Function at 0x14009e654
Capabilities:
Accept command line arguments
Create thread
Query environment variable

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x18f0
call fcn.1400baa60
sub rsp, rax
mov qword [rsp + 0xc0], 0xfffffffffffffffe
mov qword [rsp + 0x1928], rbx
mov qword [rsp + 0x1930], rbp
mov qword [rsp + 0x1938], rsi
mov rax, qword [0x1400e0920]
xor rax, rsp
mov qword [rsp + 0x18e0], rax
mov rbp, rcx
mov r14d, 1
mov cl, r14b
call fcn.14006c184
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rbx, rax
xor esi, esi
mov dil, sil
movzx eax, word [rax]
cmp ax, si
je 0x14009e6f3
cmp dil, sil
jne 0x14009e6da
movzx ecx, ax
call fcn.14006b49c
cmp al, sil
jne 0x14009e6f3
cmp word [rbx], 0x22
jne 0x14009e6e7
cmp dil, sil
sete dil
add rbx, 2
mov ax, word [rbx]
cmp ax, si
jne 0x14009e6c8
movzx ecx, word [rbx]
call fcn.14006b49c
cmp al, sil
je 0x14009e711
add rbx, 2
movzx ecx, word [rbx]
call fcn.14006b49c
cmp al, sil
jne 0x14009e700
mov ecx, 0x8005
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
call fcn.14006ad9c
lea rcx, [0x140108360]
call fcn.14001dc78
mov byte [0x1400ffcf1], sil
mov dword [0x1400fec00], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x1400ffd74], eax
xor r9d, r9d
xor r8d, r8d
mov edx, r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x1400ffcd0], rax
lea rcx, str.WMUser_DisplayError
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x1400fec10], eax
lea rcx, [0x1400c40d8]
call fcn.14005c400
cmp al, sil
sete r15b
lea rcx, [rsp + 0x8e0]
call fcn.140053344
lea rcx, [rsp + 0x8e0]
call fcn.140052588
mov rdx, rsi
lea r8, [0x1400fec20]
movzx eax, word [rsp + rdx + 0x8e0]
mov word [rdx + r8], ax
add rdx, 2
cmp ax, si
jne 0x14009e7a8
xor eax, eax
or r12, 0xffffffffffffffff
mov rcx, r12
mov rdi, r8
repne scasw ax, word [rdi]
not rcx
sub rcx, r14
lea rdx, [r8 + rcx*2]
mov r8d, 0x1000000
lea rcx, str.rar.log
call fcn.140073c48
xor r8d, r8d
mov rdx, rbp
lea rcx, [0x1400ec674]
call fcn.140061e54
lea rdx, str.winrar.lng
lea rcx, [0x1400ec678]
call fcn.140061a9c
xor edx, edx
lea r8d, [r12 + 0x49]
lea rcx, [rsp + 0x60]
call fcn.1400a9314
lea rdx, [0x14009b568]
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x78], rbp
lea edx, [r12 + 0x66]
mov rcx, qword [0x1400ec660]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0x80], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsp + 0x88], rax
lea r13d, [r12 + 0x11]
mov qword [rsp + 0x90], r13
mov qword [rsp + 0x98], rsi
lea rax, str.WinRarWindow
mov qword [rsp + 0xa0], rax
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x14009f08c
lea rax, [0x140071914]
mov qword [rsp + 0x68], rax
lea edi, [r12 + 7]
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], rsi
lea rax, str.RarTreeWindow
mov qword [rsp + 0xa0], rax
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x14009f08c
lea rax, [0x1400a14b0]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], rsi
mov dword [rsp + 0x74], r13d
lea rax, str.RarViewWindow
mov qword [rsp + 0xa0], rax
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x14009f08c
lea rax, [0x1400957c4]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], rsi
mov dword [rsp + 0x74], esi
lea rax, str.RarCmtWindow
mov qword [rsp + 0xa0], rax
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x14009f08c
lea rcx, [rsp + 0xb0]
call fcn.14008d75c
nop
mov qword [0x1400ec658], rbp
lea rcx, [0x140105fe0]
call fcn.140015afc
call fcn.1400844c4
call fcn.140082e14
call fcn.14009a048
call fcn.14009a1fc
lea r8, str.WinRAR_Busy
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x1400ffd78], rax
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
mov r13, rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov eax, 0x80000000
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9d, 0x6cf0000
lea r8, [0x1400c6ae8]
lea rdx, str.WinRarWindow
lea ecx, [rdi + 0xa]
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x1400ffd80], rax
cmp rax, rsi
jne 0x14009ea27
lea rcx, [rsp + 0xb0]
call fcn.14008d7c8
xor eax, eax
jmp 0x14009f08e
mov rdx, rax
lea rcx, [0x1400ec678]
call fcn.140060b24
xor ecx, ecx
call fcn.1400999f4
call fcn.140099f00
cmp r15b, sil
je 0x14009ea56
mov dl, r14b
xor ecx, ecx
call fcn.1400202d4
cmp al, sil
je 0x14009ea59
mov r14b, sil
lea rdx, [rsp + 0xc8]
mov rcx, rbx
call fcn.1400998c8
movzx ecx, word [rsp + 0xc8]
call fcn.1400a9c5c
mov edi, eax
xor edx, edx
mov r8d, 0x198
lea rcx, [0x1401077f0]
call fcn.1400a9314
mov rcx, rbx
call fcn.1400997fc
mov bpl, al
cmp edi, esi
je 0x14009eae7
cmp al, sil
je 0x14009eae7
movzx edx, di
lea rcx, str.AFUMD
call fcn.1400a978c
cmp rax, rsi
jne 0x14009eae0
cmp edi, 0x43
jne 0x14009eac3
cmp word [rsp + 0xca], si
je 0x14009eae0
movzx edx, di
lea rcx, [0x1400cce18]
call fcn.1400a978c
cmp rax, rsi
je 0x14009eae7
xor ecx, ecx
call fcn.14008a928
jmp 0x14009eaec
call fcn.140082b54
jmp 0x14009eaec
call fcn.1400829f8
mov byte [0x14010d6c9], bpl
lea rdi, [0x140108360]
mov rdx, rdi
lea rcx, [0x1401001e0]
call fcn.1400144f4
mov rdx, rsi
movzx eax, word [rdx + rdi + 0x63bc]
lea rcx, [0x1400ff4d0]
mov word [rdx + rcx], ax
add rdx, 2
cmp ax, si
jne 0x14009eb0c
mov word [0x14010e71c], si
mov dword [0x1400fec18], esi
mov rcx, rbx
call fcn.14009dc2c
cmp byte [0x14010d6be], sil
je 0x14009eb4b
jmp 0x14009f07b
mov rcx, qword [0x1400ffd80]
call fcn.140099acc
cmp byte [0x14010b879], sil
je 0x14009eba8
lea rdi, [0x14010b879]
mov rcx, rdi
call fcn.140052a60
cmp rax, rdi
jne 0x14009eb93
lea rcx, [0x1400fec20]
call fcn.140052af8
mov rdx, rax
mov r8d, 0x1000000
mov rcx, rdi
call fcn.140073c48
jmp 0x14009eba8
mov r8d, 0x1000000
lea rdx, [0x1400fec20]
mov rcx, rdi
call fcn.140073c48
xor r9d, r9d
xor r8d, r8d
mov edx, 0x403
mov rcx, qword [0x1400ffd80]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x1400ffd80], rsi
je 0x14009eef8
cmp byte [0x14010d6eb], sil
jne 0x14009eeac
mov dil, sil
cmp word [0x14010e71c], si
je 0x14009edd3
lea rbp, [0x14010e71c]
mov rdx, rbp
xor ecx, ecx
call fcn.1400311a0
cmp eax, 0xffffffff
je 0x14009ec10
test al, 0x10
movzx edi, sil
mov ebx, 1
cmovne edi, ebx
jmp 0x14009ec15
mov ebx, 1
cmp word [0x14010e71c], si
je 0x14009edb9
cmp dil, sil
jne 0x14009edbe
xor r8d, r8d
lea rdx, str.ReuseWindow
lea rcx, [0x1400c40d8]
call fcn.14005c490
cmp eax, esi
je 0x14009ed52
cmp r13, rsi
je 0x14009ed52
mov edx, 0x400
lea rcx, [rsp + 0xe0]
call fcn.1400861fc
lea rcx, [rsp + 0xe0]
call fcn.140052588
lea rdi, [rsp + 0xe0]
xor eax, eax
mov rcx, r12
repne scasw ax, word [rdi]
mov rax, qword [0x1400cce08]
mov qword [rdi - 2], rax
movzx eax, word [0x1400cce10]
mov word [rdi + 6], ax
xor eax, eax
mov rcx, r12
lea rdi, [rsp + 0xe0]
repne scasw ax, word [rdi]
not rcx
sub rcx, rbx
mov r8, rcx
lea rdx, [rsp + 0xe0]
mov rcx, rbp
call fcn.140073fe4
cmp eax, esi
je 0x14009ed52
lea rax, str.RarArchiveWideName
mov qword [rsp + 0x28], rax
mov edi, 0x800
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor edx, edx
mov r8d, 0x8000004
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rbx, rax
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdi, rax
mov rdx, rax
mov rcx, rbp
call fcn.1400527bc
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, 0x401
mov r9d, 0x7ae964f1
mov r8d, 0xd489ac5e
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, rsi
setne dil
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dil, sil
jne 0x14009eda9
mov rdx, rbp
lea rcx, [0x1401055a0]
call fcn.1400450c0
cmp al, sil
je 0x14009eda9
cmp byte [0x1400fec05], sil
jne 0x14009eef1
cmp qword [0x1400ff4c0], rsi
je 0x14009ed92
lea rcx, [0x1401055a0]
call fcn.140043d34
mov ebx, 1
jmp 0x14009eefd
mov rcx, qword [0x1400ffd80]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov ebx, 1
jmp 0x14009eefd
call fcn.14008f168
nop
mov esi, 1
jmp 0x14009f07b
cmp dil, sil
je 0x14009edd8
mov rcx, rbp
call fcn.140099d8c
mov rcx, rbp
call fcn.14008633c
jmp 0x14009ee90
mov ebx, 1
mov r8d, ebx
lea rdx, str.RestoreFolder
lea rcx, [0x1400c40d8]
call fcn.14005c490
cmp eax, esi
je 0x14009ee2b
mov dword [rsp + 0x20], 0x400
lea r9, [0x1400c3f4c]
lea r8, [rsp + 0xe0]
lea rdx, str.LastFolder
lea rcx, [0x1400c40d8]
call fcn.14005c464
lea rcx, [rsp + 0xe0]
call fcn.14008633c
jmp 0x14009ee90
mov dword [rsp + 0x20], 0x400
lea r9, [0x1400c3f4c]
lea r8, [rsp + 0x10e0]
lea rdx, str.StartFolder
lea rcx, [0x1400c3760]
call fcn.14005c464
mov r8d, 0x400
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x10e0]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov word [rsp + 0x8de], si
cmp word [rsp + 0xe0], si
je 0x14009ee90
lea rcx, [rsp + 0xe0]
call fcn.14008633c
xor edx, edx
lea rcx, [0x1401055a0]
call fcn.1400433a8
lea rcx, [0x1400ffd88]
call fcn.1400074d8
jmp 0x14009eefd
lea rcx, [0x1401077f0]
call fcn.14009e144
call fcn.14008f168
mov ebx, 1
cmp dword [0x1400fec18], ebx
jne 0x14009eefd
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
cmp rax, rsi
sete dl
mov cl, bl
call fcn.140095e14
mov esi, dword [0x1400ec668]
jmp 0x14009f07b
mov ebx, 1
jmp 0x14009eefd
mov ebx, 1
mov r8, r13
mov edx, 0x10000
lea rcx, [0x140096b5c]
call fcn.1400a9934
mov rcx, qword [0x1400ffd80]
call qword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, esi
jne 0x14009ef2d
cmp r13, rsi
setne cl
call fcn.140099cc8
mov rcx, qword [0x1400ffd80]
call qword [sym.imp.USER32.dll_UpdateWindow]
cmp r14b, sil
je 0x14009ef70
cmp r15b, sil
je 0x14009ef70
lea rcx, str.Setup
call fcn.14005c400
cmp al, sil
jne 0x14009ef70
lea rcx, [0x1400c62a8]
call fcn.14003cefc
cmp al, sil
jne 0x14009ef70
mov ecx, 6
call fcn.1400200ec
xor r8d, r8d
lea rdx, str.ExportedSettings
lea rcx, [0x1400c3f4c]
call fcn.14005c490
cmp eax, esi
je 0x14009ef8f
call fcn.14001ffbc
xor r8d, r8d
lea rdx, str.WizardMode
lea rcx, [0x1400c40d8]
call fcn.14005c490
cmp eax, esi
je 0x14009efd0
mov rcx, qword [0x1400ffd80]
call fcn.1400a31f0
cmp al, sil
je 0x14009efd0
cmp qword [0x1400ff4c0], rsi
jne 0x14009efd0
mov rcx, qword [0x1400ffd80]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor edx, edx
xor ecx, ecx
call fcn.14009d664
cmp al, sil
jne 0x14009efd0
lea rcx, [0x1401001d8]
call fcn.14009f0c8
call fcn.14008efc8
mov rcx, qword [0x1400ffcd0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov byte [0x1400ffcf1], bl
mov edi, esi
mov ebp, 0x64
cmp dword [0x1400fec00], esi
jle 0x14009f023
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_Sleep]
sub edi, ebx
cmp edi, 0xc8
jl 0x14009f009
mov rcx, qword [0x1400ffcd0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x1400fec14], esi
je 0x14009f05e
mov dword [0x1400fec14], r12d
mov edi, esi
cmp r12d, esi
je 0x14009f07b
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_Sleep]
add edi, ebx
cmp edi, 0xa
jge 0x14009f07b
mov r12d, dword [0x1400fec14]
jmp 0x14009f041
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
cmp rax, rsi
sete dl
mov cl, bl
call fcn.140095e14
nop
lea rcx, [rsp + 0xb0]
call fcn.14008d7c8
mov eax, esi
jmp 0x14009f08e
xor eax, eax
mov rcx, qword [rsp + 0x18e0]
xor rcx, rsp
call fcn.1400a86e0
lea r11, [rsp + 0x18f0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret