Function at 0x140005150
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x2f]
sub rsp, 0x98
mov rsi, rdx
lea rcx, [rbp + 0x67]
call qword [sym.imp.CrlPlatform.dll_public:_void___cdecl_CrlPlatform::CrlStringT_wchar_t_::constructor_void____ptr64]
nop
mov edx, 0x104
lea rcx, [rbp + 0x67]
call qword [sym.imp.CrlPlatform.dll_public:_wchar_t____ptr64___cdecl_CrlPlatform::CrlStringT_wchar_t_::GetBuffer_int____ptr64]
mov rdx, rax
xor ecx, ecx
mov r8d, operator
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov edx, 0xffffffff
lea rcx, [rbp + 0x67]
call qword [sym.imp.CrlPlatform.dll_public:_void___cdecl_CrlPlatform::CrlStringT_wchar_t_::ReleaseBuffer_int____ptr64]
lea rcx, [rbp + 0x67]
call qword [sym.imp.CrlPlatform.dll_public:_wchar_t_const____ptr64___cdecl_CrlPlatform::CrlStringT_wchar_t_::operator_wchar_t_const____ptr64_void_const___ptr64]
mov rdx, rax
lea rcx, [rbp + 0x7f]
call qword [sym.imp.CrlUtils.dll_class_CrlPlatform::CrlStringT_wchar_t____cdecl_SystemIO::Path::GetFolderName_wchar_t_const____ptr64_]
nop
lea rdx, str.Scanning_fonts._Please_be_patient.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14000de50
xor r14d, r14d
lea r15, str.open
xorps xmm0, xmm0
movups xmmword [rbp - 0x49], xmm0
movups xmmword [rbp - 0x39], xmm0
movups xmmword [rbp - 0x29], xmm0
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rbp - 9], xmm0
movups xmmword [rbp + 7], xmm0
movups xmmword [rbp + 0x17], xmm0
mov dword [rbp - 0x49], 0x70
mov dword [rbp - 0x45], 0x440
mov qword [rbp - 0x41], r14
mov qword [rbp - 0x39], r15
lea rcx, [rbp + 0x67]
call qword [sym.imp.CrlPlatform.dll_public:_wchar_t____ptr64___cdecl_CrlPlatform::CrlStringT_wchar_t_::GetBuffer_void____ptr64]
mov qword [rbp - 0x31], rax
mov rcx, rsi
call qword [sym.imp.CrlPlatform.dll_public:_wchar_t_const____ptr64___cdecl_CrlPlatform::CrlStringT_wchar_t_::operator_wchar_t_const____ptr64_void_const___ptr64]
mov qword [rbp - 0x29], rax
lea rcx, [rbp + 0x7f]
call qword [sym.imp.CrlPlatform.dll_public:_wchar_t____ptr64___cdecl_CrlPlatform::CrlStringT_wchar_t_::GetBuffer_void____ptr64]
mov qword [rbp - 0x21], rax
mov dword [rbp - 0x19], r14d
mov dil, 1
lea rcx, [rbp - 0x49]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x14000534c
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x1f]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebx, eax
test eax, eax
je 0x1400052d6
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
cmp eax, 0x80
je 0x1400052cd
cmp eax, 0x102
je 0x1400052c4
cmp eax, 0xffffffff
je 0x1400052a2
lea rdx, str.Unhandled:
call fcn.14000de50
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int____ptr64]
jmp 0x14000532b
lea rdx, str.WAIT_FAILED:
call fcn.14000de50
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int____ptr64]
jmp 0x14000532b
lea rdx, str.WAIT_TIMEOUT
jmp 0x140005326
lea rdx, str.WAIT_ABANDONED
jmp 0x140005326
call qword [sym.imp.CdrFnt.dll_bool___cdecl_CFMFontServiceCrashed_void_]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
test al, al
je 0x14000531f
lea rdx, [0x140015cc4]
call fcn.14000de50
lea rdx, str.FontService::RunWatchdog:_Crash_detected
lea rcx, [rbp + 0x77]
call qword [sym.imp.CrlPlatform.dll_public:_void___cdecl_CrlPlatform::CrlStringT_wchar_t_::constructor_wchar_t_const____ptr64____ptr64]
nop
lea rcx, [rbp + 0x77]
call qword [sym.imp.CrlInterprocess.dll_void___cdecl_CPSDebugLogEntry_class_CrlPlatform::CrlStringT_wchar_t__const____ptr64_]
nop
lea rcx, [rbp + 0x77]
call qword [sym.imp.CrlPlatform.dll_public:_void___cdecl_CrlPlatform::CrlStringT_wchar_t_::destructor_void____ptr64]
xor dil, dil
jmp 0x14000533b
lea rdx, str.Done
call fcn.14000de50
lea rdx, [0x14000e2a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rcx, qword [rbp + 0x1f]
test rcx, rcx
je 0x140005383
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140005383
lea rdx, str.Failed_to_exec:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.14000de50
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int____ptr64]
lea rdx, [0x14000e2a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
test dil, dil
je 0x1400051e0
lea rcx, [rbp + 0x7f]
call qword [sym.imp.CrlPlatform.dll_public:_void___cdecl_CrlPlatform::CrlStringT_wchar_t_::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x67]
call qword [sym.imp.CrlPlatform.dll_public:_void___cdecl_CrlPlatform::CrlStringT_wchar_t_::destructor_void____ptr64]
nop
mov rcx, rsi
call qword [sym.imp.CrlPlatform.dll_public:_void___cdecl_CrlPlatform::CrlStringT_wchar_t_::destructor_void____ptr64]
add rsp, 0x98
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret