Function at 0x140016b20
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc0
or rbp, 0xffffffffffffffff
mov r15d, r9d
mov rdi, r8
mov rsi, rbp
mov r12d, ecx
nop dword [rax]
inc rsi
cmp byte [r8 + rsi], 0
jne 0x140016b50
add sil, r15b
add sil, cl
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rbp
mov rbx, rax
mov qword [rsp + 0x60], rax
inc rcx
cmp byte [rdi + rcx], 0
jne 0x140016b71
mov rdx, qword [rsp + 0x120]
movzx eax, r12b
mov r14d, edx
imul cl
movzx ecx, al
movzx eax, r12b
sub cl, r15b
sub r14d, r15d
mov byte [rsp + 0x100], cl
movzx r8d, cl
add r14d, r12d
imul r15b
add al, dl
mov rdx, rbx
mov r9d, r14d
mov byte [rsp + 0x28], al
mov byte [rsp + 0x118], al
lea rax, str.turkey
movzx ecx, sil
mov qword [rsp + 0x20], rax
call fcn.14002bce0
mov rdx, rbx
mov r13, rax
call fcn.1400406c0
mov dword [rsp + 0x78], eax
call fcn.1400475d0
mov qword [rsp + 0x70], rax
movsx eax, byte [rsp + 0x100]
cmp r15d, eax
jb 0x140016cb6
xor r9d, r9d
mov r8d, r14d
lea rdx, str.turkey
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x48], r9
mov qword [rsp + 0x40], r8
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r15d
lea r8, [0x1400ed830]
movsx ecx, sil
mov r9d, r14d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rbx, rbp
inc rbx
cmp byte [rdi + rbx], 0
jne 0x140016c46
movzx eax, byte [rsp + 0x118]
imul ebx, eax
mov rax, qword [rsp + 0x70]
imul ebx, r14d
imul ebx, r15d
lea eax, [rax + rax*2]
sub ebx, r13d
imul ebx, dword [rsp + 0x60]
sub ebx, eax
mov rax, qword [rsp + 0x108]
add ebx, dword [rax]
add ebx, r12d
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorGroupCount]
lea rdx, str.emergence
mov r9d, ebx
mov r8d, 8
mov byte [rsp + 0x20], al
call fcn.140022050
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LockResource]
movzx ecx, al
call fcn.140049370
mov rbx, qword [rsp + 0x60]
mov eax, ebx
imul ebx, dword [rsp + 0x70], 0xfffffffa
lea rdx, str.c1a3
imul eax, r14d
sub ebx, eax
mov rax, qword [rsp + 0x108]
sub ebx, dword [rax]
add ebx, r12d
mov ecx, ebx
call fcn.14003f530
movzx r10d, byte [rsp + 0x118]
movsx r8d, sil
mov r9d, eax
mov dword [rsp + 0x68], eax
movsx eax, byte [rsp + 0x100]
mov ecx, r10d
mov edx, 1
imul ecx, r13d
imul ecx, r14d
sub edx, ecx
mov ecx, r8d
imul edx, dword [rsp + 0x60]
imul ecx, dword [rsp + 0x120]
imul ecx, r15d
add ecx, eax
add ecx, edx
lea edx, [r9*4]
lea eax, [rcx + rbx*4]
mov rbx, qword [rsp + 0x120]
mov ecx, r8d
add eax, r12d
mov dword [rsp + 0x7c], eax
mov eax, r10d
imul eax, r13d
sub edx, eax
mov rax, qword [rsp + 0x108]
sub edx, dword [rax + 8]
lea eax, [r12 + 3]
sub edx, ebx
sub edx, r15d
add eax, edx
mov dword [rsp + 0x80], eax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movsx r15, sil
mov qword [rsp + 0x88], rax
lea rax, str.terrapin
mov qword [rsp + 0x90], rax
mov rax, rbp
nop dword [rax]
inc rax
cmp byte [rdi + rax], 0
jne 0x140016d90
mov rsi, qword [rsp + 0x108]
movups xmm0, xmmword [rsp + 0x80]
imul eax, ebx
imul r13d, r14d
mov r14d, dword [rsp + 0x7c]
lea r8, [rsp + 0xa0]
mov ecx, dword [rsi + 0x10]
mov edx, r14d
movaps xmmword [rsp + 0xa0], xmm0
imul ecx, r12d
sub ecx, r13d
sub ecx, eax
mov eax, dword [rsp + 0x68]
lea eax, [rax + rax*2]
shl eax, 4
sub ecx, eax
sub ecx, r15d
add ecx, 4
mov dword [rsp + 0x98], ecx
lea rcx, str.c0a4
movups xmm1, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0xb0], xmm1
call fcn.14003bb60
mov rcx, rbp
mov r8, rax
nop
inc rcx
cmp byte [rdi + rcx], 0
jne 0x140016e10
imul ecx, dword [rsi + 0x10]
movsx rax, byte [rsp + 0x100]
imul ecx, ebx
lea edx, [rax + rax*2]
add edx, edx
imul ecx, r12d
sub ecx, edx
sub ecx, r15d
sub ecx, dword [rsp + 0x70]
sub ecx, dword [rsp + 0x78]
add ecx, r14d
add ecx, dword [rsp + 0x60]
inc rbp
cmp byte [r8 + rbp], 0
jne case.default.0x140016e7c
sub ecx, ebp
add ecx, 3
call fcn.140039940
movzx ecx, byte [rsp + 0x118]
mov rbx, qword [rsp + 0x110]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
jmp qword [sym.imp.KERNEL32.dll_GetStdHandle]