Function at 0x1000c6f0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov ebx, eax
sub esp, 0x568
mov edi, dword [sym.imp.ucrtbase.dll_wcslen]
mov dword [esp], str.Windows_NT_x86
call edi
mov dword [esp], ebx
mov esi, eax
call edi
lea edi, [esi + eax + 0x49]
mov eax, dword [sym.imp.ucrtbase.dll_malloc]
add edi, edi
mov dword [ebp - 0x550], edi
mov dword [esp], edi
mov dword [ebp - 0x554], eax
call eax
test eax, eax
je 0x1000c949
shr edi, 1
mov dword [esp + 0xc], str.Windows_NT_x86
mov esi, eax
mov dword [esp + 4], edi
mov dword [esp + 8], str.SystemCurrentControlSetControlPrintEnvironments_sPrint_Processors_
mov dword [esp], eax
call sym._swprintf
mov dword [esp + 4], ebx
mov dword [esp], esi
call dword [sym.imp.ucrtbase.dll_wcscat]
lea eax, [ebp - 0x54c]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyW]
mov edi, eax
mov eax, dword [sym.imp.ucrtbase.dll_free]
sub esp, 0xc
mov dword [esp], esi
mov dword [ebp - 0x558], eax
call eax
test edi, edi
jne 0x1000c949
lea eax, [ebp - 0x41c]
lea edi, [ebp - 0x550]
mov dword [esp + 0x10], 0x410
mov dword [esp + 0x14], edi
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0
call sym._fpGetPrintProcessorDirectory_24
sub esp, 0x18
test eax, eax
je 0x1000cac0
mov eax, dword [ebp - 0x550]
mov edx, 0x5c
mov dword [esp + 0x14], edi
mov dword [esp + 0xc], 0
mov ecx, eax
and eax, 0xfffffffe
mov dword [esp + 8], 0
shr ecx, 1
mov dword [esp + 4], str.Driver
mov word [ebp + ecx*2 - 0x41e], dx
mov edx, 0x208
sub edx, ecx
lea ecx, [ebp - 0x41c]
add eax, ecx
add edx, edx
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x54c]
mov dword [ebp - 0x550], edx
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
mov edi, eax
mov eax, dword [ebp - 0x54c]
sub esp, 0x18
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
sub esp, 4
test edi, edi
jne 0x1000c949
mov dword [esp], 0x18
mov eax, dword [ebp - 0x554]
call eax
mov esi, eax
test eax, eax
je 0x1000c949
test byte [0x100131d8], 8
jne 0x1000c958
lea eax, [ebp - 0x41c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_LoadLibraryW]
mov dword [esi], eax
sub esp, 4
test eax, eax
je 0x1000c93e
mov edi, dword [sym.imp.kernel32.dll_GetProcAddress]
mov dword [esp + 4], str.EnumPrintProcessorDatatypesW
mov dword [esp], eax
call edi
sub esp, 8
mov dword [esi + 8], eax
mov dword [esp + 4], str.OpenPrintProcessor
mov eax, dword [esi]
mov dword [esp], eax
call edi
sub esp, 8
mov dword [esi + 0xc], eax
mov dword [esp + 4], str.PrintDocumentOnPrintProcessor
mov eax, dword [esi]
mov dword [esp], eax
call edi
sub esp, 8
mov dword [esi + 0x10], eax
mov dword [esp + 4], str.ClosePrintProcessor
mov eax, dword [esi]
mov dword [esp], eax
call edi
mov ecx, dword [esi + 8]
mov dword [esi + 0x14], eax
sub esp, 8
test ecx, ecx
je 0x1000c930
mov edx, dword [esi + 0xc]
test edx, edx
je 0x1000c930
mov edi, dword [esi + 0x10]
test edi, edi
je 0x1000c930
test eax, eax
je 0x1000c930
mov dword [esp], ebx
call dword [sym.imp.ucrtbase.dll__wcsdup]
mov dword [esi + 4], eax
lea esp, [ebp - 0xc]
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esi]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FreeLibrary]
sub esp, 4
mov dword [esp], esi
mov eax, dword [ebp - 0x558]
call eax
lea esp, [ebp - 0xc]
xor esi, esi
pop ebx
mov eax, esi
pop esi
pop edi
pop ebp
ret
lea eax, [ebp - 0x41c]
shr eax, 0x10
je 0x1000cbb0
lea eax, [ebp - 0x41c]
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, str._invalid_
sub esp, 8
test eax, eax
jne 0x1000ca8a
cmp word [ebp - 0x41c], 0
je 0x1000cb8a
lea esi, [esi]
mov edx, eax
lea eax, [eax + 1]
cmp word [ebp + edx*2 - 0x41a], 0
jne 0x1000c9a0
mov ecx, 0x224c
mov dword [ebp - 0x554], esi
lea edi, [ebp - 0x546]
mov word [ebp - 0x548], cx
lea ecx, [ebp - 0x41c]
mov dword [ebp - 0x55c], ebx
jmp 0x1000ca13
cmp ax, 9
je 0x1000cb68
cmp ax, 0xa
jne 0x1000cafe
mov eax, 0x6e5c
add edi, 2
mov word [edi - 2], ax
lea ebx, [ebp - 0x426]
lea eax, [edx - 1]
cmp edi, ebx
ja 0x1000ca50
test edx, edx
jle 0x1000ca50
mov edx, eax
movzx eax, word [ecx]
add ecx, 2
cmp ax, 0xd
je 0x1000cae0
jbe 0x1000c9e0
cmp ax, 0x22
je 0x1000cb50
cmp ax, 0x5c
jne 0x1000caf1
mov ebx, 0x5c5c
add edi, 2
mov word [edi - 2], bx
jmp 0x1000ca00
mov esi, dword [ebp - 0x554]
mov ebx, dword [ebp - 0x55c]
mov byte [edi], 0x22
test eax, eax
jle 0x1000cba3
mov edx, 0x2e2e
mov byte [edi + 3], 0x2e
lea eax, [edi + 4]
mov word [edi + 1], dx
mov byte [eax], 0
lea eax, [ebp - 0x548]
mov dword [esp], eax
call sym.___wine_dbg_strdup
mov edx, eax
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.loading_print_processor:__s_n
mov dword [esp + 8], str.print_proc_load
mov dword [esp + 4], 0x100131d8
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_1
jmp 0x1000c885
mov eax, dword [ebp - 0x54c]
xor esi, esi
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov eax, esi
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x725c
add edi, 2
mov word [edi - 2], ax
jmp 0x1000ca00
lea esi, [eax - 0x20]
cmp si, 0x5e
jbe 0x1000cb80
mov esi, eax
mov byte [edi], 0x5c
add edi, 5
shr si, 0xc
movzx esi, si
movzx ebx, byte [esi + str.0123456789abcdefcopy_servername_from_name]
mov esi, eax
shr si, 8
and esi, 0xf
mov byte [edi - 4], bl
movzx ebx, byte [esi + str.0123456789abcdefcopy_servername_from_name]
mov esi, eax
and eax, 0xf
shr si, 4
movzx eax, byte [eax + str.0123456789abcdefcopy_servername_from_name]
and esi, 0xf
mov byte [edi - 3], bl
movzx ebx, byte [esi + str.0123456789abcdefcopy_servername_from_name]
mov byte [edi - 1], al
mov byte [edi - 2], bl
jmp 0x1000ca00
mov esi, 0x225c
add edi, 2
mov word [edi - 2], si
jmp 0x1000ca00
mov eax, 0x745c
add edi, 2
mov word [edi - 2], ax
jmp 0x1000ca00
mov byte [edi], al
add edi, 1
jmp 0x1000ca00
mov eax, 0x224c
mov byte [ebp - 0x546], 0x22
lea edi, [ebp - 0x546]
mov word [ebp - 0x548], ax
lea eax, [edi + 1]
jmp 0x1000ca77
lea eax, [ebp - 0x41c]
mov dword [esp], str._04x
mov dword [ebp - 0x554], eax
movzx eax, word [ebp - 0x554]
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf.constprop.0_1
mov edx, eax
jmp 0x1000ca8a