Function at 0x140005aa0
Capabilities:
Delete file
Move file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
lea rbp, [rsp - 0x770]
sub rsp, 0x870
mov rax, qword [0x14002e008]
xor rax, rsp
mov qword [rbp + 0x760], rax
mov rbx, rcx
test rcx, rcx
jne 0x140005ad6
lea eax, [rcx - 1]
jmp 0x140005d06
mov rcx, qword [rcx + 0xb0]
mov qword [rsp + 0x888], rsi
xor esi, esi
test rcx, rcx
je 0x140005b73
lea rdx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__stat64i32]
test eax, eax
jns 0x140005b0b
mov rcx, qword [rbx + 0xb0]
call fcn.1400026e0
mov rcx, qword [rbx + 0xb0]
lea rdx, [rsp + 0x60]
sub rdx, rcx
nop word [rax + rax]
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x140005b20
lea rcx, [rsp + 0x60]
dec rcx
cmp byte [rcx + 1], sil
lea rcx, [rcx + 1]
jne 0x140005b36
movzx eax, word [0x14001da60]
mov word [rcx], ax
lea rcx, [rsp + 0x60]
dec rcx
cmp byte [rcx + 1], sil
lea rcx, [rcx + 1]
jne 0x140005b52
movsd xmm0, qword [str.version.xml]
mov eax, dword [0x14001ff68]
movsd qword [rcx], xmm0
mov dword [rcx + 8], eax
jmp 0x140005b8b
movsd xmm0, qword [str.version.xml]
mov eax, dword [0x14001ff68]
movsd qword [rsp + 0x60], xmm0
mov dword [rsp + 0x68], eax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__stat64i32]
test eax, eax
js 0x140005bbe
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add rax, 0xfffffffffffeae80
cmp rax, qword [rsp + 0x50]
jg 0x140005bbe
mov esi, 1
jmp 0x140005c56
xor ecx, ecx
movzx eax, byte [rsp + rcx + 0x60]
mov byte [rbp + rcx + 0x360], al
lea rcx, [rcx + 1]
test al, al
jne 0x140005bc0
lea rcx, [rbp + 0x360]
dec rcx
nop
cmp byte [rcx + 1], sil
lea rcx, [rcx + 1]
jne 0x140005be0
mov eax, dword [str..tmp]
lea rdx, [rbp + 0x360]
mov dword [rcx], eax
xor r8d, r8d
movzx eax, byte [0x14001ff70]
mov byte [rcx + 4], al
lea rcx, str.http:__itunes.apple.com_check_version
call fcn.140003dc0
test eax, eax
jne 0x140005c56
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x360]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
test eax, eax
jns 0x140005c4a
lea rdx, [rsp + 0x60]
lea rcx, str.ERROR:_Could_not_update__s_n
call fcn.1400023a0
jmp 0x140005c56
lea rcx, str.NOTE:_Updated_version_data._n
call fcn.140002320
lea r8, [rsp + 0x28]
mov qword [rsp + 0x20], 0
lea rdx, [rsp + 0x20]
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x60]
call fcn.1400024d0
cmp qword [rsp + 0x20], 0
jne 0x140005c9c
lea rdx, [rsp + 0x60]
lea rcx, str.ERROR:_Could_not_load__s_n
call fcn.1400023a0
mov eax, 0xffffffff
jmp 0x140005cfe
mov edx, dword [rsp + 0x28]
lea r8, [rbx + 0x18]
mov rcx, qword [rsp + 0x20]
mov qword [rbx + 0x18], 0
call qword [sym.imp.plist.dll_plist_from_xml]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp qword [rbx + 0x18], 0
jne 0x140005cec
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, [rsp + 0x60]
lea rcx, str.ERROR:_Cannot_parse_plist_data_from__s._n
call fcn.1400023a0
mov eax, 0xffffffff
jmp 0x140005cfe
test esi, esi
je 0x140005cfc
lea rcx, str.NOTE:_using_cached_version_data_n
call fcn.140002320
xor eax, eax
mov rsi, qword [rsp + 0x888]
mov rcx, qword [rbp + 0x760]
xor rcx, rsp
call fcn.14001bfa0
mov rbx, qword [rsp + 0x890]
add rsp, 0x870
pop rbp
ret