Function at 0x467da0
Capabilities:
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4b7bf6
mov eax, dword fs:[0]
push eax
mov eax, 0x24c8
call fcn.004a5100
mov eax, dword [0x4cc3b0]
xor eax, esp
mov dword [esp + 0x24c4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4cc3b0]
xor eax, esp
push eax
lea eax, [esp + 0x24dc]
mov dword fs:[0], eax
mov esi, dword [esp + 0x24ec]
mov ebx, ecx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x20], esi
call fcn.00430300
mov dword [esp + 0x24e4], 0
lea eax, [esp + 0x1cd8]
push eax
lea ecx, [esp + 0x14dc]
push ecx
mov ecx, 0x4f23b0
call fcn.0046c400
cmp word [esi + 0x4322], 0
lea eax, [esi + 0x4322]
je 0x467e42
lea edx, [esp + 0x14d8]
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x467e33
cmp word [esi + 0x4b22], 0
lea eax, [esi + 0x4b22]
je 0x467e6f
lea edx, [esp + 0x1cd8]
sub edx, eax
jmp 0x467e60
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x467e60
xor edx, edx
lea ebp, [esi + 0x810]
mov word [ebx + 0xc20], dx
mov dword [esp + 0x24], ebp
cmp word [ebp], dx
je 0x468102
cmp word [esp + 0x14d8], dx
jne 0x467eac
cmp word [esp + 0x1cd8], dx
jne 0x467eac
cmp byte [esi + 0x5322], dl
je 0x468102
push ebp
call fcn.004317c0
test al, al
je 0x468102
lea edx, [ebx + 0x1420]
mov eax, ebp
sub edx, ebp
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x467ec4
lea esi, [ebx + 0xc20]
push esi
push str.Rar_SFXXXXXX
mov dword [ebx + 0x1c20], ebp
call fcn.00485330
mov edi, eax
test edi, edi
je 0x4681af
call fcn.0043ee30
test eax, eax
je 0x4681d6
push ebp
call fcn.00464ec0
test al, al
jne 0x4681d6
push ebp
call fcn.00464f70
test al, al
je 0x468102
push edi
call fcn.004a6995
mov edi, 0x10000
push edi
call fcn.004a49ac
mov ebx, eax
add esp, 8
mov dword [esp + 0x2c], ebx
test ebx, ebx
jne 0x467f45
mov ecx, 0x4d76b4
call fcn.00429080
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
mov byte [esp + 0x24e4], 1
push edi
push ebp
mov ecx, ebx
call fcn.00465020
push 0
push esi
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
mov esi, eax
test esi, esi
je 0x4680e9
mov eax, dword [esp + 0x18]
push 3
push 0
add eax, 0xc20
push eax
mov byte [esp + 0x23], 0
mov byte [esp + 0x22], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edi, eax
test edi, edi
je 0x46801d
cmp word [esp + 0x14d8], 0
mov ebp, dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
je 0x467fd7
push esi
push 0x464e90
push 3
push edi
call ebp
push esi
push 0x464e90
push 0xe
push edi
call ebp
push 0x64
push esi
lea eax, [esp + 0x14e0]
call fcn.00464b60
mov byte [esp + 0x17], al
cmp word [esp + 0x1cd8], 0
je 0x468012
cmp word [esp + 0x14d8], 0
je 0x467ff4
cmp byte [esp + 0x17], 0
je 0x468012
push esi
push 0x464e90
push 2
push edi
call ebp
push 0x65
push esi
lea eax, [esp + 0x1ce0]
call fcn.00464d50
mov byte [esp + 0x16], al
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ebp, dword [esp + 0x24]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
test eax, eax
je 0x4680e9
cmp word [esp + 0x1cd8], 0
je 0x468044
cmp byte [esp + 0x16], 0
je 0x4680e9
cmp byte [esp + 0x17], 0
jne 0x468063
cmp byte [esp + 0x16], 0
jne 0x468063
mov eax, dword [esp + 0x20]
cmp byte [eax + 0x5322], 0
je 0x468145
mov ecx, dword [esp + 0x20]
cmp byte [ecx + 0x5322], 0
je 0x46807f
mov eax, dword [esp + 0x18]
add eax, 0xc20
push eax
call fcn.00465150
lea ecx, [esp + 0x38]
call fcn.00401190
mov esi, dword [esp + 0x18]
push 0
lea edx, [esp + 0x3c]
push edx
add esi, 0xc20
push esi
push 0
call fcn.00435490
test al, al
je 0x468139
mov eax, dword [esp + 0x1c]
xor ecx, ecx
add eax, dword [esp + 0xc38]
adc ecx, dword [esp + 0xc3c]
mov dword [esp + 0x28], ecx
js 0x468139
jg 0x4680cc
cmp eax, 0x100000
jbe 0x468139
push 0x100000
push 0x5a0
call fcn.004611c0
push eax
push 0x4f901c
call fcn.00493840
add esp, 0xc
mov byte [esp + 0x24e4], 0
test ebx, ebx
je 0x4680fe
push ebx
call fcn.004a4a6f
add esp, 4
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x24e4], 0xffffffff
mov eax, ebx
mov ecx, dword [esp + 0x24dc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x24c4]
xor ecx, esp
call fcn.004a48d3
add esp, 0x24d4
ret 4
push 0x400
push esi
push ebp
call fcn.0046aa40
mov edi, dword [esp + 0x1c]
test edi, edi
je 0x468196
mov esi, dword [esp + 0x18]
push 0x10000
add esi, 0xc20
push esi
mov ecx, ebx
call fcn.00465020
test eax, eax
jne 0x468196
push 0x4be47c
push esi
call fcn.00485300
mov esi, eax
test esi, esi
je 0x468196
push 2
push 0
push esi
call fcn.004a689e
push esi
push edi
push 1
push ebx
call fcn.004a6bc4
push esi
call fcn.004a6995
add esp, 0x20
mov byte [esp + 0x24e4], 0
test ebx, ebx
je 0x4681ab
push ebx
call fcn.004a4a6f
add esp, 4
mov ebx, dword [esp + 0x18]
cmp word [ebx + 0xc20], 0
lea eax, [ebx + 0xc20]
je 0x468102
push 0
push 1
push eax
push 0
mov ecx, ebx
call fcn.00430740
jmp 0x468102
cmp word [esp + 0x14d8], 0
je 0x4681af
lea edx, [esp + 0x14d8]
push edx
push edi
push ebp
mov ecx, ebx
call fcn.00466ff0
test al, al
je 0x4681af
push 0x400
push esi
push ebp
call fcn.0046aa40
push edi
call fcn.004a6995
add esp, 4
jmp 0x4681af