Function at 0x4b2db6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x10c
mov eax, 0x62d48c
call fcn.005b83bf
mov esi, ecx
push 0x1296e98
call fcn.0041e42c
pop ecx
push dword [esi + 0xac]
mov edx, str.QueryMetadata___start_::Services:
push ecx
mov ecx, eax
call fcn.0041e267
pop ecx
mov ecx, eax
call fcn.0041b52a
push eax
call fcn.0041e42c
pop ecx
xor edi, edi
xor ebx, ebx
inc edi
or ecx, 0xffffffff
mov dword [ebp - 4], edi
mov byte [ebp - 4], bl
mov eax, dword [esi + 0x14]
mov dword [ebp - 4], ecx
test eax, eax
je 0x4b2e61
mov dword [ebp - 4], 5
mov byte [ebp - 4], 4
mov eax, dword [esi + 0xa4]
mov dword [ebp - 4], ecx
test eax, eax
je 0x4b2e61
mov dword [ebp - 4], 9
mov byte [ebp - 4], 8
mov eax, dword [esi + 0x8c]
mov dword [ebp - 4], ecx
test eax, eax
je 0x4b2e61
cmp dword [esi + 0xac], ebx
jne 0x4b372c
mov dword [ebp - 4], 0xd
mov byte [ebp - 4], 0xc
mov eax, dword [esi + 0x5c]
mov dword [ebp - 4], ecx
test eax, eax
je 0x4b372c
push 0x1296e98
call fcn.0041e42c
pop ecx
push dword [esi + 0xac]
mov edx, str.QueryMetadata___inside_if_loop__::Services:
push ecx
mov ecx, eax
call fcn.0041e267
pop ecx
mov ecx, eax
call fcn.0041b52a
push eax
call fcn.0041e42c
pop ecx
mov ecx, esi
call fcn.004b2c75
test al, al
jne 0x4b372c
push 0x1296e98
call fcn.0041e42c
pop ecx
push dword [esi + 0xac]
mov edx, str.QueryMetadata___inside_ReadFromCache__::Services:
push ecx
mov ecx, eax
call fcn.0041e267
pop ecx
mov ecx, eax
call fcn.0041b52a
push eax
call fcn.0041e42c
pop ecx
lea eax, [ebp - 0xe4]
mov dword [ebp - 0xe4], ebx
push eax
mov eax, dword [0x129b9a0]
mov ecx, 0x129b9a0
push 0x6bccac
push edi
push ebx
push 0x6bccbc
call dword [eax]
test eax, eax
js 0x4b372c
cmp dword [ebp - 0xe4], 0
je 0x4b372c
push str.Content_Type:_application_soapxml_r_n
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xf0], ebx
call fcn.0041b35f
lea ecx, [ebp - 0x5c]
mov dword [ebp - 4], 0x10
call fcn.0041b4c3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.0041b4c3
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x30], 7
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x44]
cmp dword [ebp - 0x30], 8
mov dword [ebp - 0x34], ebx
cmovae eax, dword [ebp - 0x44]
xor ecx, ecx
mov byte [ebp - 4], 0x2f
mov word [eax], cx
mov byte [ebp - 4], 0x33
lea edi, [esi + 0x4c]
mov byte [ebp - 4], 0x31
cmp dword [edi + 0x14], 8
jb 0x4b2f7a
mov eax, dword [edi]
jmp 0x4b2f7c
mov eax, edi
push 0x50
push eax
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x30
call fcn.004b663d
mov byte [ebp - 4], 0x37
mov byte [ebp - 4], 0x35
cmp dword [edi + 0x14], 8
jb 0x4b2fa0
mov eax, dword [edi]
jmp 0x4b2fa2
mov eax, edi
push 0xf47
push eax
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x34
call fcn.004b663d
mov byte [ebp - 4], 0x3b
mov byte [ebp - 4], 0x39
cmp dword [edi + 0x14], 8
jb 0x4b2fc7
mov edi, dword [edi]
push 0xf46
push edi
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x38
call fcn.004b663d
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x3c
push eax
mov ecx, esi
call fcn.004b2a81
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0xd8]
push eax
push 0x80b254
push 0x80b260
lea ecx, [ebp - 0x10c]
call fcn.004b66da
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
test al, al
jne 0x4b3045
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0xd8]
push eax
push 0x80b254
push 0x80b260
lea ecx, [ebp - 0x100]
call fcn.004b66da
test al, al
je 0x4b323f
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
cmovae ecx, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x3d
mov eax, dword [ebp - 0x1c]
add eax, ecx
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
cmovae ecx, dword [ebp - 0x2c]
push eax
push ecx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x3c
call fcn.004b51ab
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0x44]
cmp dword [ebp - 0x30], 8
cmovae eax, dword [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x3c
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edx, dword [0x129b9a4]
mov ebx, eax
lea eax, [ebp - 0xf0]
mov ecx, 0x129b9a4
push eax
push ebx
push dword [ebp - 0xe4]
call dword [edx + 4]
test eax, eax
js 0x4b323f
and dword [ebp - 0xe0], 0
lea ecx, [ebp - 0xe8]
and dword [ebp - 0xdc], 0
push str.___local_name__Body____local_name__Metadata____local_name__MetadataSection____local_name__ThisDevice____local_name__SerialNumber_
call fcn.00420ec4
mov byte [ebp - 4], 0x44
lea edx, [ebp - 0xe0]
mov eax, dword [ebp - 0xe4]
push edx
push dword [ebp - 0xe8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
mov ecx, dword [ebp - 0xe0]
test ecx, ecx
je 0x4b3148
mov eax, dword [ecx]
lea edx, [ebp - 0xdc]
push edx
push ecx
call dword [eax + 0x68]
push dword [ebp - 0xdc]
call fcn.004160c0
pop ecx
push eax
push dword [ebp - 0xdc]
lea ecx, [esi + 0x94]
call fcn.0041bf96
push dword [ebp - 0xdc]
call edi
mov eax, dword [0x129b9a4]
mov ecx, 0x129b9a4
push dword [ebp - 0xe0]
call dword [eax + 0x58]
push str.___local_name__Body____local_name__Metadata____local_name__MetadataSection____local_name__ThisModel____local_name__Manufacturer_
lea ecx, [ebp - 0xec]
call fcn.00420ec4
mov byte [ebp - 4], 0x45
lea edx, [ebp - 0xe0]
mov eax, dword [ebp - 0xe4]
push edx
push dword [ebp - 0xec]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
mov ecx, dword [ebp - 0xe0]
test ecx, ecx
je 0x4b31c5
mov eax, dword [ecx]
lea edx, [ebp - 0xdc]
push edx
push ecx
call dword [eax + 0x68]
push dword [ebp - 0xdc]
call fcn.004160c0
pop ecx
push eax
push dword [ebp - 0xdc]
lea ecx, [esi + 0x64]
call fcn.0041bf96
push dword [ebp - 0xdc]
call edi
mov eax, dword [0x129b9a4]
mov ecx, 0x129b9a4
push dword [ebp - 0xe0]
call dword [eax + 0x58]
push str.___local_name__Body____local_name__Metadata____local_name__MetadataSection____local_name__Relationship____local_name__Hosted____local_name__Types__text___contains_._PrinterServiceType__
lea ecx, [ebp - 0xf4]
call fcn.00420ec4
mov byte [ebp - 4], 0x46
lea edx, [ebp - 0xe0]
mov eax, dword [ebp - 0xe4]
push edx
push dword [ebp - 0xf4]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
cmp dword [ebp - 0xe0], 0
je 0x4b3218
or dword [esi + 0xac], 1
mov ecx, 0x129b9a4
mov eax, dword [0x129b9a4]
push dword [ebp - 0xe0]
call dword [eax + 0x58]
push ebx
call edi
mov byte [ebp - 4], 0x45
push dword [ebp - 0xf4]
call edi
mov byte [ebp - 4], 0x44
push dword [ebp - 0xec]
call edi
mov byte [ebp - 4], 0x3c
push dword [ebp - 0xe8]
call edi
test byte [esi + 0xac], 1
je 0x4b34e4
lea eax, [ebp - 0x5c]
mov ecx, esi
push eax
call fcn.004b2b7b
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0xd8]
push eax
push 0x80b254
push 0x80b260
lea ecx, [ebp - 0x100]
call fcn.004b66da
test al, al
je 0x4b34e4
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
cmovae ecx, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x47
mov eax, dword [ebp - 0x1c]
add eax, ecx
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
cmovae ecx, dword [ebp - 0x2c]
push eax
push ecx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x3c
call fcn.004b51ab
mov byte [ebp - 4], 0x4b
lea eax, [ebp - 0x44]
cmp dword [ebp - 0x30], 8
cmovae eax, dword [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x3c
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edx, dword [0x129b9a4]
mov ebx, eax
lea eax, [ebp - 0xf0]
mov ecx, 0x129b9a4
push eax
push ebx
push dword [ebp - 0xe4]
call dword [edx + 4]
test eax, eax
js 0x4b34e1
and dword [ebp - 0xe0], 0
lea ecx, [ebp - 0xe8]
and dword [ebp - 0xdc], 0
push str.___local_name__Body___local_name__GetPrinterElementsResponse___local_name__PrinterElements___local_name__ElementData___local_name__PrinterDescription___local_name__DeviceId_
call fcn.00420ec4
mov byte [ebp - 4], 0x4e
lea edx, [ebp - 0xe0]
mov eax, dword [ebp - 0xe4]
push edx
push dword [ebp - 0xe8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
mov ecx, dword [ebp - 0xe0]
test ecx, ecx
je 0x4b34d5
mov eax, dword [ecx]
lea edx, [ebp - 0xdc]
push edx
push ecx
call dword [eax + 0x68]
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x74]
call fcn.0041b35f
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x4f
push eax
lea ecx, [ebp - 0xc0]
call fcn.004b5918
push 0
push 1
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x52
call fcn.00416b1a
push 0x808f58
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [ebp - 0xc0]
call fcn.004b597a
push eax
lea ecx, [esi + 0x64]
mov byte [ebp - 4], 0x57
call fcn.0041d4ea
push 0
push 1
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x58
call fcn.00416b1a
push 0x808f60
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [ebp - 0xc0]
call fcn.004b597a
push eax
lea ecx, [esi + 0x7c]
mov byte [ebp - 4], 0x5d
call fcn.0041d4ea
push 0
push 1
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x5e
call fcn.00416b1a
push 0x80b7fc
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [ebp - 0xc0]
call fcn.004b597a
push 0x80b804
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x63
push eax
lea ecx, [ebp - 0xc0]
call fcn.004b597a
push 0x808f80
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x64
call fcn.0041e772
test eax, eax
jne 0x4b3458
push 0x808f88
lea ecx, [ebp - 0x8c]
call fcn.0041e772
test eax, eax
jne 0x4b3458
or dword [esi + 0xac], 0x80
push 0x1296e98
call fcn.0041e42c
pop ecx
push dword [esi + 0xac]
mov edx, str.QueryMetadata___inside_Service_PclPrint__::Services:
push ecx
mov ecx, eax
call fcn.0041e267
pop ecx
mov ecx, eax
call fcn.0041b52a
push eax
call fcn.0041e42c
pop ecx
push dword [ebp - 0xdc]
call edi
mov eax, dword [0x129b9a4]
mov ecx, 0x129b9a4
push dword [ebp - 0xe0]
call dword [eax + 0x58]
push 0
push 1
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x65
call fcn.00416b1a
push 0
push 1
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x6a
call fcn.00416b1a
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x4e
call fcn.004b5967
mov byte [ebp - 4], 0x3c
push dword [ebp - 0xe8]
call edi
push ebx
call edi
push 0x6da9f5
lea ecx, [ebp - 0x8c]
call fcn.0041b494
push 0x6d970c
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x6f
call fcn.0041b35f
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x70
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0xa4]
push eax
push 0x7e76c0
push str._DevMgmt_DiscoveryTree.xml
lea ecx, [ebp - 0x118]
call fcn.004b66da
mov bl, al
push 0
push 1
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x71
call fcn.00416b1a
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x3c
call fcn.0041b40b
test bl, bl
je 0x4b36a3
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
cmovae ecx, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x76
mov eax, dword [ebp - 0x1c]
add eax, ecx
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
cmovae ecx, dword [ebp - 0x2c]
push eax
push ecx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x3c
call fcn.004b51ab
mov byte [ebp - 4], 0x7a
lea eax, [ebp - 0x44]
cmp dword [ebp - 0x30], 8
cmovae eax, dword [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x3c
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edx, dword [0x129b9a4]
mov ebx, eax
lea eax, [ebp - 0xf0]
mov ecx, 0x129b9a4
push eax
push ebx
push dword [ebp - 0xe4]
call dword [edx + 4]
test eax, eax
js 0x4b36a0
push str.___local_name__SupportedIfc___local_name__ResourceType__text___contains_._hpLedmScanJobManifest__
lea ecx, [ebp - 0xec]
call fcn.00420ec4
push str.___local_name__SupportedIfc___local_name__ResourceType__text___contains_._eSclManifest__
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x7d
call fcn.00420ec4
mov byte [ebp - 4], 0x7e
lea edx, [ebp - 0xdc]
mov eax, dword [ebp - 0xe4]
and dword [ebp - 0xdc], 0
or dword [esi + 0xac], 0x10
push edx
push dword [ebp - 0xec]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
cmp dword [ebp - 0xdc], 0
je 0x4b3649
or dword [esi + 0xac], 2
mov ecx, 0x129b9a4
mov eax, dword [0x129b9a4]
push dword [ebp - 0xdc]
call dword [eax + 0x58]
mov eax, dword [ebp - 0xe4]
lea edx, [ebp - 0xdc]
push edx
push dword [ebp - 0xe8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
cmp dword [ebp - 0xdc], 0
je 0x4b3688
or dword [esi + 0xac], 0x40
mov ecx, 0x129b9a4
mov eax, dword [0x129b9a4]
push dword [ebp - 0xdc]
call dword [eax + 0x58]
mov byte [ebp - 4], 0x7d
push dword [ebp - 0xe8]
call edi
mov byte [ebp - 4], 0x3c
push dword [ebp - 0xec]
call edi
push ebx
call edi
mov eax, dword [0x129b9a4]
mov ecx, 0x129b9a4
push dword [ebp - 0xe4]
call dword [eax + 0x58]
mov ecx, esi
call fcn.004b2d22
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x38
call fcn.004b66a9
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x34
call fcn.004b66a9
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x30
call fcn.004b66a9
push 0
push 1
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x7f
call fcn.00416b1a
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.0041b40b
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x10
call fcn.0041b40b
push 0
push 1
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0x84
call fcn.00416b1a
or dword [ebp - 4], 0xffffffff
call fcn.005b8369
ret