Function at 0x438950
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48655a
mov eax, dword fs:[0]
push eax
sub esp, 0x80
mov eax, dword [0x4b185c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
push 0x66
mov ecx, dword [ebp - 0x30]
call fcn.00459b22
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x30]
mov dword [edx], vtable.CManageWizard.0
mov ecx, dword [ebp - 0x30]
add ecx, 0xac
call fcn.0042db30
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x30]
add ecx, 0x1b4
call fcn.004160e0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x30]
add ecx, 0x1d0
call fcn.00426630
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x30]
add ecx, 0x1e4
call fcn.0043fe40
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x30]
add ecx, 0x1fc
call fcn.004383e0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x30]
add ecx, 0x284
call fcn.00449ad0
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x30]
add ecx, 0x3c4
call fcn.004478d0
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x30]
add ecx, 0x4e8
call fcn.00444ba0
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x30]
add ecx, 0x6ac
call fcn.00448a30
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x30]
add ecx, 0x768
call fcn.0044bcf0
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x30]
add ecx, 0x7f0
call fcn.00442740
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x30]
add ecx, 0x880
call fcn.00443120
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x30]
add ecx, 0x994
call fcn.00441700
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x30]
add ecx, 0xa90
call fcn.00442ae0
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x30]
add ecx, 0xb8c
call fcn.00440c90
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x30]
add ecx, 0xc88
call fcn.00441fc0
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x30]
add ecx, 0xd98
call fcn.00443bc0
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x30]
add ecx, 0xe78
call fcn.0044c660
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x30]
add ecx, 0xf78
call fcn.0044db40
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x30]
add ecx, 0x1058
call fcn.0044aea0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x30]
add ecx, 0x1150
call fcn.0044df40
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x30]
add ecx, 0x128c
call fcn.0044ec90
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x30]
add ecx, 0x1314
call fcn.0044f1e0
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x30]
add ecx, 0x1428
call fcn.00450220
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x30]
add ecx, 0x14b0
call fcn.00450060
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x30]
add ecx, 0x1538
call fcn.0044fe80
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x30]
mov dword [eax + 0x15c8], 0
mov ecx, dword [ebp - 0x30]
mov byte [ecx + 0x15cc], 0
mov edx, dword [ebp - 0x30]
mov byte [edx + 0x15cd], 0
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x15ce], 0
mov ecx, dword [ebp - 0x30]
mov byte [ecx + 0x15cf], 0
mov edx, dword [ebp - 0x30]
mov byte [edx + 0x15d0], 0
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x15d1], 0
mov ecx, dword [ebp - 0x30]
mov byte [ecx + 0x15d2], 0
mov edx, dword [ebp - 0x30]
mov byte [edx + 0x15d3], 0
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x15d4], 0
mov ecx, dword [ebp - 0x30]
mov byte [ecx + 0x15d5], 0
mov edx, dword [ebp - 0x30]
mov byte [edx + 0x15d6], 0
mov eax, dword [ebp - 0x30]
mov dword [eax + 0x15d8], 0
mov ecx, dword [ebp - 0x30]
add ecx, 0x15dc
call fcn.0040e380
mov byte [ebp - 4], 0x1b
push 0x490632
mov ecx, dword [ebp - 0x30]
add ecx, 0x15e0
call fcn.0040e440
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x30]
add ecx, 0x15e4
call fcn.00426630
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x30]
mov byte [ecx + 0x15f8], 0
mov ecx, dword [ebp - 0x30]
add ecx, 0x15fc
call fcn.0040e380
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x30]
add ecx, 0x1600
call fcn.004409b0
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x30]
add ecx, 0x1608
call fcn.004409b0
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x30]
add ecx, 0x1610
call fcn.00440850
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x30]
add ecx, 0x1618
call fcn.0040e380
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x30]
add ecx, 0x161c
call fcn.0040e380
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x30]
add ecx, 0x1620
call fcn.0040e380
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x30]
add ecx, 0x1624
call fcn.0040e380
mov byte [ebp - 4], 0x25
push 0x490633
mov ecx, dword [ebp - 0x30]
add ecx, 0x1628
call fcn.0040e440
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x30]
mov byte [edx + 0x162c], 0
push 0x490634
mov ecx, dword [ebp - 0x30]
add ecx, 0x1630
call fcn.00402350
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x30]
call fcn.00440c60
mov ecx, dword [ebp - 0x30]
call fcn.004395e0
mov ecx, dword [ebp - 0x30]
call fcn.00439700
push str.DriverWizard_Started
lea ecx, [ebp - 0x1c]
call fcn.0040e440
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x30]
call fcn.00439830
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1c]
call fcn.0040e4c0
push 0x90
mov ecx, dword [ebp - 0x30]
add ecx, 0x1600
call fcn.00440aa0
push 0x91
mov ecx, dword [ebp - 0x30]
add ecx, 0x1608
call fcn.00440aa0
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx + 0x58]
or edx, 0x1198000
mov eax, dword [ebp - 0x30]
mov dword [eax + 0x58], edx
mov ecx, dword [ebp - 0x30]
add ecx, 0x1600
call fcn.00412410
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 0x84], eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x1608
