Function at 0x1400945b0
Capabilities:
Create thread

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2f8
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x2e0], rax
mov rsi, rcx
lea r15d, [rcx + 9]
mov rbx, rdx
lea rcx, [rsp + 0x1d0]
mov edx, 0x104
mov rdi, r9
mov r14, r8
mov qword [rsp + 0x80], r8
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorGroupCount]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorGroupCount]
xor ecx, ecx
mov edx, 0x199
lea r8d, [rcx + 7]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ecx, ecx
mov ebp, ebx
lea r8d, [rcx + 5]
mov r12d, 0xfffffff7
mov edx, 0xf1
imul ebp, r14d
sub r12d, ebp
call qword [sym.imp.KERNEL32.dll_FindResourceA]
movzx r13d, sil
mov qword [rsp + 0x78], rax
movzx eax, sil
sub r13b, r15b
lea rcx, [rsp + 0x90]
add r13b, 9
xor edx, edx
imul r14b
sub bl, al
mov r8d, 0x140
mov qword [rsp + 0x70], rbx
add r13b, bl
call fcn.1400e27d0
lea rdx, [rsp + 0x90]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rsp + 0x60], rax
cmp r12d, esi
jl 0x14009469b
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rcx, [rsp + 0x1d0]
mov edx, 0x104
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
mov qword [rsp + 0x68], rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
or rbx, 0xffffffffffffffff
mov rdx, rax
mov rcx, rbx
inc rcx
cmp byte [rdi + rcx], 0
jne 0x1400946c3
movzx eax, r14b
imul cl
movzx ecx, al
movzx eax, r15b
imul cl
mov ecx, 1
sub cl, al
movzx eax, sil
imul cl
xor ecx, ecx
lea r14d, [rdx + rax]
lea r8d, [rcx + 4]
mov edx, 0x290
add r14b, byte [rsp + 0x68]
add r14b, r13b
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ecx, ecx
lea r8d, [rcx + 0xc]
mov edx, 0xc8
call qword [sym.imp.KERNEL32.dll_FindResourceA]
inc rbx
cmp byte [rdi + rbx], 0
jne 0x140094716
imul ebp, esi
lea eax, [r12 + r12*8]
lea r8, [0x140001b00]
add ebp, eax
movzx eax, r13b
xor r13d, r13d
add ebp, eax
xor edx, edx
xor ecx, ecx
sub ebp, ebx
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
sub ebp, 8
movsxd r9, ebp
call qword [sym.imp.KERNEL32.dll_CreateThread]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorGroupCount]
lea edx, [r13 + 0x7b]
lea r8d, [r13 + 0xd]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, eax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp r14b, bpl
jge 0x14009481c
movzx ecx, r15b
shl cl, 3
add r15b, cl
sub sil, r15b
sub sil, byte [rsp + 0x80]
sub sil, byte [rsp + 0x78]
sub sil, 4
add sil, byte [rsp + 0x60]
add sil, byte [rsp + 0x70]
movsx ebx, sil
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
lea r8d, [r13 + 1]
mov edx, 0x1ac
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x48], r13
movsx rax, sil
movsx edx, r14b
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edx
lea r8, str.mint
lea rdx, str.scissors
mov r9d, ebx
mov ecx, ebx
call qword [sym.imp.USER32.dll_CreateWindowExA]
call qword [sym.imp.USER32.dll_GetActiveWindow]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rax, str.cell
mov rcx, qword [rsp + 0x2e0]
xor rcx, rsp
call fcn.1400dd340
add rsp, 0x2f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret