Function at 0x140005760
Capabilities:
Copy file
Create process on windows
Read .ini file

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0xf98
mov rax, qword [0x140045010]
xor rax, rsp
mov qword [rsp + 0xf90], rax
xor edi, edi
lea r14, [rsp + 0xd80]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.140015fa0
lea rsi, [0x140047f30]
mov r8d, 0x104
mov rcx, r14
mov rdx, rsi
call fcn.140022450
lea rbx, [rsp + 0xb70]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140015fa0
mov r8d, 0x104
mov rcx, rbx
mov rdx, rsi
call fcn.140022450
lea rdx, str.updater.ini
mov rcx, rbx
call fcn.140010040
test eax, eax
je 0x14000591d
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x105
lea rcx, str.PostUpdateWin
lea rdx, str.ExeRelPath
xor edi, edi
lea r9, [rsp + 0x960]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x14000591d
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x105
lea rcx, str.PostUpdateWin
lea rdx, str.ExeArg
xor edi, edi
lea r9, [rsp + 0x750]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x14000591d
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0xa
lea rcx, str.PostUpdateWin
lea rdx, str.ExeAsync
lea r8, [0x14003d91c]
lea r9, [rsp + 0x730]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x14000591b
lea rdx, [0x14003d9ec]
lea rcx, [rsp + 0x960]
call fcn.140016450
test rax, rax
jne 0x14000591b
lea rdx, [0x14003d9e6]
lea rcx, [rsp + 0x960]
call fcn.140016450
test rax, rax
jne 0x14000591b
lea rdx, [0x14003d916]
lea rcx, [rsp + 0x960]
call fcn.140016450
test rax, rax
jne 0x14000591b
lea rdx, [0x14003d926]
lea rcx, [rsp + 0x960]
call fcn.140016450
test rax, rax
jne 0x14000591b
mov eax, dword [rsp + 0x960]
add eax, 0xffffffd2
cmp ax, 0x2e
ja 0x14000593c
movzx eax, ax
movabs rcx, 0x400000000003
bt rcx, rax
jae 0x14000593c
xor edi, edi
mov rcx, qword [rsp + 0xf90]
xor rcx, rsp
call fcn.140023e80
mov eax, edi
add rsp, 0xf98
pop rbx
pop rdi
pop rsi
pop r14
ret
xor edi, edi
lea rsi, [rsp + 0x520]
mov r8d, 0x20a
mov rcx, rsi
xor edx, edx
call fcn.140015fa0
lea rdx, [0x140047f30]
mov r8d, 0x104
mov rcx, rsi
call fcn.140022450
lea rdx, [rsp + 0x960]
mov rcx, rsi
call fcn.140010040
test eax, eax
je 0x14000591d
lea rcx, [rsp + 0x520]
call fcn.14000edb0
test al, al
je 0x14000591b
cmp byte [0x140047f28], 0
je 0x1400059bb
lea rcx, [0x140047f30]
lea rdx, [rsp + 0x520]
mov r8d, 1
call fcn.14000e130
test eax, eax
je 0x14000591b
lea r8, str.uninstall.update
lea rcx, [rsp + 0x310]
lea rdx, [rsp + 0x520]
call fcn.14000f0e0
test eax, eax
je 0x14000591b
lea rcx, [rsp + 0x100]
mov r8d, 0x20a
xor edx, edx
call fcn.140015fa0
cmp byte [0x140047f29], 1
jne 0x140005c0f
lea rcx, [0x1400476f0]
lea rdx, [0x14003d618]
lea r8, [rsp + 0x100]
call fcn.14000f300
test eax, eax
je 0x14000591b
xorps xmm0, xmm0
movups xmmword [rsp + 0xec], xmm0
movaps xmmword [rsp + 0xe0], xmm0
lea rdx, str.argv0ignored
lea rsi, [rsp + 0xe0]
mov r8d, 0xd
mov rcx, rsi
call fcn.140022450
lea rcx, [rsp + 0x750]
call fcn.140021f88
mov rdi, rax
mov rcx, rsi
call fcn.140021f88
mov rbx, rax
add rbx, rdi
lea rcx, [rbx + rbx]
add rcx, 2
call fcn.1400215bc
test rax, rax
je 0x14000591b
mov rdi, rax
lea rdx, [rsp + 0xe0]
mov rcx, rax
mov r8, rbx
call fcn.140022450
lea rdx, [rsp + 0x750]
mov rcx, rdi
call fcn.140021f08
cmp byte [0x140047f28], 0
je 0x140005bc4
xor ebx, ebx
lea rcx, [rsp + 0x100]
lea rdx, [rsp + 0x310]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xd0], 0
mov dword [rsp + 0x70], 0x68
lea rax, [0x14003da6a]
mov qword [rsp + 0x80], rax
movaps xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x50]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea rcx, [rsp + 0x520]
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov esi, eax
mov rcx, rdi
call fcn.1400210e4
test esi, esi
setne dil
je 0x14000591d
test bl, bl
jne 0x140005baa
mov rcx, qword [rsp + 0x50]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x50]
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rsi
mov rcx, qword [rsp + 0x58]
call rsi
jmp 0x14000591d
lea rdx, str.false
lea rcx, [rsp + 0x730]
mov r8d, 6
call fcn.14001f1fc
test eax, eax
je 0x140005abb
lea rdx, [0x14003d9da]
lea rcx, [rsp + 0x730]
mov r8d, 2
call fcn.14001f1fc
mov bl, 1
test eax, eax
jne 0x140005abd
jmp 0x140005abb
lea rdx, [0x1400476f0]
lea rsi, [rsp + 0x100]
mov r8d, 0x104
mov rcx, rsi
call fcn.140022450
lea rdx, [0x14003d60c]
mov rcx, rsi
call fcn.140010040
test eax, eax
jne 0x140005a24
jmp 0x14000591b