Function at 0x14003c660
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x380
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x370], rax
or rsi, 0xffffffffffffffff
mov qword [rsp + 0x98], r9
mov rbp, r8
mov rdi, rdx
mov qword [rsp + 0xc0], rcx
mov r14, rsi
inc r14
cmp byte [rdx + r14], 0
jne 0x14003c6a6
mov rax, rsi
inc rax
cmp byte [rax + r8], 0
jne 0x14003c6b3
sub r14d, eax
mov ecx, r14d
call fcn.14006aa50
lea rcx, [rsp + 0xc8]
mov r12, rax
mov qword [rsp + 0x88], rax
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rdx, [0x1400ed3f4]
xor ecx, ecx
call fcn.1400b5590
mov ecx, r14d
movzx r15d, al
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rsi
mov rdx, rax
mov qword [rsp + 0x80], rax
nop word [rax + rax]
inc rcx
cmp byte [rdi + rcx], 0
jne 0x14003c710
mov rax, rsi
nop dword [rax]
inc rax
cmp byte [rax + rbp], 0
jne 0x14003c720
imul cl
mov dword [rsp + 0x30], 1
mov ecx, 0x20
lea ebx, [r12 + rax]
lea rax, str.c1a1
mov qword [rsp + 0x28], rax
lea rax, str.spank
movzx r9d, bl
mov qword [rsp + 0x20], rax
call fcn.14008a360
movzx r10d, bl
xor ebx, ebx
mov ecx, r14d
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rcx
movzx eax, r15b
lea r8, [0x1400ed3f4]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], r10d
lea rdx, str.deodorant
mov r9d, r10d
mov ecx, r10d
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x64], eax
mov dword [rsp + 0x60], r10d
mov dword [rsp + 0x20], 0x20
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov r13, rax
mov qword [rsp + 0x90], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov r9, qword [rsp + 0x80]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
mov r12, rax
mov qword [rsp + 0xb0], rax
lea rax, str.paleontologist
lea r8, str.c2a5
lea rcx, str.c2a5
mov rdx, r13
mov qword [rsp + 0x20], rax
call fcn.1400ae870
mov rcx, rsi
mov r8d, eax
mov dword [rsp + 0x78], eax
nop dword [rax]
inc rcx
cmp byte [rdi + rcx], bl
jne 0x14003c820
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp byte [rax + rbp], bl
jne 0x14003c830
mov r10, qword [rsp + 0x88]
imul ecx, eax
mov eax, r12d
imul eax, r13d
movzx edx, r15b
add r10d, 9
add ecx, eax
mov rbx, rsi
sub ecx, edx
add ecx, dword [rsp + 0x70]
add r10d, ecx
mov dword [rsp + 0x68], r10d
inc rbx
cmp byte [rdi + rbx], 0
jne 0x14003c865
movzx eax, r12b
movzx ecx, r13b
shl cl, 2
imul r8b
add al, cl
sub al, byte [rsp + 0x98]
sub al, r15b
mov r15, rsi
sub al, 0x1e
add bl, al
nop
inc r15
cmp byte [rdi + r15], 0
jne 0x14003c890
lea eax, [rdx*8]
lea r9, str.c3a0
lea rdx, str.c2a5
sub r15d, eax
movzx r8d, bl
mov ecx, r10d
mov dword [rsp + 0x20], r15d
call fcn.1400624c0
mov r13, rax
call fcn.1400d92b0
lea rcx, [rsp + 0xf0]
mov edx, 0x104
mov qword [rsp + 0xa0], rax
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
xor ecx, ecx
mov edx, 0x265
lea r8d, [rcx + 0xd]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ecx, ecx
mov edx, 0x2d4
lea r8d, [rcx + 5]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
lea rcx, [rsp + 0xf0]
xor edx, edx
mov r8d, 0x140
call fcn.1400e27d0
lea rdx, [rsp + 0xf0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movsx r8, bl
mov qword [rsp + 0xb8], r8
mov rdx, rsi
inc rdx
cmp byte [r13 + rdx], 0
jne 0x14003c943
mov eax, dword [rsp + 0x60]
imul r12d, dword [rsp + 0x80], 7
mov rcx, qword [rsp + 0x90]
lea eax, [rax + rax*4]
lea ecx, [rcx + rax*8]
mov rax, rsi
inc ecx
add ecx, ecx
sub r12d, ecx
sub r12d, dword [rsp + 0x64]
add r12d, r12d
sub r12d, r14d
add r12d, r8d
add r12d, dword [rsp + 0x70]
sub r12d, edx
nop dword [rax]
inc rax
cmp byte [rdi + rax], 0
jne 0x14003c990
add r12d, eax
mov rax, rsi
nop
inc rax
cmp byte [rax + rbp], 0
jne 0x14003c9a0
movsx ecx, bl
add r12d, eax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea rcx, [rsp + 0xf0]
mov edx, 0x104
mov qword [rsp + 0xa8], rax
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
cmp r12d, 5
jl 0x14003ca1e
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rcx, [rsp + 0x230]
xor edx, edx
mov r8d, 0x140
call fcn.1400e27d0
lea rdx, [rsp + 0x230]
lea rcx, str.c0ret
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
call qword [sym.imp.USER32.dll_GetActiveWindow]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
mov qword [rsp + 0x28], rax
lea r8, [0x140001b00]
movsx r9, bl
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor ecx, ecx
mov edx, 0xe7
lea r8d, [rcx + 0x1a]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rbx, qword [rsp + 0xc0]
mov rcx, rsi
mov qword [rbx], rax
lea rax, str.panties
mov qword [rbx + 0x10], 0
mov qword [rbx + 8], rax
inc rcx
cmp byte [rcx + rbp], 0
jne 0x14003ca90
mov rax, qword [rsp + 0x70]
imul edx, dword [rsp + 0xb0], 0xfffffff2
imul ecx, dword [rsp + 0x98]
add eax, r15d
add eax, dword [rsp + 0x68]
shl eax, 2
sub edx, eax
mov rax, rsi
sub edx, ecx
nop
inc rax
cmp byte [r13 + rax], 0
jne 0x14003cac0
mov rbp, qword [rsp + 0xa0]
imul eax, ebp
sub edx, eax
sub edx, dword [rsp + 0x60]
sub edx, r12d
sub edx, dword [rsp + 0x90]
sub edx, r14d
add edx, dword [rsp + 0x64]
add edx, dword [rsp + 0xb8]
add edx, dword [rsp + 0xa8]
add edx, dword [rsp + 0x88]
add edx, dword [rsp + 0x78]
inc rsi
cmp byte [rdi + rsi], 0
jne 0x14003cb06
lea eax, [rdx - 0x21]
lea rcx, [rsp + 0x230]
mov r8d, 0x140
add eax, esi
xor edx, edx
mov dword [rbx + 0x18], eax
call fcn.1400e27d0
lea rdx, [rsp + 0x230]
lea rcx, str.c2a5
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rbx + 0x28], rbp
mov qword [rbx + 0x20], rax
mov rax, qword [rsp + 0x80]
mov qword [rbx + 0x30], rax
mov rax, rbx
mov rcx, qword [rsp + 0x370]
xor rcx, rsp
call fcn.1400dd340
mov rbx, qword [rsp + 0x3c0]
add rsp, 0x380
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret