Function at 0x140015dd0
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x1050]
mov eax, 0x1150
call fcn.14003b130
sub rsp, rax
mov rax, qword [0x14008b048]
xor rax, rsp
mov qword [rbp + 0x1040], rax
mov rdi, r8
xor r12d, r12d
mov r15d, r12d
mov dword [rsp + 0x60], r12d
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
lea edx, [r12 + 2]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
lea ecx, [r12 + 1]
call fcn.14003a9c4
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140017040]
xor edx, edx
xor ecx, ecx
call fcn.140047670
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140016263
lea rcx, [0x140078a50]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.wine_get_version
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, [r12 - 1]
test rax, rax
jne 0x140015ef4
lea r15d, [r12 + 1]
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], 7
mov r8, rbx
inc r8
cmp word [rdi + r8*2], 0
jne 0x140015ea2
mov rdx, rdi
lea rcx, [rbp - 0x20]
call fcn.1400040a0
lea rcx, [rbp - 0x20]
mov rdi, qword [rbp - 0x20]
mov r14, qword [rbp - 8]
cmp r14, 8
cmovae rcx, rdi
mov qword [rsp + 0x20], SafeArrayGetElement
lea r9, str.retry_non_windows
xor r8d, r8d
mov rdx, qword [rbp - 0x10]
call fcn.140005c00
cmp rax, 0xffffffffffffffff
jne 0x140015efc
mov sil, 1
jmp 0x140015eff
mov r14, qword [rbp - 8]
mov rdi, qword [rbp - 0x20]
xor sil, sil
test r15b, 1
je 0x140015f40
cmp r14, 8
jb 0x140015f40
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140015f38
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016273
mov rcx, rdi
call fcn.14003a990
test sil, sil
je 0x140015f4c
call fcn.1400163f0
jmp 0x140015f51
call fcn.1400166f0
test al, al
jne 0x14001619b
test sil, sil
je 0x140016173
cmp dword [0x14008bc20], 0x1388
jae 0x140016173
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0x40]
call fcn.14003cbc0
mov r8d, 0x400
lea rdx, [rbp + 0x40]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rax
xorps xmm1, xmm1
movups xmmword [rsp + 0x74], xmm1
movups xmmword [rbp - 0x7c], xmm1
movups xmmword [rbp - 0x6c], xmm1
movups xmmword [rbp - 0x5c], xmm1
movups xmmword [rbp - 0x4c], xmm1
movups xmmword [rbp - 0x3c], xmm1
mov dword [rbp - 0x2c], eax
mov dword [rsp + 0x70], 0x68
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0x840]
call fcn.14003cbc0
mov qword [rbp], r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], 7
lea rax, [rbp + 0x40]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140015ff1
mov r8, rbx
lea rdx, [rbp + 0x40]
lea rcx, [rbp]
call fcn.1400040a0
mov r8d, SafeArrayGetElement
lea rdx, str.__retry_non_windows
lea rcx, [rbp]
call fcn.140005680
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x140016080
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001607b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016279
call fcn.14003a990
lea rdx, [rbp + 0x20]
mov rdi, qword [rbp + 0x38]
cmp rdi, 8
setae sil
mov rbx, qword [rbp + 0x20]
cmovae rdx, rbx
mov r8, qword [rbp + 0x30]
add r8, r8
lea rcx, [rbp + 0x840]
call fcn.14003cd80
lea rax, [rbp - 0x20]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x840]
lea rcx, [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140016101
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x58], 0
je 0x14001627f
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
call fcn.140039c3c
test eax, eax
jne 0x14001628a
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x50], xmm0
test sil, sil
je 0x14001621b
lea rdx, [rdi*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140016166
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016292
mov rcx, rbx
call fcn.14003a990
jmp 0x14001621b
cmp dword [rsp + 0x58], 0
je 0x140016298
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
call fcn.140039c3c
test eax, eax
jne 0x14001625b
jmp 0x140016212
mov rax, qword [0x14008e588]
test rax, rax
je 0x1400161db
cmp dword [rax + 0x2d0], 1
jne 0x1400161d4
lea rcx, [rax + 0x10]
call fcn.14002e720
test eax, eax
jle 0x1400161cd
lea ecx, [rax + rax*4]
lea ecx, [rcx*8 + 0xfa]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [0x14008e588]
mov byte [rax + 0x770], 1
cmp dword [rsp + 0x58], 0
je 0x140016298
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0x58], eax
je 0x1400162a3
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp], xmm0
xor edx, edx
lea rcx, [rbp]
call fcn.140039c60
test eax, eax
jne 0x1400162ae
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x50], xmm0
call qword [sym.imp.ole32.dll_CoUninitialize]
cmp dword [rsp + 0x58], 0
jne 0x140016255
xor eax, eax
mov rcx, qword [rbp + 0x1040]
xor rcx, rsp
call fcn.14003a970
lea r11, [rsp + 0x1150]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.1400466ac
int3
mov ecx, eax
call fcn.140039b70
int3
mov dword [rsp + 0x58], r12d
mov ecx, 6
call fcn.140039bac
int3
call fcn.1400412d4
int3
call fcn.1400412d4
int3
mov ecx, 1
call fcn.140039bac
int3
mov ecx, eax
call fcn.140039b70
int3
call fcn.1400412d4
int3
mov ecx, 1
call fcn.140039bac
int3
mov ecx, 5
call fcn.140039bac
int3
mov ecx, 2
call fcn.140039bac
int3