Function at 0x1d8c369fe
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x60
push r10
rcl r10b, 0xb
push r8
emms
push rax
shr ax, 0xc
push r14
paddsb mm6, mm3
push r9
pcmpeqb mm6, mm0
pop r9
shr r10w, 5
pop r14
sbb r8, 0x15
pop rax
addps xmm3, xmm10
pop r8
sar r10, 0x13
pop r10
mov dword [rsp + 0x4c], 0x7e472e71
mov word [rsp + 0x50], 0x50
push r13
psrld mm5, 0x55
psrlq mm5, 0x2e
psraw mm0, 0x41
psrlq mm0, 0x22
push r15
psubusw mm2, mm6
pmulhuw mm4, mm0
orps xmm9, xmm2
psllq mm2, 0x49
pop r15
pslld mm0, 0x4f
emms
pcmpeqd mm5, mm2
paddsw mm5, mm6
pop r13
mov dword [rsp + 0x54], 0x345a3638
mov word [rsp + 0x58], 0x40
cmp r15w, 0x13
jne 0x1d8c36a9e
push r12
subss xmm3, xmm6
pop r12
jmp 0x1d8c36aa5
push r13
dec r13d
pop r13
push r10
mulss xmm8, xmm3
pop r10
lea rbx, [rsp + 0x54]
lea rsi, [rsp + 0x4c]
mov rdx, rbx
mov rcx, rsi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x1d8c36aec
push rcx
nop
push r9
movaps xmm14, xmm15
punpckhwd mm0, mm1
push r14
and r9, r14
not r14b
mulps xmm6, xmm2
pop r14
shl cl, 5
ucomiss xmm11, xmm0
pop r9
nop
pop rcx
jmp 0x1d8c36b1d
mov rax, rbx
lea rdx, [rsp + 0x59]
push r13
punpckldq mm2, mm5
push rcx
pmaxsw mm3, mm1
push rbx
neg r13
pop rbx
rcpps xmm8, xmm3
pop rcx
xorps xmm7, xmm2
pop r13
xor byte [rax], 0x17
push rdx
shl dx, 2
pop rdx
inc rax
cmp rax, rdx
jne 0x1d8c36af4
push r13
andps xmm15, xmm5
neg r13b
push rax
movhlps xmm6, xmm4
rcpps xmm6, xmm7
push rdx
not r13
psrld mm0, 0x3d
push r9
ucomiss xmm5, xmm15
nop
pop r9
neg r13d
psrlw mm5, 0x3a
pop rdx
ror r13d, 0x12
dec rax
pop rax
psubw mm6, mm5
addps xmm9, xmm7
pop r13
push r11
psrld mm2, 0xc
paddd mm1, mm4
push rax
emms
emms
push r15
emms
inc r11d
push r10
sub r11w, 0x10
pcmpeqd mm6, mm3
pop r10
sbb r15b, al
xchg r15d, eax
pop r15
nop
nop
pop rax
psraw mm6, 0x35
emms
pop r11
xor edx, edx
mov qword [rsp + 0x38], rdx
push r8
mov r8d, 4
push r10
punpckhwd mm7, mm5
inc r8
push rbx
rcpps xmm1, xmm4
psllq mm4, 0x4d
subps xmm13, xmm14
push r11
shl r11b, 0x12
not r10
movlhps xmm13, xmm1
emms
push r13
pmaxub mm5, mm2
psraw mm7, 0x3c
mulps xmm15, xmm1
nop
mulss xmm14, xmm5
pop r13
not r11w
psubsb mm1, mm3
xadd r10, r11
add r8b, r11b
pop r11
emms
cmp r10d, r8d
nop
pop rbx
sbb r10d, 0x17
emms
pop r10
inc r8d
pop r8
call sym.AddDeviceInformationMb.dll_NumberSamMonitorUp
mov qword [rsp + 0x40], 0x40
push r8
nop
push r14
emms
addss xmm1, xmm4
push rcx
orps xmm4, xmm2
movss xmm15, xmm1
psrld mm7, 0x28
push r12
emms
inc rcx
nop
subss xmm1, xmm7
pop r12
mulss xmm5, xmm13
sub ecx, r8d
emms
pop rcx
addps xmm5, xmm11
mulss xmm3, xmm14
pop r14
pcmpgtb mm5, mm4
pop r8
mov edx, 1
mov ecx, 3
call sub.msvcrt.dll_calloc
mov rcx, rax
push r11
nop
rcr r11d, 0xa
psllq mm6, 0x2b
push rdx
pcmpeqw mm0, mm3
nop
shr rdx, 6
push r15
adc r15d, edx
xor dx, r15w
push rcx
inc rdx
nop
pop rcx
nop
psrld mm5, 0x1d
paddusw mm3, mm6
pop r15
punpckhwd mm7, mm2
psrad mm5, 0x3d
pop rdx
emms
nop
pop r11
mov edx, 0x1b
call sub.msvcrt.dll_realloc
mov rcx, rax
xor eax, eax
push r10
mov r10, 2
push r13
push rax
pop rax
pop r13
dec r10
jne 0x1d8c36ca8
pop r10
xor byte [rcx + rax], 3
cmp r15, r14
je 0x1d8c36e4b
cmp r15, 0x16
jne 0x1d8c36cda
push rcx
dec ecx
push r15
inc ecx
sbb ecx, 6
pop r15
dec rcx
pop rcx
jmp 0x1d8c36cea
push rax
addps xmm6, xmm3
push r9
inc rax
emms
pop r9
sbb al, 6
pop rax
push r10
emms
push r8
inc r10
pslld mm7, 0x34
pop r8
nop
pop r10
cmp r8d, eax
je 0x1d8c36e59
push rax
nop
psllq mm0, 0x41
rcpps xmm1, xmm15
push rcx
nop
and rax, rcx
push rdx
psrlq mm1, 0x1b
pop rdx
psrld mm3, 0x1c
subss xmm2, xmm9
pop rcx
punpckhwd mm2, mm0
psrad mm2, 0x10
paddsw mm7, mm6
pop rax
cmp r15b, 0x64
je 0x1d8c36e83
push r10
pcmpeqw mm2, mm1
nop
shl r10d, 9
rol r10, 0xa
push r14
punpcklbw mm0, mm6
sbb r14d, r10d
emms
push rax
shl r10, 9
comiss xmm3, xmm6
push rbx
pandn mm6, mm7
pop rbx
emms
psllq mm6, 0x19
pop rax
psrad mm5, 0x1a
sub r10, r14
pminsw mm1, mm0
pop r14
rcr r10, 7
nop
psrlw mm1, 6
shl r10w, 0xb
pop r10
cmp r9d, 2
je 0x1d8c36ebc
push r8
ucomiss xmm8, xmm12
push r13
pcmpeqd mm2, mm4
push r14
nop
push rdx
nop
push rax
emms
push rcx
psllq mm4, 0x47
push rbx
punpckhwd mm6, mm4
pop rbx
rcl r14d, 1
pop rcx
rol rax, 2
pop rax
emms
pop rdx
mulss xmm5, xmm12
pop r14
psraw mm3, 0x2c
pop r13
mulps xmm4, xmm2
pop r8
cmp r8w, 0xf
je 0x1d8c36f08
push rax
mov rax, 0xa
psraw mm1, 0x52
orps xmm6, xmm7
pmullw mm7, mm6
shr al, 0xb
push r13
inc eax
add r13, rax
mov eax, r13d
not ax
push r15
dec eax
mulps xmm13, xmm0
neg r15b
push r8
not r13
emms
push r12
psrad mm3, 0x17
pop r12
emms
emms
pop r8
inc r15
subss xmm1, xmm15
nop
pop r15
emms
nop
movss xmm15, xmm1
ror r13, 7
pop r13
emms
movaps xmm9, xmm10
punpckhbw mm6, mm4
shr al, 0x14
emms
pop rax
cmp rbx, 0x21
je 0x1d8c36f49
jne 0x1d8c36f8e
push r8
rol r8w, 0x12
pop r8
jmp 0x1d8c36f8e
cmp r15w, 0x24
jne 0x1d8c36e6f
push rcx
not cl
pop rcx
jmp 0x1d8c36e76
push rbx
addss xmm13, xmm4
pop rbx
push r8
pslld mm2, 0x5c
pop r8
jmp 0x1d8c36f8e
push r14
nop
movss xmm1, xmm2
push rax
psrad mm3, 0x12
movss xmm7, xmm15
push r11
rcpss xmm6, xmm2
emms
push r8
nop
nop
pop r8
psraw mm3, 0x3b
emms
pop r11
packuswb mm3, mm1
psubsb mm0, mm2
pop rax
nop
punpcklbw mm6, mm5
pop r14
jmp 0x1d8c36f8e
push rax
nop
psrad mm1, 0x56
push rdx
psllq mm4, 0x54
not dx
push rcx
xorps xmm13, xmm2
shr eax, 9
push r11
paddb mm6, mm2
psrlq mm4, 0x1f
push r14
sub r11w, 0x12
ror r11d, 0xa
pop r14
psrlq mm4, 0x4f
mov ecx, r11d
pop r11
emms
neg eax
pop rcx
shl dl, 0xa
pmullw mm4, mm5
pop rdx
nop
shl ax, 0xf
pop rax
jmp 0x1d8c36f8e
push r15
pmaxub mm7, mm4
inc r15d
psubusw mm6, mm4
emms
emms
push r12
psraw mm3, 0x28
sbb r15d, r12d
subss xmm10, xmm12
test r15, r12
sbb r12w, 0xf
pop r12
movss xmm1, xmm9
sar r15w, 0x16
not r15
nop
ror r15d, 0xc
psrlq mm1, 0xc
pop r15
jmp 0x1d8c36f8e
cmp r15, 0xd
jne 0x1d8c36f68
push r13
mov r13, 0x17
push rdx
dec r13d
psrlw mm5, 0x2b
pop rdx
paddw mm1, mm0
pop r13
jmp 0x1d8c36f78
push rbx
not bl
push r12
nop
shr r12d, 1
pop r12
maxps xmm11, xmm12
pop rbx
push r15
psadbw mm6, mm0
push r9
inc r9
pxor mm2, mm4
pop r9
rcr r15w, 5
pop r15
push r12
rcr r12, 0x10
sar r12w, 1
push r14
or r12d, r14d
emms
push rcx
minps xmm11, xmm14
movss xmm2, xmm1
push rbx
nop
rcr r14d, 0x16
push r8
emms
add r8, rbx
pop r8
comiss xmm2, xmm15
nop
pop rbx
mov r12d, r14d
nop
pop rcx
sub r12, r14
minps xmm15, xmm1
pop r14
nop
movlhps xmm15, xmm2
pop r12
inc rax
cmp rax, 3
jne 0x1d8c36c9f
call sub.msvcrt.dll_free
push r11
movss xmm2, xmm7
push r12
nop
nop
push r13
inc r11d
inc r11d
pcmpeqd mm3, mm0
pop r13
nop
addss xmm8, xmm3
pop r12
paddusb mm7, mm1
pop r11
xor eax, eax
mov dword [rsp + 0x34], eax
push r14
emms
shl r14w, 0xe
nop
rcl r14d, 0x11
orps xmm9, xmm2
push r12
sbb r12w, 0x17
nop
emms
sbb r14, r12
movss xmm9, xmm15
pop r12
nop
sar r14d, 0xa
xorps xmm12, xmm8
not r14w
nop
not r14d
pop r14
call sym.AddDeviceInformationMb.dll_DirectionColorsDescriptor
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x38]
lea r9, [rsp + 0x40]
mov dword [rsp + 0x20], 0x3000
xor r8d, r8d
or rcx, 0xffffffffffffffff
call fcn.1d8c441ec
push r12
movlhps xmm11, xmm6
inc r12
packuswb mm2, mm7
emms
pmaddwd mm3, mm6
inc r12
rcpps xmm15, xmm14
emms
emms
paddusw mm7, mm4
sar r12, 7
nop
pop r12
mov ecx, 0x20
call sub.msvcrt.dll_malloc
mov rcx, rax
xor eax, eax
cmp r15, rax
jne 0x1d8c370b4
push rdx
rcl rdx, 0xf
pop rdx
jmp 0x1d8c370b9
push r14
nop
pop r14
push r8
dec r8d
pop r8
xor qword [rcx + rax*8], 0x78
push r12
packuswb mm7, mm1
push rcx
sbb r12, 9
push rbx
adc ebx, ecx
pop rbx
emms
pop rcx
subss xmm14, xmm1
pop r12
inc rax
cmp rax, 4
jne 0x1d8c370a7
call sub.msvcrt.dll_free
push r9
dec r9
nop
mulss xmm3, xmm0
nop
psllq mm3, 0x46
ror r9, 0xa
sbb r9w, 5
pop r9
mov rdx, qword [rsp + 0x38]
lea r9, [rsp + 0x34]
mov r8d, 0x40
xor ecx, ecx
call fcn.1d8c44a26
push r11
mov r11, 2
push r8
pop r8
dec r11
jne 0x1d8c37125
pop r11
mov rax, qword [rsp + 0x38]
mov edi, dword [rax + 8]
mov eax, dword [rax + 0xc]
mov dword [rsp + 0x5c], 0x6a
shr eax, 0xa
shr edi, 0xa
imul edi, eax
movabs rax, 0x61003f00610041
mov qword [rsp + 0x54], rax
push r9
mov r9, 1
push r11
push rbx
pop rbx
pop r11
dec r9
jne 0x1d8c37164
pop r9
movabs rax, 0x3700770030
mov qword [rsp + 0x4c], rax
push r8
mov r8, 2
push rax
push r9
pop r9
pop rax
dec r8
jne 0x1d8c37189
pop r8
mov rdx, rsi
mov rcx, rbx
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x1d8c3725a
mov rax, rbx
lea rdx, [rsp + 0x5e]
push r9
nop
emms
rcr r9b, 0x16
movups xmm10, xmm11
ror r9b, 0x15
push rcx
nop
sar rcx, 4
rcpss xmm10, xmm0
punpckhwd mm2, mm0
push r8
nop
paddsw mm3, mm7
dec ecx
push r12
dec r12
xor r9d, ecx
push r15
emms
pop r15
rcl r12, 7
mov r8d, r9d
pop r12
nop
emms
psrad mm2, 0x2b
pop r8
dec r9d
inc ecx
nop
psrld mm6, 6
pop rcx
nop
emms
punpcklwd mm6, mm2
andps xmm6, xmm9
emms
pop r9
xor word [rax], 0x43
push r14
mov r14b, 0x10
push r15
movaps xmm3, xmm6
push r12
pcmpgtw mm6, mm5
push r13
nop
push rax
paddb mm6, mm2
push r10
paddw mm3, mm5
pop r10
rcr r14, 0x14
pop rax
xor r14, r12
pop r13
pslld mm4, 0x42
pop r12
nop
pop r15
rol r14, 7
pop r14
add rax, 2
cmp rdx, rax
jne 0x1d8c371b1
jmp 0x1d8c3728d
mov rax, rsi
lea rdx, [rsp + 0x52]
push r14
andps xmm4, xmm7
push r8
emms
pop r8
nop
pop r14
xor word [rax], 6
push rax
mov rax, 2
push rbx
pop rbx
dec rax
jne 0x1d8c3727c
pop rax
add rax, 2
cmp rax, rdx
jne 0x1d8c37262
push r10
maxss xmm10, xmm11
push r12
not r10b
push r15
movaps xmm14, xmm10
push r11
emms
push r9
sbb r10w, 0x14
push r14
emms
push rbx
por mm1, mm3
pop rbx
emms
pop r14
rcpps xmm8, xmm7
pop r9
maxss xmm1, xmm5
pop r11
maxps xmm15, xmm5
pop r15
and r12, r10
pop r12
nop
pop r10
cmp edi, 0x3ff
ja 0x1d8c37397
push r13
nop
nop
orps xmm13, xmm12
pminsw mm1, mm4
nop
nop
shl r13, 0x10
shl r13w, 0x13
rol r13w, 0xe
nop
ror r13w, 6
emms
pop r13
mov ecx, 3
mov edx, 4
call sub.msvcrt.dll_calloc
mov rcx, rax
xor eax, eax
push r13
inc r13
push r12
emms
push rbx
emms
push r15
pmulhuw mm7, mm0
pop r15
xorps xmm4, xmm7
pop rbx
or r13w, r12w
pop r12
pcmpeqb mm6, mm1
pop r13
xor dword [rcx + rax*4], 3
push rcx
psllq mm5, 0x13
push r11
nop
pop r11
psrlq mm5, 0x35
pop rcx
inc rax
cmp rax, 3
jne 0x1d8c37316
call sub.msvcrt.dll_free
push r10
punpckldq mm1, mm5
nop
punpckldq mm5, mm1
push r8
xchg r10d, r8d
adc r10, r8
shr r10d, 0x10
push rbx
paddusb mm0, mm7
pcmpeqb mm1, mm7
neg r10
pop rbx
emms
psllq mm3, 0x5c
pminsw mm0, mm1
pop r8
psrad mm7, 0x54
psadbw mm0, mm1
packssdw mm0, mm6
pop r10
mov eax, 1
jmp 0x1d8c373f2
push r14
mov r14, 3
push rbx
rol ebx, 0x15
inc rbx
push r10
ror rbx, 2
mov r10, 0xa
push r15
pmulhuw mm3, mm0
sub rbx, 0x13
push rdx
add r15w, dx
emms
push rcx
nop
emms
pop rcx
shl dl, 0xe
packsswb mm2, mm6
pop rdx
emms
dec r15
pop r15
not bl
punpckhwd mm1, mm7
pop r10
psrlw mm1, 0xb
nop
pop rbx
dec r14
jne 0x1d8c373a0
pop r14
call fcn.1d8c527e7
xor eax, eax
add rsp, 0x60
pop rbx
pop rsi
pop rdi
ret