Function at 0x14006a520
Capabilities:
Move file

Disassembly:
push rbp
push rdi
push r14
sub rsp, 0x2a0
mov rax, qword [0x140193440]
xor rax, rsp
mov qword [rsp + 0x270], rax
cmp dword [rsp + 0x2e0], 0
mov rbp, r9
movzx eax, word [0x1401720b4]
mov rdi, r8
mov word [rsp + 0x40], ax
mov r14, rcx
movzx eax, byte [0x1401720b6]
mov byte [rsp + 0x42], al
jne 0x14006a57d
mov rdx, rcx
mov r8d, 1
lea rcx, str.Opening:__s:__d___7_Zip_
call fcn.14004f910
mov qword [rsp + 0x298], rbx
mov qword [rsp + 0x290], rsi
mov qword [rsp + 0x288], r12
mov qword [rsp + 0x280], r13
test r14, r14
je 0x14006a76d
test rdi, rdi
je 0x14006a76d
test rbp, rbp
je 0x14006a76d
cmp dword [rsp + 0x2e0], 0
mov byte [rsp + 0x40], 0x31
jne 0x14006a5d9
mov r8, rdi
lea rcx, str.Extracting:__s__From__s_
mov rdx, rbp
call fcn.14004f910
xor esi, esi
lea r12, [0x14015644e]
lea r13, [0x1401e5ad0]
nop dword [rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rax + rbp], 0
jne 0x14006a5f7
inc rax
lea rcx, [rsp + 0x50]
mov ebx, 0x104
mov rdx, rbp
cmp rax, rbx
cmovb rbx, rax
mov r8, rbx
call fcn.1401362c0
lea rcx, [rsp + 0x50]
mov byte [rsp + rbx + 0x4f], 0
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x14006a630
sub rax, 1
je 0x14006a655
nop
movzx ecx, byte [rsp + rax + 0x50]
cmp cl, 0x5c
je 0x14006a655
cmp cl, 0x2f
je 0x14006a655
sub rax, 1
jne 0x14006a640
cmp rax, 0x104
jae 0x14006a834
mov byte [rsp + rax + 0x50], 0
lea r9, str.__s___y_e___s___s_s
mov qword [rsp + 0x38], rdi
lea rax, [rsp + 0x40]
test esi, esi
lea rcx, [rsp + 0x160]
mov edx, 0x104
mov r8, 0xffffffffffffffff
cmovne rax, r12
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r13
call fcn.140004960
xor r9d, r9d
mov byte [rsp + 0x263], 0
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x160]
call fcn.14004db10
test eax, eax
jne 0x14006a820
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rdi + rbx], 0
jne 0x14006a6d4
test rbx, rbx
je 0x14006a6f9
movzx eax, byte [rdi + rbx]
cmp al, 0x5c
je 0x14006a716
cmp al, 0x2f
je 0x14006a6f4
sub rbx, 1
jne 0x14006a6e2
test rbx, rbx
jne 0x14006a716
mov r9, 0xffffffffffffffff
lea r8, [0x140156078]
mov edx, 0x104
lea rcx, [rsp + 0x50]
call fcn.1400e917c
lea r8, [rdi + rbx]
mov edx, 0x104
mov r9, 0xffffffffffffffff
lea rcx, [rsp + 0x50]
call fcn.1400e917c
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.14010ca20
test eax, eax
je 0x14006a74d
inc esi
cmp esi, 2
jl 0x14006a5f0
jmp 0x14006a752
cmp esi, 2
jl 0x14006a7ab
cmp dword [rsp + 0x2e0], 0
jne 0x14006a76d
lea rdx, [rsp + 0x50]
lea rcx, str.__7z.exe_did_not_extract__s
call fcn.14004f910
xor eax, eax
mov r13, qword [rsp + 0x280]
mov r12, qword [rsp + 0x288]
mov rsi, qword [rsp + 0x290]
mov rbx, qword [rsp + 0x298]
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.1400b1f80
add rsp, 0x2a0
pop r14
pop rdi
pop rbp
ret
lea rcx, [rsp + 0x50]
call fcn.140067e00
mov rcx, rbp
mov rbx, rax
call fcn.140067e00
mov r8d, 1
mov rdx, rax
mov rcx, rbx
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
mov esi, eax
test rdi, rdi
je 0x14006a7e4
mov rcx, rdi
call fcn.1400e9080
test rbx, rbx
je 0x14006a7f1
mov rcx, rbx
call fcn.1400e9080
test esi, esi
jne 0x14006a816
call fcn.140050120
mov r9, rax
lea rdx, [rsp + 0x50]
mov r8, rbp
lea rcx, str.__Could_not_rename__s_to__s:__s
call fcn.14004f910
jmp 0x14006a76d
mov eax, 1
jmp 0x14006a76f
call fcn.140050120
mov rdx, rax
lea rcx, str.__Could_not_launch_7z.exe:__s
jmp 0x14006a768
call fcn.1400b20a8
int3