Function at 0x49a3e0
Capabilities:
Accept command line arguments
Query environment variable

Disassembly:
push 0xffffffffffffffff
push 0x4b6dab
mov eax, dword fs:[0]
push eax
mov eax, 0x1828
call fcn.004a4220
mov eax, dword [0x4ca3b0]
xor eax, esp
mov dword [esp + 0x1824], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ca3b0]
xor eax, esp
push eax
lea eax, [esp + 0x183c]
mov dword fs:[0], eax
mov edi, dword [esp + 0x184c]
call fcn.0046add0
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov esi, eax
movzx eax, word [esi]
xor ebp, ebp
xor bl, bl
cmp ax, bp
je 0x49a468
nop
test bl, bl
jne 0x49a451
movzx eax, ax
push eax
call fcn.00469d40
test al, al
jne 0x49a468
cmp word [esi], 0x22
jne 0x49a45c
test bl, bl
sete bl
movzx eax, word [esi + 2]
add esi, 2
cmp ax, bp
jne 0x49a440
movzx ecx, word [esi]
push ecx
call fcn.00469d40
test al, al
je 0x49a486
movzx edx, word [esi + 2]
add esi, 2
push edx
call fcn.00469d40
test al, al
jne 0x49a475
push 0x8005
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
call fcn.00469710
mov ecx, 0x4f0c98
call fcn.0041e380
mov byte [0x4e8c4d], 0
mov dword [0x4e7b80], ebp
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push ebp
push ebp
push 1
push ebp
mov dword [0x4e8cd0], eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push str.WMUser_DisplayError
mov dword [0x4e843c], eax
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
push 0x4b8d30
mov dword [0x4e7b8c], eax
call fcn.0045ae90
test al, al
lea eax, [esp + 0x838]
sete bl
push eax
mov byte [esp + 0x1b], bl
call fcn.00451bc0
lea ecx, [esp + 0x838]
push ecx
call fcn.00450e70
xor eax, eax
jmp 0x49a510
movzx ecx, word [esp + eax + 0x838]
mov word [eax + 0x4e7b90], cx
add eax, 2
cmp cx, bp
jne 0x49a510
mov eax, 0x4e7b90
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x49a530
sub eax, edx
sar eax, 1
push 0x1000000
lea edx, [eax*2 + 0x4e7b90]
push edx
push str.rar.log
call fcn.00472580
push ebp
push edi
mov ecx, 0x4d56e0
call fcn.00460820
push str.winrar.lng
mov ecx, 0x4d56c0
call fcn.004604d0
push edi
call fcn.00499500
test eax, eax
je 0x49abcb
lea ecx, [esp + 0x1c]
call fcn.0048a710
mov dword [esp + 0x1844], ebp
mov dword [0x4d56ac], edi
call fcn.00482410
call fcn.00480f20
call fcn.00495ff0
call fcn.004961c0
push str.WinRAR_Busy
push ebp
push ebp
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
push ebp
push str.WinRarWindow
mov dword [0x4e8ccc], eax
call dword [sym.imp.USER32.dll_FindWindowW]
push ebp
push edi
push ebp
push ebp
push 0x80000000
push 0x80000000
push 0x80000000
push 0x80000000
push 0x6cf0000
push 0x4ba748
push str.WinRarWindow
push 0x10
mov dword [esp + 0x48], eax
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x4e8cd4], eax
cmp eax, ebp
je 0x49abb7
push eax
mov ecx, 0x4d56c0
call fcn.0045f5b0
push ebp
call fcn.00495980
call fcn.00495e90
test bl, bl
je 0x49a632
push 1
push ebp
call fcn.00420440
mov byte [esp + 0x16], 1
test al, al
je 0x49a637
mov byte [esp + 0x16], 0
push 0xd0
push ebp
push 0x4f02d8
call fcn.004a4250
add esp, 0xc
push esi
call fcn.00495770
mov bl, al
test bl, bl
je 0x49a65b
call fcn.00480c60
push 0x4f0c98
mov ecx, 0x4e9108
call fcn.004163d0
xor eax, eax
lea esp, [esp]
movzx ecx, word [eax + 0x4f7014]
mov word [eax + 0x4e8440], cx
add eax, 2
cmp cx, bp
jne 0x49a670
lea ecx, [esp + 0x24]
push ecx
xor eax, eax
push esi
mov word [0x4f7014], ax
mov dword [0x4f45e0], ebp
mov dword [0x4e83a4], ebp
call fcn.00495880
movzx edx, word [esp + 0x24]
push edx
call fcn.004a5195
mov edi, eax
add esp, 4
cmp edi, ebp
je 0x49a6cb
push edi
push str.AFUM
call fcn.004a4990
add esp, 8
test eax, eax
jne 0x49a6d0
call fcn.0047fdb0
cmp edi, ebp
je 0x49a6fb
push edi
push 0x4bf8cc
call fcn.004a4990
add esp, 8
test eax, eax
je 0x49a6fb
mov ecx, dword [0x4f7818]
call fcn.0046a1d0
test bl, bl
je 0x49a6fb
push ebp
call fcn.00487fc0
push esi
call fcn.00499bb0
cmp byte [0x4f5fbe], 0
jne 0x49abb7
mov eax, dword [0x4e8cd4]
push eax
call fcn.00495a30
cmp byte [0x4f41b1], 0
je 0x49a74d
push 0x4f41b1
call fcn.00451350
push 0x1000000
push 0x4e7b90
cmp eax, 0x4f41b1
jne 0x49a743
call fcn.004513d0
push eax
push 0x4f41b1
call fcn.00472580
mov ecx, dword [0x4e8cd4]
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x403
push ecx
call ebp
cmp dword [0x4e8cd4], 0
je 0x49a8f7
cmp byte [0x4f5fe3], 0
jne 0x49ab43
xor bl, bl
cmp word [0x4f7014], 0
je 0x49aaa4
push 0x4f7014
push 0
call fcn.004314d0
cmp eax, 0xffffffff
je 0x49a7a6
test al, 0x10
je 0x49a7a6
mov bl, 1
cmp word [0x4f7014], 0
je 0x49aa8c
test bl, bl
jne 0x49aa90
push 0
push str.ReuseWindow
push 0x4b8d30
call fcn.0045afb0
test eax, eax
je 0x49a8c0
cmp dword [esp + 0x18], 0
je 0x49a8c0
push 0x400
lea edx, [esp + 0x3c]
push edx
call fcn.00483c50
lea eax, [esp + 0x38]
push eax
call fcn.00450e70
lea eax, [esp + 0x38]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x49a800
mov ecx, dword [str.Rar_]
mov edx, dword [0x4bf8c4]
mov dword [eax], ecx
mov cx, word [0x4bf8c8]
mov dword [eax + 4], edx
mov word [eax + 8], cx
lea eax, [esp + 0x38]
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x49a830
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x3c]
push edx
push 0x4f7014
call fcn.004729a0
test eax, eax
je 0x49a8c0
push str.RarArchiveWideName
push 0x800
push 0
push 0x8000004
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push 0x800
push 0
push 0
mov esi, eax
push 2
push esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov edi, eax
push edi
push 0x4f7014
call fcn.00451090
push edi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [esp + 0x18]
push 0x7ae964f1
push 0xd489ac5e
push 0x401
push eax
call ebp
test eax, eax
push esi
setne bl
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
jne 0x49aa69
push 0x4f7014
mov ecx, 0x4ee478
call fcn.00444620
test al, al
je 0x49aa69
cmp byte [0x4e7b89], 0
jne 0x49a8f7
cmp dword [0x4e8430], 0
je 0x49aa57
mov ecx, 0x4ee478
call fcn.00443360
mov esi, dword [esp + 0x18]
push esi
push 0x10000
push 0x492df0
call fcn.004a4f48
mov edx, dword [0x4e8cd4]
add esp, 0xc
push edx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x49a92d
