Function at 0x14013a200
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x140
mov qword [rsp + 0x130], 0xfffffffffffffffe
mov rdi, rdx
mov r13, rcx
xor r12b, r12b
mov rax, qword [rdx + 8]
movzx ecx, word [rax]
call fcn.140177840
mov rbx, rax
mov qword [rsp + 0x198], rax
test rax, rax
je 0x14013ad3f
mov eax, dword [rdi + 0x10]
cmp eax, 1
jne 0x14013ad0f
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
xor esi, esi
mov qword [rsp + 0x40], rsi
lea ecx, [rax + 0xf]
call fcn.1402bcb4c
mov qword [rsp + 0x190], rax
test rax, rax
je 0x14013a296
lea rdx, [0x140358af0]
mov rcx, rax
call fcn.1401368d0
mov rbx, rax
jmp 0x14013a299
mov rbx, rsi
mov rax, qword [r13]
mov rcx, r13
call qword [rax]
mov r9, rbx
xor r8d, r8d
mov edx, dword [r13 + 0xb8]
mov rcx, rax
call qword [sym.imp.USER32.dll_PostMessageW]
lea rdi, [0x140431680]
cmp word [0x140431680], 0
jne 0x14013a2da
mov r8d, 0x104
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
or rbx, 0xffffffffffffffff
nop
inc rbx
cmp word [rdi + rbx*2], 0
jne 0x14013a2e0
mov qword [rsp + 0x70], rsi
test ebx, ebx
jne 0x14013a301
lea rax, [0x14034d1a0]
mov qword [rsp + 0x68], rax
jmp 0x14013a326
mov edx, ebx
lea rcx, [rsp + 0x68]
call fcn.1402028a0
movsxd r9, ebx
mov eax, dword [rsp + 0x70]
inc eax
movsxd rdx, eax
mov r8, rdi
mov rcx, qword [rsp + 0x68]
call fcn.1402c06dc
mov edx, ebx
lea rcx, [rsp + 0x68]
call fcn.140203bb0
nop
lea rcx, [rsp + 0xb8]
call fcn.1400edbc0
nop
mov qword [rsp + 0x60], rsi
mov edx, 0xf
lea rcx, [rsp + 0x58]
call fcn.1402028a0
mov eax, dword [rsp + 0x60]
inc eax
movsxd rdx, eax
mov r9d, 0xf
lea r8, str.Kickstarter.exe
mov rcx, qword [rsp + 0x58]
call fcn.1402c06dc
mov edx, 0xf
lea rcx, [rsp + 0x58]
call fcn.140203bb0
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xf8]
call fcn.1400d4050
nop
cmp dword [rsp + 0x60], 0
jle 0x14013a3b1
mov rcx, qword [rsp + 0x58]
call fcn.1402bd0e0
lea rax, vtable.Core::ByteArray.0
mov qword [rsp + 0xc8], rax
mov edi, esi
mov dword [rsp + 0xd0], esi
mov qword [rsp + 0xd8], rsi
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xe0], rax
mov edx, 0x18d
xor ecx, ecx
lea r8d, [rcx + 0xa]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov r14, rax
test rax, rax
je 0x14013a4c9
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
movsxd rbx, eax
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r14, rax
test rax, rax
je 0x14013a4c9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r15, rax
test ebx, ebx
je 0x14013a463
mov r8, rbx
mov edx, 8
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0xd8], rax
test rax, rax
je 0x14013a45f
mov edi, ebx
mov dword [rsp + 0xd0], ebx
jmp 0x14013a466
xor bl, bl
jmp 0x14013a47d
mov rax, rsi
test ebx, ebx
jle 0x14013a47b
mov r9, rbx
movsxd rdx, edi
mov r8, r15
mov rcx, rax
call fcn.1402beb60
mov bl, 1
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeResource]
test bl, bl
je 0x14013a4c9
xor r9d, r9d
lea edx, [r9 + 2]
mov r8d, 0x40000000
lea rcx, [rsp + 0xf8]
call fcn.14020c670
mov rbx, rax
test rax, rax
je 0x14013a4c9
mov rax, qword [rax]
mov r8d, edi
mov rdx, qword [rsp + 0xd8]
mov rcx, rbx
call qword [rax + 0x48]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov qword [rsp + 0x90], rsi
mov edx, 0x11
lea rcx, [rsp + 0x88]
call fcn.1402028a0
mov eax, dword [rsp + 0x90]
inc eax
movsxd rdx, eax
mov r9d, 0x11
lea r8, str.HitmanPro_x64.exe
mov rcx, qword [rsp + 0x88]
call fcn.1402c06dc
mov edx, 0x11
lea rcx, [rsp + 0x88]
call fcn.140203bb0
nop
mov qword [rsp + 0x80], rsi
mov edx, 0xd
lea rcx, [rsp + 0x78]
call fcn.1402028a0
mov eax, dword [rsp + 0x80]
inc eax
movsxd rdx, eax
mov r9d, 0xd
lea r8, [0x140354f68]
mov rcx, qword [rsp + 0x78]
call fcn.1402c06dc
mov edx, 0xd
lea rcx, [rsp + 0x78]
call fcn.140203bb0
nop
mov qword [rsp + 0xa0], rsi
mov edx, 0xd
lea rcx, [rsp + 0x98]
call fcn.1402028a0
mov eax, dword [rsp + 0xa0]
inc eax
movsxd rdx, eax
mov r9d, 0xd
lea r8, [0x140354f68]
mov rcx, qword [rsp + 0x98]
call fcn.1402c06dc
mov edx, 0xd
lea rcx, [rsp + 0x98]
call fcn.140203bb0
nop
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xe8]
call fcn.1400d4050
nop
cmp dword [rsp + 0xa0], 0
jle 0x14013a5ee
mov rcx, qword [rsp + 0x98]
call fcn.1402bd0e0
mov ecx, 0x90
call fcn.1402bcb4c
test rax, rax
je 0x14013a60a
mov rcx, rax
call fcn.14020cbe0
mov rbx, rax
jmp 0x14013a60d
mov rbx, rsi
mov qword [rsp + 0x58], rbx
lea rax, vtable.Core::SharedPtr_class_Core::Net::WebClient_.0
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x110], rbx
mov r15, rsi
mov qword [rsp + 0x118], rsi
test rbx, rbx
je 0x14013a669
mov ecx, 4
call fcn.1402bcb4c
mov r15, rax
test rax, rax
je 0x14013a657
mov dword [rax], esi
mov qword [rsp + 0x118], rax
jmp 0x14013a662
mov r15, rsi
mov qword [rsp + 0x118], rsi
mov dword [r15], 1
mov ecx, 0x18
call fcn.1402bcb4c
test rax, rax
je 0x14013a693
lea rcx, vtable.DelegateCall_Member_class_HitmanPro35::UI::KickstartPanel__void____ptr64__class_Core::DownloadProgressChangedEventArgs____ptr64_.0
mov qword [rax], rcx
mov qword [rax + 8], r13
lea rcx, [0x14013ade0]
mov qword [rax + 0x10], rcx
jmp 0x14013a696
mov rax, rsi
mov qword [rsp + 0x190], rax
lea rcx, [rbx + 0x18]
mov rax, qword [rcx]
lea rdx, [rsp + 0x190]
call qword [rax]
mov ecx, 0x18
call fcn.1402bcb4c
test rax, rax
je 0x14013a6d9
lea rcx, vtable.DelegateCall_Member_class_HitmanPro35::UI::KickstartPanel__void____ptr64__class_Core::AsyncCompletedEventArgs____ptr64_.0
mov qword [rax], rcx
mov qword [rax + 8], r13
lea rcx, [0x14013ae50]
mov qword [rax + 0x10], rcx
jmp 0x14013a6dc
mov rax, rsi
mov qword [rsp + 0x190], rax
lea rcx, [rbx + 0x48]
mov rax, qword [rcx]
lea rdx, [rsp + 0x190]
call qword [rax]
mov dword [rsp + 0xa8], esi
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x50], rsi
mov edx, 0x27
lea rcx, [rsp + 0x48]
call fcn.1402028a0
mov eax, dword [rsp + 0x50]
inc eax
movsxd rdx, eax
mov r9d, 0x27
lea r8, str.http:__files.surfright.nl_HitmanPro.exe
mov rcx, qword [rsp + 0x48]
call fcn.1402c06dc
mov edx, 0x27
lea rcx, [rsp + 0x48]
call fcn.140203bb0
nop
lea r9, [rsp + 0xa8]
lea r8, [rsp + 0xe8]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call fcn.14020d0a0
nop
cmp dword [rsp + 0x50], 0
jle 0x14013a789
mov rcx, qword [rsp + 0x48]
call fcn.1402bd0e0
or edx, 0xffffffff
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [rsp + 0xa8], 0
je 0x14013abf3
mov rdi, qword [0x140430c00]
test rdi, rdi
je 0x14013a990
cmp qword [rdi + 8], 0
je 0x14013a990
lea rcx, [rdi + 0x10]
call fcn.14020c540
test al, al
je 0x14013a990
lea rdx, [rdi + 0x10]
lea rcx, [rsp + 0x48]
call fcn.1400d5970
nop
mov ecx, 0x18
call fcn.1402bcb4c
test rax, rax
je 0x14013a80b
mov r9b, 1
mov r8, qword [rsp + 0x48]
mov rdx, qword [rdi + 0x10]
mov rcx, rax
call fcn.140138370
mov r14, rax
jmp 0x14013a80e
mov r14, rsi
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
test rbx, rbx
je 0x14013a825
mov qword [rbx], r14
add rbx, 8
mov qword [rsp + 0x38], rbx
mov rax, qword [rdi + 8]
test rax, rax
je 0x14013a978
test byte [rax + 0x18], 8
je 0x14013a978
lea r14, [rdi + 0x20]
mov rcx, r14
call fcn.14020c540
test al, al
je 0x14013a978
mov rdx, r14
lea rcx, [rsp + 0x120]
call fcn.1400d5970
mov rdi, rax
mov edx, dword [rax + 0xc]
lea rcx, [rsp + 0x48]
call fcn.1402028a0
movsxd r9, dword [rdi + 0xc]
mov eax, dword [rsp + 0x50]
inc eax
movsxd rdx, eax
mov r8, qword [rdi]
mov rcx, qword [rsp + 0x48]
call fcn.1402c06dc
mov edx, dword [rdi + 0xc]
lea rcx, [rsp + 0x48]
call fcn.140203bb0
nop
cmp dword [rsp + 0x128], 0
jle 0x14013a8b8
mov rcx, qword [rsp + 0x120]
call fcn.1402bd0e0
mov ecx, 0x18
call fcn.1402bcb4c
test rax, rax
je 0x14013a8df
mov r9b, 1
mov r8, qword [rsp + 0x48]
mov rdx, qword [r14]
mov rcx, rax
call fcn.140138370
mov r14, rax
jmp 0x14013a8e2
mov r14, rsi
mov qword [rsp + 0x190], r14
lea rax, [rsp + 0x190]
mov rdi, qword [rsp + 0x30]
cmp rax, rbx
jae 0x14013a94a
lea rax, [rsp + 0x190]
cmp rdi, rax
ja 0x14013a94a
lea r14, [rsp + 0x190]
sub r14, rdi
sar r14, 3
cmp rbx, qword [rsp + 0x40]
jne 0x14013a933
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
test rbx, rbx
je 0x14013a93f
mov rax, qword [rdi + r14*8]
mov qword [rbx], rax
add rbx, 8
mov qword [rsp + 0x38], rbx
jmp 0x14013a97d
cmp rbx, qword [rsp + 0x40]
jne 0x14013a965
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
test rbx, rbx
je 0x14013a96d
mov qword [rbx], r14
add rbx, 8
mov qword [rsp + 0x38], rbx
jmp 0x14013a97d
mov rdi, qword [rsp + 0x30]
cmp dword [rsp + 0x50], 0
jle 0x14013a99a
mov rcx, qword [rsp + 0x48]
call fcn.1402bd0e0
jmp 0x14013a99a
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
mov ecx, 0x18
call fcn.1402bcb4c
test rax, rax
je 0x14013a9c6
xor r9d, r9d
mov r8, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x68]
mov rcx, rax
call fcn.140138370
mov r14, rax
jmp 0x14013a9c9
mov r14, rsi
mov qword [rsp + 0x190], r14
lea rax, [rsp + 0x190]
cmp rax, rbx
jae 0x14013aa23
lea rax, [rsp + 0x190]
cmp rdi, rax
ja 0x14013aa23
lea r14, [rsp + 0x190]
sub r14, rdi
sar r14, 3
cmp rbx, qword [rsp + 0x40]
jne 0x14013aa15
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
test rbx, rbx
je 0x14013aa46
mov rax, qword [rdi + r14*8]
mov qword [rbx], rax
jmp 0x14013aa46
cmp rbx, qword [rsp + 0x40]
jne 0x14013aa3e
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
test rbx, rbx
je 0x14013aa46
mov qword [rbx], r14
add rbx, 8
mov qword [rsp + 0x38], rbx
mov ecx, 0x18
call fcn.1402bcb4c
test rax, rax
je 0x14013aa7b
xor r9d, r9d
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0xe8]
mov rcx, rax
call fcn.140138370
mov r14, rax
jmp 0x14013aa7e
mov r14, rsi
mov qword [rsp + 0x190], r14
lea rax, [rsp + 0x190]
cmp rax, rbx
jae 0x14013aad8
lea rax, [rsp + 0x190]
cmp rdi, rax
ja 0x14013aad8
lea r14, [rsp + 0x190]
sub r14, rdi
sar r14, 3
cmp rbx, qword [rsp + 0x40]
jne 0x14013aaca
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
test rbx, rbx
je 0x14013aafb
mov rax, qword [rdi + r14*8]
mov qword [rbx], rax
jmp 0x14013aafb
cmp rbx, qword [rsp + 0x40]
jne 0x14013aaf3
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
test rbx, rbx
je 0x14013aafb
mov qword [rbx], r14
add rbx, 8
mov qword [rsp + 0x38], rbx
mov ecx, 0x18
call fcn.1402bcb4c
mov r14, rax
test rax, rax
je 0x14013ab3d
mov rcx, qword [rsp + 0xf8]
call fcn.1402bfd80
mov qword [r14], rax
lea rcx, str.Kickstarter.exe
call fcn.1402bfd80
mov qword [r14 + 8], rax
mov byte [r14 + 0x10], 0
jmp 0x14013ab40
mov r14, rsi
mov qword [rsp + 0x190], r14
lea rax, [rsp + 0x190]
cmp rax, rbx
jae 0x14013ab9a
lea rax, [rsp + 0x190]
cmp rdi, rax
ja 0x14013ab9a
lea r14, [rsp + 0x190]
sub r14, rdi
sar r14, 3
cmp rbx, qword [rsp + 0x40]
jne 0x14013ab8c
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
test rbx, rbx
je 0x14013abb8
mov rax, qword [rdi + r14*8]
mov qword [rbx], rax
jmp 0x14013abb8
cmp rbx, qword [rsp + 0x40]
jne 0x14013abb0
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
test rbx, rbx
je 0x14013abb8
mov qword [rbx], r14
add rbx, 8
mov qword [rsp + 0x38], rbx
mov rax, qword [r13]
mov rcx, r13
call qword [rax]
mov r9, rax
mov eax, dword [r13 + 0xb8]
mov dword [rsp + 0x20], eax
lea r8, [rsp + 0x30]
mov rcx, qword [rsp + 0x198]
call fcn.140136cc0
movzx r12d, al
mov rbx, qword [rsp + 0x58]
test r15, r15
je 0x14013ac25
mov eax, dword [r15]
test eax, eax
jle 0x14013ac04
dec eax
mov dword [r15], eax
cmp dword [r15], 0
jne 0x14013ac25
test rbx, rbx
je 0x14013ac1c
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
mov rcx, r15
call fcn.14021ae20
nop
cmp dword [rsp + 0xf0], 0
jle 0x14013ac3d
mov rcx, qword [rsp + 0xe8]
call fcn.1402bd0e0
nop
cmp dword [rsp + 0x80], 0
jle 0x14013ac52
mov rcx, qword [rsp + 0x78]
call fcn.1402bd0e0
nop
cmp dword [rsp + 0x90], 0
jle 0x14013ac6a
mov rcx, qword [rsp + 0x88]
call fcn.1402bd0e0
nop
mov rax, qword [rsp + 0xd8]
test rax, rax
je 0x14013ac8b
mov r8, rax
xor edx, edx
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
cmp dword [rsp + 0x100], 0
jle 0x14013aca3
mov rcx, qword [rsp + 0xf8]
call fcn.1402bd0e0
nop
cmp dword [rsp + 0xc0], 0
jle 0x14013acbb
mov rcx, qword [rsp + 0xb8]
call fcn.1402bd0e0
nop
cmp dword [rsp + 0x70], 0
jle 0x14013accd
mov rcx, qword [rsp + 0x68]
call fcn.1402bd0e0
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14013acdd
call fcn.14021ae20
nop
mov rbx, qword [rsp + 0x198]
mov rdi, qword [rsp + 0x188]
jmp 0x14013ad30
cmp eax, 2
jne 0x14013ad2b
mov rax, qword [r13]
mov rcx, r13
call qword [rax]
mov rcx, rbx
call fcn.140137510
movzx r12d, al
jmp 0x14013ad2e
xor r12b, r12b
xor esi, esi
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
jmp 0x14013ad41
xor esi, esi
mov ecx, 0x10
call fcn.1402bcb4c
mov qword [rsp + 0x188], rax
test rax, rax
je 0x14013ad69
movzx edx, r12b
mov rcx, rax
call fcn.140136bc0
mov rbx, rax
jmp 0x14013ad6c
mov rbx, rsi
mov rax, qword [r13]
mov rcx, r13
call qword [rax]
mov rcx, rax
mov r9, rbx
xor r8d, r8d
mov edx, dword [r13 + 0xb8]
call qword [sym.imp.USER32.dll_PostMessageW]
movsxd rbx, dword [rdi + 0x10]
test r12b, r12b
setne sil
mov rax, qword [r13]
mov rcx, r13
call qword [rax]
mov rcx, rax
mov r9, rbx
mov r8, rsi
mov edx, dword [r13 + 0xbc]
call qword [sym.imp.USER32.dll_PostMessageW]
mov rcx, qword [r13 + 0xb0]
add rsp, 0x140
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
jmp qword [sym.imp.KERNEL32.dll_SetEvent]