Function at 0x140069c20
Capabilities:
Move file

Disassembly:
push rbp
push rdi
push r14
sub rsp, 0x2a0
mov rax, qword [0x140193440]
xor rax, rsp
mov qword [rsp + 0x270], rax
cmp dword [rsp + 0x2e0], 0
mov rbp, r9
movzx eax, word [0x140172194]
mov rdi, r8
mov word [rsp + 0x40], ax
mov r14, rcx
movzx eax, byte [0x140172196]
mov byte [rsp + 0x42], al
jne 0x140069c7d
mov rdx, rcx
mov r8d, 1
lea rcx, str.Opening:__s:__d___7_Zip_
call fcn.14004f2f0
mov qword [rsp + 0x298], rbx
mov qword [rsp + 0x290], rsi
mov qword [rsp + 0x288], r12
mov qword [rsp + 0x280], r13
test r14, r14
je 0x140069e6d
test rdi, rdi
je 0x140069e6d
test rbp, rbp
je 0x140069e6d
cmp dword [rsp + 0x2e0], 0
mov byte [rsp + 0x40], 0x31
jne 0x140069cd9
mov r8, rdi
lea rcx, str.Extracting:__s__From__s_
mov rdx, rbp
call fcn.14004f2f0
xor esi, esi
lea r12, [0x1401564ce]
lea r13, [0x1401e5a80]
nop dword [rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rax + rbp], 0
jne 0x140069cf7
inc rax
lea rcx, [rsp + 0x50]
mov ebx, 0x104
mov rdx, rbp
cmp rax, rbx
cmovb rbx, rax
mov r8, rbx
call fcn.140135ea0
lea rcx, [rsp + 0x50]
mov byte [rsp + rbx + 0x4f], 0
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140069d30
sub rax, 1
je 0x140069d55
nop
movzx ecx, byte [rsp + rax + 0x50]
cmp cl, 0x5c
je 0x140069d55
cmp cl, 0x2f
je 0x140069d55
sub rax, 1
jne 0x140069d40
cmp rax, 0x104
jae 0x140069f34
mov byte [rsp + rax + 0x50], 0
lea r9, str.__s___y_e___s___s_s
mov qword [rsp + 0x38], rdi
lea rax, [rsp + 0x40]
test esi, esi
lea rcx, [rsp + 0x160]
mov edx, 0x104
mov r8, 0xffffffffffffffff
cmovne rax, r12
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r13
call fcn.140004fd0
xor r9d, r9d
mov byte [rsp + 0x263], 0
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x160]
call fcn.14004d560
test eax, eax
jne 0x140069f20
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rdi + rbx], 0
jne 0x140069dd4
test rbx, rbx
je 0x140069df9
movzx eax, byte [rdi + rbx]
cmp al, 0x5c
je 0x140069e16
cmp al, 0x2f
je 0x140069df4
sub rbx, 1
jne 0x140069de2
test rbx, rbx
jne 0x140069e16
mov r9, 0xffffffffffffffff
lea r8, [0x1401560f8]
mov edx, 0x104
lea rcx, [rsp + 0x50]
call fcn.1400e8d6c
lea r8, [rdi + rbx]
mov edx, 0x104
mov r9, 0xffffffffffffffff
lea rcx, [rsp + 0x50]
call fcn.1400e8d6c
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.14010c610
test eax, eax
je 0x140069e4d
inc esi
cmp esi, 2
jl 0x140069cf0
jmp 0x140069e52
cmp esi, 2
jl 0x140069eab
cmp dword [rsp + 0x2e0], 0
jne 0x140069e6d
lea rdx, [rsp + 0x50]
lea rcx, str.__7z.exe_did_not_extract__s
call fcn.14004f2f0
xor eax, eax
mov r13, qword [rsp + 0x280]
mov r12, qword [rsp + 0x288]
mov rsi, qword [rsp + 0x290]
mov rbx, qword [rsp + 0x298]
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.1400b2a30
add rsp, 0x2a0
pop r14
pop rdi
pop rbp
ret
lea rcx, [rsp + 0x50]
call fcn.140067550
mov rcx, rbp
mov rbx, rax
call fcn.140067550
mov r8d, 1
mov rdx, rax
mov rcx, rbx
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
mov esi, eax
test rdi, rdi
je 0x140069ee4
mov rcx, rdi
call fcn.1400e8c70
test rbx, rbx
je 0x140069ef1
mov rcx, rbx
call fcn.1400e8c70
test esi, esi
jne 0x140069f16
call fcn.14004fba0
mov r9, rax
lea rdx, [rsp + 0x50]
mov r8, rbp
lea rcx, str.__Could_not_rename__s_to__s:__s
call fcn.14004f2f0
jmp 0x140069e6d
mov eax, 1
jmp 0x140069e6f
call fcn.14004fba0
mov rdx, rax
lea rcx, str.__Could_not_launch_7z.exe:__s
jmp 0x140069e68
call fcn.1400b2b58
int3