Function at 0x426050
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4d8
mov eax, dword [0x488fdc]
xor eax, ebp
mov dword [ebp - 8], eax
mov al, byte [0x46a08a]
mov byte [ebp - 0x4d0], al
push 0xc7
push 0
lea ecx, [ebp - 0x4cf]
push ecx
call fcn.004456b0
add esp, 0xc
mov dl, byte [0x46a08b]
mov byte [ebp - 0x1e8], dl
push 0x103
push 0
lea eax, [ebp - 0x1e7]
push eax
call fcn.004456b0
add esp, 0xc
mov cl, byte [0x46a099]
mov byte [ebp - 0x400], cl
push 0x103
push 0
lea edx, [ebp - 0x3ff]
push edx
call fcn.004456b0
add esp, 0xc
mov dword [ebp - 0x4d4], 0x104
mov dword [ebp - 4], 0x104
mov al, byte [0x46a09a]
mov byte [ebp - 0x70], al
push 0x63
push 0
lea ecx, [ebp - 0x6f]
push ecx
call fcn.004456b0
add esp, 0xc
mov dl, byte [0x46a09b]
mov byte [ebp - 0xd8], dl
push 0x63
push 0
lea eax, [ebp - 0xd7]
push eax
call fcn.004456b0
add esp, 0xc
mov cl, byte [0x46a0b2]
mov byte [ebp - 0x2f0], cl
push 0x103
push 0
lea edx, [ebp - 0x2ef]
push edx
call fcn.004456b0
add esp, 0xc
push 0x46c1b4
call fcn.00449f47
add esp, 4
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
je 0x426164
mov eax, dword [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x2f0]
push ecx
call fcn.00445510
add esp, 8
push 0x46c224
call fcn.00449f47
add esp, 4
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
je 0x4261b6
mov edx, dword [ebp - 0xdc]
push edx
push 0x46c22c
push 0x491a48
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xdc]
push eax
push 0x46c354
push 0x48fbe8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x4261e6
push 0x46c364
push str._s_faxq_vsifax_
push 0x491a48
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push str.C:Program_FilesVSI_FAXServer
push str._s_spoolmail_
push 0x491a48
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push str.C:Vsi_faxServer
push 0x48d748
call fcn.00445510
add esp, 8
push str.SOFTWAREVSIFax_Server
lea ecx, [ebp - 0x4d0]
push ecx
call fcn.00445510
add esp, 8
lea edx, [ebp - 0x404]
push edx
push 0xf003f
push 0
lea eax, [ebp - 0x4d0]
push eax
push SysStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
je 0x426275
push str.SOFTWAREVSI_FAXFaxServer
lea ecx, [ebp - 0x4d0]
push ecx
call fcn.00445510
add esp, 8
lea edx, [ebp - 0x404]
push edx
push 0xf003f
push 0
lea eax, [ebp - 0x4d0]
push eax
push SysStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
jne 0x4262c2
lea ecx, [ebp - 4]
push ecx
lea edx, [ebp - 0x400]
push edx
push 0
push 0
push str.InstallDir
mov eax, dword [ebp - 0x404]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
jne 0x4262c2
lea ecx, [ebp - 0x400]
push ecx
push 0x48d748
call fcn.00445510
add esp, 8
mov edx, dword [ebp - 0x404]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x46c2dc
push 0x48d9e0
call fcn.00445510
add esp, 8
push str.SYSTEMControlSet001ControlPrintMonitorsVSI_FAX_PortPorts
lea eax, [ebp - 0x4d0]
push eax
call fcn.00445510
add esp, 8
lea ecx, [ebp - 0x4d8]
push ecx
push 0xf003f
push 0
lea edx, [ebp - 0x4d0]
push edx
push SysStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
je 0x426465
push str.SYSTEMControlSet001ControlPrintMonitorsVSI_FAX_Port_3.0PortsVFXSERVER:Doc
lea eax, [ebp - 0x4d0]
push eax
call fcn.00445510
add esp, 8
lea ecx, [ebp - 0x4d8]
push ecx
push 0xf003f
push 0
lea edx, [ebp - 0x4d0]
push edx
push SysStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
jne 0x426415
lea eax, [ebp - 0x4d4]
push eax
lea ecx, [ebp - 0x1e8]
push ecx
push 0
push 0
push 0x46c41c
mov edx, dword [ebp - 0x4d8]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x4d8]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x2f4], 0
jne 0x426413
lea ecx, [ebp - 0x1e8]
push ecx
push 0x46c47c
push 0x48d9e0
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x2f0]
push edx
call fcn.00445950
add esp, 4
test eax, eax
je 0x42640e
push str.VSITEMP
lea eax, [ebp - 0x1e8]
push eax
call fcn.0040fd70
add esp, 8
test eax, eax
je 0x42640e
lea ecx, [ebp - 0x2f0]
push ecx
push 0x46c498
push 0x48d9e0
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x426679
jmp 0x426465
cmp dword [ebp - 0x2f4], 0
je 0x426465
push str.SYSTEMControlSet001ControlPrintMonitorsVSI_FAX_Port_3.0Ports
lea edx, [ebp - 0x4d0]
push edx
call fcn.00445510
add esp, 8
lea eax, [ebp - 0x4d8]
push eax
push 0xf003f
push 0
lea ecx, [ebp - 0x4d0]
push ecx
push SysStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x2f4], eax
mov edx, dword [ebp - 0x4d8]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x2f4], 0
je 0x42658b
push str.SYSTEMControlSet001ControlPrintMonitorsVSI_FAX_Port_2.0PortsVFXSERVER:Doc
lea eax, [ebp - 0x4d0]
push eax
call fcn.00445510
add esp, 8
lea ecx, [ebp - 0x4d8]
push ecx
push 0xf003f
push 0
lea edx, [ebp - 0x4d0]
push edx
push SysStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
jne 0x426528
lea eax, [ebp - 0x4d4]
push eax
lea ecx, [ebp - 0x1e8]
push ecx
push 0
push 0
push str.Directory
mov edx, dword [ebp - 0x4d8]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
je 0x4264fa
push 0x46c4fc
push 0x48d9e0
call fcn.00445510
add esp, 8
mov eax, dword [ebp - 0x4d8]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x1e8]
push ecx
push 0x46c57c
push 0x48d9e0
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x426679
cmp dword [ebp - 0x2f4], 0
je 0x42658b
push str.SYSTEMControlSet001ControlPrintMonitorsVSI_FAX_Port_2.0Ports
lea edx, [ebp - 0x4d0]
push edx
call fcn.00445510
add esp, 8
lea eax, [ebp - 0x4d8]
push eax
push 0xf003f
push 0
lea ecx, [ebp - 0x4d0]
push ecx
push SysStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
je 0x42658b
push 0x46c5d4
push 0x48d9e0
call fcn.00445510
add esp, 8
jmp 0x426679
lea edx, [ebp - 0x4d4]
push edx
lea eax, [ebp - 0x1e8]
push eax
push 0
push 0
push str.VFXSERVER:
mov ecx, dword [ebp - 0x4d8]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
je 0x4265d0
push 0x46c60c
push 0x48d9e0
call fcn.00445510
add esp, 8
mov edx, dword [ebp - 0x4d8]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x46c638
lea eax, [ebp - 0x1e8]
push eax
call fcn.004497e8
add esp, 8
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
je 0x426667
mov ecx, dword [ebp - 0xdc]
push ecx
lea edx, [ebp - 0x70]
push edx
call fcn.00445510
add esp, 8
push 0x46c63c
push 0
call fcn.004497e8
add esp, 8
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
je 0x426667
mov eax, dword [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xd8]
push ecx
call fcn.00445510
add esp, 8
lea edx, [ebp - 0xd8]
push edx
lea eax, [ebp - 0x70]
push eax
push 0x46c640
push 0x48d9e0
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x426679
push str.C:Vsi_faxServer_spool_tempcurrentpcl.pcl
push 0x48d9e0
call fcn.00445510
add esp, 8
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0044545a
mov esp, ebp
pop ebp
ret