Function at 0x14003ad20
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x1400f5798]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov r15, rcx
xor r12d, r12d
mov edi, r12d
nop dword [rax + rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [r15]
add rbx, 0x5a0
mov qword [rsp + 0x48], rbx
mov rcx, rbx
call fcn.1400838ac
test eax, eax
jne 0x14003b629
mov rax, qword [r15]
mov rdx, qword [rax + 0x670]
mov rcx, qword [rax + 0x678]
sub rcx, rdx
sar rcx, 5
cmp rcx, 2
jae 0x14003ade7
mov rcx, rbx
call fcn.1400838b4
inc edi
cmp edi, 0x12c
jl 0x14003ad60
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.140085e50
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rsi, [rdx + 0x20]
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
mov r14, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 8
jb 0x14003ae06
mov rsi, qword [rsi]
movabs r13, 0x7ffffffffffffffe
cmp r14, 8
jae 0x14003ae28
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x78], 7
jmp 0x14003ae60
mov rdi, r14
or rdi, 7
cmp rdi, r13
cmova rdi, r13
lea rdx, [rdi + 1]
lea rcx, [rsp + 0x70]
call fcn.140027720
mov qword [rsp + 0x70], rax
lea r8, [r14*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.140087c80
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r12w
mov r8d, 5
lea rdx, str.flxgq
lea rcx, [rbp - 0x30]
call fcn.1400279c0
nop
mov rax, qword [r15]
mov rdi, qword [rax + 0x690]
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r12w
mov r8d, 5
lea rsi, [0x1400b8b30]
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.1400279c0
nop
mov qword [rbp - 0x10], r12
mov qword [rbp], r12
mov qword [rbp + 8], 7
mov word [rbp - 0x10], r12w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x10]
call fcn.1400279c0
nop
lea r8, [rdi + 8]
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x10]
lea rdx, [rbp + 0x10]
mov rcx, qword [rdi]
call fcn.140047880
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x14003af53
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003af4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b631
call fcn.140085850
mov qword [rbp], r12
mov qword [rbp + 8], 7
mov word [rbp - 0x10], r12w
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x14003afa4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003af9f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b637
call fcn.140085850
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r12w
lea r9, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r9, qword [rsp + 0x70]
mov r14d, 0xa
cmp qword [rbp - 0x80], 1
jne 0x14003b016
lea edx, [r14 - 9]
lea rax, [0x1400b8d30]
movzx ecx, word [r9]
mov r8d, 0x31
cmp cx, r8w
jb 0x14003b016
sub r9, rax
cmp cx, r8w
ja 0x14003b016
cmp rdx, 1
je 0x14003b13a
dec rdx
add rax, 2
movzx ecx, word [r9 + rax]
movzx r8d, word [rax]
cmp cx, r8w
jae 0x14003aff4
mov rax, qword [r15]
mov rdi, qword [rax + 0x690]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x50]
call fcn.1400279c0
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 8
jb 0x14003b057
mov r9, qword [r9]
lea r8, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r8, qword [rsp + 0x70]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 8
jb 0x14003b086
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14003b0ce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b0c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b63d
call fcn.140085850
mov r14, qword [rbp - 0x80]
mov rax, r13
sub rax, r14
cmp rax, 0x1c
jb 0x14003b649
lea r13, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r13, qword [rsp + 0x70]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
lea r12, [r14 + 0x1c]
mov edi, 7
lea rsi, [rsp + 0x50]
cmp r12, rdi
jbe 0x14003b33f
mov rdi, r12
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
jbe 0x14003b31c
mov rdi, rax
jmp 0x14003b329
lea r8, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
setae dil
mov r9, qword [rbp + 0x10]
cmovae r8, r9
mov r11, qword [rbp + 0x20]
cmp r11, 5
jne 0x14003b190
mov rdx, r11
movzx eax, word [r8]
mov ecx, 0x45
cmp ax, cx
jb 0x14003b190
sub r8, rsi
cmp ax, cx
ja 0x14003b190
cmp rdx, 1
je 0x14003b4c3
dec rdx
add rsi, 2
movzx eax, word [rsi + r8]
movzx ecx, word [rsi]
cmp ax, cx
jae 0x14003b170
lea r10, [rbp + 0x10]
test dil, dil
cmovne r10, r9
lea rsi, str.false
cmp r11, 5
jne 0x14003b1e2
mov r9, r11
mov rax, rsi
movzx ecx, word [r10]
mov edx, 0x66
cmp cx, dx
jb 0x14003b1e2
sub r10, rsi
cmp cx, dx
ja 0x14003b1e2
cmp r9, 1
je 0x14003b4c3
dec r9
add rax, 2
movzx ecx, word [rax + r10]
movzx edx, word [rax]
cmp cx, dx
jae 0x14003b1c2
mov rax, qword [r15]
mov rdi, qword [rax + 0x690]
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r12w
mov r8d, 5
mov rdx, rsi
lea rcx, [rbp - 0x50]
call fcn.1400279c0
nop
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x50]
call fcn.1400279c0
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 8
jb 0x14003b24b
mov r9, qword [r9]
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae r8, qword [rbp - 0x50]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 8
jb 0x14003b278
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14003b2c0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b2bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b643
call fcn.140085850
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r12w
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x14003b4c3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b4be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b623
jmp 0x14003b4be
cmp rdi, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rsp + 0x50]
call fcn.140027720
mov rsi, rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], rdi
movups xmm0, xmmword [str.https:__flingtrainer.com_cn_]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [0x1400b8f88]
movups xmmword [rsi + 0x10], xmm1
movups xmm0, xmmword [0x1400b8f98]
movups xmmword [rsi + 0x20], xmm0
movsd xmm1, qword [0x1400b8fa8]
movsd qword [rsi + 0x30], xmm1
lea rcx, [rsi + 0x38]
lea r8, [r14 + r14]
mov rdx, r13
call fcn.140087c80
xor eax, eax
mov word [rsi + r12*2], ax
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
mov rax, rdx
sub rax, rcx
cmp rax, 5
jb 0x14003b3e3
lea rsi, [rcx + 5]
mov qword [rsp + 0x60], rsi
lea rdi, [rsp + 0x50]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x50]
lea rcx, [rdi + rcx*2]
mov r14d, 0xa
mov r8d, r14d
lea rdx, str..html
call fcn.140087c80
xor r12d, r12d
mov word [rdi + rsi*2], r12w
lea rax, [rsp + 0x50]
jmp 0x14003b410
mov qword [rsp + 0x20], 5
lea r9, str..html
movzx r8d, byte [rsp + 0x30]
mov edx, 5
lea rcx, [rsp + 0x50]
call fcn.14002c280
xor r12d, r12d
lea r14d, [r12 + 0xa]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x38], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14003b479
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b46b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b64f
call fcn.140085850
movups xmm0, xmmword [rbp - 0x50]
movups xmm1, xmmword [rsp + 0x38]
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm1
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14003b4c3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b4be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b655
call fcn.140085850
lea rsi, [0x1400f8060]
mov qword [rbp - 0x50], rsi
mov rcx, rsi
call fcn.1400838ac
test eax, eax
jne 0x14003b65b
mov edx, r14d
mov rcx, qword [r15]
call fcn.140047ea0
mov rdi, qword [r15]
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], reloc.OLEAUT32.dll_SafeArrayDestroy
mov r8d, 7
lea rdx, str.CHADURL
lea rcx, [rbp - 0x70]
call fcn.140027860
lea rdx, [rbp - 0x70]
mov rcx, rdi
call fcn.140043850
mov rcx, qword [r15]
mov dword [rsp + 0x34], r12d
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x38]
mov r8d, 4
lea rdx, [rsp + 0x34]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x34], 1
jne 0x14003b56d
mov rdi, qword [r15]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x70]
call fcn.140008230
mov rdx, rax
mov rcx, rdi
call fcn.140043920
nop
mov rcx, rsi
call fcn.1400838b4
nop
lea rcx, [rbp + 0x10]
call fcn.140027110
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14003b5c1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b5bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b663
call fcn.140085850
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14003b5fe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b5f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b61d
call fcn.140085850
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r12w
mov rcx, rbx
call fcn.1400838b4
jmp 0x14003adba
call fcn.14008c06c
nop
call fcn.14008c06c
nop
mov ecx, eax
call fcn.1400839c0
nop
call fcn.14008c06c
nop
call fcn.14008c06c
int3
call fcn.14008c06c
nop
call fcn.14008c06c
nop
call fcn.140027420
nop
call fcn.14008c06c
nop
call fcn.14008c06c
int3
mov ecx, eax
call fcn.1400839c0
nop
call fcn.14008c06c
int3