Function at 0x44d8f4
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x24c
cmp dword [ebp + 0x18], 0
mov byte [ebp - 0x221], 0
mov word [ebp - 0x223], 0x5c23
mov ebx, dword [ebp + 0xc]
jne 0x44d930
mov dword [esp + 8], ebx
mov eax, dword [ebp + 8]
mov dword [esp], str.Opening:__s:__d___7_Zip_
mov dword [esp + 4], eax
call fcn.0043d9e0
cmp dword [ebp + 0x10], 0
sete al
cmp dword [ebp + 0x14], 0
sete dl
or al, dl
jne 0x44da63
cmp dword [ebp + 8], 0
je 0x44da63
add ebx, 0x30
cmp dword [ebp + 0x18], 0
mov byte [ebp - 0x223], bl
jne 0x44d979
mov eax, dword [ebp + 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x14]
mov dword [esp], str.Extracting:__s__From__s_
mov dword [esp + 4], eax
call fcn.0043d9e0
xor ecx, ecx
lea ebx, [ebp - 0x11c]
mov dword [ebp - 0x22c], ecx
mov eax, dword [ebp + 0x14]
mov edi, ebx
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov ecx, 0x104
mov esi, dword [ebp + 0x14]
lea edx, [eax + 1]
cmp edx, ecx
cmovbe ecx, edx
mov edx, 0x103
rep movsb byte es:[edi], byte [esi]
cmovae eax, edx
mov byte [ebp + eax - 0x11c], 0
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
dec eax
test eax, eax
je 0x44d9d0
mov dl, byte [eax + ebx]
cmp dl, 0x5c
je 0x44d9d0
cmp dl, 0x2f
jne 0x44d9be
cmp dword [ebp - 0x22c], 0
mov byte [ebp + eax - 0x11c], 0
mov eax, 0x4b1885
jne 0x44d9ec
lea eax, [ebp - 0x223]
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x18], eax
lea esi, [ebp - 0x220]
mov dword [esp + 0x1c], ecx
mov eax, dword [ebp + 8]
mov dword [esp + 0x10], 0x527f40
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.__s___y_e___s___s_s
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x104
mov dword [esp], esi
call dword [sym.imp.msvcrt.dll__snprintf_s]
xor edx, edx
mov byte [ebp - 0x11d], 0
mov dword [esp + 0xc], edx
mov dword [esp + 8], edx
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.0043c721
test eax, eax
je 0x44da6a
call fcn.0043df77
mov dword [esp], str.__Could_not_launch_7z.exe:__s
mov dword [esp + 4], eax
call fcn.0043d9e0
xor eax, eax
jmp 0x44db95
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov esi, eax
test esi, esi
je 0x44da8c
mov eax, dword [ebp + 0x10]
mov al, byte [eax + esi]
cmp al, 0x5c
je 0x44dab3
cmp al, 0x2f
je 0x44dab3
dec esi
jmp 0x44da77
lea eax, [ebp - 0x11c]
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], 0x4b1b52
mov dword [esp + 4], 0x104
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll_strncat_s]
mov dword [esp + 0xc], 0xffffffff
add esi, dword [ebp + 0x10]
mov dword [esp + 8], esi
mov dword [esp + 4], 0x104
mov dword [esp], ebx
call dword [sym.imp.msvcrt.dll_strncat_s]
xor eax, eax
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [sym.imp.msvcrt.dll__access]
test eax, eax
je 0x44db18
cmp dword [ebp - 0x22c], 0
jne 0x44dafe
mov dword [ebp - 0x22c], 1
jmp 0x44d987
cmp dword [ebp + 0x18], 0
jne 0x44da63
mov dword [esp + 4], ebx
mov dword [esp], str.__7z.exe_did_not_extract__s
jmp 0x44da5e
mov eax, ebx
call fcn.0044b6c5
mov esi, eax
mov eax, dword [ebp + 0x14]
call fcn.0044b6c5
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov dword [ebp - 0x22c], eax
mov dword [esp], esi
call dword [sym.imp.KERNEL32.DLL_MoveFileExW]
mov edx, dword [ebp - 0x22c]
sub esp, 0xc
mov edi, eax
test edx, edx
je 0x44db5b
mov dword [esp], edx
call sub.msvcrt.dll_free
test esi, esi
je 0x44db67
mov dword [esp], esi
call sub.msvcrt.dll_free
mov eax, 1
test edi, edi
jne 0x44db95
call fcn.0043df77
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp], str.__Could_not_rename__s_to__s:__s
call fcn.0043d9e0
jmp 0x44da63
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret