Function at 0x40bee0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
lea eax, [ebp - 0x58]
mov ebx, ecx
lea ecx, [ebp - 0x60]
sub esp, 0x9c
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x60], eax
mov esi, dword [ebp + 8]
mov dword [ebp - 0x58], 0x5f646976
mov dword [ebp - 0x54], 0x31643231
mov dword [ebp - 0x50], 0x64697026
mov eax, dword [edi + 4]
mov byte [ebp - 0x4c], 0x5f
mov dword [ebp - 0x5c], 0xd
mov byte [ebp - 0x4b], 0
mov dword [esp + 4], eax
mov eax, dword [edi]
mov dword [esp], eax
call fcn.004cde40
mov eax, dword [ebp - 0x60]
sub esp, 8
mov dword [ebp - 0x6c], eax
mov dword [esp + 4], eax
mov eax, dword [esi]
mov dword [esp], eax
call sub.msvcrt.dll_strstr
test eax, eax
je 0x40c270
lea ecx, [ebx + 0x44]
mov dword [esp], edi
call fcn.004cdfc0
sub esp, 4
call fcn.0042c430
mov edi, eax
mov eax, dword [ebx + 0x44]
mov dword [esp], 0x14
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x30], eax
call fcn.004ed900
mov ecx, dword [ebp - 0x70]
mov edx, 0x4965
mov dword [eax], 0x614d7349
mov dword [eax + 4], 0x65686374
mov dword [eax + 8], 0x72614864
mov dword [eax + 0xc], 0x72617764
mov word [eax + 0x10], dx
mov byte [eax + 0x12], 0x64
mov byte [eax + 0x13], 0
mov dword [esp + 0x14], ecx
lea ecx, [ebp - 0x30]
mov dword [esp + 0x10], str.the_CDROM_PID_is__s
mov dword [esp + 0xc], 0xd2
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp], edi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], 0x13
mov dword [ebp - 0x2c], 0x13
call fcn.0042ce70
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x6c]
je 0x40bffc
mov dword [esp], eax
call fcn.004ed8c0
mov dword [esp + 8], 5
mov dword [esp + 4], 0
mov ecx, esi
mov dword [esp], str.rev_
call fcn.0045b2d0
sub esp, 0xc
cmp eax, 0xffffffff
mov edi, eax
jne 0x40c050
mov eax, dword [ebp - 0x60]
xor ebx, ebx
mov dword [ebp - 0x6c], eax
lea edx, [ebp - 0x58]
cmp eax, edx
je 0x40c03b
mov dword [esp], eax
call fcn.004ed8c0
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 8
call fcn.0042c430
mov edx, dword [esi]
mov dword [esp], 0x14
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], edx
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x30], edx
call fcn.004ed900
mov ecx, 0x4965
mov dword [eax], 0x614d7349
mov dword [eax + 4], 0x65686374
mov word [eax + 0x10], cx
mov ecx, dword [ebp - 0x74]
mov dword [eax + 8], 0x72614864
mov dword [eax + 0xc], 0x72617764
mov byte [eax + 0x12], 0x64
mov byte [eax + 0x13], 0
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x70]
mov dword [esp + 0x14], ecx
lea ecx, [ebp - 0x30]
mov dword [esp + 0x10], str.The_hardware_is__s
mov dword [esp + 0xc], 0xd8
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp], eax
mov dword [ebp - 0x28], 0x13
mov dword [ebp - 0x2c], 0x13
call fcn.0042ce70
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x6c]
je 0x40c0ed
mov dword [esp], eax
call fcn.004ed8c0
mov edx, dword [esi + 4]
add edi, 5
cmp edi, edx
jae 0x40c280
mov eax, dword [esi]
mov ecx, edx
mov dword [esp + 4], 0x26
sub ecx, edi
mov dword [ebp - 0x70], edx
mov dword [esp + 8], ecx
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x78], eax
add eax, edi
mov dword [esp], eax
mov dword [ebp - 0x7c], eax
call sub.msvcrt.dll_memchr
test eax, eax
mov edx, dword [ebp - 0x70]
je 0x40c280
sub eax, dword [ebp - 0x78]
cmp eax, 0xffffffff
je 0x40c280
mov ecx, dword [ebp - 0x74]
sub eax, edi
lea edi, [ebp - 0x40]
mov esi, eax
mov dword [ebp - 0x48], edi
cmp eax, ecx
cmova esi, ecx
cmp esi, 0xf
ja 0x40c300
cmp esi, 1
je 0x40c334
test esi, esi
mov eax, edi
jne 0x40c319
mov dword [ebp - 0x44], esi
mov byte [eax + esi], 0
mov edx, dword [ebp - 0x48]
mov eax, dword [ebx + 0x74]
cmp edx, edi
je 0x40c344
mov ecx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x70], ecx
lea ecx, [ebx + 0x7c]
cmp eax, ecx
je 0x40c390
mov dword [ebx + 0x78], esi
mov esi, dword [ebp - 0x70]
test eax, eax
mov ecx, dword [ebx + 0x7c]
mov dword [ebx + 0x74], edx
mov dword [ebx + 0x7c], esi
je 0x40c39c
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x44], 0
mov byte [eax], 0
mov eax, dword [ebp - 0x48]
cmp eax, edi
je 0x40c1c7
mov dword [esp], eax
call fcn.004ed8c0
call fcn.0042c430
mov edi, dword [ebp - 0x6c]
mov ebx, dword [ebx + 0x74]
mov esi, eax
mov dword [esp], 0x14
mov dword [ebp - 0x30], edi
call fcn.004ed900
mov edx, 0x4965
mov dword [eax], 0x614d7349
mov dword [eax + 4], 0x65686374
mov dword [eax + 8], 0x72614864
mov dword [eax + 0xc], 0x72617764
mov word [eax + 0x10], dx
mov byte [eax + 0x12], 0x64
mov byte [eax + 0x13], 0
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], str.currentDeviceVersion_is__s
mov dword [esp + 0xc], 0xe0
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], esi
mov dword [ebp - 0x28], 0x13
mov dword [ebp - 0x2c], 0x13
call fcn.0042ce70
mov eax, dword [ebp - 0x30]
cmp eax, edi
je 0x40c25a
mov dword [esp], eax
call fcn.004ed8c0
mov eax, dword [ebp - 0x60]
mov ebx, 1
mov dword [ebp - 0x6c], eax
jmp 0x40c02c
xor ebx, ebx
mov eax, dword [ebp - 0x6c]
jmp 0x40c02c
cmp edi, edx
ja 0x40c40a
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov eax, dword [esi]
add edx, eax
add edi, eax
mov dword [esp + 4], edx
mov dword [esp], edi
call fcn.00409050
sub esp, 8
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 0x6c]
mov eax, dword [ebx + 0x74]
mov edx, dword [ebp - 0x2c]
je 0x40c3b0
lea esi, [ebx + 0x7c]
mov edi, dword [ebp - 0x28]
cmp eax, esi
je 0x40c370
test eax, eax
mov esi, dword [ebx + 0x7c]
mov dword [ebx + 0x74], ecx
mov dword [ebx + 0x78], edx
mov dword [ebx + 0x7c], edi
je 0x40c379
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], 0
mov byte [eax], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x6c]
jne 0x40c1bf
jmp 0x40c1c7
test esi, esi
js 0x40c452
lea eax, [esi + 1]
mov dword [esp], eax
call fcn.004ed900
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x40], esi
mov edx, dword [ebp - 0x7c]
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], edx
call sub.msvcrt.dll_memcpy
mov eax, dword [ebp - 0x48]
jmp 0x40c168
mov eax, dword [ebp - 0x7c]
movzx eax, byte [eax]
mov byte [ebp - 0x40], al
mov eax, edi
jmp 0x40c168
mov edx, dword [ebp - 0x44]
test edx, edx
je 0x40c360
cmp edx, 1
jne 0x40c3d4
movzx edx, byte [ebp - 0x40]
mov byte [eax], dl
mov edx, dword [ebp - 0x44]
mov eax, dword [ebx + 0x74]
mov dword [ebx + 0x78], edx
mov byte [eax + edx], 0
mov eax, dword [ebp - 0x48]
jmp 0x40c1ae
mov dword [ebx + 0x74], ecx
mov dword [ebx + 0x78], edx
mov dword [ebx + 0x7c], edi
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x6c], eax
jmp 0x40c2e0
mov eax, dword [ebp - 0x70]
mov dword [ebx + 0x74], edx
mov dword [ebx + 0x78], esi
mov dword [ebx + 0x7c], eax
mov dword [ebp - 0x48], edi
lea edi, [ebp - 0x40]
mov eax, edi
jmp 0x40c1ae
test edx, edx
je 0x40c3c5
cmp edx, 1
jne 0x40c3ef
movzx edx, byte [ebp - 0x28]
mov byte [eax], dl
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebx + 0x74]
mov dword [ebx + 0x78], edx
mov byte [eax + edx], 0
mov eax, dword [ebp - 0x30]
jmp 0x40c2e0
mov dword [esp + 8], edx
mov dword [esp + 4], edi
mov dword [esp], eax
call sub.msvcrt.dll_memcpy
mov edx, dword [ebp - 0x44]
mov eax, dword [ebx + 0x74]
jmp 0x40c360
mov esi, dword [ebp - 0x6c]
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [esp + 4], esi
call sub.msvcrt.dll_memcpy
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebx + 0x74]
jmp 0x40c3c5
mov dword [esp + 0xc], edx
mov dword [esp + 8], edi
mov dword [esp + 4], 0x4fb7fa
mov dword [esp], 0x4fb810
call fcn.004e8380
mov ebx, eax
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x6c]
je 0x40c438
mov dword [esp], eax
call fcn.004ed8c0
mov eax, dword [ebp - 0x60]
lea esi, [ebp - 0x58]
cmp eax, esi
je 0x40c44a
mov dword [esp], eax
call fcn.004ed8c0
mov dword [esp], ebx
call fcn.0043f8d0
mov dword [esp], 0x4fb392
call fcn.004e7d10
jmp 0x40c426