Function at 0x14006c910
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
xor ecx, ecx
mov edx, 0x2b7
lea r8d, [rcx + 7]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rsp + 0xa8], rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, 0xffff
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorCount]
xor ecx, ecx
mov edx, 0x319
lea r8d, [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor esi, esi
lea r8, str.world
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0x40
mov dword [rsp + 0x30], 9
lea r9d, [rsi + 0x40]
lea rdx, str.sneakers
xor ecx, ecx
mov dword [rsp + 0x28], esi
mov rdi, rax
mov dword [rsp + 0x20], 9
call qword [sym.imp.USER32.dll_CreateWindowExA]
lea r9d, [rsi + 9]
lea r8, [0x140001b00]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 0xffff
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorCount]
lea ecx, [rsi + 9]
mov r12d, eax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9d, [rsi + 0x40]
lea r8, [0x140001b00]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], rsi
mov rbp, rax
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea r8d, [rsi + 0x15]
mov edx, 0x30e
xor ecx, ecx
mov r15, rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov r14, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
mov ebx, eax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], 8
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], r12d
lea r8, str.c1ret
lea rdx, str.sneakers
xor r9d, r9d
mov ecx, r12d
mov dword [rsp + 0x28], 8
mov r13, rax
mov dword [rsp + 0x20], r12d
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rsi, rax
mov al, 0xfe
imul bpl
movzx ecx, al
mov al, 0x2d
imul dil
sub cl, al
sub cl, 5
add cl, r12b
movzx ecx, cl
imul ecx, esi
lea eax, [r14 + 5]
sub ecx, r15d
sub ecx, ebx
add ecx, r13d
add eax, ecx
mov dword [rsp + 0xa0], eax
cmp r12d, 9
jge 0x14006cb5d
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorGroupCount]
movzx edi, ax
call qword [sym.imp.USER32.dll_GetActiveWindow]
xor ecx, ecx
lea r8d, [rcx + 0x19]
mov edx, 0x37c
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
lea edx, [rbx*4]
mov r8d, r15d
imul esi, edi
imul r8d, ebp
sub edx, r8d
add esi, r8d
lea eax, [r14 + r14*4]
sub edx, dword [rsp + 0xa0]
sub eax, edi
lea ebx, [r15 + 0x4d]
add edx, 0xfffffa3e
lea ecx, [rax + rax*4]
add edx, r14d
add esi, ecx
xor ecx, ecx
lea ebx, [rsi + rbx*2]
add edx, edi
lea r8d, [rcx + 0x14]
add ebx, dword [rsp + 0xa8]
add edx, r12d
add ebx, edx
mov edx, 0x2ad
add ebx, ebp
add ebx, r13d
add ebx, r14d
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [rsp + 0x30], r12d
xor r9d, r9d
mov r8, rbp
mov rdx, rbp
mov rcx, r15
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 4
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rbx, qword [rsp + 0xb0]
lea rax, str.c3a1
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret