Function at 0x40ef90
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
lea eax, [ebp - 0x158]
lea edi, [ebp - 0x170]
sub esp, 0x1dc
mov dword [ebp - 0x1bc], ecx
mov dword [esp + 0xc], 0x140
mov dword [esp + 8], 0
mov dword [esp + 4], 0x140
mov dword [esp], eax
call fcn.004327e0
mov dword [esp], edi
call fcn.0042f800
mov eax, 0x7fffffff
sub eax, dword [ebp - 0x16c]
cmp eax, 5
jbe 0x40f7fb
mov dword [esp + 4], 6
mov dword [esp], str.Driver
mov ecx, edi
call fcn.004cde40
lea ecx, [ebp - 0x1b0]
lea edx, [eax + 8]
sub esp, 8
mov dword [ebp - 0x1b8], ecx
mov ecx, dword [eax]
cmp ecx, edx
je 0x40f6d0
mov dword [ebp - 0x1b8], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1b0], ecx
mov ecx, dword [eax + 4]
mov byte [eax + 8], 0
lea esi, [ebp - 0x168]
mov dword [ebp - 0x1b4], ecx
mov dword [eax], edx
mov dword [eax + 4], 0
mov eax, dword [ebp - 0x170]
cmp eax, esi
je 0x40f059
mov dword [esp], eax
call fcn.004ed8c0
mov eax, 0x666e
mov dword [esp + 4], 0
mov dword [esp], 0
mov word [ebp - 0x164], ax
mov eax, dword [ebp - 0x1b4]
mov ecx, edi
mov dword [ebp - 0x170], esi
mov dword [ebp - 0x168], 0x692e2a5c
mov dword [ebp - 0x16c], 6
mov byte [ebp - 0x162], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x1b8]
mov dword [esp + 8], eax
call fcn.004cb7a0
lea ecx, [ebp - 0x198]
lea edx, [eax + 8]
sub esp, 0x10
mov dword [ebp - 0x1a0], ecx
mov ecx, dword [eax]
cmp ecx, edx
je 0x40f700
mov dword [ebp - 0x1a0], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x198], ecx
mov ecx, dword [eax + 4]
mov byte [eax + 8], 0
mov dword [ebp - 0x19c], ecx
mov dword [eax], edx
mov dword [eax + 4], 0
mov eax, dword [ebp - 0x170]
cmp eax, esi
je 0x40f103
mov dword [esp], eax
call fcn.004ed8c0
lea eax, [ebp - 0x158]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1a0]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
sub esp, 8
cmp eax, 0xffffffff
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1c4], 0
je 0x40f620
nop
lea esi, [esi]
call fcn.0042c430
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x170], esi
mov dword [esi], 0x74736e49
mov dword [esi + 4], 0x466c6c61
mov dword [esi + 8], 0x7058726f
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], str.Find_driver__s
mov dword [esp + 0xc], 0x361
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], eax
mov dword [ebp - 0x16c], 0xc
mov byte [ebp - 0x15c], 0
call fcn.0042ce70
mov eax, dword [ebp - 0x170]
cmp eax, esi
je 0x40f1b0
mov dword [esp], eax
call fcn.004ed8c0
lea ebx, [ebp - 0x12c]
mov dword [ebp - 0x170], esi
mov edx, dword [ebx]
add ebx, 4
lea eax, [edx - 0x1010101]
not edx
and eax, edx
and eax, 0x80808080
je 0x40f1bc
mov edx, eax
shr edx, 0x10
test eax, 0x8080
cmove eax, edx
lea edx, [ebx + 2]
mov ecx, eax
cmove ebx, edx
add cl, al
lea eax, [ebp - 0x12c]
sbb ebx, 3
sub ebx, eax
cmp ebx, 0xf
ja 0x40f490
cmp ebx, 1
je 0x40f4d0
test ebx, ebx
mov eax, esi
jne 0x40f4a7
mov dword [ebp - 0x16c], ebx
mov byte [eax + ebx], 0
lea eax, [ebp - 0x188]
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.00425760
mov eax, dword [ebp - 0x170]
cmp eax, esi
je 0x40f23e
mov dword [esp], eax
call fcn.004ed8c0
lea eax, [ebp - 0x188]
mov dword [esp], eax
call fcn.0042d8e0
lea eax, [ebp - 0x188]
mov ecx, dword [ebp - 0x1bc]
mov dword [esp], eax
call fcn.0040e780
sub esp, 4
test eax, eax
jne 0x40f2f5
mov eax, dword [ebp - 0x1b8]
mov dword [esp], eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
sub esp, 4
test eax, eax
jne 0x40f4e4
call fcn.0042c430
mov dword [ebp - 0x170], esi
mov dword [esi], 0x74736e49
mov dword [esi + 4], 0x466c6c61
mov dword [esi + 8], 0x7058726f
mov dword [esp + 0x10], str.Driver_is_not_exist
mov dword [esp + 0xc], 0x367
mov dword [esp + 8], edi
mov dword [esp + 4], 2
mov dword [esp], eax
mov dword [ebp - 0x16c], 0xc
mov byte [ebp - 0x15c], 0
call fcn.0042ce70
mov eax, dword [ebp - 0x170]
cmp eax, esi
je 0x40f2eb
mov dword [esp], eax
call fcn.004ed8c0
mov dword [ebp - 0x1c4], 0x4e24
lea eax, [ebp - 0x158]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1c0]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov edx, dword [ebp - 0x188]
mov ebx, eax
lea eax, [ebp - 0x180]
sub esp, 8
cmp edx, eax
je 0x40f482
mov dword [esp], edx
call fcn.004ed8c0
test ebx, ebx
jne 0x40f140
mov eax, dword [ebp - 0x1c0]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x1a0]
lea ecx, [ebp - 0x198]
sub esp, 4
cmp eax, ecx
je 0x40f361
mov dword [esp], eax
call fcn.004ed8c0
mov eax, dword [ebp - 0x1b8]
lea ecx, [ebp - 0x1b0]
cmp eax, ecx
je 0x40f379
mov dword [esp], eax
call fcn.004ed8c0
lea eax, [ebp - 0x158]
mov dword [esp + 0xc], 0x1c
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1c
mov dword [ebp - 0x170], esi
mov dword [esp], eax
mov dword [ebp - 0x16c], 0
mov byte [ebp - 0x168], 0
call fcn.004327e0
lea eax, [ebp - 0x158]
mov ecx, dword [ebp - 0x1bc]
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.0040c690
sub esp, 8
cmp eax, 0xffffffff
je 0x40f582
mov dword [esp], eax
call dword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
mov eax, dword [ebp - 0x170]
sub esp, 4
lea ebx, [ebp - 0x150]
cmp eax, esi
je 0x40f3fe
mov dword [esp], eax
call fcn.004ed8c0
lea edi, [ebp - 0x158]
call fcn.0042c430
mov dword [esp + 0x10], str.Find_the_cdrom
mov dword [esp + 0xc], 0x37b
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], eax
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x150], 0x74736e49
mov dword [ebp - 0x14c], 0x466c6c61
mov dword [ebp - 0x148], 0x7058726f
mov dword [ebp - 0x154], 0xc
mov byte [ebp - 0x144], 0
call fcn.0042ce70
mov eax, dword [ebp - 0x158]
cmp eax, ebx
je 0x40f474
mov dword [esp], eax
call fcn.004ed8c0
mov eax, dword [ebp - 0x1c4]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
test ebx, ebx
jne 0x40f140
jmp 0x40f337
lea eax, [ebx + 1]
mov dword [esp], eax
call fcn.004ed900
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x168], ebx
lea ecx, [ebp - 0x12c]
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call sub.msvcrt.dll_memcpy
mov eax, dword [ebp - 0x170]
jmp 0x40f210
movzx eax, byte [ebp - 0x12c]
mov byte [ebp - 0x168], al
mov eax, esi
jmp 0x40f210
lea eax, [ebp - 0x1b8]
mov ecx, dword [ebp - 0x1bc]
mov dword [esp], eax
call fcn.0040b180
sub esp, 4
test eax, eax
mov dword [ebp - 0x1c4], eax
je 0x40f2f5
call fcn.0042c430
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp - 0x170], esi
mov dword [esi], 0x74736e49
mov dword [esi + 4], 0x466c6c61
mov dword [esi + 8], 0x7058726f
mov dword [esp + 0x10], str.InstallDirverFiles_failed_with_error_code___d
mov dword [esp + 0x14], ecx
mov dword [esp + 0xc], 0x36b
mov dword [esp + 8], edi
mov dword [esp + 4], 2
mov dword [esp], eax
mov dword [ebp - 0x16c], 0xc
mov byte [ebp - 0x15c], 0
call fcn.0042ce70
mov eax, dword [ebp - 0x170]
cmp eax, esi
je 0x40f2f5
mov dword [esp], eax
call fcn.004ed8c0
jmp 0x40f2f5
mov eax, dword [ebp - 0x170]
cmp eax, esi
je 0x40f594
mov dword [esp], eax
call fcn.004ed8c0
lea edi, [ebp - 0x158]
lea ebx, [ebp - 0x150]
call fcn.0042c430
mov dword [esp + 0x10], str.Cant_find_cdrom
mov dword [esp + 0xc], 0x378
mov dword [esp + 8], edi
mov dword [esp + 4], 1
mov dword [esp], eax
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x150], 0x74736e49
mov dword [ebp - 0x14c], 0x466c6c61
mov dword [ebp - 0x148], 0x7058726f
mov dword [ebp - 0x154], 0xc
mov byte [ebp - 0x144], 0
call fcn.0042ce70
mov eax, dword [ebp - 0x158]
cmp eax, ebx
je 0x40f610
mov dword [esp], eax
call fcn.004ed8c0
mov dword [ebp - 0x1c4], 0x4e25
jmp 0x40f3fe
call fcn.0042c430
mov dword [esp + 0x10], str.InstallForXp_findHandle_is__INVALID_HANDLE_VALUE
mov dword [esp + 0xc], 0x35b
mov dword [esp + 8], edi
mov dword [esp + 4], 2
mov dword [esp], eax
mov dword [ebp - 0x170], esi
mov dword [ebp - 0x168], 0x74736e49
mov dword [ebp - 0x164], 0x466c6c61
mov dword [ebp - 0x160], 0x7058726f
mov dword [ebp - 0x16c], 0xc
mov byte [ebp - 0x15c], 0
call fcn.0042ce70
mov eax, dword [ebp - 0x170]
cmp eax, esi
je 0x40f690
mov dword [esp], eax
call fcn.004ed8c0
mov eax, dword [ebp - 0x1a0]
lea ecx, [ebp - 0x198]
cmp eax, ecx
je 0x40f6a8
mov dword [esp], eax
call fcn.004ed8c0
mov eax, dword [ebp - 0x1b8]
lea ecx, [ebp - 0x1b0]
cmp eax, ecx
je 0x40f6c0
mov dword [esp], eax
call fcn.004ed8c0
mov dword [ebp - 0x1c4], 0
jmp 0x40f379
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1b0], ecx
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x1ac], ecx
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x1a8], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x1a4], ecx
jmp 0x40f02b
mov ecx, dword [eax + 8]
mov dword [ebp - 0x198], ecx
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x194], ecx
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x190], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x18c], ecx
jmp 0x40f0db
mov dword [esp], ebx
call fcn.0043f8d0
mov edx, dword [ebp - 0x158]
mov esi, eax
cmp edx, ebx
je 0x40f789
mov dword [esp], edx
call fcn.004ed8c0
mov dword [esp], esi
call fcn.0043f8d0
mov edx, dword [ebp - 0x170]
mov ebx, eax
lea eax, [ebp - 0x168]
cmp edx, eax
je 0x40f76d
mov dword [esp], edx
call fcn.004ed8c0
jmp 0x40f76d
mov dword [esp], 0x4fb61a
call fcn.004e7d10
jmp 0x40f775