Function at 0x4629e0
Capabilities:
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4af5e6
mov eax, dword fs:[0]
push eax
mov eax, 0x18c4
call fcn.0049ebb0
mov eax, dword [0x4c03a0]
xor eax, esp
mov dword [esp + 0x18c0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4c03a0]
xor eax, esp
push eax
lea eax, [esp + 0x18d8]
mov dword fs:[0], eax
mov edi, dword [esp + 0x18e8]
mov esi, ecx
mov dword [esp + 0x18], esi
mov dword [esp + 0x2c], edi
call fcn.0042ea90
mov dword [esp + 0x18e0], 0
lea eax, [esp + 0x14d4]
push eax
lea ecx, [esp + 0x10d8]
push ecx
mov ecx, 0x4e29b8
call fcn.00466bc0
cmp byte [edi + 0x32a1], 0
lea eax, [edi + 0x32a1]
je 0x462a7c
lea edx, [esp + 0x10d4]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x462a72
cmp byte [edi + 0x36a1], 0
lea eax, [edi + 0x36a1]
je 0x462a9e
lea edx, [esp + 0x14d4]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x462a94
lea ebx, [edi + 0x410]
mov byte [esi + 0xc20], 0
cmp byte [ebx], 0
je 0x462bac
cmp byte [esp + 0x10d4], 0
jne 0x462ad5
cmp byte [esp + 0x14d4], 0
jne 0x462ad5
cmp byte [edi + 0x3aa1], 0
je 0x462bac
push 0
push ebx
call fcn.0042fc80
test al, al
je 0x462bac
lea edx, [esi + 0x1020]
mov eax, ebx
sub edx, ebx
nop
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x462af0
lea ebp, [esi + 0xc20]
push ebp
push str.Rar_SFXXXXXX
mov dword [esi + 0x1420], ebx
call fcn.0047f030
mov edi, eax
test edi, edi
je 0x462ddb
call fcn.0043cdb0
test eax, eax
je 0x462e01
push ebx
call fcn.0045f9f0
test al, al
jne 0x462e01
push ebx
call fcn.0045faa0
test al, al
je 0x462bac
push edi
call fcn.0049fba6
mov esi, 0x10000
push esi
call fcn.0049e6ff
mov edi, eax
add esp, 8
mov dword [esp + 0x20], edi
test edi, edi
jne 0x462b68
mov ecx, 0x4c93ac
call fcn.004285b0
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
mov byte [esp + 0x18e0], 1
push esi
push ebx
mov ecx, edi
call fcn.0045fb60
push 0
push ebp
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_BeginUpdateResourceA]
mov esi, eax
test esi, esi
jne 0x462be3
mov byte [esp + 0x18e0], al
test edi, edi
je 0x462ba8
push edi
call fcn.0049e37d
add esp, 4
mov esi, dword [esp + 0x18]
mov dword [esp + 0x18e0], 0xffffffff
mov eax, esi
mov ecx, dword [esp + 0x18d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18c0]
xor ecx, esp
call fcn.0049e626
add esp, 0x18d0
ret 4
push 3
push 0
push ebp
mov byte [esp + 0x23], 0
mov byte [esp + 0x22], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov edi, eax
test edi, edi
je 0x462c77
cmp byte [esp + 0x10d4], 0
mov ebp, dword [sym.imp.KERNEL32.dll_EnumResourceNamesA]
je 0x462c37
push esi
push 0x45f9c0
push 3
push edi
call ebp
push esi
push 0x45f9c0
push 0xe
push edi
call ebp
push 0x64
push esi
lea eax, [esp + 0x10dc]
call fcn.0045f690
mov byte [esp + 0x17], al
cmp byte [esp + 0x14d4], 0
je 0x462c70
cmp byte [esp + 0x10d4], 0
je 0x462c52
cmp byte [esp + 0x17], 0
je 0x462c70
push esi
push 0x45f9c0
push 2
push edi
call ebp
push 0x65
push esi
lea eax, [esp + 0x14dc]
call fcn.0045f880
mov byte [esp + 0x16], al
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_EndUpdateResourceA]
test eax, eax
je 0x462d3e
cmp byte [esp + 0x14d4], 0
je 0x462c9d
cmp byte [esp + 0x16], 0
je 0x462d3e
cmp byte [esp + 0x17], 0
jne 0x462cbc
cmp byte [esp + 0x16], 0
jne 0x462cbc
mov edx, dword [esp + 0x2c]
cmp byte [edx + 0x3aa1], 0
je 0x462d6a
mov eax, dword [esp + 0x2c]
cmp byte [eax + 0x3aa1], 0
je 0x462cd8
mov eax, dword [esp + 0x18]
add eax, 0xc20
push eax
call fcn.0045fc90
lea ecx, [esp + 0x34]
call fcn.00401140
mov esi, dword [esp + 0x18]
push 0
lea ecx, [esp + 0x38]
push ecx
push 0
add esi, 0xc20
push esi
call fcn.004335f0
test al, al
je 0x462d58
mov eax, dword [esp + 0x1c]
xor edx, edx
add eax, dword [esp + 0xc34]
adc edx, dword [esp + 0xc38]
mov dword [esp + 0x30], edx
js 0x462d58
jg 0x462d21
cmp eax, 0x80000
jbe 0x462d58
push 0x80000
push 0x5a0
call fcn.0045be10
push eax
push 0x4e75f4
call fcn.0048d240
add esp, 0xc
mov byte [esp + 0x18e0], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x462ba8
push eax
jmp 0x462ba0
mov edx, ebx
mov eax, esi
sub edx, esi
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x462d60
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x20]
test ebx, ebx
je 0x462dc2
mov esi, dword [esp + 0x18]
push 0x10000
add esi, 0xc20
push esi
mov ecx, edi
call fcn.0045fb60
test eax, eax
jne 0x462dc2
push 0x4b3c8c
push esi
call fcn.0049fec8
mov esi, eax
add esp, 8
test esi, esi
je 0x462dc2
push 2
push 0
push esi
call fcn.004a0425
push esi
push ebx
push 1
push edi
call fcn.0049fd82
push esi
call fcn.0049fba6
add esp, 0x20
mov byte [esp + 0x18e0], 0
test edi, edi
je 0x462dd7
push edi
call fcn.0049e37d
add esp, 4
mov esi, dword [esp + 0x18]
cmp byte [esi + 0xc20], 0
lea eax, [esi + 0xc20]
je 0x462bac
push 0
push 1
push 0
push eax
mov ecx, esi
call fcn.0042ee80
jmp 0x462bac
cmp byte [esp + 0x10d4], 0
je 0x462ddb
lea eax, [esp + 0x10d4]
push eax
push edi
push ebx
mov ecx, esi
call fcn.004620c0
test al, al
je 0x462ddb
mov edx, ebx
mov eax, ebp
sub edx, ebp
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x462e26
push edi
call fcn.0049fba6
add esp, 4
jmp 0x462ddb