Function at 0x1400a12d0
Capabilities:
Create thread
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2a0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x290], rax
mov rdi, rcx
mov ecx, 0xffff
mov dword [rsp + 0x60], r8d
mov qword [rsp + 0x68], rdx
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorCount]
lea rcx, [rsp + 0x70]
mov edx, 0x104
mov r15d, eax
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
lea rcx, [rsp + 0x180]
mov edx, 0x104
mov r14, rax
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
xor edx, edx
xor ecx, ecx
mov r13, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
or rbx, 0xffffffffffffffff
inc rbx
cmp byte [rdi + rbx], 0
jne 0x1400a1354
imul ebx, r15d
sub eax, r13d
lea r12d, [r14 + 2]
sub ebx, r14d
sub ebx, esi
sub eax, ebx
add r12d, eax
cmp r12d, r15d
jae 0x1400a1382
mov ecx, 0xffff
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorCount]
xor esi, esi
lea r8, [0x140001b00]
xor edx, edx
lea r9d, [rsi + 0x20]
xor ecx, ecx
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 0xffff
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
lea r9d, [rsi + 4]
lea r8, [0x140001b00]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], rsi
movsxd rdi, eax
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea edx, [rsi + 0x1a]
lea r8d, [rsi + 7]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
lea r8d, [rsi + 4]
mov edx, 0x25d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov r9d, dword [rsp + 0x60]
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rsi
movsxd rbp, ebx
lea r8, str.c2a4
lea rdx, str.mixer
mov qword [rsp + 0x40], rbp
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], edi
lea ecx, [rsi + 0x20]
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.USER32.dll_CreateWindowExA]
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorGroupCount]
mov rdx, qword [rsp + 0x68]
movzx esi, ax
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0x60]
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 0x20
lea r8, str.piracy
lea ecx, [r9 + 4]
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rdi, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
movzx eax, r13b
imul bl
movzx edx, al
movzx eax, sil
imul dil
movzx ecx, al
mov al, 0xf9
imul cl
movzx ecx, r14b
movzx edi, al
add cl, cl
sub dil, dl
add r14b, cl
add dil, 0x7b
add r14b, r14b
add dil, r14b
add dil, r12b
call qword [sym.imp.USER32.dll_GetActiveWindow]
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
lea r8, [0x140001b00]
mov r9, rbp
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call qword [sym.imp.USER32.dll_GetActiveWindow]
lea rcx, [0x1400ed4d4]
movzx ebx, sil
movsx rdi, dil
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [0x1400ed4d4]
mov r9d, ebx
mov r8, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesA]
cmp r15d, 4
jge 0x1400a1535
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov ecx, 0xffff
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorCount]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [rsp + 0x290]
xor rcx, rsp
call fcn.1400dd340
mov rbx, qword [rsp + 0x2f8]
add rsp, 0x2a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret