Function at 0x140001000
Capabilities:
Delete file

Disassembly:
push rbp
push rbx
lea rbp, [rsp - 0x4f]
sub rsp, 0xc8
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x37], rax
lea rcx, str.urlmon.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rbx, rax
test rax, rax
jne 0x14000104f
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, [0x1400033c0]
call fcn.1400013a0
mov eax, 1
jmp 0x140001385
lea rdx, str.URLDownloadToFileW
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x14000108a
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, [0x140003420]
call fcn.1400013a0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 1
jmp 0x140001385
mov qword [rsp + 0xe0], rsi
lea r8, str.C:path_todownloaded_file.zip
mov qword [rsp + 0xe8], rdi
lea rdx, str.https:__example.com_file.zip
mov qword [rsp + 0xf0], r12
xor r9d, r9d
xor r12d, r12d
mov qword [rsp + 0xf8], r14
xor ecx, ecx
mov qword [rsp + 0x20], r12
mov qword [rsp + 0xc0], r15
call rax
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
test eax, eax
js 0x140001346
lea rdx, [0x140003490]
call fcn.1400013a0
lea rcx, str.ole32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rsi, rax
test rax, rax
jne 0x140001125
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, [0x1400034f0]
call fcn.1400013a0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 1
jmp 0x14000135d
lea rdx, str.CoInitialize
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.CoUninitialize
mov rcx, rsi
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.CoCreateInstance
mov rcx, rsi
mov r15, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
test rdi, rdi
je 0x14000131a
test r15, r15
je 0x14000131a
test rax, rax
je 0x14000131a
xor ecx, ecx
call rdi
mov edi, eax
test eax, eax
js 0x1400012c7
lea rax, [rbp - 0x41]
xor edx, edx
lea r9, [0x1400032c0]
mov qword [rsp + 0x20], rax
mov r8d, 1
lea rcx, [0x1400032d0]
call r14
mov edi, eax
test eax, eax
js 0x1400012c4
lea rcx, [rbp - 9]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov r14d, 8
lea rcx, str.C:path_todownloaded_file.zip
mov word [rbp - 9], r14w
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rcx, qword [rbp - 0x41]
lea r8, [rbp - 0x49]
movsd xmm1, qword [rbp + 7]
lea rdx, [rbp - 0x29]
mov qword [rbp - 1], rax
movups xmm0, xmmword [rbp - 9]
mov qword [rbp - 0x49], r12
mov rax, qword [rcx]
movaps xmmword [rbp - 0x29], xmm0
movsd qword [rbp - 0x19], xmm1
call qword [rax + 0x48]
mov edi, eax
test eax, eax
js 0x1400012b0
lea rcx, [rbp - 0x29]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
lea rcx, str.C:path_toextract_
mov word [rbp - 0x29], r14w
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rcx, qword [rbp - 0x41]
lea r8, [rbp - 0x31]
movsd xmm1, qword [rbp - 0x19]
lea rdx, [rbp + 0x17]
mov qword [rbp - 0x21], rax
movups xmm0, xmmword [rbp - 0x29]
mov qword [rbp - 0x31], r12
mov rax, qword [rcx]
movaps xmmword [rbp + 0x17], xmm0
movsd qword [rbp + 0x27], xmm1
call qword [rax + 0x48]
mov edi, eax
test eax, eax
js 0x14000129c
mov rcx, qword [rbp - 0x49]
lea rdx, [rbp - 0x39]
mov qword [rbp - 0x39], r12
mov rax, qword [rcx]
call qword [rax + 0x58]
mov edi, eax
test eax, eax
js 0x140001292
lea rcx, [rbp + 0x17]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp - 0x39]
mov eax, 9
mov word [rbp + 0x17], ax
mov qword [rbp + 0x1f], rcx
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x31]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rcx, [rbp - 0x29]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp - 0x49]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rcx, [rbp - 9]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp - 0x41]
mov rax, qword [rcx]
call qword [rax + 0x10]
call r15
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
test edi, edi
js 0x140001311
lea rdx, [0x1400035c8]
call fcn.1400013a0
lea rcx, str.C:path_todownloaded_file.zip
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
test eax, eax
je 0x140001308
lea rdx, str.Zip___._n
jmp 0x14000134d
lea rdx, [0x140003640]
jmp 0x14000134d
lea rdx, [0x140003680]
jmp 0x14000134d
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, [0x140003570]
call fcn.1400013a0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 1
jmp 0x14000135d
lea rdx, [0x1400036d0]
call fcn.1400013a0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
mov r14, qword [rsp + 0xf8]
mov r12, qword [rsp + 0xf0]
mov rdi, qword [rsp + 0xe8]
mov rsi, qword [rsp + 0xe0]
mov r15, qword [rsp + 0xc0]
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.140001600
add rsp, 0xc8
pop rbx
pop rbp
ret