Function at 0x524640
Capabilities:
Check if file exists
Copy file
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x579225
mov eax, dword fs:[0]
push eax
sub esp, 0x4cc
mov eax, dword [0x5d7050]
xor eax, esp
mov dword [esp + 0x4c8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5d7050]
xor eax, esp
push eax
lea eax, [esp + 0x4e0]
mov dword fs:[0], eax
mov esi, dword [esp + 0x4f4]
mov eax, dword [esp + 0x4f0]
xor ebp, ebp
cmp esi, ebp
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], edx
je 0x524ccb
mov dword [eax], ebp
mov eax, dword [0x619880]
cmp eax, ebp
jne 0x5246b4
call fcn.00418600
mov dword [0x619880], eax
mov ebx, eax
call fcn.005233a0
test eax, eax
je 0x5246cc
call fcn.00522c80
test al, al
jne 0x524c0a
lea ecx, [esp + 0xb0]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
push esi
lea eax, [esp + 0xd0]
push 0x104
push eax
mov dword [esp + 0x4f4], ebp
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
add esp, 0xc
lea ecx, [esp + 0xcc]
push ecx
lea ecx, [esp + 0xb4]
call dword [0x582408]
push str.drivers
lea ecx, [esp + 0xb4]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
push 0x58bff8
lea ecx, [esp + 0xb4]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
push str.drivers
lea edx, [esp + 0xd0]
push edx
call esi
cmp ebx, 6
lea eax, [esp + 0xcc]
jne 0x524758
push 0x5af4cc
jmp 0x52475d
push 0x5af4d4
push eax
call esi
lea ecx, [esp + 0xcc]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
lea ecx, [esp + 0x94]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea ecx, [esp + 0x5c]
mov byte [esp + 0x4e8], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea edx, [esp + 0xcc]
push edx
lea ecx, [esp + 0x7c]
mov byte [esp + 0x4ec], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
push 0x206
lea eax, [esp + 0x2da]
push ebp
mov byte [esp + 0x4f0], 3
push eax
mov word [esp + 0x2e0], bp
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x104
lea ecx, [esp + 0x2d8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
call fcn.00418760
cmp eax, 2
mov edi, dword [sym.imp.MSVCP80.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
mov dword [esp + 0x1c], eax
jne 0x5248e5
push str.installdrv64.exe
lea edx, [esp + 0xb4]
push edx
lea eax, [esp + 0x30]
push eax
call edi
add esp, 0xc
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x4ec], 4
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
lea ecx, [esp + 0x28]
mov byte [esp + 0x4e8], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
cmp ebx, 6
lea ecx, [esp + 0x78]
lea edx, [esp + 0x28]
jne 0x52487c
push str.liebaonat64_xp.sys
push ecx
push edx
call edi
add esp, 0xc
push eax
lea ecx, [esp + 0x98]
mov byte [esp + 0x4ec], 5
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
lea ecx, [esp + 0x28]
mov byte [esp + 0x4e8], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str.driversliebaonat64_xp.sys
jmp 0x5248b5
push str.liebaonat64.sys
push ecx
push edx
call edi
add esp, 0xc
push eax
lea ecx, [esp + 0x98]
mov byte [esp + 0x4ec], 6
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
lea ecx, [esp + 0x28]
mov byte [esp + 0x4e8], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str.driversliebaonat64.sys
lea eax, [esp + 0x2d8]
push eax
call esi
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x5249ac
push str.Wow64EnableWow64FsRedirection
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebp, eax
jmp 0x5249ac
push str.installdrv.exe
lea ecx, [esp + 0xb4]
push ecx
lea edx, [esp + 0x30]
push edx
call edi
add esp, 0xc
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x4ec], 7
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
lea ecx, [esp + 0x28]
mov byte [esp + 0x4e8], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
cmp ebx, 6
lea eax, [esp + 0x78]
lea ecx, [esp + 0x28]
jne 0x524969
push str.liebaonat_xp.sys
push eax
push ecx
call edi
add esp, 0xc
push eax
lea ecx, [esp + 0x98]
mov byte [esp + 0x4ec], 8
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
lea ecx, [esp + 0x28]
mov byte [esp + 0x4e8], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str.driversliebaonat_xp.sys
jmp 0x5249a2
push str.liebaonat.sys
push eax
push ecx
call edi
add esp, 0xc
push eax
lea ecx, [esp + 0x98]
mov byte [esp + 0x4ec], 9
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
lea ecx, [esp + 0x28]
mov byte [esp + 0x4e8], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str.driversliebaonat.sys
lea edx, [esp + 0x2d8]
push edx
call esi
mov ecx, dword [esp + 0x60]
mov edi, 8
cmp dword [esp + 0x74], edi
jae 0x5249bf
lea ecx, [esp + 0x60]
cmp dword [esp + 0xac], edi
mov eax, dword [esp + 0x98]
jae 0x5249d6
lea eax, [esp + 0x98]
push ecx
push eax
push str.CheckNatIsOK__Driver:_s__Install:_s
mov ecx, 0x6180b8
call fcn.00435a30
mov eax, dword [esp + 0xa4]
add esp, 0xc
cmp dword [esp + 0xac], edi
jae 0x524a01
lea eax, [esp + 0x98]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x524c7a
mov edx, 1
mov ecx, str.kwifi_first_nat
call fcn.0048b4f0
test eax, eax
mov ecx, dword [esp + 0x24]
mov dword [ecx], eax
je 0x524a38
push 0
mov ecx, str.kwifi_first_nat
call fcn.0046ffc0
add esp, 4
call fcn.00523460
test ebp, ebp
je 0x524a45
push 0
call ebp
cmp dword [esp + 0xac], edi
mov eax, dword [esp + 0x98]
jae 0x524a5c
lea eax, [esp + 0x98]
push 0
lea edx, [esp + 0x2d8]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test ebp, ebp
je 0x524a75
push 1
call ebp
lea eax, [esp + 0x28]
push eax
call fcn.005236f0
cmp dword [esp + 0x1c], 2
mov byte [esp + 0x4e8], 0xa
mov ecx, dword [esp + 0x7c]
jne 0x524af6
cmp ebx, 6
jne 0x524acc
cmp dword [esp + 0x90], edi
jae 0x524aa4
lea ecx, [esp + 0x7c]
cmp dword [esp + 0x74], edi
mov eax, dword [esp + 0x60]
jae 0x524ab2
lea eax, [esp + 0x60]
mov esi, dword [esp + 0x18]
push ecx
push esi
push 0xffffffffffffffff
push str._v__l_liebaonat64_xp.inf__m_liebaonat64_xp_m.inf__c_s__i_liebaonat
push eax
xor ecx, ecx
call fcn.00418290
jmp 0x524b59
cmp dword [esp + 0x90], edi
jae 0x524ad9
lea ecx, [esp + 0x7c]
cmp dword [esp + 0x74], edi
mov eax, dword [esp + 0x60]
jae 0x524ae7
lea eax, [esp + 0x60]
push ecx
mov ecx, dword [esp + 0x1c]
push ecx
push 0xffffffffffffffff
push str._v__l_liebaonat64.inf__c_s__i_liebaonat
jmp 0x524b4d
cmp ebx, 6
jne 0x524b25
cmp dword [esp + 0x90], edi
jae 0x524b08
lea ecx, [esp + 0x7c]
cmp dword [esp + 0x74], edi
mov eax, dword [esp + 0x60]
jae 0x524b16
lea eax, [esp + 0x60]
mov edx, dword [esp + 0x18]
push ecx
push edx
push 0xffffffffffffffff
push str._v__l_liebaonat_xp.inf__m_liebaonat_xp_m.inf__c_s__i_liebaonat
jmp 0x524b4d
cmp dword [esp + 0x90], edi
jae 0x524b32
lea ecx, [esp + 0x7c]
cmp dword [esp + 0x74], edi
mov eax, dword [esp + 0x60]
jae 0x524b40
lea eax, [esp + 0x60]
push ecx
mov ecx, dword [esp + 0x1c]
push ecx
push 0xffffffffffffffff
push str._v__l_liebaonat.inf__c_s__i_liebaonat
push eax
xor ecx, ecx
call fcn.00418290
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
add esp, 0x14
test eax, eax
je 0x524b68
mov edx, dword [esi]
mov dword [eax], edx
mov eax, dword [esi]
test eax, eax
je 0x524b81
push eax
push str.namespace_InstallDriver_Ret__x
mov ecx, 0x6180b8
call fcn.00435a30
add esp, 8
lea eax, [esp + 0x28]
push eax
mov byte [esp + 0x4ec], 3
call fcn.005238d0
call fcn.005233a0
test eax, eax
je 0x524c14
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.CheckNatIsOK__Success
mov ecx, 0x6180b8
call fcn.00435a30
add esp, 4
lea ecx, [esp + 0x78]
mov byte [esp + 0x4e8], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x5c]
mov byte [esp + 0x4e8], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x94]
mov byte [esp + 0x4e8], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0xb0]
mov dword [esp + 0x4e8], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, 1
jmp 0x524ccd
call fcn.00523410
push str.CheckNatIsOK__Load_Driver_Failed
mov ecx, 0x6180b8
call fcn.00435a30
mov ecx, dword [esp + 0x80]
add esp, 4
cmp dword [esp + 0x90], edi
jae 0x524c3f
lea ecx, [esp + 0x7c]
cmp dword [esp + 0x74], edi
mov eax, dword [esp + 0x60]
jae 0x524c4d
lea eax, [esp + 0x60]
push ecx
push esi
push 0xffffffffffffffff
push str._u_liebaonat
push eax
xor ecx, ecx
call fcn.00418290
mov eax, dword [esi]
add esp, 0x14
test eax, eax
je 0x524c7a
push eax
push str.UnInstallDriver_Ret__x
mov ecx, 0x6180b8
call fcn.00435a30
add esp, 8
lea ecx, [esp + 0x78]
mov byte [esp + 0x4e8], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x5c]
mov byte [esp + 0x4e8], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x94]
mov byte [esp + 0x4e8], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0xb0]
mov dword [esp + 0x4e8], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
xor eax, eax
mov ecx, dword [esp + 0x4e0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x4c8]
xor ecx, esp
call fcn.00569ed6
add esp, 0x4d8
ret