Function at 0x1400c24e0
Capabilities:
Create thread
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x220
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x210], rax
movsx rsi, byte [rsp + 0x288]
mov qword [rsp + 0x48], r8
mov r15, rcx
mov qword [rsp + 0x68], rcx
xor ecx, ecx
mov r14, r9
mov qword [rsp + 0xa0], r9
mov rbx, rdx
mov qword [rsp + 0x28], rcx
lea r8, [0x140001b00]
mov r9, rsi
xor edx, edx
mov qword [rsp + 0x58], rsi
mov dword [rsp + 0x20], ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rbx
mov r12, rax
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, r14
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r13, rax
mov qword [rsp + 0x88], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
or rbp, 0xffffffffffffffff
mov rcx, rax
mov qword [rsp + 0x50], rax
mov rdi, rbp
nop dword [rax]
inc rdi
cmp byte [rbx + rdi], 0
jne 0x1400c2590
mov eax, r14d
xor r8d, r8d
mov edx, 0x2b0
imul eax, dword [rsp + 0x48]
add eax, r15d
add edi, eax
mov eax, ecx
xor ecx, ecx
imul eax, edi
sub r12d, eax
sub r12d, r13d
add r12d, 4
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov r13d, 8
sub r13d, eax
mov qword [rsp + 0xc0], rax
movsx eax, sil
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x3c], r13d
mov rsi, rbp
inc rsi
cmp byte [rbx + rsi], 0
jne 0x1400c25e6
mov ecx, r14d
imul esi, r15d
imul ecx, eax
mov eax, dword [rsp + 0x70]
imul eax, r13d
sub ecx, eax
add esi, ecx
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rdx, qword [rsp + 0x280]
mov rcx, rax
mov qword [rsp + 0x78], rax
lea eax, [rdx + rdx]
sub eax, r14d
lea r8, [0x140001b00]
xor r9d, r9d
sub eax, esi
xor edx, edx
add eax, ecx
xor ecx, ecx
mov dword [rsp + 0x90], eax
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, str.view
mov qword [rsp + 0x98], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, r14
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov rcx, rbp
mov dword [rsp + 0x34], eax
inc rcx
cmp byte [rbx + rcx], 0
jne 0x1400c2673
imul ecx, dword [rsp + 0x58]
mov r8, qword [rsp + 0x280]
mov r9, qword [rsp + 0x50]
lea r10d, [r15 + 4]
mov rdx, rbp
imul ecx, r8d
sub ecx, r9d
sub ecx, r12d
add ecx, dword [rsp + 0x88]
add ecx, r13d
mov r13d, r14d
add r10d, ecx
mov dword [rsp + 0x44], r10d
imul r13d, r8d
nop dword [rax + rax]
inc rdx
cmp byte [rbx + rdx], 0
jne 0x1400c26c0
mov r9d, dword [rsp + 0x40]
mov eax, dword [rsp + 0x290]
mov ecx, dword [rsp + 0x78]
imul edx, r15d
imul eax, r9d
imul ecx, r8d
shl ecx, 2
imul eax, r12d
sub ecx, eax
lea eax, [rdx + r13]
lea r11d, [rax + rcx*2]
mov eax, r10d
mov dword [rsp + 0x38], r11d
imul eax, dword [rsp + 0x34]
lea edx, [rax*8]
mov eax, r14d
mov dword [rsp + 0x80], edx
imul eax, r11d
lea eax, [rax + rax*2]
lea eax, [rdx + rax*2]
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x34], r9d
ja 0x1400c2745
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorGroupCount]
movsx ecx, al
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r8, qword [rsp + 0x280]
mov r11d, dword [rsp + 0x38]
mov rdx, rbp
nop dword [rax + rax]
inc rdx
cmp byte [rbx + rdx], 0
jne 0x1400c2750
mov eax, dword [rsp + 0x3c]
imul eax, r12d
add eax, 0xfffffffa
lea ecx, [rsi + rax*2]
mov eax, r8d
imul eax, dword [rsp + 0x48]
lea r15d, [rax + rcx*4]
lea rcx, [rsp + 0xd0]
sub r15d, dword [rsp + 0x58]
sub r15d, r11d
sub r15d, edi
add r15d, r14d
add r15d, r14d
add r15d, dword [rsp + 0x98]
add r15d, dword [rsp + 0x50]
add r15d, r8d
mov r8d, 0x140
add r15d, dword [rsp + 0x68]
sub r15d, edx
xor edx, edx
call fcn.1400e27d0
lea rdx, [rsp + 0xd0]
lea rcx, str.agreement
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rsp + 0xa8], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov qword [rsp + 0xb8], rax
mov al, 0xe8
imul cl
mov ecx, dword [rsp + 0x40]
mov byte [rsp + 0x30], al
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r8, rbp
mov qword [rsp + 0xb0], rax
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x1400c2800
mov r9, qword [rsp + 0x280]
mov r10, qword [rsp + 0x50]
movzx eax, r9b
imul r14b
movzx edx, al
movzx eax, byte [rsp + 0x290]
add dl, byte [rsp + 0x30]
shl dl, 2
imul byte [rsp + 0x70]
movzx ecx, al
movzx eax, r9b
imul cl
movzx ecx, al
movzx eax, byte [rsp + 0x48]
imul cl
movzx r11d, al
movzx eax, byte [rsp + 0x3c]
sub r11b, dl
mov rdx, rbp
imul r12b
sub r11b, al
movzx eax, r10b
imul dil
add r11b, al
movzx eax, byte [rsp + 0x44]
imul r14b
mov r14, qword [rsp + 0x98]
movzx ecx, al
add cl, cl
add al, cl
add al, al
add r11b, al
mov rax, qword [rsp + 0x68]
sub r11b, r15b
sub r11b, r14b
add r11b, sil
add r11b, al
sub r11b, r8b
lea r8d, [r9*4]
sub r11b, 2
mov dword [rsp + 0x84], r8d
mov byte [rsp + 0x31], r11b
nop
inc rdx
cmp byte [rbx + rdx], 0
jne 0x1400c28b0
mov ecx, dword [rsp + 0x58]
imul edx, eax
mov eax, dword [rsp + 0x38]
lea eax, [rax + rax*2]
imul ecx, edi
add ecx, eax
mov eax, dword [rsp + 0x34]
lea eax, [rcx + rax*4]
mov ecx, r14d
add eax, eax
imul ecx, esi
sub ecx, eax
lea eax, [r13 - 0x3a]
add edx, ecx
sub edx, r8d
sub edx, dword [rsp + 0xb8]
sub edx, dword [rsp + 0x290]
sub edx, dword [rsp + 0x48]
add edx, r10d
add eax, edx
mov dword [rsp + 0x44], eax
call qword [sym.imp.USER32.dll_GetActiveWindow]
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorGroupCount]
mov rax, qword [rsp + 0xc0]
mov rcx, rbp
lea r8d, [rax*4]
inc rcx
cmp byte [rbx + rcx], 0
jne 0x1400c2920
mov eax, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x280]
mov r14d, dword [rsp + 0x40]
imul eax, dword [rsp + 0x88]
dec r14d
imul r14d, edx
mov rdx, qword [rsp + 0x68]
add r14d, eax
mov eax, dword [rsp + 0x38]
imul eax, dword [rsp + 0x34]
shl eax, 3
sub r14d, eax
lea eax, [r15 + r15*8]
add r14d, eax
mov rax, rbp
sub r14d, dword [rsp + 0x70]
add r14d, r8d
add r14d, dword [rsp + 0xa8]
add r14d, dword [rsp + 0x78]
add r14d, edx
sub r14d, ecx
sub r14d, 2
nop dword [rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x1400c2990
imul eax, dword [rsp + 0x58]
mov r8, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xa0]
imul r13d, r8d, 0xfffffff9
sub r13d, eax
movzx eax, r14b
sub r13d, dword [rsp + 0x60]
add al, al
sub r13d, edi
add r13d, ecx
add r13d, esi
add r13d, edx
movzx edx, r8b
sub dl, al
add dl, dl
add dl, cl
add dl, r13b
mov byte [rsp + 0x32], dl
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor ecx, ecx
lea r8d, [rcx + 0x13]
mov edx, 0xe0
mov dword [rsp + 0x34], eax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdx, rax
nop dword [rax + rax]
inc rbp
cmp byte [rbx + rbp], 0
jne 0x1400c2a00
imul ebp, dword [rsp + 0x48]
mov rax, qword [rsp + 0x280]
mov r9, qword [rsp + 0x50]
add ebp, dword [rsp + 0x38]
mov r8, qword [rsp + 0xc0]
lea eax, [rax + r9*4]
imul ebp, dword [rsp + 0xa0]
lea ecx, [rax*2 + 0xc]
lea eax, [r13 - 1]
sub ecx, ebp
imul eax, dword [rsp + 0xb0]
add ecx, eax
lea eax, [r8*4]
imul eax, dword [rsp + 0x3c]
sub ecx, eax
movsx eax, byte [rsp + 0x31]
imul eax, dword [rsp + 0x44]
add ecx, eax
mov rax, qword [rsp + 0x78]
imul eax, esi
sub ecx, eax
mov rax, qword [rsp + 0xa8]
imul eax, r15d
add ecx, eax
movsx rax, byte [rsp + 0x30]
sub ecx, eax
movsx rax, byte [rsp + 0x34]
add ecx, eax
movzx eax, byte [rsp + 0x32]
sub ecx, dword [rsp + 0x80]
sub ecx, edx
add eax, ecx
sub eax, dword [rsp + 0xb8]
sub eax, dword [rsp + 0x88]
sub eax, dword [rsp + 0x90]
sub eax, r12d
sub eax, edi
add eax, dword [rsp + 0x58]
add eax, dword [rsp + 0x84]
add eax, r14d
add eax, dword [rsp + 0x60]
add eax, dword [rsp + 0x290]
add eax, dword [rsp + 0x98]
add eax, dword [rsp + 0x70]
add eax, dword [rsp + 0x68]
mov rcx, qword [rsp + 0x210]
xor rcx, rsp
call fcn.1400dd340
mov rbx, qword [rsp + 0x260]
add rsp, 0x220
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret