Function at 0x4c9020
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x2054
call fcn.00554650
mov eax, dword [0x5c04b4]
xor eax, esp
mov dword [esp + 0x2050], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push 0xff
mov dword [esp + 0x1c], eax
mov esi, ecx
lea eax, [esp + 0x14c5]
mov dword [esp + 0x18], esi
push 0
push eax
mov byte [esp + 0x14cc], 0
call sub.MSVCR120.dll_memset
add esp, 0xc
mov byte [esp + 0x1278], 0
lea eax, [esp + 0x1279]
push 0x3f
push 0
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov byte [esp + 0x1238], 0
lea eax, [esp + 0x1239]
push 0x3f
push 0
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
xor eax, eax
mov word [esp + 0x15c0], ax
push 0x206
push eax
lea eax, [esp + 0x15ca]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
xor eax, eax
mov word [esp + 0x12b8], ax
push 0x206
push eax
lea eax, [esp + 0x12c2]
push eax
call sub.MSVCR120.dll_memset
xor bl, bl
add esp, 0xc
xor bh, bh
cmp byte [esi], bl
jne 0x4c9106
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2050]
xor ecx, esp
call fcn.00553510
mov esp, ebp
pop ebp
ret 4
lea edi, [esi + 0x80]
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push dword [esp + 0x18]
mov ecx, esi
call fcn.004c8fa0
cmp eax, 0xffffffff
jne 0x4c9143
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2050]
xor ecx, esp
call fcn.00553510
mov esp, ebp
pop ebp
ret 4
mov edx, dword [esi + 0x9c]
imul eax, eax, 0x412
add edx, eax
mov dword [esp + 0x10], eax
mov ecx, edx
lea eax, [ecx + 2]
mov dword [esp + 0x1c], eax
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c9160
sub ecx, dword [esp + 0x1c]
lea eax, [esp + 0x15c0]
sar ecx, 1
cmp ecx, 0x104
jae 0x4c9192
push edx
push 0x104
push eax
call dword [sym.imp.MSVCR120.dll_wcscpy_s]
add esp, 0xc
jmp 0x4c91b1
push 0x103
push edx
push 0x104
push eax
call dword [sym.imp.MSVCR120.dll_wcsncpy_s]
add esp, 0x10
xor eax, eax
mov word [esp + 0x17c6], ax
mov ecx, dword [esp + 0x10]
mov edx, dword [esi + 0x9c]
add ecx, 0x208
add edx, ecx
mov ecx, edx
lea eax, [ecx + 2]
mov dword [esp + 0x10], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c91d0
sub ecx, dword [esp + 0x10]
lea eax, [esp + 0x12b8]
sar ecx, 1
cmp ecx, 0x104
jae 0x4c9202
push edx
push 0x104
push eax
call dword [sym.imp.MSVCR120.dll_wcscpy_s]
add esp, 0xc
jmp 0x4c9221
push 0x103
push edx
push 0x104
push eax
call dword [sym.imp.MSVCR120.dll_wcsncpy_s]
add esp, 0x10
xor eax, eax
mov word [esp + 0x14be], ax
mov edx, esi
lea ecx, [esp + 0x17c8]
call fcn.004c8c90
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x40
lea eax, [esp + 0x24]
push 0
push eax
call sub.MSVCR120.dll_memset
lea ecx, [esp + 0x15cc]
mov dword [esp + 0x2c], 0x20
add esp, 0xc
mov dword [esp + 0x24], 7
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c9261
sub ecx, edx
lea eax, [esp + 0x15c0]
sar ecx, 1
cmp ecx, 0x104
jae 0x4c929a
mov edi, dword [sym.imp.MSVCR120.dll_wcscpy_s]
push eax
lea eax, [esp + 0x184c]
push 0x104
push eax
call edi
add esp, 0xc
jmp 0x4c92c6
push 0x103
push eax
lea eax, [esp + 0x1850]
push 0x104
push eax
call dword [sym.imp.MSVCR120.dll_wcsncpy_s]
mov edi, dword [sym.imp.MSVCR120.dll_wcscpy_s]
add esp, 0x10
xor eax, eax
mov word [esp + 0x1a4e], ax
push 0x58b1ac
mov edx, 0x104
lea ecx, [esp + 0x184c]
call fcn.0052fae0
add esp, 4
lea edx, [esp + 0x1848]
push 0
push ecx
lea ecx, [esp + 0x15c8]
call fcn.004cfea0
add esp, 8
test eax, eax
jne 0x4c930f
mov dword [esp + 0x28], str.SupportRequestXML_GZ
lea eax, [esp + 0x1848]
mov bl, 1
jmp 0x4c931e
mov dword [esp + 0x28], str.SupportRequestXML
lea eax, [esp + 0x15c0]
mov dword [esp + 0x30], eax
xor eax, eax
mov dword [esp + 0x34], str.SupportRequest
cmp ax, word [esp + 0x12b8]
je 0x4c941a
lea ecx, [esp + 0x12b8]
mov dword [esp + 0x40], 0x20
mov dword [esp + 0x44], 7
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c9354
sub ecx, edx
lea eax, [esp + 0x12b8]
sar ecx, 1
cmp ecx, 0x104
jae 0x4c9387
push eax
lea eax, [esp + 0x1a54]
push 0x104
push eax
call edi
add esp, 0xc
jmp 0x4c93ad
push 0x103
push eax
lea eax, [esp + 0x1a58]
push 0x104
push eax
call dword [sym.imp.MSVCR120.dll_wcsncpy_s]
add esp, 0x10
xor eax, eax
mov word [esp + 0x1c56], ax
push 0x58b1ac
mov edx, 0x104
lea ecx, [esp + 0x1a54]
call fcn.0052fae0
add esp, 4
lea edx, [esp + 0x1a50]
push 1
push ecx
lea ecx, [esp + 0x12c0]
call fcn.004cfea0
add esp, 8
test eax, eax
jne 0x4c93f7
or bl, 2
mov dword [esp + 0x48], str.SupportRequestAttachment_GZ
lea eax, [esp + 0x1a50]
jmp 0x4c940e
cmp eax, 0xffffffff
jne 0x4c93ff
or bl, 2
mov dword [esp + 0x48], str.SupportRequestAttachment
lea eax, [esp + 0x12b8]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], str.SupportRequestAttachment
mov eax, dword [0x5c6138]
add eax, 0x2204
push 0x11d7
push eax
lea eax, [esp + 0x68]
push eax
call sub.MSVCR120.dll_memcpy
mov edi, dword [esp + 0x10d3]
add esp, 0xc
test edi, edi
je 0x4c94be
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [esp + 0x14c0]
push 0
push 0
push 0x100
push eax
push 0xffffffffffffffff
push dword [esp + 0x10df]
push 0
push 0
call esi
push 0
push 0
push 0x40
lea eax, [esp + 0x1284]
mov byte [esp + 0x15cb], 0
push eax
push 0xffffffffffffffff
push dword [esp + 0x10eb]
push 0
push 0
call esi
push 0
push 0
push 0x40
lea eax, [esp + 0x1244]
mov byte [esp + 0x12c3], 0
push eax
push 0xffffffffffffffff
push dword [esp + 0x10ef]
push 0
push 0
call esi
mov esi, dword [esp + 0x14]
mov byte [esp + 0x1277], 0
push 0
push ecx
push 0
mov eax, edi
lea ecx, [esp + 0x1244]
neg eax
sbb eax, eax
and eax, ecx
lea ecx, [esp + 0x1284]
push eax
mov eax, edi
neg eax
sbb eax, eax
and eax, ecx
push eax
mov eax, edi
neg eax
sbb eax, eax
and eax, dword [esp + 0x10e7]
neg edi
push eax
sbb edi, edi
lea eax, [esp + 0x14d8]
and edi, eax
xor ecx, ecx
push edi
push 0
lea eax, [esp + 0x34]
push eax
push 0x400
lea eax, [esp + 0x1c80]
push eax
xor eax, eax
lea edx, [ecx + 0x50]
cmp cx, word [esp + 0x12e4]
lea ecx, [esp + 0x17f4]
setne al
inc eax
push eax
lea eax, [esp + 0x50]
push eax
push str._supportrequest_
call fcn.004d0bd0
add esp, 0x38
test eax, eax
jne 0x4c9551
push dword [esp + 0x18]
mov ecx, esi
mov bh, 1
call fcn.004c95a0
test bl, bl
je 0x4c9579
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
test bl, 1
je 0x4c956a
lea eax, [esp + 0x1848]
push eax
call esi
test bl, 2
je 0x4c9579
lea eax, [esp + 0x1a50]
push eax
call esi
mov ecx, dword [esp + 0x205c]
mov al, bh
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00553510
mov esp, ebp
pop ebp
ret 4