Function at 0x140190120
Capabilities:
Create thread
Read file via mapping

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x5d0
mov rax, qword [0x140231ec8]
xor rax, rsp
mov qword [rsp + 0x5c0], rax
mov r13, rcx
xor edi, edi
mov esi, edi
mov dword [rsp + 0x64], edi
lea r12d, [rdi + 1]
mov cl, r12b
call fcn.140100420
mov ecx, 0x8005
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
lea rcx, [0x140234a30]
call fcn.1400b7e94
mov byte [0x140233a81], dil
mov dword [0x140233aa4], edi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x140233aa8], eax
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x140233ab0], rax
lea rcx, str.WMUser_DisplayError
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x140233aac], eax
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
lea r8d, [rdi + 7]
lea rdx, [0x1401dc550]
lea rcx, [rsp + 0x100]
call fcn.1400041b8
nop
lea rcx, [rsp + 0x100]
call fcn.140112e58
test al, al
sete byte [rsp + 0x60]
mov rdx, qword [rsp + 0x118]
lea r14d, [rdi + 8]
mov r15d, 0x1000
cmp rdx, r14
jb 0x14019024c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, r15
jb 0x140190247
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140191923
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x110], xmm0
mov word [rsp + 0x100], di
mov qword [rsp + 0x160], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x170], xmm0
movdqa xmm1, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x170], xmm1
mov word [rsp + 0x160], di
mov dl, r12b
lea rcx, [rsp + 0x160]
call fcn.1400e1ff0
lea rcx, [rsp + 0x160]
call fcn.1400e012c
lea r8, str.rar.log
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x120]
call fcn.140006d9c
mov rbx, rax
lea rax, [0x140228d78]
cmp rax, rbx
je 0x140190306
mov rcx, rax
call fcn.140006b94
movups xmm0, xmmword [rbx]
movups xmmword [0x140228d78], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140228d88], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
lea rcx, [rsp + 0x120]
call fcn.140006b94
mov rdx, r13
lea rcx, [0x14023fc60]
call fcn.1400f6f34
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov r8d, 0xa
lea rdx, str.winrar.lng
lea rcx, [rsp + 0x100]
call fcn.1400041b8
nop
lea rdx, [rsp + 0x100]
lea rcx, [0x14023fd20]
call fcn.1400f54e8
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, r14
jb 0x1401903a9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, r15
jb 0x1401903a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140191929
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x110], xmm0
mov word [rsp + 0x100], di
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xc0], rdi
lea rax, [0x14018b840]
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], r13
mov edx, 0x65
mov rcx, qword [0x14023fc50]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0xd0], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsp + 0xd8], rax
movdqa xmm0, xmmword [0x1401f4200]
movdqa xmmword [rsp + 0xe0], xmm0
lea rbx, str.WinRarWindow
mov qword [rsp + 0xf0], rbx
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x140190636
lea rax, [0x140134f10]
mov qword [rsp + 0xb8], rax
movdqa xmm0, xmmword [reloc.OLEAUT32.dll_SysStringLen]
movdqa xmmword [rsp + 0xe0], xmm0
lea rax, str.RarTreeWindow
mov qword [rsp + 0xf0], rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x140190636
lea rax, [0x140118c70]
mov qword [rsp + 0xb8], rax
movdqa xmm0, xmmword [0x1401f4200]
movdqa xmmword [rsp + 0xe0], xmm0
lea rax, str.RarReminder
mov qword [rsp + 0xf0], rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x140190636
lea rax, [0x1401991f0]
mov qword [rsp + 0xb8], rax
movdqa xmm0, xmmword [reloc.OLEAUT32.dll_SysStringLen]
movdqa xmmword [rsp + 0xe0], xmm0
mov dword [rsp + 0xc4], 0x10
lea rax, str.RarViewWindow
mov qword [rsp + 0xf0], rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x140190636
lea rax, [0x1401695b0]
mov qword [rsp + 0xb8], rax
movdqa xmm0, xmmword [reloc.OLEAUT32.dll_SysStringLen]
movdqa xmmword [rsp + 0xe0], xmm0
mov dword [rsp + 0xc4], edi
lea rax, str.RarCmtWindow
mov qword [rsp + 0xf0], rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x140190636
lea rcx, [rsp + 0xa0]
call fcn.140175030
nop
mov qword [0x14023fc58], r13
lea rcx, [0x140236030]
call fcn.14000fd04
call fcn.140154470
call fcn.14014a318
call fcn.14018f7cc
lea r8, str.WinRAR_Busy
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x140233a78], rax
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov eax, 0x80000000
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9d, 0x6cf0000
lea r8, [0x1401e0b40]
mov rdx, rbx
mov ecx, 0x10
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140233a48], rax
test rax, rax
jne 0x1401906c5
lea rcx, [rsp + 0xa0]
call fcn.1401750a8
nop
mov rdx, qword [rsp + 0x178]
cmp rdx, r14
jb 0x140190679
mov rcx, qword [rsp + 0x160]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, r15
jb 0x140190674
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019191d
call fcn.1401af9bc
mov r12d, edi
mov eax, r12d
movdqa xmm0, xmmword [0x1401dc090]
mov word [rsp + 0x160], di
movdqu xmmword [rsp + 0x170], xmm0
mov rcx, qword [rsp + 0x5c0]
xor rcx, rsp
call fcn.1401afad0
lea r11, [rsp + 0x5d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rdx, rax
lea rcx, [0x14023fd20]
call fcn.1400f642c
xor ecx, ecx
call fcn.14018b660
call fcn.14018eb68
cmp byte [rsp + 0x60], dil
je 0x140190703
call fcn.140118040
test al, al
jne 0x140190703
mov dl, r12b
xor ecx, ecx
call fcn.14001be88
test al, al
mov byte [rsp + 0x69], r12b
je 0x140190708
mov byte [rsp + 0x69], dil
mov qword [rsp + 0x140], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x150], xmm0
movdqa xmm1, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x150], xmm1
mov word [rsp + 0x140], di
lea rcx, [rsp + 0x140]
call fcn.14001a8b8
lea rax, [rsp + 0x140]
cmp qword [rsp + 0x158], r14
cmovae rax, qword [rsp + 0x140]
movzx ecx, word [rax]
call fcn.140105e80
mov ebx, eax
mov dword [rsp + 0x90], eax
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x1b0], rdi
xor edx, edx
mov r8d, 0x402
lea rcx, [rsp + 0x1b8]
call fcn.1401b2770
nop
lea rdx, [rsp + 0x1a0]
lea rcx, [0x140233ae0]
call fcn.14018b394
nop
mov r13, qword [rsp + 0x1a0]
test r13, r13
je 0x14019086a
mov rbx, r13
mov qword [rsp + 0x70], rbx
cmp r13, qword [rsp + 0x1a8]
je 0x1401907f6
lea rcx, [rbx + 0x20]
call fcn.140006b94
nop
mov rcx, rbx
call fcn.140006b94
add rbx, 0xc8
mov qword [rsp + 0x70], rbx
cmp rbx, qword [rsp + 0x1a8]
jne 0x1401907ce
mov rcx, qword [rsp + 0x1b0]
sub rcx, r13
movabs rax, 0xa3d70a3d70a3d70b
imul rcx
add rdx, rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0xc8
mov rax, r13
cmp rdx, r15
jb 0x140190847
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140191959
mov rcx, r13
call fcn.1401af9bc
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x1b0], rdi
mov ebx, dword [rsp + 0x90]
xor r9d, r9d
xor r8d, r8d
mov dl, r12b
lea r13, [0x140234a30]
mov rcx, r13
call fcn.1400b8adc
call fcn.14002b930
test bx, bx
je 0x14019092d
mov al, byte [0x140234a54]
test al, al
jne 0x14019092d
movzx edx, bx
lea rcx, str.AFUMD
call fcn.1401b23e0
test rax, rax
jne 0x1401908fc
cmp bx, 0x43
jne 0x1401908d7
lea rax, [rsp + 0x140]
cmp qword [rsp + 0x158], r14
cmovae rax, qword [rsp + 0x140]
cmp word [rax + 2], di
je 0x1401908fc
mov al, byte [0x140234a54]
test al, al
jne 0x14019092d
movzx edx, bx
lea rcx, [0x1401f4130]
call fcn.1401b23e0
test rax, rax
je 0x14019092d
call fcn.140171b30
jmp 0x140190934
call fcn.14015f33c
sub bx, 0x43
cmp bx, r12w
ja 0x140190934
lea rax, [0x140234f10]
cmp qword [0x140234f28], r14
cmovae rax, qword [0x140234f10]
mov qword [0x140234f20], rdi
mov word [rax], di
jmp 0x140190934
xor ecx, ecx
call fcn.1401544ac
xor r9d, r9d
xor r8d, r8d
mov dl, r12b
mov rcx, r13
call fcn.1400b8adc
mov rdx, r13
lea rcx, [0x1402354f0]
call fcn.140017c04
lea r13, [0x140234eb0]
mov rdx, r13
lea rcx, [0x140228d58]
call fcn.140004958
mov rax, r13
cmp qword [0x140234ec8], r14
cmovae rax, qword [0x140234eb0]
mov qword [0x140234ec0], rdi
mov word [rax], di
mov qword [rsp + 0x180], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x190], xmm0
movdqa xmm1, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x190], xmm1
mov word [rsp + 0x180], di
lea rcx, [rsp + 0x180]
call fcn.1400e1888
lea rdx, [rsp + 0x180]
lea rcx, [0x140236e60]
call fcn.140092078
mov dword [0x140233a70], edi
call fcn.14001a310
nop
cmp byte [0x140234e6c], dil
je 0x140190aaa
mov rdx, qword [rsp + 0x198]
cmp rdx, r14
jb 0x140190a30
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, r15
jb 0x140190a2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140191959
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x190], xmm0
mov word [rsp + 0x180], di
mov rdx, qword [rsp + 0x158]
cmp rdx, r14
jb 0x140190a8c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, r15
jb 0x140190a87
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019195f
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x150], xmm0
mov word [rsp + 0x140], di
jmp 0x140190628
cmp byte [0x140234e44], dil
jne 0x140190ab8
call fcn.140079874
mov rcx, qword [0x140233a48]
call fcn.14018fd10
cmp qword [0x140234fa0], rdi
je 0x140190af7
lea rbx, [0x140234f90]
mov rcx, rbx
call fcn.1400e1b9c
mov rdx, rbx
lea rcx, [0x140228d78]
test rax, rax
jne 0x140190af2
call fcn.1400e3c30
jmp 0x140190af7
call fcn.140004958
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8003
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x140234ea0], rdi
jne 0x1401912db
cmp byte [0x140234af0], dil
je 0x140190b37
mov edx, 6
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_ShowWindow]
movzx ebx, dil
cmp qword [0x140234ec0], rdi
je 0x14019126c
mov rcx, r13
call fcn.1400cc064
cmp eax, 0xffffffff
je 0x140190b5b
test al, 0x10
cmovne ebx, r12d
cmp qword [0x140234ec0], rdi
je 0x14019104a
test bl, bl
jne 0x140191052
mov byte [rsp + 0x68], dil
mov qword [rsp + 0x120], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x130], xmm0
mov r8d, 0xb
lea rdx, str.ReuseWindow
lea rcx, [rsp + 0x120]
call fcn.1400041b8
nop
mov dword [rsp + 0x64], r12d
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov r8d, 7
lea rdx, [0x1401dc550]
lea rcx, [rsp + 0x100]
call fcn.1400041b8
nop
mov esi, 3
mov dword [rsp + 0x64], esi
xor r8d, r8d
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x100]
call fcn.1401165ec
test eax, eax
je 0x140190c0a
cmp qword [rsp + 0x98], rdi
mov bl, r12b
jne 0x140190c0d
mov bl, dil
and esi, 0xfffffffd
mov dword [rsp + 0x64], esi
mov rdx, qword [rsp + 0x118]
cmp rdx, r14
jb 0x140190c57
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, r15
jb 0x140190c52
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019192f
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x110], xmm0
mov word [rsp + 0x100], di
and esi, 0xfffffffe
mov dword [rsp + 0x64], esi
mov rdx, qword [rsp + 0x138]
cmp rdx, r14
jb 0x140190cba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, r15
jb 0x140190cb5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140191935
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x120], di
test bl, bl
je 0x140190ff2
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], 7
mov word [rsp + 0x100], di
xor edx, edx
lea rcx, [rsp + 0x100]
call fcn.140161010
lea rcx, [rsp + 0x100]
call fcn.1400e012c
mov r8d, 4
lea rdx, [0x1401f2220]
lea rcx, [rsp + 0x100]
call fcn.140006c24
lea rdx, [rsp + 0x100]
cmp qword [rsp + 0x118], r14
cmovae rdx, qword [rsp + 0x100]
mov rcx, r13
cmp qword [0x140234ec8], r14
cmovae rcx, qword [0x140234eb0]
mov r8, qword [rsp + 0x110]
call fcn.140105fc8
or r13, 0xffffffffffffffff
test eax, eax
je 0x140190ebc
lea rax, str.RarArchiveWideName
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x20
xor r9d, r9d
xor edx, edx
mov r8d, 0x8000004
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rbx, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140190ebc
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], rdi
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], 7
mov word [rsp + 0x120], di
lea r8, [rsp + 0x120]
lea rdx, [0x140234eb0]
lea rcx, [0x140236e60]
call fcn.1400894b8
mov rax, qword [rsp + 0x130]
lea rax, [rax*2 + 4]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r13 + 3]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
mov ecx, dword [rsp + 0x130]
mov dword [rax], ecx
lea rdx, [rsp + 0x120]
cmp qword [rsp + 0x138], r14
cmovae rdx, qword [rsp + 0x120]
mov r8, qword [rsp + 0x130]
add r8, r8
lea rcx, [rax + 4]
call fcn.1401b1b70
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, 0x8001
mov r9d, 0x7ae964f1
mov r8d, 0xd489ac5e
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
setne byte [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rsp + 0x120]
call fcn.140006b94
nop
lea rcx, [rsp + 0x100]
call fcn.140006b94
cmp byte [rsp + 0x68], dil
je 0x140190ff6
call fcn.14016cbcc
mov byte [0x140233a81], r12b
mov rdx, qword [rsp + 0x198]
cmp rdx, r14
jb 0x140190f23
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x180]
cmp rdx, r15
mov rax, rcx
jb 0x140190f1e
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140191959
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
mov word [rsp + 0x180], di
movdqu xmmword [rsp + 0x190], xmm0
mov rdx, qword [rsp + 0x158]
cmp rdx, r14
jb 0x140190f7f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
cmp rdx, r15
mov rax, rcx
jb 0x140190f7a
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019195f
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
mov word [rsp + 0x140], di
movdqu xmmword [rsp + 0x150], xmm0
lea rcx, [rsp + 0xa0]
call fcn.1401750a8
nop
mov rdx, qword [rsp + 0x178]
cmp rdx, r14
jb 0x14019067c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x160]
cmp rdx, r15
mov rax, rcx
jb 0x140190fe8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019191d
call fcn.1401af9bc
jmp 0x14019067c
or r13, 0xffffffffffffffff
lea rdx, [0x140234eb0]
lea rcx, [0x140236e60]
call fcn.14008a688
test al, al
je 0x140190ed4
cmp byte [0x140233a44], dil
jne 0x140191335
cmp qword [0x140233a60], rdi
je 0x140191038
lea rcx, [0x140236e60]
call fcn.140090e7c
jmp 0x140191335
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x140191335
test bl, bl
je 0x14019126c
mov rcx, r13
cmp qword [0x140234ec8], r14
cmovae rcx, qword [0x140234eb0]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x140191134
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], rdi
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.14000a448
nop
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x70]
sub r8, rdx
sar r8, 1
mov rcx, r13
cmp qword [0x140234ec8], r14
cmovae rcx, qword [0x140234eb0]
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x1401910e1
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x70]
sub rcx, rdx
sar rcx, 1
mov eax, eax
cmp rax, rcx
jae 0x1401910e1
mov rcx, r13
call fcn.140012fc0
nop
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140191134
mov rax, qword [rsp + 0x80]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
mov rax, rcx
cmp rdx, r15
jb 0x14019111e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019193b
call fcn.1401af9bc
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], rdi
lea rax, [rsp + 0x100]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], rdi
mov r13, qword [0x140234ec0]
cmp qword [0x140234ec8], r14
lea rcx, [0x140234eb0]
cmovae rcx, qword [0x140234eb0]
mov qword [rsp + 0x70], rcx
movabs rbx, 0x7ffffffffffffffe
cmp r13, rbx
ja 0x140191941
mov qword [rsp + 0x118], 7
cmp r13, r14
jae 0x1401911c5
mov qword [rsp + 0x110], r13
mov r8d, 0x10
mov rdx, rcx
lea rcx, [rsp + 0x100]
call fcn.1401b1b70
jmp 0x140191253
mov rax, r13
or rax, 7
cmp rax, rbx
jbe 0x1401911e1
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x14019120f
mov rbx, rax
mov ecx, 0xa
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x140191947
add rcx, rcx
cmp rcx, r15
jb 0x140191216
call fcn.14000417c
jmp 0x140191225
test rcx, rcx
je 0x140191222
call fcn.1401af980
jmp 0x140191225
mov rax, rdi
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x110], r13
mov qword [rsp + 0x118], rbx
lea r8, [r13*2 + 2]
mov rdx, qword [rsp + 0x70]
mov rcx, rax
call fcn.1401b1b70
nop
mov r8b, r12b
lea rdx, [rsp + 0x100]
lea rcx, [0x140236e60]
call fcn.140083b88
jmp 0x140191278
lea rcx, [0x140236e60]
call fcn.140091238
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
xor r8d, r8d
lea rbx, [0x1401dbff0]
mov rdx, rbx
lea rcx, [rsp + 0x100]
call fcn.1400041b8
nop
lea rdx, [rsp + 0x100]
lea rcx, [0x140236e60]
call fcn.14008f380
nop
lea rcx, [rsp + 0x100]
call fcn.140006b94
lea rcx, [0x140236a08]
call fcn.140005e60
or r13, 0xffffffffffffffff
jmp 0x14019133c
lea rcx, [0x140233ae0]
call fcn.14001aadc
call fcn.14016cbcc
cmp dword [0x140233a70], r12d
jne 0x140191331
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
sete dl
mov cl, r12b
call fcn.140176660
lea rcx, [0x14023fdb0]
call fcn.1400d13c8
mov byte [0x140233a81], r12b
mov r12d, dword [0x14023fda0]
jmp 0x140190ee0
or r13, 0xffffffffffffffff
lea rbx, [0x1401dbff0]
mov r8, qword [rsp + 0x98]
mov edx, 0x10000
lea rcx, [0x140176940]
call fcn.1401bd1b8
cmp byte [0x140234e6b], dil
jne 0x14019137f
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x14019137f
cmp qword [rsp + 0x98], rdi
setne cl
call fcn.14018ef28
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_UpdateWindow]
cmp byte [rsp + 0x69], dil
je 0x140191435
cmp byte [rsp + 0x60], dil
je 0x140191435
mov qword [rsp + 0x120], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x130], xmm0
mov r8d, 5
lea rdx, [0x1401dc4a8]
lea rcx, [rsp + 0x120]
call fcn.1400041b8
nop
or esi, 4
mov dword [rsp + 0x64], esi
lea rcx, [rsp + 0x120]
call fcn.140112e58
test al, al
jne 0x140191435
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov r8d, 4
lea rdx, [0x1401dc790]
lea rcx, [rsp + 0x100]
call fcn.1400041b8
nop
or esi, r14d
mov dword [rsp + 0x64], esi
lea rcx, [rsp + 0x100]
call fcn.140078674
test al, al
mov byte [rsp + 0x60], r12b
je 0x14019143a
mov byte [rsp + 0x60], dil
test r14b, sil
je 0x140191454
and esi, 0xfffffff7
mov dword [rsp + 0x64], esi
lea rcx, [rsp + 0x100]
call fcn.140006b94
nop
test sil, 4
je 0x14019146e
and esi, 0xfffffffb
mov dword [rsp + 0x64], esi
lea rcx, [rsp + 0x120]
call fcn.140006b94
cmp byte [rsp + 0x60], dil
je 0x14019147f
mov ecx, 6
call fcn.140025ce8
mov qword [rsp + 0x120], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x130], xmm0
mov r8d, 0x10
lea rdx, str.ExportedSettings
lea rcx, [rsp + 0x120]
call fcn.1400041b8
nop
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x100]
call fcn.1400041b8
nop
xor r8d, r8d
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x100]
call fcn.1401165ec
mov ebx, eax
lea rcx, [rsp + 0x100]
call fcn.140006b94
nop
lea rcx, [rsp + 0x120]
call fcn.140006b94
test ebx, ebx
je 0x140191514
call fcn.14001ba38
cmp byte [0x140234e6b], dil
jne 0x140191527
xor edx, edx
mov cl, r12b
call fcn.140119470
mov qword [rsp + 0x120], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x130], xmm0
mov r8d, 0xa
lea rdx, str.WizardMode
lea rcx, [rsp + 0x120]
call fcn.1400041b8
nop
or esi, 0x10
mov dword [rsp + 0x64], esi
mov qword [rsp + 0x100], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov r8d, 7
lea rdx, [0x1401dc550]
lea rcx, [rsp + 0x100]
call fcn.1400041b8
nop
or esi, 0x20
mov dword [rsp + 0x64], esi
xor r8d, r8d
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x100]
call fcn.1401165ec
test eax, eax
je 0x1401915cb
mov rcx, qword [0x140233a48]
call fcn.14019a640
test al, al
je 0x1401915cb
cmp qword [0x140233a60], rdi
mov bl, r12b
je 0x1401915ce
mov bl, dil
test sil, 0x20
je 0x140191637
and esi, 0xffffffdf
mov dword [rsp + 0x64], esi
mov rdx, qword [rsp + 0x118]
cmp rdx, r14
jb 0x14019161e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, r15
jb 0x140191619
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14019194d
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x110], xmm0
mov word [rsp + 0x100], di
test sil, 0x10
je 0x1401916a0
and esi, 0xffffffef
mov dword [rsp + 0x64], esi
mov rdx, qword [rsp + 0x138]
cmp rdx, r14
jb 0x140191687
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, r15
jb 0x140191682
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140191953
call fcn.1401af9bc
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x120], di
test bl, bl
je 0x1401916b1
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_DestroyWindow]
cmp byte [0x140234e6b], dil
je 0x1401916d6
call fcn.14016cbcc
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_PostMessageW]
xor edx, edx
xor ecx, ecx
call fcn.14018e4a8
test al, al
jne 0x1401916d6
lea rax, [0x1401dbff0]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdi
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
mov dl, r12b
lea rcx, [rsp + 0x70]
call fcn.140162190
lea rcx, [0x140234a28]
call fcn.140192b70
lea rcx, [0x1402349e0]
call fcn.140169550
mov byte [0x140233a81], r12b
mov rcx, qword [0x140233ab0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov ebx, edi
mov esi, reloc.SHELL32.dll_SHRestricted
cmp dword [0x140233aa4], edi
jle 0x14019175a
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
sub ebx, r12d
cmp ebx, 0xc8
jl 0x14019173f
mov rcx, qword [0x140233ab0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x140233a74], edi
je 0x140191796
mov dword [0x140233a74], r13d
mov ebx, edi
test r13d, r13d
je 0x1401917b3
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
add ebx, r12d
cmp ebx, 0xa
jge 0x1401917b3
mov r13d, dword [0x140233a74]
jmp 0x140191778
xor edx, edx
lea rcx, str.WinRarWindow
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
sete dl
mov cl, r12b
call fcn.140176660
lea rcx, [0x14023fdb0]
call fcn.1400d13c8
nop
lea rcx, [rsp + 0x180]
call fcn.140006b94
nop
lea rcx, [rsp + 0x140]
call fcn.140006b94
nop
lea rcx, [rsp + 0xa0]
call fcn.1401750a8
nop
lea rcx, [rsp + 0x160]
call fcn.140006b94
xor eax, eax
jmp 0x140190698
call fcn.1401b6b94
int3
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
int3
call fcn.1401b6b94
int3
call fcn.140006bf8
int3
call fcn.140006b74
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
nop
call fcn.1401b6b94
int3