Function at 0x1400ac25c
Capabilities:
Write file on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2fd0]
mov eax, 0x30d0
call fcn.1400fc480
sub rsp, rax
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rsp + 0x3120], rbx
mov rax, qword [0x140160370]
xor rax, rsp
mov qword [rbp + 0x2fc0], rax
mov r14, rdx
mov rdi, rcx
mov qword [rsp + 0x60], rcx
call fcn.14006df10
nop
xor r12d, r12d
mov byte [rdi + 0x3038], r12b
mov r15d, 0x800
mov r9d, r15d
lea r8, [rbp + 0xfc0]
lea rdx, [rbp + 0x1fc0]
lea rcx, [0x14018f7c0]
call fcn.1400b1e2c
lea rcx, [rbp + 0x1fc0]
call fcn.14006f794
test al, al
jne 0x1400ac2f5
mov word [rbp + 0x1fc0], r12w
lea rcx, [rbp + 0xfc0]
call fcn.14006f794
test al, al
jne 0x1400ac30d
mov word [rbp + 0xfc0], r12w
lea rdx, [r14 + 0x852a]
cmp word [rdx], r12w
je 0x1400ac329
mov r8, r15
lea rcx, [rbp + 0x1fc0]
call fcn.140096298
lea rdx, [r14 + 0x952a]
cmp word [rdx], r12w
je 0x1400ac345
mov r8, r15
lea rcx, [rbp + 0xfc0]
call fcn.140096298
lea rbx, [r14 + 0x1018]
mov rcx, rbx
call fcn.1400803f0
mov rcx, rax
mov r8d, 6
lea rdx, str.WinCon
call fcn.140099480
test eax, eax
jne 0x1400ac37a
movzx eax, r12w
mov word [rbp + 0xfc0], ax
jmp 0x1400ac381
movzx eax, word [rbp + 0xfc0]
lea rsi, [rdi + 0x1030]
mov word [rsi], r12w
cmp word [rbx], r12w
je 0x1400ac709
cmp word [rbp + 0x1fc0], r12w
jne 0x1400ac3b2
test ax, ax
jne 0x1400ac3b2
cmp byte [r14 + 0xa52a], r12b
je 0x1400ac709
mov rcx, rbx
call fcn.14006f794
test al, al
je 0x1400ac709
lea rcx, [rdi + 0x2030]
mov r8, r15
mov rdx, rbx
call fcn.140096298
mov qword [rdi + 0x3030], rbx
mov r8, r15
mov rdx, rsi
lea rcx, str.Rar_SF
call fcn.1400cec44
mov r15, rax
test rax, rax
je 0x1400ac6e4
mov rdx, rbx
mov rcx, rdi
call fcn.1400ad7a4
test al, al
je 0x1400ac430
mov ecx, 0x5f5
call fcn.1400901c8
mov rcx, rax
call fcn.1400d4974
mov edx, 1
lea rcx, [0x14019bd38]
call fcn.1400696fc
jmp 0x1400ac6e4
mov r8, r15
mov rdx, rbx
mov rcx, rdi
call fcn.1400aced4
test al, al
je 0x1400ac709
mov rcx, r15
call fcn.1401039c8
mov edx, 0x10000
lea rcx, [rsp + 0x30]
call fcn.140009f58
nop
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
mov rdx, rbx
mov rcx, rdi
call fcn.1400add2c
mov qword [rsp + 0x28], rax
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
mov r15, rax
test rax, rax
jne 0x1400ac49a
lea rcx, [rsp + 0x30]
call fcn.140009f84
jmp 0x1400ac709
mov byte [rsp + 0x20], r12b
mov r13b, r12b
xor edx, edx
lea r8d, [rdx + 3]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r12, rax
xor edx, edx
test rax, rax
je 0x1400ac5a6
movzx eax, word [rbp + 0x1fc0]
test ax, ax
je 0x1400ac524
mov r9, r15
lea r8, [0x1400ad110]
mov edx, 3
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r9, r15
lea r8, [0x1400ad110]
mov edx, 0xe
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x1fc0]
mov rdx, r15
mov rcx, rdi
call fcn.1400ac988
mov cl, al
mov byte [rsp + 0x20], al
movzx eax, word [rbp + 0x1fc0]
xor edx, edx
jmp 0x1400ac526
mov cl, dl
cmp word [rbp + 0xfc0], dx
je 0x1400ac59d
test ax, ax
je 0x1400ac538
test cl, cl
je 0x1400ac59d
lea rdx, [0x1401319f8]
lea rcx, [rbp + 0xfc0]
call fcn.14007ea64
mov r9, r15
lea r8, [0x1400ad110]
mov rcx, r12
test al, al
je 0x1400ac57b
mov edx, 2
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
lea r8, [rbp + 0xfc0]
mov rdx, r15
mov rcx, rdi
call fcn.1400ac7fc
jmp 0x1400ac59a
lea rdx, [0x140131a00]
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
lea r8, [rbp + 0xfc0]
mov rdx, r15
mov rcx, rdi
call fcn.1400acbe8
mov r13b, al
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor edx, edx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
xor r12d, r12d
test eax, eax
je 0x1400ac48b
cmp word [rbp + 0xfc0], r12w
je 0x1400ac5cf
test r13b, r13b
je 0x1400ac48b
cmp byte [rsp + 0x20], r12b
jne 0x1400ac5e8
test r13b, r13b
jne 0x1400ac5e8
cmp byte [r14 + 0xa52a], r12b
je 0x1400ac673
cmp byte [r14 + 0xa52a], r12b
je 0x1400ac5fc
mov rdx, rsi
mov rcx, rdi
call fcn.1400acf80
mov qword [rbp + 0xf80], r12
mov qword [rbp + 0xf88], r12
mov qword [rbp + 0xf90], r12
xor r8d, r8d
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.140070c98
mov r14, qword [rsp + 0x28]
test al, al
je 0x1400ac660
mov rcx, qword [rbp + 0xf70]
add rcx, r14
mov r15d, 0x200000
cmp rcx, r15
jbe 0x1400ac660
mov ecx, 0x5a0
call fcn.1400901c8
mov rdx, rax
mov r8d, r15d
lea rcx, [0x14017edfa]
call fcn.1400d5224
jmp 0x1400ac48b
mov r8d, 0x800
mov rdx, rsi
mov rcx, rbx
call fcn.140096298
jmp 0x1400ac678
mov r14, qword [rsp + 0x28]
test r14, r14
je 0x1400ac6da
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
call fcn.1400add2c
test rax, rax
jne 0x1400ac6da
lea rdx, [0x140131a08]
mov rcx, rsi
call fcn.1400cf680
mov rbx, rax
test rax, rax
je 0x1400ac6da
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rax
call fcn.140107ce0
mov r9, rbx
mov r8, r14
mov edx, 1
mov rcx, qword [rsp + 0x30]
call fcn.140103d94
mov rcx, rbx
call fcn.1401039c8
nop
lea rcx, [rsp + 0x30]
call fcn.140009f84
cmp word [rsi], r12w
je 0x1400ac709
mov rcx, qword [rdi]
mov rbx, qword [rcx + 8]
mov rcx, rbx
call qword [fcn.1400fd580]
mov r8d, 4
mov rdx, rsi
mov rcx, rdi
call rbx
nop
mov rax, rdi
mov rcx, qword [rbp + 0x2fc0]
xor rcx, rsp
call fcn.1400fc4f0
mov rbx, qword [rsp + 0x3120]
add rsp, 0x30d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret