0x14003d44d
mov rdi, qword [r15]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x70]
call fcn.140008040
mov rdx, rax
mov rcx, rdi
call fcn.140045d70
nop
mov rcx, rsi
call fcn.140085804
nop
lea rcx, [rbp + 0x10]
call fcn.140028d70
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14003d4a1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d49b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d543
call fcn.140087c4c
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14003d4de
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d4d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d4fd
call fcn.140087c4c
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r12w
mov rcx, rbx
call fcn.140085804
jmp 0x14003cc9a
call fcn.14008e46c
nop
call fcn.14008e46c
nop
mov ecx, eax
call fcn.140085910
nop
call fcn.14008e46c
nop
call fcn.14008e46c
int3
call fcn.14008e46c
nop
call fcn.14008e46c
nop
call fcn.140029080
nop
call fcn.14008e46c
nop
call fcn.14008e46c
int3
mov ecx, eax
call fcn.140085910
nop
call fcn.14008e46c
int3