Function at 0x140137590
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x140
mov qword [rsp + 0x130], 0xfffffffffffffffe
mov rdi, rdx
mov r13, rcx
xor r12b, r12b
mov rax, qword [rdx + 8]
movzx ecx, word [rax]
call fcn.140174830
mov rbx, rax
mov qword [rsp + 0x198], rax
test rax, rax
je 0x1401380cf
mov eax, dword [rdi + 0x10]
cmp eax, 1
jne 0x14013809f
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
xor esi, esi
mov qword [rsp + 0x40], rsi
lea ecx, [rax + 0xf]
call fcn.1402b6dbc
mov qword [rsp + 0x190], rax
test rax, rax
je 0x140137626
lea rdx, [0x1403525b8]
mov rcx, rax
call fcn.140133c60
mov rbx, rax
jmp 0x140137629
mov rbx, rsi
mov rax, qword [r13]
mov rcx, r13
call qword [rax]
mov r9, rbx
xor r8d, r8d
mov edx, dword [r13 + 0xb8]
mov rcx, rax
call qword [sym.imp.USER32.dll_PostMessageW]
lea rdi, [0x1404295c0]
cmp word [0x1404295c0], 0
jne 0x14013766a
mov r8d, 0x104
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
or rbx, 0xffffffffffffffff
nop
inc rbx
cmp word [rdi + rbx*2], 0
jne 0x140137670
mov qword [rsp + 0x70], rsi
test ebx, ebx
jne 0x140137691
lea rax, [0x140346ce0]
mov qword [rsp + 0x68], rax
jmp 0x1401376b6
mov edx, ebx
lea rcx, [rsp + 0x68]
call fcn.1401fcb40
movsxd r9, ebx
mov eax, dword [rsp + 0x70]
inc eax
movsxd rdx, eax
mov r8, rdi
mov rcx, qword [rsp + 0x68]
call fcn.1402ba94c
mov edx, ebx
lea rcx, [rsp + 0x68]
call fcn.1401fde50
nop
lea rcx, [rsp + 0xb8]
call fcn.1400eb3b0
nop
mov qword [rsp + 0x60], rsi
mov edx, 0xf
lea rcx, [rsp + 0x58]
call fcn.1401fcb40
mov eax, dword [rsp + 0x60]
inc eax
movsxd rdx, eax
mov r9d, 0xf
lea r8, str.Kickstarter.exe
mov rcx, qword [rsp + 0x58]
call fcn.1402ba94c
mov edx, 0xf
lea rcx, [rsp + 0x58]
call fcn.1401fde50
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xf8]
call fcn.1400d2ba0
nop
cmp dword [rsp + 0x60], 0
jle 0x140137741
mov rcx, qword [rsp + 0x58]
call fcn.1402b7350
lea rax, vtable.Core::ByteArray.0
mov qword [rsp + 0xc8], rax
mov edi, esi
mov dword [rsp + 0xd0], esi
mov qword [rsp + 0xd8], rsi
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [rsp + 0xe0], rax
mov edx, 0x18d
xor ecx, ecx
lea r8d, [rcx + 0xa]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov r14, rax
test rax, rax
je 0x140137859
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
movsxd rbx, eax
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r14, rax
test rax, rax
je 0x140137859
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r15, rax
test ebx, ebx
je 0x1401377f3
mov r8, rbx
mov edx, 8
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0xd8], rax
test rax, rax
je 0x1401377ef
mov edi, ebx
mov dword [rsp + 0xd0], ebx
jmp 0x1401377f6
xor bl, bl
jmp 0x14013780d
mov rax, rsi
test ebx, ebx
jle 0x14013780b
mov r9, rbx
movsxd rdx, edi
mov r8, r15
mov rcx, rax
call fcn.1402b8dd0
mov bl, 1
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeResource]
test bl, bl
je 0x140137859
xor r9d, r9d
lea edx, [r9 + 2]
mov r8d, 0x40000000
lea rcx, [rsp + 0xf8]
call fcn.140206060
mov rbx, rax
test rax, rax
je 0x140137859
mov rax, qword [rax]
mov r8d, edi
mov rdx, qword [rsp + 0xd8]
mov rcx, rbx
call qword [rax + 0x48]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov qword [rsp + 0x90], rsi
mov edx, 0x11
lea rcx, [rsp + 0x88]
call fcn.1401fcb40
mov eax, dword [rsp + 0x90]
inc eax
movsxd rdx, eax
mov r9d, 0x11
lea r8, str.HitmanPro_x64.exe
mov rcx, qword [rsp + 0x88]
call fcn.1402ba94c
mov edx, 0x11
lea rcx, [rsp + 0x88]
call fcn.1401fde50
nop
mov qword [rsp + 0x80], rsi
mov edx, 0xd
lea rcx, [rsp + 0x78]
call fcn.1401fcb40
mov eax, dword [rsp + 0x80]
inc eax
movsxd rdx, eax
mov r9d, 0xd
lea r8, [0x14034f0a8]
mov rcx, qword [rsp + 0x78]
call fcn.1402ba94c
mov edx, 0xd
lea rcx, [rsp + 0x78]
call fcn.1401fde50
nop
mov qword [rsp + 0xa0], rsi
mov edx, 0xd
lea rcx, [rsp + 0x98]
call fcn.1401fcb40
mov eax, dword [rsp + 0xa0]
inc eax
movsxd rdx, eax
mov r9d, 0xd
lea r8, [0x14034f0a8]
mov rcx, qword [rsp + 0x98]
call fcn.1402ba94c
mov edx, 0xd
lea rcx, [rsp + 0x98]
call fcn.1401fde50
nop
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xe8]
call fcn.1400d2ba0
nop
cmp dword [rsp + 0xa0], 0
jle 0x14013797e
mov rcx, qword [rsp + 0x98]
call fcn.1402b7350
mov ecx, 0x90
call fcn.1402b6dbc
test rax, rax
je 0x14013799a
mov rcx, rax
call fcn.1402065d0
mov rbx, rax
jmp 0x14013799d
mov rbx, rsi
mov qword [rsp + 0x58], rbx
lea rax, vtable.Core::SharedPtr_class_Core::Net::WebClient_.0
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x110], rbx
mov r15, rsi
mov qword [rsp + 0x118], rsi
test rbx, rbx
je 0x1401379f9
mov ecx, 4
call fcn.1402b6dbc
mov r15, rax
test rax, rax
je 0x1401379e7
mov dword [rax], esi
mov qword [rsp + 0x118], rax
jmp 0x1401379f2
mov r15, rsi
mov qword [rsp + 0x118], rsi
mov dword [r15], 1
mov ecx, 0x18
call fcn.1402b6dbc
test rax, rax
je 0x140137a23
lea rcx, vtable.DelegateCall_Member_class_HitmanPro35::UI::KickstartPanel__void____ptr64__class_Core::DownloadProgressChangedEventArgs____ptr64_.0
mov qword [rax], rcx
mov qword [rax + 8], r13
lea rcx, [0x140138170]
mov qword [rax + 0x10], rcx
jmp 0x140137a26
mov rax, rsi
mov qword [rsp + 0x190], rax
lea rcx, [rbx + 0x18]
mov rax, qword [rcx]
lea rdx, [rsp + 0x190]
call qword [rax]
mov ecx, 0x18
call fcn.1402b6dbc
test rax, rax
je 0x140137a69
lea rcx, vtable.DelegateCall_Member_class_HitmanPro35::UI::KickstartPanel__void____ptr64__class_Core::AsyncCompletedEventArgs____ptr64_.0
mov qword [rax], rcx
mov qword [rax + 8], r13
lea rcx, [0x1401381e0]
mov qword [rax + 0x10], rcx
jmp 0x140137a6c
mov rax, rsi
mov qword [rsp + 0x190], rax
lea rcx, [rbx + 0x48]
mov rax, qword [rcx]
lea rdx, [rsp + 0x190]
call qword [rax]
mov dword [rsp + 0xa8], esi
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x50], rsi
mov edx, 0x27
lea rcx, [rsp + 0x48]
call fcn.1401fcb40
mov eax, dword [rsp + 0x50]
inc eax
movsxd rdx, eax
mov r9d, 0x27
lea r8, str.http:__files.surfright.nl_HitmanPro.exe
mov rcx, qword [rsp + 0x48]
call fcn.1402ba94c
mov edx, 0x27
lea rcx, [rsp + 0x48]
call fcn.1401fde50
nop
lea r9, [rsp + 0xa8]
lea r8, [rsp + 0xe8]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call fcn.140206a90
nop
cmp dword [rsp + 0x50], 0
jle 0x140137b19
mov rcx, qword [rsp + 0x48]
call fcn.1402b7350
or edx, 0xffffffff
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [rsp + 0xa8], 0
je 0x140137f83
mov rdi, qword [0x140428b40]
test rdi, rdi
je 0x140137d20
cmp qword [rdi + 8], 0
je 0x140137d20
lea rcx, [rdi + 0x10]
call fcn.140205f30
test al, al
je 0x140137d20
lea rdx, [rdi + 0x10]
lea rcx, [rsp + 0x48]
call fcn.1400d44c0
nop
mov ecx, 0x18
call fcn.1402b6dbc
test rax, rax
je 0x140137b9b
mov r9b, 1
mov r8, qword [rsp + 0x48]
mov rdx, qword [rdi + 0x10]
mov rcx, rax
call fcn.140135700
mov r14, rax
jmp 0x140137b9e
mov r14, rsi
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
test rbx, rbx
je 0x140137bb5
mov qword [rbx], r14
add rbx, 8
mov qword [rsp + 0x38], rbx
mov rax, qword [rdi + 8]
test rax, rax
je 0x140137d08
test byte [rax + 0x18], 8
je 0x140137d08
lea r14, [rdi + 0x20]
mov rcx, r14
call fcn.140205f30
test al, al
je 0x140137d08
mov rdx, r14
lea rcx, [rsp + 0x120]
call fcn.1400d44c0
mov rdi, rax
mov edx, dword [rax + 0xc]
lea rcx, [rsp + 0x48]
call fcn.1401fcb40
movsxd r9, dword [rdi + 0xc]
mov eax, dword [rsp + 0x50]
inc eax
movsxd rdx, eax
mov r8, qword [rdi]
mov rcx, qword [rsp + 0x48]
call fcn.1402ba94c
mov edx, dword [rdi + 0xc]
lea rcx, [rsp + 0x48]
call fcn.1401fde50
nop
cmp dword [rsp + 0x128], 0
jle 0x140137c48
mov rcx, qword [rsp + 0x120]
call fcn.1402b7350
mov ecx, 0x18
call fcn.1402b6dbc
test rax, rax
je 0x140137c6f
mov r9b, 1
mov r8, qword [rsp + 0x48]
mov rdx, qword [r14]
mov rcx, rax
call fcn.140135700
mov r14, rax
jmp 0x140137c72
mov r14, rsi
mov qword [rsp + 0x190], r14
lea rax, [rsp + 0x190]
mov rdi, qword [rsp + 0x30]
cmp rax, rbx
jae 0x140137cda
lea rax, [rsp + 0x190]
cmp rdi, rax
ja 0x140137cda
lea r14, [rsp + 0x190]
sub r14, rdi
sar r14, 3
cmp rbx, qword [rsp + 0x40]
jne 0x140137cc3
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
test rbx, rbx
je 0x140137ccf
mov rax, qword [rdi + r14*8]
mov qword [rbx], rax
add rbx, 8
mov qword [rsp + 0x38], rbx
jmp 0x140137d0d
cmp rbx, qword [rsp + 0x40]
jne 0x140137cf5
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
test rbx, rbx
je 0x140137cfd
mov qword [rbx], r14
add rbx, 8
mov qword [rsp + 0x38], rbx
jmp 0x140137d0d
mov rdi, qword [rsp + 0x30]
cmp dword [rsp + 0x50], 0
jle 0x140137d2a
mov rcx, qword [rsp + 0x48]
call fcn.1402b7350
jmp 0x140137d2a
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
mov ecx, 0x18
call fcn.1402b6dbc
test rax, rax
je 0x140137d56
xor r9d, r9d
mov r8, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x68]
mov rcx, rax
call fcn.140135700
mov r14, rax
jmp 0x140137d59
mov r14, rsi
mov qword [rsp + 0x190], r14
lea rax, [rsp + 0x190]
cmp rax, rbx
jae 0x140137db3
lea rax, [rsp + 0x190]
cmp rdi, rax
ja 0x140137db3
lea r14, [rsp + 0x190]
sub r14, rdi
sar r14, 3
cmp rbx, qword [rsp + 0x40]
jne 0x140137da5
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
test rbx, rbx
je 0x140137dd6
mov rax, qword [rdi + r14*8]
mov qword [rbx], rax
jmp 0x140137dd6
cmp rbx, qword [rsp + 0x40]
jne 0x140137dce
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
test rbx, rbx
je 0x140137dd6
mov qword [rbx], r14
add rbx, 8
mov qword [rsp + 0x38], rbx
mov ecx, 0x18
call fcn.1402b6dbc
test rax, rax
je 0x140137e0b
xor r9d, r9d
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0xe8]
mov rcx, rax
call fcn.140135700
mov r14, rax
jmp 0x140137e0e
mov r14, rsi
mov qword [rsp + 0x190], r14
lea rax, [rsp + 0x190]
cmp rax, rbx
jae 0x140137e68
lea rax, [rsp + 0x190]
cmp rdi, rax
ja 0x140137e68
lea r14, [rsp + 0x190]
sub r14, rdi
sar r14, 3
cmp rbx, qword [rsp + 0x40]
jne 0x140137e5a
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
test rbx, rbx
je 0x140137e8b
mov rax, qword [rdi + r14*8]
mov qword [rbx], rax
jmp 0x140137e8b
cmp rbx, qword [rsp + 0x40]
jne 0x140137e83
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
test rbx, rbx
je 0x140137e8b
mov qword [rbx], r14
add rbx, 8
mov qword [rsp + 0x38], rbx
mov ecx, 0x18
call fcn.1402b6dbc
mov r14, rax
test rax, rax
je 0x140137ecd
mov rcx, qword [rsp + 0xf8]
call fcn.1402b9ff0
mov qword [r14], rax
lea rcx, str.Kickstarter.exe
call fcn.1402b9ff0
mov qword [r14 + 8], rax
mov byte [r14 + 0x10], 0
jmp 0x140137ed0
mov r14, rsi
mov qword [rsp + 0x190], r14
lea rax, [rsp + 0x190]
cmp rax, rbx
jae 0x140137f2a
lea rax, [rsp + 0x190]
cmp rdi, rax
ja 0x140137f2a
lea r14, [rsp + 0x190]
sub r14, rdi
sar r14, 3
cmp rbx, qword [rsp + 0x40]
jne 0x140137f1c
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
test rbx, rbx
je 0x140137f48
mov rax, qword [rdi + r14*8]
mov qword [rbx], rax
jmp 0x140137f48
cmp rbx, qword [rsp + 0x40]
jne 0x140137f40
lea rcx, [rsp + 0x30]
call fcn.1400bb350
mov rbx, qword [rsp + 0x38]
test rbx, rbx
je 0x140137f48
mov qword [rbx], r14
add rbx, 8
mov qword [rsp + 0x38], rbx
mov rax, qword [r13]
mov rcx, r13
call qword [rax]
mov r9, rax
mov eax, dword [r13 + 0xb8]
mov dword [rsp + 0x20], eax
lea r8, [rsp + 0x30]
mov rcx, qword [rsp + 0x198]
call fcn.140134050
movzx r12d, al
mov rbx, qword [rsp + 0x58]
test r15, r15
je 0x140137fb5
mov eax, dword [r15]
test eax, eax
jle 0x140137f94
dec eax
mov dword [r15], eax
cmp dword [r15], 0
jne 0x140137fb5
test rbx, rbx
je 0x140137fac
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
mov rcx, r15
call fcn.1402150f0
nop
cmp dword [rsp + 0xf0], 0
jle 0x140137fcd
mov rcx, qword [rsp + 0xe8]
call fcn.1402b7350
nop
cmp dword [rsp + 0x80], 0
jle 0x140137fe2
mov rcx, qword [rsp + 0x78]
call fcn.1402b7350
nop
cmp dword [rsp + 0x90], 0
jle 0x140137ffa
mov rcx, qword [rsp + 0x88]
call fcn.1402b7350
nop
mov rax, qword [rsp + 0xd8]
test rax, rax
je 0x14013801b
mov r8, rax
xor edx, edx
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
cmp dword [rsp + 0x100], 0
jle 0x140138033
mov rcx, qword [rsp + 0xf8]
call fcn.1402b7350
nop
cmp dword [rsp + 0xc0], 0
jle 0x14013804b
mov rcx, qword [rsp + 0xb8]
call fcn.1402b7350
nop
cmp dword [rsp + 0x70], 0
jle 0x14013805d
mov rcx, qword [rsp + 0x68]
call fcn.1402b7350
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14013806d
call fcn.1402150f0
nop
mov rbx, qword [rsp + 0x198]
mov rdi, qword [rsp + 0x188]
jmp 0x1401380c0
cmp eax, 2
jne 0x1401380bb
mov rax, qword [r13]
mov rcx, r13
call qword [rax]
mov rcx, rbx
call fcn.1401348a0
movzx r12d, al
jmp 0x1401380be
xor r12b, r12b
xor esi, esi
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
jmp 0x1401380d1
xor esi, esi
mov ecx, 0x10
call fcn.1402b6dbc
mov qword [rsp + 0x188], rax
test rax, rax
je 0x1401380f9
movzx edx, r12b
mov rcx, rax
call fcn.140133f50
mov rbx, rax
jmp 0x1401380fc
mov rbx, rsi
mov rax, qword [r13]
mov rcx, r13
call qword [rax]
mov rcx, rax
mov r9, rbx
xor r8d, r8d
mov edx, dword [r13 + 0xb8]
call qword [sym.imp.USER32.dll_PostMessageW]
movsxd rbx, dword [rdi + 0x10]
test r12b, r12b
setne sil
mov rax, qword [r13]
mov rcx, r13
call qword [rax]
mov rcx, rax
mov r9, rbx
mov r8, rsi
mov edx, dword [r13 + 0xbc]
call qword [sym.imp.USER32.dll_PostMessageW]
mov rcx, qword [r13 + 0xb0]
add rsp, 0x140
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
jmp qword [sym.imp.KERNEL32.dll_SetEvent]