test esi, esi
setne al
movzx ecx, al
push ecx
call fcn.00495c40
mov edx, dword [0x4e8cd4]
push edx
call dword [sym.imp.USER32.dll_UpdateWindow]
cmp byte [esp + 0x16], 0
je 0x49a96b
cmp byte [esp + 0x17], 0
je 0x49a96b
push str.Setup
call fcn.0045ae90
test al, al
jne 0x49a96b
push 0x4ba520
call fcn.0043c4a0
test al, al
jne 0x49a96b
push 6
call fcn.00420230
push 0
push str.ExportedSettings
push 0x4b8d0c
call fcn.0045afb0
test eax, eax
je 0x49a985
call fcn.00420140
push 0
push str.WizardMode
push 0x4b8d30
call fcn.0045afb0
test eax, eax
je 0x49a9c0
mov eax, dword [0x4e8cd4]
push eax
call fcn.0049e7a0
test al, al
je 0x49a9c0
cmp dword [0x4e8430], 0
jne 0x49a9c0
mov ecx, dword [0x4e8cd4]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
nop
push 0
push 0
call fcn.00499630
test al, al
jne 0x49a9c0
mov ecx, 0x4ee474
call fcn.0049adb0
call fcn.0048bd70
mov edx, dword [0x4e843c]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x4e8c4d], 1
xor esi, esi
jmp 0x49aa00
cmp dword [0x4e7b80], 0
jle 0x49aa16
push 0x64
call edi
dec esi
cmp esi, 0xc8
jl 0x49aa00
mov eax, dword [0x4e843c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x4e83a0], 0
je 0x49ab9a
mov dword [0x4e83a0], 0xffffffff
xor esi, esi
cmp dword [0x4e83a0], 0
je 0x49abb7
push 0x64
call edi
inc esi
cmp esi, 0xa
jl 0x49aa3b
jmp 0x49abb7
mov ecx, dword [0x4e8cd4]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x49a8f7
call fcn.0048bf00
mov dword [esp + 0x1844], 0xffffffff
lea ecx, [esp + 0x1c]
call fcn.0048a780
mov eax, 1
jmp 0x49abcd
test bl, bl
je 0x49aaa4
push 0x4f7014
call fcn.00495cf0
push 0x4f7014
jmp 0x49ab23
push 1
push str.RestoreFolder
push 0x4b8d30
call fcn.0045afb0
push 0x400
push 0x4b8d0c
test eax, eax
je 0x49aade
lea edx, [esp + 0x40]
push edx
push str.LastFolder
push 0x4b8d30
call fcn.0045af80
lea eax, [esp + 0x38]
push eax
jmp 0x49ab23
lea ecx, [esp + 0x1040]
push ecx
push str.StartFolder
push 0x4b89fc
call fcn.0045af80
push 0x400
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x1040]
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
xor ecx, ecx
mov word [esp + 0x836], cx
cmp word [esp + 0x38], cx
je 0x49ab28
lea edx, [esp + 0x38]
push edx
call fcn.00483d60
push 0
mov ecx, 0x4ee478
call fcn.00442a80
mov ecx, 0x4ee468
call fcn.004072a0
jmp 0x49a8f7
push 0x4f02d8
call fcn.0049a040
call fcn.0048bf00
cmp dword [0x4e83a4], 1
jne 0x49a8f7
push 0
push str.WinRarWindow
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
sete al
movzx ecx, al
push ecx
push 1
call fcn.00492220
mov esi, dword [0x4d56b4]
mov dword [esp + 0x1844], 0xffffffff
lea ecx, [esp + 0x1c]
call fcn.0048a780
mov eax, esi
jmp 0x49abcd
push 0
push str.WinRarWindow
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
sete cl
movzx edx, cl
push edx
push 1
call fcn.00492220
mov dword [esp + 0x1844], 0xffffffff
lea ecx, [esp + 0x1c]
call fcn.0048a780
xor eax, eax
mov ecx, dword [esp + 0x183c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1824]
xor ecx, esp
call fcn.004a39f3
add esp, 0x1834
ret 0x10