Function at 0x40c970
Capabilities:
Set file attributes

Disassembly:
push 0xffffffffffffffff
push 0x46231e
mov eax, dword fs:[0]
push eax
mov eax, 0x1650
call fcn.0044f450
mov eax, dword [0x47f038]
xor eax, esp
mov dword [esp + 0x164c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x47f038]
xor eax, esp
push eax
lea eax, [esp + 0x1664]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1674]
mov ebx, dword [esp + 0x1678]
mov ebp, dword [esp + 0x167c]
push str.KMPRNAPI::DisablePlugin_n
mov edi, ecx
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x28], ebp
call fcn.004412c0
add esp, 4
test esi, esi
je 0x40cee3
cmp word [esi], 0
je 0x40cee3
push 0x34
call fcn.0044e29f
add esp, 4
mov dword [esp + 0x18], eax
xor ebp, ebp
mov dword [esp + 0x166c], ebp
cmp eax, ebp
je 0x40ca19
mov ecx, eax
call fcn.0044b430
mov dword [esp + 0x18], eax
jmp 0x40ca1d
mov dword [esp + 0x18], ebp
push 0x104
lea eax, [esp + 0x43c]
push eax
push ebp
mov dword [esp + 0x1678], 0xffffffff
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [esp + 0x438]
push 0x5c
push ecx
call fcn.0044e95c
add esp, 8
cmp word [eax], bp
je 0x40ca58
xor edx, edx
mov word [eax], dx
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [esp + 0x438]
push eax
lea ecx, [esp + 0x234]
push str._sKxTmpSvc.exe
push ecx
call esi
lea ebx, [edi + 0xc38]
push ebx
lea edx, [esp + 0x38]
push str._sKxTmpSvc.exe
push edx
call esi
add esp, 0x18
xor eax, eax
lea ecx, [ecx]
movzx ecx, word [esp + eax + 0x28]
mov word [esp + eax + 0x640], cx
add eax, 2
cmp cx, bp
jne 0x40ca90
push ebp
push ebp
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x23c]
push ecx
mov ecx, dword [edi + 4]
call fcn.00447d30
mov ebp, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebp
push eax
push str.CopyFile____ld_n
call fcn.004412c0
add esp, 8
push 0x80
lea edx, [esp + 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [esp + 0x438]
push eax
lea ecx, [esp + 0x234]
push str._sKcPlugInst.dll
push ecx
call esi
push ebx
lea edx, [esp + 0x38]
push str._sKcPlugInst.dll
push edx
call esi
add esp, 0x18
push 0
push 0
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x23c]
push ecx
mov ecx, dword [edi + 4]
call fcn.00447d30
call ebp
push eax
push str.CopyFile____ld_n
call fcn.004412c0
add esp, 8
push 0x80
lea edx, [esp + 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [esp + 0x438]
push eax
lea ecx, [esp + 0x234]
push str._sKcPlugInst64.dll
push ecx
call esi
push ebx
lea edx, [esp + 0x38]
push str._sKcPlugInst64.dll
push edx
call esi
add esp, 0x18
push 0
push 0
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x23c]
push ecx
mov ecx, dword [edi + 4]
call fcn.00447d30
call ebp
push eax
push str.CopyFile____ld_n
call fcn.004412c0
add esp, 8
push 0x80
lea edx, [esp + 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [esp + 0x438]
push eax
push str._sKmInst32.exe
lea ecx, [esp + 0x238]
push ecx
call esi
push ebx
lea edx, [esp + 0x38]
push str._sKmInst32.exe
push edx
call esi
push ebx
push str.current_working_directory___s__n
call fcn.004412c0
add esp, 0x20
push 0
push 0
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x23c]
push ecx
mov ecx, dword [edi + 4]
call fcn.00447d30
call ebp
push eax
push str.CopyFile____ld_n
call fcn.004412c0
lea edx, [esp + 0x30]
push edx
push str.CopyFile____s_n
call fcn.004412c0
lea eax, [esp + 0x448]
push eax
push str.CopyFile___wszSrcPath__s_n
call fcn.004412c0
add esp, 0x18
push 0x80
lea ecx, [esp + 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea edx, [esp + 0x438]
push edx
lea eax, [esp + 0x234]
push str._sKmInst64.exe
push eax
call esi
push ebx
lea ecx, [esp + 0x38]
push str._sKmInst64.exe
push ecx
call esi
mov ecx, dword [edi + 4]
add esp, 0x18
push 0
push 0
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0x23c]
push eax
call fcn.00447d30
call ebp
push eax
push str.CopyFile____ld_n
call fcn.004412c0
lea ecx, [esp + 0x30]
push ecx
push str.CopyFile____s_n
call fcn.004412c0
lea edx, [esp + 0x448]
push edx
push str.CopyFile___wszSrcPath__s_n
call fcn.004412c0
add esp, 0x18
push 0x80
lea eax, [esp + 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov ebp, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
lea ecx, [esp + 0x640]
push ecx
push str.Kyocera_Mita_Remote_Installer_Temporary_Service
push str.KxTmpSvc
push ebp
mov ecx, ebx
call fcn.0044ad30
push 0
push 0
push str.KxTmpSvc
push ebp
mov ecx, ebx
call fcn.0044b030
lea edx, [esp + 0x14]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
push ebp
mov dword [esp + 0x20], 0
call dword [sym.imp.ADVAPI32.dll_RegConnectRegistryW]
mov ebx, eax
test ebx, ebx
je 0x40cd70
push ebx
push ebp
push str.RegConnectRegistry_failed_____s___ld__n
call fcn.004412c0
add esp, 0xc
mov dword [esp + 0x14], 0
cmp ebx, 0x35
jne 0x40cd70
push str.__Try_to_start_Remote_Registry_service_n
call fcn.004412c0
mov ebx, dword [esp + 0x1c]
add esp, 4
push 0
push 0
push str.RemoteRegistry
push ebp
mov ecx, ebx
call fcn.0044b030
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x14]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
push ebp
call dword [sym.imp.ADVAPI32.dll_RegConnectRegistryW]
test eax, eax
je 0x40cd74
push eax
push ebp
push str.RegConnectRegistry_failed_____s___ld__n
call fcn.004412c0
add esp, 0xc
jmp 0x40cd74
mov ebx, dword [esp + 0x18]
push str.disable_plugin_n
call fcn.004412c0
add esp, 4
cmp dword [esp + 0x14], 0
je 0x40ce96
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
push ecx
push edx
lea eax, [esp + 0xe68]
push str.DISABLEPLUGIN___s____s_
push eax
call esi
mov ecx, dword [edi + 4]
add esp, 0x10
xor esi, esi
call fcn.00447510
test eax, eax
jne 0x40cdd0
mov ecx, dword [edi + 4]
push ebp
call fcn.0044a530
cmp eax, 0x100
jle 0x40cdd0
mov esi, 0x20119
lea eax, [esi - 0x13]
jmp 0x40cdd2
mov eax, esi
mov edx, dword [esp + 0x14]
push eax
lea ecx, [esp + 0xe64]
push ecx
push str.SetPrn
push 0x464918
push edx
call fcn.0044d960
add esp, 0x14
test eax, eax
je 0x40ce7a
mov eax, dword [esp + 0x14]
push 0xf003f
push str.SetErr
push 0x464918
push eax
call fcn.0044da60
add esp, 0x10
push 0x80
push str.KxTmpSvc
push ebp
mov ecx, ebx
call fcn.0044b100
mov edx, dword [esp + 0x14]
push esi
lea ecx, [esp + 0xe64]
push ecx
push str.SetErr
push 0x464918
push edx
call fcn.0044d990
add esp, 0x14
test eax, eax
je 0x40ce7a
lea eax, [esp + 0xe60]
push eax
push str.ERROR___s_n
call fcn.004412c0
lea ecx, [esp + 0xe6e]
push ecx
call fcn.0044e92b
add esp, 0xc
cmp eax, 1
jne 0x40ce7a
push str.___DISABLE_PLUGIN___Success._n
jmp 0x40ce7f
push str.____DISABLE_PLUGIN___Failed._n
call fcn.004412c0
mov eax, dword [esp + 0x18]
add esp, 4
test eax, eax
je 0x40ce96
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.KxTmpSvc
push ebp
mov ecx, ebx
call fcn.0044af10
test ebx, ebx
je 0x40ceb7
mov ecx, ebx
call fcn.0044b680
push ebx
call fcn.0044e22a
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x1664]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x164c]
xor ecx, esp
call fcn.0044e1a0
add esp, 0x165c
ret 0xc
push str.Disable_Plugin_locally_n
call fcn.004412c0
push ebp
push ebx
push str.wszPrinterName__s___wszPlugClass__s__n
call fcn.004412c0
mov ecx, dword [edi + 4]
add esp, 0x10
call fcn.00447510
test eax, eax
jne 0x40cf0f
push str.KcPlugInst.dll
jmp 0x40cf14
push str.KcPlugInst64.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
test esi, esi
je 0x40cf98
push str.KcPlugInstW
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
xor edx, edx
push 0x616
mov edi, eax
push edx
lea eax, [esp + 0x852]
push eax
mov word [esp + 0x854], dx
call fcn.0044e1b0
push ebp
push ebx
lea ecx, [esp + 0x85c]
push str.DISABLE__p___s___class___s_
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
push 0
lea edx, [esp + 0x84c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
push 0
call edi
push eax
push str.nPlugRet___d__n
call fcn.004412c0
add esp, 8
push esi
xor edi, edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, edi
jmp 0x40ceb9
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x40ceb9