Function at 0x140057de0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x14012a098]
xor rax, rsp
mov qword [rbp + 0x30], rax
xor r12d, r12d
mov edi, r12d
mov r15, qword [rcx]
lea rbx, [r15 + 0x4c0]
mov qword [rsp + 0x48], rbx
nop word [rax + rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rbx
call fcn.14009868c
test eax, eax
jne 0x140058742
mov rcx, qword [r15 + 0x590]
mov rax, qword [r15 + 0x598]
sub rax, rcx
sar rax, 5
cmp rax, 2
jae 0x140057ea5
mov rcx, rbx
call fcn.140098694
inc edi
cmp edi, 0x12c
jl 0x140057e30
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.1400998a0
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdi, [rcx + 0x20]
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
mov r14, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x140057ec4
mov rdi, qword [rdi]
movabs r13, 0x7ffffffffffffffe
cmp r14, 8
jae 0x140057ee9
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x78], 7
jmp 0x140057f74
mov rsi, r14
or rsi, 7
cmp rsi, r13
cmova rsi, r13
lea rcx, [rsi + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x140058736
add rcx, rcx
cmp rcx, 0x1000
jb 0x140057f49
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140058736
mov rcx, rax
call fcn.1400998f4
mov rcx, rax
test rax, rax
je 0x140058782
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140057f58
test rcx, rcx
je 0x140057f55
call fcn.1400998f4
jmp 0x140057f58
mov rax, r12
mov qword [rsp + 0x70], rax
lea r8, [r14*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.14009bcc0
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r12w
mov r8d, 5
lea rdx, str.flxgq
lea rcx, [rbp - 0x30]
call fcn.140005480
nop
mov rdi, qword [r15 + 0x5b0]
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r12w
mov r8d, 5
lea rsi, [0x140110548]
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.140005480
nop
mov qword [rbp - 0x10], r12
mov qword [rbp], r12
mov qword [rbp + 8], 7
mov word [rbp - 0x10], r12w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x10]
call fcn.140005480
nop
lea r8, [rdi + 8]
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x10]
lea rdx, [rbp + 0x10]
mov rcx, qword [rdi]
call fcn.140052d10
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x140058064
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005805f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005874a
call fcn.1400998c0
mov qword [rbp], r12
mov qword [rbp + 8], 7
mov word [rbp - 0x10], r12w
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x1400580b5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400580b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140058750
call fcn.1400998c0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r12w
lea r9, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r9, qword [rsp + 0x70]
mov r14d, 0xa
cmp qword [rbp - 0x80], 1
jne 0x140058122
lea r8d, [r14 - 9]
lea rax, [0x1401106c0]
movzx ecx, word [r9]
mov edx, 0x31
cmp cx, dx
jb 0x140058122
sub r9, rax
cmp cx, dx
ja 0x140058122
cmp r8, 1
je 0x140058243
dec r8
add rax, 2
movzx ecx, word [r9 + rax]
movzx edx, word [rax]
cmp cx, dx
jae 0x140058102
mov rdi, qword [r15 + 0x5b0]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x50]
call fcn.140005480
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 8
jb 0x140058160
mov r9, qword [r9]
lea r8, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r8, qword [rsp + 0x70]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 8
jb 0x14005818f
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x1400581d7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400581d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140058756
call fcn.1400998c0
mov r14, qword [rbp - 0x80]
mov rax, r13
sub rax, r14
cmp rax, 0x1c
jb 0x140058762
lea r13, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae r13, qword [rsp + 0x70]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
lea r12, [r14 + 0x1c]
mov edi, 7
lea rsi, [rsp + 0x50]
cmp r12, rdi
jbe 0x140058445
mov rdi, r12
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
jbe 0x140058422
mov rdi, rax
jmp 0x14005842f
lea r8, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
setae dil
mov r9, qword [rbp + 0x10]
cmovae r8, r9
mov r11, qword [rbp + 0x20]
cmp r11, 5
jne 0x140058299
mov rdx, r11
movzx eax, word [r8]
mov ecx, 0x45
cmp ax, cx
jb 0x140058299
sub r8, rsi
cmp ax, cx
ja 0x140058299
cmp rdx, 1
je 0x1400585c9
dec rdx
add rsi, 2
movzx eax, word [rsi + r8]
movzx ecx, word [rsi]
cmp ax, cx
jae 0x140058279
lea r10, [rbp + 0x10]
test dil, dil
cmovne r10, r9
lea rsi, str.false
cmp r11, 5
jne 0x1400582eb
mov r9, r11
mov rax, rsi
movzx ecx, word [r10]
mov edx, 0x66
cmp cx, dx
jb 0x1400582eb
sub r10, rsi
cmp cx, dx
ja 0x1400582eb
cmp r9, 1
je 0x1400585c9
dec r9
add rax, 2
movzx ecx, word [rax + r10]
movzx edx, word [rax]
cmp cx, dx
jae 0x1400582cb
mov rdi, qword [r15 + 0x5b0]
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r12w
mov r8d, 5
mov rdx, rsi
lea rcx, [rbp - 0x50]
call fcn.140005480
nop
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x50]
call fcn.140005480
mov r9, qword [rdi]
cmp qword [r9 + 0x18], 8
jb 0x140058351
mov r9, qword [r9]
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae r8, qword [rbp - 0x50]
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 8
jb 0x14005837e
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x1400583c6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400583c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005875c
call fcn.1400998c0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r12w
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x1400585c9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400585c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005873c
jmp 0x1400585c4
cmp rdi, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rsp + 0x50]
call fcn.14001dd60
mov rsi, rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], rdi
movups xmm0, xmmword [str.https:__flingtrainer.com_cn_]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [0x140110920]
movups xmmword [rsi + 0x10], xmm1
movups xmm0, xmmword [0x140110930]
movups xmmword [rsi + 0x20], xmm0
movsd xmm1, qword [0x140110940]
movsd qword [rsi + 0x30], xmm1
lea rcx, [rsi + 0x38]
lea r8, [r14 + r14]
mov rdx, r13
call fcn.14009bcc0
xor eax, eax
mov word [rsi + r12*2], ax
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
mov rax, rdx
sub rax, rcx
cmp rax, 5
jb 0x1400584e9
lea rsi, [rcx + 5]
mov qword [rsp + 0x60], rsi
lea rdi, [rsp + 0x50]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x50]
lea rcx, [rdi + rcx*2]
mov r14d, 0xa
mov r8d, r14d
lea rdx, str..html
call fcn.14009bcc0
xor r12d, r12d
mov word [rdi + rsi*2], r12w
lea rax, [rsp + 0x50]
jmp 0x140058516
mov qword [rsp + 0x20], 5
lea r9, str..html
movzx r8d, byte [rsp + 0x34]
mov edx, 5
lea rcx, [rsp + 0x50]
call fcn.14004bfd0
xor r12d, r12d
lea r14d, [r12 + 0xa]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x38], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14005857f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058571
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140058768
call fcn.1400998c0
movups xmm0, xmmword [rbp - 0x50]
movups xmm1, xmmword [rsp + 0x38]
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm1
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x1400585c9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400585c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005876e
call fcn.1400998c0
lea rdi, [0x14013eec0]
mov qword [rbp - 0x50], rdi
mov rcx, rdi
call fcn.14009868c
test eax, eax
jne 0x140058774
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x30]
lea r8d, [rax + 4]
lea rdx, [rsp + 0x38]
mov rcx, qword [r15 + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], reloc.OLEAUT32.dll_SafeArrayDestroy
mov r8d, 7
lea rdx, str.CHADURL
lea rcx, [rbp - 0x70]
call fcn.140015ff0
lea rdx, [rbp - 0x70]
mov rcx, r15
call fcn.140050780
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x38]
mov r8d, 4
lea rdx, [rsp + 0x30]
mov rcx, qword [r15 + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x30], 1
jne 0x140058686
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x70]
call fcn.14001dcc0
mov rdx, rax
mov rcx, r15
call fcn.140050840
nop
mov rcx, rdi
call fcn.140098694
nop
lea rcx, [rbp + 0x10]
call fcn.14001dbb0
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x1400586da
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400586d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005877c
call fcn.1400998c0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x140058717
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058712
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140058782
call fcn.1400998c0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r12w
mov rcx, rbx
call fcn.140098694
jmp 0x140057e78
call fcn.140002250
nop
call fcn.1400a03a4
nop
mov ecx, eax
call fcn.140097004
nop
call fcn.1400a03a4
nop
call fcn.1400a03a4
int3
call fcn.1400a03a4
nop
call fcn.1400a03a4
nop
call fcn.140002380
nop
call fcn.1400a03a4
nop
call fcn.1400a03a4
int3
mov ecx, eax
call fcn.140097004
nop
call fcn.1400a03a4
nop
call fcn.1400a03a4
int3