Function at 0x140001a00
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
cmp byte [rdx + 0x11], 0x6e
mov rbx, rcx
mov r13, rdx
mov rsi, r8
je 0x140001b28
lea rdx, [0x140011254]
mov rcx, r8
call fcn.140004680
mov r12, rax
test rax, rax
je 0x140001c30
lea rdx, [0x140011129]
mov rcx, rbx
call fcn.140004680
mov rbp, rax
test rax, rax
je 0x140001bb8
mov edx, dword [r13 + 4]
xor r8d, r8d
add edx, dword [rbx + 0x1000]
mov rcx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fseek
test eax, eax
js 0x140001c08
cmp byte [r13 + 0x10], 1
je 0x140001b60
mov ecx, 0x2000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rdi, rax
test rax, rax
je 0x140001c59
mov esi, dword [r13 + 0xc]
test rsi, rsi
jne 0x140001ace
jmp 0x140001bd0
mov r9, r12
mov r8d, 1
mov rdx, rbx
mov rcx, rdi
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
test rax, rax
je 0x140001be0
sub rsi, rbx
je 0x140001bd0
mov ebx, 0x2000
mov r9, rbp
mov r8d, 1
mov rcx, rdi
cmp rsi, rbx
cmovbe rbx, rsi
mov rdx, rbx
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fread
test rax, rax
jne 0x140001aa8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
lea r9, [r13 + 0x12]
lea r8, str.Failed_to_extract__s:_failed_to_read_data_chunk__n
mov edx, dword [rax]
lea rcx, str.fread
call fcn.140002b10
mov ebx, 0xffffffff
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
jmp 0x140001b73
call fcn.140001890
mov rdi, rax
test rax, rax
je 0x140001b92
mov rcx, rax
mov rdx, rsi
call fcn.140004720
mov rcx, rdi
mov ebx, eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
test ebx, ebx
js 0x140001ba0
mov eax, ebx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
xor r9d, r9d
mov r8, r12
mov rdx, r13
mov rcx, rbp
call fcn.140001480
mov ebx, eax
mov rcx, rbp
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fclose
mov rcx, r12
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fclose
mov eax, ebx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov ebx, 0xffffffff
nop word [rax + rax]
lea rdx, [r13 + 0x12]
lea rcx, str.Failed_to_create_symbolic_link__s__n
call fcn.140002a10
jmp 0x140001b4e
lea rdx, [r13 + 0x12]
lea rcx, str.Failed_to_extract__s:_failed_to_open_archive_file__n
mov ebx, 0xffffffff
call fcn.140002a10
jmp 0x140001b7b
xor ebx, ebx
jmp 0x140001b17
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
lea r9, [r13 + 0x12]
lea r8, str.Failed_to_extract__s:_failed_to_write_data_chunk__n
mov edx, dword [rax]
lea rcx, str.fwrite
call fcn.140002b10
jmp 0x140001b12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
lea r9, [r13 + 0x12]
lea r8, str.Failed_to_extract__s:_failed_to_seek_to_the_entrys_data__n
mov edx, dword [rax]
lea rcx, str.fseek
call fcn.140002b10
or ebx, 0xffffffff
jmp 0x140001b73
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
lea r9, [r13 + 0x12]
mov ebx, 0xffffffff
lea r8, str.Failed_to_extract__s:_failed_to_open_target_file__n
mov edx, dword [rax]
lea rcx, str.fopen
call fcn.140002b10
jmp 0x140001b4e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
lea r9, [r13 + 0x12]
lea r8, str.Failed_to_extract__s:_failed_to_allocate_temporary_buffer__n
mov edx, dword [rax]
lea rcx, str.malloc
call fcn.140002b10
jmp 0x140001c27