Function at 0x180077bb0
Capabilities:
Query or enumerate registry value

Disassembly:
push rbx
sub rsp, 0xf0
mov rax, qword [0x18013e1e0]
xor rax, rsp
mov qword [rsp + 0xe0], rax
cmp dword [rcx + 0x260], 0
mov rbx, rcx
je 0x180077d98
mov eax, dword [rcx + reloc.OLEAUT32.dll_VARIANT_UserUnmarshal]
test eax, eax
je 0x180077d8c
sub eax, 1
je 0x180077d18
cmp eax, 1
jne 0x180077f0d
mov eax, dword [rcx + 0x114]
sub eax, 3
je 0x180077d0c
sub eax, 1
je 0x180077ce7
sub eax, 1
je 0x180077c61
cmp eax, 1
jne 0x180077f0d
mov eax, dword [rcx + 0x118]
test eax, eax
je 0x180077c4a
cmp eax, 1
jne 0x180077f0d
xor ecx, ecx
cmp byte [rbx + 0x22a], al
sete cl
add ecx, 0x12
mov dword [rbx + 8], ecx
jmp 0x180077f0d
xor ecx, ecx
cmp byte [rbx + 0x22a], 1
setne cl
add ecx, 0x10
mov dword [rbx + 8], ecx
jmp 0x180077f0d
mov eax, dword [rcx + 0x118]
test eax, eax
je 0x180077cdb
sub eax, 1
je 0x180077ccf
cmp eax, 1
jne 0x180077f0d
mov eax, 0x8000
cmp word [rcx + 0x228], ax
jne 0x180077c93
mov dword [rcx + 8], SafeArrayGetDim
jmp 0x180077f0d
cmp byte [rcx + 0x22a], 1
jne 0x180077cb2
cmp word [rcx + 0x230], 9
jne 0x180077cb2
mov dword [rcx + 8], reloc.OLEAUT32.dll_VariantTimeToDosDateTime
jmp 0x180077f0d
mov ecx, 0x59
call qword [sym.imp.USER32.dll_GetSystemMetrics]
xor ecx, ecx
test eax, eax
setne cl
add ecx, 0xe
mov dword [rbx + 8], ecx
jmp 0x180077f0d
mov dword [rcx + 8], reloc.OLEAUT32.dll_VariantChangeType
jmp 0x180077f0d
mov dword [rcx + 8], 0xa
jmp 0x180077f0d
movzx ecx, byte [rcx + 0x22a]
sub ecx, 1
je 0x180077f06
cmp ecx, 2
jne 0x180077f0d
mov dword [rbx + 8], 9
jmp 0x180077f0d
mov dword [rcx + 8], 7
jmp 0x180077f0d
cmp dword [rcx + 0x114], 4
jne 0x180077f0d
mov eax, dword [rcx + 0x118]
test eax, eax
je 0x180077d61
cmp eax, 0xa
je 0x180077d49
cmp eax, 0x5a
jne 0x180077f0d
mov dword [rcx + 8], 6
jmp 0x180077f0d
xor ecx, ecx
cmp word [rbx + 0x124], 0x41
sete cl
add ecx, 4
mov dword [rbx + 8], ecx
jmp 0x180077f0d
movzx eax, word [rcx + 0x124]
cmp ax, 0x42
je 0x180077d80
cmp ax, 0x43
je 0x180077d80
mov dword [rcx + 8], 2
jmp 0x180077f0d
mov dword [rcx + 8], 3
jmp 0x180077f0d
mov dword [rcx + 8], 1
jmp 0x180077f0d
lea rax, [rsp + 0x38]
lea rdx, str.SYSTEMCurrentControlSetControlProductOptions
mov r9d, 1
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov dword [rsp + 0x30], 0x50
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x180077f0d
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea rdx, str.ProductType
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x180077f0d
cmp dword [rsp + 0x30], 0x50
ja 0x180077f0d
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rdx, [rsp + 0x40]
lea rcx, str.WINNT
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x180077e46
cmp dword [rbx + 0x114], 4
ja 0x180077e46
mov dword [rbx + 8], 8
mov dword [rbx + 0xc], 1
lea rdx, [rsp + 0x40]
lea rcx, str.LANMANNT
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x180077ea6
mov eax, dword [rbx + 0x114]
cmp eax, 5
jne 0x180077e93
cmp dword [rbx + 0x118], 2
jne 0x180077e77
mov dword [rbx + 8], SafeArrayLock
cmp eax, 5
jne 0x180077e93
cmp dword [rbx + 0x118], 0
jne 0x180077e93
mov dword [rbx + 8], 0xa
mov dword [rbx + 0xc], 2
cmp eax, 4
ja 0x180077ea6
mov dword [rbx + 8], 8
mov dword [rbx + 0xc], 2
lea rdx, [rsp + 0x40]
lea rcx, str.SERVERNT
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x180077f0d
mov eax, dword [rbx + 0x114]
cmp eax, 5
jne 0x180077efa
cmp dword [rbx + 0x118], 2
jne 0x180077ede
mov dword [rbx + 8], SafeArrayLock
mov dword [rbx + 0xc], SafeArrayLock
cmp eax, 5
jne 0x180077efa
cmp dword [rbx + 0x118], 0
jne 0x180077efa
mov dword [rbx + 8], 0xa
mov dword [rbx + 0xc], 3
cmp eax, 4
ja 0x180077f0d
mov dword [rbx + 0xc], SafeArrayLock
mov dword [rbx + 8], 8
mov rcx, qword [rsp + 0xe0]
xor rcx, rsp
call fcn.1800bf8d0
add rsp, 0xf0
pop rbx
ret