Function at 0x1400a2468
Capabilities:
Write file on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2fd0]
mov eax, 0x30d0
call fcn.1400ec1b0
sub rsp, rax
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rsp + 0x3120], rbx
mov rax, qword [0x14013b1d0]
xor rax, rsp
mov qword [rbp + 0x2fc0], rax
mov r14, rdx
mov rbx, rcx
mov qword [rsp + 0x60], rcx
call fcn.140067424
nop
xor r12d, r12d
mov byte [rbx + 0x3038], r12b
mov r15d, 0x800
mov r9d, r15d
lea r8, [rbp + 0xfc0]
lea rdx, [rbp + 0x1fc0]
lea rcx, [0x14016a300]
call fcn.1400a78c8
lea rcx, [r14 + 0x83f2]
cmp word [rcx], r12w
je 0x1400a2510
lea rdx, [rbp + 0x1fc0]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1400a2500
lea rcx, [r14 + 0x93f2]
cmp word [rcx], r12w
je 0x1400a2537
lea rdx, [rbp + 0xfc0]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1400a2527
lea rsi, [r14 + 0x1018]
mov rcx, rsi
call fcn.140078d7c
mov rcx, rax
mov r8d, 6
lea rdx, str.WinCon
call fcn.14008f920
test eax, eax
jne 0x1400a256c
movzx eax, r12w
mov word [rbp + 0xfc0], ax
jmp 0x1400a2573
movzx eax, word [rbp + 0xfc0]
lea rdi, [rbx + 0x1030]
mov word [rdi], r12w
cmp word [rsi], r12w
je 0x1400a28c9
cmp word [rbp + 0x1fc0], r12w
jne 0x1400a25a4
test ax, ax
jne 0x1400a25a4
cmp byte [r14 + 0xa3f2], r12b
je 0x1400a28c9
mov rcx, rsi
call fcn.140068a84
test al, al
je 0x1400a28c9
mov rcx, rsi
lea rdx, [rbx + 0x2030]
sub rdx, rsi
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1400a25c1
mov qword [rbx + 0x3030], rsi
mov r8, r15
mov rdx, rdi
lea rcx, str.Rar_SF
call fcn.1400c2cec
mov r15, rax
test rax, rax
je 0x1400a28af
mov rdx, rsi
mov rcx, rbx
call fcn.1400a3778
test al, al
je 0x1400a262d
mov ecx, 0x5f5
call fcn.1400868b8
mov rcx, rax
call fcn.1400cf438
mov edx, 1
lea rcx, [0x140179130]
call fcn.140062d0c
jmp 0x1400a28af
mov r8, r15
mov rdx, rsi
mov rcx, rbx
call fcn.1400a2ecc
test al, al
je 0x1400a28c9
mov rcx, r15
call fcn.1400f3540
mov edx, 0x10000
lea rcx, [rsp + 0x30]
call fcn.140003dd8
nop
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
mov rdx, rsi
mov rcx, rbx
call fcn.1400a3cdc
mov qword [rsp + 0x28], rax
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
mov r12, rax
test rax, rax
jne 0x1400a2697
lea rcx, [rsp + 0x30]
call fcn.140007d04
jmp 0x1400a28c9
mov byte [rsp + 0x20], 0
xor r13b, r13b
xor edx, edx
lea r8d, [rdx + 3]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r15, rax
xor edx, edx
test rax, rax
je 0x1400a2771
movzx eax, word [rbp + 0x1fc0]
test ax, ax
je 0x1400a2721
mov r9, r12
lea r8, [0x1400a30f0]
mov edx, 3
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r9, r12
lea r8, [0x1400a30f0]
mov edx, 0xe
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x1fc0]
mov rdx, r12
mov rcx, rbx
call fcn.1400a2ae4
mov cl, al
mov byte [rsp + 0x20], al
movzx eax, word [rbp + 0x1fc0]
xor edx, edx
jmp 0x1400a2723
mov cl, dl
cmp word [rbp + 0xfc0], dx
je 0x1400a2768
test ax, ax
je 0x1400a2735
test cl, cl
je 0x1400a2768
mov r9, r12
lea r8, [0x1400a30f0]
mov edx, 2
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r9d, 0x65
lea r8, [rbp + 0xfc0]
mov rdx, r12
mov rcx, rbx
call fcn.1400a29ac
mov r13b, al
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor edx, edx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
xor r12d, r12d
test eax, eax
je 0x1400a2688
cmp word [rbp + 0xfc0], r12w
je 0x1400a279a
test r13b, r13b
je 0x1400a2688
cmp byte [rsp + 0x20], r12b
jne 0x1400a27b3
test r13b, r13b
jne 0x1400a27b3
cmp byte [r14 + 0xa3f2], r12b
je 0x1400a283e
cmp byte [r14 + 0xa3f2], r12b
je 0x1400a27c7
mov rdx, rdi
mov rcx, rbx
call fcn.1400a2f78
mov qword [rbp + 0xf80], r12
mov qword [rbp + 0xf88], r12
mov qword [rbp + 0xf90], r12
xor r8d, r8d
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.140069f68
mov r14, qword [rsp + 0x28]
test al, al
je 0x1400a282b
mov rcx, qword [rbp + 0xf70]
add rcx, r14
mov r15d, 0x200000
cmp rcx, r15
jbe 0x1400a282b
mov ecx, 0x5a0
call fcn.1400868b8
mov rdx, rax
mov r8d, r15d
lea rcx, [0x140159a62]
call fcn.1400d2d44
jmp 0x1400a2688
mov r8d, 0x800
mov rdx, rdi
mov rcx, rsi
call fcn.14008c7ec
jmp 0x1400a2843
mov r14, qword [rsp + 0x28]
test r14, r14
je 0x1400a28a5
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
mov rdx, rdi
mov rcx, rbx
call fcn.1400a3cdc
test rax, rax
jne 0x1400a28a5
lea rdx, [0x140114830]
mov rcx, rdi
call fcn.1400c3690
mov rsi, rax
test rax, rax
je 0x1400a28a5
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rax
call fcn.1400f7880
mov r9, rsi
mov r8, r14
mov edx, 1
mov rcx, qword [rsp + 0x30]
call fcn.1400f390c
mov rcx, rsi
call fcn.1400f3540
nop
lea rcx, [rsp + 0x30]
call fcn.140007d04
cmp word [rdi], r12w
je 0x1400a28c9
mov r9, qword [rbx]
mov r8d, 4
mov rdx, rdi
mov rcx, rbx
call qword [r9 + reloc.COMCTL32.dll_CreateMappedBitmap]
nop
mov rax, rbx
mov rcx, qword [rbp + 0x2fc0]
xor rcx, rsp
call fcn.1400ec220
mov rbx, qword [rsp + 0x3120]
add rsp, 0x30d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret