Function at 0x1400cc400
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1c0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x1b0], rax
movsx r13d, r8b
mov rbp, rdx
mov r15, rcx
mov r12d, r13d
imul r12d, ecx
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov ecx, r13d
mov qword [rsp + 0x60], rax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
or rsi, 0xffffffffffffffff
mov rdi, rax
mov qword [rsp + 0x68], rax
mov rax, rsi
nop dword [rax]
inc rax
cmp byte [rax + rbp], 0
jne 0x1400cc460
lea r14d, [r15 + r13]
sub r14b, al
cmp r12d, r15d
jg 0x1400cc4e7
xor ecx, ecx
mov edx, 0x112
lea r8d, [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
movzx eax, dil
movzx edi, r15b
add al, al
lea r8, [0x140001b00]
xor edx, edx
sub dil, al
xor eax, eax
xor ecx, ecx
mov qword [rsp + 0x28], rax
sub dil, r12b
mov dword [rsp + 0x20], eax
movsx rbx, dil
mov r9, rbx
call qword [sym.imp.KERNEL32.dll_CreateThread]
movsx ecx, dil
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor eax, eax
lea r8, [0x140001b00]
mov qword [rsp + 0x28], rax
mov r9, rbx
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, qword [rsp + 0x68]
xor ecx, ecx
mov edx, 0x3e4
lea r8d, [rcx + 0x11]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
call qword [sym.imp.USER32.dll_GetActiveWindow]
movzx eax, r14b
cmp r15d, eax
jae 0x1400cc6a6
xor ecx, ecx
mov edx, 0x22e
lea r8d, [rcx + 0xc]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
nop dword [rax + rax]
inc rsi
cmp byte [rsi + rbp], 0
jne 0x1400cc530
movzx eax, r12b
imul sil
movzx ecx, al
movzx eax, r15b
imul cl
movzx ecx, al
movzx eax, r15b
imul cl
movzx ecx, al
movzx eax, r13b
imul cl
movzx ebx, al
movzx eax, dil
imul byte [rsp + 0x60]
movzx ecx, al
movzx eax, r14b
imul cl
sub bl, al
call qword [sym.imp.USER32.dll_GetActiveWindow]
xor esi, esi
lea r8, [0x140001b00]
mov r9d, r15d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], rsi
mov edi, r15d
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, [rsp + 0x70]
xor edx, edx
mov r8d, 0x140
call fcn.1400e27d0
lea rdx, [rsp + 0x70]
lea rcx, str.c0a3
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
lea rcx, [rsp + 0x70]
xor edx, edx
mov r8d, 0x140
call fcn.1400e27d0
lea rdx, [rsp + 0x70]
lea rcx, str.wine
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r12d
movzx ebx, bl
lea r8, str.c0a3
lea rdx, str.wine
movzx edi, r14b
mov r9d, r15d
mov ecx, ebx
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], edi
call qword [sym.imp.USER32.dll_CreateWindowExA]
call qword [sym.imp.USER32.dll_GetActiveWindow]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rsi
movzx eax, r14b
mov r9d, r15d
mov r8, rbp
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], r12d
lea rbx, [0x1400ed3f4]
mov ecx, edi
mov dword [rsp + 0x28], edi
mov rdx, rbx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, 0xffff
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
lea rcx, [rsp + 0x70]
xor edx, edx
mov r8d, 0x140
call fcn.1400e27d0
lea rdx, [rsp + 0x70]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rax, rbx
jmp 0x1400cc6ad
lea rax, [0x1400ed3f4]
mov rcx, qword [rsp + 0x1b0]
xor rcx, rsp
call fcn.1400dd340
mov rbx, qword [rsp + 0x218]
add rsp, 0x1c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret