Function at 0x40cba0
Capabilities:
Create process on windows

Disassembly:
push 0xffffffffffffffff
push 0x447b28
mov eax, dword fs:[0]
push eax
sub esp, 0x60
push ebx
push ebp
push esi
push edi
mov eax, dword [0x460cd0]
xor eax, esp
push eax
lea eax, [esp + 0x74]
mov dword fs:[0], eax
xor esi, esi
push 0xc
mov byte [esp + 0x1b], 1
mov byte [esp + 0x1a], 0
mov dword [esp + 0x2c], esi
call fcn.0041e773
add esp, 4
cmp eax, esi
je 0x40cbf5
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [esp + 0x20], eax
jmp 0x40cbfb
mov dword [esp + 0x20], esi
mov eax, esi
mov dword [eax], esi
mov dword [eax + 4], esi
mov dword [eax + 8], 0xf000c
push 0x38
lea eax, [esp + 0x40]
push esi
push eax
mov dword [esp + 0x44], esi
call fcn.00430500
mov ebx, dword [esp + 0x90]
add esp, 0xc
cmp ebx, esi
jne 0x40cc2b
call fcn.0042f9ef
mov ebp, dword [esp + 0x88]
cmp ebp, dword [ebx + 8]
jb 0x40cc3c
call fcn.0042f9ef
lea edi, [ebp + 0x800]
push edi
push str.Uninstall_Runinng:___s__Driver_Only
mov ecx, 0x466338
mov dword [esp + 0x3c], edi
call fcn.0041a690
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x98]
mov eax, dword [edx]
add esp, 8
push ecx
push 1
push 0x7e9
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x28]
push edx
push esi
push esi
push 2
push esi
push 6
call sub.WINSPOOL.DRV_EnumPrintersW
mov eax, dword [esp + 0x24]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
lea ecx, [esp + 0x18]
push ecx
mov esi, eax
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x28]
push edx
push eax
push esi
push 2
push 0
push 6
mov dword [esp + 0x4c], esi
call sub.WINSPOOL.DRV_EnumPrintersW
test eax, eax
jne 0x40cce4
cmp ebp, dword [ebx + 8]
jb 0x40ccca
call fcn.0042f9ef
push edi
push str.Uninstall_Runinng:__s__cannot_enumerate_Printer_Instance
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov edx, 0x466338
call fcn.0041a540
jmp 0x40ccf8
mov ecx, dword [esp + 0x18]
push ecx
push str.the_number_of_found_printer_instance:__d_
mov ecx, 0x466338
call fcn.0041a690
add esp, 8
cmp dword [esp + 0x18], 0
mov dword [esp + 0x2c], 0
jle 0x40d051
add esi, 0x10
cmp ebp, dword [ebx + 8]
jb 0x40cd1b
call fcn.0042f9ef
mov edx, dword [esi]
push ebp
push edx
call fcn.0042f75b
add esp, 8
test eax, eax
jne 0x40d0a7
cmp ebp, dword [ebx + 8]
jb 0x40cd39
call fcn.0042f9ef
mov eax, dword [esi]
push ebp
push eax
push str.Uninstall_Runinng_:printer_driver_Name_:__s____vector_it__szKey_:___s__are_same
mov ecx, 0x466338
call fcn.0041a690
add esp, 0xc
test byte [esi + 0x24], 0x10
mov byte [esp + 0x16], 1
je 0x40ce4c
mov ecx, dword [esi - 0xc]
push ecx
push str.__s__is_Network_Printer
mov ecx, 0x466338
call fcn.0041a690
add esp, 8
push str.printui.dll_PrintUIEntry__dn__n__
lea ecx, [esp + 0x20]
call fcn.00403020
mov dword [esp + 0x7c], 0
mov edx, dword [esi - 0xc]
push edx
lea edi, [esp + 0x20]
call fcn.0040dd60
push 0x4512dc
call fcn.0040dd60
mov eax, dword [esp + 0x24]
add esp, 8
lea ecx, [esp + 0x38]
push ecx
mov dword [esp + 0x3c], 0x3c
mov dword [esp + 0x48], str.open
mov dword [esp + 0x4c], 0x4512e0
mov dword [esp + 0x50], eax
mov dword [esp + 0x58], 1
mov dword [esp + 0x40], 0x40
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x40cdfc
push str.Fail_to_execuete_disconnecting_printer..
