Function at 0x1400a7240
Capabilities:
Copy file
Extract resource via kernel32 functions

Disassembly:
mov r11, rsp
push r14
sub rsp, 0x270
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x220], rax
mov qword [r11 - 0x10], rbx
mov qword [r11 - 0x18], rbp
mov qword [r11 - 0x20], rsi
mov qword [r11 - 0x28], rdi
or rsi, 0xffffffffffffffff
mov qword [r11 - 0x38], r13
mov qword [r11 - 0x40], r15
mov qword [rsp + 0x78], r9
mov rbx, r8
mov r15, rcx
mov rdi, rsi
mov rbp, rdx
nop dword [rax + rax]
inc rdi
cmp byte [r8 + rdi], 0
jne 0x1400a7290
add dil, cl
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, 0xffff
mov r13, rax
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
lea r14, str.c0a3
mov dword [rsp + 0x64], eax
cmp al, dil
jb 0x1400a7567
mov qword [rsp + 0x248], r12
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea r14d, [r15 - 4]
add r14b, byte [rsp + 0x78]
mov rcx, rsi
mov r12, rax
add r14b, r13b
add r14b, dil
nop dword [rax + rax]
inc rcx
cmp byte [rbx + rcx], 0
jne 0x1400a72f0
lea eax, [rax + rax*4]
lea rdx, str.c0ret
movzx r9d, dil
lea eax, [rax*4 + 2]
movzx r8d, r14b
imul eax, r15d
sub eax, ecx
xor ecx, ecx
mov dword [rsp + 0x60], eax
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesA]
lea rcx, str.bench
mov dword [rsp + 0x68], eax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r8d, dword [rsp + 0x64]
movzx r10d, dil
mov r9, rax
mov qword [rsp + 0x90], rax
movzx eax, r8b
mov dword [rsp + 0x70], r10d
mov rdx, rsi
mov dword [rsp + 0x80], eax
inc rdx
cmp byte [rdx + rbp], 0
jne 0x1400a7367
lea ecx, [rax + 2]
mov eax, r12d
imul eax, r12d
imul ecx, r15d
add eax, ecx
movzx ecx, r14b
sub eax, r9d
mov dword [rsp + 0x64], ecx
add eax, r10d
mov r10d, dword [rsp + 0x68]
add edx, eax
add r10d, 5
mov rax, rsi
add edx, r13d
add r10d, edx
mov dword [rsp + 0x84], r10d
nop word [rax + rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x1400a73b0
mov r14d, dword [rsp + 0x60]
inc eax
lea edx, [r12 + 2]
imul eax, r15d
sub eax, ecx
mov rcx, rsi
sub eax, r14d
add eax, r13d
add edx, eax
mov dword [rsp + 0x88], edx
nop dword [rax]
inc rcx
cmp byte [rcx + rbp], 0
jne 0x1400a73e0
sub cl, 0xa
movzx eax, r15b
add r8b, 2
add r8b, r8b
imul cl
add al, r8b
mov ecx, 1
sub al, r9b
sub al, dil
movzx r8d, al
mov eax, r8d
mov dword [rsp + 0x6c], r8d
imul eax, edx
sub ecx, eax
mov eax, r13d
lea rdx, str.subsidence
imul ecx, r12d
add ecx, 0xffffffe0
imul eax, r10d
add eax, ecx
lea rcx, [0x1400ed3b8]
mov dword [rsp + 0x68], eax
call qword [sym.imp.KERNEL32.dll_CopyFileA]
mov dword [rsp + 0x60], eax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov ecx, dword [rsp + 0x64]
sub ecx, dword [rsp + 0x90]
imul ecx, r12d
mov r12d, dword [rsp + 0x60]
imul eax, r12d
add ecx, eax
lea eax, [r13 - 0x2a]
sub ecx, dword [rsp + 0x68]
add ecx, dword [rsp + 0x78]
add eax, ecx
lea rcx, str.c1a1
mov dword [rsp + 0x60], eax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rdx, rsi
inc rdx
cmp byte [rbx + rdx], 0
jne 0x1400a7497
inc rsi
cmp byte [rsi + rbp], 0
jne 0x1400a74a0
mov ebp, dword [rsp + 0x60]
imul edx, esi
mov esi, dword [rsp + 0x6c]
mov eax, r12d
mov ecx, r15d
shl eax, 4
sub ecx, eax
sub ecx, dword [rsp + 0x80]
lea ebx, [rcx*2 - 6]
sub ebx, edx
sub ebx, dword [rsp + 0x78]
sub ebx, dword [rsp + 0x68]
sub ebx, dword [rsp + 0x90]
sub ebx, dword [rsp + 0x84]
add ebx, esi
add ebx, dword [rsp + 0x64]
add ebx, ebp
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, dword [rsp + 0x88]
xor ecx, ecx
lea r8, str.c0ret
lea rdx, str.subsidence
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
mov ecx, dword [rsp + 0x70]
mov qword [rsp + 0x40], r9
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], r12d
call qword [sym.imp.USER32.dll_CreateWindowExA]
lea r14, str.c0a3
lea rcx, [rsp + 0x98]
mov edx, ebx
mov r9, rax
mov qword [rsp + 0x20], r14
call fcn.1400da860
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov r12, qword [rsp + 0x248]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rsi, qword [rsp + 0x258]
mov rbp, qword [rsp + 0x260]
mov rbx, qword [rsp + 0x268]
sub r15b, 2
movzx eax, dil
mov rdi, qword [rsp + 0x250]
imul r13b
mov r13, qword [rsp + 0x240]
add al, r15b
mov r15, qword [rsp + 0x238]
test al, al
jle 0x1400a75fa
lea rcx, [rsp + 0xe0]
xor edx, edx
mov r8d, 0x140
call fcn.1400e27d0
lea rdx, [rsp + 0xe0]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LockResource]
call qword [sym.imp.USER32.dll_GetActiveWindow]
xor ecx, ecx
lea r8d, [rcx + 0x1a]
mov edx, 0x2f7
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ecx, ecx
mov edx, 0x34d
lea r8d, [rcx + 0x10]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ecx, ecx
mov edx, 0x2fd
lea r8d, [rcx + 0x11]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rcx, qword [rsp + 0x220]
xor rcx, rsp
call fcn.1400dd340
add rsp, 0x270
pop r14
ret