Function at 0x4672e0
Capabilities:
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4b5e66
mov eax, dword fs:[0]
push eax
mov eax, 0x24c8
call fcn.004a4220
mov eax, dword [0x4ca3b0]
xor eax, esp
mov dword [esp + 0x24c4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ca3b0]
xor eax, esp
push eax
lea eax, [esp + 0x24dc]
mov dword fs:[0], eax
mov esi, dword [esp + 0x24ec]
mov ebx, ecx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x20], esi
call fcn.0042ff90
mov dword [esp + 0x24e4], 0
lea eax, [esp + 0x1cd8]
push eax
lea ecx, [esp + 0x14dc]
push ecx
mov ecx, 0x4f03a8
call fcn.0046b940
cmp word [esi + 0x4322], 0
lea eax, [esi + 0x4322]
je 0x467382
lea edx, [esp + 0x14d8]
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x467373
cmp word [esi + 0x4b22], 0
lea eax, [esi + 0x4b22]
je 0x4673af
lea edx, [esp + 0x1cd8]
sub edx, eax
jmp 0x4673a0
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4673a0
xor edx, edx
lea ebp, [esi + 0x810]
mov word [ebx + 0xc20], dx
mov dword [esp + 0x24], ebp
cmp word [ebp], dx
je 0x467642
cmp word [esp + 0x14d8], dx
jne 0x4673ec
cmp word [esp + 0x1cd8], dx
jne 0x4673ec
cmp byte [esi + 0x5322], dl
je 0x467642
push ebp
call fcn.00431440
test al, al
je 0x467642
lea edx, [ebx + 0x1420]
mov eax, ebp
sub edx, ebp
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x467404
lea esi, [ebx + 0xc20]
push esi
push str.Rar_SFXXXXXX
mov dword [ebx + 0x1c20], ebp
call fcn.004846d0
mov edi, eax
test edi, edi
je 0x4676ef
call fcn.0043e7a0
test eax, eax
je 0x467716
push ebp
call fcn.00464410
test al, al
jne 0x467716
push ebp
call fcn.004644c0
test al, al
je 0x467642
push edi
call fcn.004a5ab5
mov edi, 0x10000
push edi
call fcn.004a3acc
mov ebx, eax
add esp, 8
mov dword [esp + 0x2c], ebx
test ebx, ebx
jne 0x467485
mov ecx, 0x4d56b4
call fcn.00428d10
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
mov byte [esp + 0x24e4], 1
push edi
push ebp
mov ecx, ebx
call fcn.00464570
push 0
push esi
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
mov esi, eax
test esi, esi
je 0x467629
mov eax, dword [esp + 0x18]
push 3
push 0
add eax, 0xc20
push eax
mov byte [esp + 0x23], 0
mov byte [esp + 0x22], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edi, eax
test edi, edi
je 0x46755d
cmp word [esp + 0x14d8], 0
mov ebp, dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
je 0x467517
push esi
push 0x4643e0
push 3
push edi
call ebp
push esi
push 0x4643e0
push 0xe
push edi
call ebp
push 0x64
push esi
lea eax, [esp + 0x14e0]
call fcn.004640b0
mov byte [esp + 0x17], al
cmp word [esp + 0x1cd8], 0
je 0x467552
cmp word [esp + 0x14d8], 0
je 0x467534
cmp byte [esp + 0x17], 0
je 0x467552
push esi
push 0x4643e0
push 2
push edi
call ebp
push 0x65
push esi
lea eax, [esp + 0x1ce0]
call fcn.004642a0
mov byte [esp + 0x16], al
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ebp, dword [esp + 0x24]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
test eax, eax
je 0x467629
cmp word [esp + 0x1cd8], 0
je 0x467584
cmp byte [esp + 0x16], 0
je 0x467629
cmp byte [esp + 0x17], 0
jne 0x4675a3
cmp byte [esp + 0x16], 0
jne 0x4675a3
mov eax, dword [esp + 0x20]
cmp byte [eax + 0x5322], 0
je 0x467685
mov ecx, dword [esp + 0x20]
cmp byte [ecx + 0x5322], 0
je 0x4675bf
mov eax, dword [esp + 0x18]
add eax, 0xc20
push eax
call fcn.004646a0
lea ecx, [esp + 0x38]
call fcn.00401190
mov esi, dword [esp + 0x18]
push 0
lea edx, [esp + 0x3c]
push edx
add esi, 0xc20
push esi
push 0
call fcn.00434e20
test al, al
je 0x467679
mov eax, dword [esp + 0x1c]
xor ecx, ecx
add eax, dword [esp + 0xc38]
adc ecx, dword [esp + 0xc3c]
mov dword [esp + 0x28], ecx
js 0x467679
jg 0x46760c
cmp eax, 0x100000
jbe 0x467679
push 0x100000
push 0x5a0
call fcn.00460760
push eax
push 0x4f7014
call fcn.00492940
add esp, 0xc
mov byte [esp + 0x24e4], 0
test ebx, ebx
je 0x46763e
push ebx
call fcn.004a3b8f
add esp, 4
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x24e4], 0xffffffff
mov eax, ebx
mov ecx, dword [esp + 0x24dc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x24c4]
xor ecx, esp
call fcn.004a39f3
add esp, 0x24d4
ret 4
push 0x400
push esi
push ebp
call fcn.00469f80
mov edi, dword [esp + 0x1c]
test edi, edi
je 0x4676d6
mov esi, dword [esp + 0x18]
push 0x10000
add esi, 0xc20
push esi
mov ecx, ebx
call fcn.00464570
test eax, eax
jne 0x4676d6
push 0x4bc43c
push esi
call fcn.00484550
mov esi, eax
test esi, esi
je 0x4676d6
push 2
push 0
push esi
call fcn.004a59be
push esi
push edi
push 1
push ebx
call fcn.004a5c91
push esi
call fcn.004a5ab5
add esp, 0x20
mov byte [esp + 0x24e4], 0
test ebx, ebx
je 0x4676eb
push ebx
call fcn.004a3b8f
add esp, 4
mov ebx, dword [esp + 0x18]
cmp word [ebx + 0xc20], 0
lea eax, [ebx + 0xc20]
je 0x467642
push 0
push 1
push eax
push 0
mov ecx, ebx
call fcn.004303d0
jmp 0x467642
cmp word [esp + 0x14d8], 0
je 0x4676ef
lea edx, [esp + 0x14d8]
push edx
push edi
push ebp
mov ecx, ebx
call fcn.00466530
test al, al
je 0x4676ef
push 0x400
push esi
push ebp
call fcn.00469f80
push edi
call fcn.004a5ab5
add esp, 4
jmp 0x4676ef