Function at 0x40bfd0
Capabilities:
Set file attributes

Disassembly:
push 0xffffffffffffffff
push 0x45edfe
mov eax, dword fs:[0]
push eax
mov eax, 0x1650
call fcn.0044bf30
mov eax, dword [0x47b038]
xor eax, esp
mov dword [esp + 0x164c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x47b038]
xor eax, esp
push eax
lea eax, [esp + 0x1664]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1674]
mov ebx, dword [esp + 0x1678]
mov ebp, dword [esp + 0x167c]
push str.KMPRNAPI::DisablePlugin_n
mov edi, ecx
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x28], ebp
call fcn.0043e2c0
add esp, 4
test esi, esi
je 0x40c53a
cmp word [esi], 0
je 0x40c53a
push 0x34
call fcn.0044ad7f
add esp, 4
mov dword [esp + 0x18], eax
xor ebp, ebp
mov dword [esp + 0x166c], ebp
cmp eax, ebp
je 0x40c079
mov ecx, eax
call fcn.00447f10
mov dword [esp + 0x18], eax
jmp 0x40c07d
mov dword [esp + 0x18], ebp
push 0x104
lea eax, [esp + 0x43c]
push eax
push ebp
mov dword [esp + 0x1678], 0xffffffff
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [esp + 0x438]
push 0x5c
push ecx
call fcn.0044b43c
add esp, 8
cmp word [eax], bp
je 0x40c0b8
xor edx, edx
mov word [eax], dx
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [esp + 0x438]
push eax
lea ecx, [esp + 0x234]
push str._sKxTmpSvc.exe
push ecx
call esi
lea ebx, [edi + 0xc38]
push ebx
lea edx, [esp + 0x38]
push str._sKxTmpSvc.exe
push edx
call esi
add esp, 0x18
xor eax, eax
lea ecx, [ecx]
movzx ecx, word [esp + eax + 0x28]
mov word [esp + eax + 0x640], cx
add eax, 2
cmp cx, bp
jne 0x40c0f0
push ebp
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x238]
push ecx
mov ecx, dword [edi + 4]
call fcn.004449d0
mov ebp, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebp
push eax
push str.CopyFile____ld_n
call fcn.0043e2c0
add esp, 8
push 0x80
lea edx, [esp + 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [esp + 0x438]
push eax
lea ecx, [esp + 0x234]
push str._sKcPlugInst.dll
push ecx
call esi
push ebx
lea edx, [esp + 0x38]
push str._sKcPlugInst.dll
push edx
call esi
add esp, 0x18
push 0
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x238]
push ecx
mov ecx, dword [edi + 4]
call fcn.004449d0
call ebp
push eax
push str.CopyFile____ld_n
call fcn.0043e2c0
add esp, 8
push 0x80
lea edx, [esp + 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [esp + 0x438]
push eax
lea ecx, [esp + 0x234]
push str._sKcPlugInst64.dll
push ecx
call esi
push ebx
lea edx, [esp + 0x38]
push str._sKcPlugInst64.dll
push edx
call esi
add esp, 0x18
push 0
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x238]
push ecx
mov ecx, dword [edi + 4]
call fcn.004449d0
call ebp
push eax
push str.CopyFile____ld_n
call fcn.0043e2c0
add esp, 8
push 0x80
lea edx, [esp + 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [esp + 0x438]
push eax
lea ecx, [esp + 0x234]
push str._sKmInst32.exe
push ecx
call esi
push ebx
push str._sKmInst32.exe
lea edx, [esp + 0x3c]
push edx
call esi
push ebx
push str.current_working_directory___s__n
call fcn.0043e2c0
add esp, 0x20
push 0
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x238]
push ecx
mov ecx, dword [edi + 4]
call fcn.004449d0
call ebp
push eax
push str.CopyFile____ld_n
call fcn.0043e2c0
lea edx, [esp + 0x30]
push edx
push str.CopyFile____s_n
call fcn.0043e2c0
lea eax, [esp + 0x448]
push eax
push str.CopyFile___wszSrcPath__s_n
call fcn.0043e2c0
add esp, 0x18
push 0x80
lea ecx, [esp + 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea edx, [esp + 0x438]
push edx
lea eax, [esp + 0x234]
push str._sKmInst64.exe
push eax
call esi
push ebx
lea ecx, [esp + 0x38]
push str._sKmInst64.exe
push ecx
call esi
mov ecx, dword [edi + 4]
add esp, 0x18
push 0
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x238]
push eax
call fcn.004449d0
call ebp
push eax
push str.CopyFile____ld_n
call fcn.0043e2c0
lea ecx, [esp + 0x30]
push ecx
push str.CopyFile____s_n
call fcn.0043e2c0
lea edx, [esp + 0x448]
push edx
push str.CopyFile___wszSrcPath__s_n
call fcn.0043e2c0
add esp, 0x18
push 0x80
lea eax, [esp + 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov ebp, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
lea ecx, [esp + 0x640]
push ecx
push str.Kyocera_Mita_Remote_Installer_Temporary_Service
push str.KxTmpSvc
push ebp
mov ecx, ebx
call fcn.00447810
push 0
push 0
push str.KxTmpSvc
push ebp
mov ecx, ebx
call fcn.00447b10
lea edx, [esp + 0x14]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
push ebp
mov dword [esp + 0x20], 0
call dword [sym.imp.ADVAPI32.dll_RegConnectRegistryW]
mov ebx, eax
test ebx, ebx
je 0x40c3c7
push ebx
push ebp
push str.RegConnectRegistry_failed_____s___ld__n
call fcn.0043e2c0
add esp, 0xc
mov dword [esp + 0x14], 0
cmp ebx, 0x35
jne 0x40c3c7
push str.__Try_to_start_Remote_Registry_service_n
call fcn.0043e2c0
mov ebx, dword [esp + 0x1c]
add esp, 4
push 0
push 0
push str.RemoteRegistry
push ebp
mov ecx, ebx
call fcn.00447b10
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x14]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
push ebp
call dword [sym.imp.ADVAPI32.dll_RegConnectRegistryW]
test eax, eax
je 0x40c3cb
push eax
push ebp
push str.RegConnectRegistry_failed_____s___ld__n
call fcn.0043e2c0
add esp, 0xc
jmp 0x40c3cb
mov ebx, dword [esp + 0x18]
push str.disable_plugin_n
call fcn.0043e2c0
add esp, 4
cmp dword [esp + 0x14], 0
je 0x40c4ed
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
push ecx
push edx
lea eax, [esp + 0xe68]
push str.DISABLEPLUGIN___s____s_
push eax
call esi
mov ecx, dword [edi + 4]
add esp, 0x10
xor esi, esi
call fcn.00444240
test eax, eax
jne 0x40c427
mov ecx, dword [edi + 4]
push ebp
call fcn.00447020
cmp eax, 0x100
jle 0x40c427
mov esi, 0x20119
lea eax, [esi - 0x13]
jmp 0x40c429
mov eax, esi
mov edx, dword [esp + 0x14]
push eax
lea ecx, [esp + 0xe64]
push ecx
push str.SetPrn
push 0x4618d4
push edx
call fcn.0044a440
add esp, 0x14
test eax, eax
je 0x40c4d1
mov eax, dword [esp + 0x14]
push 0xf003f
push str.SetErr
push 0x4618d4
push eax
call fcn.0044a540
add esp, 0x10
push 0x80
push str.KxTmpSvc
push ebp
mov ecx, ebx
call fcn.00447be0
mov edx, dword [esp + 0x14]
push esi
lea ecx, [esp + 0xe64]
push ecx
push str.SetErr
push 0x4618d4
push edx
call fcn.0044a470
add esp, 0x14
test eax, eax
je 0x40c4d1
lea eax, [esp + 0xe60]
push eax
push str.ERROR___s_n
call fcn.0043e2c0
lea ecx, [esp + 0xe6e]
push ecx
call fcn.0044b40b
add esp, 0xc
cmp eax, 1
jne 0x40c4d1
push str.___DISABLE_PLUGIN___Success._n
jmp 0x40c4d6
push str.____DISABLE_PLUGIN___Failed._n
call fcn.0043e2c0
mov eax, dword [esp + 0x18]
add esp, 4
test eax, eax
je 0x40c4ed
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.KxTmpSvc
push ebp
mov ecx, ebx
call fcn.004479f0
test ebx, ebx
je 0x40c50e
mov ecx, ebx
call fcn.00448160
push ebx
call fcn.0044ad0a
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x1664]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x164c]
xor ecx, esp
call fcn.0044ac80
add esp, 0x165c
ret 0xc
push str.Disable_Plugin_locally_n
call fcn.0043e2c0
push ebp
push ebx
push str.wszPrinterName__s___wszPlugClass__s__n
call fcn.0043e2c0
mov ecx, dword [edi + 4]
add esp, 0x10
call fcn.00444240
test eax, eax
jne 0x40c566
push str.KcPlugInst.dll
jmp 0x40c56b
push str.KcPlugInst64.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
test esi, esi
je 0x40c5ef
push str.KcPlugInstW
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
xor edx, edx
push 0x616
mov edi, eax
push edx
lea eax, [esp + 0x852]
push eax
mov word [esp + 0x854], dx
call fcn.0044ac90
push ebp
push ebx
lea ecx, [esp + 0x85c]
push str.DISABLE__p___s___class___s_
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
push 0
lea edx, [esp + 0x84c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
push 0
call edi
push eax
push str.nPlugRet___d__n
call fcn.0043e2c0
add esp, 8
push esi
xor edi, edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, edi
jmp 0x40c510
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x40c510