Function at 0x4d6e12
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xd4
mov eax, 0x637add
call fcn.005b842d
mov ebx, ecx
mov dword [ebp - 0xd0], ebx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xe0], eax
xor edi, edi
mov dword [ebp - 0xc8], edi
push edi
push edi
push 0x65
push str.NGDeviceManager::CPrintUtil::FindPrinterName
push 0x129c190
push dword [0x129bd4c]
lea ecx, [ebp - 0xbc]
call fcn.0041f881
mov dword [ebp - 4], edi
mov esi, 0x83e8faff
test ebx, ebx
je 0x4d71f0
mov ecx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, di
jne 0x4d6e6e
sub ecx, edx
sar ecx, 1
je 0x4d71f0
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0xc4], edi
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0xc0]
push eax
push edi
push edi
push 5
push edi
push 2
mov ecx, 0x129c204
mov eax, dword [0x129c204]
call dword [eax + 0x10]
cmp dword [ebp - 0xc0], 0
jbe 0x4d71f5
mov dword [ebp - 0xd4], edi
mov byte [ebp - 4], 1
push dword [ebp - 0xc0]
call fcn.005261a0
pop ecx
mov ebx, eax
mov dword [ebp - 0xd4], ebx
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0xc0]
push eax
push dword [ebp - 0xc0]
push ebx
push 5
push edi
push 2
mov ecx, 0x129c204
mov eax, dword [0x129c204]
call dword [eax + 0x10]
test eax, eax
je 0x4d71c2
mov dword [ebp - 0xdc], edi
cmp edi, dword [ebp - 0xc4]
jae 0x4d71b0
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x4d7041
mov ecx, eax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, word [ebp - 0xc8]
jne 0x4d6f30
sub ecx, edx
sar ecx, 1
je 0x4d7041
mov byte [ebp - 4], 4
mov byte [ebp - 4], 3
mov byte [ebp - 4], 2
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 0x1a
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 2
mov dword [ebp - 0x18], 7
mov byte [ebp - 4], 0x1d
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 2
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
cmovae eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x1e
xor ecx, ecx
mov word [eax], cx
mov byte [ebp - 4], 2
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x2c]
push eax
push str.DeviceInstanceId
imul ecx, edi, 0x14
mov edx, str.PnPData
mov ecx, dword [ecx + ebx]
call fcn.004d720c
pop ecx
pop ecx
test eax, eax
je 0x4d6fe4
mov byte [ebp - 4], 0x20
xor eax, eax
push eax
push 1
lea ecx, [ebp - 0x2c]
call fcn.00416b1a
mov byte [ebp - 4], 0x21
mov byte [ebp - 4], 0x22
mov byte [ebp - 4], 0x23
mov byte [ebp - 4], 0x24
jmp 0x4d715b
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x2c]
call fcn.004b61bb
test eax, eax
je 0x4d701c
mov byte [ebp - 4], 0x25
xor eax, eax
push eax
push 1
lea ecx, [ebp - 0x2c]
call fcn.00416b1a
mov byte [ebp - 4], 0x26
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 0x29
jmp 0x4d715b
mov byte [ebp - 4], 0x2a
xor eax, eax
push eax
push 1
lea ecx, [ebp - 0x2c]
call fcn.00416b1a
mov byte [ebp - 4], 0x2b
mov byte [ebp - 4], 0x2c
mov byte [ebp - 4], 0x2d
mov byte [ebp - 4], 0x2e
mov byte [ebp - 4], 1
xor eax, eax
je 0x4d707a
mov ecx, eax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, word [ebp - 0xc8]
jne 0x4d704a
sub ecx, edx
sar ecx, 1
je 0x4d7078
xor eax, eax
push eax
imul eax, edi, 0x14
push dword [eax + ebx + 4]
call fcn.005ce453
pop ecx
pop ecx
test eax, eax
jne 0x4d715f
xor eax, eax
test eax, eax
je 0x4d718a
mov ecx, eax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, word [ebp - 0xc8]
jne 0x4d7087
sub ecx, edx
sar ecx, 1
je 0x4d718a
mov byte [ebp - 4], 0x31
mov byte [ebp - 4], 0x30
mov byte [ebp - 4], 0x2f
xor eax, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x48
mov byte [ebp - 4], 0x47
mov byte [ebp - 4], 0x46
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x30], 7
mov byte [ebp - 4], 0x4a
mov byte [ebp - 4], 0x49
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x44]
cmp dword [ebp - 0x30], 8
cmovae eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x4b
xor ecx, ecx
mov word [eax], cx
mov byte [ebp - 4], 0x2f
mov byte [ebp - 4], 0x4c
imul ecx, edi, 0x14
lea edx, [ebp - 0x44]
mov ecx, dword [ecx + ebx]
call fcn.004d759b
test eax, eax
je 0x4d712b
mov byte [ebp - 4], 0x4d
xor eax, eax
push eax
push 1
lea ecx, [ebp - 0x44]
call fcn.00416b1a
mov byte [ebp - 4], 0x4e
mov byte [ebp - 4], 0x4f
mov byte [ebp - 4], 0x50
mov byte [ebp - 4], 0x51
jmp 0x4d715b
xor eax, eax
push eax
lea ecx, [ebp - 0x44]
call fcn.004b61bb
test eax, eax
je 0x4d7165
mov byte [ebp - 4], 0x52
xor eax, eax
push eax
push 1
lea ecx, [ebp - 0x44]
call fcn.00416b1a
mov byte [ebp - 4], 0x53
mov byte [ebp - 4], 0x54
mov byte [ebp - 4], 0x55
mov byte [ebp - 4], 0x56
mov byte [ebp - 4], 1
inc edi
jmp 0x4d6f0b
mov byte [ebp - 4], 0x57
xor eax, eax
push eax
push 1
lea ecx, [ebp - 0x44]
call fcn.00416b1a
mov byte [ebp - 4], 0x58
mov byte [ebp - 4], 0x59
mov byte [ebp - 4], 0x5a
mov byte [ebp - 4], 0x5b
mov byte [ebp - 4], 1
imul eax, edi, 0x14
mov esi, dword [eax + ebx]
push esi
call fcn.004160c0
pop ecx
push eax
push esi
mov ecx, dword [ebp - 0xe0]
call fcn.00416b8f
xor edi, edi
mov esi, edi
mov dword [ebp - 0xcc], esi
jmp 0x4d71b2
xor edi, edi
mov eax, 0x83e8fafd
test esi, esi
cmovne esi, eax
mov dword [ebp - 0xcc], esi
mov dword [ebp - 4], edi
jmp 0x4d71e7
push ebx
call fcn.00529880
pop ecx
jmp 0x4d71f5
mov esi, 0x83e8faf7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc]
call fcn.0041f95a
mov eax, esi
call fcn.005b837a
ret