Function at 0x14003f7a8
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3490]
mov eax, 0x3590
call fcn.140100e60
sub rsp, rax
mov rax, qword [0x140191630]
xor rax, rsp
mov qword [rbp + 0x3480], rax
mov r12b, byte [rbp + 0x34f0]
mov sil, r9b
mov r9, rcx
mov byte [0x140187f58], 0x52
mov bl, r8b
mov byte [0x140187f70], 0x50
mov r13b, dl
lea r8, str._sShellNew
mov rdi, rcx
mov edx, 0x800
lea rcx, [rbp + 0x1480]
call fcn.140002910
mov r9, rdi
lea r8, str.Setup_s
mov edx, 0x50
lea rcx, [rbp + 0xfe0]
call fcn.140002910
mov r8d, 1
lea rdx, str.NewRAR
lea rcx, str.SetupMenuItems
call fcn.1400a84dc
xor r15d, r15d
test eax, eax
jne 0x14003f85f
test sil, sil
movzx ebx, bl
cmovne ebx, r15d
mov r8d, 1
lea rdx, str.NewZIP
lea rcx, str.SetupMenuItems
call fcn.1400a84dc
test eax, eax
jne 0x14003f886
test r12b, r12b
movzx ebx, bl
cmovne ebx, r15d
lea r14, [0x1401413c8]
test r13b, r13b
je 0x14003fb41
mov rcx, rdi
call fcn.14003ee4c
test al, al
jne 0x14003f9a2
mov dword [rsp + 0x28], 0x200
lea r9, [rbp + 0x1080]
mov r8, r14
mov qword [rsp + 0x20], r14
mov rdx, rdi
mov rcx, 0xffffffff80000000
call fcn.1400a8520
lea r9, [rbp + 0x2480]
mov dword [rsp + 0x28], 0x800
lea r8, str.FileName
mov qword [rsp + 0x20], r14
lea rdx, [rbp + 0x1480]
mov rcx, 0xffffffff80000000
call fcn.1400a8520
lea r9, [rbp + 0xfc0]
mov dword [rsp + 0x28], 0xa
lea r8, str.NullFile
mov qword [rsp + 0x20], r14
lea rdx, [rbp + 0x1480]
mov rcx, 0xffffffff80000000
call fcn.1400a8520
mov rdx, rdi
mov rcx, 0xffffffff80000000
mov r14b, al
call fcn.1400a67a8
movzx r8d, al
lea rdx, str.Exist
lea rcx, [rbp + 0xfe0]
call fcn.1400a9118
lea r8, [rbp + 0x1080]
lea rdx, [0x140142818]
lea rcx, [rbp + 0xfe0]
call fcn.1400a9100
cmp word [rbp + 0x2480], r15w
jne 0x14003f981
lea r8, [0x140141bd8]
test r14b, r14b
jne 0x14003f988
lea r8, [rbp + 0x2480]
lea rdx, str.ShellNew
lea rcx, [rbp + 0xfe0]
call fcn.1400a9100
lea r14, [0x1401413c8]
lea rax, str.WinRAR.ZIP
test r12b, r12b
lea r9, [0x140146a40]
mov r8, r14
cmovne r9, rax
mov rdx, rdi
mov rcx, 0xffffffff80000000
call fcn.1400a8f24
test sil, sil
je 0x14003fa27
call fcn.140073b4c
neg eax
sbb r14d, r14d
and r14d, 0xffffffba
add r14d, 0x64
mov r9d, r15d
lea r8, str..r_02u
mov edx, 0x20
lea rcx, [rbp + 0xf80]
call fcn.140002910
lea r9, [0x140146a40]
mov rcx, 0xffffffff80000000
lea r8, [0x1401413c8]
lea rdx, [rbp + 0xf80]
call fcn.1400a8f24
inc r15d
cmp r15d, r14d
jb 0x14003f9e0
xor r15d, r15d
test bl, bl
je 0x14003fb41
test r12b, r12b
jne 0x14003fa3d
test sil, sil
je 0x14003fb41
lea rdx, [rbp + 0x1480]
mov rcx, 0xffffffff80000000
call fcn.1400a7e24
mov r14d, 0x800
lea rdx, [rbp + 0x2480]
mov r8d, r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rax, str.rarnew.dat
test sil, sil
lea rdx, str.zipnew.dat
mov r8d, r14d
cmovne rdx, rax
lea rcx, [rbp + 0x2480]
call fcn.14008111c
xor r8d, r8d
mov qword [rbp + 0xf40], r15
lea rdx, [rsp + 0x30]
mov qword [rbp + 0xf48], r15
lea rcx, [rbp + 0x2480]
mov qword [rbp + 0xf50], r15
call fcn.14007189c
test al, al
je 0x14003fad1
mov al, sil
neg al
sbb rcx, rcx
and ecx, 2
add rcx, 0x16
cmp qword [rbp + 0xf30], rcx
je 0x14003fb20
lea rdx, [0x140142200]
lea rcx, [rbp + 0x2480]
call fcn.1400712cc
mov r14, rax
test rax, rax
je 0x14003fb20
mov r9, rax
mov edx, 1
test sil, sil
je 0x14003fb06
lea r8d, [rdx + 0x17]
lea rcx, [0x140187f58]
jmp 0x14003fb13
mov r8d, 0x16
lea rcx, [0x140187f70]
call fcn.140127ca4
mov rcx, r14
call fcn.1401278d8
lea r9, [rbp + 0x2480]
mov rcx, 0xffffffff80000000
lea r8, str.FileName
lea rdx, [rbp + 0x1480]
call fcn.1400a8f24
mov rcx, rdi
call fcn.14003ee4c
test al, al
je 0x14003fd39
test r13b, r13b
je 0x14003fb5e
test bl, bl
jne 0x14003fd39
mov r8d, 1
lea rdx, str.Exist
lea rcx, [rbp + 0xfe0]
call fcn.1400a84dc
test eax, eax
lea rbx, [0x1401413c8]
setne r14b
test r13b, r13b
jne 0x14003fc8c
mov r9, rbx
mov dword [rsp + 0x20], 0x200
lea r8, [rbp + 0x1080]
lea rdx, [0x140142818]
lea rcx, [rbp + 0xfe0]
call fcn.1400a8668
lea rdx, [0x140146a40]
lea rcx, [rbp + 0x1080]
call fcn.140099f30
test eax, eax
je 0x14003fbe0
lea rdx, str.WinRAR.ZIP
lea rcx, [rbp + 0x1080]
call fcn.140099f30
test eax, eax
jne 0x14003fbe8
mov word [rbp + 0x1080], r15w
mov r13, 0xffffffff80000000
mov r8, rbx
mov rcx, r13
mov rdx, rdi
test r14b, r14b
je 0x14003fc0b
lea r9, [rbp + 0x1080]
call fcn.1400a8f24
jmp 0x14003fc1e
mov r9, rbx
call fcn.1400a8f24
mov rdx, rdi
mov rcx, r13
call fcn.1400a7e24
test sil, sil
je 0x14003fc8c
mov ebx, r15d
mov r9d, ebx
lea r8, str..r_02u
mov edx, 0x20
lea rcx, [rbp + 0xf80]
call fcn.140002910
test r14b, r14b
je 0x14003fc6f
cmp word [rbp + 0x1080], r15w
je 0x14003fc6f
lea r9, [rbp + 0x1080]
mov rcx, r13
lea r8, [0x1401413c8]
lea rdx, [rbp + 0xf80]
call fcn.1400a8f24
jmp 0x14003fc7e
lea rdx, [rbp + 0xf80]
mov rcx, r13
call fcn.1400a7e24
inc ebx
cmp ebx, 0x64
jb 0x14003fc26
lea rbx, [0x1401413c8]
test r12b, r12b
jne 0x14003fc9a
test sil, sil
je 0x14003fd39
test r14b, r14b
je 0x14003fd26
mov r9, rbx
mov dword [rsp + 0x20], 0x800
lea r8, [rbp + 0x2480]
lea rdx, str.ShellNew
lea rcx, [rbp + 0xfe0]
call fcn.1400a8668
mov rbx, 0xffffffff80000000
lea r8, str.FileName
mov rcx, rbx
lea rdx, [rbp + 0x1480]
call fcn.1400a7eb4
movzx eax, word [rbp + 0x2480]
test ax, ax
je 0x14003fd39
lea rdx, [rbp + 0x1480]
mov rcx, rbx
cmp ax, 0x2a
jne 0x14003fd11
lea r9, [0x1401413c8]
lea r8, str.NullFile
jmp 0x14003fd1f
lea r9, [rbp + 0x2480]
lea r8, str.FileName
call fcn.1400a8f24
jmp 0x14003fd39
lea rdx, [rbp + 0x1480]
mov rcx, 0xffffffff80000000
call fcn.1400a7e24
mov rcx, qword [rbp + 0x3480]
xor rcx, rsp
call fcn.140100ed0
mov rbx, qword [rsp + 0x35d8]
add rsp, 0x3590
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret