Function at 0x411160
Capabilities:
Set file attributes

Disassembly:
push 0xffffffffffffffff
push 0x45f01c
mov eax, dword fs:[0]
push eax
mov eax, 0x1858
call fcn.0044bf30
mov eax, dword [0x47b038]
xor eax, esp
mov dword [esp + 0x1854], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x47b038]
xor eax, esp
push eax
lea eax, [esp + 0x186c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x1880]
mov edi, dword [esp + 0x187c]
push str.KMPRNAPI::_InstallDriverViaSvc_n
mov esi, ecx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], eax
call fcn.0043e2c0
xor ebx, ebx
xor eax, eax
add esp, 4
mov dword [esp + 0x20], eax
cmp edi, ebx
je 0x411931
cmp word [edi], bx
je 0x411931
push 0x34
call fcn.0044ad7f
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x1874], ebx
cmp eax, ebx
je 0x411203
mov ecx, eax
call fcn.00447f10
mov dword [esp + 0x14], eax
jmp 0x411207
mov dword [esp + 0x14], ebx
push 0x104
lea ecx, [esp + 0x43c]
push ecx
push ebx
mov dword [esp + 0x1880], 0xffffffff
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [esp + 0x438]
push 0x5c
push edx
call fcn.0044b43c
add esp, 8
cmp word [eax], bx
je 0x411242
xor ecx, ecx
mov word [eax], cx
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
lea edx, [esp + 0x438]
push edx
lea eax, [esp + 0x234]
push str._sKxTmpSvc.exe
push eax
call edi
lea eax, [esi + 0xc38]
push eax
lea ecx, [esp + 0x38]
push str._sKxTmpSvc.exe
push ecx
call edi
add esp, 0x18
xor eax, eax
jmp 0x411280
movzx ecx, word [esp + eax + 0x28]
mov word [esp + eax + 0xe60], cx
add eax, 2
cmp cx, bx
jne 0x411280
mov ecx, dword [esi + 4]
push ebx
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x238]
push eax
call fcn.004449d0
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
push eax
push str.CopyFile____ld_n
call fcn.0043e2c0
lea ecx, [esp + 0x30]
push ecx
push str.CopyFile____s_n
call fcn.0043e2c0
lea edx, [esp + 0x448]
push edx
push str.CopyFile___wszSrcPath__s_n
call fcn.0043e2c0
mov ebp, dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
add esp, 0x18
push 0x80
lea eax, [esp + 0x2c]
push eax
call ebp
lea ecx, [esp + 0x438]
push ecx
lea edx, [esp + 0x234]
push str._sKmInst32.exe
push edx
call edi
lea eax, [esi + 0xc38]
push eax
lea eax, [esp + 0x38]
push str._sKmInst32.exe
push eax
call edi
add esp, 0x18
push 0
lea ecx, [esp + 0x2c]
push ecx
mov ecx, dword [esi + 4]
lea edx, [esp + 0x238]
push edx
call fcn.004449d0
call ebx
push eax
push str.CopyFile____ld_n
call fcn.0043e2c0
lea eax, [esp + 0x30]
push eax
push str.CopyFile____s_n
call fcn.0043e2c0
lea ecx, [esp + 0x448]
push ecx
push str.CopyFile___wszSrcPath__s_n
call fcn.0043e2c0
add esp, 0x18
push 0x80
lea edx, [esp + 0x2c]
push edx
call ebp
lea eax, [esp + 0x438]
push eax
lea ecx, [esp + 0x234]
push str._sKmInst64.exe
push ecx
call edi
lea eax, [esi + 0xc38]
push eax
lea edx, [esp + 0x38]
push str._sKmInst64.exe
push edx
call edi
add esp, 0x18
push 0
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x238]
push ecx
mov ecx, dword [esi + 4]
call fcn.004449d0
call ebx
push eax
push str.CopyFile____ld_n
call fcn.0043e2c0
lea edx, [esp + 0x30]
push edx
push str.CopyFile____s_n
call fcn.0043e2c0
lea eax, [esp + 0x448]
push eax
push str.CopyFile___wszSrcPath__s_n
call fcn.0043e2c0
add esp, 0x18
push 0x80
lea ecx, [esp + 0x2c]
push ecx
call ebp
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
lea edx, [esp + 0xe60]
push edx
push str.Kyocera_Mita_Remote_Installer_Temporary_Service
push str.KxTmpSvc
push ebx
mov ecx, ebp
call fcn.00447810
push 0
push 0
push str.KxTmpSvc
push ebx
mov ecx, ebp
call fcn.00447b10
mov ebp, dword [sym.imp.ADVAPI32.dll_RegConnectRegistryW]
lea eax, [esp + 0x1c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
push ebx
mov dword [esp + 0x28], 0
call ebp
mov ebx, eax
test ebx, ebx
je 0x4114c5
mov ecx, dword [esp + 0x18]
push ebx
push ecx
push str.RegConnectRegistry_failed_____s___ld__n
call fcn.0043e2c0
add esp, 0xc
mov dword [esp + 0x1c], 0
cmp ebx, 0x35
jne 0x4114c5
push str.__Try_to_start_Remote_Registry_service_n
call fcn.0043e2c0
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x18]
add esp, 4
push 0
push 0
push str.RemoteRegistry
push edx
mov ecx, ebx
call fcn.00447b10
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x1c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
push ecx
call ebp
test eax, eax
je 0x4114c9
mov edx, dword [esp + 0x18]
push eax
push edx
push str.RegConnectRegistry_failed_____s___ld__n
call fcn.0043e2c0
add esp, 0xc
jmp 0x4114c9
mov ebx, dword [esp + 0x14]
push str.Set_Install_Driver_n
call fcn.0043e2c0
add esp, 4
cmp dword [esp + 0x1c], 0
je 0x4118e5
mov ebx, dword [esp + 0x24]
lea eax, [esp + 0xa50]
push eax
lea ecx, [esp + 0x84c]
push ecx
mov ecx, dword [esi + 4]
lea edx, [ebx + 0x1aa8]
push edx
call fcn.004434c0
xor eax, eax
jmp 0x411510
movzx ecx, word [esp + eax + 0x848]
mov word [esp + eax + 0x230], cx
add eax, 2
test cx, cx
jne 0x411510
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebp, eax
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x64a]
push ecx
mov word [esp + 0x64c], ax
call fcn.0044ac90
push ebp
lea edx, [esp + 0x650]
push str.KXTMP_ld
push edx
call edi
lea eax, [esp + 0x658]
push eax
push str.tszTmpFolder___s__n
call fcn.0043e2c0
lea ecx, [esp + 0x660]
push ecx
lea eax, [esi + 0xc38]
push eax
lea edx, [esp + 0x50]
push 0x461a90
push edx
call edi
mov ecx, dword [esi + 4]
add esp, 0x30
push 0
lea eax, [esp + 0x2c]
push eax
call fcn.004423b0
push 0
push 1
push 0
lea ecx, [esp + 0x34]
push ecx
mov ecx, dword [esi + 4]
lea edx, [esp + 0x240]
push edx
call fcn.00444d60
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x234]
push ecx
push str.Copy_from__n_t__s___n_t__s__n
call fcn.0043e2c0
lea edx, [esp + 0xa5c]
push edx
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0xc6c]
push 0x461a90
push ecx
call edi
mov edx, dword [esp + 0x18a0]
push edx
lea eax, [ebx + 0x208]
push eax
lea ecx, [esp + 0xc7c]
push ecx
push ebx
lea edx, [esp + 0x1094]
push str.ADDDRV__d___s___i___s___env___s___opt__d
push edx
call edi
mov ebx, dword [ebx + 0x1eb8]
add esp, 0x34
test ebx, ebx
jne 0x411658
lea eax, [esp + 0x1068]
add eax, 0xfffffffe
jmp 0x411630
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x411630
mov ecx, dword [str.__v0]
mov edx, dword [0x466984]
mov dword [eax], ecx
mov cx, word [0x466988]
mov dword [eax + 4], edx
mov word [eax + 8], cx
cmp ebx, 2
jne 0x411698
lea eax, [esp + 0x1068]
add eax, 0xfffffffe
jmp 0x411670
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x411670
mov edx, dword [str.__v2]
mov ecx, dword [0x466978]
mov dword [eax], edx
mov dx, word [0x46697c]
mov dword [eax + 4], ecx
mov word [eax + 8], dx
cmp ebx, 3
jne 0x4116d8
lea eax, [esp + 0x1068]
add eax, 0xfffffffe
jmp 0x4116b0
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4116b0
mov ecx, dword [str.__v3]
mov edx, dword [0x46696c]
mov dword [eax], ecx
mov cx, word [0x466970]
mov dword [eax + 4], edx
mov word [eax + 8], cx
mov ecx, dword [esi + 4]
xor ebx, ebx
xor ebp, ebp
call fcn.00444240
test eax, eax
jne 0x411706
mov edx, dword [esp + 0x18]
mov ecx, dword [esi + 4]
push edx
call fcn.00447020
cmp eax, 0x100
jle 0x411706
mov ebx, 0x20119
mov ebp, 0x20106
mov ecx, dword [esp + 0x1c]
push ebp
lea eax, [esp + 0x106c]
push eax
push str.KmInst32
push 0x4618d4
push ecx
call fcn.0044a440
add esp, 0x14
test eax, eax
je 0x411878
mov edx, dword [esp + 0x1c]
push 0xf003f
push str.SetErr
push 0x4618d4
push edx
call fcn.0044a540
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 0x81
push str.KxTmpSvc
push eax
call fcn.00447be0
mov edx, dword [esp + 0x1c]
push ebx
lea ecx, [esp + 0x106c]
push ecx
push str.SetErr
push 0x4618d4
push edx
call fcn.0044a470
add esp, 0x14
test eax, eax
je 0x411871
lea eax, [esp + 0x1068]
push eax
push str.RESULT____s__n
call fcn.0043e2c0
push 0x1c2d0
call fcn.0044ad7f
add esp, 0xc
mov dword [esp + 0x24], eax
mov dword [esp + 0x1874], 1
test eax, eax
je 0x4117c7
mov ecx, eax
call fcn.0043d9e0
mov ebx, eax
jmp 0x4117c9
xor ebx, ebx
push 0x4618d0
lea ecx, [esp + 0x106c]
push ecx
mov ecx, ebx
mov dword [esp + 0x187c], 0xffffffff
call fcn.0043dc30
test eax, eax
jle 0x41185e
push 0
mov ecx, ebx
call fcn.00401860
push eax
call fcn.0044b40b
add esp, 4
test eax, eax
je 0x41185e
push 1
mov ecx, ebx
call fcn.00401860
push eax
call fcn.0044b40b
add esp, 4
push 2
mov ecx, ebx
mov dword [esi + 0x24], eax
call fcn.00401860
lea ebp, [esi + 0x28]
mov edx, ebp
movzx ecx, word [eax]
mov word [edx], cx
add eax, 2
add edx, 2
test cx, cx
jne 0x411825
mov eax, dword [esi + 0x24]
test eax, eax
jne 0x411845
mov dword [esp + 0x20], 1
push eax
push str.ADDDRV_m_nErrorCode_returns___d__n
call fcn.0043e2c0
push ebp
push str.ADDDRV_m_tszResult_returns___s__n
call fcn.0043e2c0
add esp, 0x10
test ebx, ebx
je 0x411885
mov ecx, ebx
call fcn.0043d490
push ebx
call fcn.0044ad0a
jmp 0x411882
push str.___Install_Driver___Failed_to_get_result_n
jmp 0x41187d
push str.___Install_Driver___Failed._Failed_to_set_Registry_command_n
call fcn.0043e2c0
add esp, 4
mov ecx, dword [esi + 4]
lea edx, [esp + 0x28]
push edx
call fcn.00444f80
lea ebx, [esi + 0xc38]
push ebx
lea eax, [esp + 0x2c]
push str._sKmInst32.exe
push eax
call edi
add esp, 0xc
lea ecx, [esp + 0x28]
push ecx
mov ecx, dword [esi + 4]
call fcn.00442ba0
push ebx
lea edx, [esp + 0x2c]
push str._sKmInst64.exe
push edx
call edi
mov ecx, dword [esi + 4]
add esp, 0xc
lea eax, [esp + 0x28]
push eax
call fcn.00442ba0
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4118e1
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
push str.KxTmpSvc
push ecx
mov ecx, ebx
call fcn.004479f0
test ebx, ebx
je 0x41190a
mov ecx, ebx
call fcn.00448160
push ebx
call fcn.0044ad0a
add esp, 4
lea eax, [esi + 0xc38]
push eax
lea edx, [esp + 0x2c]
push str._sKxTmpSvc.exe
push edx
call edi
mov ecx, dword [esi + 4]
add esp, 0xc
lea eax, [esp + 0x28]
push eax
call fcn.00442ba0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x186c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1854]
xor ecx, esp
call fcn.0044ac80
add esp, 0x1864
ret 0xc