Function at 0x140012080
Capabilities:
Create process on windows
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x1050]
mov eax, 0x1150
call fcn.140033510
sub rsp, rax
mov rax, qword [0x14007e048]
xor rax, rsp
mov qword [rbp + 0x1040], rax
mov rdi, r8
xor r12d, r12d
mov r15d, r12d
mov dword [rsp + 0x60], r12d
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
lea edx, [r12 + 2]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
lea ecx, [r12 + 1]
call fcn.140032da4
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400132f0]
xor edx, edx
xor ecx, ecx
call fcn.14003dbc8
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140012513
lea rcx, [0x14006eb48]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.wine_get_version
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, [r12 - 1]
test rax, rax
jne 0x1400121a4
lea r15d, [r12 + 1]
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], 7
mov r8, rbx
inc r8
cmp word [rdi + r8*2], 0
jne 0x140012152
mov rdx, rdi
lea rcx, [rbp - 0x20]
call fcn.1400020c0
lea rcx, [rbp - 0x20]
mov rdi, qword [rbp - 0x20]
mov r14, qword [rbp - 8]
cmp r14, 8
cmovae rcx, rdi
mov qword [rsp + 0x20], SafeArrayUnaccessData
lea r9, str.retry_non_windows
xor r8d, r8d
mov rdx, qword [rbp - 0x10]
call fcn.140002750
cmp rax, 0xffffffffffffffff
jne 0x1400121ac
mov sil, 1
jmp 0x1400121af
mov r14, qword [rbp - 8]
mov rdi, qword [rbp - 0x20]
xor sil, sil
test r15b, 1
je 0x1400121f0
cmp r14, 8
jb 0x1400121f0
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400121e8
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012523
mov rcx, rdi
call fcn.140032d70
test sil, sil
je 0x1400121fc
call fcn.1400126a0
jmp 0x140012201
call fcn.1400129a0
test al, al
jne 0x14001244b
test sil, sil
je 0x140012423
cmp dword [0x14007ec30], 0x1388
jae 0x140012423
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0x40]
call fcn.140034fa0
mov r8d, 0x400
lea rdx, [rbp + 0x40]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rax
xorps xmm1, xmm1
movups xmmword [rsp + 0x74], xmm1
movups xmmword [rbp - 0x7c], xmm1
movups xmmword [rbp - 0x6c], xmm1
movups xmmword [rbp - 0x5c], xmm1
movups xmmword [rbp - 0x4c], xmm1
movups xmmword [rbp - 0x3c], xmm1
mov dword [rbp - 0x2c], eax
mov dword [rsp + 0x70], 0x68
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0x840]
call fcn.140034fa0
mov qword [rbp], r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], 7
lea rax, [rbp + 0x40]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x1400122a1
mov r8, rbx
lea rdx, [rbp + 0x40]
lea rcx, [rbp]
call fcn.1400020c0
mov r8d, SafeArrayUnaccessData
lea rdx, str.__retry_non_windows
lea rcx, [rbp]
call fcn.140003190
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x140012330
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001232b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012529
call fcn.140032d70
lea rdx, [rbp + 0x20]
mov rdi, qword [rbp + 0x38]
cmp rdi, 8
setae sil
mov rbx, qword [rbp + 0x20]
cmovae rdx, rbx
mov r8, qword [rbp + 0x30]
add r8, r8
lea rcx, [rbp + 0x840]
call fcn.140035160
lea rax, [rbp - 0x20]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x840]
lea rcx, [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400123b1
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x58], 0
je 0x14001252f
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
call fcn.14003201c
test eax, eax
jne 0x14001253a
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x50], xmm0
test sil, sil
je 0x1400124cb
lea rdx, [rdi*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140012416
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012542
mov rcx, rbx
call fcn.140032d70
jmp 0x1400124cb
cmp dword [rsp + 0x58], 0
je 0x140012548
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
call fcn.14003201c
test eax, eax
jne 0x14001250b
jmp 0x1400124c2
mov rax, qword [0x140081500]
test rax, rax
je 0x14001248b
cmp dword [rax + 0x2d4], 1
jne 0x140012484
lea rcx, [rax + 0x10]
call fcn.140025020
test eax, eax
jle 0x14001247d
lea ecx, [rax + rax*4]
lea ecx, [rcx*8 + 0xfa]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [0x140081500]
mov byte [rax + 0x438], 1
cmp dword [rsp + 0x58], 0
je 0x140012548
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0x58], eax
je 0x140012553
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp], xmm0
xor edx, edx
lea rcx, [rbp]
call fcn.140032040
test eax, eax
jne 0x14001255e
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x50], xmm0
call qword [sym.imp.ole32.dll_CoUninitialize]
cmp dword [rsp + 0x58], 0
jne 0x140012505
xor eax, eax
mov rcx, qword [rbp + 0x1040]
xor rcx, rsp
call fcn.140032d50
lea r11, [rsp + 0x1150]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.14003cd1c
int3
mov ecx, eax
call fcn.140031f50
int3
mov dword [rsp + 0x58], r12d
mov ecx, 6
call fcn.140031f8c
int3
call fcn.1400394dc
int3
call fcn.1400394dc
int3
mov ecx, 1
call fcn.140031f8c
int3
mov ecx, eax
call fcn.140031f50
int3
call fcn.1400394dc
int3
mov ecx, 1
call fcn.140031f8c
int3
mov ecx, 5
call fcn.140031f8c
int3
mov ecx, 2
call fcn.140031f8c
int3