Function at 0x1400f38d0
Capabilities:
Delete file

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0xa8
mov rax, qword [0x140214ba0]
xor rax, rsp
mov qword [rbp - 0x11], rax
mov r15, r9
mov r14, r8
mov rdi, rdx
mov rbx, rcx
mov rsi, qword [rbp + 0x6f]
mov r12, qword [rbp + 0x77]
mov r13, qword [rbp + 0x7f]
xor eax, eax
mov qword [rbp - 0x51], rax
mov qword [rbp - 0x41], rax
mov qword [rbp - 0x39], 7
mov word [rbp - 0x51], ax
xor r8d, r8d
lea rdx, [0x1401e63d8]
lea rcx, [rbp - 0x51]
call fcn.1400260f0
nop
xor eax, eax
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x21], rax
mov qword [rbp - 0x19], 7
mov word [rbp - 0x31], ax
mov rax, qword [rbx + 8]
lea rdx, [rax + 0x28]
add rax, 0x38
cmp qword [r14 + 0x18], 8
jb 0x1400f3965
mov r14, qword [r14]
mov rcx, rdi
cmp qword [rdi + 0x18], 8
jb 0x1400f3972
mov rcx, qword [rdi]
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], 1
lea r9, [rbp - 0x51]
mov r8, r15
mov rdx, r14
call fcn.1400f79a0
test al, al
jne 0x1400f39ef
cmp qword [rdi + 0x18], 8
jb 0x1400f39b1
mov rdi, qword [rdi]
mov qword [rsp + 0x28], rdi
lea rax, str.Unable_to_download__s
mov qword [rsp + 0x20], rax
mov r9d, 0x6d
lea r8, str.NWebAdvisor::NXmlUpdater::CDownloadCommand::DownloadCommand
lea rdx, str.c:jenkinsworkspacemer_WebAdvisor_XMLUpdater_master_srcXmlUpdaterDownloadCommand.cpp
lea ecx, [r9 - 0x6c]
call fcn.1400ebbc0
cmp qword [rbp - 0x41], 0
je 0x1400f3b09
jmp 0x1400f3af5
lea rcx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rcx, qword [rbp - 0x51]
call qword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
mov rbx, rax
mov r8d, 4
lea rdx, str..exe
mov rcx, rax
call fcn.140170290
test eax, eax
je 0x1400f3a38
mov r8d, 4
lea rdx, str..cab
mov rcx, rbx
call fcn.140170290
test eax, eax
jne 0x1400f3a8b
lea rcx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rcx, qword [rbp - 0x51]
mov r8, qword [0x140223ed0]
test r8, r8
je 0x1400f3a60
mov rax, qword [r8]
mov rdx, rcx
mov rcx, r8
call qword [rax + VariantCopy]
jmp 0x1400f3a65
call fcn.14010c7f0
test al, al
jne 0x1400f3a8b
lea rax, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rax, qword [rbp - 0x51]
mov qword [rsp + 0x28], rax
lea rax, str.Unable_to_verify_signature__deleting_file:__s
mov r9d, 0x7a
jmp 0x1400f3ad8
mov r8, qword [rsi + 0x10]
test r8, r8
je 0x1400f3b0d
lea rdx, [rbp - 0x31]
cmp qword [rbp - 0x19], 8
cmovae rdx, qword [rbp - 0x31]
cmp qword [rsi + 0x18], 8
jb 0x1400f3aac
mov rsi, qword [rsi]
mov rcx, rsi
call fcn.140170290
test eax, eax
je 0x1400f3b0d
lea rax, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rax, qword [rbp - 0x51]
mov qword [rsp + 0x28], rax
lea rax, str.Unable_to_verify_MD5__deleting_file:__s
mov r9d, 0x84
mov qword [rsp + 0x20], rax
lea r8, str.NWebAdvisor::NXmlUpdater::CDownloadCommand::DownloadCommand
lea rdx, str.c:jenkinsworkspacemer_WebAdvisor_XMLUpdater_master_srcXmlUpdaterDownloadCommand.cpp
mov ecx, 1
call fcn.1400ebbc0
lea rcx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rcx, qword [rbp - 0x51]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
xor bl, bl
jmp 0x1400f3b0f
mov bl, 1
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x1400f3b4b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3b46
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f3bc2
call fcn.14014f900
xor eax, eax
mov qword [rbp - 0x21], rax
mov qword [rbp - 0x19], 7
mov word [rbp - 0x31], ax
mov rdx, qword [rbp - 0x39]
cmp rdx, 8
jb 0x1400f3b99
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3b94
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f3bbc
call fcn.14014f900
movzx eax, bl
mov rcx, qword [rbp - 0x11]
xor rcx, rsp
call fcn.14014f8e0
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140156b00
nop
call fcn.140156b00
nop
int3