Function at 0x140009dd0
Capabilities:
Read file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14006f058]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov r14, rcx
xor r15d, r15d
mov edi, r15d
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [r14]
add rbx, 0x440
mov qword [rsp + 0x40], rbx
mov rcx, rbx
call fcn.14002daac
test eax, eax
jne 0x14000a711
mov eax, dword [rbx + 0x4c]
cmp eax, 0x7fffffff
je 0x14000a701
mov rax, qword [r14]
mov rdx, qword [rax + 0x510]
mov rcx, qword [rax + 0x518]
sub rcx, rdx
sar rcx, 5
cmp rcx, 2
jae 0x140009eb2
mov rcx, rbx
call fcn.14002dab4
inc edi
cmp edi, 0x12c
jl 0x140009e13
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.14002e510
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
add rdx, 0x20
lea rcx, [rsp + 0x70]
call fcn.140009610
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], r15
mov r8d, 5
lea rdx, str.flxgq
lea rcx, [rbp - 0x50]
call fcn.140002c90
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
mov r8d, 5
lea rdi, [0x140056cb8]
mov rdx, rdi
lea rcx, [rbp - 0x10]
call fcn.140002c90
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x30]
call fcn.140002c90
nop
mov rax, qword [r14]
mov rcx, qword [rax + 0x530]
lea r8, [rcx + 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x30]
lea rdx, [rbp + 0x10]
mov rcx, qword [rcx]
call fcn.140010be0
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x140009f9e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009f99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a71c
call fcn.14002e3f8
movdqa xmm0, xmmword [0x140053860]
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x30], r15w
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x140009ff0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009feb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a722
call fcn.14002e3f8
movdqa xmm0, xmmword [0x140053860]
movdqu xmmword [rbp], xmm0
mov word [rbp - 0x10], r15w
lea r8, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r8, qword [rsp + 0x70]
mov esi, 0xa
movabs r13, 0x7ffffffffffffffe
mov r9, qword [rbp + 0x10]
mov rdx, qword [rbp - 0x80]
cmp rdx, 1
jne 0x14000a210
lea rcx, [0x140056f64]
test rdx, rdx
je 0x14000a05a
sub r8, rcx
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x14000a210
add rcx, 2
sub rdx, 1
jne 0x14000a042
lea r8, [rbp + 0x10]
mov r10, qword [rbp + 0x28]
cmp r10, 8
cmovae r8, r9
mov rdx, qword [rbp + 0x20]
cmp rdx, 5
jne 0x14000a09c
mov rcx, rdx
test rdx, rdx
je 0x14000a4b1
sub r8, rdi
movzx eax, word [rdi]
cmp word [rdi + r8], ax
jne 0x14000a09c
add rdi, 2
sub rcx, 1
jne 0x14000a083
jmp 0x14000a4b1
lea r8, [rbp + 0x10]
cmp r10, 8
cmovae r8, r9
lea r9, str.false
cmp rdx, 5
jne 0x14000a0dd
mov rcx, r9
test rdx, rdx
je 0x14000a4b1
sub r8, r9
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x14000a0dd
add rcx, 2
sub rdx, 1
jne 0x14000a0c4
jmp 0x14000a4b1
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
mov r8d, 5
mov rdx, r9
lea rcx, [rbp - 0x70]
call fcn.140002c90
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x50]
call fcn.140002c90
mov rax, qword [r14]
mov rcx, qword [rax + 0x530]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x14000a13e
mov r9, qword [r9]
lea r8, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae r8, qword [rbp - 0x70]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x14000a16b
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14000a1b3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a1ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a728
call fcn.14002e3f8
movdqa xmm0, xmmword [0x140053860]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], r15w
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x14000a4b1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a206
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a72e
call fcn.14002e3f8
jmp 0x14000a4b1
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x70]
call fcn.140002c90
mov rax, qword [r14]
mov rcx, qword [rax + 0x530]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x14000a24c
mov r9, qword [r9]
lea r8, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r8, qword [rsp + 0x70]
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rdx, qword [rbp - 0x70]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x14000a278
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x14000a2be
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a2b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a734
call fcn.14002e3f8
mov r15, qword [rbp - 0x80]
mov rax, r13
sub rax, r15
cmp rax, 0x1c
jb 0x14000a73a
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rdx, qword [rsp + 0x70]
mov qword [rsp + 0x30], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea r12, [r15 + 0x1c]
mov esi, 7
lea rdi, [rsp + 0x50]
cmp r12, rsi
jbe 0x14000a3aa
mov rsi, r12
or rsi, 7
cmp rsi, r13
jbe 0x14000a32e
mov rsi, r13
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x14000a35e
cmp rsi, 0xa
mov eax, 0xa
cmovb rsi, rax
lea rcx, [rsi + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14000a746
add rcx, rcx
cmp rcx, 0x1000
jb 0x14000a38f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000a746
mov rcx, rax
call fcn.14002e3bc
test rax, rax
je 0x14000a74c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rdx, qword [rsp + 0x30]
jmp 0x14000a3a5
test rcx, rcx
je 0x14000a3a3
call fcn.14002e3bc
mov rdi, rax
mov rdx, qword [rsp + 0x30]
jmp 0x14000a3a5
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], rsi
movups xmm0, xmmword [str.https:__flingtrainer.com_cn_]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x140056f88]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [0x140056f98]
movups xmmword [rdi + 0x20], xmm0
movsd xmm0, qword [0x140056fa8]
movsd qword [rdi + 0x30], xmm0
lea rcx, [rdi + 0x38]
lea r8, [r15 + r15]
call fcn.140030670
xor r15d, r15d
mov word [rdi + r12*2], r15w
lea r8d, [r15 + 5]
lea rdx, [0x140056f68]
lea rcx, [rsp + 0x50]
call fcn.1400025c0
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x14000a462
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a45d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a740
call fcn.14002e3f8
movups xmmword [rbp - 0x50], xmm6
movups xmmword [rbp - 0x40], xmm7
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14000a4ac
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a4a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a74c
call fcn.14002e3f8
mov esi, 0xa
lea rax, [0x140070c40]
mov qword [rsp + 0x48], rax
mov rcx, rax
call fcn.14002daac
test eax, eax
jne 0x14000a752
cmp dword [0x140070c8c], 0x7fffffff
je 0x14000a75d
mov edx, esi
mov rcx, qword [r14]
call fcn.140011050
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], 7
mov qword [rsp + 0x68], reloc.OLEAUT32.dll_SafeArrayDestroy
mov rax, qword [str.CHADURL]
mov dword [rsp + 0x50], eax
movzx eax, word [0x140056fbc]
mov word [rsp + 0x54], ax
movzx eax, byte [0x140056fbe]
mov byte [rsp + 0x56], al
mov byte [rsp + 0x57], 0
lea rdx, [rsp + 0x50]
mov rcx, qword [r14]
call fcn.1400109f0
mov rcx, qword [r14]
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
mov r8d, 4
lea rdx, [rsp + 0x38]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov r12, qword [rbp - 0x38]
mov rsi, qword [rbp - 0x50]
cmp dword [rsp + 0x38], 1
jne 0x14000a617
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
lea r15, [rbp - 0x50]
cmp r12, 8
cmovae r15, rsi
mov rdi, qword [rbp - 0x40]
cmp rdi, r13
ja 0x14000a772
mov qword [rsp + 0x68], 7
cmp rdi, 8
jae 0x14000a5bb
mov qword [rsp + 0x60], rdi
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x50], xmm0
jmp 0x14000a607
mov rax, rdi
or rax, 7
cmp rax, r13
ja 0x14000a5d7
mov r13, rax
cmp rax, 0xa
mov eax, 0xa
cmovb r13, rax
lea rdx, [r13 + 1]
lea rcx, [rsp + 0x50]
call fcn.1400024c0
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], r13
lea r8, [rdi*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.140030670
lea rdx, [rsp + 0x50]
mov rcx, qword [r14]
call fcn.140010ac0
xor r15d, r15d
lea rcx, [0x140070c40]
call fcn.14002dab4
nop
mov rax, qword [rbp + 0x28]
cmp rax, 8
jb 0x14000a665
lea rdx, [rax*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a65f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a778
call fcn.14002e3f8
nop
cmp r12, 8
jb 0x14000a6a1
lea rdx, [r12*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000a698
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a77e
mov rcx, rsi
call fcn.14002e3f8
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14000a6e2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a6dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a784
call fcn.14002e3f8
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
mov rcx, rbx
call fcn.14002dab4
jmp 0x140009e7b
dec eax
mov dword [rbx + 0x4c], eax
mov ecx, 6
call fcn.14002dcb0
int3
mov ecx, 5
call fcn.14002dcb0
nop
call fcn.140034d4c
nop
call fcn.140034d4c
nop
call fcn.140034d4c
nop
call fcn.140034d4c
int3
call fcn.140034d4c
int3
call fcn.140002420
nop
call fcn.140034d4c
nop
call fcn.140002350
int3
call fcn.140034d4c
int3
mov ecx, 5
call fcn.14002dcb0
int3
mov dword [0x140070c8c], 0x7ffffffe
mov ecx, 6
call fcn.14002dcb0
nop
call fcn.140002420
nop
call fcn.140034d4c
nop
call fcn.140034d4c
nop
call fcn.140034d4c
int3