Function at 0x79d93b60
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
xor esi, esi
push ebx
sub esp, 0x84
mov edx, dword [section..bss]
mov word [ebp - 0x46], si
mov dword [ebp - 0x4a], 0x3a005a
test edx, edx
je 0x79d93d6a
mov ebx, dword [edx + 8]
test ebx, ebx
je 0x79d93d6a
mov edx, dword [eax + 4]
test edx, edx
je 0x79d93e20
mov ebx, eax
mov eax, dword [edx]
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x30], eax
mov eax, dword [edx + 4]
mov dword [ebp - 0x2c], eax
mov ecx, dword [edx + 8]
mov dword [ebp - 0x28], ecx
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x24], ecx
mov ecx, dword [edx + 0x10]
mov dword [ebp - 0x20], ecx
mov ecx, dword [edx + 0x14]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [edx + 0x18]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x20]
mov edx, dword [edx + 0x1c]
mov dword [ebp - 0x14], edx
mov edx, dword [ebx + 0x14]
test ecx, ecx
je 0x79d93d80
and edx, 8
mov esi, 0x43
jne 0x79d93d23
mov eax, dword [ebp - 0x20]
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [ebx + 0x24]
mov esi, eax
test eax, eax
jne 0x79d93d23
mov edi, dword [ebp - 0x14]
mov edx, dword [section..bss]
test edi, edi
je 0x79d93dc0
test edx, edx
je 0x79d93db0
mov edx, dword [edx + 8]
test edx, edx
je 0x79d93db0
mov eax, edi
call sym.__findProviderIndexW.part.2
cmp eax, 0xffffffff
je 0x79d93db0
imul eax, eax, 0x38
mov edx, dword [section..bss]
lea edi, [edx + eax + 0xc]
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x30]
mov ecx, edi
mov dword [esp], eax
mov eax, ebx
call sym._wnet_use_provider
test eax, eax
jne 0x79d93e0f
test byte [ebx + 0x14], 1
je 0x79d93e30
cmp dword [ebp - 0x2c], 2
je 0x79d93e50
lea eax, [ebp - 0x58]
mov dword [esp], 0xf003f
mov dword [esp + 4], eax
call sym._RegOpenCurrentUser_8
sub esp, 8
test eax, eax
jne 0x79d93d23
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x44], 0x65004e
mov dword [ebp - 0x40], 0x770074
mov dword [ebp - 0x3c], 0x72006f
mov dword [ebp - 0x38], 0x5c006b
movzx eax, word [eax]
mov dword [esp + 0x20], 0
mov word [ebp - 0x34], ax
xor eax, eax
mov word [ebp - 0x32], ax
lea eax, [ebp - 0x54]
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x44]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x58]
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0xf003f
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp], eax
call sym._RegCreateKeyExW_36
sub esp, 0x24
test eax, eax
je 0x79d93e96
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call sym._RegCloseKey_4
sub esp, 4
lea esp, [ebp - 0xc]
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret
test byte [0x79d9e050], 1
je 0x79d93d6a
mov dword [esp + 0x14], str.Local_device_selection_is_not_implemented_for_printers._n
mov dword [esp + 0x10], 0x884
mov dword [esp + 0xc], str.wnet_use_connection
mov dword [esp + 8], 0x79d9f71d
mov dword [esp + 4], 0x79d9e050
mov dword [esp], 0
call sym._ros_dbg_log
lea esp, [ebp - 0xc]
mov esi, 0x4c6
pop ebx
mov eax, esi
pop esi
pop edi
pop ebp
ret
test dl, 0x80
je 0x79d93be3
lea ecx, [eax - 1]
mov esi, 0x42
cmp ecx, 1
ja 0x79d93d23
cmp eax, 2
je 0x79d93d2d
lea eax, [ebp - 0x4a]
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x20], eax
jmp 0x79d93be3
lea esp, [ebp - 0xc]
mov esi, 0x4b4
pop ebx
mov eax, esi
pop esi
pop edi
pop ebp
ret
xor ecx, ecx
cmp dword [edx + 8], 0
mov eax, 0xc
je 0x79d93c63
mov dword [ebp - 0x64], esi
mov edi, edx
mov esi, ecx
mov dword [ebp - 0x60], ebx
mov ebx, eax
lea esi, [esi]
mov eax, dword [ebp - 0x5c]
add edi, ebx
lea edx, [ebp - 0x30]
mov ecx, edi
mov dword [esp], eax
mov eax, dword [ebp - 0x60]
call sym._wnet_use_provider
test eax, eax
je 0x79d93e40
cmp eax, 0x55
je 0x79d93e40
mov edi, dword [section..bss]
add esi, 1
add ebx, 0x38
cmp dword [edi + 8], esi
ja 0x79d93de0
mov esi, eax
jmp 0x79d93d23
mov esi, 0x57
jmp 0x79d93d23
xor esi, esi
jmp 0x79d93d23
mov esi, dword [ebp - 0x64]
mov ebx, dword [ebp - 0x60]
jmp 0x79d93c5b
test byte [0x79d9e050], 1
je 0x79d93d23
mov dword [esp + 0x14], str.Persistent_connection_are_not_supported_for_printers_n
mov dword [esp + 0x10], 0x8ac
mov dword [esp + 0xc], str.wnet_use_connection
mov dword [esp + 8], 0x79d9f71d
mov dword [esp + 4], 0x79d9e050
mov dword [esp], 0
call sym._ros_dbg_log
jmp 0x79d93d23
mov eax, dword [edi + 4]
mov dword [ebp - 0x50], 1
add edi, 0x10
mov dword [esp], eax
call sym._lstrlenW_4
sub esp, 4
mov ebx, eax
lea eax, [ebp - 0x50]
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x54]
mov dword [esp + 0x14], 4
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0
mov dword [esp + 4], str.ConnectionType
mov dword [esp], eax
call sym._RegSetValueExW_24
lea eax, [ebx + ebx + 2]
sub esp, 0x18
mov dword [esp + 0x14], eax
mov eax, dword [edi - 0xc]
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x54]
mov dword [esp + 8], 0
mov dword [esp + 4], str.ProviderName
mov dword [esp], eax
call sym._RegSetValueExW_24
mov eax, dword [ebp - 0x54]
sub esp, 0x18
mov dword [esp + 0x14], 4
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0
mov dword [esp + 4], str.ProviderType
mov dword [esp], eax
call sym._RegSetValueExW_24
mov eax, dword [ebp - 0x1c]
sub esp, 0x18
mov dword [esp], eax
call sym._lstrlenW_4
sub esp, 4
lea eax, [eax + eax + 2]
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x54]
mov dword [esp + 8], 0
mov dword [esp + 4], str.RemotePath
mov dword [esp], eax
call sym._RegSetValueExW_24
mov eax, dword [ebp - 0x54]
sub esp, 0x18
mov dword [esp + 0x14], 2
mov dword [esp + 0x10], 0x79d9fe90
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], str.UserName
mov dword [esp], eax
call sym._RegSetValueExW_24
mov eax, dword [ebp - 0x54]
sub esp, 0x18
mov dword [esp], eax
call sym._RegCloseKey_4
sub esp, 4
jmp 0x79d93d15