Function at 0x4d8430
Capabilities:
Create thread

Disassembly:
push ebp
lea ebp, [esp - 0x3018]
mov eax, 0x3018
call fcn.004ebbf0
push 0xffffffffffffffff
push 0x5098c8
mov eax, dword fs:[0]
push eax
sub esp, 0x10
mov eax, dword [0x528af4]
xor eax, ebp
mov dword [ebp + 0x3014], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 0x3020]
push 1
call fcn.0048f150
push 0x8005
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov ecx, 0x543e88
call fcn.0045c2a0
mov byte [0x538a11], 0
mov dword [0x539a2c], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x539a30], eax
push 0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x539a34], eax
push str.WMUser_DisplayError
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x539a3c], eax
push str.General
call fcn.0049dcb0
test al, al
sete bl
mov byte [ebp - 0x11], bl
push 1
push 0x800
lea eax, [ebp + 0x1000]
push eax
call fcn.004783d0
push 0x800
lea eax, [ebp + 0x1000]
push eax
call fcn.00477290
push 0x800
lea eax, [ebp + 0x1000]
push eax
push 0x538a18
call fcn.0048e710
push 0x800
push str.rar.log
push 0x538a18
call fcn.0048e6d0
push 0
push esi
mov ecx, 0x56df28
call fcn.00488400
push str.winrar.lng
mov ecx, 0x56df2c
call fcn.00487500
push esi
call fcn.004d60d0
test eax, eax
je 0x4d8bb6
lea ecx, [ebp - 0x18]
call fcn.004ca570
mov dword [ebp - 4], 0
mov dword [0x56df24], esi
mov ecx, 0x55a850
call fcn.00405860
call fcn.004bf780
call fcn.004bb100
call fcn.004d7ff0
push str.WinRAR_Busy
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x538a0c], eax
push 0
push str.WinRarWindow
call dword [sym.imp.USER32.dll_FindWindowW]
mov edi, eax
mov dword [ebp - 0x1c], edi
push 0
push esi
push 0
push 0
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push 0x6cf0000
push 0x50e0ac
push str.WinRarWindow
push 0x10
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x538900], eax
test eax, eax
je 0x4d8ba7
push eax
mov ecx, 0x56df2c
call fcn.00487d80
push 0
call fcn.004d6020
call fcn.004d7df0
test bl, bl
je 0x4d8623
call fcn.004a06b0
test al, al
jne 0x4d8623
push 1
push 0
call fcn.0040a7e0
test al, al
jne 0x4d8623
mov bh, 1
jmp 0x4d8625
xor bh, bh
lea eax, [ebp + 0x3000]
push eax
call fcn.00409e20
movzx eax, word [ebp + 0x3000]
push eax
call fcn.00491a30
movzx esi, ax
push 0x2c
push 0
push 0x539a64
call fcn.004ee100
add esp, 0xc
push 0
push 0
push 1
mov ecx, 0x543e88
call fcn.0045c770
call fcn.0040fbb0
test si, si
je 0x4d86d2
cmp byte [0x545e9c], 0
jne 0x4d86d2
push esi
push str.AFUMD
call fcn.004ecec5
add esp, 8
test eax, eax
jne 0x4d86b9
cmp esi, 0x43
jne 0x4d8695
cmp word [ebp + 0x3002], ax
je 0x4d86b9
cmp byte [0x545e9c], 0
jne 0x4d86d2
push esi
push 0x514bcc
call fcn.004ecec5
add esp, 8
test eax, eax
je 0x4d86d2
push 0
call fcn.004c9e30
jmp 0x4d86d9
call fcn.004c27f0
cmp esi, 0x44
je 0x4d86c8
cmp esi, 0x43
jne 0x4d86d9
xor eax, eax
mov word [0x544e98], ax
jmp 0x4d86d9
push 0
call fcn.004bf7c0
push 0
push 0
push 1
mov ecx, 0x543e88
call fcn.0045c770
push 0x543e88
mov ecx, 0x550468
call fcn.00407cc0
xor ecx, ecx
lea ebx, [ebx]
movzx eax, word [ecx + 0x54f29a]
mov word [ecx + 0x537900], ax
lea ecx, [ecx + 2]
test ax, ax
jne 0x4d8700
xor eax, eax
mov word [0x54f29a], ax
push 0x800
lea eax, [ebp]
push eax
call fcn.004c48f0
lea eax, [ebp]
push eax
mov ecx, 0x55d4d8
call fcn.00443ef0
mov dword [0x538a04], 0
mov byte [ebp - 4], 1
call fcn.00409a00
mov dword [ebp - 4], 0
push dword [0x538900]
call fcn.004d8220
cmp word [0x548fb4], 0
je 0x4d87a8
push 0x548fb4
call fcn.00478eb0
cmp eax, 0x548fb4
jne 0x4d8790
push 0x800
push 0x548fb4
push 0x538a18
call fcn.00478fb0
jmp 0x4d87a8
xor ecx, ecx
movzx eax, word [ecx + 0x548fb4]
mov word [ecx + 0x538a18], ax
lea ecx, [ecx + 2]
test ax, ax
jne 0x4d8792
push 0
push 0
push 0x8003
push dword [0x538900]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x538900], 0
je 0x4d8956
cmp word [0x54e27a], 0
jne 0x4d8b22
xor bl, bl
cmp word [0x54f29a], 0
je 0x4d8afd
push 0x54f29a
call fcn.00469440
cmp eax, 0xffffffff
je 0x4d87fd
test al, 0x10
je 0x4d87fd
mov bl, 1
cmp word [0x54f29a], 0
je 0x4d8adc
test bl, bl
jne 0x4d8ae0
push 0
push str.ReuseWindow
push str.General
call fcn.0049fd30
test eax, eax
je 0x4d891c
test edi, edi
je 0x4d891c
push 0
push 0x800
lea eax, [ebp + 0x2000]
push eax
call fcn.004c3a00
push 0x800
lea eax, [ebp + 0x2000]
push eax
call fcn.00477290
push 0x800
push str.Rar_
lea eax, [ebp + 0x2000]
push eax
call fcn.0048e6d0
lea ecx, [ebp + 0x2000]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4d8877
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp + 0x2000]
push eax
push 0x54f29a
call fcn.00491b00
test eax, eax
je 0x4d891c
push str.RarArchiveWideName
push 0x1000
push 0
push 0x8000004
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov edi, eax
push 0x1000
push 0
push 0
push 2
push edi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov esi, eax
push 0x800
push esi
push 0x54f29a
mov ecx, 0x55d4d8
call fcn.00440000
push esi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push 0x7ae964f1
push 0xd489ac5e
push 0x8001
push dword [ebp - 0x1c]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
setne bl
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
jne 0x4d8abe
mov edi, dword [ebp - 0x1c]
push 0x54f29a
mov ecx, 0x55d4d8
call fcn.004408e0
test al, al
je 0x4d8abe
cmp byte [0x53898c], 0
jne 0x4d8953
cmp dword [0x538910], 0
je 0x4d8aad
mov ecx, 0x55d4d8
call fcn.004437b0
mov bl, byte [ebp - 0x11]
push edi
push 0x10000
push 0x4cb7e0
call fcn.004f31e1
add esp, 0xc
push dword [0x538900]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x4d8987
test edi, edi
setne al
movzx eax, al
push eax
call fcn.004d7ea0
push dword [0x538900]
call dword [sym.imp.USER32.dll_UpdateWindow]
test bh, bh
je 0x4d89be
test bl, bl
je 0x4d89be
push str.Setup
call fcn.0049dcb0
test al, al
jne 0x4d89be
push 0x50bc18
call fcn.0043abd0
test al, al
jne 0x4d89be
push 6
call fcn.0040c4f0
push 0
push str.ExportedSettings
push 0x50b8c4
call fcn.0049fd30
test eax, eax
je 0x4d89d8
call fcn.0040a730
push 0
push 1
call fcn.004a1410
push 0
push str.WizardMode
push str.General
call fcn.0049fd30
test eax, eax
je 0x4d8a20
push dword [0x538900]
call fcn.004dc3c0
test al, al
je 0x4d8a20
cmp dword [0x538910], 0
jne 0x4d8a20
push dword [0x538900]
call dword [sym.imp.USER32.dll_DestroyWindow]
lea ebx, [ebx]
push 0
push 0
call fcn.004d7980
test al, al
jne 0x4d8a20
mov ecx, 0x55d098
call fcn.004d92c0
call fcn.004cb8f0
mov byte [0x538a11], 1
push dword [0x539a34]
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x539a2c], 0
jle 0x4d8a6d
push 0x64
call edi
dec esi
cmp esi, 0xc8
jl 0x4d8a57
push dword [0x539a34]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x538a08], 0
je 0x4d8b7f
or eax, 0xffffffff
mov dword [0x538a08], eax
xor esi, esi
test eax, eax
je 0x4d8b9d
push 0x64
call edi
inc esi
cmp esi, 0xa
jge 0x4d8b9d
mov eax, dword [0x538a08]
jmp 0x4d8a90
push dword [0x538900]
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x4d8953
call fcn.004d5590
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004ca5c0
mov eax, 1
jmp 0x4d8bdf
test bl, bl
je 0x4d8afd
push 0x54f29a
call fcn.004d5e60
push 1
push 0x54f29a
mov ecx, 0x55d4d8
call fcn.0043df70
jmp 0x4d8b07
mov ecx, 0x55d4d8
call fcn.00443970
push 0
mov ecx, 0x55d4d8
call fcn.00442c60
mov ecx, 0x55d09c
call fcn.004020b0
jmp 0x4d8953
push 0x539a64
call fcn.00409ed0
call fcn.004d5590
cmp dword [0x538a04], 1
jne 0x4d8956
push 0
push str.WinRarWindow
mov eax, dword [sym.imp.USER32.dll_FindWindowW]
call eax
test eax, eax
sete al
movzx eax, al
push eax
push 1
call fcn.004cb610
mov ecx, 0x56df50
call fcn.0046c290
mov esi, dword [0x56df60]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004ca5c0
mov eax, esi
jmp 0x4d8bdf
push 0
push str.WinRarWindow
mov eax, dword [sym.imp.USER32.dll_FindWindowW]
call eax
test eax, eax
sete al
movzx eax, al
push eax
push 1
call fcn.004cb610
mov ecx, 0x56df50
call fcn.0046c290
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004ca5c0
xor eax, eax
jmp 0x4d8bdf
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x3014]
xor ecx, ebp
call fcn.004ebbd8
lea esp, [ebp + 0x3018]
pop ebp
ret 0x10