Function at 0x140068a80
Capabilities:
Write file on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x2520
call fcn.1400baa60
sub rsp, rax
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rsp + 0x2570], rbx
mov rax, qword [0x1400e0920]
xor rax, rsp
mov qword [rsp + 0x2510], rax
mov r12, rdx
mov rbp, rcx
mov qword [rsp + 0x58], rcx
call fcn.14002fddc
nop
lea r8, [rsp + 0x1d10]
lea rdx, [rsp + 0x1510]
lea rcx, [0x140107990]
call fcn.14006cec0
lea r11, [r12 + 0x435a]
xor r13d, r13d
cmp word [r11], r13w
je 0x140068b18
lea rcx, [rsp + 0x1510]
sub rcx, r11
movzx eax, word [r11]
mov word [rcx + r11], ax
add r11, 2
cmp ax, r13w
jne 0x140068b05
lea rcx, [r12 + 0x4b5a]
cmp word [rcx], r13w
je 0x140068b42
lea rdx, [rsp + 0x1d10]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rdx + rcx], ax
add rcx, 2
cmp ax, r13w
jne 0x140068b31
mov word [rbp + 0xc28], r13w
lea rsi, [r12 + 0x810]
cmp word [rsi], r13w
je 0x140068f38
cmp word [rsp + 0x1510], r13w
jne 0x140068b80
cmp word [rsp + 0x1d10], r13w
jne 0x140068b80
cmp byte [r12 + 0x535a], r13b
je 0x140068f38
mov rcx, rsi
call fcn.140031164
cmp al, r13b
je 0x140068f38
mov rcx, rsi
lea rdx, [rbp + 0x1428]
sub rdx, rsi
movzx eax, word [rcx]
mov word [rdx + rcx], ax
add rcx, 2
cmp ax, r13w
jne 0x140068b9e
mov qword [rbp + 0x1c28], rsi
lea rdx, [rbp + 0xc28]
lea rcx, str.Rar_SFXXXXXX
call fcn.140086d00
mov rbx, rax
cmp rax, r13
je 0x140068f14
call fcn.14003ed2c
cmp eax, r13d
je 0x140068ed1
mov rcx, rsi
call fcn.140065808
cmp al, r13b
jne 0x140068ed1
mov rdx, rbx
mov rcx, rsi
call fcn.1400658bc
cmp al, r13b
je 0x140068f38
mov rcx, rbx
call fcn.1400aa5c0
mov edx, 0x10000
lea rcx, [rsp + 0x40]
call fcn.140001700
nop
mov r8, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
mov rdx, rbx
mov rcx, rsi
call fcn.140065968
mov qword [rsp + 0x38], rax
xor edx, edx
lea rcx, [rbp + 0xc28]
call qword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
mov r15, rax
cmp rax, r13
jne 0x140068c67
cmp rbx, r13
je 0x140068f38
mov rcx, rbx
call fcn.1400a8854
jmp 0x140068f38
mov byte [rsp + 0x30], r13b
mov r14b, r13b
xor edx, edx
lea r8d, [rdx + 3]
lea rcx, [rbp + 0xc28]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r13, rax
xor edx, edx
cmp rax, rdx
je 0x140068d44
movzx eax, word [rsp + 0x1510]
cmp ax, dx
je 0x140068cf5
mov r9, r15
lea r8, [0x1400657e8]
mov edx, 3
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r9, r15
lea r8, [0x1400657e8]
mov edx, 0xe
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r8d, 0x64
lea rdx, [rsp + 0x1510]
mov rcx, r15
call fcn.14006547c
mov cl, al
mov byte [rsp + 0x30], al
mov ax, word [rsp + 0x1510]
xor edx, edx
jmp 0x140068cf7
mov cl, dl
cmp word [rsp + 0x1d10], dx
je 0x140068d3b
cmp ax, dx
je 0x140068d0a
cmp cl, dl
je 0x140068d3b
mov r9, r15
lea r8, [0x1400657e8]
mov edx, 2
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r8d, 0x65
lea rdx, [rsp + 0x1d10]
mov rcx, r15
call fcn.1400656a4
mov r14b, al
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor edx, edx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
xor r13d, r13d
cmp eax, r13d
je 0x140068ec2
cmp word [rsp + 0x1d10], r13w
je 0x140068d6f
cmp r14b, r13b
je 0x140068ec2
cmp byte [rsp + 0x30], r13b
jne 0x140068d89
cmp r14b, r13b
jne 0x140068d89
cmp byte [r12 + 0x535a], r13b
je 0x140068e4b
cmp byte [r12 + 0x535a], r13b
je 0x140068d9f
lea rcx, [rbp + 0xc28]
call fcn.140065b0c
lea rcx, [rsp + 0xc84]
call fcn.14006e33c
lea rcx, [rsp + 0xca8]
call fcn.14006e33c
lea rcx, [rsp + 0xccc]
call fcn.14006e33c
xor r9d, r9d
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0xc28]
xor ecx, ecx
call fcn.140034998
cmp al, r13b
je 0x140068e2f
mov rcx, qword [rsp + 0xc70]
mov r12, qword [rsp + 0x38]
add rcx, r12
mov r14d, 0x100000
cmp rcx, r14
jbe 0x140068e34
mov ecx, 0x5a0
call fcn.140061d94
mov rdx, rax
mov r8d, r14d
lea rcx, [0x14010e71c]
call fcn.14009666c
nop
cmp rbx, r13
je 0x140068f38
mov rcx, rbx
call fcn.1400a8854
jmp 0x140068f38
mov r12, qword [rsp + 0x38]
mov r8d, 0x400
lea rdx, [rbp + 0xc28]
mov rcx, rsi
call fcn.14006b658
jmp 0x140068e50
mov r12, qword [rsp + 0x38]
cmp r12, r13
je 0x140068eb3
mov r8, qword [rsp + 0x48]
mov rdx, rbx
lea rcx, [rbp + 0xc28]
call fcn.140065968
cmp rax, r13
jne 0x140068eb3
lea rdx, [0x1400c8b90]
lea rcx, [rbp + 0xc28]
call fcn.140086cc4
mov rsi, rax
cmp rax, r13
je 0x140068eb3
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rax
call fcn.1400aa484
mov r9, rsi
mov r8, r12
mov edx, 1
mov rcx, rbx
call fcn.1400aa848
mov rcx, rsi
call fcn.1400aa5c0
nop
cmp rbx, r13
je 0x140068f14
mov rcx, rbx
call fcn.1400a8854
jmp 0x140068f14
cmp rbx, r13
je 0x140068f38
mov rcx, rbx
call fcn.1400a8854
jmp 0x140068f38
cmp word [rsp + 0x1510], r13w
je 0x140068f14
lea r9, [rsp + 0x1510]
mov r8, rbx
mov rdx, rsi
mov rcx, rbp
call fcn.140067ca8
cmp al, r13b
je 0x140068f14
mov r8d, 0x400
lea rdx, [rbp + 0xc28]
mov rcx, rsi
call fcn.14006b658
mov rcx, rbx
call fcn.1400aa5c0
cmp word [rbp + 0xc28], r13w
je 0x140068f38
mov byte [rsp + 0x20], r13b
mov r9b, 1
lea r8, [rbp + 0xc28]
xor edx, edx
mov rcx, rbp
call fcn.1400301ec
nop
mov rax, rbp
mov rcx, qword [rsp + 0x2510]
xor rcx, rsp
call fcn.1400a86e0
mov rbx, qword [rsp + 0x2570]
add rsp, 0x2520
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret