Function at 0x1400274b0
Capabilities:
Check for time delay via gettickcount
Create thread

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xc8]
sub rsp, 0x1c8
mov r15, r8
mov edi, 0x1e
lea r12, [0x1400ed3f4]
sub edi, r8d
lea rdx, [0x1400ed4d4]
mov rcx, r12
mov r8d, edi
mov dword [rbp + 0x118], edi
call fcn.140086d00
lea rcx, [rbp - 0x68]
mov r8, r15
mov edx, 0x40
mov rsi, rax
call fcn.14006e7f0
xor ecx, ecx
mov edx, 0x1b8
lea r8d, [rcx + 0x11]
movups xmm0, xmmword [rax]
movsd xmm1, qword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm0
movsd qword [rbp + 0x20], xmm1
call qword [sym.imp.KERNEL32.dll_FindResourceA]
or rbx, 0xffffffffffffffff
mov qword [rsp + 0x60], rax
mov r14, rbx
inc r14
cmp byte [rsi + r14], 0
jne 0x140027546
lea ecx, [r15 + r15]
mov eax, 0x1c
mov r13d, 0xfffffff2
sub r13d, dword [rbp + 0x10]
sub eax, edi
mov qword [rbp - 0x38], 0
add r14d, eax
mov eax, 0x9e
mov dword [rbp + 0x110], ecx
sub eax, ecx
mov dword [rbp - 0x30], 1
mov dword [rbp + 0x128], r13d
mov dword [rbp - 0x2c], r13d
mov dword [rbp - 0x28], 0x10
mov dword [rbp - 0x40], eax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r8d, r14d
mov qword [rbp - 0x20], rax
movups xmm0, xmmword [rbp - 0x40]
movups xmm1, xmmword [rbp - 0x30]
movaps xmmword [rbp + 0x70], xmm0
movaps xmmword [rbp + 0x80], xmm1
movsd xmm0, qword [rbp - 0x20]
movsd qword [rbp + 0x90], xmm0
call fcn.1400c7a80
mov rdi, rax
cmp r14d, 0x40
jg 0x140027a2d
call qword [sym.imp.USER32.dll_GetActiveWindow]
lea r8, str.c0a1
lea rdx, str.cirrus
lea rcx, [rbp - 0x40]
mov r9, rax
mov qword [rsp + 0x68], rax
call fcn.1400b2b70
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm0
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rbp + 0x40], xmm1
movups xmmword [rbp + 0x50], xmm0
call fcn.140071bf0
lea r8, str.c3a1
lea rdx, str.c0a1
lea rcx, str.c2ret
mov r9, r15
mov r12, rax
call fcn.1400618f0
lea r8, [0x140001b00]
xor edx, edx
mov qword [rbp + 8], rax
xor eax, eax
xor ecx, ecx
mov qword [rsp + 0x28], rax
lea r9d, [rax + 0x10]
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, str.c3a0
xor edx, edx
mov qword [rbp - 0x70], rax
call fcn.1400b8f60
mov qword [rbp - 0x68], 0
mov qword [rbp - 0x50], rax
mov rax, qword [rsp + 0x68]
mov qword [rbp - 0x60], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea rdx, [rsp + 0x70]
movups xmm0, xmmword [rbp - 0x68]
mov dword [rbp - 0x58], eax
lea rax, str.pressroom
lea rcx, [rbp + 0x70]
movaps xmmword [rsp + 0x70], xmm0
movsd xmm1, qword [rbp - 0x58]
movsd qword [rbp - 0x80], xmm1
mov qword [rsp + 0x30], rax
lea rax, str.brush
xor r9d, r9d
mov qword [rsp + 0x28], rax
mov r8, r15
mov qword [rsp + 0x20], 0
call fcn.1400a18a0
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, str.c5a1
mov qword [rsp + 0x70], rax
mov rax, rbx
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm1
nop dword [rax]
inc rax
cmp byte [rdi + rax], 0
jne 0x140027700
imul eax, dword [rsp + 0x68]
lea ecx, [rax + rax*2]
mov rax, rbx
add ecx, ecx
inc rax
cmp byte [rsi + rax], 0
jne 0x140027716
imul eax, r15d
sub ecx, eax
mov rax, rbx
sub ecx, dword [rbp + 0xb0]
sub ecx, dword [rbp + 0x20]
inc rax
cmp byte [r12 + rax], 0
jne 0x140027731
add eax, 0x1f
mov edx, 0x34d
mov dword [rsp + 0x7c], 2
add eax, ecx
xor ecx, ecx
lea r8d, [rcx + 0x1d]
mov dword [rsp + 0x78], eax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rcx, rbx
mov qword [rbp - 0x48], rax
inc rcx
cmp byte [rdi + rcx], 0
jne 0x140027764
mov eax, dword [rbp + 0x118]
imul ecx, r13d
mov r13d, r14d
shl r13d, 4
lea eax, [rax + rax*2]
sub r13d, ecx
add r13d, eax
sub r13d, dword [rsp + 0x68]
shl r13d, 2
sub r13d, dword [rbp + 0xb0]
add r13d, dword [rbp - 0x70]
add r13d, r15d
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rdx, qword [rbp - 0x48]
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
mov r8d, r13d
mov qword [rbp - 8], rax
call fcn.14006b7b0
mov qword [rbp], rax
call fcn.1400adef0
mov rcx, rbx
nop dword [rax + rax]
inc rcx
cmp byte [rdi + rcx], 0
jne 0x1400277d0
mov eax, dword [rbp + 0x38]
lea r15d, [rax + rax*2]
mov rax, rbx
add r15d, r15d
sub r15d, dword [rbp + 0x110]
sub r15d, dword [rbp + 0x118]
add r15d, dword [rsp + 0x60]
add r15d, dword [rbp - 0x50]
add r15d, dword [rbp - 0x70]
add r15d, dword [rbp + 0x120]
sub r15d, ecx
nop dword [rax + rax]
inc rax
cmp byte [r12 + rax], 0
jne 0x140027810
sub r15d, eax
sub r15d, 4
mov ecx, r15d
call fcn.1400757e0
mov rcx, rbx
mov qword [rsp + 0x70], rax
inc rcx
cmp byte [rsi + rcx], 0
jne 0x140027831
mov eax, dword [rbp]
shl ecx, 4
sub ecx, dword [rbp + 0x120]
imul eax, r15d
mov r15, rbx
lea edx, [rax + rcx*2]
sub edx, dword [rbp + 0x128]
inc r15
cmp byte [rdi + r15], 0
jne 0x140027856
mov rax, qword [rbp - 8]
lea rcx, [rbp - 0x40]
add eax, edx
add r15d, eax
add r15d, dword [rsp + 0x60]
add r15d, r14d
mov edx, r15d
call fcn.14006f050
mov r12, rbx
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm1
inc r12
cmp byte [rdi + r12], 0
jne 0x140027892
mov rcx, qword [rbp + 8]
shl r12b, 2
mov rax, rbx
inc rax
cmp byte [rcx + rax], 0
jne 0x1400278a7
mov rdx, qword [rbp + 0x120]
add r12b, al
movzx eax, byte [rsp + 0x60]
imul r14b
movzx ecx, al
movzx eax, dl
imul cl
movzx ecx, al
movzx eax, dl
shl cl, 4
dec cl
imul cl
add al, 9
add r12b, al
add r12b, byte [rbp + 0x34]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov rcx, qword [rbp - 0x50]
mov r8, qword [rbp]
mov dword [rbp - 0x40], eax
add ecx, 0xfffffffe
imul ecx, dword [rbp + 0x120]
lea rax, str.c5a1
mov qword [rbp - 0x30], r8
mov qword [rbp - 0x38], rax
mov eax, dword [rbp + 0x78]
add r8d, 0x33
imul eax, r15d
sub ecx, eax
mov eax, dword [rbp + 0x50]
imul eax, dword [rsp + 0x68]
lea eax, [rax + rax*2]
lea edx, [rcx + rax*2]
mov eax, dword [rbp + 0x110]
xor ecx, ecx
shl eax, 6
add eax, edx
mov edx, 0x1f1
sub eax, dword [rsp + 0x70]
sub eax, dword [rbp - 0x48]
sub eax, r13d
add eax, r8d
lea r8d, [rcx + 6]
add eax, dword [rsp + 0x60]
add eax, r14d
mov dword [rbp - 0x28], eax
lea rax, str.c3a0
mov qword [rbp - 0x20], rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ecx, ecx
lea r8d, [rcx + 0x17]
mov edx, 0x38f
mov qword [rbp - 0x18], rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rcx, rbx
mov qword [rbp - 0x10], rax
movups xmm0, xmmword [rbp - 0x40]
movups xmm1, xmmword [rbp - 0x30]
movaps xmmword [rbp + 0x30], xmm0
movaps xmmword [rbp + 0x40], xmm1
movups xmm0, xmmword [rbp - 0x20]
movsd xmm1, qword [rbp - 0x10]
movaps xmmword [rbp + 0x50], xmm0
movsd qword [rbp + 0x60], xmm1
inc rcx
cmp byte [rdi + rcx], 0
jne 0x1400279a1
mov rax, qword [rsp + 0x70]
imul ecx, dword [rbp + 0x128]
mov rdx, qword [rbp - 8]
imul eax, r15d
imul edx, r13d
imul edx, dword [rbp + 0x120]
add edx, eax
mov rax, qword [rsp + 0x68]
lea eax, [rax + rax*2]
add eax, eax
sub edx, eax
mov rax, qword [rsp + 0x60]
add ecx, edx
lea r9d, [rcx + rax*4]
mov rax, rbx
sub r9d, dword [rbp + 0xb8]
sub r9d, dword [rbp - 0x48]
sub r9d, dword [rbp - 0x58]
sub r9d, dword [rbp + 0x118]
add r9d, dword [rbp - 0x50]
add r9d, dword [rbp - 0x70]
inc rax
cmp byte [rsi + rax], 0
jne 0x140027a03
mov r15, qword [rbp + 0x120]
sub r9d, eax
movzx edx, r12b
mov rcx, r15
add r9d, 0x1f
call fcn.1400be6e0
lea r12, [0x1400ed3f4]
xor edi, edi
mov qword [rbp - 0x68], rdi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
mov dword [rbp - 0x60], eax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rbp - 0x58], rax
movsxd rax, r14d
lea r9d, [rdi + 0x10]
lea r8, str.trust
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x10
mov dword [rsp + 0x30], 0x10
lea ecx, [rdi + 4]
mov rdx, rsi
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0x40
call qword [sym.imp.USER32.dll_CreateWindowExA]
lea rdx, [rsp + 0x70]
movups xmm0, xmmword [rbp - 0x68]
movsd xmm1, qword [rbp - 0x58]
xor ecx, ecx
mov r8, rax
mov rdi, rax
movaps xmmword [rsp + 0x70], xmm0
movsd qword [rbp - 0x80], xmm1
call fcn.14008a940
cmp dword [rbp + 0x118], 0x10
jge 0x140027b1d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
mov r13d, eax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
inc rbx
cmp byte [rsi + rbx], 0
jne 0x140027ad1
mov edx, dword [rbp + 0x18]
mov r9d, 0x14
lea rcx, str.link
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x40
mov qword [rsp + 0x20], rcx
imul edx, dword [rsp + 0x60]
imul edx, r15d
sub r9d, edx
mov r8d, eax
mov rcx, r12
sub r9d, r14d
movzx edx, r13b
add r9d, ebx
call fcn.1400847d0
mov rax, r12
add rsp, 0x1c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret