Function at 0x140016bb0
Capabilities:
Delete file

Disassembly:
mov r11, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1d0
mov qword [rsp + 0xe8], 0xfffffffffffffffe
mov qword [r11 + 0x20], rbx
mov rax, qword [0x1400d2478]
xor rax, rsp
mov qword [rsp + 0x1c8], rax
mov r13, r8
mov r15, rdx
mov qword [rsp + 0x68], rdx
mov r14, rcx
mov qword [r11 - 0x48], rdx
xor ebp, ebp
mov ebx, ebp
mov dword [rsp + 0x40], ebx
mov qword [r11 - 0xc0], 7
mov qword [r11 - 0xc8], rbp
mov word [rsp + 0x130], bp
lea r8d, [rbp + 0x11]
lea rdx, str.CleanObsoleteLogs
lea rcx, [r11 - 0xe0]
call fcn.140001870
nop
lea r9, [rsp + 0x130]
cmp qword [rsp + 0x148], 8
cmovae r9, qword [rsp + 0x130]
lea rax, str.Function_start
mov qword [rsp + 0x20], rax
lea edx, [rbp + 0x32]
lea r8d, [rbp + 1]
mov rcx, r14
call fcn.1400144a0
mov r11, qword [r13 + 0x30]
cmp r11, 0x64
jbe 0x140017438
lea rax, [r11 - 0x64]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x60], rbp
test rax, rax
je 0x140017438
nop dword [rax]
mov qword [rsp + 0x1a0], 7
mov qword [rsp + 0x198], rbp
mov word [rsp + 0x188], bp
mov dword [rsp + 0x1a8], ebp
mov dword [rsp + 0x1b0], ebp
mov dword [rsp + 0x1ac], ebp
mov dword [rsp + 0x1b4], ebp
mov dword [rsp + 0x1b8], ebp
xor r8d, r8d
lea rdx, [0x1400ad318]
lea rcx, [rsp + 0x180]
call fcn.140001870
mov r12d, ebp
mov rax, qword [r13 + 0x28]
mov rcx, qword [rax]
mov qword [rsp + 0x88], rcx
mov rax, qword [r13]
mov qword [rsp + 0x80], rax
movaps xmm0, xmmword [rsp + 0x80]
movdqa xmmword [rsp + 0x50], xmm0
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
or r15, 0xffffffffffffffff
mov rdi, qword [r13 + 0x28]
test rbx, rbx
je 0x140016d2f
cmp rbx, qword [r13]
je 0x140016d34
call fcn.1400679f0
cmp rsi, rdi
je 0x140016e4b
cmp dword [rsp + 0x1b0], 0
jne 0x140016d51
cmp dword [rsp + 0x1ac], 0
je 0x140016d88
test rbx, rbx
jne 0x140016d60
call fcn.1400679f0
mov r11, rbp
jmp 0x140016d63
mov r11, qword [rbx]
cmp rsi, qword [r11 + 0x28]
jne 0x140016d6e
call fcn.1400679f0
lea rcx, [rsi + 0x3c]
lea rdx, [rsp + 0x1ac]
call qword [sym.imp.KERNEL32.dll_CompareFileTime]
test eax, eax
jns 0x140016e26
test rbx, rbx
jne 0x140016d97
call fcn.1400679f0
mov r11, rbp
jmp 0x140016d9a
mov r11, qword [rbx]
cmp rsi, qword [r11 + 0x28]
jne 0x140016da5
call fcn.1400679f0
cmp qword [rsi + 0x30], 8
jb 0x140016db2
mov rcx, qword [rsi + 0x18]
jmp 0x140016db6
lea rcx, [rsi + 0x18]
lea rdx, str.Resume.log
call fcn.1400668a8
test eax, eax
je 0x140016e26
test rbx, rbx
jne 0x140016dd5
call fcn.1400679f0
mov r11, rbp
jmp 0x140016dd8
mov r11, qword [rbx]
cmp rsi, qword [r11 + 0x28]
jne 0x140016de3
call fcn.1400679f0
mov r9, r15
xor r8d, r8d
lea rdx, [rsi + 0x10]
lea rcx, [rsp + 0x180]
call fcn.140001500
mov r11d, dword [rsi + 0x38]
mov dword [rsp + 0x1a8], r11d
mov rax, qword [rsi + 0x3c]
mov qword [rsp + 0x1ac], rax
mov eax, dword [rsi + 0x44]
mov dword [rsp + 0x1b4], eax
mov eax, dword [rsi + 0x48]
mov dword [rsp + 0x1b8], eax
test rbx, rbx
jne 0x140016e35
call fcn.1400679f0
mov r11, rbp
jmp 0x140016e38
mov r11, qword [rbx]
cmp rsi, qword [r11 + 0x28]
jne 0x140016e43
call fcn.1400679f0
mov rsi, qword [rsi]
jmp 0x140016d20
cmp qword [rsp + 0x198], 0
mov r15, qword [rsp + 0x68]
jne 0x140016e9d
mov r12d, 8
lea r9, [rsp + 0x130]
cmp qword [rsp + 0x148], r12
cmovae r9, qword [rsp + 0x130]
lea rax, str.Wrong_parameter
mov qword [rsp + 0x20], rax
lea edx, [r12 + 2]
lea r8d, [r12 - 7]
mov rcx, r14
call fcn.1400144a0
jmp 0x1400173e5
mov qword [rsp + 0x170], 7
mov qword [rsp + 0x168], rbp
mov word [rsp + 0x158], bp
or rbx, 0xffffffffffffffff
mov r9, rbx
xor r8d, r8d
mov rdx, r15
lea rcx, [rsp + 0x150]
call fcn.140001500
mov rdi, qword [rsp + 0x168]
test rdi, rdi
je 0x140016f96
test rdi, rdi
je 0x140016f7c
cmp rdi, rbx
jbe 0x140016ef7
mov rcx, rbx
jmp 0x140016efb
lea rcx, [rdi - 1]
lea rax, [rsp + 0x158]
mov rsi, qword [rsp + 0x158]
mov rbp, qword [rsp + 0x170]
cmp rbp, 8
cmovae rax, rsi
lea rbx, [rax + rcx*2]
nop
mov ecx, 1
lea rax, [0x1400ad338]
movzx edx, word [rbx]
nop
cmp word [rax], dx
je 0x140016f57
add rax, 2
sub rcx, 1
jne 0x140016f30
lea rcx, [rsp + 0x150]
call fcn.1400016d0
cmp rbx, rax
je 0x140016f7c
sub rbx, 2
jmp 0x140016f20
lea rax, [rsp + 0x158]
cmp rbp, 8
cmovae rax, rsi
sub rbx, rax
sar rbx, 1
cmp rbx, 0xffffffffffffffff
je 0x140016f7c
lea rax, [rbx + 1]
cmp rdi, rax
je 0x140016f96
mov r8d, 1
lea rdx, [0x1400ad338]
lea rcx, [rsp + 0x150]
call fcn.14000a130
or rbx, 0xffffffffffffffff
mov r9, rbx
xor r8d, r8d
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x150]
call fcn.140001720
cmp dword [rsp + 0x1a8], 0
je 0x14001707a
lea rax, [rsp + 0xa0]
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xc0], 7
xor ebp, ebp
mov qword [rsp + 0xb8], rbp
mov word [rsp + 0xa8], bp
lea r8d, [rbx + 4]
lea rdx, [0x1400adb90]
lea rcx, [rsp + 0xa0]
call fcn.140001870
nop
mov qword [rsp + 0x110], 7
mov qword [rsp + 0x108], rbp
mov word [rsp + 0xf8], bp
mov r9, rbx
xor r8d, r8d
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0xf0]
call fcn.140001500
nop
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 1
lea r9, [rsp + 0xa0]
lea r8, [rsp + 0xf0]
lea edx, [rbx + 2]
mov rcx, r14
call fcn.14002cc40
test al, al
jne 0x140017157
lea r12d, [rbx + 5]
jmp 0x140017157
lea rcx, [rsp + 0x158]
cmp qword [rsp + 0x170], 8
