Function at 0x140009e20
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x140086040]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov r14, rcx
xor r13d, r13d
mov edi, r13d
nop dword [rax + rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [r14]
add rbx, 0x410
mov qword [rsp + 0x40], rbx
mov rcx, rbx
call fcn.140039a40
test eax, eax
jne 0x14000a721
mov eax, dword [rbx + 0x4c]
cmp eax, 0x7fffffff
je 0x14000a711
mov rax, qword [r14]
mov rdx, qword [rax + 0x4e0]
mov rcx, qword [rax + 0x4e8]
sub rcx, rdx
sar rcx, 5
cmp rcx, 2
jae 0x140009ef5
mov rcx, rbx
call fcn.140039a48
inc edi
cmp edi, 0x12c
jl 0x140009e60
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.140037a10
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
add rdx, 0x20
lea rcx, [rbp - 0x70]
call fcn.1400094d0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, 5
lea rdx, str.flxgq
lea rcx, [rbp - 0x50]
call fcn.140001390
nop
mov rax, qword [r14]
mov rdi, qword [rax + 0x500]
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
mov r8d, 5
lea rsi, [0x140068b48]
mov rdx, rsi
lea rcx, [rbp + 0x10]
call fcn.140001390
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x10]
call fcn.140001390
nop
lea r8, [rdi + 8]
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x10]
lea rdx, [rbp - 0x30]
mov rcx, qword [rdi]
call fcn.140010b50
nop
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x140009fe0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009fdb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a72c
call fcn.1400378f4
movdqa xmm0, xmmword [0x140065b00]
movdqu xmmword [rbp], xmm0
mov word [rbp - 0x10], r13w
mov rdx, qword [rbp + 0x28]
cmp rdx, 7
jbe 0x14000a032
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a02d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a732
call fcn.1400378f4
movdqa xmm0, xmmword [0x140065b00]
movdqu xmmword [rbp + 0x20], xmm0
mov word [rbp + 0x10], r13w
lea r8, [rbp - 0x70]
cmp qword [rbp - 0x58], 7
cmova r8, qword [rbp - 0x70]
mov edi, 0xa
mov r15, qword [rbp - 0x30]
mov rdx, qword [rbp - 0x60]
cmp rdx, 1
jne 0x14000a253
lea rcx, [0x140068e1c]
test rdx, rdx
je 0x14000a098
sub r8, rcx
nop dword [rax + rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x14000a253
add rcx, 2
sub rdx, 1
jne 0x14000a080
lea r8, [rbp - 0x30]
mov r12, qword [rbp - 0x18]
cmp r12, 7
cmova r8, r15
mov rdx, qword [rbp - 0x20]
cmp rdx, 5
jne 0x14000a0da
mov rcx, rdx
test rdx, rdx
je 0x14000a55c
sub r8, rsi
movzx eax, word [rsi + r8]
cmp ax, word [rsi]
jne 0x14000a0da
add rsi, 2
sub rcx, 1
jne 0x14000a0c1
jmp 0x14000a55c
lea r8, [rbp - 0x30]
cmp r12, 7
cmova r8, r15
lea r9, str.false
cmp rdx, 5
jne 0x14000a11b
mov rcx, r9
test rdx, rdx
je 0x14000a55c
sub r8, r9
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x14000a11b
add rcx, 2
sub rdx, 1
jne 0x14000a102
jmp 0x14000a55c
mov rax, qword [r14]
mov rdi, qword [rax + 0x500]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
mov r8d, 5
mov rdx, r9
lea rcx, [rsp + 0x70]
call fcn.140001390
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x50]
call fcn.140001390
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 7
jbe 0x14000a17e
mov r9, qword [r9]
lea r8, [rsp + 0x70]
cmp qword [rbp - 0x78], 7
cmova r8, qword [rsp + 0x70]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 7
cmova rdx, qword [rsp + 0x50]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 7
jbe 0x14000a1ad
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x14000a1f5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a1f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a738
call fcn.1400378f4
movdqa xmm0, xmmword [0x140065b00]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], r13w
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x14000a557
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a249
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a73e
call fcn.1400378f4
jmp 0x14000a557
mov rax, qword [r14]
mov rdi, qword [rax + 0x500]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x70]
call fcn.140001390
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 7
jbe 0x14000a291
mov r9, qword [r9]
lea r8, [rbp - 0x70]
cmp qword [rbp - 0x58], 7
cmova r8, qword [rbp - 0x70]
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 7
cmova rdx, qword [rsp + 0x70]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 7
jbe 0x14000a2bd
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x14000a304
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a2ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a744
call fcn.1400378f4
mov r15, qword [rbp - 0x60]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r15
cmp rax, 0x1c
jb 0x14000a74a
lea r13, [rbp - 0x70]
cmp qword [rbp - 0x58], 7
cmova r13, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea r12, [r15 + 0x1c]
mov esi, 7
lea rdi, [rsp + 0x50]
cmp r12, rsi
jbe 0x14000a3e9
mov rsi, r12
or rsi, 7
cmp rsi, rcx
jbe 0x14000a377
mov rsi, rcx
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x14000a3a7
cmp rsi, 0xa
mov eax, 0xa
cmovb rsi, rax
lea rcx, [rsi + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14000a756
add rcx, rcx
cmp rcx, 0x1000
jb 0x14000a3d3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000a756
mov rcx, rax
call fcn.1400378b8
test rax, rax
je 0x14000a75c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000a3e4
test rcx, rcx
je 0x14000a3e2
call fcn.1400378b8
mov rdi, rax
jmp 0x14000a3e4
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], rsi
movups xmm0, xmmword [str.https:__flingtrainer.com_cn_]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x140068e40]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [0x140068e50]
movups xmmword [rdi + 0x20], xmm0
movsd xmm0, qword [0x140068e60]
movsd qword [rdi + 0x30], xmm0
lea rcx, [rdi + 0x38]
lea r8, [r15 + r15]
mov rdx, r13
call fcn.14005e680
xor r13d, r13d
mov word [rdi + r12*2], r13w
lea r8, [0x140068e20]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.140008a30
mov rdi, rax
lea rax, [rbp - 0x50]
cmp rax, rdi
je 0x14000a4b9
mov rdx, qword [rbp - 0x38]
cmp rdx, 7
jbe 0x14000a49a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a495
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a750
call fcn.1400378f4
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 7
mov word [rdi], r13w
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x14000a4fa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a4f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a750
call fcn.1400378f4
movdqa xmm0, xmmword [0x140065b00]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rsp + 0x70], r13w
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x14000a54f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a54a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a75c
call fcn.1400378f4
mov r12, qword [rbp - 0x18]
mov r15, qword [rbp - 0x30]
mov edi, 0xa
lea rsi, [0x140087bd0]
mov qword [rsp + 0x48], rsi
mov rcx, rsi
call fcn.140039a40
test eax, eax
jne 0x14000a762
cmp dword [0x140087c1c], 0x7fffffff
je 0x14000a76d
mov edx, edi
mov rcx, qword [r14]
call fcn.1400110b0
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], 7
mov qword [rsp + 0x68], reloc.OLEAUT32.dll_SafeArrayDestroy
mov rax, qword [str.CHADURL]
mov dword [rsp + 0x50], eax
movzx eax, word [0x140068e74]
mov word [rsp + 0x54], ax
movzx eax, byte [0x140068e76]
mov byte [rsp + 0x56], al
mov byte [rsp + 0x57], 0
lea rdx, [rsp + 0x50]
mov rcx, qword [r14]
call fcn.140010920
mov rcx, qword [r14]
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x38]
mov r8d, 4
lea rdx, [rsp + 0x30]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x30], 1
jne 0x14000a62d
mov rdi, qword [r14]
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x70]
call fcn.1400094d0
mov rdx, rax
mov rcx, rdi
call fcn.1400109f0
nop
mov rcx, rsi
call fcn.140039a48
nop
cmp r12, 7
jbe 0x14000a672
lea rdx, [r12*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x14000a669
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a782
mov rcx, r15
call fcn.1400378f4
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 7
jbe 0x14000a6b3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a6ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a788
call fcn.1400378f4
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 7
jbe 0x14000a6f3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a6ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a78e
call fcn.1400378f4
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r13w
mov rcx, rbx
call fcn.140039a48
jmp 0x140009ec8
dec eax
mov dword [rbx + 0x4c], eax
mov ecx, 6
call fcn.140039d68
int3
mov ecx, 5
call fcn.140039d68
nop
call fcn.140040380
nop
call fcn.140040380
nop
call fcn.140040380
nop
call fcn.140040380
int3
call fcn.140040380
int3
call fcn.1400053a0
nop
call fcn.140040380
nop
call fcn.140005200
int3
call fcn.140040380
int3
mov ecx, 5
call fcn.140039d68
int3
mov dword [0x140087c1c], 0x7ffffffe
mov ecx, 6
call fcn.140039d68
nop
call fcn.140040380
nop
call fcn.140040380
nop
call fcn.140040380
int3