Function at 0x14000c7b4
Capabilities:
Contain obfuscated stackstrings
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov dword [rax + 8], ecx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x8d9f8]
mov eax, 0x8dad0
call fcn.140014150
sub rsp, rax
mov r15, rdx
or dword [rbp + 0x8da00], 0xffffffff
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
xor r13d, r13d
test rax, rax
je 0x14000c87f
mov dword [rsp + 0x30], 0x7551744e
mov dword [rsp + 0x34], 0x49797265
mov dword [rsp + 0x38], 0x726f666e
mov dword [rsp + 0x3c], 0x6974616d
mov dword [rsp + 0x40], 0x72506e6f
mov dword [rsp + 0x44], 0x7365636f
mov word [rsp + 0x48], 0x73
lea rdx, [rsp + 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x14000c87f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r13
lea r9d, [r13 + 4]
lea r8, [rbp + 0x8da00]
lea edx, [r13 + 0x1f]
call rbx
test eax, eax
jne 0x14000c87f
cmp dword [rbp + 0x8da00], r13d
je 0x14000cd52
mov edx, 0x64
xor ecx, ecx
lea r8d, [rdx - 0x5a]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
test rax, rax
je 0x14000cd29
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
test eax, eax
je 0x14000cd29
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x14000cd29
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
test rax, rax
je 0x14000cd29
lea rcx, [rbp + 0x30]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov edx, 0x80
movups xmm0, xmmword [rax + 0x70]
movups xmmword [rcx + rdx - 0x10], xmm0
mov rax, qword [rax + rdx]
mov qword [rcx + rdx], rax
mov rbx, qword [rbp + 0x30]
mov rax, rbx
shr rax, 0x20
test eax, eax
je 0x14000c93e
call fcn.14000c4fc
test ebx, ebx
je 0x14000c95c
call fcn.14000c12c
test al, al
je 0x14000cd52
call fcn.14000c2f8
test eax, eax
je 0x14000cd52
lea eax, [rsi - 0xa7]
mov dword [r15], eax
mov ecx, eax
call fcn.14000a99c
mov rbx, rax
mov r8d, dword [r15]
lea rdx, [rdi + 0xa8]
mov rcx, rax
call fcn.1401b0c30
lea r8, [rbp + 0x38]
mov edx, dword [r15]
mov rcx, rbx
call fcn.14000bff0
mov r8d, dword [r15]
dec r8d
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x40], r13
mov rdx, rbx
lea rcx, [rbp - 0x58]
call fcn.140005bc8
nop
lea rdx, [rbp - 0x58]
lea rcx, [rsp + 0x70]
call fcn.14000be7c
nop
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x70]
lea rcx, [rbp - 0x78]
call fcn.14000d828
nop
lea rbx, [rbp - 0x78]
mov r14d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp qword [rbp - 0x60], r14
cmovae rbx, qword [rbp - 0x78]
xor edx, edx
mov r8d, 0x8d9a0
lea rcx, [rbp + 0x30]
call fcn.1401b12f0
lea rdx, [rbp + 0x30]
mov rcx, rbx
call fcn.14000c650
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
lea rax, [rbp + 0x30]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r13b
jne 0x14000ca1f
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.140005bc8
nop
lea rcx, [rsp + 0x50]
mov rdx, qword [rsp + 0x60]
cmp qword [rsp + 0x68], r14
jb 0x14000ca52
mov rcx, qword [rsp + 0x50]
add rdx, rcx
jmp 0x14000ca5a
add rdx, rcx
lea rcx, [rsp + 0x50]
call fcn.140012080
mov ecx, 0x21
call fcn.14000a99c
mov rbx, rax
movups xmm0, xmmword [rdi + 0x88]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rdi + 0x98]
movups xmmword [rax + 0x10], xmm1
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov r8, r14
lea rdx, str._zOfBqvDec8mQ7K
lea rcx, [rsp + 0x30]
call fcn.140005bc8
nop
mov r8, rbx
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x18]
call fcn.14000af30
nop
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.14000add8
nop
lea r8, [rsp + 0x30]
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.14000bcc4
nop
mov ebx, 0x1000
mov rdx, qword [rbp - 0x20]
cmp rdx, r14
jb 0x14000cb14
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, rbx
jb 0x14000cb0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cd5d
call fcn.14000a994
mov qword [rbp - 0x28], r13
mov edi, SafeArrayGetDim
mov qword [rbp - 0x20], rdi
mov byte [rbp - 0x38], r13b
mov rdx, qword [rbp]
cmp rdx, r14
jb 0x14000cb5b
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, rbx
jb 0x14000cb56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cd63
call fcn.14000a994
mov qword [rbp - 8], r13
mov qword [rbp], rdi
mov byte [rbp - 0x18], r13b
mov rdx, qword [rsp + 0x48]
cmp rdx, r14
jb 0x14000cb9f
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, rbx
jb 0x14000cb9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cd69
call fcn.14000a994
lea rdi, [rbp + 8]
mov rsi, qword [rbp + 0x20]
cmp rsi, r14
setae r12b
mov rbx, qword [rbp + 8]
cmovae rdi, rbx
mov rax, qword [rbp + 0x18]
mov dword [r15], eax
mov ecx, eax
call fcn.14000a99c
mov r14, rax
mov r8d, r13d
cmp dword [r15], r13d
jbe 0x14000cbe5
mov rdx, rax
sub rdi, rax
mov cl, byte [rdi + rdx]
mov byte [rdx], cl
inc r8d
inc rdx
cmp r8d, dword [r15]
jb 0x14000cbd5
mov edi, 0x1000
test r12b, r12b
je 0x14000cc1d
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, rdi
jb 0x14000cc14
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cd6f
mov rcx, rbx
call fcn.14000a994
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14000cc56
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, rdi
jb 0x14000cc51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cd75
call fcn.14000a994
mov qword [rsp + 0x60], r13
mov ebx, SafeArrayGetDim
mov qword [rsp + 0x68], rbx
mov byte [rsp + 0x50], r13b
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x14000cca1
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, rdi
jb 0x14000cc9c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cd7b
call fcn.14000a994
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x60], rbx
mov byte [rbp - 0x78], r13b
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14000ccf1
mov rdx, qword [rbp - 0x80]
sub rdx, rcx
mov rax, rcx
cmp rdx, rdi
jb 0x14000ccdf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cd81
call fcn.14000a994
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r13
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x14000cd24
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, rdi
jb 0x14000cd1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cd4c
call fcn.14000a994
mov rax, r14
jmp 0x14000cd2b
xor eax, eax
lea r11, [rsp + 0x8dad0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401b9624
int3
mov ecx, 1
call fcn.1401b5780
nop
call fcn.1401b9624
nop
call fcn.1401b9624
nop
call fcn.1401b9624
nop
call fcn.1401b9624
nop
call fcn.1401b9624
nop
call fcn.1401b9624
nop
call fcn.1401b9624
int3