Function at 0x422668
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push 0x140
mov eax, 0x5667b2
call fcn.0053da79
mov edi, ecx
xor esi, esi
mov dword [ebp - 0x144], edi
mov dword [ebp - 0x130], esi
push 0x5ca9d0
mov dword [ebp - 4], esi
call fcn.00403a08
mov ebx, eax
mov dword [ebp - 0x12c], ebx
push 3
mov byte [ebp - 4], 1
push dword [ebp + 8]
lea eax, [ebp - 0x118]
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x11c]
push eax
call fcn.0040b658
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x11c]
push eax
call fcn.004213a0
pop ecx
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 4
cmp dword [ebp - 0x11c], eax
je 0x4226f2
push dword [ebp - 0x11c]
call fcn.0053855f
pop ecx
mov eax, dword [ebp - 0x120]
cmp dword [eax - 0xc], esi
jle 0x42270b
add eax, 0xfffffff0
push eax
call fcn.00402431
jmp 0x422940
lea eax, [ebp - 0x124]
push eax
push 0x20019
push esi
push str.SOFTWAREEPSONEPSON_Scan
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x422734
mov eax, dword [ebp - 0x120]
jmp 0x4226fd
xor eax, eax
push 0x7e
mov word [ebp - 0x94], ax
lea eax, [ebp - 0x92]
push esi
push eax
call fcn.00539100
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x14c], esi
lea edi, [ebp - 0x148]
stosd dword es:[edi], eax
lea eax, [ebp - 0x14c]
push eax
push esi
push esi
push esi
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x94]
push eax
push esi
push dword [ebp - 0x124]
mov dword [ebp - 0x134], esi
mov dword [ebp - 0x13c], 0x40
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x42291f
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x138]
push eax
push 0x20019
push esi
lea eax, [ebp - 0x94]
push eax
push dword [ebp - 0x124]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4228b7
lea eax, [ebp - 0x128]
push eax
push esi
lea eax, [ebp - 0x140]
push eax
push esi
push str.Supported
push dword [ebp - 0x138]
mov dword [ebp - 0x140], esi
mov dword [ebp - 0x128], esi
call ebx
test eax, eax
jne 0x4228ab
mov eax, dword [ebp - 0x128]
add eax, 2
push eax
call fcn.004385d5
mov edi, eax
pop ecx
cmp edi, esi
je 0x422919
mov eax, dword [ebp - 0x128]
add eax, 2
push eax
push esi
push edi
call fcn.00539100
add esp, 0xc
lea eax, [ebp - 0x128]
push eax
push edi
lea eax, [ebp - 0x140]
push eax
push esi
push str.Supported
push dword [ebp - 0x138]
call ebx
lea eax, [ebp - 0x130]
push eax
push 0x59d6ac
mov dword [ebp - 0x130], esi
push edi
jmp 0x422876
push dword [ebp + 8]
push eax
call fcn.0053c756
pop ecx
pop ecx
test eax, eax
jne 0x422884
lea eax, [ebp - 0x130]
push eax
push 0x59d6ac
push esi
call fcn.0053d15b
add esp, 0xc
cmp eax, esi
jne 0x42285a
jmp 0x4228a4
lea eax, [ebp - 0x94]
push eax
call fcn.00538bc9
pop ecx
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x120]
call fcn.004023c0
push edi
call fcn.004385e0
pop ecx
push dword [ebp - 0x138]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x120]
cmp dword [eax - 0xc], esi
jg 0x422919
push 0x80
lea eax, [ebp - 0x94]
push esi
push eax
call fcn.00539100
add esp, 0xc
inc dword [ebp - 0x134]
lea eax, [ebp - 0x14c]
push eax
push esi
push esi
push esi
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x94]
push eax
push dword [ebp - 0x134]
mov dword [ebp - 0x13c], 0x40
push dword [ebp - 0x124]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
je 0x4227a1
mov ebx, dword [ebp - 0x12c]
push dword [ebp - 0x124]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x120]
add eax, 0xfffffff0
push eax
call fcn.00402431
mov edi, dword [ebp - 0x144]
pop ecx
mov ecx, dword [ebp - 0x120]
add eax, 0x10
add ecx, 0xfffffff0
mov dword [edi], eax
call fcn.00402722
cmp ebx, esi
je 0x42296c
mov eax, dword [ebx]
cmp eax, esi
je 0x422965
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push ebx
call fcn.004385e0
pop ecx
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00402722
mov eax, edi
call fcn.0053dafc
ret