Function at 0x40a460
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x4e78
call fcn.004395f0
sub rsp, rax
mov rdi, qword [rsp + 0x4ee8]
xor r13d, r13d
mov rax, r8
cmp rdi, r13
mov r15, rcx
je 0x40a4da
cmp qword [rdi], r13
je 0x40a4da
cmp dword [rdi + 0x14], r13d
mov esi, r13d
jle 0x40a4d6
mov rbx, r13
mov rcx, qword [rdi]
mov rcx, qword [rbx + rcx]
call fcn.004171d0
mov r11, qword [rdi]
add esi, 1
mov qword [rbx + r11], r13
add rbx, 8
cmp esi, dword [rdi + 0x14]
jl 0x40a4af
mov rax, qword [rsp + 0x4ed0]
mov dword [rdi + 0x14], r13d
mov ebx, 0xffffffff
cmp dword [rax], ebx
jne 0x40aad7
mov esi, 0x400
lea rdx, str.Archive_File_Type
mov r9, rdi
mov rcx, r15
mov r8d, esi
mov ebp, r13d
call fcn.0040a230
cmp rax, r13
mov r12, rax
je 0x40aacb
mov rcx, rax
call fcn.00417420
cmp rax, r13
je 0x40aacb
mov rcx, r12
call fcn.00418e40
lea rdx, str.Archive_File_Path
mov r9, rdi
mov r8d, esi
mov rcx, r15
mov r14d, eax
mov dword [rsp + 0x4ee8], eax
call fcn.0040a230
lea rcx, str.jwArcSpBlock_
mov rbx, rax
call fcn.00417420
mov rcx, rbx
mov rsi, rax
call fcn.00417420
cmp rax, rsi
jb 0x40a5a3
lea rcx, str.jwArcSpBlock_
mov r8, rsi
mov rdx, rbx
call fcn.004189c0
cmp eax, r13d
jne 0x40a5a3
lea rcx, str._Unarchiver__Found_special_block__s_n
mov rdx, rbx
call fcn.0040bfd4
lea rcx, [rsi + rbx]
lea rdx, str.DigitalSignature1
call fcn.004196f0
test eax, eax
sete r13b
mov rcx, rbx
call fcn.00417420
lea rcx, [rax + 1]
call fcn.00417210
mov rdx, rbx
mov rcx, rax
mov rsi, rax
mov byte [rax], bpl
call fcn.00417580
mov r11, rsi
movsx eax, byte [r11]
cmp eax, 0x2f
jne 0x40a5d5
mov byte [r11], 0x5c
add r11, 1
test eax, eax
jne 0x40a5c8
lea rcx, str._Unarchiver__Extracting__s__::_ld_from__s__n
mov r9, r12
mov r8d, r14d
mov rdx, rsi
call fcn.0040bfd4
mov rbx, qword [rsp + 0x4ec8]
lea rcx, [rsp + 0x30]
xor r12d, r12d
mov rdx, rbx
mov byte [rsp + 0x30], r12b
call fcn.004174e0
lea rcx, [rsp + 0x30]
mov rdx, rsi
call fcn.0040bf34
lea rcx, [rsp + 0x2750]
mov rdx, rsi
mov byte [rsp + 0x2750], r12b
call fcn.004174e0
cmp r14d, 2
jne 0x40a65f
lea rdx, [0x00451d8c]
lea rcx, [rsp + 0x30]
call fcn.004174e0
lea rdx, [0x00451d8c]
lea rcx, [rsp + 0x2750]
call fcn.004174e0
lea rcx, [rsp + 0x3ae0]
mov rdx, rbx
mov byte [rsp + 0x3ae0], r12b
call fcn.004174e0
lea rcx, [rsp + 0x3ae0]
mov rdx, rsi
call fcn.0040bf34
lea rcx, [rsp + 0x13c0]
mov rdx, rbx
mov byte [rsp + 0x13c0], r12b
call fcn.004174e0
lea rdx, [0x00451d90]
lea rcx, [rsp + 0x13c0]
call fcn.0040bf34
lea rcx, [rsp + 0x13c0]
call fcn.00417420
mov rcx, rsi
mov rbx, rax
call fcn.00417420
movsxd rcx, ebx
test eax, eax
mov qword [rsp + 0x20], rcx
movsxd r14, eax
jle 0x40a710
lea rbx, [rsp + rcx + 0x13c0]
cmp byte [r12 + rsi], 0x5c
jne 0x40a6fa
lea rcx, [rsp + 0x13c0]
mov byte [rbx + r12], bpl
call fcn.0040beec
mov al, byte [r12 + rsi]
mov byte [rbx + r12], al
add r12, 1
cmp r12, r14
jl 0x40a6e2
mov rcx, qword [rsp + 0x20]
lea rax, [r14 + rcx]
mov rcx, rsi
mov byte [rsp + rax + 0x13c0], bpl
call fcn.004171d0
mov r12d, dword [rsp + 0x4ee8]
cmp r12d, 1
jne 0x40a767
lea rcx, [rsp + 0x30]
call fcn.0040beec
lea rcx, str._t_Unarchiver__Created_folder__s_n
lea rdx, [rsp + 0x2750]
call fcn.0040bfd4
mov rdx, qword [rsp + 0x4ee0]
mov rcx, rdi
call fcn.0040a3ac
xor eax, eax
jmp 0x40aad9
mov esi, 0x28
lea rdx, str.Archive_File_Length
mov r9, rdi
mov r8d, esi
mov rcx, r15
call fcn.0040a230
test rax, rax
jne 0x40a7af
lea ebx, [rsi - 0x29]
test r13d, r13d
je 0x40a808
lea rdx, str.Signature_Length
xor r9d, r9d
mov r8d, esi
mov rcx, r15
call fcn.0040a230
test rax, rax
jne 0x40a7c9
mov eax, 0xffffffff
jmp 0x40a7d1
mov rcx, rax
call fcn.00418e40
test eax, eax
mov ebx, eax
jne 0x40a789
lea rcx, str._t_Unarchiver__Skipping_empty_file__s_n
jmp 0x40a743
mov rcx, rax
call fcn.00418e40
mov rcx, qword [rsp + 0x4ed0]
lea rdx, str.Signature_Hex
xor r9d, r9d
mov dword [rcx], eax
mov rcx, r15
mov r8d, 0x1000
call fcn.0040a230
mov rcx, qword [rsp + 0x4ed8]
mov qword [rcx], rax
mov eax, 0xffffffff
jmp 0x40aad9
mov r13, qword [rsp + 0x4ee0]
mov rcx, rdi
mov rdx, r13
call fcn.0040a3ac
lea rcx, [rsp + 0x30]
call fcn.00417420
cmp eax, 4
jl 0x40a91b
cdqe
cmp byte [rsp + rax + 0x2b], 0x70
jne 0x40a91b
cmp byte [rsp + rax + 0x2c], 0x32
jne 0x40a91b
cmp byte [rsp + rax + 0x2d], 0x2e
jne 0x40a91b
cmp byte [rsp + rax + 0x2e], 0x6c
jne 0x40a91b
cmp byte [rsp + rax + 0x2f], 0x32
jne 0x40a91b
lea rcx, str._t_Unarchiver__.p2.l2_detected._Performing_in_sync_unarchive._n
call fcn.0040bfd4
mov edx, 0x100000
mov ecx, 5
call fcn.00407dec
mov rdx, qword [rsp + 0x4ec8]
mov rcx, rax
mov r14, rax
call fcn.00409f14
test ebx, ebx
mov qword [rsp + 0x4ed0], rax
jle 0x40a8fb
mov r12, qword [rsp + 0x4ef0]
mov r8d, ebx
mov rdx, r12
mov rcx, r15
sub r8d, ebp
call fcn.00408208
cmp eax, 0xffffffff
mov esi, eax
je 0x40a8eb
mov r8d, eax
mov rdx, r12
mov rcx, r14
call fcn.00407efc
test r13, r13
je 0x40a8e5
add dword [rdi + 0x18], esi
mov r8d, esi
mov rdx, r12
mov rcx, r13
call fcn.00401000
add ebp, esi
cmp ebp, ebx
jl 0x40a8a9
mov rax, qword [rsp + 0x4ed0]
mov r12d, dword [rsp + 0x4ee8]
mov rcx, qword [rax + 8]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rcx, str._t_Unarchiver__.p2.l2_in_sync_unarchive_complete._n
call fcn.0040bfd4
jmp 0x40a9e0
lea rdx, [0x0044c8f0]
lea rcx, [rsp + 0x30]
call fcn.00418fe0
lea rdx, [rsp + 0x2750]
lea rcx, str._t_Unarchiver__Extracting_to_file__s__length:_ld__n
mov r8d, ebx
mov rsi, rax
call fcn.0040bfd4
test rsi, rsi
jne 0x40a960
lea rcx, str._t_Unarchiver___Unable_to_extract_archive_file._Unable_to_open_file_for_writing._n
call fcn.0040bfd4
lea ecx, [rsi + 1]
call fcn.00418900
int3
test ebx, ebx
jle 0x40a9b9
mov r14, qword [rsp + 0x4ef0]
mov r8d, ebx
mov rdx, r14
mov rcx, r15
sub r8d, ebp
call fcn.00408208
mov r9, rsi
mov edx, 1
movsxd r12, eax
mov rcx, r14
mov r8, r12
call fcn.0041ad70
test r13, r13
je 0x40a9aa
add dword [rdi + 0x18], r12d
mov r8d, r12d
mov rdx, r14
mov rcx, r13
call fcn.00401000
add ebp, r12d
cmp ebp, ebx
jl 0x40a96c
mov r12d, dword [rsp + 0x4ee8]
mov rcx, rsi
call fcn.00418dc0
mov rcx, rsi
call fcn.0041b8c0
lea rdx, [rsp + 0x2750]
lea rcx, str._Unarchiver__Extracted__s_length:_d_n
mov r8d, ebx
call fcn.0040bfd4
cmp r12d, 2
jne 0x40a760
lea rcx, str._t_Unarchiver__Requires_unpacking200..._n
call fcn.0040bfd4
cmp dword [0x0046a164], 0
jne 0x40aa17
mov rcx, qword [0x0046a048]
mov dl, 1
call fcn.0040c210
mov dword [0x0046a164], 1
mov rcx, qword [0x0046a048]
call fcn.0040b6c0
test eax, eax
jne 0x40aa3a
mov rdx, qword [0x0046a048]
lea rcx, str._t_Unarchiver__ERROR:_unpack200_executable___s__does_not_exist__n
call fcn.0040bfd4
call fcn.004087a4
mov rdx, qword [0x0046a048]
mov rcx, rax
mov rbx, rax
call fcn.00408814
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.004087dc
lea rdx, [rsp + 0x3ae0]
mov rcx, rbx
call fcn.004087dc
xor edx, edx
mov rcx, rbx
call fcn.0040884c
mov rcx, rbx
call fcn.004171d0
lea rcx, [rsp + 0x3ae0]
call fcn.0040b6c0
test eax, eax
jne 0x40aaa5
lea rdx, [rsp + 0x3ae0]
lea rcx, str._t_Unarchiver__ERROR:_Unpacked_target___s__does_not_exist__n
call fcn.0040bfd4
lea rcx, [rsp + 0x30]
call fcn.00418e50
lea rdx, [rsp + 0x3ae0]
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x30], 0
call fcn.004174e0
jmp 0x40a760
lea rcx, str._Unarchiver__WARNING._EOF_encountered._n
call fcn.0040bfd4
mov eax, ebx
add rsp, 0x4e78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret