Function at 0x75a6d26d
Capabilities:
Query or enumerate registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x29c
mov eax, dword [0x75bc8d18]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x80], ebx
call fcn.759b3ca6
lea eax, [ebp - 0x64]
mov dword [ebp - 0x6c], 0x27
mov dword [ebp - 0x70], eax
cmp esi, ebx
jne 0x75a6d2ce
lea ecx, [ebp - 0x70]
call fcn.759b499d
lea ecx, [ebp - 0x88]
call fcn.759b3ed0
push 0xfffffffffffffffe
pop eax
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.759b1748
leave
ret 4
push edi
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 0x26
je 0x75a6d310
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x70]
push 1
push esi
call fcn.759dce7a
add esp, 0x20
test eax, eax
jne 0x75a6d30d
push 0xfffffffffffffffe
pop esi
lea ecx, [ebp - 0x70]
call fcn.759b499d
lea ecx, [ebp - 0x88]
call fcn.759b3ed0
mov eax, esi
pop edi
jmp 0x75a6d2be
mov esi, dword [ebp - 0x70]
lea ecx, [ebp - 0x20]
call fcn.759b3c2d
push ebx
push ebx
lea eax, [ebp - 0x20]
push eax
push esi
mov dword [ebp - 0x78], ebx
call fcn.759dec5b
add esp, 0x10
neg eax
sbb al, al
inc al
mov byte [ebp - 0x79], al
lea eax, [ebp - 0x78]
push eax
push ebx
push 0x75a6d504
push esi
call sym.msi.dll_MsiGetProductInfoA
test eax, eax
jne 0x75a6d3e2
cmp dword [ebp - 0x78], ebx
je 0x75a6d3e2
mov byte [ebp - 0x71], 1
call fcn.759c4b5e
test al, al
jne 0x75a6d3ca
lea eax, [ebp - 0x78]
push eax
push ebx
push 0x759c3dc0
lea ecx, [ebp - 0x29c]
call fcn.759c29b8
mov ecx, eax
call fcn.759db6da
push eax
push esi
call sym.msi.dll_MsiGetProductInfoA
test eax, eax
jne 0x75a6d391
mov byte [ebp - 0x71], 1
cmp dword [ebp - 0x78], ebx
jne 0x75a6d394
mov byte [ebp - 0x71], bl
lea ecx, [ebp - 0x29c]
call fcn.759c296f
cmp byte [ebp - 0x71], bl
jne 0x75a6d3ca
cmp dword [0x75bc8ca8], ebx
je 0x75a6d3ca
push ebx
push ebx
mov eax, 0x759c2dec
push eax
push eax
push eax
push eax
push eax
push esi
push 0x75a6d4b8
push ebx
push ebx
push 9
call fcn.759de326
add esp, 0x30
cmp byte [ebp - 0x79], bl
je 0x75a6d3e7
xor eax, eax
cmp byte [ebp - 0x71], bl
setne al
lea eax, [eax*4 + 1]
mov esi, eax
jmp 0x75a6d3ef
mov byte [ebp - 0x71], bl
jmp 0x75a6d3ca
cmp byte [ebp - 0x71], bl
je 0x75a6d404
push 2
pop esi
lea ecx, [ebp - 0x20]
call fcn.759b3c00
lea ecx, [ebp - 0x18]
call fcn.759b1681
jmp 0x75a6d2f5
xor edi, edi
lea ecx, [ebp - 0x3c]
call fcn.759b3c2d
lea eax, [ebp - 0x20]
push eax
push esi
push edi
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x78], ebx
call fcn.75a68e92
add esp, 0xc
cmp eax, ebx
jne 0x75a6d43e
lea eax, [ebp - 0x78]
push eax
push ebx
lea eax, [ebp - 0x80]
push eax
push ebx
push 0x75a6d504
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, 2
je 0x75a6d452
cmp eax, ebx
jne 0x75a6d465
cmp dword [ebp - 0x80], 4
jne 0x75a6d452
cmp dword [ebp - 0x78], ebx
jne 0x75a6d48d
lea ecx, [ebp - 0x3c]
call fcn.759b3c00
lea ecx, [ebp - 0x34]
call fcn.759b1681
inc edi
jmp 0x75a6d406
lea ecx, [ebp - 0x3c]
call fcn.759b3c00
lea ecx, [ebp - 0x34]
call fcn.759b1681
lea ecx, [ebp - 0x20]
call fcn.759b3c00
lea ecx, [ebp - 0x18]
call fcn.759b1681
or esi, 0xffffffff
jmp 0x75a6d2f5
lea ecx, [ebp - 0x3c]
call fcn.759b3c00
lea ecx, [ebp - 0x34]
call fcn.759b1681
lea ecx, [ebp - 0x20]
call fcn.759b3c00
lea ecx, [ebp - 0x18]
call fcn.759b1681
push 2
jmp 0x75a6d2f4