Function at 0x140033760
Capabilities:
Check if file exists
Delete file

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
mov rax, qword [0x1403cd210]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov ebx, 1
mov ecx, ebx
call fcn.1400e2070
lea r15, str.CSIS::_CleanupTemporaries
lea r12, str.E:BT98e4b0b8_6261_4b66_a156_8e0ef62b3d71UBF_1CSIS_srcCSISUpgradeRemediation.cpp
xor esi, esi
test eax, eax
je 0x1400337d0
lea rax, str.Cleanup_remediation_temporaries
mov qword [rsp + 0x20], rax
mov r9d, 0x10e
mov r8, r15
mov rdx, r12
mov ecx, ebx
call fcn.14003209c
call fcn.1400334b4
mov r14d, 5
test al, al
jne 0x14003380e
mov ecx, r14d
call fcn.1400e2070
test eax, eax
je 0x14003380b
lea rax, str.Fail_cleanup_remediation_registry_hive
mov qword [rsp + 0x20], rax
mov r9d, 0x114
mov r8, r15
mov rdx, r12
mov ecx, r14d
call fcn.14003209c
mov bl, sil
mov qword [rbp - 0x11], rsi
mov qword [rbp - 9], 7
mov word [rbp - 0x21], si
lea rdx, str.McAfee_Remediation__Upgrade_
lea rcx, [rbp - 0x21]
call fcn.140031d84
nop
lea rcx, [rbp - 0x21]
call fcn.14003b0ec
mov dil, al
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x140033856
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
call fcn.1400331fc
test dil, dil
jne 0x14003388a
mov ecx, r14d
call fcn.1400e2070
test eax, eax
je 0x140033887
lea rax, str.Fail_cleanup_remediation_upgrade_task
mov qword [rsp + 0x20], rax
mov r9d, 0x11b
mov r8, r15
mov rdx, r12
mov ecx, r14d
call fcn.14003209c
mov bl, sil
call fcn.14003b498
test al, al
jne 0x1400338c2
mov ecx, r14d
call fcn.1400e2070
test eax, eax
je 0x1400338bf
lea rax, str.Fail_cleanup_remediation_prepare_task
mov qword [rsp + 0x20], rax
mov r9d, 0x122
mov r8, r15
mov rdx, r12
mov ecx, r14d
call fcn.14003209c
mov bl, sil
mov qword [rbp + 0xf], rsi
mov qword [rbp + 0x17], 7
mov word [rbp - 1], si
lea rcx, [rbp - 1]
call fcn.14004ae80
test al, al
je 0x1400339a0
lea rax, str.userdata.dat
mov qword [rbp - 0x21], rax
lea rax, str.userdata.cab
mov qword [rbp - 0x19], rax
lea rdi, [rbp - 0x21]
mov r8, qword [rdi]
lea rdx, [rbp - 1]
lea rcx, [rbp + 0x1f]
call fcn.1400350cc
nop
lea rcx, [rbp + 0x1f]
cmp qword [rbp + 0x37], 8
cmovae rcx, qword [rbp + 0x1f]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x140033972
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x29], eax
cmp eax, 2
je 0x140033972
mov bl, sil
mov ecx, r14d
call fcn.1400e2070
test eax, eax
je 0x140033972
lea rax, [rbp - 0x29]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
lea rax, str.Unable_to_delete_temporary_file:__ls__error:__d
mov qword [rsp + 0x20], rax
mov r9d, 0x137
mov r8, r15
mov rdx, r12
mov ecx, r14d
call fcn.14003519c
nop
mov rdx, qword [rbp + 0x37]
cmp rdx, 8
jb 0x14003398d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f]
call fcn.1400331fc
add rdi, 8
lea rax, [rbp - 0x11]
cmp rdi, rax
jne 0x1400338fd
jmp 0x1400339cf
mov ecx, r14d
call fcn.1400e2070
test eax, eax
je 0x1400339cc
lea rax, str.Unable_to_get_executable_path
mov qword [rsp + 0x20], rax
mov r9d, 0x13e
mov r8, r15
mov rdx, r12
mov ecx, r14d
call fcn.14003209c
mov bl, sil
mov rdx, qword [rbp + 0x17]
cmp rdx, 8
jb 0x1400339ea
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 1]
call fcn.1400331fc
mov al, bl
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.140119fe0
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret