Function at 0x4a0630
Capabilities:
Create thread
Query environment variable

Disassembly:
push ebp
lea ebp, [esp - 0x1818]
mov eax, 0x1818
call fcn.004af840
push 0xffffffffffffffff
push 0x4c44d8
mov eax, dword fs:[0]
push eax
sub esp, 0x14
mov eax, dword [0x4d8620]
xor eax, ebp
mov dword [ebp + 0x1814], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 0x1820]
push 1
call fcn.00470490
push 0x8005
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
call fcn.0046ec90
mov ecx, 0x52fee8
call fcn.0041ee00
xor edi, edi
mov byte [0x527e59], 0
mov dword [0x526d80], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x527ed8], eax
push edi
push edi
push 1
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x527e40], eax
push str.WMUser_DisplayError
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x526d8c], eax
push str.General
call fcn.0045fd50
test al, al
sete byte [ebp - 0x12]
lea eax, [ebp + 0x800]
push eax
call fcn.00456610
lea ecx, [ebp + 0x800]
push ecx
call fcn.00455790
xor eax, eax
jmp 0x4a0700
movzx ecx, word [ebp + eax + 0x800]
mov word [eax + 0x526d90], cx
add eax, 2
cmp cx, di
jne 0x4a0700
mov eax, 0x526d90
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4a0720
sub eax, edx
sar eax, 1
push 0x1000000
lea edx, [eax*2 + 0x526d90]
push edx
push str.rar.log
call fcn.00477c00
push edi
push esi
mov ecx, 0x51393c
call fcn.00466220
push str.winrar.lng
mov ecx, 0x51391c
call fcn.00465ed0
push esi
call fcn.0049f830
test eax, eax
je 0x4a0e03
lea ecx, [ebp - 0x20]
call fcn.00490b70
mov dword [ebp - 4], edi
mov dword [0x5138fc], esi
mov ecx, 0x52dfe8
call fcn.004166c0
call fcn.00488420
call fcn.00486ed0
call fcn.0049c370
call fcn.0049c540
push str.WinRAR_Busy
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x527ed4], eax
push edi
push str.WinRarWindow
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
call ebx
mov dword [ebp - 0x18], eax
push edi
push esi
push edi
push edi
push 0x80000000
push 0x80000000
push 0x80000000
push 0x80000000
push 0x6cf0000
push 0x4c7f2c
push str.WinRarWindow
push 0x10
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x527edc], eax
cmp eax, edi
je 0x4a0df4
push eax
mov ecx, 0x51391c
call fcn.00464f40
push edi
call fcn.0049bdb0
call fcn.0049c2c0
cmp byte [ebp - 0x12], 0
je 0x4a0829
push 1
push edi
call fcn.00421040
test al, al
mov byte [ebp - 0x11], 1
je 0x4a082d
mov byte [ebp - 0x11], 0
lea eax, [ebp + 0x1800]
push eax
call fcn.0049bca0
movzx ecx, word [ebp + 0x1800]
push ecx
call fcn.00478240
movzx esi, ax
push 0xd0
push edi
push 0x52f528
call fcn.004af870
add esp, 0xc
push edi
push edi
mov ecx, 0x52fee8
call fcn.0041ef70
cmp si, di
je 0x4a08d6
cmp byte [0x530ef8], 0
jne 0x4a08d6
push esi
push str.AFUMD
call fcn.004affd2
add esp, 8
test eax, eax
jne 0x4a0897
cmp si, 0x43
jne 0x4a08b3
cmp word [ebp + 0x1802], di
jne 0x4a08b3
call fcn.00486c10
cmp si, 0x44
je 0x4a08a8
cmp si, 0x43
jne 0x4a08db
xor edx, edx
mov word [0x5306f8], dx
jmp 0x4a08db
cmp byte [0x530ef8], 0
jne 0x4a08d6
push esi
push 0x4cd194
call fcn.004affd2
add esp, 8
test eax, eax
je 0x4a08d6
push edi
call fcn.0048e380
jmp 0x4a08db
call fcn.00486ac0
push edi
push edi
mov ecx, 0x52fee8
call fcn.0041ef70
push 0x52fee8
mov ecx, 0x528310
call fcn.00415010
xor eax, eax
jmp 0x4a0900
movzx ecx, word [eax + 0x5362aa]
mov word [eax + 0x527640], cx
add eax, 2
cmp cx, di
jne 0x4a0900
xor eax, eax
mov word [0x5362aa], ax
mov dword [0x5275a4], edi
mov byte [ebp - 4], 1
call fcn.0049ff10
mov dword [ebp - 4], edi
cmp byte [0x535246], 0
jne 0x4a0df4
mov ecx, dword [0x527edc]
push ecx
call fcn.0049be60
cmp byte [0x533405], 0
je 0x4a097d
push 0x533405
call fcn.00455d90
push 0x1000000
push 0x526d90
cmp eax, 0x533405
jne 0x4a0973
call fcn.00455e10
push eax
push 0x533405
call fcn.00477c00
push edi
push edi
push 0x8003
mov edx, dword [0x527edc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x527edc], edi
je 0x4a0b2d
cmp byte [0x535279], 0
jne 0x4a0d76
xor bl, bl
cmp word [0x5362aa], di
je 0x4a0cd7
push 0x5362aa
push edi
call fcn.00432510
cmp eax, 0xffffffff
je 0x4a09cf
test al, 0x10
je 0x4a09cf
mov bl, 1
cmp word [0x5362aa], di
je 0x4a0cbf
test bl, bl
jne 0x4a0cc3
push edi
push str.ReuseWindow
push str.General
call fcn.0045fe70
test eax, eax
je 0x4a0af6
cmp dword [ebp - 0x18], edi
je 0x4a0af6
push 0x400
lea eax, [ebp + 0x1000]
push eax
call fcn.00489f90
lea ecx, [ebp + 0x1000]
push ecx
call fcn.00455790
lea eax, [ebp + 0x1000]
add eax, 0xfffffffe
jmp 0x4a0a30
mov cx, word [eax + 2]
add eax, 2
cmp cx, di
jne 0x4a0a30
mov edx, dword [str.Rar_]
mov dword [eax], edx
mov ecx, dword [0x4cb6d4]
mov dword [eax + 4], ecx
mov dx, word [0x4cb6d8]
mov word [eax + 8], dx
lea eax, [ebp + 0x1000]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4a0a61
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp + 0x1000]
push eax
push 0x5362aa
call fcn.00478050
test eax, eax
je 0x4a0af6
push str.RarArchiveWideName
push 0x800
push 0
push 0x8000004
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov esi, eax
push 0x800
push 0
push 0
push 2
push esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov edi, eax
push edi
push 0x5362aa
call fcn.00455ad0
push edi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push 0x7ae964f1
push 0xd489ac5e
push 0x8001
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
setne bl
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
jne 0x4a0ca1
push 0x5362aa
mov ecx, 0x52d6c0
call fcn.00448890
test al, al
je 0x4a0ca1
cmp byte [0x526d89], 0
jne 0x4a0b2d
cmp dword [0x527630], 0
je 0x4a0c8f
mov ecx, 0x52d6c0
call fcn.00448e00
mov esi, dword [ebp - 0x18]
push esi
push 0x10000
push 0x4991f0
call fcn.004b067b
add esp, 0xc
mov eax, dword [0x527edc]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x4a0b61
test esi, esi
setne cl
movzx edx, cl
push edx
call fcn.0049c070
mov eax, dword [0x527edc]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
cmp byte [ebp - 0x11], 0
je 0x4a0b9c
cmp byte [ebp - 0x12], 0
je 0x4a0b9c
push str.Setup
call fcn.0045fd50
test al, al
jne 0x4a0b9c
push 0x4c7d04
call fcn.00440dd0
test al, al
jne 0x4a0b9c
push 6
call fcn.00420e30
push 0
push str.ExportedSettings
push 0x4c5d70
call fcn.0045fe70
test eax, eax
je 0x4a0bb6
call fcn.00420d30
push 0
push 1
call fcn.004603f0
push 0
push str.WizardMode
push str.General
call fcn.0045fe70
test eax, eax
je 0x4a0c00
mov ecx, dword [0x527edc]
push ecx
call fcn.004a4cf0
test al, al
je 0x4a0c00
cmp dword [0x527630], 0
jne 0x4a0c00
mov edx, dword [0x527edc]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea ebx, [ebx]
push 0
push 0
call fcn.0049f990
test al, al
jne 0x4a0c00
mov ecx, 0x52d6bc
call fcn.004a1000
call fcn.00492210
mov eax, dword [0x527e40]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov byte [0x527e59], 1
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x526d80], 0
jle 0x4a0c4d
push 0x64
call edi
dec esi
cmp esi, 0xc8
jl 0x4a0c37
mov ecx, dword [0x527e40]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x5275a0], 0
je 0x4a0dcd
mov dword [0x5275a0], 0xffffffff
xor esi, esi
cmp dword [0x5275a0], 0
je 0x4a0dea
push 0x64
call edi
inc esi
cmp esi, 0xa
jl 0x4a0c73
jmp 0x4a0dea
mov edx, dword [0x527edc]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x4a0b2d
call fcn.004923a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00490be0
mov eax, 1
jmp 0x4a0e34
test bl, bl
je 0x4a0cd7
push 0x5362aa
call fcn.0049c120
push 0x5362aa
jmp 0x4a0d57
push 1
push str.RestoreFolder
push str.General
call fcn.0045fe70
push 0x400
push 0x4c5d70
test eax, eax
je 0x4a0d15
lea eax, [ebp + 0x1000]
push eax
push str.LastFolder
push str.General
call fcn.0045fe40
lea ecx, [ebp + 0x1000]
push ecx
jmp 0x4a0d57
lea edx, [ebp]
push edx
push str.StartFolder
push str.Paths
call fcn.0045fe40
push 0x400
lea eax, [ebp + 0x1000]
push eax
lea ecx, [ebp]
push ecx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
xor edx, edx
mov word [ebp + 0x17fe], dx
cmp word [ebp + 0x1000], di
je 0x4a0d5c
lea eax, [ebp + 0x1000]
push eax
call fcn.0048a0a0
push edi
mov ecx, 0x52d6c0
call fcn.004473c0
mov ecx, 0x52d6b0
call fcn.00407480
jmp 0x4a0b2d
push 0x52f528
call fcn.004a0280
call fcn.004923a0
cmp dword [0x5275a4], 1
jne 0x4a0b2d
push edi
push str.WinRarWindow
call ebx
test eax, eax
sete cl
movzx edx, cl
push edx
push 1
call fcn.00498640
mov ecx, 0x513910
call fcn.0041c810
mov esi, dword [0x513904]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00490be0
mov eax, esi
jmp 0x4a0e34
push 0
push str.WinRarWindow
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
sete dl
movzx eax, dl
push eax
push 1
call fcn.00498640
mov ecx, 0x513910
call fcn.0041c810
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00490be0
xor eax, eax
jmp 0x4a0e34
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x1814]
xor ecx, ebp
call fcn.004af00b
add ebp, 0x1818
mov esp, ebp
pop ebp
ret 0x10