Function at 0x140007a7c
Capabilities:
Accept command line arguments
Create process on windows
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
mov eax, 0x1c80
call fcn.140014400
sub rsp, rax
mov rax, qword [0x14001b290]
xor rax, rsp
mov qword [rsp + 0x1c70], rax
mov rbx, rcx
mov cl, 1
call fcn.140006630
lea rcx, [0x14001e830]
xor r8d, r8d
mov rdx, rbx
call fcn.140006430
lea rdx, str.uninstall.lng
lea rcx, [0x14001e7f0]
call fcn.140006174
xor ecx, ecx
call qword [sym.imp.ole32.dll_OleInitialize]
lea rcx, str.riched32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, qword [0x14001e7d8]
lea rdx, str.RARICON
mov r12, rax
call qword [sym.imp.USER32.dll_LoadIconW]
xor r13d, r13d
mov qword [0x140021998], rax
cmp rax, r13
jne 0x140007b3d
mov rcx, qword [0x14001e7d0]
cmp rcx, qword [0x14001e7d8]
je 0x140007b3d
lea rdx, str.RARICON
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [0x140021998], rax
mov ecx, 0xfffffff4
call fcn.140007f24
xor r9d, r9d
xor r8d, r8d
mov ecx, eax
lea rax, str.MS_Shell_Dlg
xor edx, edx
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x60], r13d
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x50], r13d
mov dword [rsp + 0x48], r13d
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x2bc
call qword [sym.imp.GDI32.dll_CreateFontW]
lea rdx, [rsp + 0x70]
lea rcx, str.sfxcmd
mov r8d, 0x400
mov esi, r13d
mov qword [0x140021990], rax
mov bpl, r13b
mov word [rsp + 0x70], r13w
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov rdi, r13
cmp word [rsp + 0x70], r13w
je 0x140007c16
lea rax, [rsp + 0x70]
mov rbx, r13
cmp word [rax], 0x2d
je 0x140007bdd
cmp word [rax], 0x2f
jne 0x140007bfb
movzx ecx, word [rsp + rbx + 0x72]
call fcn.140006850
cmp eax, 0x53
jne 0x140007bfb
movzx ecx, word [rsp + rbx + 0x74]
call fcn.14000a36c
cmp eax, r13d
je 0x140007c0f
inc rdi
lea rbx, [rdi + rdi]
lea rax, [rsp + rbx + 0x70]
cmp word [rax], r13w
je 0x140007c16
jmp 0x140007bd1
mov byte [0x1400219a0], 1
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [0x140016f9c]
mov rcx, rax
call fcn.14000903c
mov rdi, rax
cmp rax, r13
je 0x140007ebe
add rdi, 2
lea rdx, str.setup
mov r8d, 5
mov rcx, rdi
call fcn.1400067c0
cmp eax, r13d
jne 0x140007c5d
mov bpl, 1
jmp 0x140007d8a
lea rdx, [0x140016f88]
mov r8d, 3
mov rcx, rdi
call fcn.1400067c0
cmp eax, r13d
jne 0x140007c83
mov byte [0x1400219a1], 1
jmp 0x140007d8a
movzx ecx, word [rdi]
call fcn.140006850
cmp eax, 0x53
jne 0x140007cac
movzx ecx, word [rdi + 2]
call fcn.14000658c
cmp al, r13b
jne 0x140007cac
mov byte [0x1400219a0], 1
dec esi
jmp 0x140007d8a
lea rdx, str.wait
mov r8d, 4
mov rcx, rdi
call fcn.1400067c0
cmp eax, r13d
jne 0x140007cd6
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140007d8a
lea rdx, str.warning
mov r8d, 7
mov rcx, rdi
call fcn.1400067c0
cmp eax, r13d
jne 0x140007d8a
lea rdx, [rsp + 0xc70]
mov r8d, 0x800
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov ecx, 0x13f3
call fcn.140006370
lea r8, [0x140016f60]
lea rcx, [rsp + 0x870]
mov r9, rax
mov edx, 0x200
call fcn.140004c64
mov ecx, 0x13f4
call fcn.140006370
lea rcx, [rsp + 0x870]
mov rbx, rax
call fcn.140008cdc
lea r9, [rsp + 0xc70]
lea rcx, [rsp + rax*2 + 0x870]
mov r8, rbx
mov edx, 0x200
call fcn.140004c64
mov ecx, 0x13f2
call fcn.140006370
lea rdx, [rsp + 0x870]
mov r9d, 0x10040
mov r8, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rdx, [0x140016f9c]
mov rcx, rdi
inc esi
call fcn.14000903c
mov rdi, rax
cmp rax, r13
jne 0x140007c37
cmp bpl, r13b
je 0x140007eb9
call fcn.140006e08
mov rcx, qword [0x14001e7d8]
lea r9, [0x14000781c]
lea rdx, str.SETUPDLG
xor r8d, r8d
mov bl, al
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_DialogBoxParamW]
cmp rax, r13
je 0x140007eb9
call fcn.140006d34
mov r11b, byte [0x1400219a1]
cmp r11b, r13b
jne 0x140007e1e
mov rcx, qword [0x14001e7d8]
lea r9, [0x14000690c]
lea rdx, str.DONEDLG
xor r8d, r8d
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov r11b, byte [0x1400219a1]
cmp bl, r13b
je 0x140007e63
cmp byte [0x1400219a0], r13b
jne 0x140007e63
cmp r11b, r13b
jne 0x140007e63
mov ecx, 0x13ed
call fcn.140006370
mov ecx, 0x140f
mov rbx, rax
call fcn.140006370
mov r9d, 0x10040
mov r8, rbx
xor ecx, ecx
mov rdx, rax
call qword [sym.imp.USER32.dll_MessageBoxW]
mov r11b, byte [0x1400219a1]
cmp word [0x140020990], r13w
je 0x140007eb9
cmp byte [0x1400219a0], r13b
jne 0x140007eb9
cmp r11b, r13b
jne 0x140007eb9
lea rcx, [0x140020990]
call fcn.140001c24
cmp al, r13b
je 0x140007eb9
lea rax, [0x140015a60]
lea r8, [0x140020990]
lea rdx, str.open
xor r9d, r9d
xor ecx, ecx
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp esi, r13d
jne 0x140007ec3
call fcn.1400071b4
cmp r12, r13
je 0x140007ed1
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
call qword [sym.imp.ole32.dll_OleUninitialize]
mov rcx, qword [0x140021990]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [0x140021998]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [0x1400219a4]
mov rcx, qword [rsp + 0x1c70]
xor rcx, rsp
call fcn.140008610
lea r11, [rsp + 0x1c80]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r13
pop r12
pop rdi
ret