Function at 0x14001a2c0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1400a7088]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov rsi, rcx
xor r12d, r12d
mov dword [rsp + 0x30], r12d
mov edi, r12d
nop dword [rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [rsi]
add rbx, 0x18
mov qword [rsp + 0x48], rbx
mov rcx, rbx
call fcn.1400355dc
test eax, eax
je 0x14001a33b
mov ecx, eax
call fcn.140035098
nop
mov rax, qword [rsi]
mov rdx, qword [rax + 0x510]
mov rcx, qword [rax + 0x518]
sub rcx, rdx
sar rcx, 5
cmp rcx, 2
jae 0x14001a37c
mov rcx, rbx
call fcn.140035600
test eax, eax
je 0x14001a36d
mov ecx, eax
call fcn.140035098
nop
inc edi
cmp edi, 0x12c
jl 0x14001a310
jmp 0x14001aa34
add rdx, 0x20
lea rcx, [rsp + 0x78]
call fcn.14001b320
nop
movdqa xmm0, xmmword [0x140093bc0]
movdqu xmmword [rbp - 0x38], xmm0
mov word [rbp - 0x48], r12w
mov r8d, 5
lea rdx, str.flxgq
lea rcx, [rbp - 0x48]
call fcn.1400071d0
nop
movdqa xmm0, xmmword [0x140093bc0]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], r12w
mov r8d, 5
lea rdi, [0x140091900]
mov rdx, rdi
lea rcx, [rbp - 8]
call fcn.1400071d0
nop
movdqa xmm0, xmmword [0x140093bc0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r12w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x28]
call fcn.1400071d0
nop
mov rax, qword [rsi]
mov rcx, qword [rax + 0x610]
lea r8, [rcx + 8]
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x28]
lea rdx, [rbp + 0x18]
mov rcx, qword [rcx]
call fcn.140016bc0
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x14001a471
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a46c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001aa72
call fcn.140036a24
movdqa xmm0, xmmword [0x140093bc0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r12w
mov rdx, qword [rbp + 0x10]
cmp rdx, 8
jb 0x14001a4c3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a4be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001aa78
call fcn.140036a24
movdqa xmm0, xmmword [0x140093bc0]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], r12w
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae r8, qword [rsp + 0x78]
mov r15, qword [rbp + 0x30]
mov r14, qword [rbp + 0x18]
cmp qword [rbp - 0x78], 1
jne 0x14001a6cf
mov edx, 1
lea rcx, [0x140091b84]
sub r8, rcx
nop word [rax + rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x14001a6cf
add rcx, 2
sub rdx, 1
jne 0x14001a510
lea rdx, [rbp + 0x18]
cmp r15, 8
cmovae rdx, r14
mov r9, qword [rbp + 0x28]
cmp r9, 5
jne 0x14001a55c
mov rcx, r9
sub rdx, rdi
movzx eax, word [rdi]
cmp word [rdi + rdx], ax
jne 0x14001a55c
add rdi, 2
sub rcx, 1
jne 0x14001a544
jmp 0x14001a86d
lea r8, [rbp + 0x18]
cmp r15, 8
cmovae r8, r14
lea r10, str.false
cmp r9, 5
jne 0x14001a599
mov rdx, r9
mov rcx, r10
sub r8, r10
nop
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x14001a599
add rcx, 2
sub rdx, 1
jne 0x14001a580
jmp 0x14001a86d
movdqa xmm0, xmmword [0x140093bc0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r12w
mov r8d, 5
mov rdx, r10
lea rcx, [rsp + 0x58]
call fcn.1400071d0
nop
movdqa xmm0, xmmword [0x140093bc0]
movdqu xmmword [rbp - 0x58], xmm0
mov word [rbp - 0x68], r12w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x68]
call fcn.1400071d0
mov rax, qword [rsi]
mov rcx, qword [rax + 0x610]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x14001a600
mov r9, qword [r9]
lea r8, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae r8, qword [rsp + 0x58]
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae rdx, qword [rbp - 0x68]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x14001a62d
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x14001a673
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a66e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001aa7e
call fcn.140036a24
movdqa xmm0, xmmword [0x140093bc0]
movdqu xmmword [rbp - 0x58], xmm0
mov word [rbp - 0x68], r12w
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14001a86d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a868
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001aa6c
jmp 0x14001a868
movdqa xmm0, xmmword [0x140093bc0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r12w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x58]
call fcn.1400071d0
mov rax, qword [rsi]
mov rcx, qword [rax + 0x610]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x14001a711
mov r9, qword [r9]
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae r8, qword [rsp + 0x78]
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rdx, qword [rsp + 0x58]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x14001a740
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14001a789
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a783
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001aa84
call fcn.140036a24
nop
movdqa xmm0, xmmword [0x140093bc0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r12w
mov dword [rsp + 0x30], 3
mov rdx, qword [rbp - 0x78]
add rdx, 0x1c
lea rcx, [rsp + 0x58]
call fcn.140009c40
mov r8d, 0x1c
lea rdx, str.https:__flingtrainer.com_cn_
lea rcx, [rsp + 0x58]
call fcn.140007740
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rdx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x78]
lea rcx, [rsp + 0x58]
call fcn.140007740
mov r8d, 5
lea rdx, [0x140091b88]
lea rcx, [rsp + 0x58]
call fcn.140007740
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
lea rcx, [rbp - 0x48]
call fcn.140006f00
movups xmmword [rbp - 0x48], xmm6
movups xmmword [rbp - 0x38], xmm7
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14001a86d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a868
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001aa8a
call fcn.140036a24
lea rdi, [0x1400ac900]
mov qword [rsp + 0x50], rdi
mov rcx, rdi
call fcn.1400355dc
test eax, eax
je 0x14001a88d
mov ecx, eax
call fcn.140035098
nop
mov rcx, qword [rsi]
mov dword [rsp + 0x38], 0xa
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x30]
mov r8d, 4
lea rdx, [rsp + 0x38]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], reloc.OLEAUT32.dll_SafeArrayDestroy
mov byte [rsp + 0x58], 0
mov r8d, 7
lea rdx, str.CHADURL
lea rcx, [rsp + 0x58]
call fcn.140007380
lea rdx, [rsp + 0x58]
mov rcx, qword [rsi]
call fcn.140014b40
mov rcx, qword [rsi]
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x38]
mov r8d, 4
lea rdx, [rsp + 0x30]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x30], 1
jne 0x14001a940
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x58]
call fcn.14001b320
mov rdx, rax
mov rcx, qword [rsi]
call fcn.140014c00
nop
mov rcx, rdi
call fcn.140035600
test eax, eax
je 0x14001a954
mov ecx, eax
call fcn.140035098
nop
cmp r15, 8
jb 0x14001a990
lea rdx, [r15*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14001a987
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001aa90
mov rcx, r14
call fcn.140036a24
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 8
jb 0x14001a9d1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a9cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001aa96
call fcn.140036a24
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x14001aa0e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001aa09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001aa66
call fcn.140036a24
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r12w
mov rcx, rbx
call fcn.140035600
test eax, eax
je 0x14001aa34
mov ecx, eax
call fcn.140035098
nop
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.140036a00
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140057d94
nop
call fcn.140057d94
nop
call fcn.140057d94
nop
call fcn.140057d94
nop
call fcn.140057d94
nop
call fcn.140057d94
int3
call fcn.140057d94
nop
call fcn.140057d94
nop
call fcn.140057d94
int3