Function at 0x422795
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push 0x140
mov eax, 0x5663f1
call fcn.0053d749
mov edi, ecx
xor esi, esi
mov dword [ebp - 0x144], edi
mov dword [ebp - 0x130], esi
push 0x5ca9d0
mov dword [ebp - 4], esi
call fcn.00403d5c
mov ebx, eax
mov dword [ebp - 0x12c], ebx
push 3
mov byte [ebp - 4], 1
push dword [ebp + 8]
lea eax, [ebp - 0x118]
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x11c]
push eax
call fcn.0040b999
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x11c]
push eax
call fcn.004214c9
pop ecx
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 4
cmp dword [ebp - 0x11c], eax
je 0x42281f
push dword [ebp - 0x11c]
call fcn.0053823b
pop ecx
mov eax, dword [ebp - 0x120]
cmp dword [eax - 0xc], esi
jle 0x422838
add eax, 0xfffffff0
push eax
call fcn.00402741
jmp 0x422a6d
lea eax, [ebp - 0x124]
push eax
push 0x20019
push esi
push str.SOFTWAREEPSONEPSON_Scan
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x422861
mov eax, dword [ebp - 0x120]
jmp 0x42282a
xor eax, eax
push 0x7e
mov word [ebp - 0x94], ax
lea eax, [ebp - 0x92]
push esi
push eax
call fcn.00538860
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x14c], esi
lea edi, [ebp - 0x148]
stosd dword es:[edi], eax
lea eax, [ebp - 0x14c]
push eax
push esi
push esi
push esi
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x94]
push eax
push esi
push dword [ebp - 0x124]
mov dword [ebp - 0x134], esi
mov dword [ebp - 0x13c], 0x40
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x422a4c
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x138]
push eax
push 0x20019
push esi
lea eax, [ebp - 0x94]
push eax
push dword [ebp - 0x124]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4229e4
lea eax, [ebp - 0x128]
push eax
push esi
lea eax, [ebp - 0x140]
push eax
push esi
push str.Supported
push dword [ebp - 0x138]
mov dword [ebp - 0x140], esi
mov dword [ebp - 0x128], esi
call ebx
test eax, eax
jne 0x4229d8
mov eax, dword [ebp - 0x128]
add eax, 2
push eax
call fcn.004382b7
mov edi, eax
pop ecx
cmp edi, esi
je 0x422a46
mov eax, dword [ebp - 0x128]
add eax, 2
push eax
push esi
push edi
call fcn.00538860
add esp, 0xc
lea eax, [ebp - 0x128]
push eax
push edi
lea eax, [ebp - 0x140]
push eax
push esi
push str.Supported
push dword [ebp - 0x138]
call ebx
lea eax, [ebp - 0x130]
push eax
push 0x59d78c
mov dword [ebp - 0x130], esi
push edi
jmp 0x4229a3
push dword [ebp + 8]
push eax
call fcn.0053c446
pop ecx
pop ecx
test eax, eax
jne 0x4229b1
lea eax, [ebp - 0x130]
push eax
push 0x59d78c
push esi
call fcn.0053ce2b
add esp, 0xc
cmp eax, esi
jne 0x422987
jmp 0x4229d1
lea eax, [ebp - 0x94]
push eax
call fcn.0053894e
pop ecx
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x120]
call fcn.004026d0
push edi
call fcn.004382c2
pop ecx
push dword [ebp - 0x138]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x120]
cmp dword [eax - 0xc], esi
jg 0x422a46
push 0x80
lea eax, [ebp - 0x94]
push esi
push eax
call fcn.00538860
add esp, 0xc
inc dword [ebp - 0x134]
lea eax, [ebp - 0x14c]
push eax
push esi
push esi
push esi
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x94]
push eax
push dword [ebp - 0x134]
mov dword [ebp - 0x13c], 0x40
push dword [ebp - 0x124]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
je 0x4228ce
mov ebx, dword [ebp - 0x12c]
push dword [ebp - 0x124]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x120]
add eax, 0xfffffff0
push eax
call fcn.00402741
mov edi, dword [ebp - 0x144]
pop ecx
mov ecx, dword [ebp - 0x120]
add eax, 0x10
add ecx, 0xfffffff0
mov dword [edi], eax
call fcn.00402a50
cmp ebx, esi
je 0x422a99
mov eax, dword [ebx]
cmp eax, esi
je 0x422a92
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push ebx
call fcn.004382c2
pop ecx
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00402a50
mov eax, edi
call fcn.0053d7cc
ret