Function at 0x1400dd60c
Capabilities:
Create thread

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x3100
call fcn.1400f1270
sub rsp, rax
mov qword [rsp + 0xd0], 0xfffffffffffffffe
mov qword [rsp + 0x3138], rbx
mov qword [rsp + 0x3140], rsi
mov rax, qword [0x1401412b0]
xor rax, rsp
mov qword [rsp + 0x30f0], rax
mov rbx, rcx
mov edi, 1
mov cl, dil
call fcn.14008ec38
mov ecx, 0x8005
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea r14, [0x140154710]
mov rcx, r14
call fcn.14005cde0
xor esi, esi
mov byte [0x140148d85], sil
mov dword [0x140148e18], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x140149e30], eax
xor r9d, r9d
xor r8d, r8d
mov edx, edi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x140149e38], rax
lea rcx, str.WMUser_DisplayError
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x140149e34], eax
lea rcx, [0x14010f6e0]
call fcn.14009dd08
test al, al
sete r13b
mov r8b, dil
mov r15d, 0x800
mov edx, r15d
lea rcx, [rsp + 0x10f0]
call fcn.140078c10
mov edx, r15d
lea rcx, [rsp + 0x10f0]
call fcn.140077d10
mov r8d, r15d
lea rdx, [rsp + 0x10f0]
lea r12, [0x140148e20]
mov rcx, r12
call fcn.14008e2e4
mov r8d, r15d
lea rdx, str.rar.log
mov rcx, r12
call fcn.14008e2ac
xor r8d, r8d
mov rdx, rbx
lea rcx, [0x14017f180]
call fcn.1400880bc
lea rdx, str.winrar.lng
lea rcx, [0x14017f190]
call fcn.1400871d8
xor edx, edx
lea r8d, [rdi + 0x47]
lea rcx, [rsp + 0x70]
call fcn.1400f24e0
lea rax, [0x1400db244]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x88], rbx
lea edx, [rdi + 0x64]
mov rcx, qword [0x14017f140]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0x90], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsp + 0x98], rax
movdqa xmm0, xmmword [0x14011ecc0]
movdqa xmmword [rsp + 0xa0], xmm0
lea r15, str.WinRarWindow
mov qword [rsp + 0xb0], r15
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400ddfd3
lea rax, [0x1400add84]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x14011b970]
movdqa xmmword [rsp + 0xa0], xmm0
lea rax, str.RarTreeWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400ddfd3
lea rax, [0x1400a0b34]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x14011ecc0]
movdqa xmmword [rsp + 0xa0], xmm0
lea rax, str.RarReminder
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400ddfd3
lea rax, [0x1400e1270]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x14011b970]
movdqa xmmword [rsp + 0xa0], xmm0
lea r12d, [rdi + 0xf]
mov dword [rsp + 0x84], r12d
lea rax, str.RarViewWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400ddfd3
lea rax, [0x1400ce0f0]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x14011b970]
movdqa xmmword [rsp + 0xa0], xmm0
mov dword [rsp + 0x84], esi
lea rax, str.RarCmtWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1400ddfd3
lea rcx, [rsp + 0xc0]
call fcn.1400cd124
nop
mov qword [0x14017f148], rbx
lea rcx, [0x14016b340]
call fcn.140005c48
call fcn.1400c0954
call fcn.1400bb8e0
call fcn.1400dd1f8
lea r8, str.WinRAR_Busy
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x140148e08], rax
xor edx, edx
mov rcx, r15
call qword [sym.imp.USER32.dll_FindWindowW]
mov r15, rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov eax, 0x80000000
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9d, 0x6cf0000
lea r8, [0x140114380]
lea rdx, str.WinRarWindow
mov ecx, r12d
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140147cd8], rax
test rax, rax
je 0x1400dde04
mov rdx, rax
lea rcx, [0x14017f190]
call fcn.140087a04
xor ecx, ecx
call fcn.1400db188
call fcn.1400dd034
test r13b, r13b
je 0x1400dd9ca
call fcn.1400a01bc
test al, al
jne 0x1400dd9ca
mov dl, dil
xor ecx, ecx
call fcn.14000ad1c
test al, al
mov r12b, dil
je 0x1400dd9cd
mov r12b, sil
lea rcx, [rsp + 0xd8]
call fcn.14000a154
movzx ecx, word [rsp + 0xd8]
call fcn.140091280
mov ebx, eax
xor edx, edx
mov r8d, 0x460
lea rcx, [0x140149e70]
call fcn.1400f24e0
xor r9d, r9d
xor r8d, r8d
mov dl, dil
mov rcx, r14
call fcn.14005d288
call fcn.140010524
test bx, bx
je 0x1400dda82
cmp byte [0x14015672c], sil
jne 0x1400dda82
movzx edx, bx
lea rcx, str.AFUMD
call fcn.1400f2430
test rax, rax
jne 0x1400dda6b
cmp bx, 0x43
jne 0x1400dda45
cmp word [rsp + 0xda], si
je 0x1400dda6b
cmp byte [0x14015672c], sil
jne 0x1400dda82
movzx edx, bx
lea rcx, [0x14011ec08]
call fcn.1400f2430
test rax, rax
je 0x1400dda82
xor ecx, ecx
call fcn.1400cc928
jmp 0x1400dda89
call fcn.1400c41d4
sub bx, 0x43
cmp bx, di
ja 0x1400dda89
mov word [0x140155728], si
jmp 0x1400dda89
xor ecx, ecx
call fcn.1400c0990
xor r9d, r9d
xor r8d, r8d
mov dl, dil
mov rcx, r14
call fcn.14005d288
mov rdx, r14
lea rcx, [0x140160f20]
call fcn.14000811c
mov rcx, rsi
movzx eax, word [rcx + r14 + 0xb442]
lea rdx, [0x140147ce0]
mov word [rcx + rdx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1400ddaac
mov word [0x14015fb52], si
mov edx, 0x800
lea rcx, [rsp + 0x20f0]
call fcn.1400c6754
lea rdx, [rsp + 0x20f0]
lea r14, [0x14016e120]
mov rcx, r14
call fcn.1400446d4
mov dword [0x140148d08], esi
call fcn.140009d18
nop
mov rcx, qword [0x140147cd8]
call fcn.1400dd444
cmp word [0x140159844], si
je 0x1400ddb6c
lea rbx, [0x140159844]
mov rcx, rbx
call fcn.1400796e4
cmp rax, rbx
jne 0x1400ddb45
mov r8d, 0x800
mov rdx, rbx
lea rcx, [0x140148e20]
call fcn.1400797e0
jmp 0x1400ddb6c
mov rcx, rsi
lea rdx, [0x140154710]
lea r9, [0x140148e20]
movzx eax, word [rcx + rdx + 0x5134]
mov word [rcx + r9], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1400ddb56
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8003
mov rcx, qword [0x140147cd8]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x140147cd8], rsi
je 0x1400dde18
cmp word [0x14015eb32], si
jne 0x1400dddbc
mov bl, sil
cmp word [0x14015fb52], si
je 0x1400ddd9c
lea rcx, [0x14015fb52]
call fcn.140069404
cmp eax, 0xffffffff
je 0x1400ddbc7
test al, 0x10
movzx ebx, bl
cmovne ebx, edi
cmp word [0x14015fb52], si
je 0x1400ddd78
test bl, bl
jne 0x1400ddd7c
xor r8d, r8d
lea rdx, str.ReuseWindow
lea rcx, [0x14010f6e0]
call fcn.14009f858
test eax, eax
je 0x1400ddd15
test r15, r15
je 0x1400ddd15
xor r8d, r8d
mov ebx, 0x800
mov edx, ebx
lea rcx, [rsp + 0xf0]
call fcn.1400c53e0
mov edx, ebx
lea rcx, [rsp + 0xf0]
call fcn.140077d10
mov r8d, ebx
lea rdx, str.Rar_
lea rcx, [rsp + 0xf0]
call fcn.14008e2ac
lea rax, [rsp + 0xf0]
or r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp word [rax + r8*2], si
jne 0x1400ddc4f
lea rdx, [rsp + 0xf0]
lea rcx, [0x14015fb52]
call fcn.140091370
test eax, eax
je 0x1400ddd19
lea rax, str.RarArchiveWideName
mov qword [rsp + 0x28], rax
mov ebx, 0x1000
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor edx, edx
mov r8d, 0x8000004
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rdi, rax
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
mov r9d, 0x800
mov r8, rax
lea rdx, [0x14015fb52]
lea rcx, [0x14016e120]
call fcn.14004091c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, 0x8001
mov r9d, 0x7ae964f1
mov r8d, 0xd489ac5e
mov rcx, r15
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
setne bl
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
jne 0x1400ddd69
mov edi, 1
jmp 0x1400ddd19
or r14, 0xffffffffffffffff
lea rdx, [0x14015fb52]
lea rcx, [0x14016e120]
call fcn.1400411fc
test al, al
je 0x1400ddd69
cmp byte [0x140147ca4], sil
jne 0x1400dde1c
cmp qword [0x140148cf8], rsi
je 0x1400ddd57
lea rcx, [0x14016e120]
call fcn.140043f1c
jmp 0x1400dde1c
mov rcx, qword [0x140147cd8]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x1400dde1c
call fcn.1400da4b0
mov esi, 1
jmp 0x1400dde04
test bl, bl
je 0x1400ddd9c
lea rcx, [0x14015fb52]
call fcn.1400db000
mov r8b, dil
lea rdx, [0x14015fb52]
mov rcx, r14
call fcn.14003e9c4
jmp 0x1400ddda4
mov rcx, r14
call fcn.140044138
xor edx, edx
mov rcx, r14
call fcn.14004331c
lea rcx, [0x14016dcd0]
call fcn.140001f60
jmp 0x1400dde18
lea rcx, [0x140149e70]
call fcn.14000a22c
call fcn.1400da4b0
cmp dword [0x140148d08], edi
jne 0x1400dde18
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
sete dl
mov cl, dil
call fcn.1400cddf8
lea rcx, [0x14017f1d8]
call fcn.14006c934
mov esi, dword [0x14017f200]
lea rcx, [rsp + 0xc0]
call fcn.1400cd19c
mov eax, esi
jmp 0x1400ddfd5
or r14, 0xffffffffffffffff
mov r8, r15
mov edx, 0x10000
lea rcx, [0x1400cdfcc]
call fcn.1400f8df8
mov rcx, qword [0x140147cd8]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x1400dde4c
test r15, r15
setne cl
call fcn.1400dd110
mov rcx, qword [0x140147cd8]
call qword [sym.imp.USER32.dll_UpdateWindow]
test r12b, r12b
je 0x1400dde8d
test r13b, r13b
je 0x1400dde8d
lea rcx, [0x14010f678]
call fcn.14009dd08
test al, al
jne 0x1400dde8d
lea rcx, [0x14010f960]
call fcn.14003b4a8
test al, al
jne 0x1400dde8d
mov ecx, 6
call fcn.14000d1b0
xor r8d, r8d
lea rdx, str.ExportedSettings
lea rcx, [0x14010f1a8]
call fcn.14009f858
test eax, eax
je 0x1400ddeac
call fcn.14000ac44
xor edx, edx
mov cl, dil
call fcn.1400a1260
xor r8d, r8d
lea rdx, str.WizardMode
lea rcx, [0x14010f6e0]
call fcn.14009f858
test eax, eax
je 0x1400ddef6
mov rcx, qword [0x140147cd8]
call fcn.1400e1a5c
test al, al
je 0x1400ddef6
cmp qword [0x140148cf8], rsi
jne 0x1400ddef6
mov rcx, qword [0x140147cd8]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor edx, edx
xor ecx, ecx
call fcn.1400dcb64
test al, al
jne 0x1400ddef6
lea rcx, [0x140149e68]
call fcn.1400de6e8
call fcn.1400ce0d4
mov byte [0x140148d85], dil
mov rcx, qword [0x140149e38]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov ebx, esi
mov r15d, reloc.SHELL32.dll_SHRestricted
cmp dword [0x140148e18], esi
jle 0x1400ddf4b
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
sub ebx, edi
cmp ebx, 0xc8
jl 0x1400ddf30
mov rcx, qword [0x140149e38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x140148d0c], esi
je 0x1400ddf87
mov dword [0x140148d0c], r14d
mov ebx, esi
test r14d, r14d
je 0x1400ddfa4
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
add ebx, edi
cmp ebx, 0xa
jge 0x1400ddfa4
mov r14d, dword [0x140148d0c]
jmp 0x1400ddf69
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
sete dl
mov cl, dil
call fcn.1400cddf8
lea rcx, [0x14017f1d8]
call fcn.14006c934
nop
lea rcx, [rsp + 0xc0]
call fcn.1400cd19c
jmp 0x1400ddfd3
xor eax, eax
mov rcx, qword [rsp + 0x30f0]
xor rcx, rsp
call fcn.1400f12e0
lea r11, [rsp + 0x3100]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret