Function at 0x14002cd10
Capabilities:
Create thread
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xb0
mov r14, rdx
mov rdi, rcx
mov rdx, rcx
xor ecx, ecx
mov r13d, r9d
mov rsi, r8
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rbx, rax
mov qword [rbp - 0x61], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
lea rcx, str.vineyard
mov rdx, rbx
mov r8, rax
mov r12, rax
call fcn.1400d4530
mov ecx, dword [rbp + 0x7f]
movsxd r15, dword [rbp + 0x77]
or rbx, 0xffffffffffffffff
mov rdx, rax
mov qword [rbp - 0x19], rax
cmp r13d, ecx
je 0x14002cf76
mov ecx, r15d
mov qword [rbp - 0x59], r12
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r8d, [rbx + 0x1c]
mov edx, 0x2ae
xor ecx, ecx
mov qword [rbp - 0x51], rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov qword [rbp - 0x49], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea r8d, [rbx + 9]
mov edx, 0x204
xor ecx, ecx
mov dword [rbp - 0x41], eax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rcx, rbx
mov qword [rbp - 0x39], rax
inc rcx
cmp byte [rsi + rcx], 0
jne 0x14002cdd4
imul ecx, edi
mov eax, r15d
imul eax, dword [rbp + 0x7f]
imul ecx, r13d
sub ecx, eax
lea eax, [r12 + 8]
sub ecx, dword [rbp - 0x61]
add eax, ecx
mov dword [rbp - 0x31], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, rbx
movups xmm0, xmmword [rbp - 0x59]
movups xmm1, xmmword [rbp - 0x49]
mov dword [rbp - 0x2d], eax
mov rax, qword [rbp + 0x6f]
movaps xmmword [rbp - 0x11], xmm0
movaps xmmword [rbp - 1], xmm1
movups xmm0, xmmword [rbp - 0x39]
movaps xmmword [rbp + 0xf], xmm0
inc rcx
cmp byte [rax + rcx], 0
jne 0x14002ce22
movzx eax, r13b
imul cl
mov rcx, rbx
sub al, byte [rbp - 0x61]
add al, dil
nop word [rax + rax]
inc rcx
cmp byte [rsi + rcx], 0
jne 0x14002ce40
sub al, cl
lea r9, [rbp - 0x11]
lea rcx, [rbp - 0x59]
add al, 8
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], al
call fcn.140070ac0
mov rcx, rbx
nop dword [rax + rax]
inc rcx
cmp byte [r14 + rcx], 0
jne 0x14002ce70
movzx eax, r13b
imul cl
movzx ecx, al
movzx eax, dil
imul cl
movzx edi, al
movzx eax, byte [rbp + 0x7f]
shl al, 3
add dil, al
call qword [sym.imp.USER32.dll_GetActiveWindow]
xor ecx, ecx
lea r8d, [rcx + 0x1c]
mov edx, 0x226
mov qword [rbp - 0x59], rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov edx, 9
xor ecx, ecx
lea r8d, [rdx - 7]
mov qword [rbp - 0x51], rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov qword [rbp - 0x49], rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rbp - 0x31], 0
movups xmm0, xmmword [rbp - 0x59]
mov qword [rbp - 0x41], rax
lea rax, str.demur
lea r9, [rbp - 0x11]
movaps xmmword [rbp - 0x11], xmm0
movups xmm1, xmmword [rbp - 0x49]
mov qword [rbp - 0x39], rax
lea rax, [0x1400ed4fc]
lea rdx, str.microlending
movaps xmmword [rbp - 1], xmm1
movups xmm0, xmmword [rbp - 0x39]
mov qword [rsp + 0x28], rax
lea rax, str.waitress
lea rcx, [rbp - 0x59]
movaps xmmword [rbp + 0xf], xmm0
movzx r8d, dil
mov qword [rsp + 0x20], rax
call fcn.1400c9690
xor eax, eax
lea r8, [0x140001b00]
mov qword [rsp + 0x28], rax
mov r9, r15
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateThread]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
mov edx, 0x29
xor ecx, ecx
lea r8d, [rdx - 0xc]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdi, qword [rbp + 0x4f]
mov ecx, dword [rbp + 0x7f]
mov rdx, qword [rbp - 0x19]
mov rax, rbx
nop dword [rax]
inc rax
cmp byte [r14 + rax], 0
jne 0x14002cf80
imul r15d, ecx
imul eax, edi
lea ecx, [rax + r15*8]
mov rax, rbx
sub ecx, dword [rbp - 0x61]
sub ecx, r13d
add ecx, edx
add ecx, r12d
inc rax
cmp byte [rsi + rax], 0
jne 0x14002cfa3
sub ecx, eax
mov rax, qword [rbp + 0x6f]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14002cfb2
lea r11, [rsp + 0xb0]
sub ecx, ebx
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov eax, ecx
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret