Function at 0x14018faa0
Capabilities:
Create thread
Read file via mapping

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x5d0
mov rax, qword [0x140231eb8]
xor rax, rsp
mov qword [rsp + 0x5c0], rax
mov r13, rcx
xor edi, edi
mov esi, edi
mov dword [rsp + 0x64], edi
lea r12d, [rdi + 1]
mov cl, r12b
call fcn.1400ffdcc
mov ecx, 0x8005
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea rcx, [0x140234a20]
call fcn.1400b7894
mov byte [0x140233a71], dil
mov dword [0x140233a94], edi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x140233a98], eax
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x140233aa0], rax
lea rcx, str.WMUser_DisplayError
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x140233a9c], eax
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
lea r8d, [rdi + 7]
lea rdx, [0x1401dc550]
lea rcx, [rsp + 0x100]
call fcn.1400041b8
nop
lea rcx, [rsp + 0x100]
call fcn.1401127f8
test al, al
sete byte [rsp + 0x60]
mov rdx, qword [rsp + 0x118]
lea r14d, [rdi + 8]
mov r15d, 0x1000
cmp rdx, r14
jb 0x14018fbcc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, r15
jb 0x14018fbc7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401912a3
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x110], xmm0
mov word [rsp + 0x100], di
mov qword [rsp + 0x160], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x170], xmm0
movdqa xmm1, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x170], xmm1
mov word [rsp + 0x160], di
mov dl, r12b
lea rcx, [rsp + 0x160]
call fcn.1400e19f0
lea rcx, [rsp + 0x160]
call fcn.1400dfb2c
lea r8, str.rar.log
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x120]
call fcn.140006d9c
mov rbx, rax
lea rax, [0x140228d78]
cmp rax, rbx
je 0x14018fc86
mov rcx, rax
call fcn.140006b94
movups xmm0, xmmword [rbx]
movups xmmword [0x140228d78], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140228d88], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
lea rcx, [rsp + 0x120]
call fcn.140006b94
mov rdx, r13
lea rcx, [0x14023fc50]
call fcn.1400f6924
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov r8d, 0xa
lea rdx, str.winrar.lng
lea rcx, [rsp + 0x100]
call fcn.1400041b8
nop
lea rdx, [rsp + 0x100]
lea rcx, [0x14023fd10]
call fcn.1400f4ed8
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, r14
jb 0x14018fd29
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, r15
jb 0x14018fd24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401912a9
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x110], xmm0
mov word [rsp + 0x100], di
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xc0], rdi
lea rax, [0x14018b1c0]
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], r13
mov edx, 0x65
mov rcx, qword [0x14023fc40]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0xd0], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsp + 0xd8], rax
movdqa xmm0, xmmword [0x1401f4210]
movdqa xmmword [rsp + 0xe0], xmm0
lea rbx, str.WinRarWindow
mov qword [rsp + 0xf0], rbx
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x14018ffb6
lea rax, [0x1401348b0]
mov qword [rsp + 0xb8], rax
movdqa xmm0, xmmword [reloc.OLEAUT32.dll_SysStringLen]
movdqa xmmword [rsp + 0xe0], xmm0
lea rax, str.RarTreeWindow
mov qword [rsp + 0xf0], rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x14018ffb6
lea rax, [0x140118610]
mov qword [rsp + 0xb8], rax
movdqa xmm0, xmmword [0x1401f4210]
movdqa xmmword [rsp + 0xe0], xmm0
lea rax, str.RarReminder
mov qword [rsp + 0xf0], rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x14018ffb6
lea rax, [0x140198ba0]
mov qword [rsp + 0xb8], rax
movdqa xmm0, xmmword [reloc.OLEAUT32.dll_SysStringLen]
movdqa xmmword [rsp + 0xe0], xmm0
mov dword [rsp + 0xc4], 0x10
lea rax, str.RarViewWindow
mov qword [rsp + 0xf0], rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x14018ffb6
lea rax, [0x140168f30]
mov qword [rsp + 0xb8], rax
movdqa xmm0, xmmword [reloc.OLEAUT32.dll_SysStringLen]
movdqa xmmword [rsp + 0xe0], xmm0
mov dword [rsp + 0xc4], edi
lea rax, str.RarCmtWindow
mov qword [rsp + 0xf0], rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x14018ffb6
lea rcx, [rsp + 0xa0]
call fcn.1401749b0
nop
mov qword [0x14023fc48], r13
lea rcx, [0x140236020]
call fcn.14000fd04
call fcn.140153df0
call fcn.140149cb8
call fcn.14018f14c
lea r8, str.WinRAR_Busy
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x140233a68], rax
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov eax, 0x80000000
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9d, 0x6cf0000
lea r8, [0x1401e0b50]
mov rdx, rbx
mov ecx, 0x10
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140233a38], rax
test rax, rax
jne 0x140190045
lea rcx, [rsp + 0xa0]
call fcn.140174a28
nop
mov rdx, qword [rsp + 0x178]
cmp rdx, r14
jb 0x14018fff9
mov rcx, qword [rsp + 0x160]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, r15
jb 0x14018fff4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019129d
call fcn.1401af36c
mov r12d, edi
mov eax, r12d
movdqa xmm0, xmmword [0x1401dc090]
mov word [rsp + 0x160], di
movdqu xmmword [rsp + 0x170], xmm0
mov rcx, qword [rsp + 0x5c0]
xor rcx, rsp
call fcn.1401af480
lea r11, [rsp + 0x5d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rdx, rax
lea rcx, [0x14023fd10]
call fcn.1400f5e1c
xor ecx, ecx
call fcn.14018afe0
call fcn.14018e4e8
cmp byte [rsp + 0x60], dil
je 0x140190083
call fcn.1401179e0
test al, al
jne 0x140190083
mov dl, r12b
xor ecx, ecx
call fcn.14001beb8
test al, al
mov byte [rsp + 0x69], r12b
je 0x140190088
mov byte [rsp + 0x69], dil
mov qword [rsp + 0x140], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x150], xmm0
movdqa xmm1, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x150], xmm1
mov word [rsp + 0x140], di
lea rcx, [rsp + 0x140]
call fcn.14001a8b8
lea rax, [rsp + 0x140]
cmp qword [rsp + 0x158], r14
cmovae rax, qword [rsp + 0x140]
movzx ecx, word [rax]
call fcn.140105830
mov ebx, eax
mov dword [rsp + 0x90], eax
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x1b0], rdi
xor edx, edx
mov r8d, 0x402
lea rcx, [rsp + 0x1b8]
call fcn.1401b2120
nop
lea rdx, [rsp + 0x1a0]
lea rcx, [0x140233ad0]
call fcn.14018ad14
nop
mov r13, qword [rsp + 0x1a0]
test r13, r13
je 0x1401901ea
mov rbx, r13
mov qword [rsp + 0x70], rbx
cmp r13, qword [rsp + 0x1a8]
je 0x140190176
lea rcx, [rbx + 0x20]
call fcn.140006b94
nop
mov rcx, rbx
call fcn.140006b94
add rbx, 0xc8
mov qword [rsp + 0x70], rbx
cmp rbx, qword [rsp + 0x1a8]
jne 0x14019014e
mov rcx, qword [rsp + 0x1b0]
sub rcx, r13
movabs rax, 0xa3d70a3d70a3d70b
imul rcx
add rdx, rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0xc8
mov rax, r13
cmp rdx, r15
jb 0x1401901c7
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401912d9
mov rcx, r13
call fcn.1401af36c
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x1b0], rdi
mov ebx, dword [rsp + 0x90]
xor r9d, r9d
xor r8d, r8d
mov dl, r12b
lea r13, [0x140234a20]
mov rcx, r13
call fcn.1400b84dc
call fcn.14002b960
test bx, bx
je 0x1401902ad
mov al, byte [0x140234a44]
test al, al
jne 0x1401902ad
movzx edx, bx
lea rcx, str.AFUMD
call fcn.1401b1d90
test rax, rax
jne 0x14019027c
cmp bx, 0x43
jne 0x140190257
lea rax, [rsp + 0x140]
cmp qword [rsp + 0x158], r14
cmovae rax, qword [rsp + 0x140]
cmp word [rax + 2], di
je 0x14019027c
mov al, byte [0x140234a44]
test al, al
jne 0x1401902ad
movzx edx, bx
lea rcx, [0x1401f4140]
call fcn.1401b1d90
test rax, rax
je 0x1401902ad
call fcn.1401714b0
jmp 0x1401902b4
call fcn.14015ecbc
sub bx, 0x43
cmp bx, r12w
ja 0x1401902b4
lea rax, [0x140234f00]
cmp qword [0x140234f18], r14
cmovae rax, qword [0x140234f00]
mov qword [0x140234f10], rdi
mov word [rax], di
jmp 0x1401902b4
xor ecx, ecx
call fcn.140153e2c
xor r9d, r9d
xor r8d, r8d
mov dl, r12b
mov rcx, r13
call fcn.1400b84dc
mov rdx, r13
lea rcx, [0x1402354e0]
call fcn.140017c04
lea r13, [0x140234ea0]
mov rdx, r13
lea rcx, [0x140228d58]
call fcn.140004958
mov rax, r13
cmp qword [0x140234eb8], r14
cmovae rax, qword [0x140234ea0]
mov qword [0x140234eb0], rdi
mov word [rax], di
mov qword [rsp + 0x180], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x190], xmm0
movdqa xmm1, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x190], xmm1
mov word [rsp + 0x180], di
lea rcx, [rsp + 0x180]
call fcn.1400e1288
lea rdx, [rsp + 0x180]
lea rcx, [0x140236e50]
call fcn.140091a78
mov dword [0x140233a60], edi
call fcn.14001a310
nop
cmp byte [0x140234e5c], dil
je 0x14019042a
mov rdx, qword [rsp + 0x198]
cmp rdx, r14
jb 0x1401903b0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, r15
jb 0x1401903ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401912d9
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x190], xmm0
mov word [rsp + 0x180], di
mov rdx, qword [rsp + 0x158]
cmp rdx, r14
jb 0x14019040c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, r15
jb 0x140190407
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401912df
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x150], xmm0
mov word [rsp + 0x140], di
jmp 0x14018ffa8
cmp byte [0x140234e34], dil
jne 0x140190438
call fcn.1400793d0
mov rcx, qword [0x140233a38]
call fcn.14018f690
cmp qword [0x140234f90], rdi
je 0x140190477
lea rbx, [0x140234f80]
mov rcx, rbx
call fcn.1400e159c
mov rdx, rbx
lea rcx, [0x140228d78]
test rax, rax
jne 0x140190472
call fcn.1400e3630
jmp 0x140190477
call fcn.140004958
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8003
mov rcx, qword [0x140233a38]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x140234e90], rdi
jne 0x140190c5b
cmp byte [0x140234ae0], dil
je 0x1401904b7
mov edx, 6
mov rcx, qword [0x140233a38]
call qword [sym.imp.USER32.dll_ShowWindow]
movzx ebx, dil
cmp qword [0x140234eb0], rdi
je 0x140190bec
mov rcx, r13
call fcn.1400cba64
cmp eax, 0xffffffff
je 0x1401904db
test al, 0x10
cmovne ebx, r12d
cmp qword [0x140234eb0], rdi
je 0x1401909ca
test bl, bl
jne 0x1401909d2
mov byte [rsp + 0x68], dil
mov qword [rsp + 0x120], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x130], xmm0
mov r8d, 0xb
lea rdx, str.ReuseWindow
lea rcx, [rsp + 0x120]
call fcn.1400041b8
nop
mov dword [rsp + 0x64], r12d
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov r8d, 7
lea rdx, [0x1401dc550]
lea rcx, [rsp + 0x100]
call fcn.1400041b8
nop
mov esi, 3
mov dword [rsp + 0x64], esi
xor r8d, r8d
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x100]
call fcn.140115f8c
test eax, eax
je 0x14019058a
cmp qword [rsp + 0x98], rdi
mov bl, r12b
jne 0x14019058d
mov bl, dil
and esi, 0xfffffffd
mov dword [rsp + 0x64], esi
mov rdx, qword [rsp + 0x118]
cmp rdx, r14
jb 0x1401905d7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, r15
jb 0x1401905d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401912af
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x110], xmm0
mov word [rsp + 0x100], di
and esi, 0xfffffffe
mov dword [rsp + 0x64], esi
mov rdx, qword [rsp + 0x138]
cmp rdx, r14
jb 0x14019063a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, r15
jb 0x140190635
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401912b5
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x120], di
test bl, bl
je 0x140190972
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], 7
mov word [rsp + 0x100], di
xor edx, edx
lea rcx, [rsp + 0x100]
call fcn.140160990
lea rcx, [rsp + 0x100]
call fcn.1400dfb2c
mov r8d, 4
lea rdx, [0x1401f2230]
lea rcx, [rsp + 0x100]
call fcn.140006c24
lea rdx, [rsp + 0x100]
cmp qword [rsp + 0x118], r14
cmovae rdx, qword [rsp + 0x100]
mov rcx, r13
cmp qword [0x140234eb8], r14
cmovae rcx, qword [0x140234ea0]
mov r8, qword [rsp + 0x110]
call fcn.140105978
or r13, 0xffffffffffffffff
test eax, eax
je 0x14019083c
lea rax, str.RarArchiveWideName
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x20
xor r9d, r9d
xor edx, edx
mov r8d, 0x8000004
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rbx, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14019083c
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], rdi
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], 7
mov word [rsp + 0x120], di
lea r8, [rsp + 0x120]
lea rdx, [0x140234ea0]
lea rcx, [0x140236e50]
call fcn.140088ea8
mov rax, qword [rsp + 0x130]
lea rax, [rax*2 + 4]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r13 + 3]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
mov ecx, dword [rsp + 0x130]
mov dword [rax], ecx
lea rdx, [rsp + 0x120]
cmp qword [rsp + 0x138], r14
cmovae rdx, qword [rsp + 0x120]
mov r8, qword [rsp + 0x130]
add r8, r8
lea rcx, [rax + 4]
call fcn.1401b1520
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, 0x8001
mov r9d, 0x7ae964f1
mov r8d, 0xd489ac5e
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
setne byte [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rsp + 0x120]
call fcn.140006b94
nop
lea rcx, [rsp + 0x100]
call fcn.140006b94
cmp byte [rsp + 0x68], dil
je 0x140190976
call fcn.14016c54c
mov byte [0x140233a71], r12b
mov rdx, qword [rsp + 0x198]
cmp rdx, r14
jb 0x1401908a3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x180]
cmp rdx, r15
mov rax, rcx
jb 0x14019089e
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401912d9
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
mov word [rsp + 0x180], di
movdqu xmmword [rsp + 0x190], xmm0
mov rdx, qword [rsp + 0x158]
cmp rdx, r14
jb 0x1401908ff
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
cmp rdx, r15
mov rax, rcx
jb 0x1401908fa
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401912df
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
mov word [rsp + 0x140], di
movdqu xmmword [rsp + 0x150], xmm0
lea rcx, [rsp + 0xa0]
call fcn.140174a28
nop
mov rdx, qword [rsp + 0x178]
cmp rdx, r14
jb 0x14018fffc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x160]
cmp rdx, r15
mov rax, rcx
jb 0x140190968
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019129d
call fcn.1401af36c
jmp 0x14018fffc
or r13, 0xffffffffffffffff
lea rdx, [0x140234ea0]
lea rcx, [0x140236e50]
call fcn.14008a078
test al, al
je 0x140190854
cmp byte [0x140233a34], dil
jne 0x140190cb5
cmp qword [0x140233a50], rdi
je 0x1401909b8
lea rcx, [0x140236e50]
call fcn.140090880
jmp 0x140190cb5
mov rcx, qword [0x140233a38]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x140190cb5
test bl, bl
je 0x140190bec
mov rcx, r13
cmp qword [0x140234eb8], r14
cmovae rcx, qword [0x140234ea0]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x140190ab4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], rdi
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.14000a448
nop
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x70]
sub r8, rdx
sar r8, 1
mov rcx, r13
cmp qword [0x140234eb8], r14
cmovae rcx, qword [0x140234ea0]
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x140190a61
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x70]
sub rcx, rdx
sar rcx, 1
mov eax, eax
cmp rax, rcx
jae 0x140190a61
mov rcx, r13
call fcn.140012fc0
nop
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140190ab4
mov rax, qword [rsp + 0x80]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
mov rax, rcx
cmp rdx, r15
jb 0x140190a9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401912bb
call fcn.1401af36c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], rdi
lea rax, [rsp + 0x100]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], rdi
mov r13, qword [0x140234eb0]
cmp qword [0x140234eb8], r14
lea rcx, [0x140234ea0]
cmovae rcx, qword [0x140234ea0]
mov qword [rsp + 0x70], rcx
movabs rbx, 0x7ffffffffffffffe
cmp r13, rbx
ja 0x1401912c1
mov qword [rsp + 0x118], 7
cmp r13, r14
jae 0x140190b45
mov qword [rsp + 0x110], r13
mov r8d, 0x10
mov rdx, rcx
lea rcx, [rsp + 0x100]
call fcn.1401b1520
jmp 0x140190bd3
mov rax, r13
or rax, 7
cmp rax, rbx
jbe 0x140190b61
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x140190b8f
mov rbx, rax
mov ecx, 0xa
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x1401912c7
add rcx, rcx
cmp rcx, r15
jb 0x140190b96
call fcn.14000417c
jmp 0x140190ba5
test rcx, rcx
je 0x140190ba2
call fcn.1401af330
jmp 0x140190ba5
mov rax, rdi
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x110], r13
mov qword [rsp + 0x118], rbx
lea r8, [r13*2 + 2]
mov rdx, qword [rsp + 0x70]
mov rcx, rax
call fcn.1401b1520
nop
mov r8b, r12b
lea rdx, [rsp + 0x100]
lea rcx, [0x140236e50]
call fcn.140083578
jmp 0x140190bf8
lea rcx, [0x140236e50]
call fcn.140090c3c
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
xor r8d, r8d
lea rbx, [0x1401dbff0]
mov rdx, rbx
lea rcx, [rsp + 0x100]
call fcn.1400041b8
nop
lea rdx, [rsp + 0x100]
lea rcx, [0x140236e50]
call fcn.14008ed84
nop
lea rcx, [rsp + 0x100]
call fcn.140006b94
lea rcx, [0x1402369f8]
call fcn.140005e60
or r13, 0xffffffffffffffff
jmp 0x140190cbc
lea rcx, [0x140233ad0]
call fcn.14001aadc
call fcn.14016c54c
cmp dword [0x140233a60], r12d
jne 0x140190cb1
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
sete dl
mov cl, r12b
call fcn.140175fe0
lea rcx, [0x14023fda0]
call fcn.1400d0dc8
mov byte [0x140233a71], r12b
mov r12d, dword [0x14023fd90]
jmp 0x140190860
or r13, 0xffffffffffffffff
lea rbx, [0x1401dbff0]
mov r8, qword [rsp + 0x98]
mov edx, 0x10000
lea rcx, [0x1401762c0]
call fcn.1401bcb68
cmp byte [0x140234e5b], dil
jne 0x140190cff
mov rcx, qword [0x140233a38]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x140190cff
cmp qword [rsp + 0x98], rdi
setne cl
call fcn.14018e8a8
mov rcx, qword [0x140233a38]
call qword [sym.imp.USER32.dll_UpdateWindow]
cmp byte [rsp + 0x69], dil
je 0x140190db5
cmp byte [rsp + 0x60], dil
je 0x140190db5
mov qword [rsp + 0x120], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x130], xmm0
mov r8d, 5
lea rdx, [0x1401dc4a8]
lea rcx, [rsp + 0x120]
call fcn.1400041b8
nop
or esi, 4
mov dword [rsp + 0x64], esi
lea rcx, [rsp + 0x120]
call fcn.1401127f8
test al, al
jne 0x140190db5
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov r8d, 4
lea rdx, [0x1401dc790]
lea rcx, [rsp + 0x100]
call fcn.1400041b8
nop
or esi, r14d
mov dword [rsp + 0x64], esi
lea rcx, [rsp + 0x100]
call fcn.1400781d0
test al, al
mov byte [rsp + 0x60], r12b
je 0x140190dba
mov byte [rsp + 0x60], dil
test r14b, sil
je 0x140190dd4
and esi, 0xfffffff7
mov dword [rsp + 0x64], esi
lea rcx, [rsp + 0x100]
call fcn.140006b94
nop
test sil, 4
je 0x140190dee
and esi, 0xfffffffb
mov dword [rsp + 0x64], esi
lea rcx, [rsp + 0x120]
call fcn.140006b94
cmp byte [rsp + 0x60], dil
je 0x140190dff
mov ecx, 6
call fcn.140025d18
mov qword [rsp + 0x120], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x130], xmm0
mov r8d, 0x10
lea rdx, str.ExportedSettings
lea rcx, [rsp + 0x120]
call fcn.1400041b8
nop
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x100]
call fcn.1400041b8
nop
xor r8d, r8d
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x100]
call fcn.140115f8c
mov ebx, eax
lea rcx, [rsp + 0x100]
call fcn.140006b94
nop
lea rcx, [rsp + 0x120]
call fcn.140006b94
test ebx, ebx
je 0x140190e94
call fcn.14001ba68
cmp byte [0x140234e5b], dil
jne 0x140190ea7
xor edx, edx
mov cl, r12b
call fcn.140118e10
mov qword [rsp + 0x120], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x130], xmm0
mov r8d, 0xa
lea rdx, str.WizardMode
lea rcx, [rsp + 0x120]
call fcn.1400041b8
nop
or esi, 0x10
mov dword [rsp + 0x64], esi
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov r8d, 7
lea rdx, [0x1401dc550]
lea rcx, [rsp + 0x100]
call fcn.1400041b8
nop
or esi, 0x20
mov dword [rsp + 0x64], esi
xor r8d, r8d
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x100]
call fcn.140115f8c
test eax, eax
je 0x140190f4b
mov rcx, qword [0x140233a38]
call fcn.140199ff0
test al, al
je 0x140190f4b
cmp qword [0x140233a50], rdi
mov bl, r12b
je 0x140190f4e
mov bl, dil
test sil, 0x20
je 0x140190fb7
and esi, 0xffffffdf
mov dword [rsp + 0x64], esi
mov rdx, qword [rsp + 0x118]
cmp rdx, r14
jb 0x140190f9e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, r15
jb 0x140190f99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401912cd
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x110], xmm0
mov word [rsp + 0x100], di
test sil, 0x10
je 0x140191020
and esi, 0xffffffef
mov dword [rsp + 0x64], esi
mov rdx, qword [rsp + 0x138]
cmp rdx, r14
jb 0x140191007
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, r15
jb 0x140191002
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401912d3
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x120], di
test bl, bl
je 0x140191031
mov rcx, qword [0x140233a38]
call qword [sym.imp.USER32.dll_DestroyWindow]
cmp byte [0x140234e5b], dil
je 0x140191056
call fcn.14016c54c
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, qword [0x140233a38]
call qword [sym.imp.USER32.dll_PostMessageW]
xor edx, edx
xor ecx, ecx
call fcn.14018de28
test al, al
jne 0x140191056
lea rax, [0x1401dbff0]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdi
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
mov dl, r12b
lea rcx, [rsp + 0x70]
call fcn.140161b10
lea rcx, [0x140234a18]
call fcn.1401924f0
lea rcx, [0x1402349d0]
call fcn.140168ed0
mov byte [0x140233a71], r12b
mov rcx, qword [0x140233aa0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov ebx, edi
mov esi, reloc.SHELL32.dll_SHRestricted
cmp dword [0x140233a94], edi
jle 0x1401910da
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
sub ebx, r12d
cmp ebx, 0xc8
jl 0x1401910bf
mov rcx, qword [0x140233aa0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x140233a64], edi
je 0x140191116
mov dword [0x140233a64], r13d
mov ebx, edi
test r13d, r13d
je 0x140191133
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
add ebx, r12d
cmp ebx, 0xa
jge 0x140191133
mov r13d, dword [0x140233a64]
jmp 0x1401910f8
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
sete dl
mov cl, r12b
call fcn.140175fe0
lea rcx, [0x14023fda0]
call fcn.1400d0dc8
nop
lea rcx, [rsp + 0x180]
call fcn.140006b94
nop
lea rcx, [rsp + 0x140]
call fcn.140006b94
nop
lea rcx, [rsp + 0xa0]
call fcn.140174a28
nop
lea rcx, [rsp + 0x160]
call fcn.140006b94
xor eax, eax
jmp 0x140190018
call fcn.1401b6544
int3
call fcn.1401b6544
nop
call fcn.1401b6544
nop
call fcn.1401b6544
nop
call fcn.1401b6544
int3
call fcn.1401b6544
int3
call fcn.140006bf8
int3
call fcn.140006b74
nop
call fcn.1401b6544
nop
call fcn.1401b6544
nop
call fcn.1401b6544
nop
call fcn.1401b6544
int3