Function at 0x140039870
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x1400df080]
xor rax, rsp
mov qword [rbp + 0x30], rax
xor r12d, r12d
mov edi, r12d
mov r15, qword [rcx]
lea rbx, [r15 + 0x4c0]
mov qword [rsp + 0x48], rbx
nop word [rax + rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rbx
call fcn.140074f84
test eax, eax
jne 0x14003a1d2
mov rcx, qword [r15 + 0x590]
mov rax, qword [r15 + 0x598]
sub rax, rcx
sar rax, 5
cmp rax, 2
jae 0x140039935
mov rcx, rbx
call fcn.140074f8c
inc edi
cmp edi, 0x12c
jl 0x1400398c0
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.140076190
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdi, [rcx + 0x20]
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
mov r14, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x140039954
mov rdi, qword [rdi]
movabs r13, 0x7ffffffffffffffe
cmp r14, 8
jae 0x140039979
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x78], 7
jmp 0x140039a04
mov rsi, r14
or rsi, 7
cmp rsi, r13
cmova rsi, r13
lea rcx, [rsi + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14003a1c6
add rcx, rcx
cmp rcx, 0x1000
jb 0x1400399d9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003a1c6
mov rcx, rax
call fcn.1400761e4
mov rcx, rax
test rax, rax
je 0x14003a212
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400399e8
test rcx, rcx
je 0x1400399e5
call fcn.1400761e4
jmp 0x1400399e8
mov rax, r12
mov qword [rsp + 0x70], rax
lea r8, [r14*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.1400785c0
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r12w
mov r8d, 5
lea rdx, str.flxgq
lea rcx, [rbp - 0x30]
call fcn.140005660
nop
mov rdi, qword [r15 + 0x5b0]
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r12w
mov r8d, 5
lea rsi, [0x1400c8cf0]
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.140005660
nop
mov qword [rbp - 0x10], r12
mov qword [rbp], r12
mov qword [rbp + 8], 7
mov word [rbp - 0x10], r12w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x10]
call fcn.140005660
nop
lea r8, [rdi + 8]
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x10]
lea rdx, [rbp + 0x10]
mov rcx, qword [rdi]
call fcn.140032a00
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x140039af4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039aef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a1da
call fcn.1400761b0
mov qword [rbp], r12
mov qword [rbp + 8], 7
mov word [rbp - 0x10], r12w
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x140039b45
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039b40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a1e0
call fcn.1400761b0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r12w
lea r9, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r9, qword [rsp + 0x70]
mov r14d, 0xa
cmp qword [rbp - 0x80], 1
jne 0x140039bb2
lea r8d, [r14 - 9]
lea rax, [0x1400c8ed8]
movzx ecx, word [r9]
mov edx, 0x31
cmp cx, dx
jb 0x140039bb2
sub r9, rax
cmp cx, dx
ja 0x140039bb2
cmp r8, 1
je 0x140039cd3
dec r8
add rax, 2
movzx ecx, word [r9 + rax]
movzx edx, word [rax]
cmp cx, dx
jae 0x140039b92
mov rdi, qword [r15 + 0x5b0]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x50]
call fcn.140005660
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 8
jb 0x140039bf0
mov r9, qword [r9]
lea r8, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r8, qword [rsp + 0x70]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 8
jb 0x140039c1f
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140039c67
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039c62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a1e6
call fcn.1400761b0
mov r14, qword [rbp - 0x80]
mov rax, r13
sub rax, r14
cmp rax, 0x1c
jb 0x14003a1f2
lea r13, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r13, qword [rsp + 0x70]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
lea r12, [r14 + 0x1c]
mov edi, 7
lea rsi, [rsp + 0x50]
cmp r12, rdi
jbe 0x140039ed5
mov rdi, r12
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
jbe 0x140039eb2
mov rdi, rax
jmp 0x140039ebf
lea r8, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
setae dil
mov r9, qword [rbp + 0x10]
cmovae r8, r9
mov r11, qword [rbp + 0x20]
cmp r11, 5
jne 0x140039d29
mov rdx, r11
movzx eax, word [r8]
mov ecx, 0x45
cmp ax, cx
jb 0x140039d29
sub r8, rsi
cmp ax, cx
ja 0x140039d29
cmp rdx, 1
je 0x14003a059
dec rdx
add rsi, 2
movzx eax, word [rsi + r8]
movzx ecx, word [rsi]
cmp ax, cx
jae 0x140039d09
lea r10, [rbp + 0x10]
test dil, dil
cmovne r10, r9
lea rsi, str.false
cmp r11, 5
jne 0x140039d7b
mov r9, r11
mov rax, rsi
movzx ecx, word [r10]
mov edx, 0x66
cmp cx, dx
jb 0x140039d7b
sub r10, rsi
cmp cx, dx
ja 0x140039d7b
cmp r9, 1
je 0x14003a059
dec r9
add rax, 2
movzx ecx, word [rax + r10]
movzx edx, word [rax]
cmp cx, dx
jae 0x140039d5b
mov rdi, qword [r15 + 0x5b0]
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r12w
mov r8d, 5
mov rdx, rsi
lea rcx, [rbp - 0x50]
call fcn.140005660
nop
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x50]
call fcn.140005660
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 8
jb 0x140039de1
mov r9, qword [r9]
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae r8, qword [rbp - 0x50]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 8
jb 0x140039e0e
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140039e56
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039e51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a1ec
call fcn.1400761b0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r12w
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x14003a059
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a054
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a1cc
jmp 0x14003a054
cmp rdi, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rsp + 0x50]
call fcn.14001de20
mov rsi, rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], rdi
movups xmm0, xmmword [str.https:__flingtrainer.com_cn_]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [0x1400c9130]
movups xmmword [rsi + 0x10], xmm1
movups xmm0, xmmword [0x1400c9140]
movups xmmword [rsi + 0x20], xmm0
movsd xmm1, qword [0x1400c9150]
movsd qword [rsi + 0x30], xmm1
lea rcx, [rsi + 0x38]
lea r8, [r14 + r14]
mov rdx, r13
call fcn.1400785c0
xor eax, eax
mov word [rsi + r12*2], ax
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
mov rax, rdx
sub rax, rcx
cmp rax, 5
jb 0x140039f79
lea rsi, [rcx + 5]
mov qword [rsp + 0x60], rsi
lea rdi, [rsp + 0x50]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x50]
lea rcx, [rdi + rcx*2]
mov r14d, 0xa
mov r8d, r14d
lea rdx, str..html
call fcn.1400785c0
xor r12d, r12d
mov word [rdi + rsi*2], r12w
lea rax, [rsp + 0x50]
jmp 0x140039fa6
mov qword [rsp + 0x20], 5
lea r9, str..html
movzx r8d, byte [rsp + 0x34]
mov edx, 5
lea rcx, [rsp + 0x50]
call fcn.14002bb40
xor r12d, r12d
lea r14d, [r12 + 0xa]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x38], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14003a00f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a001
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a1f8
call fcn.1400761b0
movups xmm0, xmmword [rbp - 0x50]
movups xmm1, xmmword [rsp + 0x38]
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm1
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14003a059
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a054
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a1fe
call fcn.1400761b0
lea rdi, [0x1400e36a0]
mov qword [rbp - 0x50], rdi
mov rcx, rdi
call fcn.140074f84
test eax, eax
jne 0x14003a204
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x30]
lea r8d, [rax + 4]
lea rdx, [rsp + 0x38]
mov rcx, qword [r15 + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], reloc.OLEAUT32.dll_SafeArrayDestroy
mov r8d, 7
lea rdx, str.CHADURL
lea rcx, [rbp - 0x70]
call fcn.1400160c0
lea rdx, [rbp - 0x70]
mov rcx, r15
call fcn.1400304e0
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x38]
mov r8d, 4
lea rdx, [rsp + 0x30]
mov rcx, qword [r15 + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x30], 1
jne 0x14003a116
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x70]
call fcn.14001dd80
mov rdx, rax
mov rcx, r15
call fcn.1400305a0
nop
mov rcx, rdi
call fcn.140074f8c
nop
lea rcx, [rbp + 0x10]
call fcn.14001dc70
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14003a16a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a164
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a20c
call fcn.1400761b0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14003a1a7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a1a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a212
call fcn.1400761b0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r12w
mov rcx, rbx
call fcn.140074f8c
jmp 0x140039908
call fcn.140002420
nop
call fcn.14007cacc
nop
mov ecx, eax
call fcn.1400738b4
nop
call fcn.14007cacc
nop
call fcn.14007cacc
int3
call fcn.14007cacc
nop
call fcn.14007cacc
nop
call fcn.140002550
nop
call fcn.14007cacc
nop
call fcn.14007cacc
int3
mov ecx, eax
call fcn.1400738b4
nop
call fcn.14007cacc
nop
call fcn.14007cacc
int3