Function at 0x140091000
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1c0
lea rbp, [rsp + 0x40]
mov qword [rbp + 0x18], 0xfffffffffffffffe
mov qword [rbp + 0x1b8], rbx
mov qword [rbp + 0x1c0], rsi
mov qword [rbp + 0x1c8], rdi
mov rax, qword [0x1400ee0e8]
xor rax, rbp
mov qword [rbp + 0x170], rax
mov r14, rcx
xor r15d, r15d
mov dword [rbp + 0x10], r15d
mov word [rbp + 0x40], 0x6573
mov dword [rbp + 0x45], 0x2e697061
mov word [rbp + 0x43], 0x7075
mov word [rbp + 0x4a], 0x6c6c
mov byte [rbp + 0x4c], r15b
mov byte [rbp + 0x49], 0x64
mov byte [rbp + 0x42], reloc.WS2_32.dll_WSACleanup
mov dword [rbp + 0x60], 0x706f7250
mov dword [rbp + 0x53], 0x69447075
mov dword [rbp + 0x5b], 0x63697665
mov dword [rbp + 0x57], 0x44746547
mov word [rbp + 0x67], 0x5779
mov word [rbp + 0x64], 0x7265
mov word [rbp + 0x51], 0x7465
mov byte [rbp + 0x69], r15b
mov byte [rbp + 0x50], 0x53
mov byte [rbp + 0x5f], 0x65
mov byte [rbp + 0x66], reloc.WS2_32.dll_WSACleanup
lea rcx, [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x1400910d6
lea rdx, [rbp + 0x50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400f1cc8], rax
jmp 0x1400910dd
mov rax, qword [0x1400f1cc8]
test rax, rax
jne 0x1400910f6
lea rdx, [0x1400d85ce]
mov rcx, r14
call fcn.14000bac0
jmp 0x14009139e
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x70]
call fcn.1400572a0
call fcn.14000c5a0
mov rcx, rax
test rax, rax
jne 0x14009111f
mov ecx, 0x80004005
call fcn.14000c2c0
int3
mov rax, qword [rax]
mov rdx, qword [rax + 0x18]
lea r13, [0x1400de840]
cmp rax, r13
jne 0x14009113c
lock inc dword [rcx + 0x20]
lea rax, [rcx + 0x10]
jmp 0x14009113e
call rdx
add rax, 0x18
mov qword [rbp + 8], rax
mov r9d, 0xa
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400c7f20]
call qword [sym.imp.SETUPAPI.dll_SetupDiGetClassDevsA]
mov rsi, rax
mov ebx, r15d
or rdi, 0xffffffffffffffff
movabs r12, 0xffffffffffffff0
xor eax, eax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rax
mov dword [rbp + reloc.WLDAP32.dll_Ordinal_32], 0x20
lea r8, [rbp + 0x20]
mov edx, ebx
mov rcx, rsi
call qword [sym.imp.SETUPAPI.dll_SetupDiEnumDeviceInfo]
test eax, eax
jne 0x1400911af
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x103
je 0x14009133d
mov dword [rbp], r15d
mov dword [rsp + 0x38], r15d
lea rax, [rbp]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x100
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x14]
lea r8, [0x1400de870]
lea rdx, [rbp + 0x20]
mov rcx, rsi
call qword [0x1400f1cc8]
mov eax, dword [rbp]
add rax, rax
cmp rax, 0x100
jae 0x140091398
mov word [rbp + rax + 0x70], r15w
inc ebx
mov rax, qword [rbp + 8]
cmp dword [rax - 0x10], 0
jne 0x14009129d
lea rcx, [rbp + 0x70]
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140091220
inc eax
cmp eax, 0x3fffffff
jle 0x140091238
mov rax, r15
jmp 0x140091275
lea r8d, [rax + rax]
cdqe
add rax, rax
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x14009124d
mov rcx, r12
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1400524e0
sub rsp, rcx
lea rcx, [rsp + 0x40]
mov r9d, 3
lea rdx, [rbp + 0x70]
call fcn.14000c7c0
test rax, rax
jne 0x14009127a
mov ecx, r15d
jmp 0x140091289
mov rcx, rdi
nop dword [rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x140091280
mov r8d, ecx
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.14000bdc0
jmp 0x140091172
mov r8d, 2
lea rdx, [0x1400dafb4]
lea rcx, [rbp + 8]
call fcn.14000c6c0
lea rcx, [rbp + 0x70]
mov rax, rdi
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400912c0
inc eax
cmp eax, 0x3fffffff
jle 0x1400912d8
mov rax, r15
jmp 0x140091315
lea r8d, [rax + rax]
cdqe
add rax, rax
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x1400912ed
mov rcx, r12
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1400524e0
sub rsp, rcx
lea rcx, [rsp + 0x40]
mov r9d, 3
lea rdx, [rbp + 0x70]
call fcn.14000c7c0
test rax, rax
jne 0x14009131a
mov ecx, r15d
jmp 0x140091329
mov rcx, rdi
nop dword [rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x140091320
mov r8d, ecx
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.14000c6c0
jmp 0x140091172
test rsi, rsi
je 0x14009134b
mov rcx, rsi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
mov rbx, qword [rbp + 8]
add rbx, 0xffffffffffffffe8
mov rcx, rbx
call fcn.14000bbe0
add rax, 0x18
mov qword [r14], rax
lock xadd dword [rbx + 0x10], edi
sub edi, 1
jg 0x14009139e
mov rcx, qword [rbx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r13
jne 0x140091390
mov rcx, qword [rcx + 8]
mov r8, rbx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14009139e
mov rdx, rbx
call r8
jmp 0x14009139e
call fcn.140051a1c
nop
mov rax, r14
mov rcx, qword [rbp + 0x170]
xor rcx, rbp
call fcn.1400518f0
mov rbx, qword [rbp + 0x1b8]
mov rsi, qword [rbp + 0x1c0]
mov rdi, qword [rbp + 0x1c8]
lea rsp, [rbp + 0x180]
pop r15
pop r14
pop r13
pop r12
pop rbp
ret