Function at 0x140005c00
Capabilities:
Create process on windows
Self delete
Write and execute a file
Write file on windows

Disassembly:
push rbx
push rbp
push rdi
sub rsp, 0x3d0
mov rax, qword [0x140042010]
xor rax, rsp
mov qword [rsp + 0x3c0], rax
mov rbx, rdx
mov rdi, rcx
xor ebp, ebp
lea rcx, [rsp + 0x60]
xor edx, edx
mov qword [rsp + 0x50], rbp
mov r8d, 0x100
call fcn.140013cf0
xor edx, edx
lea rcx, [rsp + 0x160]
mov r8d, 0x258
call fcn.140013cf0
test rdi, rdi
je 0x140005f3e
cmp dword [rdi], 0xf00a000d
jne 0x140005f3e
test rbx, rbx
jne 0x140005c78
lea rbx, [rdi + 4]
test rbx, rbx
je 0x140005ee7
cmp byte [rbx], bpl
je 0x140005ee7
mov r9, rbx
lea r8, str._s.swap.tmp
mov edx, 0x100
lea rcx, [rsp + 0x60]
call fcn.1400017b0
lea r8, [0x14003bd4c]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.140018260
cmp qword [rsp + 0x50], rbp
jne 0x140005d12
mov qword [rsp + 0x38], rbx
lea rax, str.file_open_failed__s_n
mov qword [rsp + 0x30], rax
lea r9, str.E:02_Sourcelm.signal.soft.git01_ProjectPE0000workcomplat_srcmodiniini.c
mov rbx, 0xffffffffffffffff
mov dword [rsp + 0x28], 0xa0a
lea rax, str.ini_save_file
mov dword [0x140044b9c], ebp
lea r8, [0x140044b90]
mov dword [0x140044ba0], 1
mov edx, ebx
mov qword [rsp + 0x20], rax
lea ecx, [rbx + 4]
call sym.Launcher.exe_elog_fmt
mov eax, ebx
jmp 0x140005dd5
mov ecx, 0x400000
mov qword [rsp + 0x400], rsi
call fcn.14001eadc
mov rsi, rax
test rax, rax
je 0x140005e81
xor edx, edx
mov r8d, 0x400000
mov rcx, rax
call fcn.140013cf0
mov rdx, rsi
mov rcx, rdi
call fcn.140005980
mov r9, qword [rsp + 0x50]
mov edx, 1
movsxd rdi, eax
mov rcx, rsi
mov r8, rdi
call fcn.140018120
mov rcx, qword [rsp + 0x50]
mov rsi, rax
call fcn.140014e38
cmp esi, edi
je 0x140005df0
mov dword [rsp + 0x40], esi
lea rax, str.save_file_failed__should_write__d__but__d_n
mov dword [rsp + 0x38], edi
lea r9, str.E:02_Sourcelm.signal.soft.git01_ProjectPE0000workcomplat_srcmodiniini.c
mov qword [rsp + 0x30], rax
lea r8, [0x140044dc0]
mov rbx, 0xffffffffffffffff
mov dword [rsp + 0x28], 0xa2a
lea rax, str.ini_save_file
mov dword [0x140044dcc], ebp
mov edx, ebx
mov dword [0x140044dd0], 1
mov qword [rsp + 0x20], rax
lea ecx, [rbx + 4]
call sym.Launcher.exe_elog_fmt
mov eax, ebx
mov rsi, qword [rsp + 0x400]
mov rcx, qword [rsp + 0x3c0]
xor rcx, rsp
call fcn.140012f80
add rsp, 0x3d0
pop rdi
pop rbp
pop rbx
ret
lea rax, [rsp + 0x60]
mov edx, 0x258
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x60]
lea r8, str.move__Y__s__s__NUL__del__s_2_NUL
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x160]
call fcn.1400017b0
lea rax, [rsp + 0x168]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rax + rbx], bpl
jne 0x140005e30
movsxd rcx, ebx
cmp rcx, 8
jle 0x140005e6a
mov eax, 8
nop word [rax + rax]
cmp byte [rsp + rax + 0x160], 0x2f
jne 0x140005e62
mov byte [rsp + rax + 0x160], 0x5c
inc rax
cmp rax, rcx
jl 0x140005e50
xor edx, edx
lea rcx, [rsp + 0x160]
call qword [sym.imp.KERNEL32.dll_WinExec]
xor eax, eax
jmp 0x140005dcd
mov dword [rsp + 0x38], 0x400000
lea rax, str.alloc_res_failed__buflen__d_n
mov qword [rsp + 0x30], rax
lea r9, str.E:02_Sourcelm.signal.soft.git01_ProjectPE0000workcomplat_srcmodiniini.c
mov rbx, 0xffffffffffffffff
mov dword [rsp + 0x28], 0xa11
lea rax, str.ini_save_file
mov dword [0x140044bec], ebp
lea r8, [0x140044be0]
mov dword [0x140044bf0], 1
mov edx, ebx
mov qword [rsp + 0x20], rax
lea ecx, [rbx + 4]
call sym.Launcher.exe_elog_fmt
mov rcx, qword [rsp + 0x50]
call fcn.140014e38
jmp 0x140005dcb
lea rax, str.invalid_file_path_to_save_n
mov dword [0x140044e6c], ebp
mov qword [rsp + 0x30], rax
lea r8, [0x140044e60]
mov dword [rsp + 0x28], 0x9f7
mov dword [0x140044e70], 1
mov rdx, 0xffffffffffffffff
lea rax, str.ini_save_file
lea r9, str.E:02_Sourcelm.signal.soft.git01_ProjectPE0000workcomplat_srcmodiniini.c
mov qword [rsp + 0x20], rax
lea ecx, [rdx + 4]
call sym.Launcher.exe_elog_fmt
mov eax, 0xfffffffe
jmp 0x140005dd5
lea rax, str.NULL_input_hdl_n
mov dword [0x14004491c], ebp
mov qword [rsp + 0x30], rax
lea r8, [0x140044910]
mov dword [rsp + 0x28], 0x9ec
mov dword [0x140044920], 1
jmp 0x140005f12