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov edx, 0x466338
call fcn.0041a540
jmp 0x40ce23
mov edx, dword [esp + 0x70]
push 0x1388
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x40ce26
push str.Network_Printer_Instance_is_removed_complete
mov ecx, 0x466338
mov byte [esp + 0x1a], al
call fcn.0041a690
add esp, 4
mov dword [esp + 0x7c], 0xffffffff
lea ecx, [esp + 0x1c]
call fcn.004036b0
cmp byte [esp + 0x16], 0
je 0x40cf0e
mov eax, 0x451bd0
jmp 0x40cf13
mov eax, dword [esp + 0x20]
mov edx, dword [esi - 0xc]
push eax
lea ecx, [esp + 0x2c]
push ecx
push edx
call sub.WINSPOOL.DRV_OpenPrinterW
test eax, eax
je 0x40cf8c
mov eax, dword [esi - 0xc]
push eax
push str.Uninstall_Runinng:printer_instance_Name_:__s_
mov ecx, 0x466338
call fcn.0041a690
mov eax, dword [esp + 0x30]
add esp, 8
test eax, eax
je 0x40cedb
push eax
call sub.WINSPOOL.DRV_DeletePrinter
test eax, eax
je 0x40ceac
mov ecx, dword [esi - 0xc]
push ecx
push str.Uninstall_Runinng_:Delete_Printer_Instance_complete_:___s_
mov ecx, 0x466338
call fcn.0041a690
add esp, 8
mov byte [esp + 0x16], 0
jmp 0x40cf00
cmp ebp, dword [ebx + 8]
mov byte [esp + 0x16], 1
jb 0x40cebb
call fcn.0042f9ef
push edi
push str.Uninstall_Runinng:__s__cannot_Delete_Printer_Instance
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov edx, 0x466338
call fcn.0041a540
add esp, 8
jmp 0x40d02a
cmp ebp, dword [ebx + 8]
mov byte [esp + 0x16], 0
jb 0x40ceea
call fcn.0042f9ef
mov edx, dword [esi]
push ebp
push edx
push str.Uninstall_Runinng:printer_driver_Name_:__s____vector_it__szKey_:___s__are_different
mov ecx, 0x466338
call fcn.0041a690
add esp, 0xc
mov eax, dword [esp + 0x28]
test eax, eax
je 0x40cf0e
push eax
call sub.WINSPOOL.DRV_ClosePrinter
mov eax, str.FALSE
push eax
push str.Uninstall_Runinng:bPrinterInstance_:___s_
mov ecx, 0x466338
call fcn.0041a690
add esp, 8
xor edi, edi
jmp 0x40cf30
push str.while
mov ecx, 0x466338
call fcn.0041a690
add esp, 4
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp ebp, dword [ebx + 8]
jb 0x40cf57
call fcn.0042f9ef
push ebp
push 0
push 0
call sub.WINSPOOL.DRV_DeletePrinterDriverW
test eax, eax
jne 0x40cfc0
mov eax, dword [esi]
push eax
push str.Uninstall_Runinng:__s__cannot_Delete_Printer_Driver
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov edx, 0x466338
call fcn.0041a540
add edi, 1
add esp, 8
cmp edi, 8
jl 0x40cf30
jmp 0x40cfd5
cmp ebp, dword [ebx + 8]
mov byte [esp + 0x17], 0
jb 0x40cf9b
call fcn.0042f9ef
push edi
push str.Uninstall_Runinng:__s__cannot_Open_Printer
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov edx, 0x466338
call fcn.0041a540
add esp, 8
mov eax, 0x451bd0
jmp 0x40cf13
mov ecx, dword [esi]
push ecx
push str.Uninstall_Runinng_:Delete_Printer_driver_complete_:___s_
mov ecx, 0x466338
call fcn.0041a690
add esp, 8
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x2c]
push edx
call fcn.0040d130
add esp, 4
test al, al
jne 0x40d01f
push str.IsOtherPrintInstance_is_not_Exist
mov ecx, 0x466338
call fcn.0041a690
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
mov edx, dword [ecx]
add esp, 4
push eax
push 2
push 0x7e9
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, dword [esp + 0x84]
mov edi, dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
add eax, 1
add esi, 0x54
cmp eax, dword [esp + 0x18]
mov dword [esp + 0x2c], eax
jl 0x40cd11
cmp byte [esp + 0x16], 0
mov esi, dword [esp + 0x30]
jne 0x40d0f6
cmp ebp, dword [ebx + 8]
jb 0x40d05b
call fcn.0042f9ef
push ebp
push 0
push 0
call sub.WINSPOOL.DRV_DeletePrinterDriverW
test eax, eax
je 0x40d0cc
cmp ebp, dword [ebx + 8]
jb 0x40d073
call fcn.0042f9ef
push ebp
push str.Uninstall_Runinng:PRinter_Driver_is_removed_no_instance__:___s_
mov ecx, 0x466338
call fcn.0041a690
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x98]
mov eax, dword [edx]
add esp, 8
push ecx
push 2
push 0x7e9
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x40d0f6
cmp ebp, dword [ebx + 8]
jb 0x40d0b1
call fcn.0042f9ef
mov eax, dword [esi]
push ebp
push eax
push str.Uninstall_Runinng_:printer_driver_Name_:__s____vector_it__szKey_:___s__are_different
mov ecx, 0x466338
call fcn.0041a690
add esp, 0xc
jmp 0x40d02a
cmp ebp, dword [ebx + 8]
mov byte [esp + 0x17], 0
jb 0x40d0db
call fcn.0042f9ef
push edi
push str.Uninstall_Runinng:__s__cannot_Delete_Printer_Driver
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov edx, 0x466338
call fcn.0041a540
add esp, 8
test esi, esi
je 0x40d101
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0041e7a3
mov al, byte [esp + 0x1b]
add esp, 4
mov ecx, dword [esp + 0x74]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6c
ret