Function at 0x1400a0250
Capabilities:
Copy file
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x200
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x1f0], rax
mov rsi, qword [rsp + 0x260]
mov r14, rdx
mov qword [rsp + 0xb0], rdx
mov r12, rcx
mov qword [rsp + 0xa0], rcx
mov qword [rsp + 0x78], rsi
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov edx, esi
mov ebp, esi
mov r15, rax
mov qword [rsp + 0x88], rax
movzx eax, r12b
imul ebp, r12d
imul r14b
lea edi, [rax + 6]
lea eax, [r12 + 7]
movzx r13d, dil
movsx rbx, dil
mov byte [rsp + 0x60], dil
lea ecx, [r13*2]
imul ebp, ebx
sub edx, ecx
shl ebp, 3
lea eax, [rax + rdx*4]
mov dword [rsp + 0x80], ebp
mov dword [rsp + 0x64], eax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rsi, rax
mov qword [rsp + 0xa8], rax
lea ecx, [rbx + 6]
mov edx, r14d
lea eax, [r13 - 3]
movzx r8d, dil
imul ecx, r15d
mov r9, rbx
imul edx, r12d
sub edx, ecx
xor ecx, ecx
shl edx, 2
sub edx, ebp
add edx, dword [rsp + 0x78]
add eax, edx
lea rdx, str.cottage
mov dword [rsp + 0x68], eax
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesA]
mov edx, 0x104
mov dword [rsp + 0xc8], eax
movsx eax, dil
imul eax, r15d
imul ecx, eax, 7
mov eax, esi
lea esi, [r12 + 0xa]
sub eax, ecx
lea rcx, [rsp + 0xe0]
shl eax, 2
sub eax, dword [rsp + 0x78]
sub eax, r13d
add esi, eax
mov dword [rsp + 0x90], esi
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
xor ecx, ecx
lea r8d, [rcx + 0x1a]
mov edx, 0x2af
mov rdi, rax
mov qword [rsp + 0x98], rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdx, r12
xor ecx, ecx
mov r15, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r10, qword [rsp + 0x88]
mov r11d, dword [rsp + 0x64]
lea ecx, [r12 - 0x4f]
add ecx, esi
add ecx, r10d
add ecx, r11d
add ecx, ebp
mov dword [rsp + 0x6c], ecx
mov r8, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0xa8]
mov r9, qword [rsp + 0xa0]
mov eax, edi
mov r12d, r14d
lea r14d, [rsi + rsi]
imul eax, edx
add eax, ecx
imul r12d, r9d
mov dword [rsp + 0x70], eax
mov eax, r13d
imul eax, ebx
mov ebx, dword [rsp + 0x6c]
imul ecx, eax, 0x54
mov eax, edx
imul eax, r11d
add ecx, eax
mov eax, r11d
mov r11, qword [rsp + 0x78]
sub ecx, r8d
sub ecx, ebx
imul eax, ebp
sub ecx, edi
sub ecx, r10d
sub ecx, r14d
lea edi, [r12 + rcx]
mov ecx, r8d
add edi, 0xfffffff2
add edi, dword [rsp + 0x68]
imul ecx, r10d
add ecx, eax
shl ecx, 2
lea eax, [rsi + 1]
add edi, ebp
lea ebp, [r9 - 6]
imul eax, dword [rsp + 0x98]
sub ecx, eax
sub ecx, r11d
sub ecx, ebx
sub ecx, dword [rsp + 0x68]
add ebp, ecx
lea ecx, [r9*4]
lea eax, [rbp + 7]
imul eax, r10d
sub ecx, eax
imul eax, r15d, 0x1e
add ecx, eax
sub ecx, r11d
sub ecx, ebx
mov ebx, dword [rsp + 0x70]
sub ecx, r14d
add ebx, 0xfffffff7
add ecx, r8d
add ebx, ecx
mov ecx, 0xffff
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
mov ecx, dword [rsp + 0x68]
mov r9, qword [rsp + 0x88]
mov rdx, qword [rsp + 0xb0]
mov r8, qword [rsp + 0xa0]
lea eax, [rcx*2 + 5]
mov rcx, qword [rsp + 0x98]
add eax, r9d
mov esi, r8d
add eax, eax
sub esi, eax
mov al, 7
sub esi, edx
sub esi, ecx
add esi, r13d
add esi, ebp
imul r9b
add esi, edi
movzx r13d, al
sub r13b, r15b
add esi, r14d
add esi, dword [rsp + 0x64]
sub r13b, cl
add r13b, byte [rsp + 0xc8]
add esi, dword [rsp + 0x80]
add r13b, dl
lea edi, [rcx - 4]
add dl, 2
imul esi, ebx
add r13b, dl
mov ecx, 0xffff
add r13b, r8b
add r13b, r9b
add r13b, byte [rsp + 0x60]
movsx rbx, r13b
lea eax, [rsi + rbx]
add edi, eax
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorCount]
mov r14d, eax
imul ecx, dword [rsp + 0x90], 0x19
imul edx, ebp, 7
dec edx
imul edx, dword [rsp + 0x88]
sub edx, ecx
sub edx, esi
sub edx, dword [rsp + 0x78]
sub edx, ebx
sub edx, dword [rsp + 0x68]
add edx, r12d
add edx, edi
mov rdi, qword [rsp + 0xa8]
add edx, dword [rsp + 0x98]
add edi, 9
add edi, edx
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov ebx, dword [rsp + 0x64]
cmp ebx, r14d
jae 0x1400a0607
mov edx, 0x27
xor ecx, ecx
lea r8d, [rdx - 0x26]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov eax, dword [rsp + 0x6c]
xor ecx, ecx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
mov eax, dword [rsp + 0x70]
movsx r9d, r13b
mov dword [rsp + 0x38], r9d
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], eax
lea r8, str.c0a2
lea rdx, str.rank
mov ecx, ebx
mov dword [rsp + 0x20], r14d
call qword [sym.imp.USER32.dll_CreateWindowExA]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor ecx, ecx
mov edx, 0x1db
lea r8d, [rcx + 0x1d]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
lea rdx, str.cymbals
lea rcx, str.c7a5
mov r8d, r14d
call qword [sym.imp.KERNEL32.dll_CopyFileA]
lea rax, str.queen
mov rcx, qword [rsp + 0x1f0]
xor rcx, rsp
call fcn.1400dd340
mov rbx, qword [rsp + 0x250]
add rsp, 0x200
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret