Function at 0x140012f00
Capabilities:
Delete file

Disassembly:
mov rax, rsp
push rbp
push rdi
push r14
lea rbp, [rax - 0x28]
sub rsp, 0x110
mov qword [rbp - 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x140032008]
xor rax, rsp
mov qword [rbp + 8], rax
mov rdi, rcx
mov qword [rbp - 0x38], rcx
xor eax, eax
mov qword [rbp - 0x28], rax
lea rcx, [rbp - 0x28]
call fcn.1400170a0
nop
mov rax, qword [rbp - 0x28]
cmp dword [rax - 0x10], 0
jne 0x140012f5d
lea rdx, [rax - 0x18]
or ebx, 0xffffffff
jmp 0x1400134dd
xor eax, eax
mov qword [rbp - 8], rax
lea rcx, [rbp - 8]
call fcn.14001e6c0
nop
xor eax, eax
mov qword [rbp - 0x20], rax
cmp qword [rdi + 0x18], 0x10
jb 0x140012f7f
mov rbx, qword [rdi]
jmp 0x140012f82
mov rbx, rdi
call fcn.140001490
mov rcx, rax
test rax, rax
jne 0x140012f9a
mov ecx, 0x80004005
call fcn.1400011d0
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x20], rax
test rbx, rbx
je 0x140012fd8
test rbx, 0xffffffffffff0000
jne 0x140012fd8
movzx ebx, bx
mov ecx, ebx
call fcn.1400012a0
test rax, rax
je 0x140012fe6
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.140009f50
jmp 0x140012fe6
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.140009680
nop
lea r8, [rbp - 8]
lea rdx, str.crlog_
lea rcx, [rsp + 0x30]
call fcn.140013650
nop
lea r8, [0x1400258b8]
mov rdx, rax
lea rcx, [rsp + 0x28]
call fcn.1400083e0
nop
lea r8, [rsp + 0x20]
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400084b0
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140013045
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140013064
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140013082
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor eax, eax
mov qword [rbp - 0x10], rax
lea r8, [0x140023b60]
lea rdx, [rbp - 0x28]
lea rcx, [rsp + 0x48]
call fcn.1400083e0
nop
mov r8, qword [rbp - 0x20]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.1400083e0
nop
lea r8, str..log
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.1400083e0
nop
lea r8, str..solurl
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1400083e0
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400130f8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140013117
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140013135
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor eax, eax
mov qword [rbp - 0x30], rax
lea r8, [0x140023b60]
lea rdx, [rbp - 0x28]
lea rcx, [rsp + 0x60]
call fcn.1400083e0
nop
mov r8, qword [rbp - 0x20]
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400083e0
nop
lea r8, str..log
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.1400083e0
nop
lea r8, str..dmp
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.1400083e0
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400131ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400131ca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400131e8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor eax, eax
mov qword [rbp - 0x18], rax
lea r8, [0x140023b60]
lea rdx, [rbp - 0x28]
lea rcx, [rsp + 0x78]
call fcn.1400083e0
nop
mov r8, qword [rbp - 0x20]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400083e0
nop
lea r8, str..log
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.1400083e0
nop
lea r8, str..sessionid
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.1400083e0
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001325e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001327d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001329b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp - 0x60]
call fcn.1400151a0
call fcn.140014e40
call fcn.140014e40
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
lea rdx, [rbp]
call qword [sym.imp.MSVCP140.dll__Stat]
cmp eax, 8
setne cl
test cl, cl
je 0x1400132f2
cmp eax, 0xffffffff
je 0x1400132f2
mov sil, 1
jmp 0x1400132f5
xor sil, sil
mov r8, qword [rbp - 0x48]
cmp r8, 8
jb 0x14001330b
inc r8
mov rdx, qword [rbp - 0x60]
call fcn.1400099b0
test sil, sil
jne 0x140013434
lea r8, [0x140023b60]
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x68]
call fcn.1400083e0
nop
mov r8, qword [rbp - 0x20]
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.1400083e0
nop
lea r8, str..log
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.1400083e0
nop
lea r8, str..dmp.full
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400083e0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rsi, qword [rbp - 0x30]
add rsi, 0xffffffffffffffe8
cmp rcx, rsi
je 0x1400133bd
cmp dword [rsi + 0x10], 0
jl 0x1400133af
mov rax, qword [rsi]
cmp qword [rcx], rax
jne 0x1400133af
call fcn.140009a50
mov r14, rax
mov ecx, ebx
lock xadd dword [rsi + 0x10], ecx
sub ecx, 1
jg 0x1400133a5
mov rcx, qword [rsi]
mov r8, qword [rcx]
mov rdx, rsi
call qword [r8 + 8]
lea rax, [r14 + 0x18]
mov qword [rbp - 0x30], rax
jmp 0x1400133bd
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x30]
call fcn.140009ae0
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400133db
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400133f9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140013417
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140013434
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001345d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001347b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140013499
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400134b7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400134d5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x1400134f1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, rdi
call fcn.140007490
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.14001f400
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret