Function at 0x416d50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x834
mov eax, dword [0x439030]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
xorps xmm0, xmm0
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 8]
push 0xe
push 0
push 0
mov dword [edi], 0
push 0
mov dword [ebp - 0x830], eax
mov dword [esi], 0
mov dword [ebp - 0x10], 0x6b736944
mov dword [ebp - 0xc], 0x76697244
mov word [ebp - 8], 0x65
mov dword [ebp - 0x82c], 0
movdqu xmmword [ebp - 0x828], xmm0
mov dword [ebp - 0x834], 0
movq qword [ebp - 0x818], xmm0
call dword [sym.imp.SETUPAPI.dll_SetupDiGetClassDevsW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4171f6
lea eax, [ebp - 0x82c]
mov dword [ebp - 0x82c], 0x1c
push eax
push 0
push ebx
call dword [sym.imp.SETUPAPI.dll_SetupDiEnumDeviceInfo]
test eax, eax
je 0x4171ef
jmp 0x416e00
push 0x800
lea eax, [ebp - 0x810]
push 0
push eax
call fcn.0041ba00
add esp, 0xc
lea eax, [ebp - 0x810]
push 0
push 0x7fe
push eax
push 0
push 7
lea eax, [ebp - 0x82c]
push eax
push ebx
call dword [sym.imp.SETUPAPI.dll_SetupDiGetDeviceRegistryPropertyA]
test eax, eax
je 0x4170c5
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00419f8e
add esp, 8
test eax, eax
jne 0x4170c5
push eax
push 0x7fe
lea eax, [ebp - 0x810]
push eax
push 0
push 0xc
lea eax, [ebp - 0x82c]
push eax
push ebx
call dword [sym.imp.SETUPAPI.dll_SetupDiGetDeviceRegistryPropertyA]
test eax, eax
je 0x4170c5
lea eax, [ebp - 0x810]
push eax
push 0x800
push dword [ebp - 0x830]
call fcn.0041b7c3
push 0x435f10
push 0x800
push dword [ebp - 0x830]
call fcn.0041b7c3
lea eax, [ebp - 0x810]
push 0x800
push eax
call fcn.00429982
lea eax, [ebp - 0x810]
push str.vdiskbus
push eax
call fcn.00419900
add esp, 0x28
test eax, eax
jne 0x4171e3
lea eax, [ebp - 0x810]
push str.netzone
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x4171d5
lea eax, [ebp - 0x810]
push str.diskless
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x4171d5
lea eax, [ebp - 0x810]
push str.richdisk
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x4171c7
lea eax, [ebp - 0x810]
push str.deepin
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x4171b9
lea eax, [ebp - 0x810]
push str.kic.disk
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x4171ab
lea eax, [ebp - 0x810]
push str.nmenu
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x41719d
lea eax, [ebp - 0x810]
push str.alddisk
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x41718f
lea eax, [ebp - 0x810]
push str.vhd_cms
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x417181
lea eax, [ebp - 0x810]
push str.mzd.live
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x417173
lea eax, [ebp - 0x810]
push str.ccboot
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x417165
lea eax, [ebp - 0x810]
push str.vnd_scsi
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x417154
lea eax, [ebp - 0x810]
push str.bnvirtualscsihba
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x417143
lea eax, [ebp - 0x810]
push str.bxp_virtual
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x417143
lea eax, [ebp - 0x810]
push str.s.t._virtual
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x417132
lea eax, [ebp - 0x810]
push str.kb.mdisk
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x417121
lea eax, [ebp - 0x810]
push str.hin_virtual
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x417110
lea eax, [ebp - 0x810]
push str.obm_virtual
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x4170ff
lea eax, [ebp - 0x810]
push str.msft_virtual
push eax
call fcn.00419900
add esp, 8
test eax, eax
jne 0x4170ee
mov eax, dword [ebp - 0x834]
lea ecx, [ebp - 0x82c]
inc eax
push ecx
push eax
push ebx
mov dword [ebp - 0x834], eax
call dword [sym.imp.SETUPAPI.dll_SetupDiEnumDeviceInfo]
test eax, eax
jne 0x416e00
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 0x12
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 0x11
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 0xf
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 0xe
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 0xd
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 0xc
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 0xb
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 0xa
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 9
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 8
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 7
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 6
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 5
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 4
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 3
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 2
jmp 0x4171ef
mov dword [edi], 1
mov dword [esi], 1
push ebx
call dword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0041813f
mov esp, ebp
pop ebp
ret 0x10