Function at 0x14008f500
Capabilities:
Check for time delay via gettickcount
Create thread
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x420
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x410], rax
lea rcx, [rsp + 0xe0]
mov edx, 0x104
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
mov rbx, rax
mov qword [rsp + 0x78], rax
lea edi, [rax + 8]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov r12, rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea rcx, [rsp + 0x1f0]
mov edx, 0x104
mov dword [rsp + 0xa8], eax
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
xor r14d, r14d
lea r8, [0x140001b00]
lea r9d, [r14 + 8]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], r14
mov qword [rsp + 0xc0], rax
mov dword [rsp + 0x20], r14d
call qword [sym.imp.KERNEL32.dll_CreateThread]
movzx eax, dil
lea r8, [0x140001b00]
imul r12b
movzx ecx, al
mov al, 0x19
xor edx, edx
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
imul cl
movzx esi, al
mov eax, 8
lea ecx, [r12 + r12*4]
sub sil, byte [rsp + 0xa8]
sub eax, ebx
lea r13d, [rcx*4 + 8]
dec bl
movzx ebp, sil
xor ecx, ecx
sub bpl, r12b
mov dword [rsp + 0x68], r13d
mov dword [rsp + 0x74], eax
add bpl, bl
movsx rbx, bpl
mov r9, rbx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor ecx, ecx
mov edx, 0x2e3
lea r8d, [rcx + 0xd]
mov r14, rax
mov qword [rsp + 0x90], rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
movsx ecx, bpl
mov edx, 0x25c
mov dword [rsp + 0x84], ecx
inc ecx
mov r15, rax
movzx eax, dil
mov rdi, qword [rsp + 0x78]
mov dword [rsp + 0x60], eax
imul ecx, edi
sub ecx, eax
sub ecx, r14d
add ecx, 4
mov dword [rsp + 0x70], ecx
xor ecx, ecx
lea r8d, [rcx + 0x1a]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov edx, dword [rsp + 0x70]
mov eax, r15d
sub eax, edx
mov ecx, edi
add eax, 0xffffffd5
add eax, r12d
mov dword [rsp + 0x64], eax
imul ecx, r13d
sub ecx, ebx
imul eax, r12d
add eax, r15d
lea ecx, [rax + rcx*4]
lea eax, [rdx + 3]
add eax, ecx
mov dword [rsp + 0x6c], eax
call qword [sym.imp.USER32.dll_GetActiveWindow]
lea rcx, [rsp + 0x300]
mov edx, 0x104
mov qword [rsp + 0xa0], rax
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
mov ebx, dword [rsp + 0x60]
movsx r13, sil
lea ecx, [rbx + rbx*4]
mov edx, 0xe4
sub edi, ecx
xor ecx, ecx
sub edi, r13d
lea r8d, [rcx + 0x1d]
add edi, r12d
mov qword [rsp + 0x78], rdi
call qword [sym.imp.KERNEL32.dll_FindResourceA]
lea ecx, [rax*4]
mov r14, rax
sub edi, ecx
mov dword [rsp + 0x60], edi
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorGroupCount]
mov ecx, dword [rsp + 0x68]
mov r9d, dword [rsp + 0x6c]
movzx esi, ax
xor eax, eax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], 8
mov dword [rsp + 0x38], ecx
movsx eax, bpl
mov dword [rsp + 0x30], eax
lea r8, str.c2a1
lea rdx, str.icebreaker
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x8c], esi
mov dword [rsp + 0x20], 8
call qword [sym.imp.USER32.dll_CreateWindowExA]
xor ecx, ecx
mov edx, 0x275
lea r8d, [rcx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
movsxd r9, dword [rsp + 0x64]
xor eax, eax
mov qword [rsp + 0x28], rax
lea r8, [0x140001b00]
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor ecx, ecx
mov edx, 0x144
lea r8d, [rcx + 0x14]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov edi, 0xfffffff5
xor edx, edx
sub edi, esi
xor ecx, ecx
mov dword [rsp + 0x80], edi
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r9, rax
mov qword [rsp + 0x98], rax
mov eax, r12d
sub eax, r9d
sub eax, 0x35
cmp bpl, byte [rsp + 0x64]
mov rbp, qword [rsp + 0x90]
mov dword [rsp + 0x88], eax
je 0x14008f86e
mov ecx, 1
lea edx, [rsi*4]
mov eax, r14d
sub ecx, r12d
add edx, r13d
imul eax, dword [rsp + 0x78]
imul ecx, ebp
lea r8d, [rcx + rdx*4]
mov rdx, r14
xor ecx, ecx
add r8d, eax
lea eax, [rbx + rbx*8]
sub r8d, eax
sub r8d, r9d
lea ebx, [r8 + r15]
call qword [sym.imp.KERNEL32.dll_LoadResource]
lea ecx, [rbx - 0x13]
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea rcx, str.c2a1
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, r14
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SizeofResource]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, 0xffff
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov edx, 2
xor ecx, ecx
lea r8d, [rdx + 0x14]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov esi, dword [rsp + 0x68]
mov eax, edi
imul ecx, r12d, 0xb
imul eax, dword [rsp + 0x60]
add ecx, r15d
add esi, 0xffffffdb
shl ecx, 2
imul edx, eax, 0xfffffff7
lea eax, [r13*4]
sub edx, ecx
add eax, r13d
add edx, eax
imul eax, ebp, 0x27
add edx, eax
sub edx, r14d
sub edx, dword [rsp + 0x74]
sub edx, r12d
add esi, edx
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rdi, rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rbx, rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov eax, dword [rsp + 0x8c]
imul r14d, dword [rsp + 0x78]
mov edx, r15d
imul edx, dword [rsp + 0x70]
lea ecx, [rax + rdx*2]
mov rax, qword [rsp + 0x98]
add edx, ecx
imul eax, dword [rsp + 0x88]
lea ecx, [rdx + rdx*4]
imul edx, eax, 0xfffffff5
lea eax, [r12 + r15]
add ecx, ecx
lea eax, [rax + r15*2]
sub edx, ecx
sub edx, dword [rsp + 0x80]
add edx, dword [rsp + 0x68]
lea ecx, [rax + rdx*2]
mov eax, dword [rsp + 0x84]
add ecx, ecx
imul eax, ebp
sub ecx, eax
mov eax, dword [rsp + 0x6c]
sub ecx, r14d
imul eax, dword [rsp + 0x64]
add ecx, eax
lea eax, [r13 - 1]
sub ecx, ebx
sub ecx, dword [rsp + 0xa0]
sub ecx, dword [rsp + 0x74]
add ecx, edi
add ecx, dword [rsp + 0xc0]
add ecx, esi
add ecx, dword [rsp + 0x60]
add eax, ecx
mov rcx, qword [rsp + 0x410]
xor rcx, rsp
call fcn.1400dd340
lea r11, [rsp + 0x420]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret