Function at 0x1400dae18
Capabilities:
Create thread

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x3100
call fcn.1400eea70
sub rsp, rax
mov qword [rsp + 0xd0], 0xfffffffffffffffe
mov qword [rsp + 0x3138], rbx
mov qword [rsp + 0x3140], rsi
mov rax, qword [0x14013f2b0]
xor rax, rsp
mov qword [rsp + 0x30f0], rax
mov rbx, rcx
mov edi, 1
mov cl, dil
call fcn.14008e9b4
mov ecx, 0x8005
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea r14, [0x140152710]
mov rcx, r14
call fcn.14005cad8
xor esi, esi
mov byte [0x140146d85], sil
mov dword [0x140146e18], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x140147e30], eax
xor r9d, r9d
xor r8d, r8d
mov edx, edi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x140147e38], rax
lea rcx, str.WMUser_DisplayError
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x140147e34], eax
lea rcx, str.General
call fcn.14009da2c
test al, al
sete r13b
mov r8b, dil
mov r15d, 0x800
mov edx, r15d
lea rcx, [rsp + 0x10f0]
call fcn.140078808
mov edx, r15d
lea rcx, [rsp + 0x10f0]
call fcn.140077908
mov r8d, r15d
lea rdx, [rsp + 0x10f0]
lea r12, [0x140146e20]
mov rcx, r12
call fcn.14008df58
mov r8d, r15d
lea rdx, str.rar.log
mov rcx, r12
call fcn.14008df20
xor r8d, r8d
mov rdx, rbx
lea rcx, [0x14017d180]
call fcn.140087d30
lea rdx, str.winrar.lng
lea rcx, [0x14017d190]
call fcn.140086e54
xor edx, edx
lea r8d, [rdi + 0x47]
lea rcx, [rsp + 0x70]
call fcn.1400efd00
lea rax, [0x1400d8a4c]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x88], rbx
lea edx, [rdi + 0x64]
mov rcx, qword [0x14017d140]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0x90], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsp + 0x98], rax
movdqa xmm0, xmmword [0x14011cc10]
movdqa xmmword [rsp + 0xa0], xmm0
lea r15, str.WinRarWindow
mov qword [rsp + 0xb0], r15
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400db7df
lea rax, [0x1400ada4c]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x140119970]
movdqa xmmword [rsp + 0xa0], xmm0
lea rax, str.RarTreeWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400db7df
lea rax, [0x1400a085c]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x14011cc10]
movdqa xmmword [rsp + 0xa0], xmm0
lea rax, str.RarReminder
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400db7df
lea rax, [0x1400dea78]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x140119970]
movdqa xmmword [rsp + 0xa0], xmm0
lea r12d, [rdi + 0xf]
mov dword [rsp + 0x84], r12d
lea rax, str.RarViewWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400db7df
lea rax, [0x1400cda80]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x140119970]
movdqa xmmword [rsp + 0xa0], xmm0
mov dword [rsp + 0x84], esi
lea rax, str.RarCmtWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400db7df
lea rcx, [rsp + 0xc0]
call fcn.1400ccbf8
nop
mov qword [0x14017d148], rbx
lea rcx, [0x140169340]
call fcn.140005c10
call fcn.1400c056c
call fcn.1400bb4f8
call fcn.1400daa04
lea r8, str.WinRAR_Busy
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x140146e08], rax
xor edx, edx
mov rcx, r15
call qword [sym.imp.USER32.dll_FindWindowW]
mov r15, rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov eax, 0x80000000
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9d, 0x6cf0000
lea r8, [0x140112360]
lea rdx, str.WinRarWindow
mov ecx, r12d
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140145cd8], rax
test rax, rax
je 0x1400db610
mov rdx, rax
lea rcx, [0x14017d190]
call fcn.140087680
xor ecx, ecx
call fcn.1400d8990
call fcn.1400da840
test r13b, r13b
je 0x1400db1d6
call fcn.14009feb4
test al, al
jne 0x1400db1d6
mov dl, dil
xor ecx, ecx
call fcn.14000abb0
test al, al
mov r12b, dil
je 0x1400db1d9
mov r12b, sil
lea rcx, [rsp + 0xd8]
call fcn.14000a0a0
movzx ecx, word [rsp + 0xd8]
call fcn.140090fe0
mov ebx, eax
xor edx, edx
mov r8d, 0x460
lea rcx, [0x140147e70]
call fcn.1400efd00
xor r9d, r9d
xor r8d, r8d
mov dl, dil
mov rcx, r14
call fcn.14005cf80
call fcn.140010334
test bx, bx
je 0x1400db28e
cmp byte [0x14015472c], sil
jne 0x1400db28e
movzx edx, bx
lea rcx, str.AFUMD
call fcn.1400efc50
test rax, rax
jne 0x1400db277
cmp bx, 0x43
jne 0x1400db251
cmp word [rsp + 0xda], si
je 0x1400db277
cmp byte [0x14015472c], sil
jne 0x1400db28e
movzx edx, bx
lea rcx, [0x14011cb58]
call fcn.1400efc50
test rax, rax
je 0x1400db28e
xor ecx, ecx
call fcn.1400cc3f4
jmp 0x1400db295
call fcn.1400c3dec
sub bx, 0x43
cmp bx, di
ja 0x1400db295
mov word [0x140153728], si
jmp 0x1400db295
xor ecx, ecx
call fcn.1400c05a8
xor r9d, r9d
xor r8d, r8d
mov dl, dil
mov rcx, r14
call fcn.14005cf80
mov rdx, r14
lea rcx, [0x14015ef20]
call fcn.1400080ac
mov rcx, rsi
movzx eax, word [rcx + r14 + 0xb442]
lea rdx, [0x140145ce0]
mov word [rcx + rdx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1400db2b8
mov word [0x14015db52], si
mov edx, 0x800
lea rcx, [rsp + 0x20f0]
call fcn.1400c6370
lea rdx, [rsp + 0x20f0]
lea r14, [0x14016c120]
mov rcx, r14
call fcn.1400444fc
mov dword [0x140146d08], esi
call fcn.140009c64
nop
mov rcx, qword [0x140145cd8]
call fcn.1400dac50
cmp word [0x140157844], si
je 0x1400db378
lea rbx, [0x140157844]
mov rcx, rbx
call fcn.1400792dc
cmp rax, rbx
jne 0x1400db351
mov r8d, 0x800
mov rdx, rbx
lea rcx, [0x140146e20]
call fcn.1400793d8
jmp 0x1400db378
mov rcx, rsi
lea rdx, [0x140152710]
lea r9, [0x140146e20]
movzx eax, word [rcx + rdx + 0x5134]
mov word [rcx + r9], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1400db362
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8003
mov rcx, qword [0x140145cd8]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x140145cd8], rsi
je 0x1400db624
cmp word [0x14015cb32], si
jne 0x1400db5c8
mov bl, sil
cmp word [0x14015db52], si
je 0x1400db5a8
lea rcx, [0x14015db52]
call fcn.140068ffc
cmp eax, 0xffffffff
je 0x1400db3d3
test al, 0x10
movzx ebx, bl
cmovne ebx, edi
cmp word [0x14015db52], si
je 0x1400db584
test bl, bl
jne 0x1400db588
xor r8d, r8d
lea rdx, str.ReuseWindow
lea rcx, str.General
call fcn.14009f550
test eax, eax
je 0x1400db521
test r15, r15
je 0x1400db521
xor r8d, r8d
mov ebx, 0x800
mov edx, ebx
lea rcx, [rsp + 0xf0]
call fcn.1400c4ff8
mov edx, ebx
lea rcx, [rsp + 0xf0]
call fcn.140077908
mov r8d, ebx
lea rdx, str.Rar_
lea rcx, [rsp + 0xf0]
call fcn.14008df20
lea rax, [rsp + 0xf0]
or r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp word [rax + r8*2], si
jne 0x1400db45b
lea rdx, [rsp + 0xf0]
lea rcx, [0x14015db52]
call fcn.1400910d0
test eax, eax
je 0x1400db525
lea rax, str.RarArchiveWideName
mov qword [rsp + 0x28], rax
mov ebx, 0x1000
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor edx, edx
mov r8d, 0x8000004
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rdi, rax
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
mov r9d, 0x800
mov r8, rax
lea rdx, [0x14015db52]
lea rcx, [0x14016c120]
call fcn.140040770
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, 0x8001
mov r9d, 0x7ae964f1
mov r8d, 0xd489ac5e
mov rcx, r15
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
setne bl
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
jne 0x1400db575
mov edi, 1
jmp 0x1400db525
or r14, 0xffffffffffffffff
lea rdx, [0x14015db52]
lea rcx, [0x14016c120]
call fcn.140041050
test al, al
je 0x1400db575
cmp byte [0x140145ca4], sil
jne 0x1400db628
cmp qword [0x140146cf8], rsi
je 0x1400db563
lea rcx, [0x14016c120]
call fcn.140043d78
jmp 0x1400db628
mov rcx, qword [0x140145cd8]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x1400db628
call fcn.1400d7f38
mov esi, 1
jmp 0x1400db610
test bl, bl
je 0x1400db5a8
lea rcx, [0x14015db52]
call fcn.1400d8808
mov r8b, dil
lea rdx, [0x14015db52]
mov rcx, r14
call fcn.14003e820
jmp 0x1400db5b0
mov rcx, r14
call fcn.140043f94
xor edx, edx
mov rcx, r14
call fcn.140043178
lea rcx, [0x14016bcd0]
call fcn.140001f68
jmp 0x1400db624
lea rcx, [0x140147e70]
call fcn.14000a178
call fcn.1400d7f38
cmp dword [0x140146d08], edi
jne 0x1400db624
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
sete dl
mov cl, dil
call fcn.1400cd788
lea rcx, [0x14017d1d8]
call fcn.14006c52c
mov esi, dword [0x14017d200]
lea rcx, [rsp + 0xc0]
call fcn.1400ccc70
mov eax, esi
jmp 0x1400db7e1
or r14, 0xffffffffffffffff
mov r8, r15
mov edx, 0x10000
lea rcx, [0x1400cd95c]
call fcn.1400f65c8
mov rcx, qword [0x140145cd8]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x1400db658
test r15, r15
setne cl
call fcn.1400da91c
mov rcx, qword [0x140145cd8]
call qword [sym.imp.USER32.dll_UpdateWindow]
test r12b, r12b
je 0x1400db699
test r13b, r13b
je 0x1400db699
lea rcx, str.Setup
call fcn.14009da2c
test al, al
jne 0x1400db699
lea rcx, [0x14010d940]
call fcn.14003b2d4
test al, al
jne 0x1400db699
mov ecx, 6
call fcn.14000d000
xor r8d, r8d
lea rdx, str.ExportedSettings
lea rcx, [0x14010d188]
call fcn.14009f550
test eax, eax
je 0x1400db6b8
call fcn.14000aad8
xor edx, edx
mov cl, dil
call fcn.1400a0f88
xor r8d, r8d
lea rdx, str.WizardMode
lea rcx, str.General
call fcn.14009f550
test eax, eax
je 0x1400db702
mov rcx, qword [0x140145cd8]
call fcn.1400df264
test al, al
je 0x1400db702
cmp qword [0x140146cf8], rsi
jne 0x1400db702
mov rcx, qword [0x140145cd8]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor edx, edx
xor ecx, ecx
call fcn.1400da370
test al, al
jne 0x1400db702
lea rcx, [0x140147e68]
call fcn.1400dbefc
call fcn.1400cda64
mov byte [0x140146d85], dil
mov rcx, qword [0x140147e38]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov ebx, esi
mov r15d, reloc.SHELL32.dll_SHRestricted
cmp dword [0x140146e18], esi
jle 0x1400db757
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
sub ebx, edi
cmp ebx, 0xc8
jl 0x1400db73c
mov rcx, qword [0x140147e38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x140146d0c], esi
je 0x1400db793
mov dword [0x140146d0c], r14d
mov ebx, esi
test r14d, r14d
je 0x1400db7b0
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
add ebx, edi
cmp ebx, 0xa
jge 0x1400db7b0
mov r14d, dword [0x140146d0c]
jmp 0x1400db775
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
sete dl
mov cl, dil
call fcn.1400cd788
lea rcx, [0x14017d1d8]
call fcn.14006c52c
nop
lea rcx, [rsp + 0xc0]
call fcn.1400ccc70
jmp 0x1400db7df
xor eax, eax
mov rcx, qword [rsp + 0x30f0]
xor rcx, rsp
call fcn.1400eeae0
lea r11, [rsp + 0x3100]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret