Function at 0x140033f9c
Capabilities:
Delete file

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov rax, qword [0x1403cd210]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor ebx, ebx
mov byte [rbp - 0x59], bl
mov qword [rbp - 0x39], rbx
lea r12d, [rbx + 7]
mov qword [rbp - 0x31], r12
mov word [rbp - 0x49], bx
lea rdx, str.default
lea rcx, [rbp - 0x49]
call fcn.140031d84
lea r9, [rbp - 0x59]
lea rcx, [rbp - 0x49]
call fcn.140078ab8
lea edi, [rbx + 5]
lea r14, str.CSIS::_ExecutePrepareCommand
lea rsi, str.E:BT98e4b0b8_6261_4b66_a156_8e0ef62b3d71UBF_1CSIS_srcCSISUpgradeRemediation.cpp
lea r15d, [rbx + 6]
test al, al
jne 0x14003406e
mov ecx, edi
call fcn.1400e2070
test eax, eax
je 0x140034042
lea rax, str.Failed_to_wait_on_running_update
mov qword [rsp + 0x20], rax
mov r9d, 0x1b4
mov r8, r14
mov rdx, rsi
mov ecx, edi
call fcn.14003209c
mov ecx, r15d
call fcn.1400e2070
test eax, eax
je 0x14003406e
lea rax, str.Continuing_with_prepare_but_this_may_fail
mov qword [rsp + 0x20], rax
mov r9d, 0x1b5
mov r8, r14
mov rdx, rsi
mov ecx, r15d
call fcn.14003209c
mov qword [rbp + 7], rbx
mov qword [rbp + 0xf], r12
mov word [rbp - 9], bx
lea rcx, [rbp - 9]
call fcn.140070ab4
test al, al
jne 0x1400340e8
mov ecx, edi
call fcn.1400e2070
test eax, eax
je 0x1400340b5
lea rax, str.Failed_to_generate_json_with_data_gathered_from_snapshot_and_subdb
mov qword [rsp + 0x20], rax
mov r9d, 0x16f
lea r8, str.CSIS::_GenerateJSON
mov rdx, rsi
mov ecx, edi
call fcn.14003209c
mov ecx, edi
call fcn.1400e2070
test eax, eax
je 0x140034367
lea rax, str.Failed_to_generate_json_data
mov qword [rsp + 0x20], rax
mov r9d, 0x1e9
mov r8, r14
mov rdx, rsi
mov ecx, edi
call fcn.14003209c
jmp 0x140034367
mov qword [rbp - 0x39], rbx
mov qword [rbp - 0x31], r12
mov word [rbp - 0x49], bx
lea rcx, [rbp - 0x49]
call fcn.14004ae80
test al, al
je 0x140034321
lea r8, str.userdata.dat
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x29]
call fcn.1400350cc
nop
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x29]
call fcn.1400332fc
test al, al
je 0x1400342d9
lea r8, str.userdata.cab
lea rdx, [rbp - 0x49]
lea rcx, [rbp + 0x17]
call fcn.1400350cc
nop
mov ecx, r15d
call fcn.1400e2070
test eax, eax
je 0x140034170
lea rax, str.Attempting_to_make_the_cab_file_in_the_proper_location
mov qword [rsp + 0x20], rax
mov r9d, 0x1c6
mov r8, r14
mov rdx, rsi
mov ecx, r15d
call fcn.14003209c
lea rdx, [rbp + 0x17]
lea rcx, [rbp - 0x29]
call fcn.140033a1c
test al, al
je 0x140034291
mov ecx, r15d
call fcn.1400e2070
test eax, eax
je 0x1400341b1
lea rax, str.Successfully_made_the_cab_in_the_same_directory_as_upgrade.exe
mov qword [rsp + 0x20], rax
mov r9d, 0x1ca
mov r8, r14
mov rdx, rsi
mov ecx, r15d
call fcn.14003209c
lea rcx, [rbp - 0x29]
cmp qword [rbp - 0x11], 8
cmovae rcx, qword [rbp - 0x29]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1400341f3
mov ecx, edi
call fcn.1400e2070
test eax, eax
je 0x1400341f3
lea rax, str.Unble_to_delete_temporary_remediation.dat_file
mov qword [rsp + 0x20], rax
mov r9d, 0x1ce
mov r8, r14
mov rdx, rsi
mov ecx, edi
call fcn.14003209c
mov ecx, 0x18
call fcn.14003b2d8
test al, al
jne 0x14003422c
mov ecx, edi
call fcn.1400e2070
test eax, eax
je 0x14003422c
lea rax, str.Fail_to_setup_prepare_task
mov qword [rsp + 0x20], rax
mov r9d, 0x1d3
mov r8, r14
mov rdx, rsi
mov ecx, edi
call fcn.14003209c
nop
mov rdx, qword [rbp + 0x2f]
cmp rdx, 8
jb 0x140034248
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x17]
call fcn.1400331fc
nop
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x140034263
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
call fcn.1400331fc
mov qword [rbp - 0x19], rbx
mov qword [rbp - 0x11], r12
mov word [rbp - 0x29], bx
mov rdx, qword [rbp - 0x31]
cmp rdx, 8
jb 0x14003428a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x49]
call fcn.1400331fc
mov bl, 1
jmp 0x1400343a0
mov ecx, edi
call fcn.1400e2070
test eax, eax
je 0x1400342bc
lea rax, str.Failed_to_create_CAB_file
mov qword [rsp + 0x20], rax
mov r9d, 0x1da
mov r8, r14
mov rdx, rsi
mov ecx, edi
call fcn.14003209c
nop
mov rdx, qword [rbp + 0x2f]
cmp rdx, 8
jb 0x140034304
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x17]
call fcn.1400331fc
jmp 0x140034304
mov ecx, edi
call fcn.1400e2070
test eax, eax
je 0x140034304
lea rax, str.Failed_to_save_json_file
mov qword [rsp + 0x20], rax
mov r9d, 0x1df
mov r8, r14
mov rdx, rsi
mov ecx, edi
call fcn.14003209c
nop
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x14003434c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
call fcn.1400331fc
jmp 0x14003434c
mov ecx, edi
call fcn.1400e2070
test eax, eax
je 0x14003434c
lea rax, str.Failed_to_get_executable_folder
mov qword [rsp + 0x20], rax
mov r9d, 0x1e4
mov r8, r14
mov rdx, rsi
mov ecx, edi
call fcn.14003209c
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 8
jb 0x140034367
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x49]
call fcn.1400331fc
mov ecx, 0x18
call fcn.14003b2d8
test al, al
jne 0x1400343a0
mov ecx, edi
call fcn.1400e2070
test eax, eax
je 0x1400343a0
lea rax, str.Fail_to_setup_prepare_task
mov qword [rsp + 0x20], rax
mov r9d, 0x1ee
mov r8, r14
mov rdx, rsi
mov ecx, edi
call fcn.14003209c
nop
mov rdx, qword [rbp + 0xf]
cmp rdx, 8
jb 0x1400343bb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 9]
call fcn.1400331fc
mov al, bl
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.140119fe0
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret