Function at 0x140021855
Capabilities:
Create process on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x308
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x280], 0xfffffffffffffffe
mov qword [rbp + 0x278], rcx
call fcn.1400140cc
test al, al
je 0x1400218d8
mov dword [rsp + 0x20], 4
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str..._.._.._third_party_crashpad_client_crashpad_client_win.cc
lea rcx, [rbp + 0x60]
mov r9d, 0x170
call fcn.14004b54e
lea rdx, str.Check_failed:__IsThreadInLoaderLock__
lea rcx, [rbp + 0x60]
call fcn.140002bc9
lea rdx, [0x14009fc16]
mov rcx, rax
call fcn.140002bc9
lea rcx, [rbp + 0x60]
call fcn.14004ba62
lea rdx, [rbp + 0x180]
and qword [rdx + 0x10], 0
xorps xmm0, xmm0
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x18], 7
mov rax, qword [rbp + 0x278]
mov rcx, qword [rax]
call fcn.140011030
mov rax, qword [rbp + 0x278]
mov rax, qword [rax]
mov rbx, qword [rax + 0x90]
mov rsi, qword [rax + 0x98]
lea r15, [rbp + 0x60]
lea r14, [rbp + 0x40]
lea rdi, [rbp + 0x180]
cmp rbx, rsi
je 0x14002196a
cmp qword [rbx + 0x18], 0x10
mov rax, rbx
jb 0x14002193a
mov rax, qword [rbx]
mov qword [rbp + 0x40], rax
mov rax, qword [rbx + 0x10]
mov qword [rbp + 0x48], rax
mov rcx, r15
mov rdx, r14
call fcn.14004c7f0
mov rcx, r15
mov rdx, rdi
call fcn.140011030
mov rcx, r15
call fcn.140004a1e
add rbx, 0x20
jmp 0x140021928
mov rax, qword [rbp + 0x278]
mov rsi, qword [rax]
cmp qword [rsi + 0x30], 0
je 0x1400219d4
lea rdx, str.database
lea rcx, [rbp + 0x1a0]
call fcn.140002b86
add rsi, 0x20
lea rcx, [rbp + 0x60]
lea rdx, [rbp + 0x1a0]
mov r8, rsi
call fcn.1400230ba
lea rcx, [rbp + 0x60]
lea rdx, [rbp + 0x180]
call fcn.140011030
lea rcx, [rbp + 0x60]
call fcn.140004a1e
lea rcx, [rbp + 0x1a0]
call fcn.1400049ea
mov rax, qword [rbp + 0x278]
mov rsi, qword [rax]
cmp qword [rsi + 0x50], 0
je 0x140021a34
lea rdx, str.metrics_dir
lea rcx, [rbp + 0x1a0]
call fcn.140002b86
add rsi, 0x40
lea rcx, [rbp + 0x60]
lea rdx, [rbp + 0x1a0]
mov r8, rsi
call fcn.1400230ba
lea rcx, [rbp + 0x60]
lea rdx, [rbp + 0x180]
call fcn.140011030
lea rcx, [rbp + 0x60]
call fcn.140004a1e
lea rcx, [rbp + 0x1a0]
call fcn.1400049ea
mov rax, qword [rbp + 0x278]
mov rsi, qword [rax]
mov rax, qword [rsi + 0x70]
test rax, rax
je 0x140021ac5
cmp qword [rsi + 0x78], 0x10
jb 0x140021a4e
mov rsi, qword [rsi + 0x60]
jmp 0x140021a52
add rsi, 0x60
lea rdx, [rbp - 0x28]
mov qword [rdx], rsi
mov qword [rdx + 8], rax
lea rcx, [rbp + 0x1a0]
call fcn.14004c7f0
lea rdx, [0x140096d72]
lea rcx, [rbp - 8]
call fcn.140002b86
lea rcx, [rbp + 0x60]
lea rdx, [rbp - 8]
lea r8, [rbp + 0x1a0]
call fcn.1400230ba
lea rcx, [rbp + 0x60]
lea rdx, [rbp + 0x180]
call fcn.140011030
lea rcx, [rbp + 0x60]
call fcn.140004a1e
lea rcx, [rbp - 8]
call fcn.1400049ea
lea rcx, [rbp + 0x1a0]
call fcn.140004a1e
mov rax, qword [rbp + 0x278]
mov rsi, qword [rax]
mov r12, qword [rsi + 0x80]
mov r13, qword [r12]
lea rax, [rbp + 0x168]
mov qword [rax], r13
lea rbx, [rbp + 0x250]
lea rdi, [rbp - 8]
lea rsi, [rbp + 0x1a0]
lea r14, [rbp + 0x230]
cmp r13, r12
je 0x140021be8
mov byte [rbp + 0x60], 0x3d
mov rax, qword [r13 + 0x30]
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
je 0x1400225cb
lea r8, [r13 + 0x20]
cmp qword [r13 + 0x38], 0x10
mov r9, r8
jb 0x140021b29
mov r9, qword [r13 + 0x20]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], 1
mov rcx, rbx
call fcn.1400234c2
add r13, 0x40
mov rcx, rdi
mov rdx, rbx
mov r8, r13
call fcn.140023228
cmp qword [rbp + 0x10], 0x10
mov rax, rdi
jb 0x140021b64
mov rax, qword [rbp - 8]
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rcx
mov rcx, rsi
lea rdx, [rbp + 0x50]
call fcn.14004c7f0
mov rcx, r14
lea rdx, [0x140096c74]
call fcn.140002b86
mov rcx, r15
mov rdx, r14
mov r8, rsi
call fcn.1400230ba
mov rcx, r15
lea rdx, [rbp + 0x180]
call fcn.140011030
mov rcx, r15
call fcn.140004a1e
mov rcx, r14
call fcn.1400049ea
mov rcx, rsi
call fcn.140004a1e
mov rcx, rdi
call fcn.1400049ea
mov rcx, rbx
call fcn.1400049ea
lea rcx, [rbp + 0x168]
call fcn.140004934
mov r13, qword [rbp + 0x168]
jmp 0x140021af3
mov rax, qword [rbp + 0x278]
mov rax, qword [rax]
mov rdi, qword [rax + 0xa8]
mov r12, qword [rax + 0xb0]
lea r14, str.attachment
lea rsi, [rbp + 0x1a0]
lea rbx, [rbp + 0x60]
lea r15, [rbp + 0x180]
cmp rdi, r12
je 0x140021c58
mov rcx, rsi
mov rdx, r14
call fcn.140002b86
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.1400230ba
mov rcx, rbx
mov rdx, r15
call fcn.140011030
mov rcx, rbx
call fcn.140004a1e
mov rcx, rsi
call fcn.1400049ea
add rdi, 0x20
jmp 0x140021c19
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push 1
pop rdx
mov ecx, 0x1f0fff
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x218], rax
test rax, rax
je 0x140021dac
mov rcx, qword [rbp + 0x278]
mov rcx, qword [rcx]
mov rdx, qword [rcx + 0xe0]
movups xmm0, xmmword [0x1400c1994]
mov rbx, qword [0x1400c1988]
lea rdi, [0x1400c5018]
lea rcx, [rbp - 8]
mov qword [rcx], rdi
lea rdi, [0x1400c5028]
mov qword [rcx + 8], rdi
lea rdi, [0x1400c5038]
mov qword [rcx + 0x10], rdi
mov qword [rcx + 0x18], rbx
movups xmmword [rcx + 0x20], xmm0
mov qword [rcx + 0x30], rdx
mov qword [rcx + 0x38], rax
mov byte [rcx + 0x40], 1
lea r14, [rbp + 0x250]
mov rdx, r14
call fcn.140014026
lea rdx, str.__initial_client_data
lea r15, [rbp + 0x230]
mov rcx, r15
call fcn.140002b86
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1b0], xmm0
movaps xmmword [rbp + 0x1a0], xmm0
mov rdi, qword [rbp + 0x240]
mov rcx, qword [rbp + 0x248]
mov rbx, qword [rbp + 0x260]
mov rax, qword [rbp + 0x268]
lea r12, [rbx + rdi]
mov rdx, rcx
sub rdx, rdi
cmp rbx, rdx
ja 0x140021e01
cmp rax, rcx
ja 0x140021e01
movups xmm0, xmmword [rbp + 0x230]
movups xmm1, xmmword [rbp + 0x240]
movaps xmmword [rbp + 0x1b0], xmm1
movaps xmmword [rbp + 0x1a0], xmm0
and qword [rbp + 0x240], 0
mov qword [rbp + 0x248], 0xf
mov byte [rbp + 0x230], 0
cmp qword [rbp + 0x1b8], 0x10
jb 0x140021d8b
mov rsi, qword [rbp + 0x1a0]
inc rbx
cmp rax, 0x10
jb 0x140021d9b
mov r14, qword [rbp + 0x250]
add rsi, rdi
mov rcx, rsi
mov rdx, r14
mov r8, rbx
jmp 0x140021edc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str..._.._.._third_party_crashpad_client_crashpad_client_win.cc
lea rcx, [rbp + 0x60]
mov r9d, 0x197
call fcn.14004b54e
lea rcx, [rbp + 0x60]
mov dword [rcx + 0x100], esi
lea rdx, [0x14009686e]
call fcn.140002bc9
lea rcx, [rbp + 0x60]
call fcn.14004bba4
xor esi, esi
xor edi, edi
jmp 0x140022580
sub rax, rbx
cmp rdi, rax
jbe 0x140021e73
mov rax, rdi
movabs rcx, 0x7fffffffffffffff
xor rax, rcx
cmp rax, rbx
jb 0x140022652
mov rax, r12
or rax, 0xf
cmp rax, 0x17
push 0x16
pop rsi
cmovae rsi, rax
cmp rsi, rcx
cmovae rsi, rcx
lea rcx, [rsi + 1]
call fcn.14000358a
mov r14, rax
mov qword [rbp + 0x1a0], rax
mov qword [rbp + 0x1b0], r12
mov qword [rbp + 0x1b8], rsi
cmp qword [rbp + 0x248], 0x10
jb 0x140021eea
mov rdx, qword [rbp + 0x230]
jmp 0x140021ef1
movups xmm0, xmmword [rbp + 0x250]
movups xmm1, xmmword [rbp + 0x260]
movaps xmmword [rbp + 0x1a0], xmm0
movaps xmmword [rbp + 0x1b0], xmm1
and qword [rbp + 0x260], 0
mov qword [rbp + 0x268], 0xf
mov byte [rbp + 0x250], 0
mov rsi, qword [rbp + 0x1a0]
inc rbx
lea rcx, [rsi + rdi]
mov rdx, rsi
mov r8, rbx
call fcn.14006f9f0
cmp qword [rbp + 0x248], 0x10
jb 0x140021ed3
mov r15, qword [rbp + 0x230]
mov rcx, rsi
mov rdx, r15
mov r8, rdi
call fcn.14006f9f0
mov qword [rbp + 0x1b0], r12
jmp 0x140021f2e
lea rdx, [rbp + 0x230]
mov rcx, r14
mov r8, rdi
call fcn.14006f9f0
inc rbx
cmp qword [rbp + 0x268], 0x10
jb 0x140021f12
mov rdx, qword [rbp + 0x250]
jmp 0x140021f19
lea rdx, [rbp + 0x250]
add r14, rdi
mov rcx, r14
mov r8, rbx
call fcn.14006f9f0
mov r12, qword [rbp + 0x1b0]
cmp qword [rbp + 0x1b8], 0x10
jb 0x140021f41
mov rax, qword [rbp + 0x1a0]
jmp 0x140021f48
lea rax, [rbp + 0x1a0]
lea rdx, [rbp - 0x18]
mov qword [rdx], rax
mov qword [rdx + 8], r12
lea rcx, [rbp + 0x60]
call fcn.14004c7f0
lea rcx, [rbp + 0x60]
lea r15, [rbp + 0x180]
mov rdx, r15
call fcn.140011030
lea rcx, [rbp + 0x60]
call fcn.140004a1e
lea rdi, [rbp + 0x1a0]
mov rcx, rdi
call fcn.1400049ea
lea r13, [rbp + 0x230]
mov rcx, r13
call fcn.1400049ea
lea rcx, [rbp + 0x250]
call fcn.1400049ea
xorps xmm0, xmm0
movaps xmmword [rdi + 0x30], xmm0
movaps xmmword [rdi + 0x60], xmm0
movaps xmmword [rdi + 0x50], xmm0
movaps xmmword [rdi + 0x40], xmm0
movaps xmmword [rdi + 0x20], xmm0
movaps xmmword [rdi + 0x10], xmm0
movaps xmmword [rdi], xmm0
mov dword [rdi + 0x3c], 0x100
push 0xfffffffffffffff6
pop rcx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r12, rax
mov qword [rbp + 0x1f0], rax
push 0xfffffffffffffff5
pop rcx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r14, rax
mov qword [rbp + 0x1f8], rax
push 0xfffffffffffffff4
pop rcx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
and qword [rbp + 0x260], 0
and qword [rbp + 0x220], 0
mov qword [rbp + 0x200], rax
and qword [rbp + 0x228], 0
xorps xmm0, xmm0
movaps xmmword [rbp + 0x250], xmm0
mov eax, dword [0x1400c5078]
mov ecx, dword [0x1400c3824]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400225d0
mov eax, dword [0x1400c5088]
mov ecx, dword [0x1400c3824]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140022617
mov rsi, qword [0x1400c5070]
test rsi, rsi
je 0x1400220e8
cmp qword [0x1400c5080], 0
je 0x1400220e8
mov dword [rbp + 0x1a0], 0x70
push 1
pop rdx
lea r9, [rbp + 0x230]
xor ecx, ecx
xor r8d, r8d
call rsi
test eax, eax
je 0x14002230c
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str..._.._.._third_party_crashpad_client_crashpad_client_win.cc
lea rcx, [rbp + 0x60]
mov r9d, 0x1c8
call fcn.14004b54e
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
lea rcx, [rbp + 0x60]
call fcn.140002bc9
lea rcx, [rbp + 0x60]
call fcn.14004ba62
jmp 0x140022558
mov dword [rbp + 0x1a0], 0x68
xor ebx, ebx
mov rax, qword [rbp + 0x278]
mov rcx, qword [rax]
mov r8, qword [rcx + 0x10]
cmp r8, 0xc
jae 0x14002210c
xor esi, esi
jmp 0x140022149
add r8, 0xfffffffffffffff4
lea rsi, [rbp + 0x60]
push 0xffffffffffffffff
pop r9
mov rdx, rsi
call fcn.1400232ba
cmp qword [rbp + 0x78], 8
jb 0x14002212b
mov rsi, qword [rbp + 0x60]
lea rdx, str.rundll32.exe
mov rcx, rsi
call fcn.14006495c
test eax, eax
sete sil
lea rcx, [rbp + 0x60]
call fcn.140004a1e
cmp qword [rbp + 0x198], 8
jb 0x14002215a
mov r15, qword [rbp + 0x180]
test sil, sil
je 0x140022163
xor ecx, ecx
jmp 0x140022177
mov rax, qword [rbp + 0x278]
mov rcx, qword [rax]
cmp qword [rcx + 0x18], 8
jb 0x140022177
mov rcx, qword [rcx]
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], rdi
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 1
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400222c4
mov rcx, qword [rbp + 0x238]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x140022209
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [rsp + 0x20], 1
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str..._.._.._third_party_crashpad_client_crashpad_client_win.cc
lea rcx, [rbp + 0x60]
mov r9d, 0x218
call fcn.14004b54e
lea rcx, [rbp + 0x60]
mov dword [rcx + 0x100], esi
lea rdx, str.CloseHandle_thread
call fcn.140002bc9
lea rcx, [rbp + 0x60]
call fcn.14004bba4
mov rcx, qword [rbp + 0x230]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x140022266
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [rsp + 0x20], 1
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str..._.._.._third_party_crashpad_client_crashpad_client_win.cc
lea rcx, [rbp + 0x60]
mov r9d, 0x21b
call fcn.14004b54e
lea rcx, [rbp + 0x60]
mov dword [rcx + 0x100], esi
lea rdx, str.CloseHandle_process
call fcn.140002bc9
lea rcx, [rbp + 0x60]
call fcn.14004bba4
mov ecx, 0xe0
mov rax, qword [rbp + 0x278]
add rcx, qword [rax]
lea rdx, [rbp + 0x60]
or qword [rdx], 0xffffffffffffffff
call fcn.14000c3b6
xorps xmm0, xmm0
lea rdx, [rbp + 0x60]
movups xmmword [rdx + 0x14], xmm0
lea r8, [rbp + 0x168]
and dword [r8 + 8], 0
movups xmmword [rdx + 4], xmm0
and qword [r8], 0
mov dword [rdx], 2
mov ecx, 0xc0
mov rax, qword [rbp + 0x278]
add rcx, qword [rax]
call fcn.1400180e8
mov esi, eax
mov edi, eax
jmp 0x14002255c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str..._.._.._third_party_crashpad_client_crashpad_client_win.cc
lea rcx, [rbp + 0x60]
mov r9d, 0x213
call fcn.14004b54e
lea rcx, [rbp + 0x60]
mov dword [rcx + 0x100], esi
lea rdx, str.CreateProcess
call fcn.140002bc9
jmp 0x14002254f
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14002247f
mov rcx, qword [rbp + 0x230]
call fcn.14005cb00
mov rsi, r13
lea r13, [rbp + 0x220]
mov rcx, r13
mov rdx, rax
call fcn.140017316
mov rcx, qword [r13]
mov qword [rbp + 0x208], rcx
push 1
pop rdx
lea r9, [rbp + 0x230]
mov qword [rbp + 0x178], rcx
xor r8d, r8d
call qword [0x1400c5070]
test eax, eax
je 0x1400224c7
lea rcx, [rbp + 0x228]
call fcn.140023580
mov rax, qword [rbp + 0x178]
mov qword [rbp + 0x228], rax
push 8
pop rcx
call fcn.14002363c
lea r13, [rbp + 0x250]
push 8
pop r9
mov rcx, r13
mov rdx, rax
xor r8d, r8d
call fcn.140023652
lea rdx, [0x1400c1988]
mov rcx, r13
mov r13, rsi
call fcn.140023698
lea rdx, [0x1400c1994]
lea rcx, [rbp + 0x250]
call fcn.140023698
lea rdx, [0x1400c199c]
lea rcx, [rbp + 0x250]
call fcn.140023698
mov edx, 0xe0
mov rax, qword [rbp + 0x278]
add rdx, qword [rax]
lea rcx, [rbp + 0x250]
call fcn.140023698
lea rcx, [rbp + 0x250]
lea rdx, [rbp + 0x218]
call fcn.140023698
lea rcx, [rbp + 0x250]
mov rdx, r12
call fcn.140023262
lea rcx, [rbp + 0x250]
mov rdx, r14
call fcn.140023262
lea rcx, [rbp + 0x250]
mov rdx, rbx
call fcn.140023262
mov rax, qword [0x1400c5080]
mov r9, qword [rbp + 0x250]
mov rcx, qword [rbp + 0x258]
sub rcx, r9
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rcx
mov r8d, 0x20002
mov rcx, qword [rbp + 0x178]
xor edx, edx
call rax
test eax, eax
je 0x14002250c
mov ebx, 0x80000
jmp 0x1400220f4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str..._.._.._third_party_crashpad_client_crashpad_client_win.cc
lea rcx, [rbp + 0x60]
mov r9d, 0x1cc
call fcn.14004b54e
lea rcx, [rbp + 0x60]
mov dword [rcx + 0x100], esi
lea rdx, str.InitializeProcThreadAttributeList__size_
call fcn.140002bc9
jmp 0x14002254f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str..._.._.._third_party_crashpad_client_crashpad_client_win.cc
lea rcx, [rbp + 0x60]
mov r9d, 0x1d7
call fcn.14004b54e
lea rcx, [rbp + 0x60]
mov dword [rcx + 0x100], esi
lea rdx, [0x140096592]
call fcn.140002bc9
jmp 0x14002254f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str..._.._.._third_party_crashpad_client_crashpad_client_win.cc
lea rcx, [rbp + 0x60]
mov r9d, 0x1f1
call fcn.14004b54e
lea rcx, [rbp + 0x60]
mov dword [rcx + 0x100], esi
lea rdx, [0x140097232]
call fcn.140002bc9
lea rcx, [rbp + 0x60]
call fcn.14004bba4
xor esi, esi
xor edi, edi
lea rcx, [rbp + 0x228]
call fcn.1400232e0
lea rcx, [rbp + 0x220]
call fcn.14000a7ae
lea rcx, [rbp + 0x250]
call fcn.140006978
lea rcx, [rbp + 0x218]
call fcn.1400119c6
lea rcx, [rbp + 0x180]
call fcn.140004a1e
xor eax, eax
cmp sil, 1
adc rax, 1
mov qword [0x1400c5068], rax
mov rcx, qword [rbp + 0x278]
call fcn.14002303a
mov eax, edi
add rsp, 0x308
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.14000392c
lea rcx, [0x1400c5078]
call fcn.140052d98
cmp dword [0x1400c5078], 0xffffffff
jne 0x140022047
lea rcx, [0x1400a05ca]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.140013c90
mov qword [0x1400c5070], rax
lea rcx, [0x1400c5078]
call fcn.140052e30
jmp 0x140022047
lea rcx, [0x1400c5088]
call fcn.140052d98
cmp dword [0x1400c5088], 0xffffffff
jne 0x14002206c
cmp qword [0x1400c5070], 0
je 0x140022657
lea rcx, [0x1400a05ca]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.140013c90
jmp 0x140022659
call fcn.14000392c
xor eax, eax
mov qword [0x1400c5080], rax
lea rcx, [0x1400c5088]
call fcn.140052e30
jmp 0x14002206c