Function at 0x1400d874c
Capabilities:
Create thread

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x30f0
call fcn.1400ec1b0
sub rsp, rax
mov qword [rsp + 0xc0], 0xfffffffffffffffe
mov qword [rsp + 0x3128], rbx
mov qword [rsp + 0x3130], rsi
mov rax, qword [0x14013b1d0]
xor rax, rsp
mov qword [rsp + 0x30e0], rax
mov rbx, rcx
mov edi, 1
mov cl, dil
call fcn.14008d288
mov ecx, 0x8005
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea r14, [0x14014e620]
mov rcx, r14
call fcn.14005c720
xor esi, esi
mov byte [0x140142cc5], sil
mov dword [0x140143d00], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x140143d04], eax
xor r9d, r9d
xor r8d, r8d
mov edx, edi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x140143d18], rax
lea rcx, str.WMUser_DisplayError
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x140143d58], eax
lea rcx, [0x14010a620]
call fcn.14009c080
test al, al
sete r13b
mov r8b, dil
mov r15d, 0x800
mov edx, r15d
lea rcx, [rsp + 0x10e0]
call fcn.1400782b8
mov edx, r15d
lea rcx, [rsp + 0x10e0]
call fcn.1400773b8
mov r8d, r15d
lea rdx, [rsp + 0x10e0]
lea r12, [0x140142ce0]
mov rcx, r12
call fcn.14008c7ec
mov r8d, r15d
lea rdx, str.rar.log
mov rcx, r12
call fcn.14008c7b4
xor r8d, r8d
mov rdx, rbx
lea rcx, [0x1401790b0]
call fcn.14008677c
lea rdx, str.winrar.lng
lea rcx, [0x1401790c0]
call fcn.1400858a0
xor edx, edx
lea r8d, [rdi + 0x47]
lea rcx, [rsp + 0x70]
call fcn.1400ed430
lea rax, [0x1400d6370]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x88], rbx
lea edx, [rdi + 0x64]
mov rcx, qword [0x1401790a0]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0x90], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsp + 0x98], rax
movdqa xmm0, xmmword [0x1401197b0]
movdqa xmmword [rsp + 0xa0], xmm0
lea r15, str.WinRarWindow
mov qword [rsp + 0xb0], r15
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400d9107
lea rax, [0x1400ab8f4]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x140116640]
movdqa xmmword [rsp + 0xa0], xmm0
lea rax, str.RarTreeWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400d9107
lea rax, [0x14009ee78]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x1401197b0]
movdqa xmmword [rsp + 0xa0], xmm0
lea rax, str.RarReminder
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400d9107
lea rax, [0x1400dc40c]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x140116640]
movdqa xmmword [rsp + 0xa0], xmm0
lea r12d, [rdi + 0xf]
mov dword [rsp + 0x84], r12d
lea rax, str.RarViewWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400d9107
lea rax, [0x1400cb3d0]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x140116640]
movdqa xmmword [rsp + 0xa0], xmm0
mov dword [rsp + 0x84], esi
lea rax, str.RarCmtWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400d9107
lea rcx, [rsp + 0x68]
call fcn.1400c9f14
nop
mov qword [0x1401790a8], rbx
lea rcx, [0x140165250]
call fcn.1400059a0
call fcn.1400bdee8
call fcn.1400b8ebc
call fcn.1400d8338
lea r8, str.WinRAR_Busy
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x140142cc8], rax
xor edx, edx
mov rcx, r15
call qword [sym.imp.USER32.dll_FindWindowW]
mov r15, rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov eax, 0x80000000
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9d, 0x6cf0000
lea r8, [0x14010f290]
lea rdx, str.WinRarWindow
mov ecx, r12d
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140142ba0], rax
test rax, rax
je 0x1400d8f41
mov rdx, rax
lea rcx, [0x1401790c0]
call fcn.1400860cc
xor ecx, ecx
call fcn.1400d6298
call fcn.1400d8174
test r13b, r13b
je 0x1400d8b07
call fcn.14009e500
test al, al
jne 0x1400d8b07
mov dl, dil
xor ecx, ecx
call fcn.14000a84c
test al, al
mov r12b, dil
je 0x1400d8b0a
mov r12b, sil
lea rcx, [rsp + 0xc8]
call fcn.140009d54
movzx ecx, word [rsp + 0xc8]
call fcn.14008f830
mov ebx, eax
xor edx, edx
mov r8d, 0x460
lea rcx, [0x140143d80]
call fcn.1400ed430
xor r9d, r9d
xor r8d, r8d
mov dl, dil
mov rcx, r14
call fcn.14005cbe4
call fcn.1400101f0
test bx, bx
je 0x1400d8bbf
cmp byte [0x14015063c], sil
jne 0x1400d8bbf
movzx edx, bx
lea rcx, str.AFUMD
call fcn.1400ed380
test rax, rax
jne 0x1400d8ba8
cmp bx, 0x43
jne 0x1400d8b82
cmp word [rsp + 0xca], si
je 0x1400d8ba8
cmp byte [0x14015063c], sil
jne 0x1400d8bbf
movzx edx, bx
lea rcx, [0x1401196f8]
call fcn.1400ed380
test rax, rax
je 0x1400d8bbf
xor ecx, ecx
call fcn.1400c9710
jmp 0x1400d8bc6
call fcn.1400c1768
sub bx, 0x43
cmp bx, di
ja 0x1400d8bc6
mov word [0x14014f638], si
jmp 0x1400d8bc6
xor ecx, ecx
call fcn.1400bdf24
xor r9d, r9d
xor r8d, r8d
mov dl, dil
mov rcx, r14
call fcn.14005cbe4
mov rdx, r14
lea rcx, [0x14015ae30]
call fcn.140007d98
mov rcx, rsi
movzx eax, word [rcx + r14 + 0xb442]
lea rdx, [0x140141ba0]
mov word [rcx + rdx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1400d8be9
mov word [0x140159a62], si
mov edx, 0x800
lea rcx, [rsp + 0x20e0]
call fcn.1400c3acc
lea rdx, [rsp + 0x20e0]
lea r14, [0x140168030]
mov rcx, r14
call fcn.140044188
mov dword [0x140142c48], esi
call fcn.140009940
nop
mov rcx, qword [0x140142ba0]
call fcn.1400d8584
cmp word [0x140153754], si
je 0x1400d8ca9
lea rbx, [0x140153754]
mov rcx, rbx
call fcn.140078d7c
cmp rax, rbx
jne 0x1400d8c82
mov r8d, 0x800
mov rdx, rbx
lea rcx, [0x140142ce0]
call fcn.140078e78
jmp 0x1400d8ca9
mov rcx, rsi
lea rdx, [0x14014e620]
lea r9, [0x140142ce0]
movzx eax, word [rcx + rdx + 0x5134]
mov word [rcx + r9], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1400d8c93
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8003
mov rcx, qword [0x140142ba0]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x140142ba0], rsi
je 0x1400d8f52
cmp word [0x140158a42], si
jne 0x1400d8ef9
mov bl, sil
cmp word [0x140159a62], si
je 0x1400d8ed9
lea rcx, [0x140159a62]
call fcn.140068af8
cmp eax, 0xffffffff
je 0x1400d8d04
test al, 0x10
movzx ebx, bl
cmovne ebx, edi
cmp word [0x140159a62], si
je 0x1400d8eb5
test bl, bl
jne 0x1400d8eb9
xor r8d, r8d
lea rdx, str.ReuseWindow
lea rcx, [0x14010a620]
call fcn.14009dbd0
test eax, eax
je 0x1400d8e52
test r15, r15
je 0x1400d8e52
xor r8d, r8d
mov ebx, 0x800
mov edx, ebx
lea rcx, [rsp + 0xe0]
call fcn.1400c2a30
mov edx, ebx
lea rcx, [rsp + 0xe0]
call fcn.1400773b8
mov r8d, ebx
lea rdx, str.Rar_
lea rcx, [rsp + 0xe0]
call fcn.14008c7b4
lea rax, [rsp + 0xe0]
or r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp word [rax + r8*2], si
jne 0x1400d8d8c
lea rdx, [rsp + 0xe0]
lea rcx, [0x140159a62]
call fcn.14008f920
test eax, eax
je 0x1400d8e56
lea rax, str.RarArchiveWideName
mov qword [rsp + 0x28], rax
mov ebx, 0x1000
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor edx, edx
mov r8d, 0x8000004
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rdi, rax
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
mov r9d, 0x800
mov r8, rax
lea rdx, [0x140159a62]
lea rcx, [0x140168030]
call fcn.140040320
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, 0x8001
mov r9d, 0x7ae964f1
mov r8d, 0xd489ac5e
mov rcx, r15
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
setne bl
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
jne 0x1400d8ea6
mov edi, 1
jmp 0x1400d8e56
or r14, 0xffffffffffffffff
lea rdx, [0x140159a62]
lea rcx, [0x140168030]
call fcn.140040cd0
test al, al
je 0x1400d8ea6
cmp byte [0x140142c44], sil
jne 0x1400d8f56
cmp qword [0x140142bc0], rsi
je 0x1400d8e94
lea rcx, [0x140168030]
call fcn.140043a04
jmp 0x1400d8f56
mov rcx, qword [0x140142ba0]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x1400d8f56
call fcn.1400d5840
mov esi, 1
jmp 0x1400d8f41
test bl, bl
je 0x1400d8ed9
lea rcx, [0x140159a62]
call fcn.1400d6110
mov r8b, dil
lea rdx, [0x140159a62]
mov rcx, r14
call fcn.14003e3d0
jmp 0x1400d8ee1
mov rcx, r14
call fcn.140043c20
xor edx, edx
mov rcx, r14
call fcn.140042e08
lea rcx, [0x140167be0]
call fcn.140001f60
jmp 0x1400d8f52
lea rcx, [0x140143d80]
call fcn.140009e2c
call fcn.1400d5840
cmp dword [0x140142c48], edi
jne 0x1400d8f52
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
sete dl
mov cl, dil
call fcn.1400cb0d8
lea rcx, [0x140179108]
call fcn.14006bfe0
mov esi, dword [0x140179130]
lea rcx, [rsp + 0x68]
call fcn.1400c9f68
mov eax, esi
jmp 0x1400d9109
or r14, 0xffffffffffffffff
mov r8, r15
mov edx, 0x10000
lea rcx, [0x1400cb2ac]
call fcn.1400f3cf8
mov rcx, qword [0x140142ba0]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x1400d8f86
test r15, r15
setne cl
call fcn.1400d8250
mov rcx, qword [0x140142ba0]
call qword [sym.imp.USER32.dll_UpdateWindow]
test r12b, r12b
je 0x1400d8fc7
test r13b, r13b
je 0x1400d8fc7
lea rcx, [0x14010a5c8]
call fcn.14009c080
test al, al
jne 0x1400d8fc7
lea rcx, str..rar
call fcn.14003ae94
test al, al
jne 0x1400d8fc7
mov ecx, 6
call fcn.14000cbec
xor r8d, r8d
lea rdx, str.ExportedSettings
lea rcx, [0x14010a100]
call fcn.14009dbd0
test eax, eax
je 0x1400d8fe6
call fcn.14000a778
xor edx, edx
mov cl, dil
call fcn.14009f5a4
xor r8d, r8d
lea rdx, str.WizardMode
lea rcx, [0x14010a620]
call fcn.14009dbd0
test eax, eax
je 0x1400d9030
mov rcx, qword [0x140142ba0]
call fcn.1400dcbf8
test al, al
je 0x1400d9030
cmp qword [0x140142bc0], rsi
jne 0x1400d9030
mov rcx, qword [0x140142ba0]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor edx, edx
xor ecx, ecx
call fcn.1400d7ca4
test al, al
jne 0x1400d9030
lea rcx, [0x14014e618]
call fcn.1400d9824
call fcn.1400cb3b4
mov byte [0x140142cc5], dil
mov rcx, qword [0x140143d18]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov ebx, esi
mov r15d, reloc.SHELL32.dll_SHRestricted
cmp dword [0x140143d00], esi
jle 0x1400d9085
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
sub ebx, edi
cmp ebx, 0xc8
jl 0x1400d906a
mov rcx, qword [0x140143d18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x140142c4c], esi
je 0x1400d90c1
mov dword [0x140142c4c], r14d
mov ebx, esi
test r14d, r14d
je 0x1400d90de
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
add ebx, edi
cmp ebx, 0xa
jge 0x1400d90de
mov r14d, dword [0x140142c4c]
jmp 0x1400d90a3
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
sete dl
mov cl, dil
call fcn.1400cb0d8
lea rcx, [0x140179108]
call fcn.14006bfe0
nop
lea rcx, [rsp + 0x68]
call fcn.1400c9f68
jmp 0x1400d9107
xor eax, eax
mov rcx, qword [rsp + 0x30e0]
xor rcx, rsp
call fcn.1400ec220
lea r11, [rsp + 0x30f0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret