Function at 0x1400015a4
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x40
mov dl, 0x32
movabs rax, 0x5d1605056a064065
mov word [rsp + 0x37], 0x5756
mov byte [rsp + 0x39], 0x3c
mov qword [rsp + 0x2f], rax
lea rax, [rsp + 0x2f]
mov rbx, rax
xor byte [rax], dl
inc edx
inc rax
cmp dl, 0x3d
jne 0x1400015d3
mov r12, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rbx
call r12
mov rsi, rax
test rax, rax
je 0x14000196e
mov word [rsp + 0x37], 0x4b4f
mov rdx, rbx
movabs rax, 0x4d4a564266756065
mov byte [rsp + 0x39], 0x3c
mov qword [rsp + 0x2f], rax
mov al, 0x32
xor byte [rdx], al
inc eax
inc rdx
cmp al, 0x3d
jne 0x140001618
mov rdx, rbx
mov rbp, qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rsi
call rbp
mov word [rsp + 0x37], 0x7a4e
mov rdx, rbx
mov byte [rsp + 0x39], 0x3c
mov qword [0x14003a0e8], rax
movabs rax, 0x5c53545966756065
mov qword [rsp + 0x2f], rax
mov al, 0x32
xor byte [rdx], al
inc eax
inc rdx
cmp al, 0x3d
jne 0x140001659
mov rdx, rbx
mov rcx, rsi
call rbp
mov rdx, rbx
mov qword [0x14003a0e0], rax
movabs rax, 0x394c54535b5a5c51
mov qword [rsp + 0x2f], rax
mov al, 0x32
xor byte [rdx], al
inc eax
inc rdx
cmp al, 0x3a
jne 0x140001687
mov rdx, rbx
mov rcx, rsi
call rbp
mov word [rsp + 0x37], 0x4b4f
mov rdx, rbx
mov byte [rsp + 0x39], 0x3c
mov qword [0x14003a0d8], rax
movabs rax, 0x5759525a76756065
mov qword [rsp + 0x2f], rax
mov al, 0x32
xor byte [rdx], al
inc eax
inc rdx
cmp al, 0x3d
jne 0x1400016c1
mov rdx, rbx
mov rcx, rsi
call rbp
mov dword [rsp + 0x37], 0x3d485e51
mov rdx, rbx
mov qword [0x14003a0d0], rax
movabs rax, 0x5a574453465b5f51
mov qword [rsp + 0x2f], rax
mov al, 0x32
xor byte [rdx], al
inc eax
inc rdx
cmp al, 0x3e
jne 0x1400016f7
mov rdx, rbx
mov rcx, rsi
call rbp
cmp qword [0x14003a0e8], 0
mov qword [0x14003a0c0], rax
je 0x140001778
cmp qword [0x14003a0e0], 0
je 0x140001778
cmp qword [0x14003a0d8], 0
je 0x140001778
cmp qword [0x14003a0d0], 0
je 0x140001778
test rax, rax
je 0x140001778
mov dword [rsp + 0x37], 0x51505f14
mov rdx, rbx
movabs rax, 0xb0b5b535b465659
mov byte [rsp + 0x3b], 0x3e
mov qword [rsp + 0x2f], rax
mov al, 0x32
xor byte [rdx], al
inc eax
inc rdx
cmp al, 0x3f
jne 0x14000175f
mov rcx, rbx
call r12
mov rdi, rax
test rax, rax
jne 0x14000178c
mov rcx, rsi
add rsp, 0x40
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
jmp qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [rsp + 0x37], 0x4e595855
mov rdx, rbx
movabs rax, 0x4b68524254514171
mov word [rsp + 0x3b], 0x7e4d
mov byte [rsp + 0x3d], 0x40
mov qword [rsp + 0x2f], rax
mov al, 0x32
xor byte [rdx], al
inc eax
inc rdx
cmp al, 0x41
jne 0x1400017b4
mov rdx, rbx
mov rcx, rdi
call rbp
mov dword [rsp + 0x37], 0x3d59575e
mov rdx, rbx
mov qword [0x14003a0b8], rax
movabs rax, 0x57597f53465b5f71
mov qword [rsp + 0x2f], rax
mov al, 0x32
xor byte [rdx], al
inc eax
inc rdx
cmp al, 0x3e
jne 0x1400017ea
mov rdx, rbx
mov rcx, rdi
call rbp
cmp qword [0x14003a0b8], 0
mov qword [0x14003a0c8], rax
je 0x140001847
test rax, rax
je 0x140001847
mov word [rsp + 0x37], 0x3b56
mov rdx, rbx
movabs rax, 0x555c190406515f5d
mov qword [rsp + 0x2f], rax
mov al, 0x32
xor byte [rdx], al
inc eax
inc rdx
cmp al, 0x3c
jne 0x14000182e
mov rcx, rbx
call r12
mov r12, rax
test rax, rax
jne 0x140001856
mov rbx, qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, rdi
jmp 0x14000194a
movabs rax, 0x5851435f5b7d5c71
mov byte [rsp + 0x3d], 0x40
mov dword [rsp + 0x37], 0x58465256
mov word [rsp + 0x3b], 0x477b
mov qword [rsp + 0x2f], rax
mov al, 0x32
xor byte [rbx], al
inc eax
inc rbx
cmp al, 0x41
jne 0x14000187b
lea rbx, [rsp + 0x2f]
mov rcx, r12
mov rdx, rbx
call rbp
mov byte [rsp + 0x3f], 0x42
mov rdx, rbx
mov qword [0x14003a0b0], rax
movabs rax, 0x5c4c565347775c71
mov qword [rsp + 0x2f], rax
movabs rax, 0x2423515f494f5573
mov qword [rsp + 0x37], rax
mov al, 0x32
xor byte [rdx], al
inc eax
inc rdx
cmp al, 0x43
jne 0x1400018c2
mov rdx, rbx
mov rcx, r12
call rbp
mov dword [rsp + 0x37], 0x54505a53
mov rdx, rbx
mov word [rsp + 0x3b], 0x5a44
mov byte [rsp + 0x3d], 0x40
mov qword [0x14003a0a8], rax
movabs rax, 0x4d51595f5b615c71
mov qword [rsp + 0x2f], rax
mov al, 0x32
xor byte [rdx], al
inc eax
inc rdx
cmp al, 0x41
jne 0x140001904
mov rdx, rbx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp qword [0x14003a0b0], 0
mov rbx, qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x14003a0a0], rax
je 0x140001942
cmp qword [0x14003a0a8], 0
je 0x140001942
test rax, rax
jne 0x140001951
mov rcx, r12
call rbx
mov rcx, rdi
call rbx
mov rcx, rsi
jmp 0x14000195e
mov rcx, rsi
call rbx
mov rcx, rdi
call rbx
mov rcx, r12
mov rax, rbx
add rsp, 0x40
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
jmp rax
add rsp, 0x40
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret