Function at 0x140011040
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor esi, esi
lea rax, [0x1400113f0]
mov qword [rcx + 0xd0], rax
mov rdi, rcx
lea rax, [0x1400114a0]
mov qword [rcx + 0x118], rsi
mov qword [rcx + 0xd8], rax
lea rax, [0x1400114d0]
mov qword [rcx + 0xe0], rax
lea rax, [0x140011560]
mov qword [rcx + 0xe8], rax
lea rax, [0x140011590]
mov qword [rcx + 0xf0], rax
lea rax, [0x140011630]
mov qword [rcx + 0xf8], rax
lea rax, [0x1400116d0]
mov qword [rcx + 0x100], rax
lea rax, [0x140011760]
mov qword [rcx + 0x108], rax
lea rax, [0x140011800]
mov qword [rcx + 0x110], rax
lea rax, [0x140011a60]
mov qword [rcx + 0x138], rax
lea rax, [0x140011cd0]
mov qword [rcx + 0x128], rax
lea rax, [0x140011ca0]
mov qword [rcx + 0x120], rax
lea rax, [0x140011d70]
mov qword [rcx + 0x130], rax
lea rax, [0x140011da0]
mov qword [rcx + 0x140], rax
lea rax, [0x140011e20]
mov qword [rcx + 0x150], rax
lea rax, [0x140011f10]
mov qword [rcx + 0x158], rax
lea rax, [0x140011f30]
mov qword [rcx + 0x148], rax
mov qword [rcx + 0x180], rsi
mov qword [rcx + 0x188], rsi
mov qword [rcx + 0x168], rsi
mov qword [rcx + 0x170], rsi
lea ecx, [rsi + 0x48]
call fcn.140015f10
mov qword [rdi + 0x238], rax
mov ecx, 0x4000
mov rbx, rax
mov qword [rax + 8], rsi
mov dword [rax + 0x38], esi
mov qword [rdi + 0x270], 0x4000
call fcn.140015f00
cmp dword [rdi + 0x230], 1
mov rcx, qword [rdi + 0x1e0]
mov qword [rdi + 0x260], rax
jne 0x14001127b
test rcx, rcx
je 0x1400111f4
movzx eax, byte [rcx]
cmp al, byte [0x140020c7f]
je 0x1400111f4
lea rdx, [0x140022220]
call fcn.14001a5e0
mov qword [rbx + 0x18], rax
test rax, rax
jne 0x14001122a
cmp dword [0x14002da14], 4
jg 0x140011220
mov r8, qword [rdi + 0x1e0]
lea rdx, str.could_not_open_TOC_file___s__for_output:__m
lea ecx, [rsi + 4]
call fcn.1400166d0
jmp 0x140011220
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov qword [rbx + 0x18], rax
test rax, rax
jne 0x14001122a
cmp dword [0x14002da14], 4
jg 0x140011220
lea rdx, str.could_not_open_TOC_file_for_output:__m
lea ecx, [rax + 4]
call fcn.1400166d0
mov ecx, 1
call fcn.1400133f0
mov rcx, qword [rbx + 0x18]
mov qword [rbx + 0x20], rsi
call fcn.1400085c0
movzx eax, al
mov dword [rbx], eax
cmp dword [rdi + 0x228], esi
je 0x14001133e
cmp dword [0x14002da14], 4
jg 0x140011262
lea rdx, str.compression_is_not_supported_by_tar_archive_format
mov ecx, 4
call fcn.1400166d0
mov ecx, 1
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.1400133f0
test rcx, rcx
je 0x1400112c1
movzx eax, byte [rcx]
cmp al, byte [0x140020c7f]
je 0x1400112c1
lea rdx, [0x140022184]
call fcn.14001a5e0
mov qword [rbx + 0x18], rax
test rax, rax
jne 0x1400112f4
cmp dword [0x14002da14], 4
jg 0x1400112ea
mov r8, qword [rdi + 0x1e0]
lea rdx, str.could_not_open_TOC_file___s__for_input:__m
lea ecx, [rax + 4]
call fcn.1400166d0
jmp 0x1400112ea
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov qword [rbx + 0x18], rax
test rax, rax
jne 0x1400112f4
cmp dword [0x14002da14], 4
jg 0x1400112ea
lea rdx, str.could_not_open_TOC_file_for_input:__m
lea ecx, [rax + 4]
call fcn.1400166d0
mov ecx, 1
call fcn.1400133f0
mov rcx, qword [rbx + 0x18]
mov qword [rbx + 0x20], rsi
call fcn.1400085c0
movzx eax, al
lea rdx, str.toc.dat
mov dword [rbx], eax
mov r8b, Ordinal_115
mov rcx, rdi
mov dword [rdi + 0xa8], esi
call fcn.140012f60
mov rcx, rdi
mov qword [rbx + 0x30], rax
call fcn.140006f80
mov rcx, rdi
call fcn.140007720
mov rdx, qword [rbx + 0x30]
mov rcx, rdi
call fcn.140012ee0
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret