Function at 0x140081cf0
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov qword [rbp - 9], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1401a3008]
xor rax, rsp
mov qword [rbp + 0x4f], rax
mov rsi, rcx
lea rdx, [rbp + 0x27]
call fcn.140080080
nop
mov rax, qword [rbp + 0x27]
cmp dword [rax + 4], 0
jne 0x140081d56
mov byte [rsi + 0x10], 0
mov rcx, rsi
call fcn.14007bc10
mov edx, 2
mov rcx, rsi
call fcn.140081080
jmp 0x14008231e
lea rdx, [rbp - 0x31]
call fcn.14007b810
mov rdi, rax
lea rdx, str._1_AdSyncUpdate.log
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::constructor_char_const____ptr64____ptr64]
mov rbx, rax
mov dl, 0x20
lea rcx, [rbp - 0x47]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QChar::constructor_struct_QLatin1Char____ptr64]
movzx ecx, word [rax]
mov word [rsp + 0x20], cx
xor r9d, r9d
mov r8, rdi
lea rdx, [rbp + 0x2f]
mov rcx, rbx
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString___cdecl_QString::arg_class_QString_const____ptr64__int__class_QChar____ptr64]
nop
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x31]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov edi, 0x5c
mov ebx, 0x2f
lea r9d, [rdi - 0x5b]
movzx r8d, di
movzx edx, bx
lea rcx, [rbp + 0x27]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString____ptr64___cdecl_QString::replace_class_QChar__class_QChar__enum_Qt::CaseSensitivity____ptr64]
lea r9d, [rdi - 0x5b]
movzx r8d, di
movzx edx, bx
lea rcx, [rbp + 0x2f]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString____ptr64___cdecl_QString::replace_class_QChar__class_QChar__enum_Qt::CaseSensitivity____ptr64]
lea rdx, [rbp + 0x1f]
mov rcx, rsi
call fcn.1400802c0
nop
mov rax, qword [rbp + 0x1f]
cmp dword [rax + 4], 0
jne 0x140082017
lea rdx, [0x1401213cc]
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::constructor_char_const____ptr64____ptr64]
nop
xor r8d, r8d
lea rdx, [rbp - 0x41]
lea rcx, [rsi + 0xf8]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_int___cdecl_QString::compare_class_QString_const____ptr64__enum_Qt::CaseSensitivity_const___ptr64]
test eax, eax
sete bl
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
test bl, bl
je 0x140081ed2
lea rdx, str._p___1___qr__lv___2_
lea rcx, [rbp - 0x39]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::constructor_char_const____ptr64____ptr64]
mov rbx, rax
mov dl, 0x20
lea rcx, [rbp - 0x47]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QChar::constructor_struct_QLatin1Char____ptr64]
movzx ecx, word [rax]
mov word [rsp + 0x20], cx
xor r9d, r9d
lea r8, [rbp + 0x27]
lea rdx, [rbp - 0x41]
mov rcx, rbx
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString___cdecl_QString::arg_class_QString_const____ptr64__int__class_QChar____ptr64]
mov rbx, rax
mov dl, 0x20
lea rcx, [rbp - 0x49]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QChar::constructor_struct_QLatin1Char____ptr64]
movzx ecx, word [rax]
mov word [rsp + 0x20], cx
xor r9d, r9d
lea r8, [rbp + 0x2f]
lea rdx, [rbp - 0x31]
mov rcx, rbx
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString___cdecl_QString::arg_class_QString_const____ptr64__int__class_QChar____ptr64]
mov rdx, rax
lea rcx, [rbp + 0x1f]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString____ptr64___cdecl_QString::operator_class_QString____ptr64____ptr64]
lea rcx, [rbp - 0x31]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x39]
jmp 0x140082011
lea rdx, [0x1401213d0]
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::constructor_char_const____ptr64____ptr64]
nop
xor r8d, r8d
lea rdx, [rbp - 0x41]
lea rcx, [rsi + 0xf8]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_int___cdecl_QString::compare_class_QString_const____ptr64__enum_Qt::CaseSensitivity_const___ptr64]
test eax, eax
sete bl
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
lea rdx, str._i___1___qr__lv___2_
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::constructor_char_const____ptr64____ptr64]
test bl, bl
mov rbx, rax
je 0x140081f97
mov dl, 0x20
lea rcx, [rbp - 0x49]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QChar::constructor_struct_QLatin1Char____ptr64]
movzx ecx, word [rax]
mov word [rsp + 0x20], cx
xor r9d, r9d
lea r8, [rbp + 0x27]
lea rdx, [rbp - 0x31]
mov rcx, rbx
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString___cdecl_QString::arg_class_QString_const____ptr64__int__class_QChar____ptr64]
mov rbx, rax
mov dl, 0x20
lea rcx, [rbp - 0x47]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QChar::constructor_struct_QLatin1Char____ptr64]
movzx ecx, word [rax]
mov word [rsp + 0x20], cx
xor r9d, r9d
lea r8, [rbp + 0x2f]
lea rdx, [rbp - 0x39]
mov rcx, rbx
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString___cdecl_QString::arg_class_QString_const____ptr64__int__class_QChar____ptr64]
mov rdx, rax
lea rcx, [rbp + 0x1f]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString____ptr64___cdecl_QString::operator_class_QString____ptr64____ptr64]
lea rcx, [rbp - 0x39]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x31]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
jmp 0x14008200d
mov dl, 0x20
lea rcx, [rbp - 0x49]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QChar::constructor_struct_QLatin1Char____ptr64]
movzx ecx, word [rax]
mov word [rsp + 0x20], cx
xor r9d, r9d
lea r8, [rbp + 0x27]
lea rdx, [rbp - 0x31]
mov rcx, rbx
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString___cdecl_QString::arg_class_QString_const____ptr64__int__class_QChar____ptr64]
mov rbx, rax
mov dl, 0x20
lea rcx, [rbp - 0x47]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QChar::constructor_struct_QLatin1Char____ptr64]
movzx ecx, word [rax]
mov word [rsp + 0x20], cx
xor r9d, r9d
lea r8, [rbp + 0x2f]
lea rdx, [rbp - 0x39]
mov rcx, rbx
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString___cdecl_QString::arg_class_QString_const____ptr64__int__class_QChar____ptr64]
mov rdx, rax
lea rcx, [rbp + 0x1f]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString____ptr64___cdecl_QString::operator_class_QString____ptr64____ptr64]
lea rcx, [rbp - 0x39]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x31]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
lea rdx, str._INSTALLERFILE_
lea rcx, [rbp + 0x47]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::constructor_char_const____ptr64____ptr64]
nop
lea rdx, str._LOGFILE_
lea rcx, [rbp + 0x3f]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::constructor_char_const____ptr64____ptr64]
nop
xor r9d, r9d
lea r8, [rbp + 0x27]
lea rdx, [rbp + 0x47]
lea rcx, [rbp + 0x1f]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString____ptr64___cdecl_QString::replace_class_QString_const____ptr64__class_QString_const____ptr64__enum_Qt::CaseSensitivity____ptr64]
mov rdx, rax
lea rcx, [rbp + 0x1f]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString____ptr64___cdecl_QString::operator_class_QString_const____ptr64____ptr64]
xor r9d, r9d
lea r8, [rbp + 0x2f]
lea rdx, [rbp + 0x3f]
lea rcx, [rbp + 0x1f]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString____ptr64___cdecl_QString::replace_class_QString_const____ptr64__class_QString_const____ptr64__enum_Qt::CaseSensitivity____ptr64]
mov rdx, rax
lea rcx, [rbp + 0x1f]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString____ptr64___cdecl_QString::operator_class_QString_const____ptr64____ptr64]
lea rdx, [rbp + 0x37]
mov rcx, qword [0x1401ab0c0]
call fcn.14005ee20
nop
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 0x37]
call qword [sym.imp.Qt5Core_Ad_5.dll__trimmed_QString__QEGBA_AV1_XZ]
mov rcx, qword [rax]
cmp dword [rcx + 4], 0
setne bl
lea rcx, [rbp - 0x39]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
test bl, bl
je 0x140082131
lea rdx, [rbp - 0x41]
lea rcx, [rbp + 0x37]
call qword [sym.imp.Qt5Core_Ad_5.dll__trimmed_QString__QEGBA_AV1_XZ]
mov rdi, rax
lea rdx, str._ADLANGUAGE_1
lea rcx, [rbp - 0x31]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::constructor_char_const____ptr64____ptr64]
mov rbx, rax
mov dl, 0x20
lea rcx, [rbp - 0x49]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QChar::constructor_struct_QLatin1Char____ptr64]
movzx ecx, word [rax]
mov word [rsp + 0x20], cx
xor r9d, r9d
mov r8, rdi
lea rdx, [rbp - 0x39]
mov rcx, rbx
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString___cdecl_QString::arg_class_QString_const____ptr64__int__class_QChar____ptr64]
nop
mov rdx, rax
lea rcx, [rbp + 0x1f]
call qword [reloc.Qt5Core_Ad_5.dll___YQString__QEAAAEAV0_AEBV0__Z]
nop
lea rcx, [rbp - 0x39]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x31]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov edx, 0x4e20
lea rcx, [0x1401ae180]
call qword [sym.imp.log4cplusU_Ad_1.dll_public:_bool___cdecl_log4cplus::Logger::isEnabledFor_int_const___ptr64]
test al, al
je 0x140082284
call qword [sym.imp.log4cplusU_Ad_1.dll_class_std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_log4cplus::detail::get_macro_body_oss_void_]
mov rdi, rax
lea rdx, str.Launching_msiexec_to_install_update._Command_line:_1
lea rcx, [rbp - 0x31]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::constructor_char_const____ptr64____ptr64]
mov rbx, rax
mov dl, 0x20
lea rcx, [rbp - 0x49]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QChar::constructor_struct_QLatin1Char____ptr64]
movzx ecx, word [rax]
mov word [rsp + 0x20], cx
xor r9d, r9d
lea r8, [rbp + 0x1f]
lea rdx, [rbp - 0x39]
mov rcx, rbx
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_QString___cdecl_QString::arg_class_QString_const____ptr64__int__class_QChar____ptr64]
nop
lea rdx, [rbp - 1]
mov rcx, rax
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_QString::toStdWString_void____ptr64]
mov rbx, rax
cmp qword [rax + 0x18], 8
jb 0x1400821ab
mov rbx, qword [rax]
mov qword [rbp - 0x19], 0
mov qword [rbp - 0x11], 0
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x29]
call fcn.140022800
cmp word [rbx], 0
jne 0x1400821d4
xor r8d, r8d
jmp 0x1400821eb
or r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x1400821e0
mov rdx, rbx
lea rcx, [rbp - 0x29]
call fcn.140022880
nop
lea rdx, [rbp - 0x29]
mov rcx, rdi
call fcn.14002c830
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x29]
call fcn.140022800
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 1]
call fcn.140022800
nop
lea rcx, [rbp - 0x39]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x31]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
lea rdx, [rbp - 1]
mov rcx, rdi
call fcn.14002c6a0
nop
lea r8, str.void___cdecl_UpdateManager::InstallUpdate_void_
mov qword [rsp + 0x28], r8
mov dword [rsp + 0x20], 0x481
lea r9, str.UpdateManager.cpp
mov r8, rax
mov edx, 0x4e20
lea rcx, [0x1401ae180]
call qword [sym.imp.log4cplusU_Ad_1.dll_void___cdecl_log4cplus::detail::macro_forced_log_class_log4cplus::Logger_const____ptr64__int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const____ptr64__char_const____ptr64__int__char_const____ptr64_]
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 1]
call fcn.140022800
lea rdx, [rbp + 0x1f]
lea rcx, [rbp - 0x39]
call fcn.14001b990
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
mov r9, qword [rax]
lea r8, str.msiexec.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rbx, rax
mov rcx, qword [rbp - 0x39]
call fcn.1400cb664
cmp rbx, 0x20
ja 0x1400822e7
mov byte [rsi + 0x10], 0
mov rcx, rsi
call fcn.14007bc10
mov edx, 2
mov rcx, rsi
call fcn.140081080
nop
lea rcx, [rbp + 0x37]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x3f]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x47]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x1f]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x2f]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x27]
call qword [sym.imp.Qt5Core_Ad_5.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.1400ca980
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret