Function at 0x4a0300
Capabilities:
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4fb636
mov eax, dword fs:[0]
push eax
mov eax, 0x3074
call fcn.004e3510
mov eax, dword [0x514bc0]
xor eax, esp
mov dword [esp + 0x3070], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x514bc0]
xor eax, esp
push eax
lea eax, [esp + 0x3088]
mov dword fs:[0], eax
mov esi, dword [esp + 0x3098]
mov ebx, ecx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x1c], esi
call fcn.004426b0
mov dword [esp + 0x3090], 0
push 0x800
lea eax, [esp + 0x1088]
push eax
lea ecx, [esp + 0x208c]
push ecx
mov ecx, 0x5496f0
mov byte [ebx + 0x3028], 0
call fcn.004a1ae0
cmp word [esi + 0x83c2], 0
lea eax, [esi + 0x83c2]
je 0x4a03af
lea edx, [esp + 0x2084]
sub edx, eax
nop
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4a03a0
cmp word [esi + 0x93c2], 0
lea eax, [esi + 0x93c2]
je 0x4a03df
lea edx, [esp + 0x1084]
sub edx, eax
jmp 0x4a03d0
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4a03d0
push 6
lea ebp, [esi + 0x1010]
push str.WinCon
push ebp
mov dword [esp + 0x3c], ebp
call fcn.00451a10
push eax
call fcn.0046a970
test eax, eax
jne 0x4a040a
xor edx, edx
mov word [esp + 0x1084], dx
xor eax, eax
mov word [ebx + 0x1024], ax
cmp word [ebp], ax
je 0x4a072b
cmp word [esp + 0x2084], ax
jne 0x4a043d
cmp word [esp + 0x1084], ax
jne 0x4a043d
cmp byte [esi + 0xa3c2], al
je 0x4a072b
push ebp
call fcn.00443cc0
test al, al
je 0x4a072b
lea edx, [ebx + 0x2024]
mov eax, ebp
sub edx, ebp
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4a0455
push 0x800
lea edi, [ebx + 0x1024]
push edi
push str.Rar_SF
mov dword [ebx + 0x3024], ebp
call fcn.004b14c0
mov esi, eax
test esi, esi
je 0x4a070f
push ebp
mov ecx, ebx
call fcn.0049d8a0
test al, al
je 0x4a04ba
push 0x5f5
call fcn.00461b20
push eax
call fcn.004bf990
add esp, 4
push 1
mov ecx, 0x52c138
call fcn.0043da40
jmp 0x4a070f
push esi
push ebp
mov ecx, ebx
call fcn.0049d950
test al, al
je 0x4a072b
push esi
call fcn.004e4b91
add esp, 4
push 0x10000
lea ecx, [esp + 0x24]
call fcn.00401d20
mov byte [esp + 0x3090], 1
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
push ecx
push edx
push ebp
mov ecx, ebx
call fcn.0049da00
push 0
push edi
mov dword [esp + 0x20], eax
call dword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
mov esi, eax
test esi, esi
je 0x4a0677
push 3
push 0
push edi
mov byte [esp + 0x22], 0
mov byte [esp + 0x23], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edi, eax
test edi, edi
je 0x4a05b8
cmp word [esp + 0x2084], 0
mov ebp, dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
je 0x4a056f
push esi
push 0x49d870
push 3
push edi
call ebp
push esi
push 0x49d870
push 0xe
push edi
call ebp
push 0x64
lea eax, [esp + 0x2088]
push eax
push esi
mov ecx, ebx
call fcn.0049d530
mov byte [esp + 0x16], al
cmp word [esp + 0x1084], 0
je 0x4a05ad
cmp word [esp + 0x2084], 0
je 0x4a058c
cmp byte [esp + 0x16], 0
je 0x4a05ad
push esi
push 0x49d870
push 2
push edi
call ebp
push 0x65
lea ecx, [esp + 0x1088]
push ecx
push esi
mov ecx, ebx
call fcn.0049d730
mov byte [esp + 0x17], al
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ebp, dword [esp + 0x30]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
test eax, eax
je 0x4a0677
cmp word [esp + 0x1084], 0
je 0x4a05df
cmp byte [esp + 0x17], 0
je 0x4a0677
cmp byte [esp + 0x16], 0
jne 0x4a05fe
cmp byte [esp + 0x17], 0
jne 0x4a05fe
mov edx, dword [esp + 0x1c]
cmp byte [edx + 0xa3c2], 0
je 0x4a06a5
mov eax, dword [esp + 0x1c]
cmp byte [eax + 0xa3c2], 0
je 0x4a0619
lea eax, [ebx + 0x1024]
push eax
mov ecx, ebx
call fcn.0049dbc0
lea ecx, [esp + 0x3c]
call fcn.004036c0
push 0
lea ecx, [esp + 0x40]
push ecx
lea esi, [ebx + 0x1024]
push esi
call fcn.004458a0
test al, al
je 0x4a0699
mov eax, dword [esp + 0x18]
xor edx, edx
add eax, dword [esp + 0x103c]
adc edx, dword [esp + 0x1040]
mov dword [esp + 0x34], edx
jne 0x4a065a
cmp eax, 0x100000
jbe 0x4a0699
push 0x100000
push 0x5a0
call fcn.00461b20
push eax
push 0x555ba2
call fcn.004bfeb0
add esp, 0xc
mov byte [esp + 0x3090], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4a072b
push eax
call fcn.004e3342
add esp, 4
jmp 0x4a072b
push 0x800
push esi
push ebp
call fcn.00467570
cmp dword [esp + 0x18], 0
mov edi, dword [esp + 0x20]
je 0x4a06fa
mov eax, dword [esp + 0x24]
push eax
push edi
lea esi, [ebx + 0x1024]
push esi
mov ecx, ebx
call fcn.0049da00
test eax, eax
jne 0x4a06fa
push 0x502884
push esi
call fcn.004b1490
mov esi, eax
test esi, esi
je 0x4a06fa
push 2
push 0
push esi
call fcn.004e5058
mov ecx, dword [esp + 0x24]
push esi
push ecx
push 1
push edi
call fcn.004e8056
push esi
call fcn.004e4b91
add esp, 0x20
mov byte [esp + 0x3090], 0
test edi, edi
je 0x4a070f
push edi
call fcn.004e3342
add esp, 4
cmp word [ebx + 0x1024], 0
lea eax, [ebx + 0x1024]
je 0x4a072b
mov edx, dword [ebx]
push 4
push eax
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
mov dword [esp + 0x3090], 0xffffffff
mov eax, ebx
mov ecx, dword [esp + 0x3088]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x3070]
xor ecx, esp
call fcn.004e34f4
add esp, 0x3080
ret 4