Function at 0x140018b5c
Capabilities:
Delete file

Disassembly:
mov byte [rsp + 0x10], dl
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x58
mov rax, qword gs:[0x58]
mov r15, rcx
mov ecx, 8
mov dil, dl
mov r8, qword [rax]
lea rax, str.TieringJetSession::OpenJetTable
mov qword [rcx + r8], rax
lea rcx, [rbp - 0x18]
call fcn.140008524
xor esi, esi
mov byte [rbp + 0x58], sil
mov byte [rbp + 0x48], sil
cmp byte [r15], sil
jne 0x140019899
mov rbx, qword [r15 + 0x28]
mov rbx, qword [rbx]
add rbx, 0x18
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
mov rax, qword [r15 + 0x28]
cmp byte [rax + 0x4d], sil
je 0x140018c26
mov edi, 0x800401ff
mov dword [rbp - 0x10], edi
mov rcx, qword [0x140047138]
lea r13, [0x140047138]
cmp rcx, r13
je 0x140018d35
lea r12d, [rsi + 1]
test byte [rcx + 0x1c], r12b
je 0x140018d35
cmp byte [rcx + 0x19], 2
jb 0x140018d35
mov r9, qword [rax + 0x70]
lea edx, [rsi + 0x51]
mov rcx, qword [rcx + 0x10]
lea r8, [0x14003f758]
mov dword [rsp + 0x20], edi
call fcn.140003cf4
jmp 0x140018d35
test dil, dil
je 0x140018c9e
cmp byte [rax + 0x28], sil
jne 0x140018ca4
test rbx, rbx
je 0x140018c3f
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
mov rax, qword [r15 + 0x28]
lea r14, [r15 + 8]
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
mov rcx, qword [rax + 0x68]
mov rcx, qword [rcx]
call qword [sym.imp.ESENT.dll_JetBeginSessionW]
mov r8d, eax
test eax, eax
je 0x140018dcf
cmp eax, 0xfffffdef
je 0x140018d68
cmp eax, 0xfffffbbc
je 0x140018d68
cmp eax, 0xfffff8f0
je 0x140018d68
cmp eax, 0xfffffc0d
jne 0x140018d4c
mov edi, 0x8007000e
jmp 0x140018d74
cmp byte [rax + 8], sil
je 0x140018c31
test dil, dil
je 0x140018cc7
mov byte [rax + 0x28], sil
mov r9, qword [r15 + 0x28]
mov rax, qword [r9 + 0x30]
mov qword [r15 + 8], rax
mov eax, dword [r9 + 0x38]
mov dword [r15 + 0x10], eax
mov rax, qword [r9 + 0x40]
jmp 0x140018ce3
mov byte [rax + 8], sil
mov r9, qword [r15 + 0x28]
mov rax, qword [r9 + 0x10]
mov qword [r15 + 8], rax
mov eax, dword [r9 + 0x18]
mov dword [r15 + 0x10], eax
mov rax, qword [r9 + 0x20]
mov qword [r15 + 0x18], rax
mov rcx, qword [0x140047138]
lea r13, [0x140047138]
mov r12d, 1
cmp rcx, r13
je 0x140018d25
test byte [rcx + 0x1c], r12b
je 0x140018d25
cmp byte [rcx + 0x19], 4
jb 0x140018d25
mov r9, qword [r9 + 0x70]
lea edx, [r12 + 0x51]
mov rcx, qword [rcx + 0x10]
lea r8, [0x14003f758]
call fcn.140003af0
mov byte [r15 + 0x21], dil
mov edi, esi
mov byte [r15], r12b
mov byte [r15 + 0x20], r12b
mov dword [rbp - 0x10], esi
test rbx, rbx
je 0x140019897
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
jmp 0x140019897
cdq
xor eax, edx
sub eax, edx
test r8d, r8d
movzx edi, ax
sets sil
shl esi, 0x1f
or esi, 0xe5e0000
or edi, esi
jmp 0x140018d74
mov ecx, 0x70
call fcn.140003930
mov edi, eax
mov dword [rbp - 0x10], edi
mov rcx, qword [0x140047138]
lea r13, [0x140047138]
cmp rcx, r13
je 0x140019897
mov r12d, 1
test byte [rcx + 0x1c], r12b
je 0x140019897
cmp byte [rcx + 0x19], 2
jb 0x140019897
mov r9, qword [r15 + 0x28]
lea edx, [r12 + 0x52]
mov rcx, qword [rcx + 0x10]
mov dword [rsp + 0x20], r8d
lea r8, [0x14003f758]
mov r9, qword [r9 + 0x70]
call fcn.140003cf4
jmp 0x140019897
mov rbx, qword [r15 + 0x28]
mov r12d, 1
mov byte [rbp + 0x60], r12b
mov rbx, qword [rbx]
add rbx, 0x18
mov rcx, rbx
mov qword [rbp - 0x20], rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
mov rcx, qword [0x140047138]
lea r13, [0x140047138]
lea rdi, [0x14003f758]
cmp rcx, r13
je 0x140018e30
test byte [rcx + 0x1c], r12b
je 0x140018e30
cmp byte [rcx + 0x19], 5
jb 0x140018e30
mov r9, qword [r15 + 0x28]
lea edx, [r12 + 0x53]
mov rcx, qword [rcx + 0x10]
mov r8, rdi
mov r9, qword [r9 + 0x70]
call fcn.140003af0
mov rdx, qword [r15 + 0x28]
cmp dword [rdx + 0x60], r12d
jne 0x1400190b4
mov dword [rbp - 0x28], esi
jmp 0x140018e47
lea r14, [r15 + 8]
mov rdx, qword [r15 + 0x28]
mov r9d, 0x10
mov rcx, qword [r14]
xor r8d, r8d
mov rdx, qword [rdx + 0x70]
call qword [sym.imp.ESENT.dll_JetAttachDatabase2W]
mov r10d, dword [rbp - 0x28]
mov r14d, eax
cmp r10d, 2
jae 0x140018f80
test eax, eax
je 0x140018fc5
cmp eax, 0xfffffdef
je 0x140018f80
cmp eax, 0xfffffbbc
je 0x140018f80
cmp eax, 0xfffff8f0
je 0x140018f80
cmp eax, 0x3ef
je 0x140018f80
cmp eax, 0xfffffc10
je 0x140018f80
cmp eax, 0xfffffe07
je 0x140018f80
cmp eax, 0xfffffb4e
je 0x140018f80
mov rcx, qword [0x140047138]
cmp rcx, r13
je 0x140018f09
test byte [rcx + 0x1c], r12b
je 0x140018f09
cmp byte [rcx + 0x19], 2
jb 0x140018f09
mov rax, qword [r15 + 0x28]
mov edx, 0x55
mov rcx, qword [rcx + 0x10]
mov r9d, r10d
mov dword [rsp + 0x28], r14d
mov r8, rdi
mov rax, qword [rax + 0x70]
mov qword [rsp + 0x20], rax
call fcn.1400156cc
mov r10d, dword [rbp - 0x28]
mov rax, qword [r15 + 0x28]
add r10d, r12d
mov edx, r10d
mov dword [rbp - 0x28], r10d
mov rcx, qword [rax]
mov byte [rcx + 0xa3], r12b
mov rcx, qword [r15 + 0x28]
call fcn.140034878
mov ecx, eax
mov r10, qword [0x140047138]
cmp r10, r13
je 0x140018f72
test byte [r10 + 0x1c], r12b
je 0x140018f72
cmp byte [r10 + 0x19], 3
jb 0x140018f72
mov rax, qword [r15 + 0x28]
mov edx, 0x56
mov r9d, dword [rbp - 0x28]
mov r8, rdi
mov rax, qword [rax + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov rcx, qword [r10 + 0x10]
call fcn.140015638
mov r10, qword [0x140047138]
mov eax, dword [rbp - 0x28]
cmp eax, 2
jbe 0x140018e43
jmp 0x140018fcf
test r14d, r14d
je 0x140018fc5
cmp r14d, 0x3ef
je 0x140018fc5
mov r10, qword [0x140047138]
cmp r10, r13
je 0x140018fcc
test byte [r10 + 0x1c], r12b
je 0x140018fcc
cmp byte [r10 + 0x19], 2
jb 0x140018fcc
mov r9, qword [r15 + 0x28]
mov edx, 0x57
mov rcx, qword [r10 + 0x10]
mov r8, rdi
mov dword [rsp + 0x20], r14d
mov r9, qword [r9 + 0x70]
call fcn.140003cf4
mov r10, qword [0x140047138]
mov eax, dword [rbp - 0x28]
cmp eax, 2
jne 0x140019036
cmp r10, r13
je 0x140019004
test byte [r10 + 0x1c], r12b
je 0x140019004
cmp byte [r10 + 0x19], al
jb 0x140019004
mov rax, qword [r15 + 0x28]
mov edx, 0x58
mov rcx, qword [r10 + 0x10]
mov r8, rdi
mov r9, qword [rax]
mov r9, qword [r9 + 0x258]
call fcn.140003af0
mov rax, qword [r15 + 0x28]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x258]
lea rax, [0x14003f6e8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.140033f00
mov r14d, 0xfffff8ed
mov r10, qword [0x140047138]
mov al, sil
cmp r14d, 0xfffff8ed
je 0x1400191c8
cmp r14d, 0xfffffb4d
je 0x1400191c8
test r14d, r14d
je 0x140019403
cmp r14d, 0xfffffdda
je 0x140019403
cmp r14d, 0x3ef
je 0x140019403
cmp r14d, 0xfffffdef
je 0x140019332
cmp r14d, 0xfffffbbc
je 0x140019332
cmp r14d, 0xfffff8f0
je 0x140019332
cmp r14d, 0xfffffc0d
jne 0x140019315
mov edi, 0x8007000e
jmp 0x14001933e
mov rcx, qword [r14]
xor r8d, r8d
cmp dword [rdx + 0x60], 3
mov r9d, 0x10
mov rdx, qword [rdx + 0x70]
jne 0x14001911f
call qword [sym.imp.ESENT.dll_JetAttachDatabase2W]
mov r14d, eax
test eax, eax
jns 0x14001902f
mov rcx, qword [0x140047138]
cmp rcx, r13
je 0x14001910c
test byte [rcx + 0x1c], r12b
je 0x14001910c
cmp byte [rcx + 0x19], 2
jb 0x14001910c
mov r9, qword [r15 + 0x28]
mov edx, 0x59
mov rcx, qword [rcx + 0x10]
mov r8, rdi
mov r9, qword [r9 + 0x70]
call fcn.140003af0
mov rcx, qword [r15 + 0x28]
mov rcx, qword [rcx + 0x70]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_DeleteFileW]
jmp 0x140019029
call qword [sym.imp.ESENT.dll_JetAttachDatabase2W]
mov r14d, eax
cmp eax, 0xfffffdda
jne 0x1400192c0
mov rcx, qword [0x140047138]
cmp rcx, r13
je 0x140019164
test byte [rcx + 0x1c], r12b
je 0x140019164
cmp byte [rcx + 0x19], 4
jb 0x140019164
mov r9, qword [r15 + 0x28]
mov edx, 0x5a
mov rcx, qword [rcx + 0x10]
mov r8, rdi
mov r9, qword [r9 + 0x70]
call fcn.140003af0
mov rdx, qword [r15 + 0x28]
lea r9, [r15 + 0x10]
mov rcx, qword [r15 + 8]
xor r8d, r8d
mov dword [rsp + 0x20], esi
mov rdx, qword [rdx + 0x70]
call qword [sym.imp.ESENT.dll_JetOpenDatabaseW]
mov r14d, eax
cmp eax, 0xfffffb4d
jne 0x140019276
mov r10, qword [0x140047138]
cmp r10, r13
je 0x1400191f3
test byte [r10 + 0x1c], r12b
je 0x1400191c8
cmp byte [r10 + 0x19], 4
jb 0x1400191c8
mov r9, qword [r15 + 0x28]
mov edx, 0x5b
mov rcx, qword [r10 + 0x10]
mov r8, rdi
mov r9, qword [r9 + 0x70]
call fcn.140003af0
mov r10, qword [0x140047138]
cmp r10, r13
je 0x1400191f3
test byte [r10 + 0x1c], r12b
je 0x1400191f3
cmp byte [r10 + 0x19], 5
jb 0x1400191f3
mov r9, qword [r15 + 0x28]
mov edx, 0x5e
mov rcx, qword [r10 + 0x10]
mov r8, rdi
mov r9, qword [r9 + 0x70]
call fcn.140003af0
mov rdx, qword [r15 + 0x28]
lea r9, [r15 + 0x10]
mov rcx, qword [r15 + 8]
xor r8d, r8d
mov eax, dword [rdx + 0x60]
mov rdx, qword [rdx + 0x70]
sub eax, r12d
test eax, 0xfffffffd
je 0x140019469
mov dword [rsp + 0x20], 0x200
call qword [sym.imp.ESENT.dll_JetCreateDatabase2W]
mov r14d, eax
test eax, eax
jne 0x140019482
mov r9, qword [r15 + 0x28]
cmp dword [r9 + 0x60], 2
jne 0x1400193cc
test byte [0x140047c80], 2
je 0x140019393
mov r9, qword [r9]
lea rdx, [0x14003e9a0]
movzx r8d, word [r9 + 0x2b8]
mov r9, qword [r9 + 0x2c0]
shr r8w, 1
call fcn.140009708
mov r9d, eax
jmp 0x140019396
test eax, eax
jne 0x14001902f
mov r10, qword [0x140047138]
cmp r10, r13
je 0x1400192b5
test byte [r10 + 0x1c], r12b
je 0x1400192b5
cmp byte [r10 + 0x19], 4
jb 0x1400192b5
mov r9, qword [r15 + 0x28]
lea edx, [rax + 0x5c]
mov rcx, qword [r10 + 0x10]
mov r8, rdi
mov r9, qword [r9 + 0x70]
call fcn.140003af0
mov r10, qword [0x140047138]
mov al, r12b
mov byte [rbp + 0x48], al
jmp 0x140019039
cmp eax, 0xfffffb4a
jne 0x14001902f
mov rcx, qword [0x140047138]
cmp rcx, r13
je 0x140019302
test byte [rcx + 0x1c], r12b
je 0x140019302
cmp byte [rcx + 0x19], 2
jb 0x140019302
mov rax, qword [r15 + 0x28]
mov edx, 0x5d
mov rcx, qword [rcx + 0x10]
mov r8, rdi
mov r9, qword [rax]
mov r9, qword [r9 + 0x270]
call fcn.140003af0
mov rax, qword [r15 + 0x28]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x270]
jmp 0x140019012
mov eax, r14d
cdq
xor eax, edx
sub eax, edx
movzx edi, ax
mov eax, r14d
and eax, 0x8e5e0000
or edi, eax
or edi, 0xe5e0000
jmp 0x14001933e
mov ecx, 0x70
call fcn.140003930
mov edi, eax
mov dword [rbp - 0x10], edi
cmp r10, r13
je 0x14001937c
test byte [r10 + 0x1c], r12b
je 0x14001937c
cmp byte [r10 + 0x19], 2
jb 0x14001937c
mov edx, 0x62
mov r9, qword [r15 + 0x28]
lea r8, [0x14003f758]
mov rcx, qword [r10 + 0x10]
mov dword [rsp + 0x20], r14d
mov r9, qword [r9 + 0x70]
call fcn.140003cf4
mov r10, qword [0x140047138]
test rbx, rbx
je 0x140019809
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
jmp 0x140019802
mov r9d, esi
mov rcx, qword [0x140047138]
cmp rcx, r13
je 0x1400193fd
test byte [rcx + 0x1c], r12b
je 0x1400193d3
cmp byte [rcx + 0x19], 4
jb 0x1400193d3
mov rax, qword [r15 + 0x28]
mov edx, 0x5f
mov rcx, qword [rcx + 0x10]
mov r8, rdi
mov rax, qword [rax + 0x70]
mov qword [rsp + 0x20], rax
call fcn.1400039f4
mov rcx, qword [0x140047138]
cmp rcx, r13
je 0x1400193fd
test byte [rcx + 0x1c], r12b
je 0x1400193fd
cmp byte [rcx + 0x19], 4
jb 0x1400193fd
mov r9, qword [r15 + 0x28]
mov edx, 0x61
mov rcx, qword [rcx + 0x10]
mov r8, rdi
mov r9, qword [r9 + 0x70]
call fcn.140003af0
mov al, r12b
mov byte [rbp + 0x48], al
test al, al
jne 0x1400195c8
mov rdx, qword [r15 + 0x28]
lea r9, [r15 + 0x10]
mov rcx, qword [r15 + 8]
xor r8d, r8d
mov dword [rsp + 0x20], esi
mov rdx, qword [rdx + 0x70]
call qword [sym.imp.ESENT.dll_JetOpenDatabaseW]
mov r14d, eax
test eax, eax
je 0x140019593
cmp eax, 0xfffffdef
je 0x140019524
cmp eax, 0xfffffbbc
je 0x140019524
cmp eax, 0xfffff8f0
je 0x140019524
cmp eax, 0xfffffc0d
jne 0x140019508
mov edi, 0x8007000e
jmp 0x140019530
mov dword [rsp + 0x20], 0x208
call qword [sym.imp.ESENT.dll_JetCreateDatabase2W]
mov r14d, eax
test eax, eax
je 0x1400193cc
cmp r14d, 0xfffffdef
je 0x1400194ca
cmp r14d, 0xfffffbbc
je 0x1400194ca
cmp r14d, 0xfffff8f0
je 0x1400194ca
cmp r14d, 0xfffffc0d
jne 0x1400194ad
mov edi, 0x8007000e
jmp 0x1400194d6
mov eax, r14d
cdq
xor eax, edx
sub eax, edx
movzx edi, ax
mov eax, r14d
and eax, 0x8e5e0000
or edi, eax
or edi, 0xe5e0000
jmp 0x1400194d6
mov ecx, 0x70
call fcn.140003930
mov edi, eax
mov dword [rbp - 0x10], edi
mov r10, qword [0x140047138]
cmp r10, r13
je 0x14001937c
test byte [r10 + 0x1c], r12b
je 0x14001937c
cmp byte [r10 + 0x19], 2
jb 0x14001937c
mov edx, 0x60
jmp 0x140019358
cdq
xor eax, edx
sub eax, edx
movzx edi, ax
test r14d, r14d
mov eax, esi
sets al
shl eax, 0x1f
or eax, 0xe5e0000
or edi, eax
jmp 0x140019530
mov ecx, 0x70
call fcn.140003930
mov edi, eax
mov dword [rbp - 0x10], edi
mov r10, qword [0x140047138]
cmp r10, r13
je 0x140019575
test byte [r10 + 0x1c], r12b
je 0x140019575
cmp byte [r10 + 0x19], 2
jb 0x140019575
mov r9, qword [r15 + 0x28]
lea r8, [0x14003f758]
mov rcx, qword [r10 + 0x10]
mov edx, 0x63
mov dword [rsp + 0x20], r14d
mov r9, qword [r9 + 0x70]
call fcn.140003cf4
mov r10, qword [0x140047138]
test rbx, rbx
je 0x14001985c
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
mov r10, qword [0x140047138]
jmp 0x14001985c
mov rcx, qword [0x140047138]
cmp rcx, r13
je 0x1400195c4
test byte [rcx + 0x1c], r12b
je 0x1400195c4
cmp byte [rcx + 0x19], 4
jb 0x1400195c4
mov r9, qword [r15 + 0x28]
mov edx, 0x64
mov rcx, qword [rcx + 0x10]
mov r8, rdi
mov r9, qword [r9 + 0x70]
call fcn.140003af0
mov byte [rbp + 0x48], r12b
mov bl, byte [rbp + 0x50]
lea rdi, [r15 + 0x18]
mov rax, qword [r15 + 8]
lea rdx, [rbp + 0x58]
mov r9d, dword [r15 + 0x10]
mov r8b, bl
mov qword [rsp + 0x28], rdi
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.1400198b8
mov r9, qword [r15 + 0x28]
cmp byte [r9 + 0x94], sil
jne 0x1400195cf
mov rbx, qword [rbp - 0x20]
test r14d, r14d
je 0x1400196b6
cmp r14d, 0xfffffdef
je 0x140019652
cmp r14d, 0xfffffbbc
je 0x140019652
cmp r14d, 0xfffff8f0
je 0x140019652
cmp r14d, 0xfffffc0d
jne 0x140019635
mov edi, 0x8007000e
jmp 0x14001965e
mov eax, r14d
cdq
xor eax, edx
sub eax, edx
movzx edi, ax
mov eax, r14d
and eax, 0x8e5e0000
or edi, eax
or edi, 0xe5e0000
jmp 0x14001965e
mov ecx, 0x70
call fcn.140003930
mov edi, eax
mov dword [rbp - 0x10], edi
mov r10, qword [0x140047138]
cmp r10, r13
je 0x14001969f
test byte [r10 + 0x1c], r12b
je 0x14001969f
cmp byte [r10 + 0x19], 2
jb 0x14001969f
mov r9, qword [r9 + 0x70]
lea r8, [0x14003f758]
mov rcx, qword [r10 + 0x10]
mov edx, 0x65
mov dword [rsp + 0x20], r14d
call fcn.140003cf4
mov r10, qword [0x140047138]
test rbx, rbx
je 0x1400197bf
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
jmp 0x1400197b8
test rbx, rbx
je 0x1400196c4
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
mov rax, qword [r15 + 0x28]
mov rdx, qword [rdi]
mov ecx, dword [rax + 0x60]
sub ecx, 2
cmp ecx, r12d
mov rcx, qword [r15 + 8]
jbe 0x1400196f5
mov bl, byte [rbp + 0x50]
test bl, bl
je 0x1400196ec
xor r8d, r8d
call qword [sym.imp.ESENT.dll_JetSetCurrentIndexW]
jmp 0x140019705
lea r8, str.ByFileIdOffset
jmp 0x1400196e4
lea r8, str.ByFileId
call qword [sym.imp.ESENT.dll_JetSetCurrentIndexW]
mov bl, byte [rbp + 0x50]
mov r8d, eax
test eax, eax
je 0x14001979c
cmp eax, 0xfffffdef
je 0x140019750
cmp eax, 0xfffffbbc
je 0x140019750
cmp eax, 0xfffff8f0
je 0x140019750
cmp eax, 0xfffffc0d
jne 0x140019733
mov edi, 0x8007000e
jmp 0x14001975c
mov eax, r8d
cdq
xor eax, edx
sub eax, edx
movzx edi, ax
mov eax, r8d
and eax, 0x8e5e0000
or edi, eax
or edi, 0xe5e0000
jmp 0x14001975c
mov ecx, 0x70
call fcn.140003930
mov edi, eax
mov dword [rbp - 0x10], edi
mov r10, qword [0x140047138]
cmp r10, r13
je 0x1400197bf
test byte [r10 + 0x1c], r12b
je 0x1400197bf
cmp byte [r10 + 0x19], 2
jb 0x1400197bf
mov r9, qword [r15 + 0x28]
mov edx, 0x66
mov rcx, qword [r10 + 0x10]
mov dword [rsp + 0x20], r8d
lea r8, [0x14003f758]
mov r9, qword [r9 + 0x70]
call fcn.140003cf4
jmp 0x1400197b8
mov edi, esi
mov dword [rbp - 0x10], esi
mov byte [r15], r12b
mov byte [r15 + 0x20], sil
mov byte [r15 + 0x21], bl
mov byte [rbp + 0x60], sil
mov byte [rbp + 0x48], sil
mov byte [rbp + 0x58], sil
mov r10, qword [0x140047138]
cmp byte [rbp + 0x58], sil
je 0x140019809
cmp r10, r13
je 0x1400197f4
test byte [r10 + 0x1c], r12b
je 0x1400197f4
cmp byte [r10 + 0x19], 4
jb 0x1400197f4
mov r9, qword [r15 + 0x28]
lea r8, [0x14003f758]
mov rcx, qword [r10 + 0x10]
mov edx, 0x67
mov r9, qword [r9 + 0x70]
call fcn.140003af0
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 8]
call qword [sym.imp.ESENT.dll_JetCloseTable]
mov r10, qword [0x140047138]
cmp byte [rbp + 0x48], sil
je 0x140019856
cmp r10, r13
je 0x14001983e
test byte [r10 + 0x1c], r12b
je 0x14001983e
cmp byte [r10 + 0x19], 4
jb 0x14001983e
mov r9, qword [r15 + 0x28]
lea r8, [0x14003f758]
mov rcx, qword [r10 + 0x10]
mov edx, 0x68
mov r9, qword [r9 + 0x70]
call fcn.140003af0
mov edx, dword [r15 + 0x10]
xor r8d, r8d
mov rcx, qword [r15 + 8]
call qword [sym.imp.ESENT.dll_JetCloseDatabase]
mov r10, qword [0x140047138]
cmp byte [rbp + 0x60], sil
je 0x140019897
cmp r10, r13
je 0x14001988b
test byte [r10 + 0x1c], r12b
je 0x14001988b
cmp byte [r10 + 0x19], 4
jb 0x14001988b
mov r9, qword [r15 + 0x28]
lea r8, [0x14003f758]
mov rcx, qword [r10 + 0x10]
mov edx, 0x69
mov r9, qword [r9 + 0x70]
call fcn.140003af0
mov rcx, qword [r15 + 8]
xor edx, edx
call qword [sym.imp.ESENT.dll_JetEndSession]
mov esi, edi
lea rcx, [rbp - 0x18]
call fcn.140008380
mov eax, esi
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret