Function at 0x14005fbb0
Capabilities:
Delete file

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [0x1400fe4a8]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov r14, rdx
lea r8, [rdx + 0x10]
lea rdx, [rbp - 0x69]
call fcn.140058da0
xor esi, esi
mov rdi, qword [rax]
mov qword [rax], rsi
mov rbx, qword [rbp - 0x69]
test rbx, rbx
je 0x14005fc5c
cmp byte [rbx + 0x28], sil
je 0x14005fc00
mov rcx, rbx
call fcn.14005f890
mov rcx, qword [rbx]
lea rax, [rbp - 0x21]
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
xor edx, edx
mov r8d, r9d
movups xmmword [rbp - 0x21], xmm0
movups xmmword [rbp - 0x11], xmm0
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
lea rcx, [rbx + 0x30]
call fcn.140058b10
lea rcx, [rbx + 8]
call fcn.140029580
mov rcx, qword [rbx]
cmp rcx, 0xffffffffffffffff
je 0x14005fc4f
call fcn.14003d170
mov qword [rbx], 0xffffffffffffffff
mov edx, 0x50
mov rcx, rbx
call fcn.1400ceafc
mov qword [rsp + 0x110], r12
mov qword [rsp + 0xc8], r13
mov qword [rsp + 0xc0], r15
test rdi, rdi
je 0x14005feb7
lea r9, [rbp - 0x69]
xor r8d, r8d
mov rdx, r14
mov rcx, rdi
call fcn.14005a9d0
test eax, eax
jne 0x14005feb7
mov r12, qword [rbp - 0x69]
lea rcx, [rbp - 0x41]
lea rdx, [r12 + 0x18]
call fcn.140029490
mov r15, qword [rbp - 0x31]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r15
cmp rax, 4
jb 0x14005ff63
cmp qword [rbp - 0x29], 8
lea rax, [rbp - 0x41]
lea r13, [r15 + 4]
mov qword [rbp - 0x61], rsi
cmovae rax, qword [rbp - 0x41]
mov ebx, 7
mov qword [rbp - 0x51], rsi
mov qword [rbp - 0x49], rsi
lea rsi, [rbp - 0x61]
mov qword [rbp - 0x69], rax
cmp r13, rbx
jbe 0x14005fd8b
mov rbx, r13
or rbx, 7
cmp rbx, rcx
jbe 0x14005fd13
mov rbx, rcx
mov rcx, 0xfffffffffffffffe
jmp 0x14005fd42
mov ecx, 0xa
movabs rdx, 0x7fffffffffffffff
cmp rbx, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, rdx
ja 0x14005ff5d
add rcx, rcx
cmp rcx, 0x1000
jb 0x14005fd72
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005ff5d
mov rcx, rax
call fcn.1400ceac0
test rax, rax
je 0x14005fe8f
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
mov rax, qword [rbp - 0x69]
jmp 0x14005fd87
test rcx, rcx
je 0x14005fd85
call fcn.1400ceac0
mov rsi, rax
mov rax, qword [rbp - 0x69]
jmp 0x14005fd87
xor esi, esi
mov qword [rbp - 0x61], rsi
mov qword [rbp - 0x49], rbx
mov rdx, rax
lea rbx, [r15 + r15]
mov qword [rbp - 0x51], r13
mov r8, rbx
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movabs rax, 0x700069007a002e
lea rdx, [rbp - 0x61]
mov qword [rbx + rsi], rax
lea rcx, [rbp - 1]
xor r15d, r15d
mov word [rsi + r13*2], r15w
call fcn.1400294b0
lea rdx, [rbp - 1]
lea rcx, [rbp - 0x41]
call fcn.1400348a0
cmp qword [rbp - 0x29], 8
lea rcx, [rbp - 0x41]
movzx ebx, al
cmovae rcx, qword [rbp - 0x41]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test bl, bl
jne 0x14005fe2c
lea rcx, [rbp - 0x21]
call fcn.140029560
lea r8, [rbp - 0x21]
mov rdx, r14
mov rcx, rdi
call fcn.14005a1f0
test eax, eax
je 0x14005fe1f
lea rdx, str.Fail_to_delete_fulldmp_report_record
lea rcx, str.database
call fcn.14002f1b0
lea rcx, [rbp - 0x21]
call fcn.140029580
xor bl, bl
jmp 0x14005fe4f
lea rdx, str.Fulldmp_has_been_zipped.
lea rcx, str.database
call fcn.14002f1b0
lea rdx, [rbp - 1]
lea rcx, [r12 + 0x18]
call fcn.140029590
mov bl, 1
lea rcx, [rbp - 1]
call fcn.140029580
mov rdx, qword [rbp - 0x49]
cmp rdx, 8
jb 0x14005fe9b
mov rcx, qword [rbp - 0x61]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005fe96
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005fe96
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ceafc
lea rcx, [rbp - 0x41]
mov qword [rbp - 0x51], r15
mov qword [rbp - 0x49], 7
mov word [rbp - 0x61], r15w
call fcn.140029580
jmp 0x14005febe
xor bl, bl
test rdi, rdi
je 0x14005ff28
cmp byte [rdi + 0x28], 0
je 0x14005fecc
mov rcx, rdi
call fcn.14005f890
mov rcx, qword [rdi]
lea rax, [rbp - 0x21]
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
xor edx, edx
mov r8d, r9d
movups xmmword [rbp - 0x21], xmm0
movups xmmword [rbp - 0x11], xmm0
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
lea rcx, [rdi + 0x30]
call fcn.140058b10
lea rcx, [rdi + 8]
call fcn.140029580
mov rcx, qword [rdi]
cmp rcx, 0xffffffffffffffff
je 0x14005ff1b
call fcn.14003d170
mov qword [rdi], 0xffffffffffffffff
mov edx, 0x50
mov rcx, rdi
call fcn.1400ceafc
mov r15, qword [rsp + 0xc0]
movzx eax, bl
mov r13, qword [rsp + 0xc8]
mov r12, qword [rsp + 0x110]
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.1400cebd0
add rsp, 0xd0
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140008170
int3
call fcn.14000cec0
int3