Function at 0x4624d0
Capabilities:
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4af0b6
mov eax, dword fs:[0]
push eax
mov eax, 0x18c4
call fcn.0049e650
mov eax, dword [0x4c0390]
xor eax, esp
mov dword [esp + 0x18c0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4c0390]
xor eax, esp
push eax
lea eax, [esp + 0x18d8]
mov dword fs:[0], eax
mov edi, dword [esp + 0x18e8]
mov esi, ecx
mov dword [esp + 0x18], esi
mov dword [esp + 0x2c], edi
call fcn.0042e6a0
mov dword [esp + 0x18e0], 0
lea eax, [esp + 0x14d4]
push eax
lea ecx, [esp + 0x10d8]
push ecx
mov ecx, 0x4e2970
call fcn.004666b0
cmp byte [edi + 0x32a1], 0
lea eax, [edi + 0x32a1]
je 0x46256c
lea edx, [esp + 0x10d4]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x462562
cmp byte [edi + 0x36a1], 0
lea eax, [edi + 0x36a1]
je 0x46258e
lea edx, [esp + 0x14d4]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x462584
lea ebx, [edi + 0x410]
mov byte [esi + 0xc20], 0
cmp byte [ebx], 0
je 0x46269c
cmp byte [esp + 0x10d4], 0
jne 0x4625c5
cmp byte [esp + 0x14d4], 0
jne 0x4625c5
cmp byte [edi + 0x3aa1], 0
je 0x46269c
push 0
push ebx
call fcn.0042f890
test al, al
je 0x46269c
lea edx, [esi + 0x1020]
mov eax, ebx
sub edx, ebx
nop
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4625e0
lea ebp, [esi + 0xc20]
push ebp
push str.Rar_SFXXXXXX
mov dword [esi + 0x1420], ebx
call fcn.0047eb20
mov edi, eax
test edi, edi
je 0x4628cb
call fcn.0043c9b0
test eax, eax
je 0x4628f1
push ebx
call fcn.0045f4d0
test al, al
jne 0x4628f1
push ebx
call fcn.0045f580
test al, al
je 0x46269c
push edi
call fcn.0049f646
mov esi, 0x10000
push esi
call fcn.0049e19f
mov edi, eax
add esp, 8
mov dword [esp + 0x20], edi
test edi, edi
jne 0x462658
mov ecx, 0x4c9364
call fcn.004281d0
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
mov byte [esp + 0x18e0], 1
push esi
push ebx
mov ecx, edi
call fcn.0045f640
push 0
push ebp
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_BeginUpdateResourceA]
mov esi, eax
test esi, esi
jne 0x4626d3
mov byte [esp + 0x18e0], al
test edi, edi
je 0x462698
push edi
call fcn.0049de1d
add esp, 4
mov esi, dword [esp + 0x18]
mov dword [esp + 0x18e0], 0xffffffff
mov eax, esi
mov ecx, dword [esp + 0x18d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18c0]
xor ecx, esp
call fcn.0049e0c6
add esp, 0x18d0
ret 4
push 3
push 0
push ebp
mov byte [esp + 0x23], 0
mov byte [esp + 0x22], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov edi, eax
test edi, edi
je 0x462767
cmp byte [esp + 0x10d4], 0
mov ebp, dword [sym.imp.KERNEL32.dll_EnumResourceNamesA]
je 0x462727
push esi
push 0x45f4a0
push 3
push edi
call ebp
push esi
push 0x45f4a0
push 0xe
push edi
call ebp
push 0x64
push esi
lea eax, [esp + 0x10dc]
call fcn.0045f170
mov byte [esp + 0x17], al
cmp byte [esp + 0x14d4], 0
je 0x462760
cmp byte [esp + 0x10d4], 0
je 0x462742
cmp byte [esp + 0x17], 0
je 0x462760
push esi
push 0x45f4a0
push 2
push edi
call ebp
push 0x65
push esi
lea eax, [esp + 0x14dc]
call fcn.0045f360
mov byte [esp + 0x16], al
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_EndUpdateResourceA]
test eax, eax
je 0x46282e
cmp byte [esp + 0x14d4], 0
je 0x46278d
cmp byte [esp + 0x16], 0
je 0x46282e
cmp byte [esp + 0x17], 0
jne 0x4627ac
cmp byte [esp + 0x16], 0
jne 0x4627ac
mov edx, dword [esp + 0x2c]
cmp byte [edx + 0x3aa1], 0
je 0x46285a
mov eax, dword [esp + 0x2c]
cmp byte [eax + 0x3aa1], 0
je 0x4627c8
mov eax, dword [esp + 0x18]
add eax, 0xc20
push eax
call fcn.0045f770
lea ecx, [esp + 0x34]
call fcn.00401140
mov esi, dword [esp + 0x18]
push 0
lea ecx, [esp + 0x38]
push ecx
push 0
add esi, 0xc20
push esi
call fcn.00433200
test al, al
je 0x462848
mov eax, dword [esp + 0x1c]
xor edx, edx
add eax, dword [esp + 0xc34]
adc edx, dword [esp + 0xc38]
mov dword [esp + 0x30], edx
js 0x462848
jg 0x462811
cmp eax, 0x80000
jbe 0x462848
push 0x80000
push 0x5a0
call fcn.0045b8f0
push eax
push 0x4e75ac
call fcn.0048cce0
add esp, 0xc
mov byte [esp + 0x18e0], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x462698
push eax
jmp 0x462690
mov edx, ebx
mov eax, esi
sub edx, esi
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x462850
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x20]
test ebx, ebx
je 0x4628b2
mov esi, dword [esp + 0x18]
push 0x10000
add esi, 0xc20
push esi
mov ecx, edi
call fcn.0045f640
test eax, eax
jne 0x4628b2
push 0x4b3bf4
push esi
call fcn.0049f968
mov esi, eax
add esp, 8
test esi, esi
je 0x4628b2
push 2
push 0
push esi
call fcn.0049fec5
push esi
push ebx
push 1
push edi
call fcn.0049f822
push esi
call fcn.0049f646
add esp, 0x20
mov byte [esp + 0x18e0], 0
test edi, edi
je 0x4628c7
push edi
call fcn.0049de1d
add esp, 4
mov esi, dword [esp + 0x18]
cmp byte [esi + 0xc20], 0
lea eax, [esi + 0xc20]
je 0x46269c
push 0
push 1
push 0
push eax
mov ecx, esi
call fcn.0042ea90
jmp 0x46269c
cmp byte [esp + 0x10d4], 0
je 0x4628cb
lea eax, [esp + 0x10d4]
push eax
push edi
push ebx
mov ecx, esi
call fcn.00461bb0
test al, al
je 0x4628cb
mov edx, ebx
mov eax, ebp
sub edx, ebp
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x462916
push edi
call fcn.0049f646
add esp, 4
jmp 0x4628cb