Function at 0x14003aed0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Link many functions at runtime

Disassembly:
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x47]
sub rsp, 0xc0
movdqa xmm0, xmmword [0x1400a8c90]
xor ebx, ebx
movdqu xmmword [rbp + 0xf], xmm0
mov ecx, ebx
mov byte [rbp + 0x1f], 1
nop word [rax + rax]
lea eax, [rcx + 0x3c]
xor byte [rbp + rcx + 0xf], al
inc rcx
cmp rcx, 0xf
jb 0x14003af00
mov byte [rbp + 0x1f], bl
mov rcx, rbx
mov dword [rbp + 0x67], 0xc50544b
mov dword [rbp + 0x6b], 0x1003472
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x3c]
xor byte [rbp + rcx + 0x67], al
inc rcx
cmp rcx, 6
jb 0x14003af30
lea rcx, [rbp + 0x67]
mov byte [rbp + 0x6e], bl
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp + 0xf]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
jne 0x14003b076
movdqa xmm0, xmmword [0x1400a8c90]
mov rcx, rbx
movdqu xmmword [rbp + 0x27], xmm0
mov byte [rbp + 0x37], 1
nop word [rax + rax]
lea eax, [rcx + 0x3c]
xor byte [rbp + rcx + 0x27], al
inc rcx
cmp rcx, 0xf
jb 0x14003af80
mov byte [rbp + 0x37], bl
mov rcx, rbx
mov dword [rbp + 0x6f], 0x4d5b4e49
mov dword [rbp + 0x73], 0x1007373
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x3c]
xor byte [rbp + rcx + 0x6f], al
inc rcx
cmp rcx, 6
jb 0x14003afb0
lea rcx, [rbp + 0x6f]
mov byte [rbp + 0x76], bl
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp + 0x27]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
jne 0x14003b076
mov dword [rbp - 0x49], 0x5b50586f
mov rcx, rbx
mov dword [rbp - 0x45], 0x36322f09
mov word [rbp - 0x41], Ordinal_50
mov byte [rbp - 0x3f], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x3c]
xor byte [rbp + rcx - 0x49], al
inc rcx
cmp rcx, 9
jb 0x14003b010
mov byte [rbp - 0x3f], bl
mov rcx, rbx
mov dword [rbp + 0x77], 0x4d5b4e49
mov dword [rbp + 0x7b], 0x1007373
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x3c]
xor byte [rbp + rcx + 0x77], al
inc rcx
cmp rcx, 6
jb 0x14003b040
lea rcx, [rbp + 0x77]
mov byte [rbp + 0x7e], bl
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp - 0x49]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x14003b213
movdqa xmm0, xmmword [0x1400a8da0]
mov rcx, rbx
movdqu xmmword [rbp - 0x39], xmm0
mov dword [rbp - 0x29], 0x2e3a1e35
mov dword [rbp - 0x25], 0x1003424
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x3c]
xor byte [rbp + rcx - 0x39], al
inc rcx
cmp rcx, 0x16
jb 0x14003b0a0
mov byte [rbp - 0x22], bl
mov rcx, rbx
mov dword [rbp + 0x7f], 0xc50544b
mov dword [rbp + 0x83], 0x1003472
nop word [rax + rax]
lea eax, [rcx + 0x3c]
xor byte [rbp + rcx + 0x7f], al
inc rcx
cmp rcx, 6
jb 0x14003b0d0
lea rcx, [rbp + 0x7f]
mov byte [rbp + 0x86], bl
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp - 0x39]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
jne 0x14003b220
movdqa xmm0, xmmword [0x1400a8da0]
mov rcx, rbx
movdqu xmmword [rbp - 0x21], xmm0
mov dword [rbp - 0x11], 0x2e3a1e35
mov dword [rbp - 0xd], 0x1003424
nop word [rax + rax]
lea eax, [rcx + 0x3c]
xor byte [rbp + rcx - 0x21], al
inc rcx
cmp rcx, 0x16
jb 0x14003b130
mov byte [rbp - 0xa], bl
mov rcx, rbx
mov dword [rbp - 0x59], 0x4d5b4e49
mov dword [rbp - 0x55], 0x1007373
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x3c]
xor byte [rbp + rcx - 0x59], al
inc rcx
cmp rcx, 6
jb 0x14003b160
lea rcx, [rbp - 0x59]
mov byte [rbp - 0x52], bl
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp - 0x21]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
jne 0x14003b220
movdqa xmm0, xmmword [0x1400a8dc0]
mov rcx, rbx
movdqu xmmword [rbp - 9], xmm0
mov word [rbp + 7], 0x100
nop dword [rax]
lea eax, [rcx + 0x3c]
xor byte [rbp + rcx - 9], al
inc rcx
cmp rcx, 0x10
jb 0x14003b1b0
mov byte [rbp + 8], bl
mov dword [rbp - 0x51], 0x4d5b4e49
mov dword [rbp - 0x4d], 0x1007373
nop dword [rax]
nop word [rax + rax]
lea eax, [rbx + 0x3c]
xor byte [rbp + rbx - 0x51], al
inc rbx
cmp rbx, 6
jb 0x14003b1e0
lea rcx, [rbp - 0x51]
mov byte [rbp - 0x4a], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp - 9]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
jne 0x14003b220
xor al, al
add rsp, 0xc0
pop rdi
pop rbx
pop rbp
ret
movups xmm0, xmmword [rdi]
movups xmmword [0x140285ae8], xmm0
movsd xmm1, qword [rdi + 0x10]
movsd qword [0x140285af8], xmm1
mov eax, dword [rdi + 0x18]
mov dword [0x140285b00], eax
movzx eax, word [rdi + 0x1c]
mov word [0x140285b04], ax
movups xmm0, xmmword [rcx]
movups xmmword [0x140285b08], xmm0
movsd xmm1, qword [rcx + 0x10]
movsd qword [0x140285b18], xmm1
mov eax, dword [rcx + 0x18]
mov dword [0x140285b20], eax
movzx eax, word [rcx + 0x1c]
mov word [0x140285b24], ax
mov al, 1
add rsp, 0xc0
pop rdi
pop rbx
pop rbp
ret