call fcn.00412410
mov edx, dword [ebp - 0x30]
mov dword [edx + 0x7c], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0x58]
and ecx, 0xfffffdff
mov edx, dword [ebp - 0x30]
mov dword [edx + 0x58], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x1fc
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x34]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x284
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x38]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x3c4
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x3c]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x4e8
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x40]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x6ac
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x44]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x768
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x48]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x7f0
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x4c]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x880
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x50]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x994
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x54]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0xa90
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x58]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0xb8c
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x5c]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0xc88
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x60]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0xd98
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x64]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0xe78
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x68]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0xf78
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x6c]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x1058
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x70]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x1150
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x74]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x128c
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x78]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x1314
call fcn.0045850c
add eax, 4
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
and ecx, 0xffffffdf
mov edx, dword [ebp - 0x7c]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push eax
lea ecx, [ebp - 0x10]
call fcn.0040e440
mov byte [ebp - 4], 0x29
push str._vendor
lea ecx, [ebp - 0x20]
call fcn.0040e440
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
push ecx
lea edx, [ebp - 0x24]
push edx
mov ecx, dword [ebp - 0x30]
call fcn.0043dea0
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x84], eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x84]
push ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x15dc
call fcn.0040e510
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x24]
call fcn.0040e4c0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x20]
call fcn.0040e4c0
push 0
push 0x490658
lea ecx, [ebp - 0x10]
call fcn.0040ddd0
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x43919a
call fcn.0042db20
mov dword [ebp - 0x18], eax
push 0x49065c
lea ecx, [ebp - 0x28]
call fcn.0040e440
mov byte [ebp - 4], 0x2c
push 0
lea edx, [ebp - 0x28]
push edx
mov ecx, dword [ebp - 0x18]
call fcn.004101e0
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 0x15c0], eax
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x28]
call fcn.0040e4c0
mov edx, dword [ebp - 0x14]
add edx, 1
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
call fcn.00415830
mov dword [ebp - 0x88], eax
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x8c], ecx
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x8c]
push edx
mov ecx, dword [ebp - 0x30]
add ecx, 0x15e0
call fcn.0040e510
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x2c]
call fcn.0040e4c0
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x15d2], 1
mov ecx, dword [ebp - 0x30]
call fcn.00439b40
mov ecx, dword [ebp - 0x30]
call fcn.00439bf0
mov ecx, dword [ebp - 0x30]
add ecx, 0x1150
push ecx
mov ecx, dword [ebp - 0x30]
call fcn.004598c1
mov edx, dword [ebp - 0x30]
add edx, 0x128c
push edx
mov ecx, dword [ebp - 0x30]
call fcn.004598c1
mov eax, dword [ebp - 0x30]
add eax, 0x1314
push eax
mov ecx, dword [ebp - 0x30]
call fcn.004598c1
jmp 0x43923f
push 0
push str.autodetect
lea ecx, [ebp - 0x10]
call fcn.0040ddd0
test eax, eax
jl 0x4391c1
mov ecx, dword [ebp - 0x30]
mov byte [ecx + 0x15cf], 1
mov ecx, dword [ebp - 0x30]
call fcn.00439cc0
jmp 0x43923f
push 0
push 0x490670
lea ecx, [ebp - 0x10]
call fcn.0040ddd0
test eax, eax
jl 0x4391fc
push 0
push str.noremove
lea ecx, [ebp - 0x10]
call fcn.0040ddd0
cmp eax, 0xffffffff
jne 0x4391fc
mov edx, dword [ebp - 0x30]
mov byte [edx + 0x15d0], 1
mov ecx, dword [ebp - 0x30]
call fcn.00439c50
jmp 0x43923f
mov ecx, dword [ebp - 0x30]
call fcn.0043f3d0
test eax, eax
jne 0x43921c
push 1
mov ecx, dword [ebp - 0x30]
call fcn.00438850
mov ecx, dword [ebp - 0x30]
call fcn.00439d30
jmp 0x43923f
mov eax, dword [ebp - 0x30]
add eax, 0x1fc
push eax
mov ecx, dword [ebp - 0x30]
call fcn.004598c1
mov ecx, dword [ebp - 0x30]
add ecx, 0x284
push ecx
mov ecx, dword [ebp - 0x30]
call fcn.004598c1
push 1
mov ecx, dword [ebp - 0x30]
call fcn.0043f620
mov edx, dword [ebp - 0x30]
mov dword [edx + 0x1f8], 1
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x10]
call fcn.0040e4c0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 8