Function at 0x4b2430
Capabilities:
Create thread

Disassembly:
push ebp
lea ebp, [esp - 0x3018]
mov eax, 0x3018
call fcn.004c0c80
push 0xffffffffffffffff
push 0x4d5c08
mov eax, dword fs:[0]
push eax
sub esp, 0x14
mov eax, dword [0x4eb984]
xor eax, ebp
mov dword [ebp + 0x3014], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 0x3020]
push 1
call fcn.0047fc10
push 0x8005
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov ecx, 0x545938
call fcn.00421040
mov byte [0x535501], 0
xor edi, edi
mov dword [0x533428], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x535580], eax
push edi
push edi
push 1
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x5354e8], eax
push str.WMUser_DisplayError
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x533434], eax
push str.General
call fcn.0046c4d0
test al, al
sete byte [ebp - 0x12]
push 0x800
lea eax, [ebp]
push eax
call fcn.00460710
push 0x800
lea ecx, [ebp]
push ecx
call fcn.0045fed0
push 0x800
lea edx, [ebp]
push edx
push 0x533438
call fcn.0047ef70
push 0x800
push 0x4d82ac
push 0x533438
call fcn.0047efb0
push edi
push esi
mov ecx, 0x51f828
call fcn.00475170
push str.winrar.lng
mov ecx, 0x51f804
call fcn.00474f20
push esi
call fcn.004b1f50
test eax, eax
je 0x4b2b8e
lea ecx, [ebp - 0x20]
call fcn.004a4e00
mov dword [ebp - 4], edi
mov dword [0x51f7e0], esi
mov ecx, 0x541ef0
call fcn.00418700
call fcn.0049c3e0
call fcn.0049aeb0
call fcn.004b02d0
call fcn.004b0440
push str.WinRAR_Busy
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x53557c], eax
push edi
push str.WinRarWindow
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
call ebx
mov dword [ebp - 0x18], eax
push edi
push esi
push edi
push edi
push 0x80000000
push 0x80000000
push 0x80000000
push 0x80000000
push 0x6cf0000
push 0x4d9c2c
push str.WinRarWindow
push 0x10
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x535584], eax
cmp eax, edi
je 0x4b2b7f
push eax
mov ecx, 0x51f804
call fcn.00473f90
push edi
call fcn.004afec0
call fcn.004b0220
cmp byte [ebp - 0x12], 0
je 0x4b2602
push 1
push edi
call fcn.00427990
test al, al
mov byte [ebp - 0x11], 1
je 0x4b2606
mov byte [ebp - 0x11], 0
lea eax, [ebp + 0x3000]
push eax
call fcn.00423250
movzx ecx, word [ebp + 0x3000]
push ecx
call fcn.00486ab0
movzx esi, ax
push 0x8c
push edi
push 0x544800
call fcn.004c16b0
add esp, 0xc
push edi
push edi
push 1
mov ecx, 0x545938
call fcn.004230f0
cmp si, di
je 0x4b26b1
cmp byte [0x54794c], 0
jne 0x4b26b1
push esi
push str.AFUMD
call fcn.004c2207
add esp, 8
test eax, eax
jne 0x4b2672
cmp si, 0x43
jne 0x4b268e
cmp word [ebp + 0x3002], di
jne 0x4b268e
call fcn.0049abf0
cmp si, 0x44
je 0x4b2683
cmp si, 0x43
jne 0x4b26b7
xor edx, edx
mov word [0x546948], dx
jmp 0x4b26b7
cmp byte [0x54794c], 0
jne 0x4b26b1
push esi
push 0x4df724
call fcn.004c2207
add esp, 8
test eax, eax
je 0x4b26b1
push edi
call fcn.004a2790
jmp 0x4b26b7
push edi
call fcn.0049aa70
push edi
push edi
push 1
mov ecx, 0x545938
call fcn.004230f0
push 0x545938
mov ecx, 0x5359b8
call fcn.00424aa0
xor eax, eax
jmp 0x4b26e0
movzx ecx, word [eax + 0x550d52]
mov word [eax + 0x5344e8], cx
add eax, 2
cmp cx, di
jne 0x4b26e0
xor eax, eax
mov word [0x550d52], ax
push 0x800
lea ecx, [ebp + 0x1000]
push ecx
call fcn.0049f5a0
lea edx, [ebp + 0x1000]
push edx
mov ecx, 0x53fdc8
call fcn.0044bba0
mov dword [0x53444c], edi
mov byte [ebp - 4], 1
call fcn.00425380
mov dword [ebp - 4], edi
cmp byte [0x54fcfe], 0
jne 0x4b2b7f
mov eax, dword [0x535584]
push eax
call fcn.004aff70
cmp word [0x54aa60], di
je 0x4b2795
push 0x54aa60
call fcn.00460330
cmp eax, 0x54aa60
jne 0x4b277a
push 0x800
push 0x54aa60
push 0x533438
call fcn.00460500
jmp 0x4b2795
mov ecx, 0x54aa60
mov edx, 0x533438
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
cmp ax, di
jne 0x4b2784
push edi
push edi
push 0x8003
mov ecx, dword [0x535584]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x535584], edi
je 0x4b2933
cmp word [0x54fd32], di
jne 0x4b2b01
xor bl, bl
cmp word [0x550d52], di
je 0x4b2add
push 0x550d52
call fcn.0043c370
cmp eax, 0xffffffff
je 0x4b27e6
test al, 0x10
je 0x4b27e6
mov bl, 1
cmp word [0x550d52], di
je 0x4b2abe
test bl, bl
jne 0x4b2ac2
push edi
push str.ReuseWindow
push str.General
call fcn.0046c5f0
test eax, eax
je 0x4b28fd
cmp dword [ebp - 0x18], edi
je 0x4b28fd
push edi
push 0x800
lea edx, [ebp + 0x2000]
push edx
call fcn.0049e210
push 0x800
lea eax, [ebp + 0x2000]
push eax
call fcn.0045fed0
push 0x800
push str.Rar_
lea ecx, [ebp + 0x2000]
push ecx
call fcn.0047efb0
lea eax, [ebp + 0x2000]
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4b2860
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp + 0x2000]
push edx
push 0x550d52
call fcn.004869c0
test eax, eax
je 0x4b28fd
push str.RarArchiveWideName
push 0x1000
push edi
push 0x8000004
push edi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov esi, eax
push 0x1000
push edi
push edi
push 2
push esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov edi, eax
push 0x800
push edi
push 0x550d52
mov ecx, 0x53fdc8
call fcn.0044bbf0
push edi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push 0x7ae964f1
push 0xd489ac5e
push 0x8001
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
setne bl
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
jne 0x4b2aa0
xor edi, edi
push 0x550d52
mov ecx, 0x53fdc8
call fcn.00450a30
test al, al
je 0x4b2aa0
cmp byte [0x533431], 0
jne 0x4b2933
cmp dword [0x5344d8], edi
je 0x4b2a8e
mov ecx, 0x53fdc8
call fcn.00451170
mov esi, dword [ebp - 0x18]
push esi
push 0x10000
push 0x4ad210
call fcn.004c28fb
add esp, 0xc
mov ecx, dword [0x535584]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x4b2968
cmp esi, edi
setne dl
movzx eax, dl
push eax
call fcn.004affc0
mov ecx, dword [0x535584]
push ecx
call dword [sym.imp.USER32.dll_UpdateWindow]
cmp byte [ebp - 0x11], 0
je 0x4b29a4
cmp byte [ebp - 0x12], 0
je 0x4b29a4
push str.Setup
call fcn.0046c4d0
test al, al
jne 0x4b29a4
push 0x4d846c
call fcn.00448e00
test al, al
jne 0x4b29a4
push 6
call fcn.00427780
push edi
push str.ExportedSettings
push 0x4d79fc
call fcn.0046c5f0
test eax, eax
je 0x4b29bd
call fcn.00427680
push edi
push 1
call fcn.0046ccd0
push edi
push str.WizardMode
push str.General
call fcn.0046c5f0
test eax, eax
je 0x4b2a00
mov edx, dword [0x535584]
push edx
call fcn.004b6eb0
test al, al
je 0x4b2a00
cmp dword [0x5344d8], edi
jne 0x4b2a00
mov eax, dword [0x535584]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
lea ecx, [ecx]
push edi
push edi
call fcn.004b20b0
test al, al
jne 0x4b2a00
mov ecx, 0x53fdc4
call fcn.004b2c50
call fcn.004a6030
mov ecx, dword [0x5354e8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov byte [0x535501], 1
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x533428], 0
jle 0x4b2a4c
push 0x64
call edi
dec esi
cmp esi, 0xc8
jl 0x4b2a36
mov edx, dword [0x5354e8]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x534448], 0
je 0x4b2b58
mov dword [0x534448], 0xffffffff
xor esi, esi
cmp dword [0x534448], 0
je 0x4b2b75
push 0x64
call edi
inc esi
cmp esi, 0xa
jl 0x4b2a72
jmp 0x4b2b75
mov ecx, dword [0x535584]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x4b2933
call fcn.004a61b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.004a4e70
mov eax, 1
jmp 0x4b2bbf
test bl, bl
je 0x4b2add
push 0x550d52
call fcn.004b0070
push 0x550d52
mov ecx, 0x53fdc8
call fcn.00450b30
jmp 0x4b2ae7
mov ecx, 0x53fdc8
call fcn.0044c730
push edi
mov ecx, 0x53fdc8
call fcn.0044f550
mov ecx, 0x53fdb8
call fcn.00407af0
jmp 0x4b2933
push 0x544800
call fcn.004256e0
call fcn.004a61b0
cmp dword [0x53444c], 1
jne 0x4b2933
push edi
push str.WinRarWindow
call ebx
test eax, eax
sete dl
movzx eax, dl
push eax
push 1
call fcn.004ac670
mov ecx, 0x51f7f4
call fcn.00420d30
mov esi, dword [0x51f7e8]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.004a4e70
mov eax, esi
jmp 0x4b2bbf
push 0
push str.WinRarWindow
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
sete al
movzx ecx, al
push ecx
push 1
call fcn.004ac670
mov ecx, 0x51f7f4
call fcn.00420d30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.004a4e70
xor eax, eax
jmp 0x4b2bbf
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x3014]
xor ecx, ebp
call fcn.004c0c62
add ebp, 0x3018
mov esp, ebp
pop ebp
ret 0x10