Function at 0x14005f8d0
Capabilities:
Delete file

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [0x1400fe4a8]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov r14, rdx
lea r8, [rdx + 0x10]
lea rdx, [rbp - 0x69]
call fcn.140058ac0
xor esi, esi
mov rdi, qword [rax]
mov qword [rax], rsi
mov rbx, qword [rbp - 0x69]
test rbx, rbx
je 0x14005f97c
cmp byte [rbx + 0x28], sil
je 0x14005f920
mov rcx, rbx
call fcn.14005f5b0
mov rcx, qword [rbx]
lea rax, [rbp - 0x21]
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
xor edx, edx
mov r8d, r9d
movups xmmword [rbp - 0x21], xmm0
movups xmmword [rbp - 0x11], xmm0
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
lea rcx, [rbx + 0x30]
call fcn.140058830
lea rcx, [rbx + 8]
call fcn.1400292c0
mov rcx, qword [rbx]
cmp rcx, 0xffffffffffffffff
je 0x14005f96f
call fcn.14003ce90
mov qword [rbx], 0xffffffffffffffff
mov edx, 0x50
mov rcx, rbx
call fcn.1400ce80c
mov qword [rsp + 0x110], r12
mov qword [rsp + 0xc8], r13
mov qword [rsp + 0xc0], r15
test rdi, rdi
je 0x14005fbd7
lea r9, [rbp - 0x69]
xor r8d, r8d
mov rdx, r14
mov rcx, rdi
call fcn.14005a6f0
test eax, eax
jne 0x14005fbd7
mov r12, qword [rbp - 0x69]
lea rcx, [rbp - 0x41]
lea rdx, [r12 + 0x18]
call fcn.1400291d0
mov r15, qword [rbp - 0x31]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r15
cmp rax, 4
jb 0x14005fc83
cmp qword [rbp - 0x29], 8
lea rax, [rbp - 0x41]
lea r13, [r15 + 4]
mov qword [rbp - 0x61], rsi
cmovae rax, qword [rbp - 0x41]
mov ebx, 7
mov qword [rbp - 0x51], rsi
mov qword [rbp - 0x49], rsi
lea rsi, [rbp - 0x61]
mov qword [rbp - 0x69], rax
cmp r13, rbx
jbe 0x14005faab
mov rbx, r13
or rbx, 7
cmp rbx, rcx
jbe 0x14005fa33
mov rbx, rcx
mov rcx, 0xfffffffffffffffe
jmp 0x14005fa62
mov ecx, 0xa
movabs rdx, 0x7fffffffffffffff
cmp rbx, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, rdx
ja 0x14005fc7d
add rcx, rcx
cmp rcx, 0x1000
jb 0x14005fa92
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005fc7d
mov rcx, rax
call fcn.1400ce7d0
test rax, rax
je 0x14005fbaf
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
mov rax, qword [rbp - 0x69]
jmp 0x14005faa7
test rcx, rcx
je 0x14005faa5
call fcn.1400ce7d0
mov rsi, rax
mov rax, qword [rbp - 0x69]
jmp 0x14005faa7
xor esi, esi
mov qword [rbp - 0x61], rsi
mov qword [rbp - 0x49], rbx
mov rdx, rax
lea rbx, [r15 + r15]
mov qword [rbp - 0x51], r13
mov r8, rbx
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movabs rax, 0x700069007a002e
lea rdx, [rbp - 0x61]
mov qword [rbx + rsi], rax
lea rcx, [rbp - 1]
xor r15d, r15d
mov word [rsi + r13*2], r15w
call fcn.1400291f0
lea rdx, [rbp - 1]
lea rcx, [rbp - 0x41]
call fcn.1400345c0
cmp qword [rbp - 0x29], 8
lea rcx, [rbp - 0x41]
movzx ebx, al
cmovae rcx, qword [rbp - 0x41]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test bl, bl
jne 0x14005fb4c
lea rcx, [rbp - 0x21]
call fcn.1400292a0
lea r8, [rbp - 0x21]
mov rdx, r14
mov rcx, rdi
call fcn.140059f10
test eax, eax
je 0x14005fb3f
lea rdx, str.Fail_to_delete_fulldmp_report_record
lea rcx, str.database
call fcn.14002eef0
lea rcx, [rbp - 0x21]
call fcn.1400292c0
xor bl, bl
jmp 0x14005fb6f
lea rdx, str.Fulldmp_has_been_zipped.
lea rcx, str.database
call fcn.14002eef0
lea rdx, [rbp - 1]
lea rcx, [r12 + 0x18]
call fcn.1400292d0
mov bl, 1
lea rcx, [rbp - 1]
call fcn.1400292c0
mov rdx, qword [rbp - 0x49]
cmp rdx, 8
jb 0x14005fbbb
mov rcx, qword [rbp - 0x61]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005fbb6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005fbb6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ce80c
lea rcx, [rbp - 0x41]
mov qword [rbp - 0x51], r15
mov qword [rbp - 0x49], 7
mov word [rbp - 0x61], r15w
call fcn.1400292c0
jmp 0x14005fbde
xor bl, bl
test rdi, rdi
je 0x14005fc48
cmp byte [rdi + 0x28], 0
je 0x14005fbec
mov rcx, rdi
call fcn.14005f5b0
mov rcx, qword [rdi]
lea rax, [rbp - 0x21]
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
xor edx, edx
mov r8d, r9d
movups xmmword [rbp - 0x21], xmm0
movups xmmword [rbp - 0x11], xmm0
call qword [sym.imp.KERNEL32.dll_UnlockFileEx]
lea rcx, [rdi + 0x30]
call fcn.140058830
lea rcx, [rdi + 8]
call fcn.1400292c0
mov rcx, qword [rdi]
cmp rcx, 0xffffffffffffffff
je 0x14005fc3b
call fcn.14003ce90
mov qword [rdi], 0xffffffffffffffff
mov edx, 0x50
mov rcx, rdi
call fcn.1400ce80c
mov r15, qword [rsp + 0xc0]
movzx eax, bl
mov r13, qword [rsp + 0xc8]
mov r12, qword [rsp + 0x110]
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.1400ce8e0
add rsp, 0xd0
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140008170
int3
call fcn.14000cec0
int3