Function at 0x1400ac20c
Capabilities:
Write file on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2fd0]
mov eax, 0x30d0
call fcn.1400fc460
sub rsp, rax
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rsp + 0x3120], rbx
mov rax, qword [0x140160370]
xor rax, rsp
mov qword [rbp + 0x2fc0], rax
mov r14, rdx
mov rdi, rcx
mov qword [rsp + 0x60], rcx
call fcn.14006dea0
nop
xor r12d, r12d
mov byte [rdi + 0x3038], r12b
mov r15d, 0x800
mov r9d, r15d
lea r8, [rbp + 0xfc0]
lea rdx, [rbp + 0x1fc0]
lea rcx, [0x14018f7c0]
call fcn.1400b1ddc
lea rcx, [rbp + 0x1fc0]
call fcn.14006f688
test al, al
jne 0x1400ac2a5
mov word [rbp + 0x1fc0], r12w
lea rcx, [rbp + 0xfc0]
call fcn.14006f688
test al, al
jne 0x1400ac2bd
mov word [rbp + 0xfc0], r12w
lea rdx, [r14 + 0x852a]
cmp word [rdx], r12w
je 0x1400ac2d9
mov r8, r15
lea rcx, [rbp + 0x1fc0]
call fcn.140096188
lea rdx, [r14 + 0x952a]
cmp word [rdx], r12w
je 0x1400ac2f5
mov r8, r15
lea rcx, [rbp + 0xfc0]
call fcn.140096188
lea rbx, [r14 + 0x1018]
mov rcx, rbx
call fcn.1400802e0
mov rcx, rax
mov r8d, 6
lea rdx, str.WinCon
call fcn.140099370
test eax, eax
jne 0x1400ac32a
movzx eax, r12w
mov word [rbp + 0xfc0], ax
jmp 0x1400ac331
movzx eax, word [rbp + 0xfc0]
lea rsi, [rdi + 0x1030]
mov word [rsi], r12w
cmp word [rbx], r12w
je 0x1400ac6b9
cmp word [rbp + 0x1fc0], r12w
jne 0x1400ac362
test ax, ax
jne 0x1400ac362
cmp byte [r14 + 0xa52a], r12b
je 0x1400ac6b9
mov rcx, rbx
call fcn.14006f688
test al, al
je 0x1400ac6b9
lea rcx, [rdi + 0x2030]
mov r8, r15
mov rdx, rbx
call fcn.140096188
mov qword [rdi + 0x3030], rbx
mov r8, r15
mov rdx, rsi
lea rcx, str.Rar_SF
call fcn.1400cebf4
mov r15, rax
test rax, rax
je 0x1400ac694
mov rdx, rbx
mov rcx, rdi
call fcn.1400ad754
test al, al
je 0x1400ac3e0
mov ecx, 0x5f5
call fcn.1400900b8
mov rcx, rax
call fcn.1400d4924
mov edx, 1
lea rcx, [0x14019bd38]
call fcn.14006968c
jmp 0x1400ac694
mov r8, r15
mov rdx, rbx
mov rcx, rdi
call fcn.1400ace84
test al, al
je 0x1400ac6b9
mov rcx, r15
call fcn.1401039a8
mov edx, 0x10000
lea rcx, [rsp + 0x30]
call fcn.140004908
nop
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
mov rdx, rbx
mov rcx, rdi
call fcn.1400adcdc
mov qword [rsp + 0x28], rax
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
mov r15, rax
test rax, rax
jne 0x1400ac44a
lea rcx, [rsp + 0x30]
call fcn.14000a088
jmp 0x1400ac6b9
mov byte [rsp + 0x20], r12b
mov r13b, r12b
xor edx, edx
lea r8d, [rdx + 3]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r12, rax
xor edx, edx
test rax, rax
je 0x1400ac556
movzx eax, word [rbp + 0x1fc0]
test ax, ax
je 0x1400ac4d4
mov r9, r15
lea r8, [0x1400ad0c0]
mov edx, 3
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r9, r15
lea r8, [0x1400ad0c0]
mov edx, 0xe
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rbp + 0x1fc0]
mov rdx, r15
mov rcx, rdi
call fcn.1400ac938
mov cl, al
mov byte [rsp + 0x20], al
movzx eax, word [rbp + 0x1fc0]
xor edx, edx
jmp 0x1400ac4d6
mov cl, dl
cmp word [rbp + 0xfc0], dx
je 0x1400ac54d
test ax, ax
je 0x1400ac4e8
test cl, cl
je 0x1400ac54d
lea rdx, [0x1401319d8]
lea rcx, [rbp + 0xfc0]
call fcn.14007e954
mov r9, r15
lea r8, [0x1400ad0c0]
mov rcx, r12
test al, al
je 0x1400ac52b
mov edx, 2
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
lea r8, [rbp + 0xfc0]
mov rdx, r15
mov rcx, rdi
call fcn.1400ac7ac
jmp 0x1400ac54a
lea rdx, [0x1401319e0]
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
lea r8, [rbp + 0xfc0]
mov rdx, r15
mov rcx, rdi
call fcn.1400acb98
mov r13b, al
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor edx, edx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
xor r12d, r12d
test eax, eax
je 0x1400ac43b
cmp word [rbp + 0xfc0], r12w
je 0x1400ac57f
test r13b, r13b
je 0x1400ac43b
cmp byte [rsp + 0x20], r12b
jne 0x1400ac598
test r13b, r13b
jne 0x1400ac598
cmp byte [r14 + 0xa52a], r12b
je 0x1400ac623
cmp byte [r14 + 0xa52a], r12b
je 0x1400ac5ac
mov rdx, rsi
mov rcx, rdi
call fcn.1400acf30
mov qword [rbp + 0xf80], r12
mov qword [rbp + 0xf88], r12
mov qword [rbp + 0xf90], r12
xor r8d, r8d
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.140070b8c
mov r14, qword [rsp + 0x28]
test al, al
je 0x1400ac610
mov rcx, qword [rbp + 0xf70]
add rcx, r14
mov r15d, 0x200000
cmp rcx, r15
jbe 0x1400ac610
mov ecx, 0x5a0
call fcn.1400900b8
mov rdx, rax
mov r8d, r15d
lea rcx, [0x14017edfa]
call fcn.1400d51d4
jmp 0x1400ac43b
mov r8d, 0x800
mov rdx, rsi
mov rcx, rbx
call fcn.140096188
jmp 0x1400ac628
mov r14, qword [rsp + 0x28]
test r14, r14
je 0x1400ac68a
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
call fcn.1400adcdc
test rax, rax
jne 0x1400ac68a
lea rdx, [0x1401319e8]
mov rcx, rsi
call fcn.1400cf630
mov rbx, rax
test rax, rax
je 0x1400ac68a
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rax
call fcn.140107cc0
mov r9, rbx
mov r8, r14
mov edx, 1
mov rcx, qword [rsp + 0x30]
call fcn.140103d74
mov rcx, rbx
call fcn.1401039a8
nop
lea rcx, [rsp + 0x30]
call fcn.14000a088
cmp word [rsi], r12w
je 0x1400ac6b9
mov rcx, qword [rdi]
mov rbx, qword [rcx + 8]
mov rcx, rbx
call qword [fcn.1400fd560]
mov r8d, 4
mov rdx, rsi
mov rcx, rdi
call rbx
nop
mov rax, rdi
mov rcx, qword [rbp + 0x2fc0]
xor rcx, rsp
call fcn.1400fc4d0
mov rbx, qword [rsp + 0x3120]
add rsp, 0x30d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret