Function at 0x4675d0
Capabilities:
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4b60b6
mov eax, dword fs:[0]
push eax
mov eax, 0x24c8
call fcn.004a4490
mov eax, dword [0x4ca3b0]
xor eax, esp
mov dword [esp + 0x24c4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ca3b0]
xor eax, esp
push eax
lea eax, [esp + 0x24dc]
mov dword fs:[0], eax
mov esi, dword [esp + 0x24ec]
mov ebx, ecx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x20], esi
call fcn.004300b0
mov dword [esp + 0x24e4], 0
lea eax, [esp + 0x1cd8]
push eax
lea ecx, [esp + 0x14dc]
push ecx
mov ecx, 0x4f03b0
call fcn.0046bc60
cmp word [esi + 0x4322], 0
lea eax, [esi + 0x4322]
je 0x467672
lea edx, [esp + 0x14d8]
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x467663
cmp word [esi + 0x4b22], 0
lea eax, [esi + 0x4b22]
je 0x46769f
lea edx, [esp + 0x1cd8]
sub edx, eax
jmp 0x467690
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x467690
xor edx, edx
lea ebp, [esi + 0x810]
mov word [ebx + 0xc20], dx
mov dword [esp + 0x24], ebp
cmp word [ebp], dx
je 0x467932
cmp word [esp + 0x14d8], dx
jne 0x4676dc
cmp word [esp + 0x1cd8], dx
jne 0x4676dc
cmp byte [esi + 0x5322], dl
je 0x467932
push ebp
call fcn.00431560
test al, al
je 0x467932
lea edx, [ebx + 0x1420]
mov eax, ebp
sub edx, ebp
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4676f4
lea esi, [ebx + 0xc20]
push esi
push str.Rar_SFXXXXXX
mov dword [ebx + 0x1c20], ebp
call fcn.00484930
mov edi, eax
test edi, edi
je 0x4679df
call fcn.0043e920
test eax, eax
je 0x467a06
push ebp
call fcn.004646e0
test al, al
jne 0x467a06
push ebp
call fcn.00464790
test al, al
je 0x467932
push edi
call fcn.004a5d25
mov edi, 0x10000
push edi
call fcn.004a3d3c
mov ebx, eax
add esp, 8
mov dword [esp + 0x2c], ebx
test ebx, ebx
jne 0x467775
mov ecx, 0x4d56b4
call fcn.00428da0
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
mov byte [esp + 0x24e4], 1
push edi
push ebp
mov ecx, ebx
call fcn.00464840
push 0
push esi
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
mov esi, eax
test esi, esi
je 0x467919
mov eax, dword [esp + 0x18]
push 3
push 0
add eax, 0xc20
push eax
mov byte [esp + 0x23], 0
mov byte [esp + 0x22], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edi, eax
test edi, edi
je 0x46784d
cmp word [esp + 0x14d8], 0
mov ebp, dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
je 0x467807
push esi
push 0x4646b0
push 3
push edi
call ebp
push esi
push 0x4646b0
push 0xe
push edi
call ebp
push 0x64
push esi
lea eax, [esp + 0x14e0]
call fcn.00464380
mov byte [esp + 0x17], al
cmp word [esp + 0x1cd8], 0
je 0x467842
cmp word [esp + 0x14d8], 0
je 0x467824
cmp byte [esp + 0x17], 0
je 0x467842
push esi
push 0x4646b0
push 2
push edi
call ebp
push 0x65
push esi
lea eax, [esp + 0x1ce0]
call fcn.00464570
mov byte [esp + 0x16], al
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ebp, dword [esp + 0x24]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
test eax, eax
je 0x467919
cmp word [esp + 0x1cd8], 0
je 0x467874
cmp byte [esp + 0x16], 0
je 0x467919
cmp byte [esp + 0x17], 0
jne 0x467893
cmp byte [esp + 0x16], 0
jne 0x467893
mov eax, dword [esp + 0x20]
cmp byte [eax + 0x5322], 0
je 0x467975
mov ecx, dword [esp + 0x20]
cmp byte [ecx + 0x5322], 0
je 0x4678af
mov eax, dword [esp + 0x18]
add eax, 0xc20
push eax
call fcn.00464970
lea ecx, [esp + 0x38]
call fcn.00401190
mov esi, dword [esp + 0x18]
push 0
lea edx, [esp + 0x3c]
push edx
add esi, 0xc20
push esi
push 0
call fcn.00434fa0
test al, al
je 0x467969
mov eax, dword [esp + 0x1c]
xor ecx, ecx
add eax, dword [esp + 0xc38]
adc ecx, dword [esp + 0xc3c]
mov dword [esp + 0x28], ecx
js 0x467969
jg 0x4678fc
cmp eax, 0x100000
jbe 0x467969
push 0x100000
push 0x5a0
call fcn.00460a30
push eax
push 0x4f701c
call fcn.00492ce0
add esp, 0xc
mov byte [esp + 0x24e4], 0
test ebx, ebx
je 0x46792e
push ebx
call fcn.004a3dff
add esp, 4
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x24e4], 0xffffffff
mov eax, ebx
mov ecx, dword [esp + 0x24dc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x24c4]
xor ecx, esp
call fcn.004a3c63
add esp, 0x24d4
ret 4
push 0x400
push esi
push ebp
call fcn.0046a270
mov edi, dword [esp + 0x1c]
test edi, edi
je 0x4679c6
mov esi, dword [esp + 0x18]
push 0x10000
add esi, 0xc20
push esi
mov ecx, ebx
call fcn.00464840
test eax, eax
jne 0x4679c6
push 0x4bc44c
push esi
call fcn.00484900
mov esi, eax
test esi, esi
je 0x4679c6
push 2
push 0
push esi
call fcn.004a5c2e
push esi
push edi
push 1
push ebx
call fcn.004a5f54
push esi
call fcn.004a5d25
add esp, 0x20
mov byte [esp + 0x24e4], 0
test ebx, ebx
je 0x4679db
push ebx
call fcn.004a3dff
add esp, 4
mov ebx, dword [esp + 0x18]
cmp word [ebx + 0xc20], 0
lea eax, [ebx + 0xc20]
je 0x467932
push 0
push 1
push eax
push 0
mov ecx, ebx
call fcn.004304f0
jmp 0x467932
cmp word [esp + 0x14d8], 0
je 0x4679df
lea edx, [esp + 0x14d8]
push edx
push edi
push ebp
mov ecx, ebx
call fcn.00466820
test al, al
je 0x4679df
push 0x400
push esi
push ebp
call fcn.0046a270
push edi
call fcn.004a5d25
add esp, 4
jmp 0x4679df