Function at 0x4b33b0
Capabilities:
Create thread

Disassembly:
push ebp
lea ebp, [esp - 0x3018]
mov eax, 0x3018
call fcn.004c1c40
push 0xffffffffffffffff
push 0x4d6de8
mov eax, dword fs:[0]
push eax
sub esp, 0x14
mov eax, dword [0x4ec0b4]
xor eax, ebp
mov dword [ebp + 0x3014], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 0x3020]
push 1
call fcn.00480900
push 0x8005
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov ecx, 0x546060
call fcn.00421720
mov byte [0x535c29], 0
xor edi, edi
mov dword [0x533b50], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x535ca8], eax
push edi
push edi
push 1
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x535c10], eax
push str.WMUser_DisplayError
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x533b5c], eax
push str.General
call fcn.0046cdc0
test al, al
sete byte [ebp - 0x12]
push 1
push 0x800
lea eax, [ebp]
push eax
call fcn.00461040
push 0x800
lea ecx, [ebp]
push ecx
call fcn.004607d0
push 0x800
lea edx, [ebp]
push edx
push 0x533b60
call fcn.0047fbe0
push 0x800
push 0x4d92ac
push 0x533b60
call fcn.0047fc20
push edi
push esi
mov ecx, 0x51ff54
call fcn.00475d80
push str.winrar.lng
mov ecx, 0x51ff30
call fcn.00475b20
push esi
call fcn.004b2ed0
test eax, eax
je 0x4b3b0e
lea ecx, [ebp - 0x20]
call fcn.004a5e10
mov dword [ebp - 4], edi
mov dword [0x51ff08], esi
mov ecx, 0x542618
call fcn.00418a60
call fcn.0049d340
call fcn.0049be80
call fcn.004b13b0
push str.WinRAR_Busy
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x535ca4], eax
push edi
push str.WinRarWindow
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
call ebx
mov dword [ebp - 0x18], eax
push edi
push esi
push edi
push edi
push 0x80000000
push 0x80000000
push 0x80000000
push 0x80000000
push 0x6cf0000
push 0x4dabec
push str.WinRarWindow
push 0x10
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x535cac], eax
cmp eax, edi
je 0x4b3aff
push eax
mov ecx, 0x51ff30
call fcn.00474b90
push edi
call fcn.004b0fa0
call fcn.004b1300
cmp byte [ebp - 0x12], 0
je 0x4b357f
push 1
push edi
call fcn.00428120
test al, al
mov byte [ebp - 0x11], 1
je 0x4b3583
mov byte [ebp - 0x11], 0
lea eax, [ebp + 0x3000]
push eax
call fcn.00423970
movzx ecx, word [ebp + 0x3000]
push ecx
call fcn.004877a0
movzx esi, ax
push 0x8c
push edi
push 0x544f28
call fcn.004c2670
add esp, 0xc
push edi
push edi
push 1
mov ecx, 0x546060
call fcn.00423810
cmp si, di
je 0x4b362e
cmp byte [0x548074], 0
jne 0x4b362e
push esi
push str.AFUMD
call fcn.004c31c7
add esp, 8
test eax, eax
jne 0x4b35ef
cmp si, 0x43
jne 0x4b360b
cmp word [ebp + 0x3002], di
jne 0x4b360b
call fcn.0049bbc0
cmp si, 0x44
je 0x4b3600
cmp si, 0x43
jne 0x4b3634
xor edx, edx
mov word [0x547070], dx
jmp 0x4b3634
cmp byte [0x548074], 0
jne 0x4b362e
push esi
push 0x4e06cc
call fcn.004c31c7
add esp, 8
test eax, eax
je 0x4b362e
push edi
call fcn.004a37c0
jmp 0x4b3634
push edi
call fcn.0049ba40
push edi
push edi
push 1
mov ecx, 0x546060
call fcn.00423810
push 0x546060
mov ecx, 0x5360e0
call fcn.004251c0
xor eax, eax
jmp 0x4b3660
movzx ecx, word [eax + 0x55147a]
mov word [eax + 0x534c10], cx
add eax, 2
cmp cx, di
jne 0x4b3660
xor eax, eax
mov word [0x55147a], ax
push 0x800
lea ecx, [ebp + 0x1000]
push ecx
call fcn.004a0610
lea edx, [ebp + 0x1000]
push edx
mov ecx, 0x5404f0
call fcn.0044c5a0
mov dword [0x534b74], edi
mov byte [ebp - 4], 1
call fcn.00425ab0
mov dword [ebp - 4], edi
cmp byte [0x550426], 0
jne 0x4b3aff
mov eax, dword [0x535cac]
push eax
call fcn.004b1050
cmp word [0x54b188], di
je 0x4b3715
push 0x54b188
call fcn.00460c50
cmp eax, 0x54b188
jne 0x4b36fa
push 0x800
push 0x54b188
push 0x533b60
call fcn.00460e20
jmp 0x4b3715
mov ecx, 0x54b188
mov edx, 0x533b60
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
cmp ax, di
jne 0x4b3704
push edi
push edi
push 0x8003
mov ecx, dword [0x535cac]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x535cac], edi
je 0x4b38b3
cmp word [0x55045a], di
jne 0x4b3a81
xor bl, bl
cmp word [0x55147a], di
je 0x4b3a5d
push 0x55147a
call fcn.0043cc50
cmp eax, 0xffffffff
je 0x4b3766
test al, 0x10
je 0x4b3766
mov bl, 1
cmp word [0x55147a], di
je 0x4b3a3e
test bl, bl
jne 0x4b3a42
push edi
push str.ReuseWindow
push str.General
call fcn.0046cee0
test eax, eax
je 0x4b387d
cmp dword [ebp - 0x18], edi
je 0x4b387d
push edi
push 0x800
lea edx, [ebp + 0x2000]
push edx
call fcn.0049f1e0
push 0x800
lea eax, [ebp + 0x2000]
push eax
call fcn.004607d0
push 0x800
push str.Rar_
lea ecx, [ebp + 0x2000]
push ecx
call fcn.0047fc20
lea eax, [ebp + 0x2000]
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4b37e0
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp + 0x2000]
push edx
push 0x55147a
call fcn.004876b0
test eax, eax
je 0x4b387d
push str.RarArchiveWideName
push 0x1000
push edi
push 0x8000004
push edi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov esi, eax
push 0x1000
push edi
push edi
push 2
push esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov edi, eax
push 0x800
push edi
push 0x55147a
mov ecx, 0x5404f0
call fcn.0044c5f0
push edi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push 0x7ae964f1
push 0xd489ac5e
push 0x8001
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
setne bl
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
jne 0x4b3a20
xor edi, edi
push 0x55147a
mov ecx, 0x5404f0
call fcn.00451530
test al, al
je 0x4b3a20
cmp byte [0x533b59], 0
jne 0x4b38b3
cmp dword [0x534c00], edi
je 0x4b3a0e
mov ecx, 0x5404f0
call fcn.00451d40
mov esi, dword [ebp - 0x18]
push esi
push 0x10000
push 0x4ad8b0
call fcn.004c38bb
add esp, 0xc
mov ecx, dword [0x535cac]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x4b38e8
cmp esi, edi
setne dl
movzx eax, dl
push eax
call fcn.004b10a0
mov ecx, dword [0x535cac]
push ecx
call dword [sym.imp.USER32.dll_UpdateWindow]
cmp byte [ebp - 0x11], 0
je 0x4b3924
cmp byte [ebp - 0x12], 0
je 0x4b3924
push str.Setup
call fcn.0046cdc0
test al, al
jne 0x4b3924
push 0x4d946c
call fcn.004497c0
test al, al
jne 0x4b3924
push 6
call fcn.00427f10
push edi
push str.ExportedSettings
push 0x4d89fc
call fcn.0046cee0
test eax, eax
je 0x4b393d
call fcn.00427e00
push edi
push 1
call fcn.0046d740
push edi
push str.WizardMode
push str.General
call fcn.0046cee0
test eax, eax
je 0x4b3980
mov edx, dword [0x535cac]
push edx
call fcn.004b7e40
test al, al
je 0x4b3980
cmp dword [0x534c00], edi
jne 0x4b3980
mov eax, dword [0x535cac]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
lea ecx, [ecx]
push edi
push edi
call fcn.004b3030
test al, al
jne 0x4b3980
mov ecx, 0x5404ec
call fcn.004b3bc0
call fcn.004a7100
mov byte [0x535c29], 1
mov ecx, dword [0x535c10]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x533b50], 0
jle 0x4b39cc
push 0x64
call edi
dec esi
cmp esi, 0xc8
jl 0x4b39b6
mov edx, dword [0x535c10]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x534b70], 0
je 0x4b3ad8
mov dword [0x534b70], 0xffffffff
xor esi, esi
cmp dword [0x534b70], 0
je 0x4b3af5
push 0x64
call edi
inc esi
cmp esi, 0xa
jl 0x4b39f2
jmp 0x4b3af5
mov ecx, dword [0x535cac]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x4b38b3
call fcn.004a7280
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.004a5e80
mov eax, 1
jmp 0x4b3b3f
test bl, bl
je 0x4b3a5d
push 0x55147a
call fcn.004b1150
push 0x55147a
mov ecx, 0x5404f0
call fcn.00451650
jmp 0x4b3a67
mov ecx, 0x5404f0
call fcn.0044d1a0
push edi
mov ecx, 0x5404f0
call fcn.00450010
mov ecx, 0x5404e0
call fcn.00407d40
jmp 0x4b38b3
push 0x544f28
call fcn.00425e60
call fcn.004a7280
cmp dword [0x534b74], 1
jne 0x4b38b3
push edi
push str.WinRarWindow
call ebx
test eax, eax
sete dl
movzx eax, dl
push eax
push 1
call fcn.004aaaf0
mov ecx, 0x51ff20
call fcn.00421410
mov esi, dword [0x51ff10]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.004a5e80
mov eax, esi
jmp 0x4b3b3f
push 0
push str.WinRarWindow
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
sete al
movzx ecx, al
push ecx
push 1
call fcn.004aaaf0
mov ecx, 0x51ff20
call fcn.00421410
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.004a5e80
xor eax, eax
jmp 0x4b3b3f
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x3014]
xor ecx, ebp
call fcn.004c1c22
add ebp, 0x3018
mov esp, ebp
pop ebp
ret 0x10