Function at 0x4b2aa0
Capabilities:
Create thread

Disassembly:
push ebp
lea ebp, [esp - 0x3018]
mov eax, 0x3018
call fcn.004c1320
push 0xffffffffffffffff
push 0x4d6498
mov eax, dword fs:[0]
push eax
sub esp, 0x14
mov eax, dword [0x4eb0b4]
xor eax, ebp
mov dword [ebp + 0x3014], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 0x3020]
push 1
call fcn.004801b0
push 0x8005
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov ecx, 0x545058
call fcn.00421340
mov byte [0x534c21], 0
xor edi, edi
mov dword [0x532b48], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x534ca0], eax
push edi
push edi
push 1
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x534c08], eax
push str.WMUser_DisplayError
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x532b54], eax
push 0x4d7f58
call fcn.0046c7d0
test al, al
sete byte [ebp - 0x12]
push 1
push 0x800
lea eax, [ebp]
push eax
call fcn.00460a10
push 0x800
lea ecx, [ebp]
push ecx
call fcn.004601c0
push 0x800
lea edx, [ebp]
push edx
push 0x532b58
call fcn.0047f480
push 0x800
push 0x4d82ac
push 0x532b58
call fcn.0047f4c0
push edi
push esi
mov ecx, 0x51ef4c
call fcn.00475630
push str.winrar.lng
mov ecx, 0x51ef28
call fcn.004753e0
push esi
call fcn.004b25c0
test eax, eax
je 0x4b31fe
lea ecx, [ebp - 0x20]
call fcn.004a5560
mov dword [ebp - 4], edi
mov dword [0x51ef00], esi
mov ecx, 0x541610
call fcn.00418920
call fcn.0049cb60
call fcn.0049b6b0
call fcn.004b0aa0
push str.WinRAR_Busy
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x534c9c], eax
push edi
push str.WinRarWindow
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
call ebx
mov dword [ebp - 0x18], eax
push edi
push esi
push edi
push edi
push 0x80000000
push 0x80000000
push 0x80000000
push 0x80000000
push 0x6cf0000
push 0x4d9bec
push str.WinRarWindow
push 0x10
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x534ca4], eax
cmp eax, edi
je 0x4b31ef
push eax
mov ecx, 0x51ef28
call fcn.00474450
push edi
call fcn.004b0690
call fcn.004b09f0
cmp byte [ebp - 0x12], 0
je 0x4b2c6f
push 1
push edi
call fcn.00427d10
test al, al
mov byte [ebp - 0x11], 1
je 0x4b2c73
mov byte [ebp - 0x11], 0
lea eax, [ebp + 0x3000]
push eax
call fcn.00423590
movzx ecx, word [ebp + 0x3000]
push ecx
call fcn.004870e0
movzx esi, ax
push 0x8c
push edi
push 0x543f20
call fcn.004c1d50
add esp, 0xc
push edi
push edi
push 1
mov ecx, 0x545058
call fcn.00423430
cmp si, di
je 0x4b2d1e
cmp byte [0x54706c], 0
jne 0x4b2d1e
push esi
push str.AFUMD
call fcn.004c28a7
add esp, 8
test eax, eax
jne 0x4b2cdf
cmp si, 0x43
jne 0x4b2cfb
cmp word [ebp + 0x3002], di
jne 0x4b2cfb
call fcn.0049b3f0
cmp si, 0x44
je 0x4b2cf0
cmp si, 0x43
jne 0x4b2d24
xor edx, edx
mov word [0x546068], dx
jmp 0x4b2d24
cmp byte [0x54706c], 0
jne 0x4b2d1e
push esi
push 0x4df6cc
call fcn.004c28a7
add esp, 8
test eax, eax
je 0x4b2d1e
push edi
call fcn.004a2ee0
jmp 0x4b2d24
push edi
call fcn.0049b270
push edi
push edi
push 1
mov ecx, 0x545058
call fcn.00423430
push 0x545058
mov ecx, 0x5350d8
call fcn.00424dd0
xor eax, eax
jmp 0x4b2d50
movzx ecx, word [eax + 0x550472]
mov word [eax + 0x533c08], cx
add eax, 2
cmp cx, di
jne 0x4b2d50
xor eax, eax
mov word [0x550472], ax
push 0x800
lea ecx, [ebp + 0x1000]
push ecx
call fcn.0049fd20
lea edx, [ebp + 0x1000]
push edx
mov ecx, 0x53f4e8
call fcn.0044bfa0
mov dword [0x533b6c], edi
mov byte [ebp - 4], 1
call fcn.004256c0
mov dword [ebp - 4], edi
cmp byte [0x54f41e], 0
jne 0x4b31ef
mov eax, dword [0x534ca4]
push eax
call fcn.004b0740
cmp word [0x54a180], di
je 0x4b2e05
push 0x54a180
call fcn.00460620
cmp eax, 0x54a180
jne 0x4b2dea
push 0x800
push 0x54a180
push 0x532b58
call fcn.004607f0
jmp 0x4b2e05
mov ecx, 0x54a180
mov edx, 0x532b58
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
cmp ax, di
jne 0x4b2df4
push edi
push edi
push 0x8003
mov ecx, dword [0x534ca4]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x534ca4], edi
je 0x4b2fa3
cmp word [0x54f452], di
jne 0x4b3171
xor bl, bl
cmp word [0x550472], di
je 0x4b314d
push 0x550472
call fcn.0043c5d0
cmp eax, 0xffffffff
je 0x4b2e56
test al, 0x10
je 0x4b2e56
mov bl, 1
cmp word [0x550472], di
je 0x4b312e
test bl, bl
jne 0x4b3132
push edi
push str.ReuseWindow
push 0x4d7f58
call fcn.0046c8f0
test eax, eax
je 0x4b2f6d
cmp dword [ebp - 0x18], edi
je 0x4b2f6d
push edi
push 0x800
lea edx, [ebp + 0x2000]
push edx
call fcn.0049e990
push 0x800
lea eax, [ebp + 0x2000]
push eax
call fcn.004601c0
push 0x800
push str.Rar_
lea ecx, [ebp + 0x2000]
push ecx
call fcn.0047f4c0
lea eax, [ebp + 0x2000]
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4b2ed0
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp + 0x2000]
push edx
push 0x550472
call fcn.00486ff0
test eax, eax
je 0x4b2f6d
push str.RarArchiveWideName
push 0x1000
push edi
push 0x8000004
push edi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov esi, eax
push 0x1000
push edi
push edi
push 2
push esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov edi, eax
push 0x800
push edi
push 0x550472
mov ecx, 0x53f4e8
call fcn.0044bff0
push edi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push 0x7ae964f1
push 0xd489ac5e
push 0x8001
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
setne bl
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
jne 0x4b3110
xor edi, edi
push 0x550472
mov ecx, 0x53f4e8
call fcn.00450ed0
test al, al
je 0x4b3110
cmp byte [0x532b51], 0
jne 0x4b2fa3
cmp dword [0x533bf8], edi
je 0x4b30fe
mov ecx, 0x53f4e8
call fcn.00451660
mov esi, dword [ebp - 0x18]
push esi
push 0x10000
push 0x4ad000
call fcn.004c2f9b
add esp, 0xc
mov ecx, dword [0x534ca4]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x4b2fd8
cmp esi, edi
setne dl
movzx eax, dl
push eax
call fcn.004b0790
mov ecx, dword [0x534ca4]
push ecx
call dword [sym.imp.USER32.dll_UpdateWindow]
cmp byte [ebp - 0x11], 0
je 0x4b3014
cmp byte [ebp - 0x12], 0
je 0x4b3014
push 0x4d7e8c
call fcn.0046c7d0
test al, al
jne 0x4b3014
push 0x4d846c
call fcn.00449130
test al, al
jne 0x4b3014
push 6
call fcn.00427b00
push edi
push str.ExportedSettings
push 0x4d79fc
call fcn.0046c8f0
test eax, eax
je 0x4b302d
call fcn.00427a00
push edi
push 1
call fcn.0046d150
push edi
push str.WizardMode
push 0x4d7f58
call fcn.0046c8f0
test eax, eax
je 0x4b3070
mov edx, dword [0x534ca4]
push edx
call fcn.004b7530
test al, al
je 0x4b3070
cmp dword [0x533bf8], edi
jne 0x4b3070
mov eax, dword [0x534ca4]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
lea ecx, [ecx]
push edi
push edi
call fcn.004b2720
test al, al
jne 0x4b3070
mov ecx, 0x53f4e4
call fcn.004b32d0
call fcn.004a6850
mov ecx, dword [0x534c08]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov byte [0x534c21], 1
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x532b48], 0
jle 0x4b30bc
push 0x64
call edi
dec esi
cmp esi, 0xc8
jl 0x4b30a6
mov edx, dword [0x534c08]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x533b68], 0
je 0x4b31c8
mov dword [0x533b68], 0xffffffff
xor esi, esi
cmp dword [0x533b68], 0
je 0x4b31e5
push 0x64
call edi
inc esi
cmp esi, 0xa
jl 0x4b30e2
jmp 0x4b31e5
mov ecx, dword [0x534ca4]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x4b2fa3
call fcn.004a69d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.004a55d0
mov eax, 1
jmp 0x4b322f
test bl, bl
je 0x4b314d
push 0x550472
call fcn.004b0840
push 0x550472
mov ecx, 0x53f4e8
call fcn.00450ff0
jmp 0x4b3157
mov ecx, 0x53f4e8
call fcn.0044cba0
push edi
mov ecx, 0x53f4e8
call fcn.0044f9e0
mov ecx, 0x53f4d8
call fcn.00407ce0
jmp 0x4b2fa3
push 0x543f20
call fcn.00425a60
call fcn.004a69d0
cmp dword [0x533b6c], 1
jne 0x4b2fa3
push edi
push str.WinRarWindow
call ebx
test eax, eax
sete dl
movzx eax, dl
push eax
push 1
call fcn.004aa210
mov ecx, 0x51ef18
call fcn.00421030
mov esi, dword [0x51ef08]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.004a55d0
mov eax, esi
jmp 0x4b322f
push 0
push str.WinRarWindow
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
sete al
movzx ecx, al
push ecx
push 1
call fcn.004aa210
mov ecx, 0x51ef18
call fcn.00421030
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.004a55d0
xor eax, eax
jmp 0x4b322f
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x3014]
xor ecx, ebp
call fcn.004c1302
add ebp, 0x3018
mov esp, ebp
pop ebp
ret 0x10