Function at 0x41602a
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push 0x13c
mov eax, 0x46b880
call fcn.004517f7
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa8], ebx
push 4
mov dword [ebp - 4], ebx
call fcn.0042a525
mov edi, eax
pop ecx
cmp edi, ebx
je 0x416071
mov eax, 0x48dc30
push eax
mov dword [edi], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [ebp - 0xb4], edi
jmp 0x416079
mov dword [ebp - 0xb4], ebx
mov edi, ebx
mov dword [ebp - 0xc4], edi
mov byte [ebp - 4], 1
push dword [ebp + 0xc]
lea esi, [ebp - 0x148]
call fcn.00403b43
mov byte [ebp - 4], 2
mov eax, dword [eax]
lea ecx, [ebp - 0x94]
push ecx
mov ecx, eax
call fcn.00414d1e
pop ecx
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 4
cmp dword [ebp - 0x148], eax
je 0x4160c4
push dword [ebp - 0x148]
call fcn.0044dba4
pop ecx
mov eax, dword [ebp - 0x94]
cmp dword [eax - 0xc], ebx
jle 0x41610a
mov ecx, dword [ebp - 0x98]
lea eax, [ebp - 0x94]
push eax
call fcn.0040283c
mov ecx, dword [ebp - 0x94]
add ecx, 0xfffffff0
call fcn.0040285d
cmp edi, ebx
je 0x41634a
mov eax, dword [edi]
cmp eax, ebx
je 0x416104
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edi
jmp 0x416344
lea eax, [ebp - 0xa0]
push eax
push 0x20019
push ebx
push str.SOFTWAREEPSONEPSON_Scan
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4160cf
push 0x7e
mov word [ebp - 0x90], ax
lea eax, [ebp - 0x8e]
push ebx
push eax
call fcn.0044de40
add esp, 0xc
xor eax, eax
mov dword [ebp - 0xc0], ebx
lea edi, [ebp - 0xbc]
stosd dword es:[edi], eax
lea eax, [ebp - 0xc0]
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x90]
push eax
push ebx
push dword [ebp - 0xa0]
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xb0], 0x40
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x416300
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0xac]
push eax
push 0x20019
push ebx
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0xa0]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x41629e
lea eax, [ebp - 0x9c]
push eax
push ebx
lea eax, [ebp - 0xb8]
push eax
push ebx
push str.Supported
push dword [ebp - 0xac]
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0x9c], ebx
call esi
test eax, eax
jne 0x416292
mov eax, dword [ebp - 0x9c]
add eax, 2
push eax
call fcn.0042a554
mov edi, eax
pop ecx
cmp edi, ebx
je 0x416300
mov eax, dword [ebp - 0x9c]
add eax, 2
push eax
push ebx
push edi
call fcn.0044de40
add esp, 0xc
lea eax, [ebp - 0x9c]
push eax
push edi
lea eax, [ebp - 0xb8]
push eax
push ebx
push str.Supported
push dword [ebp - 0xac]
call esi
lea eax, [ebp - 0xa8]
push eax
push 0x47a6e4
mov dword [ebp - 0xa8], ebx
push edi
jmp 0x41626b
push dword [ebp + 0xc]
push eax
call fcn.0044e8dd
pop ecx
pop ecx
test eax, eax
jne 0x416279
lea eax, [ebp - 0xa8]
push eax
push 0x47a6e4
push ebx
call fcn.00450e83
add esp, 0xc
cmp eax, ebx
jne 0x41624f
jmp 0x41628b
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x94]
call fcn.0040247a
push edi
call fcn.0042a55f
pop ecx
push dword [ebp - 0xac]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x94]
cmp dword [eax - 0xc], ebx
jg 0x416300
push 0x80
lea eax, [ebp - 0x90]
push ebx
push eax
call fcn.0044de40
add esp, 0xc
inc dword [ebp - 0xa4]
lea eax, [ebp - 0xc0]
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0xa4]
mov dword [ebp - 0xb0], 0x40
push dword [ebp - 0xa0]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
je 0x416196
push dword [ebp - 0xa0]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x98]
lea eax, [ebp - 0x94]
push eax
call fcn.0040283c
mov ecx, dword [ebp - 0x94]
add ecx, 0xfffffff0
call fcn.0040285d
mov esi, dword [ebp - 0xb4]
cmp esi, ebx
je 0x41634a
mov eax, dword [esi]
cmp eax, ebx
je 0x416343
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push esi
call fcn.0042a55f
pop ecx
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040285d
mov eax, dword [ebp - 0x98]
call fcn.0045187a
ret