Function at 0x14007cdd8
Capabilities:
Write file on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x30c0
call fcn.1400d8110
sub rsp, rax
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rsp + 0x3110], rbx
mov rax, qword [0x1401006f0]
xor rax, rsp
mov qword [rsp + 0x30b0], rax
mov r12, rdx
mov rdi, rcx
mov qword [rsp + 0x50], rcx
call fcn.14003abdc
nop
xor r13d, r13d
mov byte [rdi + 0x3038], r13b
mov ebx, 0x800
mov r9, rbx
lea r8, [rsp + 0x10b0]
lea rdx, [rsp + 0x20b0]
lea rcx, [0x14015a270]
call fcn.14008223c
lea r11, [r12 + 0x83e2]
cmp word [r11], r13w
je 0x14007ce7f
lea rcx, [rsp + 0x20b0]
sub rcx, r11
movzx eax, word [r11]
mov word [rcx + r11], ax
add r11, 2
cmp ax, r13w
jne 0x14007ce6c
lea rcx, [r12 + 0x93e2]
cmp word [rcx], r13w
je 0x14007cea9
lea rdx, [rsp + 0x10b0]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rdx + rcx], ax
add rcx, 2
cmp ax, r13w
jne 0x14007ce98
lea rbp, [r12 + 0x1018]
mov rcx, rbp
call fcn.1400615e8
mov rcx, rax
mov r8d, 6
lea rdx, str.WinCon
call fcn.1400883f8
cmp eax, r13d
jne 0x14007cee1
movzx eax, r13w
mov word [rsp + 0x10b0], ax
jmp 0x14007cee9
mov ax, word [rsp + 0x10b0]
mov word [rdi + 0x1030], r13w
cmp word [rbp], r13w
je 0x14007d2cc
cmp word [rsp + 0x20b0], r13w
jne 0x14007cf1b
cmp ax, r13w
jne 0x14007cf1b
cmp byte [r12 + 0xa3e2], r13b
je 0x14007d2cc
mov rcx, rbp
call fcn.14003c3d4
cmp al, r13b
je 0x14007d2cc
mov rcx, rbp
lea rdx, [rdi + 0x2030]
sub rdx, rbp
movzx eax, word [rcx]
mov word [rdx + rcx], ax
add rcx, 2
cmp ax, r13w
jne 0x14007cf39
mov qword [rdi + 0x3030], rbp
mov r8, rbx
lea rdx, [rdi + 0x1030]
lea rcx, str.Rar_SF
call fcn.1400a279c
mov rbx, rax
cmp rax, r13
je 0x14007d2ac
mov rdx, rbp
mov rcx, rdi
call fcn.14007a4e0
cmp al, r13b
je 0x14007cfab
mov ecx, 0x5f5
call fcn.140076080
mov rcx, rax
call fcn.1400b189c
mov edx, 1
lea rcx, [0x140134b90]
call fcn.140033020
jmp 0x14007d2ac
mov r8, rbx
mov rdx, rbp
mov rcx, rdi
call fcn.14007a5ac
cmp al, r13b
je 0x14007d2cc
mov rcx, rbx
call fcn.1400c8d40
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov edx, 0x10000
lea rcx, [rsp + 0x30]
call fcn.14000bf10
nop
mov r9, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov r8, rbx
mov rdx, rbp
mov rcx, rdi
call fcn.14007a65c
mov qword [rsp + 0x28], rax
xor edx, edx
lea rcx, [rdi + 0x1030]
call qword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
mov r15, rax
cmp rax, r13
jne 0x14007d038
cmp rbx, r13
je 0x14007d2cc
mov rcx, rbx
call fcn.1400c7040
jmp 0x14007d2cc
mov byte [rsp + 0x20], r13b
mov r14b, r13b
xor edx, edx
lea r8d, [rdx + 3]
lea rcx, [rdi + 0x1030]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r13, rax
xor edx, edx
cmp rax, rdx
je 0x14007d11b
movzx eax, word [rsp + 0x20b0]
cmp ax, dx
je 0x14007d0c9
mov r9, r15
lea r8, [0x14007a4c0]
mov edx, 3
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r9, r15
lea r8, [0x14007a4c0]
mov edx, 0xe
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r9d, reloc.SHELL32.dll_SHRestricted
lea r8, [rsp + 0x20b0]
mov rdx, r15
mov rcx, rdi
call fcn.14007a124
mov cl, al
mov byte [rsp + 0x20], al
mov ax, word [rsp + 0x20b0]
xor edx, edx
jmp 0x14007d0cb
mov cl, dl
cmp word [rsp + 0x10b0], dx
je 0x14007d112
cmp ax, dx
je 0x14007d0de
cmp cl, dl
je 0x14007d112
mov r9, r15
lea r8, [0x14007a4c0]
mov edx, 2
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r9d, 0x65
lea r8, [rsp + 0x10b0]
mov rdx, r15
mov rcx, rdi
call fcn.14007a35c
mov r14b, al
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor edx, edx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
xor r13d, r13d
cmp eax, r13d
je 0x14007d29d
cmp word [rsp + 0x10b0], r13w
je 0x14007d146
cmp r14b, r13b
je 0x14007d29d
cmp byte [rsp + 0x20], r13b
jne 0x14007d160
cmp r14b, r13b
jne 0x14007d160
cmp byte [r12 + 0xa3e2], r13b
je 0x14007d223
cmp byte [r12 + 0xa3e2], r13b
je 0x14007d179
lea rdx, [rdi + 0x1030]
mov rcx, rdi
call fcn.14007a808
lea rcx, [rsp + 0x1070]
call fcn.140083b0c
lea rcx, [rsp + 0x1078]
call fcn.140083b0c
lea rcx, [rsp + 0x1080]
call fcn.140083b0c
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [rdi + 0x1030]
call fcn.140040978
cmp al, r13b
je 0x14007d207
mov rcx, qword [rsp + 0x1060]
mov r12, qword [rsp + 0x28]
add rcx, r12
mov r14d, 0x100000
cmp rcx, r14
jbe 0x14007d20c
mov ecx, 0x5a0
call fcn.140076080
mov rdx, rax
mov r8d, r14d
lea rcx, [0x140166802]
call fcn.1400b1ef4
nop
cmp rbx, r13
je 0x14007d2cc
mov rcx, rbx
call fcn.1400c7040
jmp 0x14007d2cc
mov r12, qword [rsp + 0x28]
mov r8d, 0x800
lea rdx, [rdi + 0x1030]
mov rcx, rbp
call fcn.1400805a0
jmp 0x14007d228
mov r12, qword [rsp + 0x28]
cmp r12, r13
je 0x14007d28e
mov r9, qword [rsp + 0x38]
mov r8, rbx
lea rdx, [rdi + 0x1030]
mov rcx, rdi
call fcn.14007a65c
cmp rax, r13
jne 0x14007d28e
lea rdx, [0x1400e6de0]
lea rcx, [rdi + 0x1030]
call fcn.1400a2760
mov rbp, rax
cmp rax, r13
je 0x14007d28e
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rax
call fcn.1400ca200
mov r9, rbp
mov r8, r12
mov edx, 1
mov rcx, rbx
call fcn.1400c8f54
mov rcx, rbp
call fcn.1400c8d40
nop
cmp rbx, r13
je 0x14007d2ac
mov rcx, rbx
call fcn.1400c7040
jmp 0x14007d2ac
cmp rbx, r13
je 0x14007d2cc
mov rcx, rbx
call fcn.1400c7040
jmp 0x14007d2cc
cmp word [rdi + 0x1030], r13w
je 0x14007d2cc
mov r8d, 4
lea rdx, [rdi + 0x1030]
mov rcx, rdi
call fcn.14003ac20
nop
mov rax, rdi
mov rcx, qword [rsp + 0x30b0]
xor rcx, rsp
call fcn.1400c6350
mov rbx, qword [rsp + 0x3110]
add rsp, 0x30c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret