Function at 0x406600
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x15d0
call fcn.0044e270
mov eax, dword [0x48ae5c]
xor eax, esp
mov dword [esp + 0x15cc], eax
push esi
push edi
push 0x200
xor edi, edi
lea eax, [esp + 0x244]
push edi
push eax
mov dword [ebx + 0x319c], 1
call fcn.0044e830
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
lea ecx, [esp + 0x30]
push str.kmstmnet_08d
push ecx
call fcn.0044d46e
mov edx, dword [ebx + 0x3194]
add esp, 0xc
lea eax, [esp + 0x2c]
push eax
lea ecx, [ebx + 0x2ef0]
mov dword [esp + 0x14], edx
mov dword [ebx + 0x3194], 2
call fcn.004033f0
mov ecx, dword [ebx + 0x3108]
lea edx, [ebx + 0x310c]
call fcn.00401910
cmp eax, edi
jne 0x406b30
push str.1.3.6.1.4.1.1347.47.1.2.1.4.1
lea ecx, [ebx + 0x2ef0]
call fcn.00403090
mov ecx, dword [ebx + 0x3084]
lea eax, [esp + 0x140]
lea edx, [ebx + 0x3088]
push eax
call fcn.00401070
add esp, 4
test eax, eax
jne 0x406b0a
mov esi, 0x4800a4
lea eax, [esp + 0x140]
mov cl, byte [eax]
cmp cl, byte [esi]
jne 0x4066f8
test cl, cl
je 0x4066f4
mov cl, byte [eax + 1]
cmp cl, byte [esi + 1]
jne 0x4066f8
add eax, 2
add esi, 2
test cl, cl
jne 0x4066d8
xor eax, eax
jmp 0x4066fd
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x406b0a
push str.1.3.6.1.4.1.1347.47.1.1.1.6.1
lea ecx, [ebx + 0x2ef0]
mov dword [esp + 0xc], edi
call fcn.00403090
lea ecx, [esp + 8]
push ecx
mov ecx, dword [ebx + 0x3084]
lea edx, [ebx + 0x3088]
call fcn.00401300
add esp, 4
cmp dword [esp + 8], edi
jle 0x406ae9
mov dword [esp + 0xc], edi
mov ecx, 7
mov esi, str.1.3.6.1.4.1.1347.47.6.1.1.2
lea edi, [esp + 0x40]
lea eax, [esp + 0x40]
rep movsd dword es:[edi], dword [esi]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x406755
mov dx, word [0x4800e4]
mov cl, byte [0x4800e6]
mov word [eax], dx
lea edx, [esp + 0x40]
mov byte [eax + 2], cl
push edx
lea ecx, [ebx + 0x2ef0]
call fcn.00403090
mov ecx, dword [ebx + 0x3084]
lea eax, [esp + 0xc]
lea edi, [ebx + 0x3088]
push eax
mov edx, edi
call fcn.00401300
mov ecx, dword [esp + 0x10]
add esp, 4
cmp ecx, dword [ebx + 0x2ee8]
je 0x406ae7
mov esi, 1
push esi
push str.1.3.6.1.4.1.1347.47.6.1.1.7
lea edx, [esp + 0x48]
push str._s._d
push edx
call fcn.0044d46e
add esp, 0x10
lea eax, [esp + 0x40]
push eax
lea ecx, [ebx + 0x2ef0]
call fcn.00403090
mov ecx, dword [ebx + 0x3084]
lea edx, [esp + 0x20]
push edx
mov edx, edi
call fcn.00401300
add esp, 4
test eax, eax
jne 0x406999
mov eax, dword [ebx + 0x2eec]
cmp eax, dword [esp + 0x20]
jge 0x406a66
push esi
push str.1.3.6.1.4.1.1347.47.6.1.1.12
lea ecx, [esp + 0x48]
push str._s._d
push ecx
call fcn.0044d46e
add esp, 0x10
lea edx, [esp + 0x40]
push edx
lea ecx, [ebx + 0x2ef0]
call fcn.00403090
mov ecx, dword [ebx + 0x3084]
lea eax, [esp + 0xfd0]
push eax
mov edx, edi
call fcn.00401070
add esp, 4
test eax, eax
jne 0x406999
push 0xc0
lea ecx, [esp + 0x444]
push ecx
push 0xffffffffffffffff
lea edx, [esp + 0xfdc]
push edx
push eax
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x406999
lea ecx, [ebx + 0x2ce4]
lea eax, [esp + 0x440]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4068ab
test dx, dx
je 0x4068a7
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4068ab
add eax, 4
add ecx, 4
test dx, dx
jne 0x406885
xor eax, eax
jmp 0x4068b0
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x406999
push esi
push str.1.3.6.1.4.1.1347.47.6.1.1.3
lea eax, [esp + 0x48]
push str._s._d
push eax
call fcn.0044d46e
add esp, 0x10
lea ecx, [esp + 0x40]
push ecx
lea ecx, [ebx + 0x2ef0]
call fcn.00403090
mov ecx, dword [ebx + 0x3084]
lea edx, [esp + 0x18]
push edx
lea edx, [ebx + 0x3088]
call fcn.00401300
add esp, 4
test eax, eax
jne 0x406999
cmp dword [esp + 0x18], 1
jne 0x406999
push esi
push str.1.3.6.1.4.1.1347.47.6.1.1.4
lea eax, [esp + 0x48]
push str._s._d
push eax
call fcn.0044d46e
add esp, 0x10
lea ecx, [esp + 0x40]
push ecx
lea ecx, [ebx + 0x2ef0]
call fcn.00403090
mov ecx, dword [ebx + 0x3084]
lea edx, [esp + 0x5c0]
push edx
lea edx, [ebx + 0x3088]
call fcn.00401070
add esp, 4
test eax, eax
jne 0x406999
push esi
push str.1.3.6.1.4.1.1347.47.6.1.1.5
lea eax, [esp + 0x48]
push str._s._d
push eax
call fcn.0044d46e
add esp, 0x10
lea ecx, [esp + 0x40]
push ecx
lea ecx, [ebx + 0x2ef0]
call fcn.00403090
mov ecx, dword [ebx + 0x3084]
lea edx, [esp + 0x24]
push edx
lea edx, [ebx + 0x3088]
call fcn.00401300
add esp, 4
test eax, eax
je 0x406a09
inc esi
push esi
push str.1.3.6.1.4.1.1347.47.6.1.1.2
lea eax, [esp + 0x48]
push str._s._d
push eax
call fcn.0044d46e
add esp, 0x10
lea ecx, [esp + 0x40]
push ecx
lea ecx, [ebx + 0x2ef0]
call fcn.00403090
mov ecx, dword [ebx + 0x3084]
lea edx, [esp + 0x1c]
push edx
lea edi, [ebx + 0x3088]
mov edx, edi
call fcn.00401300
add esp, 4
test eax, eax
jne 0x406a66
mov eax, dword [esp + 0x1c]
cmp eax, dword [ebx + 0x2ee8]
je 0x406a66
mov eax, dword [esp + 8]
cmp eax, 5
jl 0x4069ff
mov eax, 5
cmp esi, eax
jle 0x4067b0
jmp 0x406a66
cmp dword [esp + 0x24], 0
jne 0x406a27
lea ecx, [esp + 0x5c0]
push ecx
push str._PJL_USTATUS_JOB_r_nEND_r_nNAME__s__r_n_f
lea edx, [esp + 0x248]
push edx
jmp 0x406a3c
lea eax, [esp + 0x5c0]
push eax
push str._PJL_USTATUS_JOB_r_nCANCEL_r_nNAME__s__r_n_f
lea ecx, [esp + 0x248]
push ecx
call fcn.0044d46e
add esp, 0xc
lea edx, [esp + 0x240]
push edx
push ebx
call fcn.004051c0
mov dword [ebx + 0xaa0], 0x2727
mov dword [ebx + 0xaa4], 0
mov eax, dword [esp + 0xc]
lea ecx, [ebx + 0x330]
push ecx
push str.SoftwareKyocera_MitaStatusMonitor_s
lea edx, [esp + 0xbc8]
push 0x208
push edx
mov dword [ebx + 0x2ee8], eax
call fcn.0044dacd
add esp, 0x10
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x18]
push ecx
push 0
push 0x2001f
push 0
push 0
push 0
lea edx, [esp + 0xbdc]
push edx
push reloc.WS2_32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
js 0x406ae7
push 4
lea eax, [ebx + 0x2ee8]
push eax
mov eax, dword [esp + 0x1c]
push 4
push 0
push str.LastID
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edi, edi
push str.FFFFFFFFFFFFFFF
lea ecx, [ebx + 0x2ef0]
call fcn.004033f0
mov ecx, dword [ebx + 0x3108]
lea edx, [ebx + 0x310c]
call fcn.00401910
mov eax, dword [esp + 0x10]
mov dword [ebx + 0x3194], eax
xor eax, eax
mov ecx, dword [esp + 0x15d4]
mov dword [ebx + 0x319c], edi
pop edi
pop esi
xor ecx, esp
call fcn.0044ca30
mov esp, ebp
pop ebp
ret
cmp eax, 2
jne 0x406b0a
mov edx, dword [esp + 0x10]
mov dword [ebx + 0x3194], edx
mov eax, 1
jmp 0x406b16