Function at 0x140010de0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1400a0088]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov rsi, rcx
xor r12d, r12d
mov dword [rsp + 0x30], r12d
mov edi, r12d
nop dword [rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [rsi]
add rbx, 0x440
mov qword [rsp + 0x48], rbx
mov rcx, rbx
call fcn.14002e9ac
test eax, eax
je 0x140010e5e
mov ecx, eax
call fcn.14002e468
nop
mov rax, qword [rsi]
mov rdx, qword [rax + 0x510]
mov rcx, qword [rax + 0x518]
sub rcx, rdx
sar rcx, 5
cmp rcx, 2
jae 0x140010e9f
mov rcx, rbx
call fcn.14002e9d0
test eax, eax
je 0x140010e90
mov ecx, eax
call fcn.14002e468
nop
inc edi
cmp edi, 0x12c
jl 0x140010e30
jmp 0x140011554
add rdx, 0x20
lea rcx, [rsp + 0x78]
call fcn.140011d90
nop
movdqa xmm0, xmmword [0x14008daa0]
movdqu xmmword [rbp - 0x38], xmm0
mov word [rbp - 0x48], r12w
mov r8d, 5
lea rdx, str.flxgq
lea rcx, [rbp - 0x48]
call fcn.140002010
nop
movdqa xmm0, xmmword [0x14008daa0]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], r12w
mov r8d, 5
lea rdi, [0x14008abb0]
mov rdx, rdi
lea rcx, [rbp - 8]
call fcn.140002010
nop
movdqa xmm0, xmmword [0x14008daa0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r12w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x28]
call fcn.140002010
nop
mov rax, qword [rsi]
mov rcx, qword [rax + 0x530]
lea r8, [rcx + 8]
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x28]
lea rdx, [rbp + 0x18]
mov rcx, qword [rcx]
call fcn.14000d8f0
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x140010f94
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010f8f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011592
call fcn.14002fdf4
movdqa xmm0, xmmword [0x14008daa0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r12w
mov rdx, qword [rbp + 0x10]
cmp rdx, 8
jb 0x140010fe6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010fe1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011598
call fcn.14002fdf4
movdqa xmm0, xmmword [0x14008daa0]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], r12w
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae r8, qword [rsp + 0x78]
mov r15, qword [rbp + 0x30]
mov r14, qword [rbp + 0x18]
cmp qword [rbp - 0x78], 1
jne 0x1400111ef
mov edx, 1
lea rcx, [0x14008ae34]
sub r8, rcx
nop word [rax + rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x1400111ef
add rcx, 2
sub rdx, 1
jne 0x140011030
lea rdx, [rbp + 0x18]
cmp r15, 8
cmovae rdx, r14
mov r9, qword [rbp + 0x28]
cmp r9, 5
jne 0x14001107c
mov rcx, r9
sub rdx, rdi
movzx eax, word [rdi]
cmp word [rdi + rdx], ax
jne 0x14001107c
add rdi, 2
sub rcx, 1
jne 0x140011064
jmp 0x14001138d
lea r8, [rbp + 0x18]
cmp r15, 8
cmovae r8, r14
lea r10, str.false
cmp r9, 5
jne 0x1400110b9
mov rdx, r9
mov rcx, r10
sub r8, r10
nop
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x1400110b9
add rcx, 2
sub rdx, 1
jne 0x1400110a0
jmp 0x14001138d
movdqa xmm0, xmmword [0x14008daa0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r12w
mov r8d, 5
mov rdx, r10
lea rcx, [rsp + 0x58]
call fcn.140002010
nop
movdqa xmm0, xmmword [0x14008daa0]
movdqu xmmword [rbp - 0x58], xmm0
mov word [rbp - 0x68], r12w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rbp - 0x68]
call fcn.140002010
mov rax, qword [rsi]
mov rcx, qword [rax + 0x530]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x140011120
mov r9, qword [r9]
lea r8, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae r8, qword [rsp + 0x58]
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae rdx, qword [rbp - 0x68]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x14001114d
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x140011193
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001118e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001159e
call fcn.14002fdf4
movdqa xmm0, xmmword [0x14008daa0]
movdqu xmmword [rbp - 0x58], xmm0
mov word [rbp - 0x68], r12w
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14001138d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011388
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001158c
jmp 0x140011388
movdqa xmm0, xmmword [0x14008daa0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r12w
mov r8d, 4
lea rdx, str.DXTD
lea rcx, [rsp + 0x58]
call fcn.140002010
mov rax, qword [rsi]
mov rcx, qword [rax + 0x530]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x140011231
mov r9, qword [r9]
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae r8, qword [rsp + 0x78]
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rdx, qword [rsp + 0x58]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x140011260
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x1400112a9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400112a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400115a4
call fcn.14002fdf4
nop
movdqa xmm0, xmmword [0x14008daa0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r12w
mov dword [rsp + 0x30], 3
mov rdx, qword [rbp - 0x78]
add rdx, 0x1c
lea rcx, [rsp + 0x58]
call fcn.140002bc0
mov r8d, 0x1c
lea rdx, str.https:__flingtrainer.com_cn_
lea rcx, [rsp + 0x58]
call fcn.140002c80
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rdx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x78]
lea rcx, [rsp + 0x58]
call fcn.140002c80
mov r8d, 5
lea rdx, [0x14008ae38]
lea rcx, [rsp + 0x58]
call fcn.140002c80
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
lea rcx, [rbp - 0x48]
call fcn.140001e10
movups xmmword [rbp - 0x48], xmm6
movups xmmword [rbp - 0x38], xmm7
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14001138d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011388
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400115aa
call fcn.14002fdf4
lea rdi, [0x1400a5c60]
mov qword [rsp + 0x50], rdi
mov rcx, rdi
call fcn.14002e9ac
test eax, eax
je 0x1400113ad
mov ecx, eax
call fcn.14002e468
nop
mov rcx, qword [rsi]
mov dword [rsp + 0x38], 0xa
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x30]
mov r8d, 4
lea rdx, [rsp + 0x38]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], reloc.OLEAUT32.dll_SafeArrayDestroy
mov byte [rsp + 0x58], 0
mov r8d, 7
lea rdx, str.CHADURL
lea rcx, [rsp + 0x58]
call fcn.1400021c0
lea rdx, [rsp + 0x58]
mov rcx, qword [rsi]
call fcn.14000b860
mov rcx, qword [rsi]
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x38]
mov r8d, 4
lea rdx, [rsp + 0x30]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x30], 1
jne 0x140011460
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x58]
call fcn.140011d90
mov rdx, rax
mov rcx, qword [rsi]
call fcn.14000b920
nop
mov rcx, rdi
call fcn.14002e9d0
test eax, eax
je 0x140011474
mov ecx, eax
call fcn.14002e468
nop
cmp r15, 8
jb 0x1400114b0
lea rdx, [r15*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400114a7
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400115b0
mov rcx, r14
call fcn.14002fdf4
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 8
jb 0x1400114f1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400114eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400115b6
call fcn.14002fdf4
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x14001152e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011529
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011586
call fcn.14002fdf4
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r12w
mov rcx, rbx
call fcn.14002e9d0
test eax, eax
je 0x140011554
mov ecx, eax
call fcn.14002e468
nop
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.14002fdd0
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140051164
nop
call fcn.140051164
nop
call fcn.140051164
nop
call fcn.140051164
nop
call fcn.140051164
nop
call fcn.140051164
int3
call fcn.140051164
nop
call fcn.140051164
nop
call fcn.140051164
int3