Pivoted from the manual DLL loader function to hundreds of related variants using yara_fn today. Quick win. https://gist.github.com/williballenthin/3abc9577bede0aeef25526b201732246