Function at 0x467f60
Capabilities:
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4b7ec6
mov eax, dword fs:[0]
push eax
mov eax, 0x24c8
call fcn.004a53e0
mov eax, dword [0x4cc3b0]
xor eax, esp
mov dword [esp + 0x24c4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4cc3b0]
xor eax, esp
push eax
lea eax, [esp + 0x24dc]
mov dword fs:[0], eax
mov esi, dword [esp + 0x24ec]
mov ebx, ecx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x20], esi
call fcn.004302b0
mov dword [esp + 0x24e4], 0
lea eax, [esp + 0x1cd8]
push eax
lea ecx, [esp + 0x14dc]
push ecx
mov ecx, 0x4f23e0
call fcn.0046c620
cmp word [esi + 0x4352], 0
lea eax, [esi + 0x4352]
je 0x468002
lea edx, [esp + 0x14d8]
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x467ff3
cmp word [esi + 0x4b52], 0
lea eax, [esi + 0x4b52]
je 0x46802f
lea edx, [esp + 0x1cd8]
sub edx, eax
jmp 0x468020
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x468020
xor edx, edx
lea ebp, [esi + 0x810]
mov word [ebx + 0xc20], dx
mov dword [esp + 0x24], ebp
cmp word [ebp], dx
je 0x4682c2
cmp word [esp + 0x14d8], dx
jne 0x46806c
cmp word [esp + 0x1cd8], dx
jne 0x46806c
cmp byte [esi + 0x5352], dl
je 0x4682c2
push ebp
call fcn.00431770
test al, al
je 0x4682c2
lea edx, [ebx + 0x1420]
mov eax, ebp
sub edx, ebp
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x468084
lea esi, [ebx + 0xc20]
push esi
push str.Rar_SFXXXXXX
mov dword [ebx + 0x1c20], ebp
call fcn.004855b0
mov edi, eax
test edi, edi
je 0x46836f
call fcn.0043ee10
test eax, eax
je 0x468396
push ebp
call fcn.00464ff0
test al, al
jne 0x468396
push ebp
call fcn.004650a0
test al, al
je 0x4682c2
push edi
call fcn.004a6c75
mov edi, 0x10000
push edi
call fcn.004a4c8c
mov ebx, eax
add esp, 8
mov dword [esp + 0x2c], ebx
test ebx, ebx
jne 0x468105
mov ecx, 0x4d76b4
call fcn.00429090
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
mov byte [esp + 0x24e4], 1
push edi
push ebp
mov ecx, ebx
call fcn.00465150
push 0
push esi
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
mov esi, eax
test esi, esi
je 0x4682a9
mov eax, dword [esp + 0x18]
push 3
push 0
add eax, 0xc20
push eax
mov byte [esp + 0x23], 0
mov byte [esp + 0x22], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edi, eax
test edi, edi
je 0x4681dd
cmp word [esp + 0x14d8], 0
mov ebp, dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
je 0x468197
push esi
push 0x464fb0
push 3
push edi
call ebp
push esi
push 0x464fb0
push 0xe
push edi
call ebp
push 0x64
push esi
lea eax, [esp + 0x14e0]
call fcn.00464c80
mov byte [esp + 0x17], al
cmp word [esp + 0x1cd8], 0
je 0x4681d2
cmp word [esp + 0x14d8], 0
je 0x4681b4
cmp byte [esp + 0x17], 0
je 0x4681d2
push esi
push 0x464fb0
push 2
push edi
call ebp
push 0x65
push esi
lea eax, [esp + 0x1ce0]
call fcn.00464e70
mov byte [esp + 0x16], al
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ebp, dword [esp + 0x24]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
test eax, eax
je 0x4682a9
cmp word [esp + 0x1cd8], 0
je 0x468204
cmp byte [esp + 0x16], 0
je 0x4682a9
cmp byte [esp + 0x17], 0
jne 0x468223
cmp byte [esp + 0x16], 0
jne 0x468223
mov eax, dword [esp + 0x20]
cmp byte [eax + 0x5352], 0
je 0x468305
mov ecx, dword [esp + 0x20]
cmp byte [ecx + 0x5352], 0
je 0x46823f
mov eax, dword [esp + 0x18]
add eax, 0xc20
push eax
call fcn.00465310
lea ecx, [esp + 0x38]
call fcn.00401190
mov esi, dword [esp + 0x18]
push 0
lea edx, [esp + 0x3c]
push edx
add esi, 0xc20
push esi
push 0
call fcn.00435440
test al, al
je 0x4682f9
mov eax, dword [esp + 0x1c]
xor ecx, ecx
add eax, dword [esp + 0xc38]
adc ecx, dword [esp + 0xc3c]
mov dword [esp + 0x28], ecx
js 0x4682f9
jg 0x46828c
cmp eax, 0x100000
jbe 0x4682f9
push 0x100000
push 0x5a0
call fcn.004612e0
push eax
push 0x4f907c
call fcn.00493af0
add esp, 0xc
mov byte [esp + 0x24e4], 0
test ebx, ebx
je 0x4682be
push ebx
call fcn.004a4d4f
add esp, 4
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x24e4], 0xffffffff
mov eax, ebx
mov ecx, dword [esp + 0x24dc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x24c4]
xor ecx, esp
call fcn.004a4bb3
add esp, 0x24d4
ret 4
push 0x400
push esi
push ebp
call fcn.0046ac00
mov edi, dword [esp + 0x1c]
test edi, edi
je 0x468356
mov esi, dword [esp + 0x18]
push 0x10000
add esi, 0xc20
push esi
mov ecx, ebx
call fcn.00465150
test eax, eax
jne 0x468356
push 0x4be48c
push esi
call fcn.00485580
mov esi, eax
test esi, esi
je 0x468356
push 2
push 0
push esi
call fcn.004a6b7e
push esi
push edi
push 1
push ebx
call fcn.004a6ea4
push esi
call fcn.004a6c75
add esp, 0x20
mov byte [esp + 0x24e4], 0
test ebx, ebx
je 0x46836b
push ebx
call fcn.004a4d4f
add esp, 4
mov ebx, dword [esp + 0x18]
cmp word [ebx + 0xc20], 0
lea eax, [ebx + 0xc20]
je 0x4682c2
push 0
push 1
push eax
push 0
mov ecx, ebx
call fcn.004306f0
jmp 0x4682c2
cmp word [esp + 0x14d8], 0
je 0x46836f
lea edx, [esp + 0x14d8]
push edx
push edi
push ebp
mov ecx, ebx
call fcn.004671b0
test al, al
je 0x46836f
push 0x400
push esi
push ebp
call fcn.0046ac00
push edi
call fcn.004a6c75
add esp, 4
jmp 0x46836f