Function at 0x1401405d0
Capabilities:
Delete file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa30]
sub rsp, 0xb40
mov rax, qword [0x14024fa28]
xor rax, rsp
mov qword [rbp + 0xa20], rax
mov rbx, rdx
mov r14, rcx
xor r13d, r13d
test rdx, rdx
je 0x140140a1f
cmp byte [rcx], r13b
je 0x140140a1f
sub rcx, 0xffffffffffffff80
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rsi, 0xffffffffffffffff
mov rax, rsi
nop
inc rax
cmp byte [r14 + rax], r13b
jne 0x140140630
lfence
mov r8, r14
mov edx, 0x80
lea rcx, [rbp + 0x80]
cmp rax, rdx
jae 0x140140658
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
jmp 0x14014066b
mov r9d, 0x7f
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov byte [rbp + 0xff], r13b
lea rcx, [r14 + 0x80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x410]
call sub.VCRUNTIME140.dll_memset
xor r12b, r12b
mov rax, rsi
inc rax
cmp word [rbx + rax*2], r13w
jne 0x140140692
mov edi, 0x104
lea r15d, [rdi - 1]
lfence
mov r8, rbx
mov edx, edi
lea rcx, [rbp + 0x410]
cmp rax, rdi
jae 0x1401406c1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
jmp 0x1401406d2
mov r9, r15
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov word [rbp + 0x616], r13w
mov qword [rbp - 0x48], 7
mov qword [rbp - 0x38], r13
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x50], 0x40
mov rax, rsi
inc rax
cmp word [rbx + rax*2], r13w
jne 0x1401406f1
lfence
mov r8, rbx
mov rdx, rdi
lea rcx, [rbp + 0x100]
cmp rax, rdi
jae 0x140140718
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
jmp 0x140140729
mov r9, r15
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov word [rbp + 0x306], r13w
lea rax, [rbp + 0x100]
mov rcx, rsi
inc rcx
cmp word [rax + rcx*2], r13w
jne 0x140140733
lea rax, [rcx + 1]
cmp rax, rdi
jae 0x140140790
lea rax, [rcx + 4]
lea r8, [0x140203c18]
cmp rax, rdi
ja 0x140140768
mov rdx, rdi
lea rcx, [rbp + 0x100]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
jmp 0x140140790
lfence
sub r15, rcx
sub rdi, rcx
lea rax, [rbp + 0x100]
lea rcx, [rax + rcx*2]
mov r9, r15
mov rdx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov word [rbp + 0x306], r13w
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x410]
call fcn.14014d690
test eax, eax
jne 0x1401407be
lea rax, str.SupportRequestXML_GZ
mov qword [rbp - 0x40], rax
lea rax, [rbp + 0x100]
mov r12b, 1
jmp 0x1401407d0
lea rax, str.SupportRequestXML
mov qword [rbp - 0x40], rax
lea rax, [rbp + 0x410]
mov qword [rbp - 0x30], rax
lea rax, str.SupportRequest
mov qword [rbp - 0x28], rax
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x310]
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
movaps xmmword [rbp + 0x40], xmm0
movaps xmmword [rbp + 0x50], xmm0
movaps xmmword [rbp + 0x60], xmm0
movaps xmmword [rbp + 0x70], xmm0
xorps xmm1, xmm1
movaps xmmword [rbp], xmm1
movaps xmmword [rbp + 0x10], xmm1
movaps xmmword [rbp + 0x20], xmm1
movaps xmmword [rbp + 0x30], xmm1
mov ebx, r13d
mov rax, qword [0x1402574c0]
mov rcx, qword [rax + 0x488]
add rcx, 0x10
lea rdx, [rbp - 0x80]
call fcn.1400f2bf0
nop
mov r8, qword [rbp - 0x80]
mov edi, dword [r8 + 0x180]
test edi, edi
je 0x14014091a
add r8, 0x188
cmp qword [r8 + 0x18], 8
jb 0x14014085c
mov r8, qword [r8]
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x100
lea rax, [rbp + 0x310]
mov qword [rsp + 0x20], rax
mov r9d, esi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov byte [rbp + 0x40f], 0
mov r8, qword [rbp - 0x80]
add r8, 0x1b0
cmp qword [r8 + 0x18], 8
jb 0x1401408a3
mov r8, qword [r8]
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x40
lea rax, [rbp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, esi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov byte [rbp + 0x7f], 0
mov r8, qword [rbp - 0x80]
add r8, 0x1d0
cmp qword [r8 + 0x18], 8
jb 0x1401408e4
mov r8, qword [r8]
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x40
lea rax, [rbp]
mov qword [rsp + 0x20], rax
mov r9d, esi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov byte [rbp + 0x3f], 0
mov rax, qword [rbp - 0x80]
mov ebx, dword [rax + 0x1a8]
xor r15b, r15b
lea rax, [0x140140a50]
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x60], r14
lea rdx, [rbp]
test edi, edi
cmove rdx, r13
lea rcx, [rbp + 0x40]
cmove rcx, r13
lea rax, [rbp + 0x310]
cmove rax, r13
mov byte [rsp + 0x80], r15b
lea r8, [rbp - 0x68]
mov qword [rsp + 0x78], r8
mov qword [rsp + 0x70], r13
mov byte [rsp + 0x68], 1
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x58], rcx
mov dword [rsp + 0x50], ebx
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], r13d
lea rax, [rbp - 0x10]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], 0x400
lea rax, [rbp + 0x620]
mov qword [rsp + 0x28], rax
mov ebx, 1
mov dword [rsp + 0x20], ebx
lea r9, [rbp - 0x50]
lea r8, str._supportrequest_
mov edx, 0x1bb
lea rcx, [rbp + 0x80]
call fcn.14014dfd0
movzx edi, r15b
test eax, eax
cmove edi, ebx
test r12b, r12b
je 0x1401409db
lea rcx, [rbp + 0x100]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
mov rbx, qword [rbp - 0x78]
test rbx, rbx
je 0x140140a19
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140140a19
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x14003c8e9.0]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x140140a19
mov rdx, qword [rbx]
mov rcx, rbx
mov rax, qword [rdx + 8]
call qword [case.0x14003c8e9.0]
movzx eax, dil
jmp 0x140140a21
xor al, al
mov rcx, qword [rbp + 0xa20]
xor rcx, rsp
call fcn.1401c5190
mov rbx, qword [rsp + 0xb90]
add rsp, 0xb40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret