Function at 0x140089ae0
Capabilities:
Create thread
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1d0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
mov ebp, edx
movsxd rdi, r8d
lea rcx, [0x1400ee230]
sub ebp, r9d
mov qword [rsp + 0x60], r9
mov r13, rdx
inc ebp
mov r12, rdi
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.c0a0
mov r9, rdi
mov r8, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesA]
xor ecx, ecx
mov edx, 0x146
lea r8d, [rcx + 0x12]
movsxd r14, eax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov r9d, 4
lea rdx, str.c0a0
mov r8d, r9d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesA]
xor r8d, r8d
mov edx, 0x372
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor ecx, ecx
lea r8d, [rcx + 0x1d]
mov edx, 0x364
call qword [sym.imp.KERNEL32.dll_FindResourceA]
call qword [sym.imp.USER32.dll_GetActiveWindow]
xor esi, esi
cmp dil, 4
jae 0x140089c6b
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], 4
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r14d
lea r8, str.drink
lea rdx, str.attendant
mov r9d, r14d
mov ecx, edi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], ebp
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorGroupCount]
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], ebp
lea r8, str.drink
lea rdx, [0x1400ee230]
mov r9d, r14d
mov ecx, ebp
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], ebp
call qword [sym.imp.USER32.dll_CreateWindowExA]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea r8, [0x140001b00]
mov r9, r14
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_CreateThread]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
call qword [sym.imp.USER32.dll_GetActiveWindow]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rsi
mov r15d, ebp
lea r8, str.drink
lea rdx, str.c0a0
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], 4
mov dword [rsp + 0x30], edi
mov r9d, edi
mov ecx, edi
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 4
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [rsp + 0x68], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
lea rcx, str.cleric
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r9, rax
mov qword [rsp + 0x70], rax
cmp r14d, edi
jle 0x140089d25
call qword [sym.imp.USER32.dll_GetActiveWindow]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rcx, [rsp + 0x80]
xor edx, edx
mov r8d, 0x140
call fcn.1400e27d0
lea rdx, [rsp + 0x80]
lea rcx, [0x1400ee230]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov r9, qword [rsp + 0x70]
imul eax, ebx, 0x1e
mov r10d, 8
sub r10d, eax
movzx eax, bl
sub r10d, r13d
imul r13b
movzx ecx, al
movzx eax, r14b
shl al, 3
sub r10d, edi
lea esi, [rax + r14]
movzx eax, dil
sub r10d, ebp
sub sil, cl
mov rcx, qword [rsp + 0x60]
shl al, 2
add sil, al
movzx r8d, r10b
add sil, cl
lea ecx, [rcx + 0x1b]
sub r8b, r13b
imul eax, ebx, 7
lea edx, [rax + rcx*4]
mov ecx, r14d
add sil, r9b
sub r8b, dl
sub r8b, sil
imul ecx, ebp
imul eax, edx, 0xfffffff9
sub eax, ecx
add r8b, 2
lea ecx, [rax + r9*2]
xor eax, eax
lea rdx, [0x1400ee018]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rax
sub ecx, edi
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], r10d
lea edi, [rcx + r13]
mov dword [rsp + 0x30], 4
mov ecx, ebp
add edi, dword [rsp + 0x68]
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 4
add edi, ebx
movsx ebx, r8b
lea r8, [0x1400ee018]
mov r9d, ebx
call qword [sym.imp.USER32.dll_CreateWindowExA]
xor r15d, r15d
lea r8, [0x140001b00]
mov r9, r12
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], ebp
movsx r8d, sil
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], r8d
lea rdx, str.c10a3
lea r8, str.c6a3
lea ecx, [rdi + 9]
xor r9d, r9d
mov dword [rsp + 0x20], r14d
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rax, r13
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.1400dd340
mov rbx, qword [rsp + 0x210]
add rsp, 0x1d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret