Function at 0x1400b78a4
Capabilities:
Create thread

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x3100
call fcn.1400d8110
sub rsp, rax
mov qword [rsp + 0xd0], 0xfffffffffffffffe
mov qword [rsp + 0x3138], rbx
mov qword [rsp + 0x3140], rsi
mov rax, qword [0x1401006f0]
xor rax, rsp
mov qword [rsp + 0x30f0], rax
mov rdi, rcx
mov r12d, 1
mov cl, r12b
call fcn.1400812c8
mov ecx, 0x8005
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea rcx, [0x14015b3c0]
call fcn.140020acc
xor esi, esi
mov byte [0x14014aa59], sil
mov dword [0x140148960], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x14014aad4], eax
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x140149a38], rax
lea rcx, str.WMUser_DisplayError
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x140148970], eax
lea rcx, [0x1400e14b8]
call fcn.14006d334
cmp al, sil
sete r15b
mov r8b, r12b
mov r13d, 0x800
mov rdx, r13
lea rcx, [rsp + 0x10f0]
call fcn.1400619f4
mov rdx, r13
lea rcx, [rsp + 0x10f0]
call fcn.14006119c
mov r8, r13
lea rdx, [rsp + 0x10f0]
lea rbx, [0x140148980]
mov rcx, rbx
call fcn.1400805a0
mov r8, r13
lea rdx, str.rar.log
mov rcx, rbx
call fcn.1400805dc
xor r8d, r8d
mov rdx, rdi
lea rcx, [0x140134c00]
call fcn.140076140
lea rdx, str.winrar.lng
lea rcx, [0x140134bc0]
call fcn.140075e84
xor edx, edx
lea r8d, [r12 + 0x47]
lea rcx, [rsp + 0x70]
call fcn.1400c7170
lea r11, [0x1400b5a9c]
mov qword [rsp + 0x78], r11
mov qword [rsp + 0x88], rdi
lea edx, [rsi + 0x65]
mov rcx, qword [0x140134b88]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0x90], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsp + 0x98], rax
lea r14d, [r12 + 0xf]
mov qword [rsp + 0xa0], r14
mov qword [rsp + 0xa8], rsi
lea rax, str.WinRarWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x1400b8287
lea rax, [0x140087210]
mov qword [rsp + 0x78], rax
lea r13d, [r12 + 5]
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], rsi
lea rax, str.RarTreeWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x1400b8287
lea rax, [0x14006e340]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xa0], r14
mov qword [rsp + 0xa8], rsi
lea rax, str.RarReminder
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x1400b8287
lea rax, [0x1400bac60]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], rsi
mov dword [rsp + 0x84], r14d
lea rax, str.RarViewWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x1400b8287
lea rax, [0x1400b11ec]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], rsi
mov dword [rsp + 0x84], esi
lea rax, str.RarCmtWindow
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_RegisterClassW]
cmp ax, si
je 0x1400b8287
lea rcx, [rsp + 0xc0]
call fcn.1400a93b0
nop
mov qword [0x140134b80], rdi
lea rcx, [0x1401575c0]
call fcn.140018364
call fcn.14009fab0
call fcn.14009e4c4
call fcn.1400b55ac
lea r8, str.WinRAR_Busy
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x14014aad8], rax
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
mov r13, rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov eax, 0x80000000
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9d, 0x6cf0000
lea r8, [0x1400e4698]
lea rdx, str.WinRarWindow
mov ecx, r14d
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x14014aae0], rax
cmp rax, rsi
jne 0x1400b7c3e
lea rcx, [rsp + 0xc0]
call fcn.1400a941c
xor eax, eax
jmp 0x1400b8289
mov rdx, rax
lea rcx, [0x140134bc0]
call fcn.140074e7c
xor ecx, ecx
call fcn.1400b515c
call fcn.1400b54d0
cmp r15b, sil
je 0x1400b7c72
mov dl, r12b
xor ecx, ecx
call fcn.140027820
cmp al, sil
jne 0x1400b7c72
mov r14b, r12b
jmp 0x1400b7c75
mov r14b, sil
lea rcx, [rsp + 0xd8]
call fcn.140022a4c
movzx ecx, word [rsp + 0xd8]
call fcn.140088488
mov edi, eax
xor edx, edx
mov r8d, 0x110
lea rcx, [0x14015a160]
call fcn.1400c7170
xor r9d, r9d
xor r8d, r8d
mov dl, r12b
lea rcx, [0x14015b3c0]
call fcn.140022900
cmp di, si
je 0x1400b7d2c
cmp byte [0x14015d3dc], sil
jne 0x1400b7d2c
movzx edx, di
lea rcx, str.AFUMD
call fcn.1400c7b54
cmp rax, rsi
jne 0x1400b7d12
cmp di, 0x43
jne 0x1400b7cec
cmp word [rsp + 0xda], si
je 0x1400b7d12
cmp byte [0x14015d3dc], sil
jne 0x1400b7d2c
movzx edx, di
lea rcx, [0x1400eb930]
call fcn.1400c7b54
cmp rax, rsi
je 0x1400b7d2c
xor ecx, ecx
call fcn.1400a669c
jmp 0x1400b7d33
call fcn.14009e1f4
cmp di, 0x44
je 0x1400b7d23
cmp di, 0x43
jne 0x1400b7d33
mov word [0x14015c3d8], si
jmp 0x1400b7d33
xor ecx, ecx
call fcn.14009e044
xor r9d, r9d
xor r8d, r8d
mov dl, r12b
lea rdi, [0x14015b3c0]
mov rcx, rdi
call fcn.140022900
mov rdx, rdi
lea rcx, [0x14014af40]
call fcn.140024248
mov rdx, rsi
movzx eax, word [rdx + rdi + 0xb442]
lea rcx, [0x140149a40]
mov word [rdx + rcx], ax
add rdx, 2
cmp ax, si
jne 0x1400b7d5d
mov word [0x140166802], si
mov edx, 0x800
lea rcx, [rsp + 0x20f0]
call fcn.1400a3348
lea rdx, [rsp + 0x20f0]
lea rcx, [0x140155380]
call fcn.14004bc60
mov dword [0x140148978], esi
call fcn.140024a98
nop
cmp byte [0x1401657a6], sil
je 0x1400b7dc0
jmp 0x1400b80b7
mov rcx, qword [0x14014aae0]
call fcn.1400b5234
cmp word [0x1401604f0], si
je 0x1400b7e0f
lea rdi, [0x1401604f0]
mov rcx, rdi
call fcn.1400615e8
cmp rax, rdi
jne 0x1400b7dfc
mov r8d, 0x800
mov rdx, rdi
mov rcx, rbx
call fcn.1400617d0
jmp 0x1400b7e0f
movzx eax, word [rdi]
mov word [rbx], ax
add rdi, 2
add rbx, 2
cmp ax, si
jne 0x1400b7dfc
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8003
mov rcx, qword [0x14014aae0]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x14014aae0], rsi
je 0x1400b80cb
cmp word [0x1401657e2], si
jne 0x1400b806e
mov dil, sil
cmp word [0x140166802], si
je 0x1400b8042
lea rbx, [0x140166802]
mov rcx, rbx
call fcn.14003bcd8
cmp eax, 0xffffffff
je 0x1400b7e6f
test al, 0x10
movzx edi, sil
cmovne edi, r12d
cmp word [0x140166802], si
je 0x1400b8024
cmp dil, sil
jne 0x1400b8029
xor r8d, r8d
lea rdx, str.ReuseWindow
lea rcx, [0x1400e14b8]
call fcn.14006d3c4
cmp eax, esi
je 0x1400b7fc3
cmp r13, rsi
je 0x1400b7fc3
xor r8d, r8d
mov edi, 0x800
mov rdx, rdi
lea rcx, [rsp + 0xf0]
call fcn.1400a1d3c
mov rdx, rdi
lea rcx, [rsp + 0xf0]
call fcn.14006119c
mov r8, rdi
lea rdx, [0x1400e9ad8]
lea rcx, [rsp + 0xf0]
call fcn.1400805dc
xor eax, eax
or r12, 0xffffffffffffffff
mov rcx, r12
lea rdi, [rsp + 0xf0]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0xf0]
mov rcx, rbx
call fcn.1400883f8
cmp eax, esi
je 0x1400b7fc7
lea rax, str.RarArchiveWideName
mov qword [rsp + 0x28], rax
mov edi, 0x1000
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor edx, edx
mov r8d, 0x8000004
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rbx, rax
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
lea edx, [r12 + 3]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdi, rax
mov r9d, 0x800
mov r8, rax
lea rdx, [0x140166802]
lea rcx, [0x140155380]
call fcn.14004bca8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, 0x8001
mov r9d, 0x7ae964f1
mov r8d, 0xd489ac5e
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, rsi
setne dil
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dil, sil
jne 0x1400b8014
lea rbx, [0x140166802]
jmp 0x1400b7fc7
or r12, 0xffffffffffffffff
mov rdx, rbx
lea rcx, [0x140155380]
call fcn.14005110c
cmp al, sil
je 0x1400b8014
cmp byte [0x140148965], sil
jne 0x1400b80cf
cmp qword [0x140149a20], rsi
je 0x1400b8002
lea rcx, [0x140155380]
call fcn.140051918
jmp 0x1400b80cf
mov rcx, qword [0x14014aae0]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x1400b80cf
call fcn.1400aab70
nop
mov esi, 1
jmp 0x1400b80b7
cmp dil, sil
je 0x1400b8042
mov rcx, rbx
call fcn.1400b5358
mov rdx, rbx
lea rcx, [0x140155380]
call fcn.140051250
jmp 0x1400b804e
lea rcx, [0x140155380]
call fcn.14004c7dc
xor edx, edx
lea rcx, [0x140155380]
call fcn.14004fa64
lea rcx, [0x14014aae8]
call fcn.140007a28
or r12, 0xffffffffffffffff
jmp 0x1400b80cf
lea rcx, [0x14015a160]
call fcn.140024df8
call fcn.1400aab70
cmp dword [0x140148978], r12d
jne 0x1400b80cb
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
cmp rax, rsi
sete dl
mov cl, r12b
call fcn.1400ae9f0
lea rcx, [0x140134ba0]
call fcn.1400207b4
mov esi, dword [0x140134b90]
lea rcx, [rsp + 0xc0]
call fcn.1400a941c
mov eax, esi
jmp 0x1400b8289
or r12, 0xffffffffffffffff
mov r8, r13
mov edx, 0x10000
lea rcx, [0x1400b1868]
call fcn.1400c7cfc
mov rcx, qword [0x14014aae0]
call qword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, esi
jne 0x1400b80ff
cmp r13, rsi
setne cl
call fcn.1400b5294
mov rcx, qword [0x14014aae0]
call qword [sym.imp.USER32.dll_UpdateWindow]
cmp r14b, sil
je 0x1400b8142
cmp r15b, sil
je 0x1400b8142
lea rcx, [0x1400e1358]
call fcn.14006d334
cmp al, sil
jne 0x1400b8142
lea rcx, str..rar
call fcn.140049234
cmp al, sil
jne 0x1400b8142
mov ecx, 6
call fcn.140027638
xor r8d, r8d
lea rdx, str.ExportedSettings
lea rcx, [0x1400e04f4]
call fcn.14006d3c4
cmp eax, esi
je 0x1400b8161
call fcn.1400274fc
xor edx, edx
mov cl, 1
call fcn.14006de4c
xor r8d, r8d
lea rdx, str.WizardMode
lea rcx, [0x1400e14b8]
call fcn.14006d3c4
cmp eax, esi
je 0x1400b81ab
mov rcx, qword [0x14014aae0]
call fcn.1400bcacc
cmp al, sil
je 0x1400b81ab
cmp qword [0x140149a20], rsi
jne 0x1400b81ab
mov rcx, qword [0x14014aae0]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor edx, edx
xor ecx, ecx
call fcn.1400b74c4
cmp al, sil
jne 0x1400b81ab
lea rcx, [0x14014af38]
call fcn.1400b82dc
call fcn.1400aa9c4
mov rcx, qword [0x140149a38]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov byte [0x14014aa59], 1
mov edi, esi
mov ebx, reloc.SHELL32.dll_SHRestricted
cmp dword [0x140148960], esi
jle 0x1400b81ff
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
dec edi
cmp edi, 0xc8
jl 0x1400b81e5
mov rcx, qword [0x140149a38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x140148974], esi
je 0x1400b823a
mov dword [0x140148974], r12d
mov edi, esi
cmp r12d, esi
je 0x1400b8256
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 0xa
jge 0x1400b8256
mov r12d, dword [0x140148974]
jmp 0x1400b821d
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
cmp rax, rsi
sete dl
mov cl, 1
call fcn.1400ae9f0
lea rcx, [0x140134ba0]
call fcn.1400207b4
nop
lea rcx, [rsp + 0xc0]
call fcn.1400a941c
xor eax, eax
jmp 0x1400b8289
xor eax, eax
mov rcx, qword [rsp + 0x30f0]
xor rcx, rsp
call fcn.1400c6350
lea r11, [rsp + 0x3100]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret