Function at 0x14000a3c0
Capabilities:
Delete file
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3d0]
sub rsp, 0x4d0
mov rax, qword [0x140043158]
xor rax, rsp
mov qword [rbp + 0x3c0], rax
mov rdi, rcx
call fcn.140002200
lea rdx, str.launcher.exe
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov rcx, rax
call fcn.14000af50
cmp eax, 1
je 0x14000a43c
xor r8d, r8d
xor edx, edx
lea rcx, str.This_is_already_running._Close_and_then_try_again
call sub.mfc140u.dll_AfxInitNetworkAddressControl
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r9d, 0x50000000
mov r8d, 0x3fc
mov rdx, rdi
lea rcx, [rdi + 0xa60]
call fcn.14000d0c0
lea rdx, str.https:__wownewworld.com_jjolama_launcher_notice.html
lea rcx, [rdi + 0xa60]
call fcn.14000d440
lea rcx, [rbp - 0x40]
call fcn.140001a00
nop
lea rcx, [rbp - 0x40]
call fcn.140001be0
xor r15d, r15d
mov dword [rsp + 0x40], r15d
lea r8, [rsp + 0x40]
lea rdx, str.._local_local_and_language.ini
lea rcx, [rbp - 0x40]
call fcn.140001a90
test al, al
je 0x14000a4b7
mov r8d, dword [rsp + 0x40]
lea rdx, str._.8x
lea rcx, [0x140044d68]
call qword [sym.imp.mfc140u.dll_CMFCZoomKernel::Filter]
mov r9, qword [rdi + 0x148]
mov edx, 0x80
lea r8d, [rdx - 0x7f]
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, qword [rdi + 0x148]
xor r8d, r8d
mov edx, 0x80
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [0x140044800], rdi
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 1]
lea rcx, [rsp + 0x78]
call sub.mfc140u.dll_CHtmlView::CHtmlView
nop
mov r14d, r15d
lea rdx, str.vi_VN.UTF_8
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
lea rdx, str.vi_VN.UTF_8
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
mov r9d, 0x80000002
mov r8d, 1
lea rdx, str.https:__wownewworld.com_jjolama_launcher_patch_ServerList.txt
lea rcx, [rsp + 0x78]
call sub.mfc140u.dll_Ordinal_11677
mov rsi, rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x78]
mov rbx, rax
movsxd rcx, eax
call sub.mfc140u.dll_operator_1
mov rdi, rax
mov r9, qword [rsi]
mov r8d, ebx
mov rdx, rax
mov rcx, rsi
call qword [r9 + 0x80]
mov r8, qword [rsi]
lea rdx, [rsp + 0x48]
mov rcx, rsi
call qword [r8 + 0x30]
nop
mov r8d, 0x5001
mov rdx, qword [rax]
lea rcx, [rsp + 0x50]
call sub.mfc140u.dll_CDynLinkLibrary::CDynLinkLibrary
nop
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov r8d, ebx
mov rdx, rdi
lea rcx, [rsp + 0x50]
call sub.mfc140u.dll_CMFCToolBarsCustomizeDialog::ShowToolBar
lea rcx, [rsp + 0x50]
call sub.mfc140u.dll_CWinAppEx::CleanState
lea rdx, [0x14002a700]
lea rcx, [rbp - 0x60]
call fcn.14000b8a0
nop
lea rcx, str.ServerList.txt
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_DeleteFileW]
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rdx, qword [rbp - 0x60]
mov r8, qword [rbp - 0x50]
lea rcx, [0x140043020]
call fcn.14000adb0
mov rcx, rdi
call sub.mfc140u.dll_operator
mov rax, qword [rsi]
mov edx, 1
mov rcx, rsi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
mov r9d, 0x80000002
mov r8d, 1
lea rdx, str.https:__wownewworld.com_jjolama_launcher_patch_VersionList.txt
lea rcx, [rsp + 0x78]
call sub.mfc140u.dll_Ordinal_11677
mov r13, rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x78]
mov rbx, rax
movsxd rcx, eax
call sub.mfc140u.dll_operator_1
mov r12, rax
mov r9, qword [r13]
mov r8d, ebx
mov rdx, rax
mov rcx, r13
call qword [r9 + 0x80]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [r12 + rbx], 0
jne 0x14000a683
mov rsi, qword [reloc.OLEAUT32.dll_SafeArrayDestroy]
cmp rbx, rsi
ja 0x14000a6ca
lea rdi, [section..data]
cmp rsi, 0x10
cmovae rdi, qword [section..data]
mov qword [0x140043010], rbx
mov r8, rbx
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x14000a7b1
movabs rdi, 0x7fffffffffffffff
cmp rbx, rdi
ja 0x14000a95e
mov rcx, rbx
or rcx, 0xf
cmp rcx, rdi
jbe 0x14000a6fa
movabs rcx, 0x8000000000000000
call fcn.140002350
jmp 0x14000a748
mov rdx, rsi
shr rdx, 1
mov rax, rdi
sub rax, rdx
cmp rsi, rax
jbe 0x14000a71c
movabs rcx, 0x8000000000000000
call fcn.140002350
jmp 0x14000a748
lea rax, [rdx + rsi]
mov rdi, rcx
cmp rcx, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14000a73e
call fcn.140002350
jmp 0x14000a748
test rcx, rcx
je 0x14000a74b
call sub.mfc140u.dll_CMFCRibbonInfo::XElementButtonLinkCtrl::XElementButtonLinkCtrl
mov r15, rax
mov qword [0x140043010], rbx
mov qword [reloc.OLEAUT32.dll_SafeArrayDestroy], rdi
mov r8, rbx
mov rdx, r12
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [r15 + rbx], 0
cmp rsi, 0x10
jb 0x14000a7a7
lea rdx, [rsi + 1]
mov rcx, qword [section..data]
cmp rdx, 0x1000
jb 0x14000a7a2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000a8ed
mov rcx, r8
call fcn.1400203b0
mov qword [section..data], r15
xor r15d, r15d
mov rcx, r12
call sub.mfc140u.dll_operator
mov rax, qword [r13]
mov edx, 1
mov rcx, r13
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edx, r15d
mov r10, qword [0x140043030]
test r10, r10
je 0x14000a82b
mov r9, r15
lea r8, [0x140044b30]
mov r11, qword [reloc.OLEAUT32.dll_VariantInit]
mov rbx, qword [0x140043020]
lea rdi, [0x140043020]
nop word [rax + rax]
mov rax, rdi
cmp r11, 8
cmovae rax, rbx
cmp word [rax + r9], 0x22
jne 0x14000a81d
mov dword [r8], edx
inc r14d
add r8, 4
inc edx
add r9, 2
movsxd rcx, edx
cmp rcx, r10
jb 0x14000a800
mov eax, r14d
cdq
and edx, 7
add eax, edx
sar eax, 3
mov ecx, r15d
test eax, eax
jle 0x14000a84c
nop
inc ecx
cmp ecx, eax
jl 0x14000a840
mov dword [0x1400447f0], ecx
mov r9d, r15d
mov ecx, r15d
mov r10, qword [0x140043010]
test r10, r10
je 0x14000a8a8
mov r8, r15
lea rdx, [0x140044810]
mov r11, qword [reloc.OLEAUT32.dll_SafeArrayDestroy]
mov rbx, qword [section..data]
lea rdi, [section..data]
nop dword [rax]
mov rax, rdi
cmp r11, 0x10
cmovae rax, rbx
cmp byte [r8 + rax], 0x22
jne 0x14000a89b
mov dword [rdx], ecx
inc r9d
add rdx, 4
inc ecx
inc r8
movsxd rax, ecx
cmp rax, r10
jb 0x14000a880
mov dword [0x140044808], r9d
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14000a8f9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a8f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a8f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400203b0
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r15w
lea rcx, [rsp + 0x50]
call sub.mfc140u.dll_CDockingManager::CDockingManager
nop
lea rcx, [rsp + 0x78]
call sub.mfc140u.dll_CFtpConnection::CFtpConnection
nop
lea rcx, [rbp - 0x40]
call fcn.140001a20
mov eax, 1
mov rcx, qword [rbp + 0x3c0]
xor rcx, rsp
call fcn.140020390
lea r11, [rsp + 0x4d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140007fd0
nop
int3