Function at 0x1400689a8
Capabilities:
Write file on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x2520
call fcn.1400ba8b0
sub rsp, rax
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rsp + 0x2570], rbx
mov rax, qword [0x1400e0920]
xor rax, rsp
mov qword [rsp + 0x2510], rax
mov r12, rdx
mov rbp, rcx
mov qword [rsp + 0x58], rcx
call fcn.14002fd88
nop
lea r8, [rsp + 0x1d10]
lea rdx, [rsp + 0x1510]
lea rcx, [0x140107960]
call fcn.14006cd68
lea r11, [r12 + 0x432a]
xor r13d, r13d
cmp word [r11], r13w
je 0x140068a40
lea rcx, [rsp + 0x1510]
sub rcx, r11
movzx eax, word [r11]
mov word [rcx + r11], ax
add r11, 2
cmp ax, r13w
jne 0x140068a2d
lea rcx, [r12 + 0x4b2a]
cmp word [rcx], r13w
je 0x140068a6a
lea rdx, [rsp + 0x1d10]
sub rdx, rcx
movzx eax, word [rcx]
mov word [rdx + rcx], ax
add rcx, 2
cmp ax, r13w
jne 0x140068a59
mov word [rbp + 0xc28], r13w
lea rsi, [r12 + 0x810]
cmp word [rsi], r13w
je 0x140068e60
cmp word [rsp + 0x1510], r13w
jne 0x140068aa8
cmp word [rsp + 0x1d10], r13w
jne 0x140068aa8
cmp byte [r12 + 0x532a], r13b
je 0x140068e60
mov rcx, rsi
call fcn.140031110
cmp al, r13b
je 0x140068e60
mov rcx, rsi
lea rdx, [rbp + 0x1428]
sub rdx, rsi
movzx eax, word [rcx]
mov word [rdx + rcx], ax
add rcx, 2
cmp ax, r13w
jne 0x140068ac6
mov qword [rbp + 0x1c28], rsi
lea rdx, [rbp + 0xc28]
lea rcx, str.Rar_SFXXXXXX
call fcn.140086b88
mov rbx, rax
cmp rax, r13
je 0x140068e3c
call fcn.14003ec88
cmp eax, r13d
je 0x140068df9
mov rcx, rsi
call fcn.1400657a0
cmp al, r13b
jne 0x140068df9
mov rdx, rbx
mov rcx, rsi
call fcn.140065854
cmp al, r13b
je 0x140068e60
mov rcx, rbx
call fcn.1400aa410
mov edx, 0x10000
lea rcx, [rsp + 0x40]
call fcn.14000b858
nop
mov r8, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
mov rdx, rbx
mov rcx, rsi
call fcn.140065900
mov qword [rsp + 0x38], rax
xor edx, edx
lea rcx, [rbp + 0xc28]
call qword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
mov r15, rax
cmp rax, r13
jne 0x140068b8f
cmp rbx, r13
je 0x140068e60
mov rcx, rbx
call fcn.1400a86a4
jmp 0x140068e60
mov byte [rsp + 0x30], r13b
mov r14b, r13b
xor edx, edx
lea r8d, [rdx + 3]
lea rcx, [rbp + 0xc28]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r13, rax
xor edx, edx
cmp rax, rdx
je 0x140068c6c
movzx eax, word [rsp + 0x1510]
cmp ax, dx
je 0x140068c1d
mov r9, r15
lea r8, [0x140065780]
mov edx, 3
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r9, r15
lea r8, [0x140065780]
mov edx, 0xe
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r8d, 0x64
lea rdx, [rsp + 0x1510]
mov rcx, r15
call fcn.140065414
mov cl, al
mov byte [rsp + 0x30], al
mov ax, word [rsp + 0x1510]
xor edx, edx
jmp 0x140068c1f
mov cl, dl
cmp word [rsp + 0x1d10], dx
je 0x140068c63
cmp ax, dx
je 0x140068c32
cmp cl, dl
je 0x140068c63
mov r9, r15
lea r8, [0x140065780]
mov edx, 2
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov r8d, 0x65
lea rdx, [rsp + 0x1d10]
mov rcx, r15
call fcn.14006563c
mov r14b, al
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor edx, edx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
xor r13d, r13d
cmp eax, r13d
je 0x140068dea
cmp word [rsp + 0x1d10], r13w
je 0x140068c97
cmp r14b, r13b
je 0x140068dea
cmp byte [rsp + 0x30], r13b
jne 0x140068cb1
cmp r14b, r13b
jne 0x140068cb1
cmp byte [r12 + 0x532a], r13b
je 0x140068d73
cmp byte [r12 + 0x532a], r13b
je 0x140068cc7
lea rcx, [rbp + 0xc28]
call fcn.140065a34
lea rcx, [rsp + 0xc84]
call fcn.14006e1b0
lea rcx, [rsp + 0xca8]
call fcn.14006e1b0
lea rcx, [rsp + 0xccc]
call fcn.14006e1b0
xor r9d, r9d
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0xc28]
xor ecx, ecx
call fcn.140034930
cmp al, r13b
je 0x140068d57
mov rcx, qword [rsp + 0xc70]
mov r12, qword [rsp + 0x38]
add rcx, r12
mov r14d, 0x100000
cmp rcx, r14
jbe 0x140068d5c
mov ecx, 0x5a0
call fcn.140061d2c
mov rdx, rax
mov r8d, r14d
lea rcx, [0x14010e6bc]
call fcn.1400964ac
nop
cmp rbx, r13
je 0x140068e60
mov rcx, rbx
call fcn.1400a86a4
jmp 0x140068e60
mov r12, qword [rsp + 0x38]
mov r8d, 0x400
lea rdx, [rbp + 0xc28]
mov rcx, rsi
call fcn.14006b580
jmp 0x140068d78
mov r12, qword [rsp + 0x38]
cmp r12, r13
je 0x140068ddb
mov r8, qword [rsp + 0x48]
mov rdx, rbx
lea rcx, [rbp + 0xc28]
call fcn.140065900
cmp rax, r13
jne 0x140068ddb
lea rdx, [0x1400c8b90]
lea rcx, [rbp + 0xc28]
call fcn.140086b4c
mov rsi, rax
cmp rax, r13
je 0x140068ddb
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rax
call fcn.1400aa2d4
mov r9, rsi
mov r8, r12
mov edx, 1
mov rcx, rbx
call fcn.1400aa698
mov rcx, rsi
call fcn.1400aa410
nop
cmp rbx, r13
je 0x140068e3c
mov rcx, rbx
call fcn.1400a86a4
jmp 0x140068e3c
cmp rbx, r13
je 0x140068e60
mov rcx, rbx
call fcn.1400a86a4
jmp 0x140068e60
cmp word [rsp + 0x1510], r13w
je 0x140068e3c
lea r9, [rsp + 0x1510]
mov r8, rbx
mov rdx, rsi
mov rcx, rbp
call fcn.140067bd0
cmp al, r13b
je 0x140068e3c
mov r8d, 0x400
lea rdx, [rbp + 0xc28]
mov rcx, rsi
call fcn.14006b580
mov rcx, rbx
call fcn.1400aa410
cmp word [rbp + 0xc28], r13w
je 0x140068e60
mov byte [rsp + 0x20], r13b
mov r9b, 1
lea r8, [rbp + 0xc28]
xor edx, edx
mov rcx, rbp
call fcn.140030198
nop
mov rax, rbp
mov rcx, qword [rsp + 0x2510]
xor rcx, rsp
call fcn.1400a8530
mov rbx, qword [rsp + 0x2570]
add rsp, 0x2520
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret