Function at 0x1400cb95c
Capabilities:
Create thread

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x3100
call fcn.1400fe810
sub rsp, rax
mov qword [rsp + 0xd0], 0xfffffffffffffffe
mov qword [rsp + 0x3138], rbx
mov qword [rsp + 0x3140], rsi
mov rax, qword [0x140132350]
xor rax, rsp
mov qword [rsp + 0x30f0], rax
mov rdi, rcx
mov r12d, 1
mov cl, r12b
call fcn.1400665ac
mov ecx, 0x8005
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea rcx, [0x140168af0]
call fcn.1400366b4
xor esi, esi
mov byte [0x140157282], sil
mov dword [0x1401561a0], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x140158324], eax
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x140158290], rax
lea rcx, str.WMUser_DisplayError
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x1401561b0], eax
lea rcx, [0x14010ed68]
call fcn.14009b7e0
cmp al, sil
sete r15b
mov r8b, r12b
mov r13d, 0x800
mov rdx, r13
lea rcx, [rsp + 0x10f0]
call fcn.140050ff4
mov rdx, r13
lea rcx, [rsp + 0x10f0]
call fcn.1400504d4
mov r8, r13
lea rdx, [rsp + 0x10f0]
lea rbx, [0x1401561c0]
mov rcx, rbx
call fcn.140065d2c
mov r8, r13
lea rdx, str.rar.log
mov rcx, rbx
call fcn.140065dac
xor r8d, r8d
mov rdx, rdi
lea rcx, [0x140149f70]
call fcn.14005fb90
lea rdx, str.winrar.lng
lea rcx, [0x140149f30]
call fcn.14005f8d4
xor edx, edx
lea r8d, [r12 + 0x47]
lea rcx, [rsp + 0x70]
call fcn.1400ea880
lea r11, [0x1400c9a6c]
mov qword [rsp + 0x78], r11
mov qword [rsp + 0x88], rdi
lea edx, [rsi + 0x65]
mov rcx, qword [0x140149ef8]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0x90], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsp + 0x98], rax
lea r14d, [r12 + 0xf]
mov qword [rsp + 0xa0], r14
mov qword [rsp + 0xa8], rsi
lea rax, str.WinRarWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x1400cc32f
lea rax, [0x1400a90ec]
mov qword [rsp + 0x78], rax
lea r13d, [r12 + 5]
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], rsi
lea rax, str.RarTreeWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x1400cc32f
lea rax, [0x14009cb84]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xa0], r14
mov qword [rsp + 0xa8], rsi
lea rax, str.RarReminder
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x1400cc32f
lea rax, [0x1400ce4a4]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], rsi
mov dword [rsp + 0x84], r14d
lea rax, str.RarViewWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x1400cc32f
lea rax, [0x1400c37c4]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], rsi
mov dword [rsp + 0x84], esi
lea rax, str.RarCmtWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x1400cc32f
lea rcx, [rsp + 0xc0]
call fcn.1400bcd4c
nop
mov qword [0x140149ef0], rdi
lea rcx, [0x140164e50]
call fcn.1400781fc
call fcn.1400b27e8
call fcn.1400b1980
call fcn.1400c9558
lea r8, str.WinRAR_Busy
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x140158328], rax
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
mov r13, rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov eax, 0x80000000
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9d, 0x6cf0000
lea r8, [0x14010d518]
lea rdx, str.WinRarWindow
mov ecx, r14d
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140158330], rax
cmp rax, rsi
jne 0x1400cbce7
jmp 0x1400cc15f
mov rdx, rax
lea rcx, [0x140149f30]
call fcn.14005e888
xor ecx, ecx
call fcn.1400c9108
call fcn.1400c947c
cmp r15b, sil
je 0x1400cbd25
call fcn.140099f70
cmp al, sil
jne 0x1400cbd25
mov dl, r12b
xor ecx, ecx
call fcn.140080598
cmp al, sil
jne 0x1400cbd25
mov r14b, r12b
jmp 0x1400cbd28
mov r14b, sil
lea rcx, [rsp + 0xd8]
call fcn.14007bd60
movzx ecx, word [rsp + 0xd8]
call fcn.140068d64
mov edi, eax
xor edx, edx
mov r8d, 0x110
lea rcx, [0x140167890]
call fcn.1400ea880
xor r9d, r9d
xor r8d, r8d
mov dl, r12b
lea rcx, [0x140168af0]
call fcn.140038494
cmp di, si
je 0x1400cbddf
cmp byte [0x14016ab0c], sil
jne 0x1400cbddf
movzx edx, di
lea rcx, str.AFUMD
call fcn.1400ed378
cmp rax, rsi
jne 0x1400cbdc5
cmp di, 0x43
jne 0x1400cbd9f
cmp word [rsp + 0xda], si
je 0x1400cbdc5
cmp byte [0x14016ab0c], sil
jne 0x1400cbddf
movzx edx, di
lea rcx, [0x1401171d8]
call fcn.1400ed378
cmp rax, rsi
je 0x1400cbddf
xor ecx, ecx
call fcn.1400ba068
jmp 0x1400cbde6
call fcn.1400b1628
cmp di, 0x44
je 0x1400cbdd6
cmp di, 0x43
jne 0x1400cbde6
mov word [0x140169b08], si
jmp 0x1400cbde6
xor ecx, ecx
call fcn.1400b1468
xor r9d, r9d
xor r8d, r8d
mov dl, r12b
lea rdi, [0x140168af0]
mov rcx, rdi
call fcn.140038494
mov rdx, rdi
lea rcx, [0x140158790]
call fcn.140019800
mov rdx, rsi
movzx eax, word [rdx + rdi + 0xb43a]
lea rcx, [0x140157290]
mov word [rdx + rcx], ax
add rdx, 2
cmp ax, si
jne 0x1400cbe10
mov word [0x140173f2a], si
mov edx, 0x800
lea rcx, [rsp + 0x20f0]
call fcn.1400b676c
lea rdx, [rsp + 0x20f0]
lea rcx, [0x140162bc0]
call fcn.14008eadc
mov dword [0x1401571d0], esi
call fcn.14007cf60
nop
mov rcx, qword [0x140158330]
call fcn.1400c91e0
cmp word [0x14016dc24], si
je 0x1400cbeb4
lea rdi, [0x14016dc24]
mov rcx, rdi
call fcn.140050ce0
cmp rax, rdi
jne 0x1400cbea1
mov r8d, 0x800
mov rdx, rdi
mov rcx, rbx
call fcn.140050ec8
jmp 0x1400cbeb4
movzx eax, word [rdi]
mov word [rbx], ax
add rdi, 2
add rbx, 2
cmp ax, si
jne 0x1400cbea1
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8003
mov rcx, qword [0x140158330]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x140158330], rsi
je 0x1400cc173
cmp word [0x140172f0a], si
jne 0x1400cc116
mov dil, sil
cmp word [0x140173f2a], si
je 0x1400cc0ea
lea rbx, [0x140173f2a]
mov rcx, rbx
call fcn.140041fcc
cmp eax, 0xffffffff
je 0x1400cbf14
test al, 0x10
movzx edi, sil
cmovne edi, r12d
cmp word [0x140173f2a], si
je 0x1400cc0c9
cmp dil, sil
jne 0x1400cc0ce
xor r8d, r8d
lea rdx, str.ReuseWindow
lea rcx, [0x14010ed68]
call fcn.14009b870
cmp eax, esi
je 0x1400cc068
cmp r13, rsi
je 0x1400cc068
xor r8d, r8d
mov edi, 0x800
mov rdx, rdi
lea rcx, [rsp + 0xf0]
call fcn.1400b51e8
mov rdx, rdi
lea rcx, [rsp + 0xf0]
call fcn.1400504d4
mov r8, rdi
lea rdx, str.Rar_
lea rcx, [rsp + 0xf0]
call fcn.140065dac
xor eax, eax
or r12, 0xffffffffffffffff
mov rcx, r12
lea rdi, [rsp + 0xf0]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0xf0]
mov rcx, rbx
call fcn.140068cd4
cmp eax, esi
je 0x1400cc06c
lea rax, str.RarArchiveWideName
mov qword [rsp + 0x28], rax
mov edi, 0x1000
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor edx, edx
mov r8d, 0x8000004
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rbx, rax
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
lea edx, [r12 + 3]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdi, rax
mov r9d, 0x800
mov r8, rax
lea rdx, [0x140173f2a]
lea rcx, [0x140162bc0]
call fcn.14008eb24
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, 0x8001
mov r9d, 0x7ae964f1
mov r8d, 0xd489ac5e
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, rsi
setne dil
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dil, sil
jne 0x1400cc0b9
lea rbx, [0x140173f2a]
jmp 0x1400cc06c
or r12, 0xffffffffffffffff
mov rdx, rbx
lea rcx, [0x140162bc0]
call fcn.1400947bc
cmp al, sil
je 0x1400cc0b9
cmp byte [0x1401561a5], sil
jne 0x1400cc177
cmp qword [0x140157268], rsi
je 0x1400cc0a7
lea rcx, [0x140162bc0]
call fcn.140095078
jmp 0x1400cc177
mov rcx, qword [0x140158330]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x1400cc177
call fcn.1400be554
nop
mov esi, 1
jmp 0x1400cc15f
cmp dil, sil
je 0x1400cc0ea
mov rcx, rbx
call fcn.1400c9304
mov r8b, r12b
mov rdx, rbx
lea rcx, [0x140162bc0]
call fcn.140094900
jmp 0x1400cc0f6
lea rcx, [0x140162bc0]
call fcn.14008f7c4
xor edx, edx
lea rcx, [0x140162bc0]
call fcn.140093b64
lea rcx, [0x140158338]
call fcn.14007622c
or r12, 0xffffffffffffffff
jmp 0x1400cc177
lea rcx, [0x140167890]
call fcn.14007db54
call fcn.1400be554
cmp dword [0x1401571d0], r12d
jne 0x1400cc173
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
cmp rax, rsi
sete dl
mov cl, r12b
call fcn.1400c0874
lea rcx, [0x140149f10]
call fcn.140044f6c
mov esi, dword [0x140149f00]
lea rcx, [rsp + 0xc0]
call fcn.1400bcdb8
mov eax, esi
jmp 0x1400cc331
or r12, 0xffffffffffffffff
mov r8, r13
mov edx, 0x10000
lea rcx, [0x1400c42d8]
call fcn.1400efe18
mov rcx, qword [0x140158330]
call qword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, esi
jne 0x1400cc1a7
cmp r13, rsi
setne cl
call fcn.1400c9240
mov rcx, qword [0x140158330]
call qword [sym.imp.USER32.dll_UpdateWindow]
cmp r14b, sil
je 0x1400cc1ea
cmp r15b, sil
je 0x1400cc1ea
lea rcx, [0x14010eb80]
call fcn.14009b7e0
cmp al, sil
jne 0x1400cc1ea
lea rcx, str..rar
call fcn.14008c244
cmp al, sil
jne 0x1400cc1ea
mov ecx, 6
call fcn.1400803b0
xor r8d, r8d
lea rdx, str.ExportedSettings
lea rcx, [0x1401096a0]
call fcn.14009b870
cmp eax, esi
je 0x1400cc209
call fcn.140080274
xor edx, edx
mov cl, 1
call fcn.14009c654
xor r8d, r8d
lea rdx, str.WizardMode
lea rcx, [0x14010ed68]
call fcn.14009b870
cmp eax, esi
je 0x1400cc253
mov rcx, qword [0x140158330]
call fcn.1400d0c18
cmp al, sil
je 0x1400cc253
cmp qword [0x140157268], rsi
jne 0x1400cc253
mov rcx, qword [0x140158330]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor edx, edx
xor ecx, ecx
call fcn.1400cb574
cmp al, sil
jne 0x1400cc253
lea rcx, [0x140158788]
call fcn.1400cc384
call fcn.1400be2f4
mov byte [0x140157282], 1
mov rcx, qword [0x140158290]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edi, esi
mov ebx, reloc.SHELL32.dll_SHRestricted
cmp dword [0x1401561a0], esi
jle 0x1400cc2a7
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
dec edi
cmp edi, 0xc8
jl 0x1400cc28d
mov rcx, qword [0x140158290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x1401561b4], esi
je 0x1400cc2e2
mov dword [0x1401561b4], r12d
mov edi, esi
cmp r12d, esi
je 0x1400cc2fe
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 0xa
jge 0x1400cc2fe
mov r12d, dword [0x1401561b4]
jmp 0x1400cc2c5
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
cmp rax, rsi
sete dl
mov cl, 1
call fcn.1400c0874
lea rcx, [0x140149f10]
call fcn.140044f6c
nop
lea rcx, [rsp + 0xc0]
call fcn.1400bcdb8
xor eax, eax
jmp 0x1400cc331
xor eax, eax
mov rcx, qword [rsp + 0x30f0]
xor rcx, rsp
call fcn.1400e9d00
lea r11, [rsp + 0x3100]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret