Function at 0x40dab0
Capabilities:
Check if file exists
Create process on windows
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59a378
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4a8
push ebx
push esi
push edi
mov ecx, 0xf
xor eax, eax
lea edi, [ebp - 0x60]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 0
mov dword [ebp - 0x60], 0x3c
mov dword [ebp - 0x5c], 0x40
mov dword [ebp - 0x54], 0x638f44
call fcn.0042f370
test eax, eax
je 0x40dc2c
mov eax, dword [0x663654]
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
push eax
lea ecx, [ebp - 0x1a8]
push str._sIDMIntegrator64.exe
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
add esp, 0xc
lea edx, [ebp - 0x1a8]
push edx
call edi
cmp eax, 0xffffffff
jne 0x40db4b
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
cmp eax, 2
je 0x40dc3e
mov eax, dword [0x65ec1c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 1
test eax, eax
mov eax, str._installdriver
jne 0x40db68
mov eax, str._uninstdriver
lea ecx, [ebp - 0x1a8]
push eax
push ecx
lea edx, [ebp - 0x14]
push 0x639278
push edx
call fcn.0058148b
mov ecx, 0x11
xor eax, eax
lea edi, [ebp - 0xa4]
add esp, 0x10
rep stosd dword es:[edi], eax
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0xa4]
mov dword [ebp - 0x1c], eax
push ecx
push edx
push eax
push eax
push eax
push eax
push eax
mov dword [ebp - 0x18], eax
push eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xa4], 0x44
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x40dbe7
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], al
call fcn.005886c0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 0x24]
push 0x1388
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [ebp - 0x24]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edx
call esi
mov eax, dword [ebp - 0x20]
push eax
call esi
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.005886c0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x663654]
push str.idmtdi32.sys
push ecx
lea edx, [ebp - 0x1a8]
push 0x639028
push edx
call esi
mov eax, dword [0x663654]
add esp, 0x10
lea ecx, [ebp - 0x2ac]
push str.idmtdi.inf
push eax
push 0x639028
push ecx
call esi
add esp, 0x10
lea edx, [ebp - 0x1a8]
push edx
call edi
cmp eax, 0xffffffff
jne 0x40dc90
call ebx
cmp eax, 2
je 0x40dbd2
lea eax, [ebp - 0x2ac]
push eax
call edi
cmp eax, 0xffffffff
jne 0x40dca9
call ebx
cmp eax, 2
je 0x40dbd2
mov eax, dword [ebp + 8]
xor edi, edi
cmp eax, edi
je 0x40dcc7
lea ecx, [ebp - 0x2ac]
lea edx, [ebp - 0x4b4]
push ecx
push str.SETUPAPI.DLL_InstallHinfSection_DefaultInstall_128__s
push edx
jmp 0x40dcda
lea eax, [ebp - 0x2ac]
lea ecx, [ebp - 0x4b4]
push eax
push str.SETUPAPI.DLL_InstallHinfSection_DefaultUninstall_128__s
push ecx
call esi
add esp, 0xc
mov dword [ebp - 0x50], str.RUNDLL32.EXE
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x40], edi
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x60]
lea edx, [ebp - 0x4b4]
push eax
mov dword [ebp - 0x4c], edx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
je 0x40dd1f
mov ecx, dword [ebp - 0x28]
push 0xffffffffffffffff
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4