Function at 0x14009e4e0
Capabilities:
Accept command line arguments
Create thread
Query environment variable

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x18f0
call fcn.1400ba8b0
sub rsp, rax
mov qword [rsp + 0xc0], 0xfffffffffffffffe
mov qword [rsp + 0x1928], rbx
mov qword [rsp + 0x1930], rbp
mov qword [rsp + 0x1938], rsi
mov rax, qword [0x1400e0920]
xor rax, rsp
mov qword [rsp + 0x18e0], rax
mov rbp, rcx
call fcn.14006c0ac
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rbx, rax
xor esi, esi
mov dil, sil
movzx eax, word [rax]
cmp ax, si
je 0x14009e576
cmp dil, sil
jne 0x14009e55d
movzx ecx, ax
call fcn.14006b3c4
cmp al, sil
jne 0x14009e576
cmp word [rbx], 0x22
jne 0x14009e56a
cmp dil, sil
sete dil
add rbx, 2
mov ax, word [rbx]
cmp ax, si
jne 0x14009e54b
movzx ecx, word [rbx]
call fcn.14006b3c4
cmp al, sil
je 0x14009e594
add rbx, 2
movzx ecx, word [rbx]
call fcn.14006b3c4
cmp al, sil
jne 0x14009e583
mov ecx, 0x8005
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
call fcn.14006acc4
lea rcx, [0x140108330]
call fcn.14001dc50
mov byte [0x1400ffcf1], sil
mov dword [0x1400fec00], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x1400ffd74], eax
xor r9d, r9d
xor r8d, r8d
lea r14d, [r9 + 1]
mov edx, r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x1400ffcd0], rax
lea rcx, str.WMUser_DisplayError
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x1400fec10], eax
lea rcx, [0x1400c40d8]
call fcn.14005c390
cmp al, sil
sete r15b
lea rcx, [rsp + 0x8e0]
call fcn.140053308
lea rcx, [rsp + 0x8e0]
call fcn.14005254c
mov rdx, rsi
lea r8, [0x1400fec20]
movzx eax, word [rsp + rdx + 0x8e0]
mov word [rdx + r8], ax
add rdx, 2
cmp ax, si
jne 0x14009e62f
xor eax, eax
or r12, 0xffffffffffffffff
mov rcx, r12
mov rdi, r8
repne scasw ax, word [rdi]
not rcx
sub rcx, r14
lea rdx, [r8 + rcx*2]
mov r8d, 0x1000000
lea rcx, str.rar.log
call fcn.140073ac0
xor r8d, r8d
mov rdx, rbp
lea rcx, [0x1400ec674]
call fcn.140061dec
lea rdx, str.winrar.lng
lea rcx, [0x1400ec678]
call fcn.140061a2c
xor edx, edx
lea r8d, [r12 + 0x49]
lea rcx, [rsp + 0x60]
call fcn.1400a9164
lea rdx, [0x14009b3f4]
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x78], rbp
lea edx, [r12 + 0x66]
mov rcx, qword [0x1400ec660]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0x80], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsp + 0x88], rax
lea r13d, [r12 + 0x11]
mov qword [rsp + 0x90], r13
mov qword [rsp + 0x98], rsi
lea rax, str.WinRarWindow
mov qword [rsp + 0xa0], rax
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x14009ef19
lea rax, [0x140071788]
mov qword [rsp + 0x68], rax
lea edi, [r12 + 7]
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], rsi
lea rax, str.RarTreeWindow
mov qword [rsp + 0xa0], rax
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x14009ef19
lea rax, [0x1400a1334]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], rsi
mov dword [rsp + 0x74], r13d
lea rax, str.RarViewWindow
mov qword [rsp + 0xa0], rax
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x14009ef19
lea rax, [0x140095604]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], rsi
mov dword [rsp + 0x74], esi
lea rax, str.RarCmtWindow
mov qword [rsp + 0xa0], rax
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x14009ef19
lea rcx, [rsp + 0xb0]
call fcn.14008d5ac
nop
mov qword [0x1400ec658], rbp
lea rcx, [0x140105fb0]
call fcn.140015acc
call fcn.14008434c
call fcn.140082c9c
call fcn.140099ed4
call fcn.14009a088
lea r8, str.WinRAR_Busy
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x1400ffd78], rax
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
mov r13, rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov eax, 0x80000000
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9d, 0x6cf0000
lea r8, [0x1400c6ae8]
lea rdx, str.WinRarWindow
lea ecx, [rdi + 0xa]
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x1400ffd80], rax
cmp rax, rsi
jne 0x14009e8ae
lea rcx, [rsp + 0xb0]
call fcn.14008d618
xor eax, eax
jmp 0x14009ef1b
mov rdx, rax
lea rcx, [0x1400ec678]
call fcn.140060ab4
xor ecx, ecx
call fcn.140099880
call fcn.140099d8c
cmp r15b, sil
je 0x14009e8dd
mov dl, r14b
xor ecx, ecx
call fcn.1400202ac
cmp al, sil
je 0x14009e8e0
mov r14b, sil
lea rdx, [rsp + 0xc8]
mov rcx, rbx
call fcn.140099754
movzx ecx, word [rsp + 0xc8]
call fcn.1400a9aac
mov edi, eax
xor edx, edx
mov r8d, 0x198
lea rcx, [0x1401077c0]
call fcn.1400a9164
mov rcx, rbx
call fcn.140099688
mov bpl, al
cmp edi, esi
je 0x14009e96e
cmp al, sil
je 0x14009e96e
movzx edx, di
lea rcx, str.AFUMD
call fcn.1400a95dc
cmp rax, rsi
jne 0x14009e967
cmp edi, 0x43
jne 0x14009e94a
cmp word [rsp + 0xca], si
je 0x14009e967
movzx edx, di
lea rcx, [0x1400cce08]
call fcn.1400a95dc
cmp rax, rsi
je 0x14009e96e
xor ecx, ecx
call fcn.14008a778
jmp 0x14009e973
call fcn.1400829dc
jmp 0x14009e973
call fcn.140082880
mov byte [0x14010d669], bpl
lea rdi, [0x140108330]
mov rdx, rdi
lea rcx, [0x1401001e0]
call fcn.1400144c0
mov rdx, rsi
movzx eax, word [rdx + rdi + 0x638c]
lea rcx, [0x1400ff4d0]
mov word [rdx + rcx], ax
add rdx, 2
cmp ax, si
jne 0x14009e993
mov word [0x14010e6bc], si
mov dword [0x14010bc78], esi
mov dword [0x1400fec18], esi
mov rcx, rbx
call fcn.14009dab8
cmp byte [0x14010d65e], sil
je 0x14009e9d8
jmp 0x14009ef08
mov rcx, qword [0x1400ffd80]
call fcn.140099958
cmp byte [0x14010b849], sil
je 0x14009ea35
lea rdi, [0x14010b849]
mov rcx, rdi
call fcn.140052a24
cmp rax, rdi
jne 0x14009ea20
lea rcx, [0x1400fec20]
call fcn.140052abc
mov rdx, rax
mov r8d, 0x1000000
mov rcx, rdi
call fcn.140073ac0
jmp 0x14009ea35
mov r8d, 0x1000000
lea rdx, [0x1400fec20]
mov rcx, rdi
call fcn.140073ac0
xor r9d, r9d
xor r8d, r8d
mov edx, 0x403
mov rcx, qword [0x1400ffd80]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x1400ffd80], rsi
je 0x14009ed85
cmp byte [0x14010d68b], sil
jne 0x14009ed39
mov dil, sil
cmp word [0x14010e6bc], si
je 0x14009ec60
lea rbp, [0x14010e6bc]
mov rdx, rbp
xor ecx, ecx
call fcn.140031144
cmp eax, 0xffffffff
je 0x14009ea9d
test al, 0x10
movzx edi, sil
mov ebx, 1
cmovne edi, ebx
jmp 0x14009eaa2
mov ebx, 1
cmp word [0x14010e6bc], si
je 0x14009ec46
cmp dil, sil
jne 0x14009ec4b
xor r8d, r8d
lea rdx, str.ReuseWindow
lea rcx, [0x1400c40d8]
call fcn.14005c420
cmp eax, esi
je 0x14009ebdf
cmp r13, rsi
je 0x14009ebdf
mov edx, 0x400
lea rcx, [rsp + 0xe0]
call fcn.140086084
lea rcx, [rsp + 0xe0]
call fcn.14005254c
lea rdi, [rsp + 0xe0]
xor eax, eax
mov rcx, r12
repne scasw ax, word [rdi]
mov rax, qword [0x1400ccdf8]
mov qword [rdi - 2], rax
movzx eax, word [0x1400cce00]
mov word [rdi + 6], ax
xor eax, eax
mov rcx, r12
lea rdi, [rsp + 0xe0]
repne scasw ax, word [rdi]
not rcx
sub rcx, rbx
mov r8, rcx
lea rdx, [rsp + 0xe0]
mov rcx, rbp
call fcn.140073e5c
cmp eax, esi
je 0x14009ebdf
lea rax, str.RarArchiveWideName
mov qword [rsp + 0x28], rax
mov edi, 0x800
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor edx, edx
mov r8d, 0x8000004
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rbx, rax
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdi, rax
mov rdx, rax
mov rcx, rbp
call fcn.140052780
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, 0x401
mov r9d, 0x7ae964f1
mov r8d, 0xd489ac5e
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, rsi
setne dil
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dil, sil
jne 0x14009ec36
mov rdx, rbp
lea rcx, [0x140105570]
call fcn.140045048
cmp al, sil
je 0x14009ec36
cmp byte [0x1400fec05], sil
jne 0x14009ed7e
cmp qword [0x1400ff4c0], rsi
je 0x14009ec1f
lea rcx, [0x140105570]
call fcn.140043cbc
mov ebx, 1
jmp 0x14009ed8a
mov rcx, qword [0x1400ffd80]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov ebx, 1
jmp 0x14009ed8a
call fcn.14008efb8
nop
mov esi, 1
jmp 0x14009ef08
cmp dil, sil
je 0x14009ec65
mov rcx, rbp
call fcn.140099c18
mov rcx, rbp
call fcn.1400861c4
jmp 0x14009ed1d
mov ebx, 1
mov r8d, ebx
lea rdx, str.RestoreFolder
lea rcx, [0x1400c40d8]
call fcn.14005c420
cmp eax, esi
je 0x14009ecb8
mov dword [rsp + 0x20], 0x400
lea r9, [0x1400c3f4c]
lea r8, [rsp + 0xe0]
lea rdx, str.LastFolder
lea rcx, [0x1400c40d8]
call fcn.14005c3f4
lea rcx, [rsp + 0xe0]
call fcn.1400861c4
jmp 0x14009ed1d
mov dword [rsp + 0x20], 0x400
lea r9, [0x1400c3f4c]
lea r8, [rsp + 0x10e0]
lea rdx, str.StartFolder
lea rcx, [0x1400c3760]
call fcn.14005c3f4
mov r8d, 0x400
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x10e0]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov word [rsp + 0x8de], si
cmp word [rsp + 0xe0], si
je 0x14009ed1d
lea rcx, [rsp + 0xe0]
call fcn.1400861c4
xor edx, edx
lea rcx, [0x140105570]
call fcn.140043330
lea rcx, [0x1400ffd88]
call fcn.140007488
jmp 0x14009ed8a
lea rcx, [0x1401077c0]
call fcn.14009dfd0
call fcn.14008efb8
mov ebx, 1
cmp dword [0x1400fec18], ebx
jne 0x14009ed8a
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
cmp rax, rsi
sete dl
mov cl, bl
call fcn.140095c54
mov esi, dword [0x1400ec668]
jmp 0x14009ef08
mov ebx, 1
jmp 0x14009ed8a
mov ebx, 1
mov r8, r13
mov edx, 0x10000
lea rcx, [0x14009699c]
call fcn.1400a9784
mov rcx, qword [0x1400ffd80]
call qword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, esi
jne 0x14009edba
cmp r13, rsi
setne cl
call fcn.140099b54
mov rcx, qword [0x1400ffd80]
call qword [sym.imp.USER32.dll_UpdateWindow]
cmp r14b, sil
je 0x14009edfd
cmp r15b, sil
je 0x14009edfd
lea rcx, str.Setup
call fcn.14005c390
cmp al, sil
jne 0x14009edfd
lea rcx, [0x1400c62a8]
call fcn.14003ce74
cmp al, sil
jne 0x14009edfd
mov ecx, 6
call fcn.1400200c4
xor r8d, r8d
lea rdx, str.ExportedSettings
lea rcx, [0x1400c3f4c]
call fcn.14005c420
cmp eax, esi
je 0x14009ee1c
call fcn.14001ff94
xor r8d, r8d
lea rdx, str.WizardMode
lea rcx, [0x1400c40d8]
call fcn.14005c420
cmp eax, esi
je 0x14009ee5d
mov rcx, qword [0x1400ffd80]
call fcn.1400a3038
cmp al, sil
je 0x14009ee5d
cmp qword [0x1400ff4c0], rsi
jne 0x14009ee5d
mov rcx, qword [0x1400ffd80]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor edx, edx
xor ecx, ecx
call fcn.14009d4f0
cmp al, sil
jne 0x14009ee5d
lea rcx, [0x1401001d8]
call fcn.14009ef4c
call fcn.14008ee18
mov rcx, qword [0x1400ffcd0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov byte [0x1400ffcf1], bl
mov edi, esi
mov ebp, 0x64
cmp dword [0x1400fec00], esi
jle 0x14009eeb0
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_Sleep]
sub edi, ebx
cmp edi, 0xc8
jl 0x14009ee96
mov rcx, qword [0x1400ffcd0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x1400fec14], esi
je 0x14009eeeb
mov dword [0x1400fec14], r12d
mov edi, esi
cmp r12d, esi
je 0x14009ef08
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_Sleep]
add edi, ebx
cmp edi, 0xa
jge 0x14009ef08
mov r12d, dword [0x1400fec14]
jmp 0x14009eece
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
cmp rax, rsi
sete dl
mov cl, bl
call fcn.140095c54
nop
lea rcx, [rsp + 0xb0]
call fcn.14008d618
mov eax, esi
jmp 0x14009ef1b
xor eax, eax
mov rcx, qword [rsp + 0x18e0]
xor rcx, rsp
call fcn.1400a8530
lea r11, [rsp + 0x18f0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret