Function at 0x14000fb00
Capabilities:
Copy file
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x340
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x330], rax
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movzx edi, r8b
mov byte [rsp + 0x30], r8b
mov r14, rcx
mov qword [rsp + 0x48], rcx
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x90], xmm1
movups xmm0, xmmword [rdx + 0x20]
movaps xmmword [rsp + 0xa0], xmm0
call fcn.140029f50
lea rcx, str.c0ret
mov r12, rax
call fcn.1400253f0
lea rcx, str.c0ret
mov r13, rax
call fcn.14005c700
lea rcx, str.numismatist
xor edx, edx
mov rbp, rax
mov qword [rsp + 0x50], rax
call fcn.1400205a0
mov r8, rbp
mov rcx, rbp
mov rbx, rax
call fcn.14003cc80
or r15, 0xffffffffffffffff
mov rsi, rax
mov qword [rsp + 0x70], rax
test dil, dil
jns 0x14000fc03
mov rcx, r15
nop dword [rax + rax]
cmp byte [r12 + rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x14000fbc0
lea eax, [rcx + rcx*4]
mov r8d, ebp
sub r8d, eax
mov rax, r15
imul r8d, ebp
add r8d, r14d
nop
inc rax
cmp byte [rbx + rax], 0
jne 0x14000fbe0
sub r8d, eax
lea rdx, str.diver
lea rcx, str.fundraising
add r8d, 0xb
call fcn.140048400
lea rcx, [rsp + 0x1f0]
xor edx, edx
mov r8d, 0x140
call fcn.1400e27d0
lea rdx, [rsp + 0x1f0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rdi, rax
mov qword [rsp + 0x38], rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rdx, rax
mov rcx, rdi
mov rbx, rax
call fcn.140051f60
mov rdi, r15
mov ecx, eax
mov dword [rsp + 0x34], eax
nop
inc rdi
cmp byte [r12 + rdi], 0
jne 0x14000fc50
add edi, 0xb
lea eax, [r14 + rdi*4]
add edi, eax
mov rax, r15
add edi, ebx
add edi, ecx
add edi, ebp
nop dword [rax]
inc rax
cmp byte [rsi + rax], 0
jne 0x14000fc70
sub edi, eax
mov edx, 0x20
xor ecx, ecx
mov r8d, edi
call fcn.140055510
mov dword [rsp + 0x40], eax
movsx eax, byte [rsp + 0x30]
cmp eax, 0x20
je 0x14000fd51
mov ecx, eax
imul ecx, dword [rsp + 0x90]
add ecx, r14d
lea edx, [rcx + rcx*4]
mov ecx, r14d
sub ecx, edx
mov edx, ebx
imul edx, dword [rsp + 0x34]
sub ecx, edx
lea rdx, str.nigeria
sub ecx, dword [rsp + 0x38]
sub ecx, r13d
sub ecx, ebp
sub ecx, 0x20
call fcn.140053520
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorGroupCount]
movzx r14d, ax
call qword [sym.imp.USER32.dll_GetActiveWindow]
lea rcx, [rsp + 0xb0]
mov edx, 0x104
mov rbp, rax
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
mov ecx, dword [rsp + 0x34]
mov rsi, rax
lea rax, str.saviour
mov qword [rsp + 0x60], rax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r9, qword [rsp + 0x48]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x60]
lea r8, str.cymbals
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x28], rax
mov rdx, rbp
mov ecx, r14d
mov qword [rsp + 0x20], rsi
call fcn.140052650
mov rbp, qword [rsp + 0x50]
mov r14, qword [rsp + 0x48]
mov r8d, dword [rsp + 0x40]
lea rdx, str.c0ret
lea rcx, str.c0ret
call qword [sym.imp.KERNEL32.dll_CopyFileA]
lea rcx, [rsp + 0xb0]
xor edx, edx
mov esi, eax
lea rax, str.c3a0
mov r8d, 0x140
mov qword [rsp + 0x60], rax
call fcn.1400e27d0
mov rcx, qword [rsp + 0x70]
lea rdx, [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
lea r8, str.c2a0
mov r9, r14
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x60]
mov rdx, r13
movaps xmm0, xmmword [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x38]
mov ecx, esi
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x20], rax
call fcn.140052650
xor ecx, ecx
mov esi, eax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r9, qword [rsp + 0x38]
mov r8, r13
xor edx, edx
mov ecx, eax
mov qword [rsp + 0x70], rax
call fcn.140045be0
mov dword [rsp + 0x48], eax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, rax
mov qword [rsp + 0x50], rax
call fcn.140055660
mov r8d, dword [rsp + 0x48]
cmp r8d, esi
mov rsi, qword [rsp + 0x50]
movzx ecx, al
mov byte [rsp + 0x31], al
jbe 0x14000fe71
movzx eax, byte [rsp + 0x40]
imul dil
movzx ecx, al
mov al, 0xfe
imul byte [rsp + 0x38]
movzx edx, al
mov al, 0x19
sub dl, cl
lea rcx, str.c1a0
imul r14b
add dl, al
sub dl, r13b
sub dl, byte [rsp + 0x34]
sub dl, r8b
sub dl, sil
sub dl, bl
add dl, 3
add dl, byte [rsp + 0x70]
add dl, bpl
call fcn.14003a9c0
mov r8d, dword [rsp + 0x48]
movzx ecx, byte [rsp + 0x31]
inc r15
cmp byte [r12 + r15], 0
jne 0x14000fe71
mov eax, dword [rsp + 0xa8]
movsx edx, byte [rsp + 0x30]
imul r13d, edi
imul r13d, dword [rsp + 0x34]
imul esi, r8d
sub r13d, esi
imul eax, r14d
add r13d, eax
movzx eax, cl
lea rcx, str.c1a0
sub r13d, eax
sub r13d, ebp
add edx, r13d
add edx, r15d
add edx, dword [rsp + 0x38]
call fcn.140050880
lea rax, str.c4ret
mov rcx, qword [rsp + 0x330]
xor rcx, rsp
call fcn.1400dd340
mov rbx, qword [rsp + 0x398]
add rsp, 0x340
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret