Function at 0x180076f20
Capabilities:
Query or enumerate registry value

Disassembly:
sub rsp, 0x68
mov dword [rsp + 0x34], 1
mov dword [rsp + 0x30], 0x400
lea r8, [rsp + 0x40]
lea rdx, str.SOFTWAREAlphaPluginsDigitalizerEnvironment
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x1800772cd
mov dword [rsp + 0x30], 4
mov dword [rsp + 0x34], 3
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, str.used_dither_method
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x180076fbc
mov dword [rsp + 0x3c], 0x7e0
mov eax, dword [rsp + 0x3c]
mov ecx, dword [rsp + 0x38]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x38]
shr eax, 5
mov dword [0x18010ac68], eax
mov dword [rsp + 0x30], 0x400
mov dword [rsp + 0x34], 1
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [0x18010b070]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, str.User_Log
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x18007701c
mov eax, 1
imul rax, rax, 0
lea rcx, [0x18010b070]
movsx eax, byte [rcx + rax]
test eax, eax
jne 0x1800770b2
lea r8, [rsp + 0x48]
lea rdx, str.SOFTWAREAdobeRegistrationUser
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x18007709e
mov dword [rsp + 0x30], 0x400
mov dword [rsp + 0x34], 1
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [0x18010b070]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, str.NAME
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x180077091
mov eax, 1
imul rax, rax, 0
lea rcx, [0x18010b070]
mov byte [rcx + rax], 0
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1800770b2
mov eax, 1
imul rax, rax, 0
lea rcx, [0x18010b070]
mov byte [rcx + rax], 0
mov dword [rsp + 0x30], 0x400
mov dword [rsp + 0x34], 1
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [0x18010b0b0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, str.Class_ID
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x18007710a
mov eax, 1
imul rax, rax, 0
lea rcx, [0x18010b0b0]
mov byte [rcx + rax], 0
mov dword [rsp + 0x30], 0x400
mov dword [rsp + 0x34], 1
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [0x18010b0d0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, str.Resource_Offset
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x180077162
mov eax, 1
imul rax, rax, 0
lea rcx, [0x18010b0d0]
mov byte [rcx + rax], 0
mov dword [rsp + 0x30], 0x400
mov dword [rsp + 0x34], 1
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [0x18010b0f0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, str.IntelPPC
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x1800771ba
mov eax, 1
imul rax, rax, 0
lea rcx, [0x18010b0f0]
mov byte [rcx + rax], 0
mov dword [rsp + 0x30], 0x400
mov dword [rsp + 0x34], 1
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [0x18010b110]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, str.Offline_Answer
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x180077212
mov eax, 1
imul rax, rax, 0
lea rcx, [0x18010b110]
mov byte [rcx + rax], 0
mov dword [rsp + 0x30], 4
mov dword [rsp + 0x34], 3
mov dword [rsp + 0x38], 0
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, str.MMX_Present
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x180077269
movzx eax, byte [rsp + 0x38]
mov byte [0x18010b150], al
jmp 0x180077270
mov byte [0x18010b150], 0
mov dword [rsp + 0x30], 4
mov dword [rsp + 0x34], 3
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, str.VersionCheck
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x1800772bd
movzx eax, byte [rsp + 0x38]
mov byte [0x18010b151], al
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x180077363
lea r8, [rsp + 0x50]
lea rdx, str.SOFTWAREAdobeRegistrationUser
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x18007734f
mov dword [rsp + 0x30], 0x400
mov dword [rsp + 0x34], 1
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [0x18010b070]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x34]
xor r8d, r8d
lea rdx, str.NAME
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x180077342
mov eax, 1
imul rax, rax, 0
lea rcx, [0x18010b070]
mov byte [rcx + rax], 0
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x180077363
mov eax, 1
imul rax, rax, 0
lea rcx, [0x18010b070]
mov byte [rcx + rax], 0
add rsp, 0x68
ret