Function at 0x140055200
Capabilities:
Move file

Disassembly:
push rbp
push rdi
push r14
sub rsp, 0x2a0
mov rax, qword [0x140106438]
xor rax, rsp
mov qword [rsp + 0x270], rax
cmp dword [rsp + 0x2e0], 0
mov rbp, r9
movzx eax, word [0x1400f2594]
mov rdi, r8
mov word [rsp + 0x40], ax
mov r14, rcx
movzx eax, byte [0x1400f2596]
mov byte [rsp + 0x42], al
jne 0x14005525d
mov rdx, rcx
mov r8d, 1
lea rcx, str.Opening:__s:__d___7_Zip_
call fcn.140041aa0
mov qword [rsp + 0x298], rbx
mov qword [rsp + 0x290], rsi
mov qword [rsp + 0x288], r12
mov qword [rsp + 0x280], r13
test r14, r14
je 0x14005544d
test rdi, rdi
je 0x14005544d
test rbp, rbp
je 0x14005544d
cmp dword [rsp + 0x2e0], 0
mov byte [rsp + 0x40], 0x31
jne 0x1400552b9
mov r8, rdi
lea rcx, str.Extracting:__s__From__s_
mov rdx, rbp
call fcn.140041aa0
xor esi, esi
lea r12, [0x1400d756a]
lea r13, [0x140157f60]
nop dword [rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rax + rbp], 0
jne 0x1400552d7
inc rax
lea rcx, [rsp + 0x50]
mov ebx, 0x104
mov rdx, rbp
cmp rax, rbx
cmovb rbx, rax
mov r8, rbx
call fcn.140093550
lea rcx, [rsp + 0x50]
mov byte [rsp + rbx + 0x4f], 0
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140055310
sub rax, 1
je 0x140055335
nop
movzx ecx, byte [rsp + rax + 0x50]
cmp cl, 0x5c
je 0x140055335
cmp cl, 0x2f
je 0x140055335
sub rax, 1
jne 0x140055320
cmp rax, 0x104
jae 0x140055514
mov byte [rsp + rax + 0x50], 0
lea r9, str.__s___y_e___s___s_s
mov qword [rsp + 0x38], rdi
lea rax, [rsp + 0x40]
test esi, esi
lea rcx, [rsp + 0x160]
mov edx, 0x104
mov r8, 0xffffffffffffffff
cmovne rax, r12
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r13
call fcn.1400034e0
xor r9d, r9d
mov byte [rsp + 0x263], 0
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x160]
call fcn.1400404c0
test eax, eax
jne 0x140055500
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rdi + rbx], 0
jne 0x1400553b4
test rbx, rbx
je 0x1400553d9
movzx eax, byte [rdi + rbx]
cmp al, 0x5c
je 0x1400553f6
cmp al, 0x2f
je 0x1400553d4
sub rbx, 1
jne 0x1400553c2
test rbx, rbx
jne 0x1400553f6
mov r9, 0xffffffffffffffff
lea r8, [0x1400d72e8]
mov edx, 0x104
lea rcx, [rsp + 0x50]
call fcn.14009b5bc
lea r8, [rdi + rbx]
mov edx, 0x104
mov r9, 0xffffffffffffffff
lea rcx, [rsp + 0x50]
call fcn.14009b5bc
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400a7960
test eax, eax
je 0x14005542d
inc esi
cmp esi, 2
jl 0x1400552d0
jmp 0x140055432
cmp esi, 2
jl 0x14005548b
cmp dword [rsp + 0x2e0], 0
jne 0x14005544d
lea rdx, [rsp + 0x50]
lea rcx, str.__7z.exe_did_not_extract__s
call fcn.140041aa0
xor eax, eax
mov r13, qword [rsp + 0x280]
mov r12, qword [rsp + 0x288]
mov rsi, qword [rsp + 0x290]
mov rbx, qword [rsp + 0x298]
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.140092060
add rsp, 0x2a0
pop r14
pop rdi
pop rbp
ret
lea rcx, [rsp + 0x50]
call fcn.140003550
mov rcx, rbp
mov rbx, rax
call fcn.140003550
mov r8d, 1
mov rdx, rax
mov rcx, rbx
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
mov esi, eax
test rdi, rdi
je 0x1400554c4
mov rcx, rdi
call fcn.14009b5a0
test rbx, rbx
je 0x1400554d1
mov rcx, rbx
call fcn.14009b5a0
test esi, esi
jne 0x1400554f6
call fcn.140041e50
mov r9, rax
lea rdx, [rsp + 0x50]
mov r8, rbp
lea rcx, str.__Could_not_rename__s_to__s:__s
call fcn.140041aa0
jmp 0x14005544d
mov eax, 1
jmp 0x14005544f
call fcn.140041e50
mov rdx, rax
lea rcx, str.__Could_not_launch_7z.exe:__s
jmp 0x140055448
call fcn.140092188
int3