Function at 0x14002ecc0
Capabilities:
Check if file exists
Get common file path
Get file attributes
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20a0]
mov eax, 0x21a0
call fcn.140074f80
sub rsp, rax
mov rax, qword [0x1400da080]
xor rax, rsp
mov qword [rbp + 0x2090], rax
mov rcx, qword [0x1400ddf90]
test rcx, rcx
jne 0x14002ed1e
call fcn.14002e890
test al, al
je 0x14002f6ee
mov rcx, qword [0x1400ddf90]
xor dil, dil
xor esi, esi
mov qword [rsp + 0x58], rsi
mov rax, qword [rcx]
mov qword [rsp + 0x58], rsi
lea rdx, [rsp + 0x58]
call qword [rax + 0x68]
test eax, eax
js 0x14002f6d9
mov qword [rsp + 0x50], rsi
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14002f72f
mov rax, qword [rcx]
mov qword [rsp + 0x50], rsi
lea r8, [rsp + 0x50]
lea rdx, [0x1400c6378]
call qword [rax]
test eax, eax
js 0x14002f6c8
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rsi
lea r8, [rsp + 0x68]
lea rdx, [0x1400c6444]
lea ecx, [rsi + 0x65]
call fcn.140040c40
mov rax, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x68]
sub rax, rbx
mov qword [rsp + 0x60], rax
je 0x14002f691
xor edx, edx
mov r8d, 0x2000
lea rcx, [rbp + 0x90]
call fcn.140076d60
lea rdx, [rbp + 0x90]
mov ecx, 0x1000
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x14002f691
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], 7
mov word [rbp - 0x20], si
lea r8d, [rsi + 0x11]
lea rdx, str.FLiNGTrainer.tmp
lea rcx, [rbp - 0x20]
call fcn.140005030
nop
lea rax, [rbp + 0x90]
mov r9, 0xffffffffffffffff
inc r9
cmp word [rax + r9*2], 0
jne 0x14002ee10
lea r8, [rbp + 0x90]
lea rcx, [rbp - 0x20]
call fcn.14002f820
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x14002ee95
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ee90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f73a
call fcn.1400742a0
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], 7
mov word [rbp - 0x20], si
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], si
mov r8d, 1
lea rdx, [0x1400c63d8]
lea rcx, [rbp - 0x60]
call fcn.140005030
nop
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], si
mov r8d, 2
lea rdx, [0x1400c6b2c]
lea rcx, [rbp - 0x40]
call fcn.140005030
nop
mov rbx, rsi
cmp qword [rbp - 0x28], 8
setae r12b
mov rdi, qword [rbp - 0x30]
mov r13, qword [rbp - 0x40]
mov r15, qword [rbp - 0x50]
nop dword [rax]
nop word [rax + rax]
lea r11, [rbp - 0x40]
test r12b, r12b
cmovne r11, r13
lea rsi, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rsi, qword [rbp - 0x80]
mov rax, qword [rbp - 0x70]
cmp rdi, rax
ja 0x14002f01c
sub rax, rdi
cmp rbx, rax
ja 0x14002f01c
test rdi, rdi
je 0x14002efe8
lea r14, [rax + 1]
lea r14, [rsi + r14*2]
lea rbx, [rsi + rbx*2]
movzx r10d, word [r11]
nop dword [rax + rax]
mov rax, r14
sub rax, rbx
sar rax, 1
mov ecx, 0
je 0x14002ef9c
cmp word [rbx], r10w
je 0x14002ef99
cmp rax, 1
je 0x14002ef9c
dec rax
add rbx, 2
cmp word [rbx], r10w
jne 0x14002ef86
mov rcx, rbx
mov rbx, rcx
test rcx, rcx
je 0x14002f01c
mov r8, rdi
mov rax, r11
movzx ecx, word [rcx]
movzx edx, r10w
cmp cx, r10w
jb 0x14002efdc
mov r9, rbx
sub r9, r11
cmp cx, dx
ja 0x14002efdc
cmp r8, 1
je 0x14002efe2
dec r8
add rax, 2
movzx ecx, word [rax + r9]
movzx edx, word [rax]
cmp cx, dx
jae 0x14002efc0
add rbx, 2
jmp 0x14002ef70
sub rbx, rsi
sar rbx, 1
cmp rbx, 0xffffffffffffffff
je 0x14002f01c
lea r9, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae r9, qword [rbp - 0x60]
mov qword [rsp + 0x20], r15
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.1400454a0
mov r15, qword [rbp - 0x50]
add rbx, r15
jmp 0x14002ef20
test r12b, r12b
je 0x14002f05b
mov rdx, qword [rbp - 0x28]
lea rdx, [rdx*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x14002f052
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f740
mov rcx, r13
call fcn.1400742a0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14002f09b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f096
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f764
call fcn.1400742a0
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
xor r14d, r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r14 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x14002f598
mov r15, qword [rbp - 0x70]
lea rbx, [rbp - 0x80]
mov rsi, qword [rbp - 0x68]
cmp rsi, 8
cmovae rbx, qword [rbp - 0x80]
movabs rdx, 0x7ffffffffffffffe
cmp r15, 8
jae 0x14002f11c
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x40], xmm0
mov edi, 7
mov qword [rsp + 0x48], rdi
mov r13, qword [rbp - 0x40]
jmp 0x14002f164
mov rdi, r15
or rdi, 7
cmp rdi, rdx
cmova rdi, rdx
mov qword [rsp + 0x48], rdi
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x40]
call fcn.14001d7c0
mov r13, rax
mov qword [rbp - 0x40], rax
lea r8, [r15*2 + 2]
mov rdx, rbx
mov rcx, rax
call fcn.1400766b0
mov rsi, qword [rbp - 0x68]
movabs rdx, 0x7ffffffffffffffe
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x30], r15
mov r12d, r14d
cmp rdi, 8
setae al
mov byte [rsp + 0x40], al
nop word [rax + rax]
lea r14, [rbp - 0x40]
test al, al
cmovne r14, r13
cmp r15, rsi
ja 0x14002f1bf
lea rdi, [rbp - 0x80]
cmp rsi, 8
cmovae rdi, qword [rbp - 0x80]
mov qword [rbp - 0x70], r15
lea rbx, [r15 + r15]
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call fcn.1400766b0
xor r14d, r14d
mov word [rdi + rbx], r14w
jmp 0x14002f26c
cmp r15, rdx
ja 0x14002f76a
mov rbx, r15
or rbx, 7
cmp rbx, rdx
jbe 0x14002f1d9
mov rbx, rdx
jmp 0x14002f1fa
mov rcx, rsi
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp rsi, rax
jbe 0x14002f1ef
mov rbx, rdx
jmp 0x14002f1fa
lea rax, [rcx + rsi]
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x80]
call fcn.14001d7c0
mov rdi, rax
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], rbx
lea rbx, [r15 + r15]
mov r8, rbx
mov rdx, r14
mov rcx, rax
call fcn.1400766b0
xor r14d, r14d
mov word [rdi + rbx], r14w
cmp rsi, 8
jb 0x14002f268
lea rdx, [rsi*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f263
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f746
call fcn.1400742a0
mov qword [rbp - 0x80], rdi
lea r9, [rbp + 0x8a]
mov r8d, r12d
test r12d, r12d
jns 0x14002f2c0
neg r8d
nop
sub r9, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r9], r8w
mov r8d, edx
test edx, edx
jne 0x14002f280
add r9, 0xfffffffffffffffe
mov eax, 0x2d
mov word [r9], ax
jmp 0x14002f2f0
sub r9, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r9], r8w
mov r8d, edx
test edx, edx
jne 0x14002f2c0
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r14w
lea rax, [rbp + 0x8a]
cmp r9, rax
je 0x14002f32b
lea r8, [rbp + 0x8a]
sub r8, r9
sar r8, 1
mov rdx, r9
lea rcx, [rbp + 0x20]
call fcn.140005030
nop
mov r9d, 1
lea r8, [0x1400c6b44]
lea rcx, [rbp + 0x20]
call fcn.14002f820
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov r8d, 4
lea rdx, str..tmp
lea rcx, [rbp - 0x60]
call fcn.14002b450
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov qword [rbp], r14
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], 7
mov word [rbp], r14w
mov r8d, 4
lea rdx, str..tmp
lea rcx, [rbp]
call fcn.140005030
nop
lea r8, [rbp + 0x40]
lea rdx, [rbp]
lea rcx, [rbp - 0x80]
call fcn.1400412e0
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x14002f420
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f41a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f74c
call fcn.1400742a0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x14002f461
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f45b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f752
call fcn.1400742a0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14002f4a1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f49c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f758
call fcn.1400742a0
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r14w
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x14002f4f2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f4ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f75e
call fcn.1400742a0
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x14002f551
inc r12d
cmp r12d, 0x32
jge 0x14002f551
mov rsi, qword [rbp - 0x68]
movzx eax, byte [rsp + 0x40]
movabs rdx, 0x7ffffffffffffffe
jmp 0x14002f180
cmp byte [rsp + 0x40], 0
je 0x14002f592
mov rdx, qword [rsp + 0x48]
lea rdx, [rdx*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x14002f58a
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f764
mov rcx, r13
call fcn.1400742a0
cmp rbx, 0xffffffffffffffff
je 0x14002f5c3
mov dword [rsp + 0x48], r14d
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x48]
mov r8d, dword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14002f649
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
jb 0x14002f630
mov rcx, qword [rbp - 0x80]
test rcx, rcx
jne 0x14002f630
mov rbx, r14
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x48], r14d
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14002f770
mov rax, qword [rcx]
lea r9, [rsp + 0x48]
xor r8d, r8d
mov rdx, rbx
call qword [rax + 0x190]
test eax, eax
setns dil
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x14002f64c
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14002f724
jmp 0x14002f5f8
xor dil, dil
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14002f68c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f687
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f77b
call fcn.1400742a0
mov rbx, qword [rsp + 0x68]
test rbx, rbx
je 0x14002f6c8
mov rdx, qword [rsp + 0x78]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x14002f6bf
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f71e
mov rcx, rbx
call fcn.1400742a0
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14002f6d9
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14002f6ea
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
movzx eax, dil
mov rcx, qword [rbp + 0x2090]
xor rcx, rsp
call fcn.140074280
lea r11, [rsp + 0x21a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14007abbc
nop
mov ecx, 0x8007000e
call fcn.14002e260
nop
mov ecx, 0x80004003
call fcn.140071630
nop
call fcn.14007abbc
nop
call fcn.14007abbc
nop
call fcn.14007abbc
nop
call fcn.14007abbc
nop
call fcn.14007abbc
nop
call fcn.14007abbc
nop
call fcn.14007abbc
nop
call fcn.14007abbc
nop
call fcn.140001f20
nop
mov ecx, 0x80004003
call fcn.140071630
nop
call fcn.14007abbc
int3