Function at 0x1401863f0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
call fcn.14014142c
mov rcx, rax
call fcn.14013fb04
xor edi, edi
cmp byte [rax + 0xb45], dil
je 0x140186457
xor eax, eax
mov dword [rbp - 0x10], 0x6a766241
mov byte [rbp - 4], al
mov ecx, edi
mov dword [rbp - 0xc], 0x62726472
mov dword [rbp - 8], 0x726f4228
xor byte [rbp + rcx - 0x10], al
inc eax
movsxd rcx, eax
cmp rcx, 0xc
jb 0x14018643b
lea rcx, [rbp - 0x10]
mov byte [rbp - 4], dil
call fcn.140152cb8
xor eax, eax
mov dword [rbp - 0x10], 0x6a766241
mov byte [rbp - 4], al
mov rcx, rdi
mov dword [rbp - 0xc], 0x62726472
mov dword [rbp - 8], 0x726f4228
xor byte [rbp + rcx - 0x10], al
inc eax
movsxd rcx, eax
cmp rcx, 0xc
jb 0x140186474
lea rcx, [rbp - 0x10]
mov byte [rbp - 4], dil
call fcn.140153158
test al, al
je 0x140186789
movdqa xmm0, xmmword [0x1404ced80]
mov eax, edi
movdqu xmmword [rbp - 0x10], xmm0
mov rcx, rdi
xor byte [rbp + rcx - 0x10], al
inc eax
movsxd rcx, eax
cmp rcx, 0xf
jb 0x1401864aa
lea rcx, [rbp - 0x10]
mov byte [rbp - 1], dil
call fcn.14016a8e4
movss xmm0, dword [0x1404ceb74]
call fcn.140151df8
movaps xmm0, xmmword [0x1404cf460]
lea rdx, [rbp - 0x10]
mov ecx, 7
movups xmmword [rbp - 0x10], xmm0
call fcn.140144a68
call fcn.14014142c
mov rcx, rax
call fcn.14013fb04
xor r9d, r9d
mov byte [rbp + 0x40], dil
lea rcx, [rbp + 0x40]
lea rdx, [rax + 0xa3c]
lea r8d, [r9 + 0x22]
call fcn.14016d580
call fcn.140144adc
mov r10, qword [0x140548838]
mov rax, qword [r10 + 0x4008]
mov byte [rax + 0xc0], 1
mov r8, qword [r10 + 0x4008]
movsxd rdx, dword [r8 + 0x1d8]
mov rax, qword [r8 + 0x1e0]
mov ecx, dword [rax + rdx*4 - 4]
lea eax, [rdx - 1]
mov dword [r8 + 0x1d8], eax
mov dword [r8 + 0x1cc], ecx
call fcn.14016cc4c
and dword [rbp + 0x4c], edi
mov rcx, rdi
xor eax, eax
mov dword [rbp + 0x48], 0x42f00000
mov byte [rbp + 0x42], al
mov word [rbp + 0x40], 0x6a4f
xor byte [rbp + rcx + 0x40], al
inc eax
movsxd rcx, eax
cmp rcx, 2
jb 0x140186575
lea rdx, [rbp + 0x48]
mov byte [rbp + 0x42], dil
lea rcx, [rbp + 0x40]
call fcn.14016b12c
test al, al
je 0x140186710
mov r9d, 0xa
lea rcx, [0x1404ce720]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.setupapi.dll_SetupDiGetClassDevsW]
mov r14d, 0x20
mov rsi, rax
mov ecx, r14d
call fcn.1403caaf4
xorps xmm0, xmm0
lea ecx, [r14 + 0x60]
mov rbx, rax
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov dword [rax], r14d
call fcn.1403caeb8
mov r15d, 4
mov r14, rax
mov ecx, r15d
call fcn.1403caaf4
mov ecx, r15d
mov r12, rax
call fcn.1403caaf4
mov r13, rax
mov r8, rbx
mov edx, edi
mov rcx, rsi
call qword [sym.imp.setupapi.dll_SetupDiEnumDeviceInfo]
mov r15d, eax
test eax, eax
je 0x140186675
mov qword [rsp + 0x30], r13
mov r9, r12
mov dword [rsp + 0x28], 0x80
mov r8d, 0xc
mov rdx, rbx
mov qword [rsp + 0x20], r14
mov rcx, rsi
call qword [sym.imp.setupapi.dll_SetupDiGetDeviceRegistryPropertyA]
test eax, eax
je 0x1401867b4
xor eax, eax
mov dword [rbp + 0x40], 0x524054
xor ecx, ecx
xor byte [rbp + rcx + 0x40], al
inc eax
movsxd rcx, eax
cmp rcx, 3
jb 0x14018664d
lea rdx, [rbp + 0x40]
mov byte [rbp + 0x43], 0
mov rcx, r14
call fcn.1403cbcb0
test rax, rax
jne 0x1401867a1
inc edi
test r15d, r15d
jne 0x1401865fe
mov rcx, rsi
call qword [sym.imp.setupapi.dll_SetupDiDestroyDeviceInfoList]
lea edi, [r15 + 4]
mov rcx, r12
mov edx, edi
call fcn.1403cad84
mov edx, edi
mov rcx, r13
call fcn.1403cad84
lea edx, [rdi + 0x1c]
mov rcx, rbx
call fcn.1403cad84
mov rcx, r14
call fcn.1403cad84
call fcn.140140f70
xor edi, edi
mov byte [rax + 0x154], dil
call fcn.14014142c
mov rcx, rax
call fcn.14013fb04
call fcn.14014142c
mov rcx, rax
call fcn.14013fb04
mov ebx, 0xa3c
lea rcx, [rbx + rax]
call fcn.1401bcab0
test al, al
je 0x1401866f4
call fcn.14018611c
call fcn.140153024
call fcn.14014142c
mov rcx, rax
call fcn.14013fb04
xor edx, edx
lea rcx, [rbx + rax]
lea r8d, [rdx + 0x40]
call fcn.1403ccc50
call fcn.14014f688
movss xmm1, dword [0x1404cebcc]
xorps xmm0, xmm0
call fcn.140151d50
and dword [rbp + 0x4c], 0
mov rcx, rdi
xor eax, eax
mov dword [rbp + 0x48], 0x42f00000
mov byte [rbp + 0x46], al
mov eax, edi
mov dword [rbp + 0x40], 0x606c6043
mov word [rbp + 0x44], 0x6961
xor byte [rbp + rcx + 0x40], al
inc eax
movsxd rcx, eax
cmp rcx, 6
jb 0x140186747
lea rdx, [rbp + 0x48]
mov byte [rbp + 0x46], dil
lea rcx, [rbp + 0x40]
call fcn.14016b12c
test al, al
je 0x140186770
call fcn.140153024
call fcn.14014142c
mov rcx, rax
call fcn.14013fb04
mov byte [rax + 0xabc], 1
call fcn.14015322c
mov rbx, qword [rsp + 0xa0]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140140f70
xor edi, edi
mov byte [rax + 0x154], 1
jmp 0x1401866be
call qword [sym.imp.kernel32.dll_GetLastError]
jmp 0x1401866b0