Function at 0x14018e43c
Capabilities:
Create thread
Read file via mapping

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x5d0
mov rax, qword [0x14022ff58]
xor rax, rsp
mov qword [rsp + 0x5c0], rax
mov r13, rcx
xor edi, edi
mov esi, edi
mov dword [rsp + 0x64], edi
lea r12d, [rdi + 1]
mov cl, r12b
call fcn.1400ff33c
mov ecx, 0x8005
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea rcx, [0x140232a60]
call fcn.1400b7420
mov byte [0x140231b19], dil
mov dword [0x140231b3c], edi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x140231b40], eax
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x140231b48], rax
lea rcx, str.WMUser_DisplayError
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x140231b44], eax
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
lea r8d, [rdi + 7]
lea rdx, [0x1401da540]
lea rcx, [rsp + 0x100]
call fcn.1400041a8
nop
lea rcx, [rsp + 0x100]
call fcn.140111bf4
test al, al
sete byte [rsp + 0x60]
mov rdx, qword [rsp + 0x118]
lea r14d, [rdi + 8]
mov r15d, 0x1000
cmp rdx, r14
jb 0x14018e568
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, r15
jb 0x14018e563
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fc3d
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rsp + 0x110], xmm0
mov word [rsp + 0x100], di
mov qword [rsp + 0x160], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x170], xmm0
movdqa xmm1, xmmword [0x1401da070]
movdqu xmmword [rsp + 0x170], xmm1
mov word [rsp + 0x160], di
mov dl, r12b
lea rcx, [rsp + 0x160]
call fcn.1400e0fa0
lea rcx, [rsp + 0x160]
call fcn.1400df0fc
lea r8, str.rar.log
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x120]
call fcn.140006d8c
mov rbx, rax
lea rax, [0x140226d78]
cmp rax, rbx
je 0x14018e622
mov rcx, rax
call fcn.140006b84
movups xmm0, xmmword [rbx]
movups xmmword [0x140226d78], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140226d88], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
lea rcx, [rsp + 0x120]
call fcn.140006b84
mov rdx, r13
lea rcx, [0x14023bc50]
call fcn.1400f5e64
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov r8d, 0xa
lea rdx, str.winrar.lng
lea rcx, [rsp + 0x100]
call fcn.1400041a8
nop
lea rdx, [rsp + 0x100]
lea rcx, [0x14023bd10]
call fcn.1400f4418
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, r14
jb 0x14018e6c5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, r15
jb 0x14018e6c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fc43
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rsp + 0x110], xmm0
mov word [rsp + 0x100], di
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xc0], rdi
lea rax, [0x140189b60]
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], r13
mov edx, 0x65
mov rcx, qword [0x14023bc40]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0xd0], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsp + 0xd8], rax
movdqa xmm0, xmmword [0x1401f2320]
movdqa xmmword [rsp + 0xe0], xmm0
lea rbx, str.WinRarWindow
mov qword [rsp + 0xf0], rbx
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x14018e952
lea rax, [0x140133c10]
mov qword [rsp + 0xb8], rax
movdqa xmm0, xmmword [reloc.OLEAUT32.dll_SysStringLen]
movdqa xmmword [rsp + 0xe0], xmm0
lea rax, str.RarTreeWindow
mov qword [rsp + 0xf0], rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x14018e952
lea rax, [0x140117a20]
mov qword [rsp + 0xb8], rax
movdqa xmm0, xmmword [0x1401f2320]
movdqa xmmword [rsp + 0xe0], xmm0
lea rax, str.RarReminder
mov qword [rsp + 0xf0], rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x14018e952
lea rax, [0x140197520]
mov qword [rsp + 0xb8], rax
movdqa xmm0, xmmword [reloc.OLEAUT32.dll_SysStringLen]
movdqa xmmword [rsp + 0xe0], xmm0
mov dword [rsp + 0xc4], 0x10
lea rax, str.RarViewWindow
mov qword [rsp + 0xf0], rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x14018e952
lea rax, [0x140173a60]
mov qword [rsp + 0xb8], rax
movdqa xmm0, xmmword [reloc.OLEAUT32.dll_SysStringLen]
movdqa xmmword [rsp + 0xe0], xmm0
mov dword [rsp + 0xc4], edi
lea rax, str.RarCmtWindow
mov qword [rsp + 0xf0], rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x14018e952
lea rcx, [rsp + 0xa0]
call fcn.140171e60
nop
mov qword [0x14023bc48], r13
lea rcx, [0x140234020]
call fcn.14000fcb4
call fcn.140152f78
call fcn.140148e28
call fcn.14018dae8
lea r8, str.WinRAR_Busy
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x140231b10], rax
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov eax, 0x80000000
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9d, 0x6cf0000
lea r8, [0x1401da520]
mov rdx, rbx
mov ecx, 0x10
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140231ad8], rax
test rax, rax
jne 0x14018e9e1
lea rcx, [rsp + 0xa0]
call fcn.140171ed8
nop
mov rdx, qword [rsp + 0x178]
cmp rdx, r14
jb 0x14018e995
mov rcx, qword [rsp + 0x160]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, r15
jb 0x14018e990
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fc37
call fcn.1401addcc
mov r12d, edi
mov eax, r12d
movdqa xmm0, xmmword [0x1401da070]
mov word [rsp + 0x160], di
movdqu xmmword [rsp + 0x170], xmm0
mov rcx, qword [rsp + 0x5c0]
xor rcx, rsp
call fcn.1401adee0
lea r11, [rsp + 0x5d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rdx, rax
lea rcx, [0x14023bd10]
call fcn.1400f535c
xor ecx, ecx
call fcn.140189978
call fcn.14018ce84
call fcn.140081ad8
cmp byte [rsp + 0x60], dil
je 0x14018ea24
call fcn.140116dd0
test al, al
jne 0x14018ea24
mov dl, r12b
xor ecx, ecx
call fcn.14001bd78
test al, al
mov byte [rsp + 0x69], r12b
je 0x14018ea29
mov byte [rsp + 0x69], dil
mov qword [rsp + 0x140], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x150], xmm0
movdqa xmm1, xmmword [0x1401da070]
movdqu xmmword [rsp + 0x150], xmm1
mov word [rsp + 0x140], di
lea rcx, [rsp + 0x140]
call fcn.14001a778
lea rax, [rsp + 0x140]
cmp qword [rsp + 0x158], r14
cmovae rax, qword [rsp + 0x140]
movzx ecx, word [rax]
call fcn.140104c4c
mov ebx, eax
mov dword [rsp + 0x90], eax
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x1b0], rdi
xor edx, edx
mov r8d, 0x402
lea rcx, [rsp + 0x1b8]
call fcn.1401b0b80
nop
lea rdx, [rsp + 0x1a0]
lea rcx, [0x140231ba0]
call fcn.1401897a4
nop
mov r13, qword [rsp + 0x1a0]
test r13, r13
je 0x14018eb8b
mov rbx, r13
mov qword [rsp + 0x70], rbx
cmp r13, qword [rsp + 0x1a8]
je 0x14018eb17
lea rcx, [rbx + 0x20]
call fcn.140006b84
nop
mov rcx, rbx
call fcn.140006b84
add rbx, 0xc8
mov qword [rsp + 0x70], rbx
cmp rbx, qword [rsp + 0x1a8]
jne 0x14018eaef
mov rcx, qword [rsp + 0x1b0]
sub rcx, r13
movabs rax, 0xa3d70a3d70a3d70b
imul rcx
add rdx, rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0xc8
mov rax, r13
cmp rdx, r15
jb 0x14018eb68
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fc73
mov rcx, r13
call fcn.1401addcc
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x1b0], rdi
mov ebx, dword [rsp + 0x90]
xor r9d, r9d
xor r8d, r8d
mov dl, r12b
lea r13, [0x140232a60]
mov rcx, r13
call fcn.1400b7f28
call fcn.14002b790
test bx, bx
je 0x14018ec4e
mov al, byte [0x140232a84]
test al, al
jne 0x14018ec4e
movzx edx, bx
lea rcx, str.AFUMD
call fcn.1401b07f0
test rax, rax
jne 0x14018ec1d
cmp bx, 0x43
jne 0x14018ebf8
lea rax, [rsp + 0x140]
cmp qword [rsp + 0x158], r14
cmovae rax, qword [rsp + 0x140]
cmp word [rax + 2], di
je 0x14018ec1d
mov al, byte [0x140232a84]
test al, al
jne 0x14018ec4e
movzx edx, bx
lea rcx, [0x1401f2250]
call fcn.1401b07f0
test rax, rax
je 0x14018ec4e
call fcn.14016e960
jmp 0x14018ec55
call fcn.14015dc14
sub bx, 0x43
cmp bx, r12w
ja 0x14018ec55
lea rax, [0x140232f40]
cmp qword [0x140232f58], r14
cmovae rax, qword [0x140232f40]
mov qword [0x140232f50], rdi
mov word [rax], di
jmp 0x14018ec55
xor ecx, ecx
call fcn.140152fb4
xor r9d, r9d
xor r8d, r8d
mov dl, r12b
mov rcx, r13
call fcn.1400b7f28
mov rdx, r13
lea rcx, [0x140233500]
call fcn.140017ad4
lea r13, [0x140232ee0]
mov rdx, r13
lea rcx, [0x140226d58]
call fcn.140004948
mov rax, r13
cmp qword [0x140232ef8], r14
cmovae rax, qword [0x140232ee0]
mov qword [0x140232ef0], rdi
mov word [rax], di
mov qword [rsp + 0x180], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x190], xmm0
movdqa xmm1, xmmword [0x1401da070]
movdqu xmmword [rsp + 0x190], xmm1
mov word [rsp + 0x180], di
lea rcx, [rsp + 0x180]
call fcn.1400e0838
lea rdx, [rsp + 0x180]
lea rcx, [0x140234e50]
call fcn.140091b08
mov dword [0x140231b08], edi
call fcn.14001a1d0
nop
cmp byte [0x140232e9c], dil
je 0x14018edcb
mov rdx, qword [rsp + 0x198]
cmp rdx, r14
jb 0x14018ed51
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, r15
jb 0x14018ed4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fc73
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rsp + 0x190], xmm0
mov word [rsp + 0x180], di
mov rdx, qword [rsp + 0x158]
cmp rdx, r14
jb 0x14018edad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, r15
jb 0x14018eda8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fc79
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rsp + 0x150], xmm0
mov word [rsp + 0x140], di
jmp 0x14018e944
cmp byte [0x140232e74], dil
jne 0x14018edd9
call fcn.140079090
mov rcx, qword [0x140231ad8]
call fcn.14018e02c
cmp qword [0x140232fd0], rdi
je 0x14018ee18
lea rbx, [0x140232fc0]
mov rcx, rbx
call fcn.1400e0b4c
mov rdx, rbx
lea rcx, [0x140226d78]
test rax, rax
jne 0x14018ee13
call fcn.1400e2b74
jmp 0x14018ee18
call fcn.140004948
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8003
mov rcx, qword [0x140231ad8]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x140232ed0], rdi
jne 0x14018f5fc
cmp byte [0x140232b20], dil
je 0x14018ee58
mov edx, 6
mov rcx, qword [0x140231ad8]
call qword [sym.imp.USER32.dll_ShowWindow]
movzx ebx, dil
cmp qword [0x140232ef0], rdi
je 0x14018f58d
mov rcx, r13
call fcn.1400cb334
cmp eax, 0xffffffff
je 0x14018ee7c
test al, 0x10
cmovne ebx, r12d
cmp qword [0x140232ef0], rdi
je 0x14018f36b
test bl, bl
jne 0x14018f373
mov byte [rsp + 0x68], dil
mov qword [rsp + 0x120], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x130], xmm0
mov r8d, 0xb
lea rdx, str.ReuseWindow
lea rcx, [rsp + 0x120]
call fcn.1400041a8
nop
mov dword [rsp + 0x64], r12d
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov r8d, 7
lea rdx, [0x1401da540]
lea rcx, [rsp + 0x100]
call fcn.1400041a8
nop
mov esi, 3
mov dword [rsp + 0x64], esi
xor r8d, r8d
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x100]
call fcn.14011537c
test eax, eax
je 0x14018ef2b
cmp qword [rsp + 0x98], rdi
mov bl, r12b
jne 0x14018ef2e
mov bl, dil
and esi, 0xfffffffd
mov dword [rsp + 0x64], esi
mov rdx, qword [rsp + 0x118]
cmp rdx, r14
jb 0x14018ef78
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, r15
jb 0x14018ef73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fc49
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rsp + 0x110], xmm0
mov word [rsp + 0x100], di
and esi, 0xfffffffe
mov dword [rsp + 0x64], esi
mov rdx, qword [rsp + 0x138]
cmp rdx, r14
jb 0x14018efdb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, r15
jb 0x14018efd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fc4f
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x120], di
test bl, bl
je 0x14018f313
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], 7
mov word [rsp + 0x100], di
xor edx, edx
lea rcx, [rsp + 0x100]
call fcn.14015f8e0
lea rcx, [rsp + 0x100]
call fcn.1400df0fc
mov r8d, 4
lea rdx, [0x1401f0330]
lea rcx, [rsp + 0x100]
call fcn.140006c14
lea rdx, [rsp + 0x100]
cmp qword [rsp + 0x118], r14
cmovae rdx, qword [rsp + 0x100]
mov rcx, r13
cmp qword [0x140232ef8], r14
cmovae rcx, qword [0x140232ee0]
mov r8, qword [rsp + 0x110]
call fcn.140104d94
or r13, 0xffffffffffffffff
test eax, eax
je 0x14018f1dd
lea rax, str.RarArchiveWideName
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x20
xor r9d, r9d
xor edx, edx
mov r8d, 0x8000004
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rbx, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14018f1dd
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], rdi
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], 7
mov word [rsp + 0x120], di
lea r8, [rsp + 0x120]
lea rdx, [0x140232ee0]
lea rcx, [0x140234e50]
call fcn.140088da8
mov rax, qword [rsp + 0x130]
lea rax, [rax*2 + 4]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r13 + 3]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
mov ecx, dword [rsp + 0x130]
mov dword [rax], ecx
lea rdx, [rsp + 0x120]
cmp qword [rsp + 0x138], r14
cmovae rdx, qword [rsp + 0x120]
mov r8, qword [rsp + 0x130]
add r8, r8
lea rcx, [rax + 4]
call fcn.1401aff80
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, 0x8001
mov r9d, 0x7ae964f1
mov r8d, 0xd489ac5e
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
setne byte [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rsp + 0x120]
call fcn.140006b84
nop
lea rcx, [rsp + 0x100]
call fcn.140006b84
cmp byte [rsp + 0x68], dil
je 0x14018f317
call fcn.140169c6c
mov byte [0x140231b19], r12b
mov rdx, qword [rsp + 0x198]
cmp rdx, r14
jb 0x14018f244
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x180]
cmp rdx, r15
mov rax, rcx
jb 0x14018f23f
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fc73
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
mov word [rsp + 0x180], di
movdqu xmmword [rsp + 0x190], xmm0
mov rdx, qword [rsp + 0x158]
cmp rdx, r14
jb 0x14018f2a0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
cmp rdx, r15
mov rax, rcx
jb 0x14018f29b
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fc79
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
mov word [rsp + 0x140], di
movdqu xmmword [rsp + 0x150], xmm0
lea rcx, [rsp + 0xa0]
call fcn.140171ed8
nop
mov rdx, qword [rsp + 0x178]
cmp rdx, r14
jb 0x14018e998
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x160]
cmp rdx, r15
mov rax, rcx
jb 0x14018f309
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fc37
call fcn.1401addcc
jmp 0x14018e998
or r13, 0xffffffffffffffff
lea rdx, [0x140232ee0]
lea rcx, [0x140234e50]
call fcn.140089d8c
test al, al
je 0x14018f1f5
cmp byte [0x140231ad4], dil
jne 0x14018f656
cmp qword [0x140231af8], rdi
je 0x14018f359
lea rcx, [0x140234e50]
call fcn.140090918
jmp 0x14018f656
mov rcx, qword [0x140231ad8]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x14018f656
test bl, bl
je 0x14018f58d
mov rcx, r13
cmp qword [0x140232ef8], r14
cmovae rcx, qword [0x140232ee0]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x14018f455
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], rdi
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.14000a438
nop
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x70]
sub r8, rdx
sar r8, 1
mov rcx, r13
cmp qword [0x140232ef8], r14
cmovae rcx, qword [0x140232ee0]
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x14018f402
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x70]
sub rcx, rdx
sar rcx, 1
mov eax, eax
cmp rax, rcx
jae 0x14018f402
mov rcx, r13
call fcn.140012f6c
nop
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14018f455
mov rax, qword [rsp + 0x80]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
mov rax, rcx
cmp rdx, r15
jb 0x14018f43f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fc55
call fcn.1401addcc
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], rdi
lea rax, [rsp + 0x100]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], rdi
mov r13, qword [0x140232ef0]
cmp qword [0x140232ef8], r14
lea rcx, [0x140232ee0]
cmovae rcx, qword [0x140232ee0]
mov qword [rsp + 0x70], rcx
movabs rbx, 0x7ffffffffffffffe
cmp r13, rbx
ja 0x14018fc5b
mov qword [rsp + 0x118], 7
cmp r13, r14
jae 0x14018f4e6
mov qword [rsp + 0x110], r13
mov r8d, 0x10
mov rdx, rcx
lea rcx, [rsp + 0x100]
call fcn.1401aff80
jmp 0x14018f574
mov rax, r13
or rax, 7
cmp rax, rbx
jbe 0x14018f502
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x14018f530
mov rbx, rax
mov ecx, 0xa
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14018fc61
add rcx, rcx
cmp rcx, r15
jb 0x14018f537
call fcn.14000416c
jmp 0x14018f546
test rcx, rcx
je 0x14018f543
call fcn.1401add90
jmp 0x14018f546
mov rax, rdi
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x110], r13
mov qword [rsp + 0x118], rbx
lea r8, [r13*2 + 2]
mov rdx, qword [rsp + 0x70]
mov rcx, rax
call fcn.1401aff80
nop
mov r8b, r12b
lea rdx, [rsp + 0x100]
lea rcx, [0x140234e50]
call fcn.140083464
jmp 0x14018f599
lea rcx, [0x140234e50]
call fcn.140090ccc
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
xor r8d, r8d
lea rbx, [0x1401d9fd0]
mov rdx, rbx
lea rcx, [rsp + 0x100]
call fcn.1400041a8
nop
lea rdx, [rsp + 0x100]
lea rcx, [0x140234e50]
call fcn.14008efb0
nop
lea rcx, [rsp + 0x100]
call fcn.140006b84
lea rcx, [0x1402349f8]
call fcn.140005e50
or r13, 0xffffffffffffffff
jmp 0x14018f65d
lea rcx, [0x140231ba0]
call fcn.14001a99c
call fcn.140169c6c
cmp dword [0x140231b08], r12d
jne 0x14018f652
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
sete dl
mov cl, r12b
call fcn.1401733b0
lea rcx, [0x14023bda0]
call fcn.1400d03f0
mov byte [0x140231b19], r12b
mov r12d, dword [0x14023bd90]
jmp 0x14018f201
or r13, 0xffffffffffffffff
lea rbx, [0x1401d9fd0]
mov r8, qword [rsp + 0x98]
mov edx, 0x10000
lea rcx, [0x140173690]
call fcn.1401bb5c8
cmp byte [0x140232e9b], dil
jne 0x14018f6a0
mov rcx, qword [0x140231ad8]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x14018f6a0
cmp qword [rsp + 0x98], rdi
setne cl
call fcn.14018d244
mov rcx, qword [0x140231ad8]
call qword [sym.imp.USER32.dll_UpdateWindow]
cmp byte [rsp + 0x69], dil
je 0x14018f756
cmp byte [rsp + 0x60], dil
je 0x14018f756
mov qword [rsp + 0x120], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x130], xmm0
mov r8d, 5
lea rdx, [0x1401da488]
lea rcx, [rsp + 0x120]
call fcn.1400041a8
nop
or esi, 4
mov dword [rsp + 0x64], esi
lea rcx, [rsp + 0x120]
call fcn.140111bf4
test al, al
jne 0x14018f756
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov r8d, 4
lea rdx, [0x1401da780]
lea rcx, [rsp + 0x100]
call fcn.1400041a8
nop
or esi, r14d
mov dword [rsp + 0x64], esi
lea rcx, [rsp + 0x100]
call fcn.140077e98
test al, al
mov byte [rsp + 0x60], r12b
je 0x14018f75b
mov byte [rsp + 0x60], dil
test r14b, sil
je 0x14018f775
and esi, 0xfffffff7
mov dword [rsp + 0x64], esi
lea rcx, [rsp + 0x100]
call fcn.140006b84
nop
test sil, 4
je 0x14018f78f
and esi, 0xfffffffb
mov dword [rsp + 0x64], esi
lea rcx, [rsp + 0x120]
call fcn.140006b84
cmp byte [rsp + 0x60], dil
je 0x14018f7a0
mov ecx, 6
call fcn.140025bc8
mov qword [rsp + 0x120], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x130], xmm0
mov r8d, 0x10
lea rdx, str.ExportedSettings
lea rcx, [rsp + 0x120]
call fcn.1400041a8
nop
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x100]
call fcn.1400041a8
nop
xor r8d, r8d
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x100]
call fcn.14011537c
mov ebx, eax
lea rcx, [rsp + 0x100]
call fcn.140006b84
nop
lea rcx, [rsp + 0x120]
call fcn.140006b84
test ebx, ebx
je 0x14018f835
call fcn.14001b928
cmp byte [0x140232e9b], dil
jne 0x14018f848
xor edx, edx
mov cl, r12b
call fcn.140118220
mov qword [rsp + 0x120], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x130], xmm0
mov r8d, 0xa
lea rdx, str.WizardMode
lea rcx, [rsp + 0x120]
call fcn.1400041a8
nop
or esi, 0x10
mov dword [rsp + 0x64], esi
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov r8d, 7
lea rdx, [0x1401da540]
lea rcx, [rsp + 0x100]
call fcn.1400041a8
nop
or esi, 0x20
mov dword [rsp + 0x64], esi
xor r8d, r8d
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x100]
call fcn.14011537c
test eax, eax
je 0x14018f8ec
mov rcx, qword [0x140231ad8]
call fcn.140198960
test al, al
je 0x14018f8ec
cmp qword [0x140231af8], rdi
mov bl, r12b
je 0x14018f8ef
mov bl, dil
test sil, 0x20
je 0x14018f958
and esi, 0xffffffdf
mov dword [rsp + 0x64], esi
mov rdx, qword [rsp + 0x118]
cmp rdx, r14
jb 0x14018f93f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, r15
jb 0x14018f93a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fc67
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rsp + 0x110], xmm0
mov word [rsp + 0x100], di
test sil, 0x10
je 0x14018f9c1
and esi, 0xffffffef
mov dword [rsp + 0x64], esi
mov rdx, qword [rsp + 0x138]
cmp rdx, r14
jb 0x14018f9a8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, r15
jb 0x14018f9a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14018fc6d
call fcn.1401addcc
movdqa xmm0, xmmword [0x1401da070]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x120], di
test bl, bl
je 0x14018f9d2
mov rcx, qword [0x140231ad8]
call qword [sym.imp.USER32.dll_DestroyWindow]
cmp byte [0x140232e9b], dil
je 0x14018f9f7
call fcn.140169c6c
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, qword [0x140231ad8]
call qword [sym.imp.USER32.dll_PostMessageW]
xor edx, edx
xor ecx, ecx
call fcn.14018c7c8
test al, al
jne 0x14018f9f7
lea rax, [0x1401d9fd0]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdi
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
mov dl, r12b
lea rcx, [rsp + 0x70]
call fcn.140160a60
lea rcx, [0x140232a58]
call fcn.140190e84
call fcn.140173a40
mov byte [0x140231b19], r12b
mov rcx, qword [0x140231b48]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov ebx, edi
mov esi, reloc.SHELL32.dll_SHRestricted
cmp dword [0x140231b3c], edi
jle 0x14018fa74
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
sub ebx, r12d
cmp ebx, 0xc8
jl 0x14018fa59
mov rcx, qword [0x140231b48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x140231b0c], edi
je 0x14018fab0
mov dword [0x140231b0c], r13d
mov ebx, edi
test r13d, r13d
je 0x14018facd
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
add ebx, r12d
cmp ebx, 0xa
jge 0x14018facd
mov r13d, dword [0x140231b0c]
jmp 0x14018fa92
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
sete dl
mov cl, r12b
call fcn.1401733b0
lea rcx, [0x14023bda0]
call fcn.1400d03f0
nop
lea rcx, [rsp + 0x180]
call fcn.140006b84
nop
lea rcx, [rsp + 0x140]
call fcn.140006b84
nop
lea rcx, [rsp + 0xa0]
call fcn.140171ed8
nop
lea rcx, [rsp + 0x160]
call fcn.140006b84
xor eax, eax
jmp 0x14018e9b4
call fcn.1401b4fa4
int3
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
int3
call fcn.1401b4fa4
int3
call fcn.140006be8
int3
call fcn.140006b64
nop
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
nop
call fcn.1401b4fa4
int3