Function at 0x140013c90
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x180]
sub rsp, 0x280
mov rax, qword [0x14009d2d0]
xor rax, rsp
mov qword [rbp + 0x170], rax
mov r13, rdx
xor ebx, ebx
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x60]
call fcn.1400464e0
mov dword [rsp + 0x4c], 0x208
mov dword [rsp + 0x48], 1
mov dword [rsp + 0x30], ebx
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x48]
lea r8, str.szBackupDir64
lea rdx, str.SOFTWAREMcAfeeAPMcVscIns
mov rcx, 0xffffffff80000002
call fcn.140003d20
test eax, eax
jne 0x1400140d7
cmp dword [rsp + 0x48], 1
jne 0x1400140d7
lea r8, str.McVSCIns.exe
mov edx, 0x104
lea rcx, [rsp + 0x60]
call fcn.14004fd54
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r15, rax
test rax, rax
jne 0x140013dcf
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x140013d74
movzx eax, ax
or eax, 0x80070000
mov ebx, eax
mov dword [rsp + 0x40], eax
mov ecx, 5
call fcn.14002bb50
test eax, eax
je 0x1400140dc
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, str.LoadLibrary__s_failed__hRC_d
mov qword [rsp + 0x20], rax
mov r9d, 0xdb
lea r8, str.CMcAacXML::LoadResourceXML
lea rdx, str.E:BTc1fd866d_3751_4c72_a231_f6b223727ef9_vscore_srcMcAPExeMcAacXML.cpp
mov ecx, 5
call fcn.140011fe0
jmp 0x1400140dc
lea r8, [0x14008caa8]
mov edx, 0x3e8
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdi, rax
test rax, rax
jne 0x140013e62
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x140013dfe
movzx eax, ax
or eax, 0x80070000
mov ecx, 0x80004005
test eax, eax
cmove eax, ecx
mov ebx, eax
mov dword [rsp + 0x40], eax
mov ecx, 5
call fcn.14002bb50
test eax, eax
je 0x1400140cc
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, str.FindResource__hRC_d
mov r9d, 0xe4
mov qword [rsp + 0x20], rax
lea r8, str.CMcAacXML::LoadResourceXML
lea rdx, str.E:BTc1fd866d_3751_4c72_a231_f6b223727ef9_vscore_srcMcAPExeMcAacXML.cpp
mov ecx, 5
call fcn.140001f30
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x1400140dc
mov rdx, rdi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
test eax, eax
jne 0x140013ec4
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x140013e86
movzx eax, ax
or eax, 0x80070000
mov ecx, 0x80004005
test eax, eax
cmove eax, ecx
mov ebx, eax
mov dword [rsp + 0x40], eax
mov ecx, 5
call fcn.14002bb50
test eax, eax
je 0x1400140cc
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, str.SizeofResource__hRC_d
mov r9d, 0xec
jmp 0x140013e37
mov rdx, rdi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
jne 0x140013f25
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x140013ee7
movzx eax, ax
or eax, 0x80070000
mov ecx, 0x80004005
test eax, eax
cmove eax, ecx
mov ebx, eax
mov dword [rsp + 0x40], eax
mov ecx, 5
call fcn.14002bb50
test eax, eax
je 0x1400140cc
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, str.LoadResource__hRC_d
mov r9d, 0xf4
jmp 0x140013e37
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
test rax, rax
jne 0x140013f86
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x140013f48
movzx eax, ax
or eax, 0x80070000
mov ecx, 0x80004005
test eax, eax
cmove eax, ecx
mov ebx, eax
mov dword [rsp + 0x40], eax
mov ecx, 5
call fcn.14002bb50
test eax, eax
je 0x1400140cc
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, str.LockResource__hRC_d
mov r9d, 0xfc
jmp 0x140013e37
lea rdx, [0x14007723c]
mov rcx, rsi
call fcn.140043f98
mov r14, rax
test rax, rax
jne 0x140013fe4
lea ecx, [rax + 5]
call fcn.14002bb50
test eax, eax
je 0x1400140cc
lea rax, str.Failed_to_allocate_buff.
mov qword [rsp + 0x20], rax
mov r9d, 0x108
lea r8, str.CMcAacXML::LoadResourceXML
lea rdx, str.E:BTc1fd866d_3751_4c72_a231_f6b223727ef9_vscore_srcMcAPExeMcAacXML.cpp
lea ecx, [r14 + 5]
call fcn.14000da30
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x1400140dc
mov r8, rsi
mov rdx, rdi
mov rcx, r14
call fcn.140045e30
test esi, esi
js 0x14001410e
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, esi
mov r8, r14
xor edx, edx
lea ecx, [rdx + 3]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebx, eax
mov edx, eax
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov rdi, rax
test rax, rax
je 0x14001404a
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8, r14
xor edx, edx
lea ecx, [rdx + 3]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, ebx
jne 0x140014119
mov qword [rsp + 0x50], rdi
test rdi, rdi
je 0x140014122
mov rcx, r14
call fcn.140043780
mov rcx, qword [r13]
mov rax, qword [rcx]
lea r8, [rsp + 0x44]
mov rdx, rdi
mov rax, qword [rax + 0x208]
call qword [case.0x1400408d8.0]
mov ebx, eax
mov dword [rsp + 0x40], eax
test eax, eax
js 0x14001408e
cmp word [rsp + 0x44], 0
jne 0x1400140c3
mov ecx, 5
call fcn.14002bb50
test eax, eax
je 0x1400140c3
lea rax, [rsp + 0x44]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov r9d, 0x112
lea r8, str.CMcAacXML::LoadResourceXML
call fcn.14001ab40
nop
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x1400140dc
mov ebx, 0x80004005
mov eax, ebx
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.140043760
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80070057
call fcn.14000ef90
int3
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, 0x8007000e
call fcn.14000ef90
int3