Function at 0x46abc0
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1a0
mov eax, dword [0x4f67c4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x134], eax
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x10c], 0xf
mov dword [ebp - 0x110], ebx
mov byte [ebp - 0x120], bl
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push ebx
call dword [sym.imp.ole32.dll_OleInitialize]
mov esi, 0x4f7d78
mov dword [0x4f7dcc], 0x4f7d78
cmp dword [0x4f7d78], ebx
je 0x46ac2f
nop
mov eax, dword [esi + 0x20]
push 1
call eax
cmp dword [esi + 0x24], ebx
lea esi, [esi + 0x24]
jne 0x46ac20
mov esi, dword [0x4ed050]
mov ecx, dword [0x4ed054]
cmp esi, ecx
jae 0x46ac5a
nop
mov eax, dword [esi]
test eax, eax
je 0x46ac53
mov eax, dword [eax + 0x1c]
push 1
call eax
mov ecx, dword [0x4ed054]
add esi, 4
cmp esi, ecx
jb 0x46ac40
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiA]
push 0x4c64dc
push edi
call esi
test eax, eax
je 0x46ae1a
push 0x4c64e0
push edi
call esi
test eax, eax
je 0x46ae1a
push 0x4c64e4
push edi
call esi
test eax, eax
je 0x46ae1a
push 0x4c6500
push edi
call esi
test eax, eax
je 0x46adc3
push 0x4c6504
push edi
call esi
test eax, eax
je 0x46adc3
cmp word [edi], 0x642f
jne 0x46acee
cmp byte [edi + 2], 0x20
jne 0x46acee
lea eax, [ebp - 0x120]
push eax
lea eax, [edi + 3]
push eax
call fcn.004656e0
mov ebx, eax
add esp, 8
test ebx, ebx
jne 0x46b06c
cmp byte [0x4f7c75], al
je 0x46b06c
lea ebx, [eax + 0xa]
jmp 0x46b06c
cmp dword [edi], 0x2064642f
jne 0x46ad6d
lea eax, [ebp - 0x120]
push eax
lea eax, [edi + 4]
push eax
call fcn.004656e0
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x46ad54
cmp dword [ebp - 0x10c], 0x10
lea eax, [ebp - 0x120]
push ebx
cmovae eax, dword [ebp - 0x120]
push eax
lea eax, [ebp - 0x104]
push str._s__err_d_
push eax
call fcn.00462bb0
add esp, 0x10
lea eax, [ebp - 0x104]
push 0x10
push str.Fail_to_install_PdaNet_to_your_phone
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x46b06c
push 0x40
push str.Installation_Completed
push str.PdaNet_has_been_successfully_installed_to_your_Android_phone._Please_launch_it_on_the_phone_side_and_select__USB_Tether_Mode_.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x46b06c
push str._modem
push edi
call esi
test eax, eax
jne 0x46adaa
push str.PdaNet_Modem
push eax
call sub.RASAPI32.dll_RasDeleteEntryA
call fcn.00465320
test eax, eax
je 0x46b06c
push 0
push str.PdaNet_Installation
push str.PdaNet_Modem_Driver_installed_successfully__please_try_to_connect_again
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x46b06c
push 0x10
push str.Error
push str.Invalid_command_line
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x46b06c
push 0
push str.PDAGATEWIN
call dword [sym.imp.USER32.dll_FindWindowA]
mov esi, eax
test esi, esi
je 0x46ae10
push 0xfffffffffffffffa
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov edi, eax
test edi, edi
jne 0x46adec
xor ebx, ebx
jmp 0x46b07c
push 0
push 0
push 0x10
push esi
call dword [sym.imp.USER32.dll_PostMessageA]
push 0x7d0
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00467180
jmp 0x46b06c
push 0x4c64e4
push edi
call esi
movzx ecx, byte [0x4f7c74]
test eax, eax
push 0x104
lea eax, [ebp - 0x108]
mov edx, 1
push eax
cmove ecx, edx
push 0
mov byte [0x4f7c74], cl
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
push 0
push 0x464330
push 0
push 0x67
push dword [ebp - 0x134]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
test eax, eax
jne 0x46ae9e
push str.unins000.exe__SILENT
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 1
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
or ebx, 0xffffffff
jmp 0x46b07c
mov eax, dword [sym.imp.USER32.dll_DefWindowProcA]
mov dword [ebp - 0x180], ebx
mov dword [ebp - 0x174], ebx
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x17c], ebx
cmp word [0x4ed2d8], bx
jne 0x46aeef
and dword [0x4ed29c], 0xfffffffc
push dword [ebp - 0x134]
movaps xmm0, xmmword [0x4c7300]
lea eax, [ebp - 0x158]
push eax
push 0x4ed228
push 0x4f7c40
push 0x4f9ecc
mov dword [ebp - 0x184], 0x4c6418
mov dword [ebp - 0x178], 0x4c6438
mov dword [ebp - 0x140], ebx
mov dword [ebp - 0x138], 1
movups xmmword [ebp - 0x130], xmm0
call fcn.0045f7d0
add esp, 0x14
movzx eax, ax
lea ecx, [ebp - 0x178]
push 0
push eax
push 0
push 0
push 0x64a0080
push 0
lea eax, [ebp - 0x130]
push eax
push 0
call fcn.00464080
push 1
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0
push 0
push 0
lea eax, [ebp - 0x1a0]
push eax
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x46b010
mov esi, dword [sym.imp.USER32.dll_TranslateMessage]
mov edi, dword [sym.imp.USER32.dll_DispatchMessageA]
nop word [eax + eax]
mov eax, dword [ebp - 0x1a0]
test eax, eax
je 0x46afe7
push eax
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_IsChild]
test eax, eax
je 0x46afe7
mov eax, dword [ebp - 0x14c]
lea edx, [ebp - 0x1a0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
neg eax
sbb eax, eax
add eax, 1
jne 0x46aff9
lea eax, [ebp - 0x1a0]
push eax
call esi
lea eax, [ebp - 0x1a0]
push eax
call edi
push 0
push 0
push 0
lea eax, [ebp - 0x1a0]
push eax
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x46afb0
push dword [ebp - 0x140]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [ebp - 0x14c]
test ecx, ecx
je 0x46b02c
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x150]
test ecx, ecx
je 0x46b03c
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x154]
test ecx, ecx
je 0x46b04c
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x164]
test eax, eax
je 0x46b05c
push eax
call fcn.0047143d
mov ecx, dword [ebp - 0x180]
test ecx, ecx
je 0x46b06c
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, 0x4f7da0
call fcn.00469800
call dword [sym.imp.ole32.dll_OleUninitialize]
mov ecx, dword [ebp - 0x10c]
cmp ecx, 0x10
jb 0x46b09a
inc ecx
push ecx
push dword [ebp - 0x120]
lea ecx, [ebp - 0x120]
call fcn.0046a990
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00472286
mov esp, ebp
pop ebp
ret 0x10