cmovae rcx, qword [rsp + 0x158]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x140017155
lea r12d, [rax + 4]
lea rbx, [rsp + 0x130]
cmp qword [rsp + 0x148], 8
cmovae rbx, qword [rsp + 0x130]
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.DeleteFile
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], eax
lea rax, str.Error___i__return_by_function___s_
mov qword [rsp + 0x20], rax
mov r9, rbx
lea edx, [r12 + 0x10]
lea r8d, [r12 - 3]
mov rcx, r14
call fcn.1400144a0
lea r11, [rsp + 0x158]
cmp qword [rsp + 0x170], 8
cmovae r11, qword [rsp + 0x158]
lea r9, [rsp + 0x130]
cmp qword [rsp + 0x148], 8
cmovae r9, qword [rsp + 0x130]
mov qword [rsp + 0x30], r11
xor ebp, ebp
mov qword [rsp + 0x28], rbp
lea rax, str.Parameter___i_:__s
mov qword [rsp + 0x20], rax
lea edx, [rbp + 0x14]
lea r8d, [r12 - 3]
mov rcx, r14
call fcn.1400144a0
jmp 0x140017157
xor ebp, ebp
cmp qword [rsp + 0x170], 8
jb 0x14001716f
mov rcx, qword [rsp + 0x158]
call fcn.140065920
mov qword [rsp + 0x170], 7
mov qword [rsp + 0x168], rbp
mov word [rsp + 0x158], bp
test r12d, r12d
jne 0x1400173e5
mov rax, qword [r13 + 0x28]
mov rcx, qword [rax]
mov qword [rsp + 0x98], rcx
mov rax, qword [r13]
mov qword [rsp + 0x90], rax
movaps xmm0, xmmword [rsp + 0x90]
movdqa xmmword [rsp + 0x50], xmm0
mov rdi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x58]
mov rsi, qword [r13 + 0x28]
test rdi, rdi
je 0x1400171d6
cmp rdi, qword [r13]
je 0x1400171db
call fcn.1400679f0
cmp rbx, rsi
je 0x1400173a5
test rdi, rdi
jne 0x1400171f3
call fcn.1400679f0
mov r11, rbp
jmp 0x1400171f6
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x28]
jne 0x140017201
call fcn.1400679f0
mov eax, dword [rbx + 0x38]
cmp dword [rsp + 0x1a8], eax
jne 0x14001734f
test rdi, rdi
jne 0x140017220
call fcn.1400679f0
mov r11, rbp
jmp 0x140017223
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x28]
jne 0x14001722e
call fcn.1400679f0
lea rcx, [rbx + 0x3c]
lea rdx, [rsp + 0x1ac]
call qword [sym.imp.KERNEL32.dll_CompareFileTime]
test eax, eax
jne 0x14001734f
test rdi, rdi
jne 0x140017257
call fcn.1400679f0
mov r11, rbp
jmp 0x14001725a
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x28]
jne 0x140017265
call fcn.1400679f0
mov eax, dword [rbx + 0x44]
cmp dword [rsp + 0x1b4], eax
jne 0x14001734f
test rdi, rdi
jne 0x140017284
call fcn.1400679f0
mov r11, rbp
jmp 0x140017287
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x28]
jne 0x140017292
call fcn.1400679f0
mov eax, dword [rbx + 0x48]
cmp dword [rsp + 0x1b8], eax
jne 0x14001734f
test rdi, rdi
jne 0x1400172b1
call fcn.1400679f0
mov r11, rbp
jmp 0x1400172b4
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x28]
jne 0x1400172bf
call fcn.1400679f0
