Function at 0x14005fdf0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x200
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x1f0], rax
movzx r12d, r8b
movsx ebx, dl
mov edi, ecx
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov r14d, ebx
lea r15d, [rax + rax*8]
cmp r15d, ebx
jbe 0x14005fe4b
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov ecx, 0xffff
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
movsx rbx, bl
lea ecx, [rdi + rbx*8]
mov rbp, rax
add ebx, ecx
mov ecx, ebx
imul ecx, eax
lea esi, [rcx + rcx*2]
add esi, esi
cmp edi, esi
jbe 0x14005fe79
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorGroupCount]
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
call qword [sym.imp.USER32.dll_GetActiveWindow]
lea rcx, [rsp + 0xb0]
xor edx, edx
mov r8d, 0x140
call fcn.1400e27d0
lea rdx, [rsp + 0xb0]
lea rcx, str.garter
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ecx, 0xffff
mov qword [rsp + 0x60], rax
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
lea r8, str.gladiolus
movzx r13d, al
xor eax, eax
lea rdx, str.garter
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], esi
mov r9d, esi
mov ecx, edi
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], edi
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [rsp + 0x68], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
xor ecx, ecx
lea r8d, [rcx + 0x10]
mov edx, 0x3c8
call qword [sym.imp.KERNEL32.dll_FindResourceA]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
cmp esi, r13d
jb 0x14005ff70
xor esi, esi
lea r8, str.rainbow
lea rdx, str.gladiolus
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], 0x20
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
movsx ecx, r12b
mov r9d, r14d
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x20
call qword [sym.imp.USER32.dll_CreateWindowExA]
jmp 0x14005ff72
xor esi, esi
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rsi
movsx rax, r12b
lea r8, str.c5a0
lea rdx, str.co_producer
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], r15d
mov r9d, r15d
mov ecx, edi
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], ebp
call qword [sym.imp.USER32.dll_CreateWindowExA]
xor ecx, ecx
lea r8d, [rcx + 0xb]
mov edx, 0xfe
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ecx, ecx
mov edx, 0xd5
lea r8d, [rcx + 3]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rdi
movsx eax, r12b
lea r8, str.co_producer
lea rdx, str.garter
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ebp
mov r9d, ebp
mov ecx, 0x20
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r13d
call qword [sym.imp.USER32.dll_CreateWindowExA]
xor ecx, ecx
mov edx, 0x2d9
lea r8d, [rcx + 0x10]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov r8, qword [rsp + 0x68]
lea r9, str.cross_stitch
lea rcx, [rsp + 0x70]
mov rdx, rax
call fcn.1400db020
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x1f0]
xor rcx, rsp
call fcn.1400dd340
mov rbx, qword [rsp + 0x258]
add rsp, 0x200
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret