Function at 0x1400cb960
Capabilities:
Create thread

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x3100
call fcn.1400fe810
sub rsp, rax
mov qword [rsp + 0xd0], 0xfffffffffffffffe
mov qword [rsp + 0x3138], rbx
mov qword [rsp + 0x3140], rsi
mov rax, qword [0x140132350]
xor rax, rsp
mov qword [rsp + 0x30f0], rax
mov rdi, rcx
mov r12d, 1
mov cl, r12b
call fcn.140066580
mov ecx, 0x8005
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea rcx, [0x140168b10]
call fcn.140036688
xor esi, esi
mov byte [0x1401572a2], sil
mov dword [0x1401561c0], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x140158344], eax
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x1401582b0], rax
lea rcx, str.WMUser_DisplayError
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x1401561d0], eax
lea rcx, [0x14010ed78]
call fcn.14009b878
cmp al, sil
sete r15b
mov r8b, r12b
mov r13d, 0x800
mov rdx, r13
lea rcx, [rsp + 0x10f0]
call fcn.140050ffc
mov rdx, r13
lea rcx, [rsp + 0x10f0]
call fcn.1400504dc
mov r8, r13
lea rdx, [rsp + 0x10f0]
lea rbx, [0x1401561e0]
mov rcx, rbx
call fcn.140065d00
mov r8, r13
lea rdx, str.rar.log
mov rcx, rbx
call fcn.140065d80
xor r8d, r8d
mov rdx, rdi
lea rcx, [0x140149f90]
call fcn.14005fb98
lea rdx, str.winrar.lng
lea rcx, [0x140149f50]
call fcn.14005f8d0
xor edx, edx
lea r8d, [r12 + 0x47]
lea rcx, [rsp + 0x70]
call fcn.1400eada0
lea r11, [0x1400c9a74]
mov qword [rsp + 0x78], r11
mov qword [rsp + 0x88], rdi
lea edx, [rsi + 0x65]
mov rcx, qword [0x140149f18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0x90], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsp + 0x98], rax
lea r14d, [r12 + 0xf]
mov qword [rsp + 0xa0], r14
mov qword [rsp + 0xa8], rsi
lea rax, str.WinRarWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x1400cc333
lea rax, [0x1400a919c]
mov qword [rsp + 0x78], rax
lea r13d, [r12 + 5]
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], rsi
lea rax, str.RarTreeWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x1400cc333
lea rax, [0x14009cc1c]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xa0], r14
mov qword [rsp + 0xa8], rsi
lea rax, str.RarReminder
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x1400cc333
lea rax, [0x1400ce4c8]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], rsi
mov dword [rsp + 0x84], r14d
lea rax, str.RarViewWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x1400cc333
lea rax, [0x1400c37d4]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], rsi
mov dword [rsp + 0x84], esi
lea rax, str.RarCmtWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x1400cc333
lea rcx, [rsp + 0xc0]
call fcn.1400bcd78
nop
mov qword [0x140149f10], rdi
lea rcx, [0x140164e70]
call fcn.140078254
call fcn.1400b288c
call fcn.1400b1a24
call fcn.1400c9560
lea r8, str.WinRAR_Busy
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x140158348], rax
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
mov r13, rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov eax, 0x80000000
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9d, 0x6cf0000
lea r8, [0x14010d538]
lea rdx, str.WinRarWindow
mov ecx, r14d
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140158350], rax
cmp rax, rsi
jne 0x1400cbceb
jmp 0x1400cc163
mov rdx, rax
lea rcx, [0x140149f50]
call fcn.14005e884
xor ecx, ecx
call fcn.1400c9110
call fcn.1400c9484
cmp r15b, sil
je 0x1400cbd29
call fcn.140099ff8
cmp al, sil
jne 0x1400cbd29
mov dl, r12b
xor ecx, ecx
call fcn.1400805ec
cmp al, sil
jne 0x1400cbd29
mov r14b, r12b
jmp 0x1400cbd2c
mov r14b, sil
lea rcx, [rsp + 0xd8]
call fcn.14007bdb8
movzx ecx, word [rsp + 0xd8]
call fcn.140068df0
mov edi, eax
xor edx, edx
mov r8d, 0x110
lea rcx, [0x1401678b0]
call fcn.1400eada0
xor r9d, r9d
xor r8d, r8d
mov dl, r12b
lea rcx, [0x140168b10]
call fcn.140038464
cmp di, si
je 0x1400cbde3
cmp byte [0x14016ab2c], sil
jne 0x1400cbde3
movzx edx, di
lea rcx, str.AFUMD
call fcn.1400ed378
cmp rax, rsi
jne 0x1400cbdc9
cmp di, 0x43
jne 0x1400cbda3
cmp word [rsp + 0xda], si
je 0x1400cbdc9
cmp byte [0x14016ab2c], sil
jne 0x1400cbde3
movzx edx, di
lea rcx, [0x1401171b8]
call fcn.1400ed378
cmp rax, rsi
je 0x1400cbde3
xor ecx, ecx
call fcn.1400ba098
jmp 0x1400cbdea
call fcn.1400b16d0
cmp di, 0x44
je 0x1400cbdda
cmp di, 0x43
jne 0x1400cbdea
mov word [0x140169b28], si
jmp 0x1400cbdea
xor ecx, ecx
call fcn.1400b1510
xor r9d, r9d
xor r8d, r8d
mov dl, r12b
lea rdi, [0x140168b10]
mov rcx, rdi
call fcn.140038464
mov rdx, rdi
lea rcx, [0x1401587a0]
call fcn.1400197cc
mov rdx, rsi
movzx eax, word [rdx + rdi + 0xb43a]
lea rcx, [0x1401572b0]
mov word [rdx + rcx], ax
add rdx, 2
cmp ax, si
jne 0x1400cbe14
mov word [0x140173f4a], si
mov edx, 0x800
lea rcx, [rsp + 0x20f0]
call fcn.1400b6784
lea rdx, [rsp + 0x20f0]
lea rcx, [0x140162be0]
call fcn.14008eb58
mov dword [0x1401571f0], esi
call fcn.14007cfb8
nop
mov rcx, qword [0x140158350]
call fcn.1400c91e8
cmp word [0x14016dc44], si
je 0x1400cbeb8
lea rdi, [0x14016dc44]
mov rcx, rdi
call fcn.140050ce8
cmp rax, rdi
jne 0x1400cbea5
mov r8d, 0x800
mov rdx, rdi
mov rcx, rbx
call fcn.140050ed0
jmp 0x1400cbeb8
movzx eax, word [rdi]
mov word [rbx], ax
add rdi, 2
add rbx, 2
cmp ax, si
jne 0x1400cbea5
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8003
mov rcx, qword [0x140158350]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x140158350], rsi
je 0x1400cc177
cmp word [0x140172f2a], si
jne 0x1400cc11a
mov dil, sil
cmp word [0x140173f4a], si
je 0x1400cc0ee
lea rbx, [0x140173f4a]
mov rcx, rbx
call fcn.140041fd4
cmp eax, 0xffffffff
je 0x1400cbf18
test al, 0x10
movzx edi, sil
cmovne edi, r12d
cmp word [0x140173f4a], si
je 0x1400cc0cd
cmp dil, sil
jne 0x1400cc0d2
xor r8d, r8d
lea rdx, str.ReuseWindow
lea rcx, [0x14010ed78]
call fcn.14009b908
cmp eax, esi
je 0x1400cc06c
cmp r13, rsi
je 0x1400cc06c
xor r8d, r8d
mov edi, 0x800
mov rdx, rdi
lea rcx, [rsp + 0xf0]
call fcn.1400b5200
mov rdx, rdi
lea rcx, [rsp + 0xf0]
call fcn.1400504dc
mov r8, rdi
lea rdx, str.Rar_
lea rcx, [rsp + 0xf0]
call fcn.140065d80
xor eax, eax
or r12, 0xffffffffffffffff
mov rcx, r12
lea rdi, [rsp + 0xf0]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0xf0]
mov rcx, rbx
call fcn.140068d60
cmp eax, esi
je 0x1400cc070
lea rax, str.RarArchiveWideName
mov qword [rsp + 0x28], rax
mov edi, 0x1000
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor edx, edx
mov r8d, 0x8000004
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rbx, rax
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
lea edx, [r12 + 3]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdi, rax
mov r9d, 0x800
mov r8, rax
lea rdx, [0x140173f4a]
lea rcx, [0x140162be0]
call fcn.14008eba0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, 0x8001
mov r9d, 0x7ae964f1
mov r8d, 0xd489ac5e
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, rsi
setne dil
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dil, sil
jne 0x1400cc0bd
lea rbx, [0x140173f4a]
jmp 0x1400cc070
or r12, 0xffffffffffffffff
mov rdx, rbx
lea rcx, [0x140162be0]
call fcn.140094834
cmp al, sil
je 0x1400cc0bd
cmp byte [0x1401561c5], sil
jne 0x1400cc17b
cmp qword [0x140157288], rsi
je 0x1400cc0ab
lea rcx, [0x140162be0]
call fcn.1400950ec
jmp 0x1400cc17b
mov rcx, qword [0x140158350]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x1400cc17b
call fcn.1400be570
nop
mov esi, 1
jmp 0x1400cc163
cmp dil, sil
je 0x1400cc0ee
mov rcx, rbx
call fcn.1400c930c
mov r8b, r12b
mov rdx, rbx
lea rcx, [0x140162be0]
call fcn.140094978
jmp 0x1400cc0fa
lea rcx, [0x140162be0]
call fcn.14008f840
xor edx, edx
lea rcx, [0x140162be0]
call fcn.140093bdc
lea rcx, [0x140162bd0]
call fcn.140076298
or r12, 0xffffffffffffffff
jmp 0x1400cc17b
lea rcx, [0x1401678b0]
call fcn.14007dbac
call fcn.1400be570
cmp dword [0x1401571f0], r12d
jne 0x1400cc177
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
cmp rax, rsi
sete dl
mov cl, r12b
call fcn.1400c0884
lea rcx, [0x140149f30]
call fcn.140044f74
mov esi, dword [0x140149f20]
lea rcx, [rsp + 0xc0]
call fcn.1400bcdd4
mov eax, esi
jmp 0x1400cc335
or r12, 0xffffffffffffffff
mov r8, r13
mov edx, 0x10000
lea rcx, [0x1400c42e8]
call fcn.1400efe18
mov rcx, qword [0x140158350]
call qword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, esi
jne 0x1400cc1ab
cmp r13, rsi
setne cl
call fcn.1400c9248
mov rcx, qword [0x140158350]
call qword [sym.imp.USER32.dll_UpdateWindow]
cmp r14b, sil
je 0x1400cc1ee
cmp r15b, sil
je 0x1400cc1ee
lea rcx, [0x14010eb90]
call fcn.14009b878
cmp al, sil
jne 0x1400cc1ee
lea rcx, str..rar
call fcn.14008c294
cmp al, sil
jne 0x1400cc1ee
mov ecx, 6
call fcn.140080404
xor r8d, r8d
lea rdx, str.ExportedSettings
lea rcx, [0x140109540]
call fcn.14009b908
cmp eax, esi
je 0x1400cc20d
call fcn.1400802c8
xor edx, edx
mov cl, 1
call fcn.14009c6ec
xor r8d, r8d
lea rdx, str.WizardMode
lea rcx, [0x14010ed78]
call fcn.14009b908
cmp eax, esi
je 0x1400cc257
mov rcx, qword [0x140158350]
call fcn.1400d0c34
cmp al, sil
je 0x1400cc257
cmp qword [0x140157288], rsi
jne 0x1400cc257
mov rcx, qword [0x140158350]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor edx, edx
xor ecx, ecx
call fcn.1400cb578
cmp al, sil
jne 0x1400cc257
lea rcx, [0x140158358]
call fcn.1400cc390
call fcn.1400be310
mov byte [0x1401572a2], 1
mov rcx, qword [0x1401582b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edi, esi
mov ebx, reloc.SHELL32.dll_SHRestricted
cmp dword [0x1401561c0], esi
jle 0x1400cc2ab
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
dec edi
cmp edi, 0xc8
jl 0x1400cc291
mov rcx, qword [0x1401582b0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x1401561d4], esi
je 0x1400cc2e6
mov dword [0x1401561d4], r12d
mov edi, esi
cmp r12d, esi
je 0x1400cc302
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 0xa
jge 0x1400cc302
mov r12d, dword [0x1401561d4]
jmp 0x1400cc2c9
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
cmp rax, rsi
sete dl
mov cl, 1
call fcn.1400c0884
lea rcx, [0x140149f30]
call fcn.140044f74
nop
lea rcx, [rsp + 0xc0]
call fcn.1400bcdd4
xor eax, eax
jmp 0x1400cc335
xor eax, eax
mov rcx, qword [rsp + 0x30f0]
xor rcx, rsp
call fcn.1400e9d80
lea r11, [rsp + 0x3100]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret