Function at 0x140143130
Capabilities:
Create process on windows
Set current directory

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x150]
sub rsp, 0x250
mov rax, qword [0x140300040]
xor rax, rsp
mov qword [rbp + 0x140], rax
mov rdi, rcx
movzx ebx, dx
shr rdx, 0x10
cmp dx, 2
jae case.0x1401438db.33052
lea eax, [rbx - 0xee48]
cmp eax, 0x3e8
ja 0x140143189
mov edx, ebx
call fcn.140151020
jmp case.0x1401438db.33052
cmp ebx, 0x8110
ja 0x1401438b1
je 0x14014386b
lea eax, [rbx - 0x800b]
cmp eax, 0xf6
ja case.0x1401438db.33052
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x144808]
mov ecx, dword [rdx + rax*4 + 0x144754]
add rcx, rdx
jmp rcx
call fcn.140166630
cmp dword [rax + 0x18c], 0
je case.0x1401438db.33052
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_PostMessageW]
jmp case.0x1401438db.33052
lea rdx, [rsp + 0x58]
mov rcx, rdi
call fcn.140153780
test eax, eax
je case.0x1401438db.33052
mov edx, dword [rsp + 0x58]
mov rcx, qword [rdi + 0x168]
call fcn.1401ad110
jmp case.0x1401438db.33052
call fcn.14013d940
test eax, eax
je case.0x1401438db.33052
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140158c00
nop
lea rcx, [rdi + 0x1d0]
mov rdx, rax
call fcn.140017b80
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140143273
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038ca6.0]
mov dword [rdi + 0x1d8], ebx
lea rax, [rsp + 0x58]
mov qword [rsp + 0x40], rax
call fcn.140044d30
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_NEW_FOLDER
call fcn.140048480
mov r14, rax
call fcn.140019590
mov rcx, rax
test rax, rax
je 0x14014471b
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140038ca6.0]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov rdx, r14
lea rcx, [rsp + 0x58]
call fcn.140018bb0
test al, al
jne 0x140143300
test r14, r14
jne 0x1401432e2
xor esi, esi
jmp 0x1401432ef
inc rbx
cmp word [r14 + rbx*2], 0
jne 0x1401432e2
mov esi, ebx
mov r8d, esi
mov rdx, r14
lea rcx, [rsp + 0x58]
call fcn.140018f50
nop
lea rdx, [rsp + 0x58]
mov rcx, qword [rdi + 0x168]
call fcn.1401a99f0
jmp case.0x1401438db.33052
mov rcx, rdi
call fcn.14015a2f0
jmp case.0x1401438db.33052
mov edx, 1
mov rcx, rdi
call fcn.14015a3a0
jmp case.0x1401438db.33052
mov rcx, qword [rdi + 0x98]
test rcx, rcx
je case.0x1401438db.33052
mov rax, qword [rcx + 0x138]
xor esi, esi
test rax, rax
je 0x14014336b
mov edx, dword [rax + 0x84]
test edx, edx
sete sil
mov edx, esi
call fcn.14009a990
jmp case.0x1401438db.33052
mov edx, esi
test edx, edx
sete sil
mov edx, esi
call fcn.14009a990
jmp case.0x1401438db.33052
mov rdx, 0xffffffffffffffff
mov rcx, rdi
call fcn.14015ea30
jmp case.0x1401438db.33052
lea rcx, [rsp + 0x40]
call fcn.140022cf0
nop
mov dword [rsp + 0x28], 1
xor esi, esi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, qword [rax]
lea rdx, [0x14026ad70]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
mov rdx, qword [rsp + 0x40]
jmp 0x140143aa5
lea r8, str.https:__go.bandisoft.com_bandizip.forum.win
xor esi, esi
mov dword [rsp + 0x28], 1
xor r9d, r9d
mov qword [rsp + 0x20], rsi
lea rdx, [0x14026ad70]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp case.0x1401438db.33052
lea r8, str.https:__www.bandisoft.com_bandizip_
jmp 0x1401433d4
mov edx, 1
mov r8d, edx
mov rcx, rdi
call fcn.14014d870
jmp case.0x1401438db.33052
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.14014d870
jmp case.0x1401438db.33052
lea rax, [rsp + 0x58]
mov qword [rsp + 0x40], rax
call fcn.140044d30
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_ASK_DELETE_CUR_ARCHIVE
call fcn.140048480
mov r14, rax
call fcn.140019590
mov rcx, rax
test rax, rax
je 0x140144726
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140038ca6.0]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov rdx, r14
lea rcx, [rsp + 0x58]
call fcn.140018bb0
test al, al
jne 0x1401434be
test r14, r14
jne 0x140143493
xor esi, esi
jmp 0x1401434ad
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp word [r14 + rbx*2], 0
jne 0x1401434a0
mov esi, ebx
mov r8d, esi
mov rdx, r14
lea rcx, [rsp + 0x58]
call fcn.140018f50
nop
call fcn.14012bfe0
lea rcx, [0x1402670d8]
lea r9, [0x1402670e0]
cmp dword [rax + 0x88], 0
cmovne r9, rcx
mov dword [rsp + 0x20], 4
lea r8, [rsp + 0x58]
mov rdx, qword [rdi + 8]
mov rcx, rdi
call fcn.14015ccf0
cmp eax, 6
jne case.0x1401438db.33052
xor edx, edx
mov rcx, rdi
call fcn.14013e930
jmp case.0x1401438db.33052
lea rax, [rsp + 0x58]
mov qword [rsp + 0x40], rax
mov rcx, qword [rdi + 0x1b8]
sub rcx, 0x18
call fcn.140019180
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x58]
call fcn.140122940
jmp case.0x1401438db.33052
lea r8, str.https:__www.bandisoft.com_bandizip_help_
jmp 0x1401433d4
mov rcx, qword [rdi + 0x1c0]
cmp dword [rcx - 0x10], 0
je case.0x1401438db.33052
lea rax, [rsp + 0x58]
mov qword [rsp + 0x40], rax
add rcx, 0xffffffffffffffe8
call fcn.140019180
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x58]
call fcn.140027330
jmp case.0x1401438db.33052
xor esi, esi
mov qword [rsp + 0x58], rsi
lea rdx, [rdi + 0x1b8]
lea rcx, [rsp + 0x58]
call fcn.140023640
nop
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.140019180
add rax, 0x18
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x28], esi
lea r9d, [rsi + 2]
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.14014dcc0
nop
jmp 0x140143aa0
mov rcx, rdi
call fcn.14014d690
jmp case.0x1401438db.33052
xor esi, esi
mov qword [rsp + 0x58], rsi
lea rcx, [rsp + 0x58]
call fcn.140028980
nop
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.140019180
add rax, 0x18
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x28], esi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.14014dcc0
nop
jmp 0x140143aa0
call qword [sym.imp.USER32.dll_GetFocus]
mov rcx, qword [rdi + 0x160]
mov rdx, qword [rcx + 8]
mov rcx, qword [rdi + 0x168]
mov rcx, qword [rcx + 8]
cmp rax, rdx
je 0x140143b66
cmp rax, rcx
jne 0x140143b66
mov rcx, rdx
call qword [sym.imp.USER32.dll_SetFocus]
jmp case.0x1401438db.33052
mov rcx, rdi
call fcn.14013f0a0
jmp case.0x1401438db.33052
mov rcx, rdi
call fcn.140155580
jmp case.0x1401438db.33052
xor esi, esi
mov qword [rsp + 0x58], rsi
lea rcx, [rsp + 0x58]
call fcn.140028980
nop
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.140019180
add rax, 0x18
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x28], esi
lea r9d, [rsi + 2]
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.14014dcc0
nop
jmp 0x140143aa0
mov edx, 2
mov rcx, rdi
call fcn.140159b90
jmp case.0x1401438db.33052
xor edx, edx
mov rcx, rdi
call fcn.140159b90
jmp case.0x1401438db.33052
mov edx, 1
mov rcx, rdi
call fcn.140159b90
jmp case.0x1401438db.33052
mov rcx, rdi
call fcn.140155df0
jmp case.0x1401438db.33052
xor edx, edx
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_ShowWindow]
xor edx, edx
mov r8d, 0x188
lea rcx, [rbp - 0x50]
call fcn.14022eb00
lea rcx, [rbp - 0x50]
call fcn.140019db0
nop
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov r14, rax
mov rax, qword [rbp - 0x28]
test rax, rax
jne 0x140143778
call fcn.1401f7180
mov qword [rbp - 0x28], rax
test rax, rax
jne 0x140143778
lea ecx, [rax + 0xe]
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1401437fc
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1401f72b0
lea rax, [rbp - 0x50]
mov qword [rbp - 0x40], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rbp - 0x38], eax
lea rbx, [0x140315cd8]
mov qword [rsp + 0x48], rbx
mov byte [rsp + 0x50], 0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [rsp + 0x50], 1
mov rax, qword [0x140315d00]
mov qword [rbp - 0x30], rax
lea rax, [rbp - 0x40]
mov qword [0x140315d00], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [rsp + 0x50], 0
xor esi, esi
mov qword [rsp + 0x20], rsi
lea r9, [0x140017d70]
mov r8, r14
mov edx, 0xd4
mov rcx, qword [0x14030a4d0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov edx, 5
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
lea rcx, [rbp - 0x50]
call fcn.140019f20
jmp case.0x1401438db.33052
mov rcx, rdi
call fcn.14015e250
jmp case.0x1401438db.33052
mov rcx, rdi
call fcn.140149220
jmp case.0x1401438db.33052
call fcn.140166630
lea rcx, [rax + 0x660]
call fcn.140029d60
call fcn.140166630
mov rcx, rax
xor edx, edx
call fcn.14016d760
mov rcx, rdi
call fcn.1401618f0
jmp case.0x1401438db.33052
call fcn.140166630
xor esi, esi
cmp dword [rax + 0x61c], esi
sete sil
call fcn.140166630
mov dword [rax + 0x61c], esi
cmp qword [rdi + 0x90], 0
je case.0x1401438db.33052
call fcn.140166630
mov edx, dword [rax + 0x61c]
mov rcx, qword [rdi + 0x90]
call fcn.14009a990
jmp case.0x1401438db.33052
lea eax, [rbx - 0x8113]
cmp eax, 0x150
ja case.0x1401438db.33052
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x1449e8]
mov ecx, dword [rdx + rax*4 + 0x144900]
add rcx, rdx
jmp rcx
mov rcx, rdi
call fcn.14015b570
jmp case.0x1401438db.33052
mov edx, ILCreateFromPathW
mov rcx, qword [0x14030a4c8]
call qword [sym.imp.USER32.dll_LoadMenuW]
mov r14, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetSubMenu]
mov r15, rax
mov r8d, 0x800f
sub ebx, 0x8133
je 0x140143935
sub ebx, 0x1e
je 0x14014392d
cmp ebx, 0x12
jne 0x14014393b
mov r8d, 0x8163
jmp 0x14014393b
mov r8d, 0x814f
jmp 0x14014393b
mov r8d, 0x8134
mov rax, qword [rdi + 0x88]
mov rcx, qword [rax + 0x490]
mov r9, qword [rcx + 0x90]
test r9, r9
je case.0x1401438db.33052
xor edx, edx
mov eax, r8d
div dword [rcx + 0xa0]
mov rax, qword [r9 + rdx*8]
test rax, rax
je case.0x1401438db.33052
cmp dword [rax + 0x18], r8d
jne 0x14014397c
cmp dword [rax], r8d
je 0x14014398a
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x140143971
jmp case.0x1401438db.33052
mov rcx, qword [rax + 8]
test rcx, rcx
je case.0x1401438db.33052
movups xmm0, xmmword [rcx + 0xe8]
movups xmmword [rsp + 0x48], xmm0
mov rdx, qword [rcx + 0x1d0]
cmp dword [rdx + 0x650], 0
je 0x1401439c5
mov eax, dword [rdx + 0xf0]
sub eax, dword [rsp + 0x50]
sub eax, dword [rdx + 0xe8]
jmp 0x1401439c9
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x5c], eax
lea rdx, [rsp + 0x58]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov rdx, r15
call fcn.1401509c0
xor esi, esi
mov qword [rsp + 0x30], rsi
mov rax, qword [rdi + 8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9d, dword [rsp + 0x5c]
mov r8d, dword [rsp + 0x58]
mov edx, 0x102
mov rcx, r15
call qword [sym.imp.USER32.dll_TrackPopupMenu]
mov ebx, eax
mov rcx, r14
call qword [sym.imp.USER32.dll_DestroyMenu]
test ebx, ebx
je case.0x1401438db.33052
cmp ebx, 0x80bb
jne 0x140143a4d
xor r9d, r9d
mov edx, VarUI4FromDisp
mov r8d, ebx
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_PostMessageW]
jmp case.0x1401438db.33052
cmp ebx, 0x80bd
je case.0x1401438db.33052
mov edx, ebx
mov rcx, rdi
call fcn.140151020
jmp case.0x1401438db.33052
xor esi, esi
mov qword [rsp + 0x58], rsi
lea rdx, [rdi + 0x1b8]
lea rcx, [rsp + 0x58]
call fcn.140023640
nop
mov rcx, qword [rsp + 0x58]
cmp dword [rcx - 0x10], esi
je 0x140143a91
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, rdi
call fcn.14014d870
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov rbx, 0xffffffffffffffff
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg case.0x1401438db.33052
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038ca6.0]
jmp case.0x1401438db.33052
lea rcx, [rbp - 0x50]
call fcn.140112850
nop
mov r8d, 1
lea rdx, [rbp - 0x50]
mov rcx, rdi
call fcn.140146c90
nop
lea rcx, [rbp - 0x50]
call fcn.140112bf0
jmp case.0x1401438db.33052
call fcn.1400f1ae0
cmp qword [rax + 8], 0
je case.0x1401438db.33052
call fcn.1400f1ae0
mov rcx, qword [rax + 8]
mov rax, qword [rcx]
mov rax, qword [rax + 0x98]
call qword [case.0x140038ca6.0]
test eax, eax
je case.0x1401438db.33052
call qword [sym.imp.USER32.dll_GetFocus]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call fcn.140152b40
mov rcx, qword [rdi + 0x168]
mov rcx, qword [rcx + 8]
cmp rbx, rcx
je 0x140143b66
mov rax, qword [rdi + 0x160]
mov rcx, qword [rax + 8]
cmp rbx, rcx
jne case.0x1401438db.33052
call qword [sym.imp.USER32.dll_SetFocus]
jmp case.0x1401438db.33052
xor edx, edx
mov rcx, rdi
call fcn.140152240
jmp case.0x1401438db.33052
mov edx, 7
lea r8d, [rdx - 6]
mov rcx, rdi
call fcn.14014e290
jmp case.0x1401438db.33052
mov edx, 8
lea r8d, [rdx - 7]
mov rcx, rdi
call fcn.14014e290
jmp case.0x1401438db.33052
mov edx, ebx
mov rcx, rdi
call fcn.140150060
jmp case.0x1401438db.33052
mov rax, qword [rdi + 0x88]
mov rcx, qword [rax + 0x490]
mov r8, qword [rcx + 0x90]
test r8, r8
je case.0x1401438db.33052
xor edx, edx
mov eax, ebx
div dword [rcx + 0xa0]
mov rax, qword [r8 + rdx*8]
test rax, rax
je case.0x1401438db.33052
cmp dword [rax + 0x18], ebx
jne 0x140143bf9
cmp dword [rax], ebx
je 0x140143c07
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x140143bf0
jmp case.0x1401438db.33052
mov rcx, qword [rax + 8]
test rcx, rcx
je case.0x1401438db.33052
movups xmm0, xmmword [rcx + 0xe8]
movups xmmword [rsp + 0x48], xmm0
mov rdx, qword [rcx + 0x1d0]
cmp dword [rdx + 0x650], 0
je 0x140143c42
mov eax, dword [rdx + 0xf0]
sub eax, dword [rsp + 0x50]
sub eax, dword [rdx + 0xe8]
jmp 0x140143c46
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x5c], eax
lea rdx, [rsp + 0x58]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov rdx, qword [rsp + 0x58]
mov rcx, rdi
call fcn.14014fce0
jmp case.0x1401438db.33052
mov edx, ebx
mov rcx, rdi
call fcn.140150540
jmp case.0x1401438db.33052
mov edx, ebx
mov rcx, rdi
call fcn.140162210
jmp case.0x1401438db.33052
sub ebx, 0x812e
je 0x140143cfc
sub ebx, 1
je 0x140143ce0
sub ebx, 1
je 0x140143cc4
cmp ebx, 0x1d
jne 0x140143d09
call fcn.140166630
mov dword [rax + 0x624], 2
mov rcx, rdi
call fcn.140163b10
jmp case.0x1401438db.33052
call fcn.140166630
mov dword [rax + 0x624], 3
mov rcx, rdi
call fcn.140163b10
jmp case.0x1401438db.33052
call fcn.140166630
mov dword [rax + 0x624], 1
mov rcx, rdi
call fcn.140163b10
jmp case.0x1401438db.33052
call fcn.140166630
xor esi, esi
mov dword [rax + 0x624], esi
mov rcx, rdi
call fcn.140163b10
jmp case.0x1401438db.33052
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rax
xor esi, esi
mov qword [rsp + 0x68], rsi
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], rsi
mov dword [rbp - 0x68], esi
lea r14, vtable.CToolbarSettingDlg.0
mov qword [rsp + 0x60], r14
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x60], rdi
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rdi, rax
mov rax, qword [rbp - 0x78]
test rax, rax
jne 0x140143d8f
call fcn.1401f7180
mov qword [rbp - 0x78], rax
test rax, rax
jne 0x140143d8f
lea ecx, [rsi + 0xe]
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x140143e15
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1401f72b0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rsp + 0x78], eax
lea rbx, [0x140315cd8]
mov qword [rsp + 0x48], rbx
mov byte [rsp + 0x50], 0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [rsp + 0x50], 1
mov rax, qword [0x140315d00]
mov qword [rbp - 0x80], rax
lea rax, [rsp + 0x70]
mov qword [0x140315d00], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [rsp + 0x50], 0
mov qword [rsp + 0x20], rsi
lea r9, [0x140017d70]
mov r8, rdi
mov edx, 0xe7
mov rcx, qword [0x14030a4d0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
call fcn.140166630
mov rcx, rax
xor edx, edx
call fcn.14016d760
nop
mov qword [rsp + 0x60], r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je case.0x1401438db.33052
call fcn.1401f7250
jmp case.0x1401438db.33052
call fcn.140166630
xor esi, esi
mov ebx, esi
cmp dword [rax + 0x308], ebx
sete bl
call fcn.140166630
mov dword [rax + 0x308], ebx
call fcn.140166630
cmp dword [rax + 0x308], esi
je 0x140143e85
mov rax, qword [rdi + 0x178]
cmp dword [rax + 0x50], esi
je case.0x1401438db.33052
call fcn.140166630
mov rcx, qword [rdi + 0xa8]
mov edx, dword [rax + 0x308]
test rcx, rcx
je case.0x1401438db.33052
mov rax, qword [rcx + 0x138]
test rax, rax
je 0x140143eb2
mov esi, dword [rax + 0x84]
cmp esi, edx
je case.0x1401438db.33052
call fcn.14009a990
jmp case.0x1401438db.33052
call fcn.140166630
xor esi, esi
mov ebx, esi
cmp dword [rax + 0x620], ebx
sete bl
call fcn.140166630
mov dword [rax + 0x620], ebx
call fcn.140166630
mov edx, dword [rax + 0x620]
mov rcx, qword [rdi + 0xb0]
jmp 0x140143e97
lea rax, [rsp + 0x58]
mov qword [rsp + 0x48], rax
call fcn.140044d30
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_ASK_PERM_DELETE_CUR_ARCHIVE
call fcn.140048480
mov r14, rax
call fcn.140019590
mov rcx, rax
test rax, rax
je 0x140144731
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140038ca6.0]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov rdx, r14
lea rcx, [rsp + 0x58]
call fcn.140018bb0
test al, al
jne 0x140143f83
test r14, r14
jne 0x140143f5e
xor esi, esi
jmp 0x140143f72
mov rbx, 0xffffffffffffffff
inc rbx
cmp word [r14 + rbx*2], 0
jne 0x140143f65
mov esi, ebx
mov r8d, esi
mov rdx, r14
lea rcx, [rsp + 0x58]
call fcn.140018f50
nop
call fcn.14012bfe0
lea rcx, [0x1402670d8]
lea r9, [0x1402670e0]
cmp dword [rax + 0x88], 0
cmovne r9, rcx
mov dword [rsp + 0x20], 4
lea r8, [rsp + 0x58]
mov rdx, qword [rdi + 8]
mov rcx, rdi
call fcn.14015ccf0
cmp eax, 6
jne case.0x1401438db.33052
lea edx, [rax - 5]
mov rcx, rdi
call fcn.14013e930
jmp case.0x1401438db.33052
mov edx, 3
mov rcx, rdi
call fcn.140159b90
jmp case.0x1401438db.33052
xor esi, esi
cmp dword [rdi + 0x2b8], esi
sete sil
mov edx, esi
mov rcx, rdi
call fcn.140161770
jmp case.0x1401438db.33052
mov rcx, rdi
call fcn.140162480
jmp case.0x1401438db.33052
mov rcx, rdi
call fcn.140162950
jmp case.0x1401438db.33052
mov edx, 5
mov rcx, rdi
call fcn.14015ea30
jmp case.0x1401438db.33052
call fcn.140166630
xor esi, esi
mov ebx, esi
cmp dword [rax + 0x628], ebx
sete bl
call fcn.140166630
mov dword [rax + 0x628], ebx
call fcn.140166630
mov rcx, qword [rdi + 8]
mov dword [rsp + 0x30], 3
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
cmp dword [rax + 0x628], esi
je 0x14014407f
lea rdx, [rsi - 1]
call qword [sym.imp.USER32.dll_SetWindowPos]
jmp case.0x1401438db.33052
mov rdx, 0xfffffffffffffffe
call qword [sym.imp.USER32.dll_SetWindowPos]
jmp case.0x1401438db.33052
mov rcx, rdi
call fcn.140144b90
jmp case.0x1401438db.33052
mov edx, ebx
mov rcx, rdi
call fcn.140144ea0
jmp case.0x1401438db.33052
mov edx, ebx
mov rcx, rdi
call fcn.14014fdb0
jmp case.0x1401438db.33052
mov edx, ebx
mov rcx, rdi
call fcn.140145170
jmp case.0x1401438db.33052
call fcn.140166630
xor esi, esi
mov dword [rax + 0x63c], esi
call fcn.14012bfe0
mov rcx, rax
call fcn.14012c570
mov rcx, rdi
call fcn.1401455b0
lea edx, [rsi + 1]
mov rcx, qword [rdi + 8]
call fcn.1401b1890
jmp case.0x1401438db.33052
mov rcx, rdi
call fcn.1401453a0
jmp case.0x1401438db.33052
call fcn.140166630
mov rax, qword [rax + 0x648]
cmp dword [rax - 0x10], 0
je case.0x1401431c5.32915
call fcn.140166630
mov r8, qword [rax + 0x648]
jmp 0x1401433d4
lea rcx, str.c:_bandizip_test.ini
call fcn.1400248e0
test eax, eax
je case.0x1401438db.33052
xor esi, esi
mov dword [rsi], esi
jmp case.0x1401438db.33052
call fcn.140166630
mov rcx, rax
xor edx, edx
call fcn.14016d760
xor esi, esi
mov qword [rsp + 0x58], rsi
lea rcx, [rsp + 0x58]
call fcn.140022dc0
nop
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rsi
lea r9, [0x140267540]
mov r8, qword [rsp + 0x58]
lea rdx, [0x14026ad70]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
jmp 0x140143aa0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], rax
lea rdx, [0x140267540]
lea rcx, [rsp + 0x40]
call fcn.1400190e0
nop
mov rdx, rax
call fcn.1401452e0
jmp case.0x1401438db.33052
mov rax, qword [rdi + 0x170]
mov rbx, qword [rax]
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rbx
jne case.0x1401438db.33252
mov rcx, qword [rdi + 0x170]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x301
mov rcx, qword [rcx]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
jmp 0x1401446ea
mov rax, qword [rdi + 0x168]
mov rbx, qword [rax + 8]
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rbx
jne case.0x1401438db.33052
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1032
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je case.0x1401438db.33052
mov rcx, rdi
call fcn.14014e770
jmp case.0x1401438db.33052
mov rax, qword [rdi + 0x170]
mov rbx, qword [rax]
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rbx
jne case.0x1401431c5.32869
xor edx, edx
mov r8d, 0x7fffffff
mov rcx, qword [rdi + 0x170]
call fcn.1400660b0
mov eax, 1
jmp 0x1401446ea
mov rbx, qword [rdi + 0x168]
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, qword [rbx + 8]
jne case.0x1401438db.33052
mov edx, 1
mov rcx, rbx
call fcn.1401aad00
jmp case.0x1401438db.33052
mov rcx, rdi
call fcn.140156e00
jmp case.0x1401438db.33052
mov rcx, rdi
call fcn.14014ef20
jmp case.0x1401438db.33052
mov dl, 1
mov rcx, rdi
call fcn.14015e460
jmp case.0x1401438db.33052
xor edx, edx
mov rcx, rdi
call fcn.14015e460
jmp case.0x1401438db.33052
call fcn.140145a00
jmp case.0x1401438db.33052
lea rcx, [0x1402a7d28]
call fcn.1400248e0
test eax, eax
je case.0x1401438db.33052
mov rcx, rdi
call fcn.14015e880
jmp case.0x1401438db.33052
call fcn.140145be0
jmp case.0x1401438db.33052
call fcn.1400e2200
cmp dword [rax + 0x10], 0
je 0x14014439a
xor edx, edx
mov r8d, 0xb0
lea rcx, [rbp - 0x50]
call fcn.14022eb00
xor esi, esi
mov qword [rbp - 0x48], rsi
lea rax, [rbp - 0x40]
mov qword [rsp + 0x48], rax
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], rsi
mov dword [rbp - 0x18], esi
lea rax, vtable.IXSkinCallback.0
mov qword [rbp - 0x10], rax
lea rax, vtable.CLicenseGuideDlg.1.0
mov qword [rbp - 0x50], rax
lea rax, vtable.CLicenseGuideDlg.0
mov qword [rbp - 0x10], rax
lea rcx, [rbp]
call fcn.140080a40
nop
mov dword [rbp - 8], 5
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.1400f58a0
nop
lea rcx, [rbp - 0x50]
call fcn.1400e69a0
jmp case.0x1401438db.33052
xor esi, esi
mov qword [rsp + 0x58], rsi
lea rcx, [rsp + 0x58]
call fcn.140022dc0
nop
xor r9d, r9d
xor r8d, r8d
lea rdx, str._repair
mov rcx, qword [rsp + 0x58]
call fcn.140028b60
nop
jmp 0x140143aa0
call fcn.140145e30
jmp case.0x1401438db.33052
xor esi, esi
mov qword [rsp + 0x58], rsi
call fcn.140019590
mov rcx, rax
test rax, rax
je 0x14014473c
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140038ca6.0]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov rbx, qword [rdi + 0x2e0]
mov rax, qword [rbx + 0x30]
test rax, rax
je 0x140144470
cmp qword [rbx], rax
je 0x140144470
mov rdx, qword [rax + 8]
mov qword [rbx + 0x30], rdx
test rdx, rdx
je 0x140144470
add rdx, 0x10
lea rcx, [rsp + 0x58]
call fcn.140017b80
mov rdx, rax
lea rcx, [rbx + 0x38]
call fcn.140017b80
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.140019180
add rax, 0x18
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
mov rcx, qword [rdi + 0x160]
call fcn.1401add40
nop
jmp 0x140143aa0
xor esi, esi
mov qword [rsp + 0x58], rsi
call fcn.140019590
mov rcx, rax
test rax, rax
je 0x140144747
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140038ca6.0]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov rbx, qword [rdi + 0x2e0]
mov rax, qword [rbx + 0x30]
test rax, rax
je 0x140144512
cmp qword [rbx + 8], rax
je 0x140144512
mov rdx, qword [rax]
mov qword [rbx + 0x30], rdx
test rdx, rdx
je 0x140144512
add rdx, 0x10
lea rcx, [rsp + 0x58]
call fcn.140017b80
mov rdx, rax
lea rcx, [rbx + 0x38]
call fcn.140017b80
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.140019180
add rax, 0x18
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
mov rcx, qword [rdi + 0x160]
call fcn.1401add40
nop
jmp 0x140143aa0
call fcn.14012a380
jmp case.0x1401438db.33052
mov edx, InitCommonControls
mov rcx, rdi
call fcn.140146050
jmp case.0x1401438db.33052
mov edx, 0xfffffff0
mov rcx, rdi
call fcn.140146050
jmp case.0x1401438db.33052
call fcn.140158f20
mov rbx, rax
cmp dword [rax], 1
jne 0x140144561
call fcn.140166630
mov dword [rax + 0x690], 1
cmp dword [rbx], 2
jne 0x140144575
call fcn.140166630
mov dword [rax + 0x694], 1
cmp dword [rbx], 3
jne 0x140144589
call fcn.140166630
mov dword [rax + 0x698], 1
call fcn.140166630
mov rcx, rax
xor edx, edx
call fcn.14016d760
lea rax, [rsp + 0x58]
mov qword [rsp + 0x48], rax
call fcn.140019590
mov rcx, rax
test rax, rax
je 0x140144710
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140038ca6.0]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rsi, str.STATIC_NOTICE_MAIN
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.140018bb0
test al, al
jne 0x14014460b
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp word [rsi + rbx*2], 0
jne 0x1401445f0
mov r8d, ebx
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.140018f50
nop
xor r8d, r8d
lea rdx, [rsp + 0x58]
mov rcx, qword [rdi + 0x88]
call fcn.1400ccd10
mov rcx, rdi
call fcn.1401591b0
jmp case.0x1401438db.33052
call fcn.140158f20
mov rbx, rax
xor esi, esi
mov qword [rsp + 0x58], rsi
xor r8d, r8d
mov edx, dword [rax]
lea rcx, [rsp + 0x58]
call fcn.140158cc0
nop
mov rcx, qword [rsp + 0x58]
cmp dword [rcx - 0x10], esi
jne 0x14014465a
jmp 0x140143aa0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], rax
add rcx, 0xffffffffffffffe8
call fcn.140019180
add rax, 0x18
mov qword [rsp + 0x40], rax
lea rcx, [rbx + 8]
lea rdx, [rsp + 0x40]
call fcn.14002cf40
xor r9d, r9d
lea edx, [r9 + 8]
mov r8d, 0x7d0
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_SetTimer]
nop
jmp 0x140143aa0
mov edx, 0x320
mov r8d, 0x258
mov rcx, rdi
call fcn.140146270
jmp case.0x1401438db.33052
mov edx, 0x280
mov r8d, 0x1e0
mov rcx, rdi
call fcn.140146270
jmp case.0x1401438db.33052
mov edx, 0x21c
mov r8d, 0x195
mov rcx, rdi
call fcn.140146270
jmp case.0x1401438db.33052
mov rcx, rdi
call fcn.14014b5c0
xor eax, eax
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.1401f74b0
mov rbx, qword [rsp + 0x290]
add rsp, 0x250
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004005
call fcn.140019300
int3
mov ecx, 0x80004005
call fcn.140019300
int3
mov ecx, 0x80004005
call fcn.140019300
int3
mov ecx, 0x80004005
call fcn.140019300
int3
mov ecx, 0x80004005
call fcn.140019300
int3
mov ecx, 0x80004005
call fcn.140019300
int3