Function at 0x14005df00
Capabilities:
Move file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x1402bf5c8]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rbx, rcx
xor r12d, r12d
mov qword [rbp + 0xf], r12
mov qword [rbp + 0x1f], r12
mov qword [rbp + 0x27], r12
mov rsi, qword [rcx + 0x10]
mov r14, rcx
cmp qword [rcx + 0x18], 8
jb 0x14005df55
mov r14, qword [rcx]
movabs r13, 0x7ffffffffffffffe
lea rcx, [rbp + 0xf]
cmp rsi, 8
jae 0x14005df7b
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp + 0x27], 7
jmp 0x14005dfba
mov rdi, rsi
or rdi, 7
cmp rdi, r13
cmova rdi, r13
lea rdx, [rdi + 1]
call fcn.140023c30
mov qword [rbp + 0xf], rax
lea r8, [rsi*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.1401cfe40
mov qword [rbp + 0x27], rdi
lea rcx, [rbp + 0xf]
cmp rdi, 8
cmovae rcx, qword [rbp + 0xf]
mov qword [rbp + 0x1f], rsi
xor edx, edx
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
mov edi, eax
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
jb 0x14005e00c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e007
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e52c
call fcn.1401a9a50
test edi, edi
jne 0x14005e304
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r15d, eax
mov qword [rbp + 0xf], r12
mov qword [rbp + 0x1f], r12
mov qword [rbp + 0x27], 7
mov word [rbp + 0xf], r12w
mov edx, 0x400
lea rcx, [rbp + 0xf]
call fcn.140023c30
mov rdx, rax
mov qword [rbp + 0x1f], 0x3ff
mov qword [rbp + 0x27], 0x3ff
movzx eax, r12w
mov rdi, rdx
mov ecx, 0x3ff
rep stosw word [rdi], ax
mov word [rdx + 0x7fe], r12w
mov qword [rbp + 0xf], rdx
mov qword [rbp + 7], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 7]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, r15d
xor edx, edx
mov ecx, 0x13ff
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
mov r8d, eax
mov qword [rbp - 0x49], r12
mov qword [rbp - 0x39], r12
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], r12w
mov rdx, qword [rbp + 7]
lea rcx, [rbp - 0x49]
call fcn.140018360
mov rcx, qword [rbp + 7]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
lea r14, [rbp - 0x49]
cmp qword [rbp - 0x31], 8
cmovae r14, qword [rbp - 0x49]
mov qword [rbp - 0x69], r12
mov qword [rbp - 0x59], r12
mov qword [rbp - 0x51], r12
mov rsi, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x14005e0f0
mov rbx, qword [rbx]
cmp rsi, 8
jae 0x14005e10b
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x69], xmm0
mov qword [rbp - 0x51], 7
lea rax, [rbp - 0x69]
jmp 0x14005e14e
mov rdi, rsi
or rdi, 7
cmp rdi, r13
cmova rdi, r13
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x69]
call fcn.140023c30
mov qword [rbp - 0x69], rax
lea r8, [rsi*2 + 2]
mov rdx, rbx
mov rcx, rax
call fcn.1401cfe40
mov qword [rbp - 0x51], rdi
lea rax, [rbp - 0x69]
cmp rdi, 8
cmovae rax, qword [rbp - 0x69]
mov qword [rbp - 0x59], rsi
lea rcx, [rbp + 0xf]
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
cmovae rcx, qword [rbp + 0xf]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rax
lea r9, str.Failed_to_register__s_to_delete_on_reboot._Error_code__d__s
mov r8, 0xffffffffffffffff
call fcn.14009de10
mov rdx, qword [rbp - 0x51]
cmp rdx, 8
jb 0x14005e1c5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x69]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e1c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e532
call fcn.1401a9a50
mov qword [rbp - 0x59], r12
mov qword [rbp - 0x51], 7
mov word [rbp - 0x69], r12w
mov rdx, qword [rbp - 0x31]
cmp rdx, 8
jb 0x14005e216
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e211
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e538
call fcn.1401a9a50
lea rdi, [rbp + 0xf]
cmp qword [rbp + 0x27], 8
cmovae rdi, qword [rbp + 0xf]
mov dword [rbp + 7], r12d
lea rax, [rbp + 7]
mov qword [rbp - 0x69], rax
lea rax, [rbp + 0xb]
mov qword [rbp - 0x61], rax
lea rax, [rbp - 0x49]
mov qword [rbp - 9], rax
mov qword [rbp - 0x49], r12
mov qword [rbp - 0x39], r12
mov qword [rbp - 0x31], 7
mov r8d, 0x29
lea rdx, str.FileCleanup::RegisterFileToDeleteOnReboot
lea rcx, [rbp - 0x49]
call fcn.140018360
nop
mov qword [rbp - 0x29], r12
mov qword [rbp - 0x19], r12
mov qword [rbp - 0x11], 7
mov r8d, 0x6a
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreInstallManFileCleanup.h
lea rcx, [rbp - 0x29]
call fcn.140018360
movaps xmm0, xmmword [rbp - 0x69]
movdqa xmmword [rbp - 0x69], xmm0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 3
lea r9, [rbp - 0x69]
mov r8d, 0x4a
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x29]
call fcn.1400b16b0
nop
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
jb 0x14005e4f9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e2fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e53e
call fcn.1401a9a50
jmp 0x14005e4f9
mov qword [rbp + 0xf], r12
mov qword [rbp + 0x1f], r12
mov qword [rbp + 0x27], 7
mov word [rbp + 0xf], r12w
mov edx, 0x400
lea rcx, [rbp + 0xf]
call fcn.140023c30
mov r8, rax
mov qword [rbp + 0x1f], 0x3ff
mov qword [rbp + 0x27], 0x3ff
movzx eax, r12w
mov rdi, r8
mov ecx, 0x3ff
rep stosw word [rdi], ax
mov word [r8 + 0x7fe], r12w
mov qword [rbp + 0xf], r8
mov qword [rbp - 0x69], r12
mov qword [rbp - 0x59], r12
mov qword [rbp - 0x51], r12
mov rsi, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x14005e36f
mov rbx, qword [rbx]
cmp rsi, 8
jae 0x14005e38a
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x69], xmm0
mov qword [rbp - 0x51], 7
lea rax, [rbp - 0x69]
jmp 0x14005e3d1
mov rdi, rsi
or rdi, 7
cmp rdi, r13
cmova rdi, r13
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x69]
call fcn.140023c30
mov qword [rbp - 0x69], rax
lea r8, [rsi*2 + 2]
mov rdx, rbx
mov rcx, rax
call fcn.1401cfe40
mov qword [rbp - 0x51], rdi
lea rax, [rbp - 0x69]
cmp rdi, 8
cmovae rax, qword [rbp - 0x69]
mov r8, qword [rbp + 0xf]
mov qword [rbp - 0x59], rsi
lea rcx, [rbp + 0xf]
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
cmovae rcx, r8
mov qword [rsp + 0x20], rax
lea r9, str.Registered_file_to_be_deleted_on_reboot:__s
mov r8, 0xffffffffffffffff
call fcn.14009de10
mov rdx, qword [rbp - 0x51]
cmp rdx, 8
jb 0x14005e43d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x69]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e438
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e526
call fcn.1401a9a50
lea rdi, [rbp + 0xf]
cmp qword [rbp + 0x27], 8
cmovae rdi, qword [rbp + 0xf]
mov dword [rbp + 7], r12d
lea rax, [rbp + 7]
mov qword [rbp - 0x69], rax
lea rax, [rbp + 0xb]
mov qword [rbp - 0x61], rax
lea rax, [rbp - 0x29]
mov qword [rbp - 1], rax
mov qword [rbp - 0x29], r12
mov qword [rbp - 0x19], r12
mov qword [rbp - 0x11], 7
mov r8d, 0x29
lea rdx, str.FileCleanup::RegisterFileToDeleteOnReboot
lea rcx, [rbp - 0x29]
call fcn.140018360
nop
mov qword [rbp - 0x49], r12
mov qword [rbp - 0x39], r12
mov qword [rbp - 0x31], 7
mov r8d, 0x6a
lea rdx, str.c:constructicon_buildsgfx_six23.19installNeomaInstallNeomaIN_Apps_srcCoreInstallManFileCleanup.h
lea rcx, [rbp - 0x49]
call fcn.140018360
movaps xmm0, xmmword [rbp - 0x69]
movdqa xmmword [rbp - 0x69], xmm0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], r12d
lea r9, [rbp - 0x69]
mov r8d, 0x4d
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.1400b16b0
nop
mov r8, qword [rbp + 0x27]
cmp r8, 8
jb 0x14005e4f9
inc r8
mov rdx, qword [rbp + 0xf]
lea rcx, [rbp + 0xf]
call fcn.140023c60
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1401a9a30
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401e3dbc
nop
call fcn.1401e3dbc
nop
call fcn.1401e3dbc
nop
call fcn.1401e3dbc
nop
call fcn.1401e3dbc
int3