Function at 0x140019f20
Capabilities:
Create process on windows
Get common file path

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x190
mov rax, qword [0x140093010]
xor rax, rsp
mov qword [rsp + 0x180], rax
mov rbx, rcx
xor r14d, r14d
mov edi, r14d
mov dword [rsp + 0x110], r14d
call fcn.140017a28
lea rcx, [rsp + 0x158]
call fcn.140018e68
nop
cmp qword [rsp + 0x168], r14
setne cl
mov rax, qword [rbx]
mov byte [rax], cl
mov rax, qword [rbx]
cmp byte [rax], r14b
je 0x14001a05e
mov edx, 8
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400ad250], eax
jle 0x140019fd9
lea rcx, [0x1400ad250]
call fcn.140052658
cmp dword [0x1400ad250], 0xffffffff
jne 0x140019fd9
call fcn.14000bc98
lea rcx, [0x140058d90]
call fcn.1400529a0
nop
lea rcx, [0x1400ad250]
call fcn.1400525f8
cmp byte [0x1400ad1a0], r14b
jne 0x14001a02d
mov rsi, qword [rsp + 0x178]
lea rdx, [rsp + 0x158]
cmp qword [rsp + 0x170], 8
cmovae rdx, qword [rsp + 0x158]
lea rcx, [rsp + 0x80]
call fcn.140006a3c
mov edi, 1
mov rdx, rsi
lea rcx, [rsp + 0x80]
call fcn.140017594
test al, al
mov cl, r14b
je 0x14001a02f
mov cl, 1
mov rax, qword [rbx + 8]
mov byte [rax], cl
test dil, 1
je 0x14001a05e
mov rdx, qword [rsp + 0x98]
cmp rdx, 8
jb 0x14001a05e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x80]
call fcn.140009db8
mov rax, qword [rbx]
cmp byte [rax], r14b
je 0x14001a2df
mov rax, qword [rbx + 8]
cmp byte [rax], r14b
je 0x14001a2df
mov edi, 0x70
mov r8d, edi
xor edx, edx
lea rcx, [rsp + 0xa0]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0xa0], edi
mov qword [rsp + 0x110], r14
lea r9, [rsp + 0x110]
xor r8d, r8d
xor edx, edx
lea rcx, [0x14005ae38]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
mov rcx, qword [rsp + 0x198]
test eax, eax
js 0x14001a351
mov rdx, qword [rsp + 0x110]
lea rcx, [rsp + 0x40]
call fcn.140006a3c
nop
lea r8, str.msiexec.exe
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.14001a968
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14001a10f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
call fcn.140009db8
mov qword [rsp + 0x50], r14
mov edi, 7
mov qword [rsp + 0x58], rdi
mov word [rsp + 0x40], r14w
lea rax, [rsp + 0x138]
cmp qword [rsp + 0x150], 8
cmovae rax, qword [rsp + 0x138]
mov qword [rsp + 0xb8], rax
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x20]
call fcn.14000e3b8
nop
lea r8, [rsp + 0x20]
lea rdx, str._i__
lea rcx, [rsp + 0x60]
call fcn.14001a838
nop
lea r8, [0x14005c8d4]
mov rdx, rax
lea rcx, [rsp + 0x118]
call fcn.14001a968
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14001a1a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
call fcn.140009db8
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], rdi
mov word [rsp + 0x60], r14w
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14001a1d2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
call fcn.140009db8
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], rdi
mov word [rsp + 0x20], r14w
mov rcx, qword [rbx + 0x10]
call fcn.14001a37c
test al, al
jne 0x14001a205
lea rdx, str.__passive
lea rcx, [rsp + 0x118]
call fcn.14001b560
jmp 0x14001a20c
mov rax, qword [rbx + 0x18]
mov byte [rax], 1
lea rax, [rsp + 0x118]
cmp qword [rsp + 0x130], 8
cmovae rax, qword [rsp + 0x118]
mov qword [rsp + 0xc0], rax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov rcx, qword [rsp + 0x198]
test eax, eax
je 0x14001a369
mov rax, qword [rbx + 0x20]
mov byte [rax], 1
mov rdx, qword [rsp + 0x130]
cmp rdx, 8
jb 0x14001a276
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x118]
call fcn.140009db8
mov qword [rsp + 0x128], r14
mov qword [rsp + 0x130], rdi
mov word [rsp + 0x118], r14w
mov rdx, qword [rsp + 0x150]
cmp rdx, 8
jb 0x14001a2b2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x138]
call fcn.140009db8
mov qword [rsp + 0x148], r14
mov qword [rsp + 0x150], rdi
mov word [rsp + 0x138], r14w
mov rcx, qword [rsp + 0x110]
test rcx, rcx
je 0x14001a2df
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
mov rcx, qword [rsp + 0x178]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14001a2f8
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x170]
cmp rdx, 8
jb 0x14001a31c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x158]
call fcn.140009db8
nop
xor eax, eax
jmp 0x14001a327
mov rcx, qword [rsp + 0x180]
xor rcx, rsp
call fcn.1400521d0
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret
lfence
mov r9d, eax
lea r8, str.D:_a_work1_sEosAppEosAppLibEosToolUpdater.cpp
mov edx, 0x26d
call fcn.1400088f4
nop
lea r8, str.D:_a_work1_sEosAppEosAppLibEosToolUpdater.cpp
mov edx, 0x27c
call fcn.14000e3a4
int3