Function at 0x453a5f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
xor eax, eax
mov ecx, 0x41
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x11c]
push ebx
sub esp, 0x1fc
mov dword [0x492b24], 0xffffffff
rep stosd dword es:[edi], eax
xor edi, edi
cmp dword [0x5275c0], 0x61
mov dword [0x52b144], edi
jbe 0x453bc5
xor esi, esi
mov dword [esp], esi
call fcn.0044fdf9
test al, 4
je 0x453bc5
xor ecx, ecx
mov dword [esp + 4], 0x147
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
xor ebx, ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 8], ecx
mov eax, dword [0x526d14]
mov dword [esp], eax
call esi
sub esp, 0x10
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x150
mov eax, dword [0x526d14]
mov dword [esp], eax
call esi
sub esp, 0x10
cmp eax, 2
jne 0x453bc5
mov al, byte [0x5132ff]
lea ebx, [ebp - 0x11c]
cmp al, 1
jbe 0x453b9f
movzx esi, al
mov ecx, 0x513022
xor eax, eax
lea edx, [ebp - 0x1ac]
mov dword [edx + eax*4], ecx
inc eax
add ecx, 0x40
cmp esi, eax
jg 0x453b15
mov dword [esp], 0xc3b
call fcn.0042291e
mov dword [esp], 0xc3a
mov edi, eax
call fcn.0042291e
lea edx, [ebp - 0x1ac]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x14], 1
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], 9
call fcn.0044703b
xor edx, edx
test eax, eax
jns 0x453b8c
mov dword [0x52b144], 0xfffffffe
mov eax, 0xfffffffe
jmp 0x454038
sar eax, 1
je 0x453b93
inc edx
jmp 0x453b8c
cmp edx, 3
cmovg edx, eax
mov dword [0x52b144], edx
cmp byte [0x5132f7], 0
jne 0x453c0a
mov eax, dword [0x525a68]
mov dword [esp], eax
call fcn.00451503
test eax, eax
jne 0x453bcd
mov dword [esp], str.Could_not_mount_ISO_for_Windows_To_Go_selection
call fcn.0043efa9
or eax, 0xffffffff
jmp 0x454038
mov edx, dword [0x52b144]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x19c]
mov dword [esp + 8], 0x4b62ba
shl edx, 6
mov dword [esp + 4], pe_nt_image_headers32
add edx, 0x513022
mov dword [esp], eax
mov dword [esp + 0x10], edx
call dword [sym.imp.msvcrt.dll__snprintf]
mov byte [ebp - 0x11d], 0
mov eax, ebx
call fcn.004523fa
test eax, eax
je 0x453c1e
cmp byte [ebp - 0x11c], 0
jne 0x453c46
mov dword [ebp - 0x118], 0x6d585666
mov dword [ebp - 0x11c], 0x75525c2e
mov dword [ebp - 0x116], 0x2e6c6d58
mov dword [ebp - 0x112], 0x706d74
mov eax, ebx
call fcn.0045277e
cmp byte [0x5132f7], 0
lea eax, [ebp - 0x19c]
je 0x453c61
mov eax, dword [0x525a68]
xor edi, edi
xor edx, edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edi
mov dword [esp + 8], str._1_.xml
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004506b3
test eax, eax
jne 0x453c96
mov dword [esp], str.Could_not_acquire_WIM_index
call fcn.0043efa9
jmp 0x45401e
lea eax, [ebp - 0x1c4]
mov dword [esp + 4], 0x10
xor esi, esi
mov dword [esp], eax
call fcn.0043d61c
lea eax, [ebp - 0x1b8]
mov dword [esp + 4], 0x10
mov dword [esp], eax
call fcn.0043d61c
mov dword [ebp - 0x1dc], esi
xor esi, esi
lea edi, [esi + 1]
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp], str.IMAGE_INDEX
call fcn.00427fbf
xor ecx, ecx
mov dword [esp + 4], eax
lea eax, [ebp - 0x1b8]
mov dword [esp + 8], ecx
mov dword [esp], eax
call fcn.0043d662
test eax, eax
js 0x453d96
mov dword [esp + 8], edi
lea esi, [ebp - 0x1c4]
mov dword [esp + 4], ebx
mov dword [esp], str.DISPLAYNAME
call fcn.00427fbf
xor ecx, ecx
mov dword [esp], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
call fcn.0043d662
test eax, eax
jns 0x453d8f
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp], str.DESCRIPTION
call fcn.00427fbf
xor edx, edx
mov dword [esp], esi
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call fcn.0043d662
test eax, eax
jns 0x453d85
mov dword [esp + 4], edi
mov dword [esp], str.Warning:_Could_not_find_a_description_for_image_index__d
call fcn.0043efa9
mov dword [esp + 8], 1
mov dword [esp + 4], str.Unknown_Windows_Version
mov dword [esp], esi
call fcn.0043d662
mov dword [ebp - 0x1dc], 1
mov esi, edi
jmp 0x453ccc
cmp dword [ebp - 0x1dc], 0
je 0x453dab
mov dword [esp], str.Warning:_Nonstandard_Windows_image__missing__DISPLAYNAME__entries_
call fcn.0043efa9
cmp esi, 1
jle 0x453e24
mov edx, dword [ebp - 0x1c4]
mov dword [ebp - 0x1dc], edx
mov dword [esp], 0xcdc
call fcn.0042291e
mov dword [esp], 0xcdb
mov edi, eax
call fcn.0042291e
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], esi
mov edx, dword [ebp - 0x1dc]
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 4], eax
mov dword [esp], 9
call fcn.0044703b
test eax, eax
js 0x453e15
xor esi, esi
inc esi
sar eax, 1
jne 0x453e0e
jmp 0x453e3c
mov dword [0x492b24], 0xfffffffe
jmp 0x454002
test esi, esi
jne 0x453e37
mov dword [0x492b24], 1
jmp 0x454002
mov esi, 1
mov eax, dword [ebp - 0x1b8]
lea edi, [esi + 0x3fffffff]
mov eax, dword [eax + edi*4]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
mov edx, esi
mov dword [0x492b24], eax
mov eax, ebx
call fcn.004521cc
cmp word [0x513314], 0
je 0x453e75
cmp word [0x513318], 0
jne 0x453e81
mov dword [esp], str.Warning:_Could_not_obtain_version_information_from_XML_index__Nonstandard_Windows_image__
call fcn.0043efa9
mov eax, dword [ebp - 0x1b8]
mov eax, dword [eax + edi*4]
mov dword [esp + 0xc], eax
movzx eax, word [0x513318]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x1c4]
mov eax, dword [eax + edi*4]
mov dword [esp], str.Will_use__s__Build:__d__Index__s__for_Windows_To_Go
mov dword [esp + 4], eax
call fcn.0043efa9
cmp word [0x513318], 0x3a97
ja 0x453fa2
cmp dword [0x4e2238], 0xc
je 0x454002
mov ax, word [0x492a1c]
cmp dword [0x526cd4], 1
sbb edi, edi
mov word [ebp - 0x1dc], ax
and edi, 0xffe80000
mov dword [esp], 0xc76
add edi, 0x180034
call fcn.0042291e
mov dword [esp], 0xc1a
mov esi, eax
call fcn.0042291e
mov ecx, dword [0x526d5c]
mov dword [ebp - 0x1e4], ecx
call fcn.00452330
mov dword [ebp - 0x1e0], eax
mov eax, esi
call fcn.00452330
mov esi, eax
movzx eax, word [ebp - 0x1dc]
mov dword [esp + 0xc], edi
mov dword [esp + 8], esi
mov dword [esp + 0x10], eax
mov edx, dword [ebp - 0x1e0]
mov dword [esp + 4], edx
mov ecx, dword [ebp - 0x1e4]
mov dword [esp], ecx
call dword [sym.imp.USER32.dll_MessageBoxExW]
mov dword [ebp - 0x1dc], eax
sub esp, 0x14
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov edx, dword [ebp - 0x1e0]
mov edi, eax
test edx, edx
je 0x453f79
mov dword [esp], edx
call sub.msvcrt.dll_free
test esi, esi
je 0x453f85
mov dword [esp], esi
call sub.msvcrt.dll_free
mov dword [esp], edi
call dword [sym.imp.KERNEL32.DLL_SetLastError]
push edx
cmp dword [ebp - 0x1dc], 6
je 0x453fa2
mov dword [0x492b24], 0xfffffffe
cmp word [0x513318], 0x4563
jne 0x454002
mov word [ebp - 0x1cc], 0xffff
mov dword [ebp - 0x1c8], str.https:__github.com_pbatard_rufus_wiki_FAQbsods_with_windows_to_go_drives_created_from_windows_10_1809_isos
mov dword [esp], 0xc3d
call fcn.0042291e
mov dword [esp + 4], str.Windows_To_Go
mov dword [esp], 0xc38
mov esi, eax
call fcn.0042291e
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1cc]
mov dword [esp + 8], eax
xor eax, eax
mov dword [esp + 4], eax
mov dword [esp], eax
call fcn.00446bcc
lea eax, [ebp - 0x1c4]
mov dword [esp], eax
call fcn.0043d77d
lea eax, [ebp - 0x1b8]
mov dword [esp], eax
call fcn.0043d77d
mov eax, ebx
call fcn.0045277e
cmp byte [0x5132f7], 0
jne 0x454033
call fcn.00451458
mov eax, dword [0x492b24]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret