Function at 0x1400daf14
Capabilities:
Create thread

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x3100
call fcn.1400eeb60
sub rsp, rax
mov qword [rsp + 0xd0], 0xfffffffffffffffe
mov qword [rsp + 0x3138], rbx
mov qword [rsp + 0x3140], rsi
mov rax, qword [0x14013f2b0]
xor rax, rsp
mov qword [rsp + 0x30f0], rax
mov rbx, rcx
mov edi, 1
mov cl, dil
call fcn.14008ea84
mov ecx, 0x8005
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea r14, [0x140152710]
mov rcx, r14
call fcn.14005cab4
xor esi, esi
mov byte [0x140146d85], sil
mov dword [0x140146e18], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x140147e30], eax
xor r9d, r9d
xor r8d, r8d
mov edx, edi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x140147e38], rax
lea rcx, str.WMUser_DisplayError
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x140147e34], eax
lea rcx, [0x14010d6c0]
call fcn.14009db10
test al, al
sete r13b
mov r8b, dil
mov r15d, 0x800
mov edx, r15d
lea rcx, [rsp + 0x10f0]
call fcn.14007885c
mov edx, r15d
lea rcx, [rsp + 0x10f0]
call fcn.14007795c
mov r8d, r15d
lea rdx, [rsp + 0x10f0]
lea r12, [0x140146e20]
mov rcx, r12
call fcn.14008e130
mov r8d, r15d
lea rdx, str.rar.log
mov rcx, r12
call fcn.14008e0f8
xor r8d, r8d
mov rdx, rbx
lea rcx, [0x14017d180]
call fcn.140087f08
lea rdx, str.winrar.lng
lea rcx, [0x14017d190]
call fcn.140087024
xor edx, edx
lea r8d, [rdi + 0x47]
lea rcx, [rsp + 0x70]
call fcn.1400efdf0
lea rax, [0x1400d8b4c]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x88], rbx
lea edx, [rdi + 0x64]
mov rcx, qword [0x14017d140]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0x90], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsp + 0x98], rax
movdqa xmm0, xmmword [0x14011cbf0]
movdqa xmmword [rsp + 0xa0], xmm0
lea r15, str.WinRarWindow
mov qword [rsp + 0xb0], r15
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400db8db
lea rax, [0x1400adb30]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x140119950]
movdqa xmmword [rsp + 0xa0], xmm0
lea rax, str.RarTreeWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400db8db
lea rax, [0x1400a0908]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x14011cbf0]
movdqa xmmword [rsp + 0xa0], xmm0
lea rax, str.RarReminder
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400db8db
lea rax, [0x1400deb6c]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x140119950]
movdqa xmmword [rsp + 0xa0], xmm0
lea r12d, [rdi + 0xf]
mov dword [rsp + 0x84], r12d
lea rax, str.RarViewWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400db8db
lea rax, [0x1400cdbec]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x140119950]
movdqa xmmword [rsp + 0xa0], xmm0
mov dword [rsp + 0x84], esi
lea rax, str.RarCmtWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400db8db
lea rcx, [rsp + 0xc0]
call fcn.1400ccd64
nop
mov qword [0x14017d148], rbx
lea rcx, [0x140169340]
call fcn.140005b44
call fcn.1400c06d8
call fcn.1400bb664
call fcn.1400dab00
lea r8, str.WinRAR_Busy
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x140146e08], rax
xor edx, edx
mov rcx, r15
call qword [sym.imp.USER32.dll_FindWindowW]
mov r15, rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov eax, 0x80000000
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9d, 0x6cf0000
lea r8, [0x140112360]
lea rdx, str.WinRarWindow
mov ecx, r12d
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140145cd8], rax
test rax, rax
je 0x1400db70c
mov rdx, rax
lea rcx, [0x14017d190]
call fcn.140087850
xor ecx, ecx
call fcn.1400d8a90
call fcn.1400da93c
test r13b, r13b
je 0x1400db2d2
call fcn.14009ff90
test al, al
jne 0x1400db2d2
mov dl, dil
xor ecx, ecx
call fcn.14000ac00
test al, al
mov r12b, dil
je 0x1400db2d5
mov r12b, sil
lea rcx, [rsp + 0xd8]
call fcn.14000a0f0
movzx ecx, word [rsp + 0xd8]
call fcn.1400910c4
mov ebx, eax
xor edx, edx
mov r8d, 0x460
lea rcx, [0x140147e70]
call fcn.1400efdf0
xor r9d, r9d
xor r8d, r8d
mov dl, dil
mov rcx, r14
call fcn.14005cf5c
call fcn.140010390
test bx, bx
je 0x1400db38a
cmp byte [0x14015472c], sil
jne 0x1400db38a
movzx edx, bx
lea rcx, str.AFUMD
call fcn.1400efd40
test rax, rax
jne 0x1400db373
cmp bx, 0x43
jne 0x1400db34d
cmp word [rsp + 0xda], si
je 0x1400db373
cmp byte [0x14015472c], sil
jne 0x1400db38a
movzx edx, bx
lea rcx, [0x14011cb38]
call fcn.1400efd40
test rax, rax
je 0x1400db38a
xor ecx, ecx
call fcn.1400cc560
jmp 0x1400db391
call fcn.1400c3f58
sub bx, 0x43
cmp bx, di
ja 0x1400db391
mov word [0x140153728], si
jmp 0x1400db391
xor ecx, ecx
call fcn.1400c0714
xor r9d, r9d
xor r8d, r8d
mov dl, dil
mov rcx, r14
call fcn.14005cf5c
mov rdx, r14
lea rcx, [0x14015ef20]
call fcn.14000800c
mov rcx, rsi
movzx eax, word [rcx + r14 + 0xb442]
lea rdx, [0x140145ce0]
mov word [rcx + rdx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1400db3b4
mov word [0x14015db52], si
mov edx, 0x800
lea rcx, [rsp + 0x20f0]
call fcn.1400c64dc
lea rdx, [rsp + 0x20f0]
lea r14, [0x14016c120]
mov rcx, r14
call fcn.14004450c
mov dword [0x140146d08], esi
call fcn.140009cb4
nop
mov rcx, qword [0x140145cd8]
call fcn.1400dad4c
cmp word [0x140157844], si
je 0x1400db474
lea rbx, [0x140157844]
mov rcx, rbx
call fcn.140079330
cmp rax, rbx
jne 0x1400db44d
mov r8d, 0x800
mov rdx, rbx
lea rcx, [0x140146e20]
call fcn.14007942c
jmp 0x1400db474
mov rcx, rsi
lea rdx, [0x140152710]
lea r9, [0x140146e20]
movzx eax, word [rcx + rdx + 0x5134]
mov word [rcx + r9], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1400db45e
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8003
mov rcx, qword [0x140145cd8]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x140145cd8], rsi
je 0x1400db720
cmp word [0x14015cb32], si
jne 0x1400db6c4
mov bl, sil
cmp word [0x14015db52], si
je 0x1400db6a4
lea rcx, [0x14015db52]
call fcn.140069054
cmp eax, 0xffffffff
je 0x1400db4cf
test al, 0x10
movzx ebx, bl
cmovne ebx, edi
cmp word [0x14015db52], si
je 0x1400db680
test bl, bl
jne 0x1400db684
xor r8d, r8d
lea rdx, str.ReuseWindow
lea rcx, [0x14010d6c0]
call fcn.14009f660
test eax, eax
je 0x1400db61d
test r15, r15
je 0x1400db61d
xor r8d, r8d
mov ebx, 0x800
mov edx, ebx
lea rcx, [rsp + 0xf0]
call fcn.1400c5164
mov edx, ebx
lea rcx, [rsp + 0xf0]
call fcn.14007795c
mov r8d, ebx
lea rdx, str.Rar_
lea rcx, [rsp + 0xf0]
call fcn.14008e0f8
lea rax, [rsp + 0xf0]
or r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp word [rax + r8*2], si
jne 0x1400db557
lea rdx, [rsp + 0xf0]
lea rcx, [0x14015db52]
call fcn.1400911b4
test eax, eax
je 0x1400db621
lea rax, str.RarArchiveWideName
mov qword [rsp + 0x28], rax
mov ebx, 0x1000
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor edx, edx
mov r8d, 0x8000004
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rdi, rax
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
mov r9d, 0x800
mov r8, rax
lea rdx, [0x14015db52]
lea rcx, [0x14016c120]
call fcn.140040780
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, 0x8001
mov r9d, 0x7ae964f1
mov r8d, 0xd489ac5e
mov rcx, r15
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
setne bl
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
jne 0x1400db671
mov edi, 1
jmp 0x1400db621
or r14, 0xffffffffffffffff
lea rdx, [0x14015db52]
lea rcx, [0x14016c120]
call fcn.140041060
test al, al
je 0x1400db671
cmp byte [0x140145ca4], sil
jne 0x1400db724
cmp qword [0x140146cf8], rsi
je 0x1400db65f
lea rcx, [0x14016c120]
call fcn.140043d88
jmp 0x1400db724
mov rcx, qword [0x140145cd8]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x1400db724
call fcn.1400d8038
mov esi, 1
jmp 0x1400db70c
test bl, bl
je 0x1400db6a4
lea rcx, [0x14015db52]
call fcn.1400d8908
mov r8b, dil
lea rdx, [0x14015db52]
mov rcx, r14
call fcn.14003e830
jmp 0x1400db6ac
mov rcx, r14
call fcn.140043fa4
xor edx, edx
mov rcx, r14
call fcn.140043188
lea rcx, [0x14016bcd0]
call fcn.140001f60
jmp 0x1400db720
lea rcx, [0x140147e70]
call fcn.14000a1c8
call fcn.1400d8038
cmp dword [0x140146d08], edi
jne 0x1400db720
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
sete dl
mov cl, dil
call fcn.1400cd8f4
lea rcx, [0x14017d1d8]
call fcn.14006c580
mov esi, dword [0x14017d200]
lea rcx, [rsp + 0xc0]
call fcn.1400ccddc
mov eax, esi
jmp 0x1400db8dd
or r14, 0xffffffffffffffff
mov r8, r15
mov edx, 0x10000
lea rcx, [0x1400cdac8]
call fcn.1400f66d8
mov rcx, qword [0x140145cd8]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x1400db754
test r15, r15
setne cl
call fcn.1400daa18
mov rcx, qword [0x140145cd8]
call qword [sym.imp.USER32.dll_UpdateWindow]
test r12b, r12b
je 0x1400db795
test r13b, r13b
je 0x1400db795
lea rcx, [0x14010d658]
call fcn.14009db10
test al, al
jne 0x1400db795
lea rcx, [0x14010d940]
call fcn.14003b2e4
test al, al
jne 0x1400db795
mov ecx, 6
call fcn.14000d05c
xor r8d, r8d
lea rdx, str.ExportedSettings
lea rcx, [0x14010d188]
call fcn.14009f660
test eax, eax
je 0x1400db7b4
call fcn.14000ab28
xor edx, edx
mov cl, dil
call fcn.1400a1034
xor r8d, r8d
lea rdx, str.WizardMode
lea rcx, [0x14010d6c0]
call fcn.14009f660
test eax, eax
je 0x1400db7fe
mov rcx, qword [0x140145cd8]
call fcn.1400df358
test al, al
je 0x1400db7fe
cmp qword [0x140146cf8], rsi
jne 0x1400db7fe
mov rcx, qword [0x140145cd8]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor edx, edx
xor ecx, ecx
call fcn.1400da46c
test al, al
jne 0x1400db7fe
lea rcx, [0x140147e68]
call fcn.1400dbff0
call fcn.1400cdbd0
mov byte [0x140146d85], dil
mov rcx, qword [0x140147e38]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov ebx, esi
mov r15d, reloc.SHELL32.dll_SHRestricted
cmp dword [0x140146e18], esi
jle 0x1400db853
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
sub ebx, edi
cmp ebx, 0xc8
jl 0x1400db838
mov rcx, qword [0x140147e38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x140146d0c], esi
je 0x1400db88f
mov dword [0x140146d0c], r14d
mov ebx, esi
test r14d, r14d
je 0x1400db8ac
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
add ebx, edi
cmp ebx, 0xa
jge 0x1400db8ac
mov r14d, dword [0x140146d0c]
jmp 0x1400db871
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
sete dl
mov cl, dil
call fcn.1400cd8f4
lea rcx, [0x14017d1d8]
call fcn.14006c580
nop
lea rcx, [rsp + 0xc0]
call fcn.1400ccddc
jmp 0x1400db8db
xor eax, eax
mov rcx, qword [rsp + 0x30f0]
xor rcx, rsp
call fcn.1400eebd0
lea r11, [rsp + 0x3100]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret