Function at 0x1400f8290
Capabilities:
Delete file
Get common file path
Move file
Reference sql statements

Disassembly:
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4e0]
sub rsp, 0x5e0
mov qword [rbp - 0x48], 0xfffffffffffffffe
mov qword [rsp + 0x620], rbx
mov r14, rdx
mov r13, rcx
lea rax, vtable.CFunctionEnterExit.0
mov qword [rbp - 0x40], rax
lea r15, str.ValidateSettingsTable
mov qword [rbp - 0x38], r15
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp - 0x30]
call fcn.140249b10
mov r8, r15
lea rdx, [0x1402862f8]
lea rcx, [rbp - 0x30]
call fcn.140006bc0
mov r9d, 1
mov r8d, r9d
lea rdx, [rbp - 0x30]
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
nop
mov r9d, 1
mov r8d, r9d
mov rdx, r13
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
mov dword [rbp + 0x530], 1
mov ecx, 0xa0
mov r12d, 1
call fcn.14018ef40
mov rbx, rax
mov qword [rbp + 0x538], rax
test rax, rax
je 0x1400f83c3
lea rax, vtable.CSABSettingsDatabase::CSqlLite.0
mov qword [rbx], rax
lea rcx, [rbx + 8]
mov rdx, r13
call fcn.140006f70
nop
lea rax, vtable.CSABString.0
mov qword [rbx + 0x20], rax
xor edi, edi
mov qword [rbx + 0x28], rdi
mov dword [rbx + 0x30], 8
lea ecx, [rdi + 9]
call fcn.140247068
mov rcx, rax
mov qword [rbx + 0x28], rax
test rax, rax
je 0x1400f83b0
mov r8d, dword [rbx + 0x30]
inc r8d
lea rdx, str.SETTINGS
call fcn.1402496a0
mov dword [rbx + 0x34], 1
lea rcx, [rbx + 0x38]
call fcn.14007ba30
nop
jmp 0x1400f83c7
xor edi, edi
mov ebx, edi
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.14018ef40
mov rsi, rax
mov qword [rbp + 0x538], rax
test rax, rax
je 0x1400f83f0
lea rax, vtable.CSABSettingsDatabase.0
mov qword [rsi], rax
mov qword [rsi + 8], rbx
jmp 0x1400f83f3
mov rsi, rdi
mov rcx, qword [rsi + 8]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x20]
test eax, eax
je 0x1400f8804
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call fcn.140253eb8
call fcn.140253e8c
mov r15d, eax
mov r8d, eax
lea rdx, str.ValidationRand
mov rcx, rsi
call fcn.1400f8200
lea rax, vtable.CSABDataBuffer.0
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x34], 1
mov rcx, qword [rsi + 8]
mov rax, qword [rcx]
lea r9, [rsp + 0x20]
mov r8d, 0x103
lea rdx, str.ValidationRand
call qword [rax + 0x30]
test eax, eax
je 0x1400f87ca
mov rcx, qword [rsp + 0x28]
mov r14d, dword [rcx]
lea rax, vtable.CSABDataBuffer.0
mov qword [rsp + 0x20], rax
add dword [rsp + 0x34], 0xffffffff
jne 0x1400f8497
cmp dword [rsp + 0x38], 0
jne 0x1400f8497
call fcn.140247060
cmp r14d, r15d
jne 0x1400f87a9
mov r12d, edi
mov r14, qword [rbp + 0x528]
lea r15, str.ValidateSettingsTable
mov rax, qword [rsi]
mov edx, 1
mov rcx, rsi
call qword [rax]
test rbx, rbx
je 0x1400f84d0
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
lea rcx, [rsp + 0x40]
call fcn.14007ba30
nop
xor r8d, r8d
mov rdx, r13
lea rcx, [rsp + 0x40]
call fcn.14006d170
test r12d, r12d
je 0x1400f857a
mov r9d, 1
mov r8d, r9d
lea rdx, str.SETTINGS_Crashed
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
mov ebx, edi
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400f853e
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [rbp + 0x538]
lea rdx, str.DROP_TABLE_SETTINGS
call qword [rax]
mov ebx, eax
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
je 0x1400f857a
mov rbx, qword [rbp + 0x538]
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400f8570
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, r14
lea r8, [0x14034ec34]
sub r8, r14
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400f85a3
inc rax
test ecx, ecx
jne 0x1400f8590
test edx, edx
jne 0x1400f8a47
mov r9d, 1
mov r8d, r9d
lea rdx, str.Current_User
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
call fcn.140253e8c
mov esi, eax
mov r9d, eax
lea r8, str.INSERT_OR_REPLACE_INTO_ScheduledTasks__taskid__VALUES___d_
mov edx, 0x104
lea rcx, [rbp + 0xd0]
call fcn.14000b150
mov ebx, edi
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400f8617
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [rbp + 0x538]
lea rdx, [rbp + 0xd0]
call qword [rax]
mov ebx, eax
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
je 0x1400f8653
mov rbx, qword [rbp + 0x538]
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400f8649
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r9d, esi
lea r8, str.SELECT_id_FROM_ScheduledTasks_WHERE_taskid_d
mov edx, 0x104
lea rcx, [rbp + 0xd0]
call fcn.14000b150
mov ebx, edi
mov esi, edi
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400f869b
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [rbp - 0x50]
lea rdx, [rbp + 0xd0]
call qword [rax]
mov esi, eax
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test esi, esi
je 0x1400f8825
mov qword [rbp + 0x538], rdi
mov rcx, qword [rbp - 0x50]
mov rax, qword [rcx]
lea r9, [rbp + 0x538]
xor r8d, r8d
xor edx, edx
call qword [rax + 0x28]
test eax, eax
je 0x1400f86e6
mov rcx, qword [rbp + 0x538]
test rcx, rcx
je 0x1400f86e6
cmp byte [rcx], 0
je 0x1400f86e6
call fcn.1402520ac
mov ebx, eax
mov rsi, qword [rbp - 0x50]
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400f8707
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
je 0x1400f8825
mov esi, edi
mov r9d, ebx
lea r8, str.DELETE_FROM_ScheduledTasks_WHERE_id_u
mov edx, 0x104
lea rcx, [rbp + 0xd0]
call fcn.14000b150
mov ebx, edi
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400f8764
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [rbp + 0x530]
lea rdx, [rbp + 0xd0]
call qword [rax]
mov ebx, eax
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
je 0x1400f88b1
mov rbx, qword [rbp + 0x530]
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400f879a
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1400f88b1
mov r9d, 1
mov r8d, r9d
lea rdx, str.Failed_To_Read_Back_Setting
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
jmp 0x1400f84a3
lea rax, vtable.CSABDataBuffer.0
mov qword [rsp + 0x20], rax
add dword [rsp + 0x34], 0xffffffff
jne 0x1400f84aa
cmp dword [rsp + 0x38], 0
jne 0x1400f84aa
mov rcx, qword [rsp + 0x28]
test rcx, rcx
je 0x1400f84aa
call fcn.140247060
jmp 0x1400f84aa
mov r9d, 1
mov r8d, r9d
lea rdx, str.Failed_To_Open_Settings_Database
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
jmp 0x1400f84b1
mov r9d, 1
mov r8d, r9d
lea rdx, str.Scheduled_Tasks_Crashed
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
mov ebx, edi
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400f886f
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [rbp + 0x538]
lea rdx, str.DROP_TABLE_ScheduledTasks
call qword [rax]
mov ebx, eax
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
je 0x1400f88ab
mov rbx, qword [rbp + 0x538]
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400f88a1
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [rbp + 0x530]
lea rax, vtable.CSABSQL.0
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400f88e1
mov rax, qword [rcx]
mov edx, 1
call qword [rax + 0x40]
mov qword [rsp + 0x70], rdi
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
lea rax, vtable.CSABByteString.0
mov qword [rsp + 0x48], rax
mov edx, 1
mov rcx, qword [rsp + 0x50]
call fcn.140247060
test esi, esi
jne 0x1400f891d
test r12d, r12d
je 0x1400f89e7
mov r9d, 1
mov r8d, r9d
lea rdx, str.A_Table_Was_Crashed
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
mov r12d, 1
mov r9d, r12d
mov r8d, r12d
lea rdx, str.DELETE
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
mov r9d, r12d
mov r8d, r12d
mov rdx, r13
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x1400f89e7
mov r9d, r12d
mov r8d, r12d
lea rdx, str.Failed_To_Delete
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
lea r9, [rbp + 0xd0]
xor r8d, r8d
lea rdx, [0x1402b6e74]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetTempFileNameA]
lea rcx, [rbp + 0xd0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rdx, [rbp + 0xd0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
jne 0x1400f89e7
mov r9d, r12d
mov r8d, r12d
lea rdx, str.Failed_To_Move_File
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
xor r12d, 1
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp - 0x30]
call fcn.140249b10
mov r8, r15
lea rdx, str._s___Leavex
lea rcx, [rbp - 0x30]
call fcn.140006bc0
mov r9d, 1
mov r8d, r9d
lea rdx, [rbp - 0x30]
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
nop
mov eax, r12d
mov rbx, qword [rsp + 0x620]
add rsp, 0x5e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov esi, edi
jmp 0x1400f88b1