mov r10, qword [rbx + 0x28]
cmp qword [rbx + 0x30], 8
jb 0x1400172d0
mov rdx, qword [rbx + 0x18]
jmp 0x1400172d4
lea rdx, [rbx + 0x18]
lea rcx, [rsp + 0x188]
cmp qword [rsp + 0x1a0], 8
cmovae rcx, qword [rsp + 0x188]
mov r8, r10
mov r9, qword [rsp + 0x198]
cmp r9, r10
cmovb r8, r9
test r8, r8
je 0x140017333
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14001731d
add rcx, 2
add rdx, 2
sub r8, 1
jne 0x140017305
jmp 0x140017333
mov r8d, 1
cmp word [rcx], ax
mov rax, 0xffffffffffffffff
cmovb r8d, eax
jmp 0x140017336
mov r8d, ebp
movsxd rax, r8d
test r8d, r8d
jne 0x14001734b
cmp r9, r10
jb 0x14001734f
mov eax, ebp
cmp r9, r10
setne al
test eax, eax
je 0x140017379
test rdi, rdi
jne 0x14001735e
call fcn.1400679f0
mov r11, rbp
jmp 0x140017361
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x28]
jne 0x14001736c
call fcn.1400679f0
mov rbx, qword [rbx]
mov qword [rsp + 0x58], rbx
jmp 0x1400171c7
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0xd0], xmm0
lea r8, [rsp + 0xd0]
lea rdx, [rsp + 0x118]
mov rcx, r13
call fcn.1400184a0
mov ebx, dword [rsp + 0x40]
jmp 0x1400173ec
mov ebx, 4
mov dword [rsp + 0x40], ebx
lea r9, [rsp + 0x130]
cmp qword [rsp + 0x148], 8
cmovae r9, qword [rsp + 0x130]
lea rax, str.Error_deleting_file
mov qword [rsp + 0x20], rax
lea edx, [rbx + 0x10]
lea r8d, [rbx - 3]
mov rcx, r14
call fcn.1400144a0
jmp 0x1400173ec
mov ebx, r12d
mov dword [rsp + 0x40], ebx
cmp qword [rsp + 0x1a0], 8
jb 0x140017404
mov rcx, qword [rsp + 0x188]
call fcn.140065920
mov qword [rsp + 0x1a0], 7
mov qword [rsp + 0x198], rbp
mov word [rsp + 0x188], bp
mov rdi, qword [rsp + 0x60]
inc rdi
mov qword [rsp + 0x60], rdi
cmp rdi, qword [rsp + 0x70]
jb 0x140016c90
lea r9, [rsp + 0x130]
cmp qword [rsp + 0x148], 8
cmovae r9, qword [rsp + 0x130]
mov dword [rsp + 0x28], ebx
lea rax, str.Return_code__0x_x_
mov qword [rsp + 0x20], rax
mov edx, 0x28
lea r8d, [rdx - 0x27]
mov rcx, r14
call fcn.1400144a0
lea r9, [rsp + 0x130]
cmp qword [rsp + 0x148], 8
cmovae r9, qword [rsp + 0x130]
lea rax, str.Function_end
mov qword [rsp + 0x20], rax
mov edx, 0x32
lea r8d, [rdx - 0x31]
mov rcx, r14
call fcn.1400144a0
nop
cmp qword [rsp + 0x148], 8
jb 0x1400174c3
mov rcx, qword [rsp + 0x130]
call fcn.140065920
mov qword [rsp + 0x148], 7
mov qword [rsp + 0x140], rbp
mov word [rsp + 0x130], bp
cmp qword [r15 + 0x20], 8
jb 0x1400174ef
mov rcx, qword [r15 + 8]
call fcn.140065920
mov qword [r15 + 0x20], 7
mov qword [r15 + 0x18], rbp
mov word [r15 + 8], bp
mov eax, ebx
mov rcx, qword [rsp + 0x1c8]
xor rcx, rsp
call fcn.140064b70
mov rbx, qword [rsp + 0x228]
add rsp, 0x1d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret