Function at 0x14000b580
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
push r14
sub rsp, 0x1d0
mov rax, qword [0x14007e048]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
mov dword [r11 - 0x38], 0x9e9d8ba6
mov dword [r11 - 0x34], 0xc6c09e94
mov dword [r11 - 0x30], 0x949b92db
xor eax, eax
mov byte [r11 - 0x2c], al
xor r14d, r14d
mov ecx, r14d
mov edx, r14d
lea eax, [rcx - 0x13]
xor byte [rsp + rdx + 0x1a0], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xc
jb 0x14000b5d1
mov byte [rsp + 0x1ac], r14b
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
test rax, rax
jne 0x14000b61e
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
je 0x14000c28d
mov dword [rsp + 0x160], 0x9e8a9ea2
mov dword [rsp + 0x164], 0x979c80a1
mov dword [rsp + 0x168], 0x848590
mov ecx, r14d
mov rdx, r14
nop word [rax + rax]
lea eax, [rcx - 0x13]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xb
jb 0x14000b650
mov byte [rsp + 0x16b], r14b
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], reloc.OLEAUT32.dll_SafeArrayDestroy
lea rax, [rsp + 0x160]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000b6a0
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.140002280
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0x10
cmovae rdx, qword [rsp + 0x180]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081420], rax
test rax, rax
sete dil
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x14000b733
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b72e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c2af
call fcn.140032d70
test dil, dil
jne 0x14000c2b5
movdqa xmm0, xmmword [0x140073e10]
movdqu xmmword [rsp + 0x160], xmm0
mov dword [rsp + 0x170], 0x709e90ae
mov dword [rsp + 0x174], 0x706c6a72
xor eax, eax
mov byte [rsp + 0x178], al
mov ecx, r14d
mov rdx, r14
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x13]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x18
jb 0x14000b780
mov byte [rsp + 0x178], 0
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], reloc.OLEAUT32.dll_SafeArrayDestroy
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14000b7c4
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.140002280
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0x10
cmovae rdx, qword [rsp + 0x180]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081458], rax
test rax, rax
sete dil
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x14000b857
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b852
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c2d7
call fcn.140032d70
test dil, dil
jne 0x14000c2dd
movdqa xmm0, xmmword [0x140073d60]
movdqu xmmword [rsp + 0x160], xmm0
mov ecx, r14d
mov rdx, r14
nop word [rax + rax]
lea eax, [rcx - 0x13]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xf
jb 0x14000b880
mov byte [rsp + 0x16f], 0
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], reloc.OLEAUT32.dll_SafeArrayDestroy
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14000b8c4
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.140002280
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0x10
cmovae rdx, qword [rsp + 0x180]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081460], rax
test rax, rax
sete dil
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x14000b957
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b952
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c2ff
call fcn.140032d70
test dil, dil
jne 0x14000c305
mov dword [rsp + 0x160], 0x93809cbd
mov dword [rsp + 0x164], 0xc7808194
mov dword [rsp + 0x168], 0x8092b8c7
mov word [rsp + 0x16c], 0xad8d
xor eax, eax
mov byte [rsp + 0x16e], al
mov ecx, r14d
mov rdx, r14
nop word [rax + rax]
lea eax, [rcx - 0x13]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xe
jb 0x14000b9a0
mov byte [rsp + 0x16e], 0
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], reloc.OLEAUT32.dll_SafeArrayDestroy
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14000b9e4
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.140002280
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0x10
cmovae rdx, qword [rsp + 0x180]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081468], rax
test rax, rax
sete dil
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x14000ba77
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ba72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c327
call fcn.140032d70
test dil, dil
jne 0x14000c32d
mov dword [rsp + 0x160], 0x858b81a0
mov dword [rsp + 0x164], 0xc6c0979d
mov dword [rsp + 0x168], 0x8b859fb3
mov word [rsp + 0x16c], 0xad8d
xor eax, eax
mov byte [rsp + 0x16e], al
mov ecx, r14d
mov rdx, r14
nop word [rax + rax]
lea eax, [rcx - 0x13]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xe
jb 0x14000bac0
mov byte [rsp + 0x16e], 0
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], reloc.OLEAUT32.dll_SafeArrayDestroy
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14000bb04
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.140002280
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0x10
cmovae rdx, qword [rsp + 0x180]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081470], rax
test rax, rax
sete dil
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x14000bb97
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bb92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c355
call fcn.140032d70
test dil, dil
jne 0x14000c35b
mov dword [rsp + 0x160], 0x858b81a0
mov dword [rsp + 0x164], 0xc6c0979d
mov dword [rsp + 0x168], 0x8c8f93bb
mov word [rsp + 0x16c], 0xae
mov ecx, r14d
mov rdx, r14
lea eax, [rcx - 0x13]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xd
jb 0x14000bbd1
mov byte [rsp + 0x16d], 0
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], reloc.OLEAUT32.dll_SafeArrayDestroy
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14000bc15
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.140002280
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0x10
cmovae rdx, qword [rsp + 0x180]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081478], rax
test rax, rax
sete dil
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x14000bca8
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bca3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c383
call fcn.140032d70
test dil, dil
jne 0x14000c389
movdqa xmm0, xmmword [0x140073da0]
movdqu xmmword [rsp + 0x160], xmm0
mov dword [rsp + 0x170], 0x49868c92
mov dword [rsp + 0x174], 0x6c646f
mov ecx, r14d
mov rdx, r14
nop
lea eax, [rcx - 0x13]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x17
jb 0x14000bce0
mov byte [rsp + 0x177], 0
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], reloc.OLEAUT32.dll_SafeArrayDestroy
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14000bd24
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.140002280
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0x10
cmovae rdx, qword [rsp + 0x180]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081480], rax
test rax, rax
sete dil
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x14000bdb7
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bdb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c3b1
call fcn.140032d70
test dil, dil
jne 0x14000c3b7
movdqa xmm0, xmmword [0x140073d50]
movdqu xmmword [rsp + 0x160], xmm0
mov ecx, r14d
mov rdx, r14
nop word [rax + rax]
lea eax, [rcx - 0x13]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xf
jb 0x14000bde0
mov byte [rsp + 0x16f], 0
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], reloc.OLEAUT32.dll_SafeArrayDestroy
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14000be24
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.140002280
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0x10
cmovae rdx, qword [rsp + 0x180]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081490], rax
test rax, rax
sete dil
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x14000beb7
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000beb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c3df
call fcn.140032d70
test dil, dil
jne 0x14000c3e5
mov dword [rsp + 0x1b0], 0x91998aac
mov dword [rsp + 0x1b4], 0xc6c09b81
mov dword [rsp + 0x1b8], 0x949b92db
xor eax, eax
mov byte [rsp + 0x1bc], al
mov ecx, r14d
mov rdx, r14
lea eax, [rcx - 0x13]
xor byte [rsp + rdx + 0x1b0], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xc
jb 0x14000bef0
mov byte [rsp + 0x1bc], 0
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdi, rax
test rax, rax
jne 0x14000bf3d
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
je 0x14000c40d
movdqa xmm0, xmmword [0x140073db0]
movdqu xmmword [rsp + 0x160], xmm0
xor eax, eax
mov byte [rsp + 0x170], al
mov ecx, r14d
mov rdx, r14
nop dword [rax]
lea eax, [rcx - 0x13]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x10
jb 0x14000bf60
mov byte [rsp + 0x170], 0
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], reloc.OLEAUT32.dll_SafeArrayDestroy
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14000bfa4
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.140002280
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0x10
cmovae rdx, qword [rsp + 0x180]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081498], rax
test rax, rax
sete sil
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x14000c037
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c032
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c435
call fcn.140032d70
test sil, sil
jne 0x14000c43b
movdqa xmm0, xmmword [0x140073dd0]
movdqu xmmword [rsp + 0x160], xmm0
mov dword [rsp + 0x170], 0x65989b91
mov word [rsp + 0x174], 0x72
mov ecx, r14d
mov rdx, r14
nop dword [rax]
lea eax, [rcx - 0x13]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x15
jb 0x14000c070
mov byte [rsp + 0x175], 0
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], reloc.OLEAUT32.dll_SafeArrayDestroy
lea rax, [rsp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14000c0b4
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.140002280
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0x10
cmovae rdx, qword [rsp + 0x180]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400814a8], rax
test rax, rax
sete sil
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x14000c147
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c142
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c463
call fcn.140032d70
test sil, sil
jne 0x14000c469
movdqa xmm0, xmmword [0x140073e00]
movdqu xmmword [rsp + 0x160], xmm0
mov dword [rsp + 0x170], 0x658a929c
mov word [rsp + 0x174], 0x56
mov ecx, r14d
mov rdx, r14
nop dword [rax]
lea eax, [rcx - 0x13]
xor byte [rsp + rdx + 0x160], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x15
jb 0x14000c180
mov byte [rsp + 0x175], 0
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], reloc.OLEAUT32.dll_SafeArrayDestroy
lea rax, [rsp + 0x160]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14000c1c1
mov r8, rbx
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x180]
call fcn.140002280
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0x10
cmovae rdx, qword [rsp + 0x180]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400814a0], rax
test rax, rax
sete bl
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x14000c255
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c250
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c491
call fcn.140032d70
test bl, bl
jne 0x14000c497
mov al, 1
jmp 0x14000c263
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.140032d50
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop r14
ret
lea rdx, str.dll_1__not_found.
lea rcx, [rsp + 0x28]
call fcn.140001160
lea rdx, [0x14007cd50]
lea rcx, [rsp + 0x28]
call fcn.140034ec8
call fcn.1400394dc
int3
lea rdx, str.Cannot_find_function_1.
lea rcx, [rsp + 0x40]
call fcn.140001160
lea rdx, [0x14007cd50]
lea rcx, [rsp + 0x40]
call fcn.140034ec8
call fcn.1400394dc
int3
lea rdx, str.Cannot_find_function_8.
lea rcx, [rsp + 0x58]
call fcn.140001160
lea rdx, [0x14007cd50]
lea rcx, [rsp + 0x58]
call fcn.140034ec8
call fcn.1400394dc
int3
lea rdx, str.Cannot_find_function_9.
lea rcx, [rsp + 0x70]
call fcn.140001160
lea rdx, [0x14007cd50]
lea rcx, [rsp + 0x70]
call fcn.140034ec8
call fcn.1400394dc
int3
lea rdx, str.Cannot_find_function_10.
lea rcx, [rsp + 0x88]
call fcn.140001160
lea rdx, [0x14007cd50]
lea rcx, [rsp + 0x88]
call fcn.140034ec8
call fcn.1400394dc
int3
lea rdx, str.Cannot_find_function_11.
lea rcx, [rsp + 0xa0]
call fcn.140001160
lea rdx, [0x14007cd50]
lea rcx, [rsp + 0xa0]
call fcn.140034ec8
call fcn.1400394dc
int3
lea rdx, str.Cannot_find_function_12.
lea rcx, [rsp + 0xb8]
call fcn.140001160
lea rdx, [0x14007cd50]
lea rcx, [rsp + 0xb8]
call fcn.140034ec8
call fcn.1400394dc
int3
lea rdx, str.Cannot_find_function_13.
lea rcx, [rsp + 0xd0]
call fcn.140001160
lea rdx, [0x14007cd50]
lea rcx, [rsp + 0xd0]
call fcn.140034ec8
call fcn.1400394dc
int3
lea rdx, str.Cannot_find_function_15.
lea rcx, [rsp + 0xe8]
call fcn.140001160
lea rdx, [0x14007cd50]
lea rcx, [rsp + 0xe8]
call fcn.140034ec8
lea rdx, str.dll_2__not_found.
lea rcx, [rsp + 0x100]
call fcn.140001160
lea rdx, [0x14007cd50]
lea rcx, [rsp + 0x100]
call fcn.140034ec8
call fcn.1400394dc
int3
lea rdx, str.Cannot_find_function_a1.
lea rcx, [rsp + 0x118]
call fcn.140001160
lea rdx, [0x14007cd50]
lea rcx, [rsp + 0x118]
call fcn.140034ec8
call fcn.1400394dc
int3
lea rdx, str.Cannot_find_function_a3.
lea rcx, [rsp + 0x130]
call fcn.140001160
lea rdx, [0x14007cd50]
lea rcx, [rsp + 0x130]
call fcn.140034ec8
call fcn.1400394dc
int3
lea rdx, str.Cannot_find_function_a2.
lea rcx, [rsp + 0x148]
call fcn.140001160
lea rdx, [0x14007cd50]
lea rcx, [rsp + 0x148]
call fcn.140034ec8
int3