Function at 0x140091550
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x210
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x200], rax
movsx r14d, cl
mov rbx, rdx
mov qword [rsp + 0x68], rdx
mov r12d, r14d
mov byte [rsp + 0x60], r14b
mov ebp, r14d
sub r12d, edx
add r12d, 4
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r13, rax
mov qword [rsp + 0x78], rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
imul r13d, r12d
mov qword [rsp + 0x70], rax
mov esi, r14d
xor r15d, r15d
imul esi, ebx
shl esi, 2
mov eax, esi
shl eax, 4
sub r13d, eax
mov dword [rsp + 0x64], eax
sub r13d, 6
cmp r14b, sil
jle 0x140091695
movsx rax, r14b
lea r8, [0x140001b00]
xor edx, edx
lea edi, [rax*4 - 2]
xor ecx, ecx
mov qword [rsp + 0x28], r15
mov r9d, edi
mov ebx, edi
mov dword [rsp + 0x20], r15d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], r12d
mov dword [rsp + 0x30], r12d
lea r8, str.mother
lea rdx, str.camel
mov r9d, r12d
mov ecx, esi
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], r14d
lea r8, str.camel
lea rdx, str.c7a6
mov r9d, r12d
mov ecx, r14d
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], esi
call qword [sym.imp.USER32.dll_CreateWindowExA]
lea r8d, [r15 + 0x11]
mov edx, 0x368
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x48], r15
movsx rbx, r14b
lea r8, str.c7a6
lea rdx, str.mother
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov r9d, r12d
mov ecx, ebp
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], r13d
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov r14, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rcx, [rsp + 0xc0]
xor edx, edx
mov r8d, 0x140
call fcn.1400e27d0
lea rdx, [rsp + 0xc0]
lea rcx, str.camel
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ecx, 0xffff
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
call qword [sym.imp.USER32.dll_GetActiveWindow]
lea rdx, str.mother
mov r8d, esi
mov r9, rbx
xor ecx, ecx
mov rbp, rax
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesA]
movsxd rdi, eax
call qword [sym.imp.USER32.dll_GetActiveWindow]
lea r8, str.camel
mov r15, rax
xor eax, eax
lea rdx, str.camel
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], r12d
mov dword [rsp + 0x30], esi
mov r9d, esi
mov ecx, r12d
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r13d
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, 4
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movsx edx, byte [rsp + 0x60]
mov ecx, r15d
lea esi, [rbx + rbx*8]
mov dword [rsp + 0x90], 2
imul ecx, ebp
imul ecx, r13d
sub ecx, dword [rsp + 0x70]
add ecx, edx
add ecx, esi
add ecx, r12d
mov dword [rsp + 0x94], ecx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorGroupCount]
mov edx, 0x66
xor ecx, ecx
lea r8d, [rdx - 0x4e]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
movsx r10, dil
mov eax, r10d
imul eax, ebp
lea ecx, [rax + rax*8]
movsx eax, byte [rsp + 0x60]
sub ecx, dword [rsp + 0x78]
lea r9d, [rax + 0x37]
mov edi, eax
sub ecx, r15d
mov r11d, eax
sub ecx, r13d
add r9d, ecx
imul r11d, dword [rsp + 0x68]
lea eax, [rbp*4]
lea edx, [r14 - 0xb]
add eax, ebp
sub r11d, eax
sub r11d, r10d
sub r11d, ebx
imul eax, r13d, 0xfffffffa
imul ebx, r15d
sub eax, ebx
sub eax, ebp
add edx, eax
mov rax, qword [rsp + 0x90]
imul ebp, r13d
shr rax, 0x20
imul ecx, ebp, 0xb4
sub ecx, esi
imul eax, r11d
imul eax, r9d
lea r8d, [rax + rcx*4]
lea eax, [r12 - 3]
sub r8d, r10d
sub r8d, dword [rsp + 0x68]
sub r8d, edx
sub r8d, r9d
sub r8d, dword [rsp + 0x64]
add r8d, edi
add r8d, r11d
add r8d, r15d
add eax, r8d
mov rcx, qword [rsp + 0x200]
xor rcx, rsp
call fcn.1400dd340
mov rbx, qword [rsp + 0x260]
add rsp, 0x210
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret