Function at 0x140136eb0
Capabilities:
Link many functions at runtime

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x140300040]
xor rax, rsp
mov qword [rbp + 0x78], rax
xor r14d, r14d
lea rbx, [0x140315420]
cmp rbx, 0xffffffffffffffff
je 0x140136f17
mov qword [0x140315378], rbx
cmp qword [0x140315420], r14
je 0x140136f17
mov cl, 1
mov rax, qword [rbx + 0x40]
call qword [case.0x140038ca6.0]
lea rbx, [rbx + 0x48]
cmp qword [rbx], r14
jne 0x140136f02
mov rbx, qword [0x140306aa0]
mov rcx, qword [0x140306aa8]
cmp rbx, rcx
jae 0x140136f54
nop word [rax + rax]
mov rax, qword [rbx]
test rax, rax
je 0x140136f4b
mov cl, 1
mov rax, qword [rax + 0x38]
call qword [case.0x140038ca6.0]
mov rcx, qword [0x140306aa8]
add rbx, 8
cmp rbx, rcx
jb 0x140136f30
call qword [sym.imp.COMCTL32.dll_InitCommonControls]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
js 0x140137023
xor ecx, ecx
call qword [sym.imp.ole32.dll_OleInitialize]
test eax, eax
js 0x140137023
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
mov qword [rbp + 0x68], r14
lea rcx, [rsp + 0x50]
call fcn.140022cf0
nop
lea r8, str.ark.x64.dll
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.1400179b0
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov rdi, 0xffffffffffffffff
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140136fd4
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038ca6.0]
mov rcx, qword [rbp + 0x68]
call fcn.1400248e0
mov ebx, eax
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
mov ecx, edi
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x140137003
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038ca6.0]
test ebx, ebx
jne 0x140137052
mov r9d, 0x2010
lea r8, [0x1402670e0]
lea rdx, str.ERROR._ark.x64.dll_is_not_exist.__n_nBandizip.exe_cannot_run_without_this_file.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
mov rcx, qword [rbp + 0x78]
xor rcx, rsp
call fcn.1401f74b0
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400e2200
mov rcx, rax
call fcn.1400e2340
call fcn.14012bfe0
mov rcx, rax
call fcn.14012c7c0
call fcn.14012bfe0
cmp dword [rax + 0x118], 2
jne 0x140137083
call fcn.1400e2200
mov dword [rax + 0xc], r14d
call fcn.1400386e0
mov rsi, rax
mov rcx, rax
call fcn.140038930
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x1401370bf
mov rcx, 0xfffffffffffffffc
call qword [case.0x140038ca6.0]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
test ebx, ebx
jne 0x1401370f6
mov rcx, rsi
call fcn.140038a60
jmp 0x1401370f6
mov rcx, rsi
call fcn.140038930
mov rax, qword [rsi + 0x18]
test rax, rax
je 0x1401370f0
mov ecx, 2
call qword [case.0x140038ca6.0]
test eax, eax
jns 0x1401370f6
mov ecx, 1
mov rax, qword [rsi + 0x18]
call qword [case.0x140038ca6.0]
jmp 0x1401370f6
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
call fcn.1400386e0
mov rbx, rax
mov rcx, rax
call fcn.140038930
call fcn.140038800
mov dword [rbx], eax
lea rcx, [rbp - 0x50]
call fcn.1400955a0
nop
cmp dword [rbp - 0x4c], 0
je 0x14013712a
call fcn.14008d780
mov rcx, rax
call fcn.1400952b0
call fcn.14008d780
mov rbx, rax
movzx ecx, byte [rbp - 0x50]
mov byte [rax + 8], cl
mov ecx, dword [rbp - 0x4c]
mov dword [rax + 0xc], ecx
mov ecx, dword [rbp - 0x48]
mov dword [rax + 0x10], ecx
movzx ecx, byte [rbp - 0x44]
mov byte [rax + 0x14], cl
mov rcx, qword [rbp - 0x40]
mov qword [rax + 0x18], rcx
mov rcx, qword [rbp - 0x38]
mov qword [rax + 0x20], rcx
lea rcx, [rax + 0x28]
lea rdx, [rbp - 0x30]
call fcn.140017b80
lea rcx, [rbx + 0x30]
lea rdx, [rbp - 0x28]
call fcn.140017b80
lea rcx, [rbx + 0x38]
lea rdx, [rbp - 0x20]
call fcn.140017b80
lea rcx, [rbx + 0x40]
lea rdx, [rbp - 0x18]
call fcn.140017b80
lea rcx, [rbx + 0x48]
lea rdx, [rbp - 0x10]
call fcn.140017b80
lea rcx, [rbx + 0x50]
lea rdx, [rbp - 8]
call fcn.140017b80
lea rcx, [rbx + 0x58]
lea rdx, [rbp]
call fcn.140017b80
lea rcx, [rbx + 0x60]
lea rdx, [rbp + 8]
call fcn.140017b80
lea rcx, [rbx + 0x68]
lea rdx, [rbp + 0x10]
call fcn.140017b80
lea rcx, [rbx + 0x70]
lea rdx, [rbp + 0x18]
call fcn.140017b80
lea rcx, [rbx + 0x78]
lea rdx, [rbp + 0x20]
call fcn.140017b80
call fcn.14008d780
cmp qword [rax + 0x18], 0
jne 0x140137207
call fcn.14008d780
lea rcx, [0x140095580]
mov qword [rax + 0x18], rcx
call fcn.14008d780
cmp qword [rax + 0x20], 0
jne 0x140137223
call fcn.14008d780
lea rcx, [0x140095590]
mov qword [rax + 0x20], rcx
call fcn.14008d780
mov byte [rax + 8], 1
call fcn.1400b97c0
call fcn.14007f0c0
lea rcx, str._WM_AD_UPDATED
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x1403152f8], eax
lea rcx, str._WM_LICENSE_REGISTRATION_SUCCESS
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x14030c278], eax
cmp dword [0x14030c26c], 0
jne 0x14013728b
lea rcx, str._WM_BTEST_MAINWND
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x14030c26c], eax
lea rcx, str._WM_BTEST_PASSDLG
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x14030c268], eax
call fcn.14002feb0
mov rbx, rax
cmp dword [rax + 0x48], 0
jne 0x14013735c
lea rcx, [0x140296368]
call fcn.140027a70
mov qword [rbx], rax
test rax, rax
je 0x1401372d9
lea rdx, [0x140296380]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x18], rax
lea rdx, str.IsThemeActive
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x20], rax
lea rcx, str.user32.dll
call fcn.140027a70
mov qword [rbx + 8], rax
test rax, rax
je 0x140137317
lea rdx, [0x14026b178]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x28], rax
lea rdx, str.AdjustWindowRectExForDpi
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x40], rax
lea rcx, str.dwmapi.dll
call fcn.140027a70
mov qword [rbx + 0x10], rax
test rax, rax
je 0x140137355
lea rdx, str.DwmGetWindowAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x30], rax
lea rdx, str.DwmGetColorizationColor
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x38], rax
mov dword [rbx + 0x48], 1
call fcn.140166630
mov rcx, rax
call fcn.1401672f0
call fcn.140166630
mov rcx, rax
call fcn.140167fc0
xor ecx, ecx
call fcn.14020d7f0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea ecx, [rbx + rax]
call fcn.14020d7d8
call fcn.140166630
cmp dword [rax + 0xb8], 0
je 0x1401374ca
call fcn.1400e2200
cmp dword [rax + 0x10], 0
jne 0x1401374ca
call fcn.14012bfe0
cmp byte [rax + 0x11], 0
je 0x1401374ca
call fcn.14012bfe0
cmp byte [rax + 0x18], 0
jne 0x1401374ca
call fcn.1400e2200
cmp byte [rax + 0x14], 0
jne 0x1401374ca
mov qword [rbp + 0x70], r14
call fcn.140019590
mov rcx, rax
test rax, rax
je 0x14013775a
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140038ca6.0]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x70], rbx
call fcn.140219688
cmp dword [rax], 2
jle 0x140137441
call fcn.140219690
mov rcx, qword [rax]
mov rdx, qword [rcx + 8]
test rdx, rdx
je 0x140137431
mov rax, rdi
inc rax
cmp word [rdx + rax*2], 0
jne 0x140137424
mov r14d, eax
mov r8d, r14d
lea rcx, [rbp + 0x70]
call fcn.140018f50
mov rbx, qword [rbp + 0x70]
lea rdx, str._regmandatoryadmin
mov rcx, rdi
nop dword [rax + rax]
movzx eax, word [rbx + rcx*2 + 2]
cmp ax, word [rdx + rcx*2 + 2]
