Function at 0x1000220e
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1020
call fcn.10045a10
mov eax, dword [0x1005e650]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
and dword [ebp - 0x101c], 0
cmp dword [ebp + 0x10], 2
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
mov dword [ebp - 0x1014], eax
mov eax, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x1018], ecx
mov dword [ebp - 0x1010], edx
mov ebx, 0xdbba00
jne 0x10002377
push ecx
push 0x1e
push eax
lea eax, [ebp - 0x100c]
push str._n_n___WARNING:_This_is_an_experimental_version_of_the_n_______________________s_driver__n______________________which_is_intended_for_testing_purposes_only._n______________________It_will_not_be_able_to_start_or_restart_after__d_days._n______________________It_is_intended_ONLY_for_the_customer_to_whom_it_was_n______________________directly_provided._n______________________It_is_solely_for_the_purpose_of_testing_the_specific_fixes__n______________________outlined_in_readme__s.html._n______________________It_MUST_only_be_used_in_a_system_with_appropriate_n______________________supervision.
push eax
call esi
add esp, 0x14
push dword [ebp - 0x1014]
mov edi, eax
mov ebx, 0xcdfe600
call fcn.10002599
cmp eax, 1
pop ecx
mov dword [ebp - 0x101c], eax
jne 0x100022a7
push 0x3c
push 0x1e
lea eax, [ebp + edi - 0x100c]
push str._n_n______________________This_driver_has_exceeded_its__d_day_trial_period_and_n______________________will_go_offline_in__d_hours_time.
push eax
call esi
add esp, 0x10
add edi, eax
cmp dword [ebp - 0x1010], 0
je 0x100022c8
push dword [ebp - 0x1010]
lea eax, [ebp + edi - 0x100c]
push str._n_n_______________________s
push eax
call esi
add esp, 0xc
push str.Driver_Warning
push 1
push 0x64
push 0
push 1
push 0x100727c0
call sub.DRVUTILS.dll_Ordinal_1
mov eax, dword [0x100727c0]
add esp, 0x18
test eax, eax
je 0x1000231b
push dword [ebp - 0x1018]
push eax
call sub.DRVUTILS.dll_Ordinal_3
push 1
push 2
lea eax, [ebp - 0x100c]
push eax
push dword [0x100727c0]
call sub.DRVUTILS.dll_Ordinal_8
push dword [0x100727c0]
call sub.DRVUTILS.dll_Ordinal_12
add esp, 0x1c
push dword [ebp - 0x1014]
mov esi, dword [sym.imp.MSVCR80.dll__strdup]
xor edi, edi
inc edi
call esi
pop ecx
push dword [ebp - 0x1018]
mov dword [0x10072790], eax
call esi
pop ecx
push dword [ebp - 0x1010]
mov dword [0x10072794], eax
call esi
cmp dword [ebp - 0x101c], edi
mov dword [esp], 0x10072790
mov dword [0x10072798], eax
mov dword [0x1007279c], ebx
push 0
jne 0x100023d1
push 0x1000211e
call dword [sym.imp.MSVCR80.dll__beginthread]
mov dword [0x100727ac], edi
jmp 0x100023dc
test eax, eax
je 0x10002390
push eax
push ecx
lea eax, [ebp - 0x100c]
push str._n_n_n___WARNING:_You_are_running_a_restricted_version_of_the__s_driver._n______________________The_driver_description___version_information_is:_n_______________________.80s_n______________________The_restriction_is_due_to_it_not_being_a_final_Release_or_n______________________because_it_requires_a_license_but_none_was_found._n______________________This_driver_will_run_for_a_limited_time_for_testing_and_n______________________MUST_NOT_be_used_in_a_production_environment.
push eax
call esi
add esp, 0x10
jmp 0x100023a2
push ecx
lea eax, [ebp - 0x100c]
push str._n_n_n___WARNING:_You_are_running_a_restricted_version_of_the__s_driver._n______________________The_restriction_is_due_to_it_not_being_a_final_Release_or_n______________________because_it_requires_a_license_but_none_was_found._n______________________This_driver_will_run_for_a_limited_time_for_testing_and_n______________________MUST_NOT_be_used_in_a_production_environment.
push eax
call esi
add esp, 0xc
cmp dword [ebp + 0x10], 0
mov edi, eax
jne 0x100022a7
push 4
lea eax, [ebp + edi - 0x100c]
push str._n_n______________________This_driver_is_time_limited_and_will_go_offline_in__d_hours_time.
push eax
mov dword [ebp - 0x101c], 1
call esi
add esp, 0xc
jmp 0x100022a5
push 0x10002185
call dword [sym.imp.MSVCR80.dll__beginthread]
mov ecx, dword [ebp - 8]
add esp, 0xc
pop edi
pop esi
xor ecx, ebp
mov dword [0x100727bc], eax
pop ebx
call fcn.1004510e
leave
ret