Function at 0x140031e7e
Capabilities:
Create thread
Set console window title

Disassembly:
jmp 0x140065ea0
push rbp
push rdi
sub rsp, 0x578
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0xf2
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x1400b4040]
xor rax, rbp
mov qword [rbp + 0x530], rax
lea rcx, [0x1400bf120]
call fcn.1400324d2
nop
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x140031992]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x1400325ae]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
lea rcx, [0x14009f31b]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
nop
movzx r8d, byte [rbp + 0x304]
lea rdx, str.System
lea rcx, [rbp + 0x2e8]
call fcn.140031dc0
mov rcx, rax
call fcn.140031537
movzx r8d, byte [rbp + 0x2c4]
mov rdx, rax
lea rcx, [rbp + 0x298]
call fcn.1400324a5
mov rcx, rax
call fcn.1400324f5
mov qword [rbp + 8], rax
movzx r8d, byte [rbp + 0x384]
lea rdx, str._C:UsersAdministratorsUpdate.exe____processStart_Update.exe
lea rcx, [rbp + 0x330]
call fcn.140031cda
mov rcx, rax
call fcn.140032536
mov qword [rbp + 0x28], rax
movzx r8d, byte [rbp + 0x414]
lea rdx, str.System
lea rcx, [rbp + 0x3f8]
call fcn.1400318fc
mov rcx, rax
call fcn.140031c7b
movzx r8d, byte [rbp + 0x3d4]
mov rdx, rax
lea rcx, [rbp + 0x3a8]
call fcn.140032356
mov rcx, rax
call fcn.140031d84
mov qword [rbp + 0x48], rax
mov byte [rbp + 0x68], 2
mov byte [rbp + 0x69], 0
mov byte [rbp + 0x6a], 0
mov byte [rbp + 0x6b], 0
mov byte [rbp + 0x6c], 0
mov byte [rbp + 0x6d], 0
mov byte [rbp + 0x6e], 0
mov byte [rbp + 0x6f], 0
mov byte [rbp + 0x70], 0
mov byte [rbp + 0x71], 0
mov byte [rbp + 0x72], 0
mov byte [rbp + 0x73], 0
mov rcx, qword [rbp + 8]
call fcn.140032383
movzx eax, al
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 8]
call fcn.1400325cc
movzx eax, al
mov r8d, 0xc
lea rdx, [rbp + 0x68]
mov rcx, qword [rbp + 0x48]
call fcn.140031780
movzx eax, al
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x1400324ff]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
movzx r8d, byte [rbp + 0x4b4]
lea rdx, str.Update.exe
lea rcx, [rbp + 0x488]
call fcn.1400313ac
mov rcx, rax
call fcn.140031b27
movzx r8d, byte [rbp + 0x464]
mov rdx, rax
lea rcx, [rbp + 0x438]
call fcn.14003146a
mov rcx, rax
call fcn.1400325f9
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.1400319ec
nop
lea rcx, [rbp + 0xd8]
call fcn.1400324b9
nop
lea rax, [rbp + 0x4d8]
mov qword [rbp + 0x518], rax
lea rdx, [rbp + 0x98]
mov rcx, qword [rbp + 0x518]
call fcn.14003133e
mov qword [rbp + 0x528], rax
mov rcx, qword [rbp + 0x528]
call fcn.1400317c6
nop
call fcn.1400311c7
nop
call fcn.140031c1c
nop
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x140031b2c]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x140031672]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x1400319b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
call qword [sym.imp.KERNEL32.dll_FreeConsole]
nop
xor eax, eax
cmp eax, 1
je 0x1400661bf
call fcn.14003137f
nop
call fcn.1400316d6
nop
call fcn.1400312c1
nop
call fcn.1400311c7
nop
call fcn.140031c1c
nop
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x14006618c
lea rcx, [rbp + 0xd8]
call fcn.140031456
nop
lea rcx, [rbp + 0x98]
call fcn.140031456
nop
lea rcx, [rbp - 0x30]
lea rdx, [0x14009e370]
call fcn.1400321b2
mov rcx, qword [rbp + 0x530]
xor rcx, rbp
call fcn.140031aa0
lea rsp, [rbp + 0x548]
pop rdi
pop rbp
ret