jne 0x140137474
add rcx, 2
cmp rcx, 0x13
je 0x140137750
movzx eax, word [rbx + rcx*2]
cmp ax, word [rdx + rcx*2]
je 0x140137450
lea rdx, str._setdefaultprogram
mov rax, rdi
nop
movzx ecx, word [rbx + rax*2 + 2]
cmp cx, word [rdx + rax*2 + 2]
jne 0x1401374a4
add rax, 2
cmp rax, 0x13
je 0x140137755
movzx ecx, word [rbx + rax*2]
cmp cx, word [rdx + rax*2]
je 0x140137480
call fcn.140137c00
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1401374ca
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140038ca6.0]
call fcn.140136470
call fcn.140044d30
mov r15d, dword [rax + 0x1c8]
call fcn.14012bfe0
lea rcx, [0x1402670d8]
lea rbx, [0x1402670e0]
cmp dword [rax + 0x88], 0
cmovne rbx, rcx
mov r14, qword [0x14030a4c8]
call fcn.1400617f0
mov rsi, rax
cmp qword [rax], 0
jne 0x140137535
mov qword [rax], r14
lea rcx, [rax + 0x10]
inc rdi
cmp word [rbx + rdi*2], 0
jne 0x140137515
mov r8d, edi
mov rdx, rbx
call fcn.140018f50
mov dword [rsi + 0x18], r15d
mov dword [rsi + 0x1c], ILIsEqual
lea rax, [rsp + 0x60]
mov qword [rbp + 0x70], rax
lea rax, [rsp + 0x68]
mov qword [rbp + 0x68], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x30], rax
lea rax, [rsp + 0x78]
mov qword [rbp + 0x38], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x40], rax
lea rax, [rbp - 0x78]
mov qword [rbp + 0x48], rax
lea rax, [rbp - 0x70]
mov qword [rbp + 0x50], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x58], rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x60], rax
call fcn.140044d30
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_MESSAGEBOX_DONOTSHOWTHISMSGAGAIN
call fcn.140048480
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1400190e0
mov qword [rsp + 0x50], rax
call fcn.140044d30
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_MESSAGEBOX_CONTINUE
call fcn.140048480
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.1400190e0
mov r13, rax
call fcn.140044d30
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_MESSAGEBOX_NO
call fcn.140048480
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400190e0
mov r12, rax
call fcn.140044d30
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_MESSAGEBOX_YES
call fcn.140048480
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.1400190e0
mov r15, rax
call fcn.140044d30
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_MESSAGEBOX_IGNORE
call fcn.140048480
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400190e0
mov r14, rax
call fcn.140044d30
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_MESSAGEBOX_RETRY
call fcn.140048480
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.1400190e0
mov rsi, rax
call fcn.140044d30
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_MESSAGEBOX_ABORT
call fcn.140048480
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.1400190e0
mov rdi, rax
call fcn.140044d30
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_MESSAGEBOX_CANCEL
call fcn.140048480
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.1400190e0
mov rbx, rax
call fcn.140044d30
mov rcx, rax
lea r8, str.TEXT
lea rdx, str.TEXT_MESSAGEBOX_OK
call fcn.140048480
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.1400190e0
nop
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r14
mov r9, rsi
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.1400618d0
lea rdx, [0x140295306]
xor ecx, ecx
call fcn.140219608
nop
lea rcx, [rbp - 0x50]
call fcn.140094f50
mov eax, 1
jmp 0x140137025
jmp 0x1401374aa
jmp 0x1401374aa
mov ecx, 0x80004005
call fcn.140019300
int3