Function at 0x1400175e0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov rax, qword [0x14007e040]
xor rax, rsp
mov qword [rbp + 0x50], rax
mov rsi, rcx
xor r14d, r14d
mov edi, r14d
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [rsi]
add rbx, 0x508
mov qword [rsp + 0x48], rbx
mov rcx, rbx
call fcn.140033608
test eax, eax
jne 0x140017da3
mov rax, qword [rsi]
mov rdx, qword [rax + 0x5d8]
mov rcx, qword [rax + 0x5e0]
sub rcx, rdx
sar rcx, 5
cmp rcx, 2
jae 0x14001768f
mov rcx, rbx
call fcn.140033610
inc edi
cmp edi, 0x12c
jl 0x140017611
mov rcx, qword [rbp + 0x50]
xor rcx, rsp
call fcn.140034020
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
add rdx, 0x20
lea rcx, [rbp - 0x70]
call fcn.140018420
nop
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r14w
mov r8d, 5
lea rdx, str.flxgq
lea rcx, [rbp - 0x30]
call fcn.140005c20
nop
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r14w
mov r8d, 5
lea rdi, [0x140070530]
mov rdx, rdi
lea rcx, [rbp - 0x50]
call fcn.140005c20
nop
mov qword [rbp - 0x10], r14
mov qword [rbp], r14
mov qword [rbp + 8], 7
mov word [rbp - 0x10], r14w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x10]
call fcn.140005c20
nop
mov rax, qword [rsi]
mov rcx, qword [rax + 0x5f8]
lea r8, [rcx + 8]
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x10]
lea rdx, [rbp + 0x10]
mov rcx, qword [rcx]
call fcn.1400142c0
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x14001778c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017787
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017dab
call fcn.140034040
mov qword [rbp], r14
mov qword [rbp + 8], 7
mov word [rbp - 0x10], r14w
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x1400177dd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400177d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017db1
call fcn.140034040
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r14w
lea r8, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae r8, qword [rbp - 0x70]
mov rdx, qword [rbp - 0x60]
cmp rdx, 1
jne 0x1400179ff
lea rcx, [0x1400707b4]
test rdx, rdx
je 0x140017838
sub r8, rcx
nop dword [rax]
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x1400179ff
add rcx, 2
sub rdx, 1
jne 0x140017820
lea r8, [rbp + 0x10]
mov r9, qword [rbp + 0x10]
mov r10, qword [rbp + 0x28]
cmp r10, 8
cmovae r8, r9
mov rdx, qword [rbp + 0x20]
cmp rdx, 5
jne 0x14001787e
mov rcx, rdx
test rdx, rdx
je 0x140017bcb
sub r8, rdi
movzx eax, word [rdi]
cmp word [rdi + r8], ax
jne 0x14001787e
add rdi, 2
sub rcx, 1
jne 0x140017865
jmp 0x140017bcb
lea r8, [rbp + 0x10]
cmp r10, 8
cmovae r8, r9
lea r9, str.false
cmp rdx, 5
jne 0x1400178bf
mov rcx, r9
test rdx, rdx
je 0x140017bcb
sub r8, r9
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x1400178bf
add rcx, 2
sub rdx, 1
jne 0x1400178a6
jmp 0x140017bcb
mov qword [rsp + 0x70], r14
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r14w
mov r8d, 5
mov rdx, r9
lea rcx, [rsp + 0x70]
call fcn.140005c20
nop
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 7
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x50]
call fcn.140005c20
mov rax, qword [rsi]
mov rcx, qword [rax + 0x5f8]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x14001792b
mov r9, qword [r9]
lea r8, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r8, qword [rsp + 0x70]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x14001795a
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x1400179a2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001799d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017db7
call fcn.140034040
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r14w
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x140017bcb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017bc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017d9d
jmp 0x140017bc6
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 7
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x50]
call fcn.140005c20
mov rax, qword [rsi]
mov rcx, qword [rax + 0x5f8]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x140017a40
mov r9, qword [r9]
lea r8, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae r8, qword [rbp - 0x70]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x140017a6d
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140017ab5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017ab0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017dbd
call fcn.140034040
movabs rax, 0x7ffffffffffffffe
mov rcx, qword [rbp - 0x60]
sub rax, rcx
cmp rax, 0x1c
jb 0x140017dc3
lea rax, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rax, qword [rbp - 0x70]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x1c
lea r9, str.https:__flingtrainer.com_cn_
lea rcx, [rbp + 0x30]
call fcn.1400070f0
nop
mov r8d, 5
lea rdx, [0x1400707b8]
lea rcx, [rbp + 0x30]
call fcn.140005ef0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x140017b83
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017b74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017dc9
call fcn.140034040
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm1
mov rdx, qword [rbp + 0x48]
cmp rdx, 8
jb 0x140017bcb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017bc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017dcf
call fcn.140034040
lea rdi, [0x1400819f0]
mov qword [rsp + 0x50], rdi
mov rcx, rdi
call fcn.140033608
test eax, eax
jne 0x140017dd5
mov rcx, qword [rsi]
mov dword [rsp + 0x70], 0xa
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x40]
lea r8d, [rax + 4]
lea rdx, [rsp + 0x70]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], reloc.OLEAUT32.dll_SafeArrayDestroy
mov r8d, 7
lea rdx, str.CHADURL
lea rcx, [rbp - 0x50]
call fcn.140005cb0
lea rdx, [rbp - 0x50]
mov rcx, qword [rsi]
call fcn.140012250
mov rcx, qword [rsi]
mov dword [rsp + 0x40], r14d
mov dword [rsp + 0x70], r14d
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x70]
mov r8d, 4
lea rdx, [rsp + 0x40]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x40], 1
jne 0x140017c92
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x30]
call fcn.140018420
mov rdx, rax
mov rcx, qword [rsi]
call fcn.140012310
nop
mov rcx, rdi
call fcn.140033610
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x140017cdb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017cd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017ddd
call fcn.140034040
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], r14w
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x140017d2c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017d27
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017de3
call fcn.140034040
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r14w
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x140017d79
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017d74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017d97
call fcn.140034040
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r14w
mov rcx, rbx
call fcn.140033610
jmp 0x14001766b
call fcn.14003aa14
nop
call fcn.14003aa14
nop
mov ecx, eax
call fcn.140033190
nop
call fcn.14003aa14
nop
call fcn.14003aa14
nop
call fcn.14003aa14
nop
call fcn.14003aa14
int3
call fcn.1400012a0
nop
call fcn.14003aa14
nop
call fcn.14003aa14
int3
mov ecx, eax
call fcn.140033190
nop
call fcn.14003aa14
nop
call fcn.14003aa14
int3