Function at 0x180075c90
Capabilities:
Query or enumerate registry value

Disassembly:
push rbx
sub rsp, 0xf0
mov rax, qword [0x18013a210]
xor rax, rsp
mov qword [rsp + 0xe0], rax
cmp dword [rcx + 0x260], 0
mov rbx, rcx
je 0x180075e78
mov eax, dword [rcx + reloc.OLEAUT32.dll_VARIANT_UserUnmarshal]
test eax, eax
je 0x180075e6c
sub eax, 1
je 0x180075df8
cmp eax, 1
jne 0x180075fed
mov eax, dword [rcx + 0x114]
sub eax, 3
je 0x180075dec
sub eax, 1
je 0x180075dc7
sub eax, 1
je 0x180075d41
cmp eax, 1
jne 0x180075fed
mov eax, dword [rcx + 0x118]
test eax, eax
je 0x180075d2a
cmp eax, 1
jne 0x180075fed
xor ecx, ecx
cmp byte [rbx + 0x22a], al
sete cl
add ecx, 0x12
mov dword [rbx + 8], ecx
jmp 0x180075fed
xor ecx, ecx
cmp byte [rbx + 0x22a], 1
setne cl
add ecx, 0x10
mov dword [rbx + 8], ecx
jmp 0x180075fed
mov eax, dword [rcx + 0x118]
test eax, eax
je 0x180075dbb
sub eax, 1
je 0x180075daf
cmp eax, 1
jne 0x180075fed
mov eax, 0x8000
cmp word [rcx + 0x228], ax
jne 0x180075d73
mov dword [rcx + 8], SafeArrayGetDim
jmp 0x180075fed
cmp byte [rcx + 0x22a], 1
jne 0x180075d92
cmp word [rcx + 0x230], 9
jne 0x180075d92
mov dword [rcx + 8], reloc.OLEAUT32.dll_VariantTimeToDosDateTime
jmp 0x180075fed
mov ecx, 0x59
call qword [sym.imp.USER32.dll_GetSystemMetrics]
xor ecx, ecx
test eax, eax
setne cl
add ecx, 0xe
mov dword [rbx + 8], ecx
jmp 0x180075fed
mov dword [rcx + 8], reloc.OLEAUT32.dll_VariantChangeType
jmp 0x180075fed
mov dword [rcx + 8], 0xa
jmp 0x180075fed
movzx ecx, byte [rcx + 0x22a]
sub ecx, 1
je 0x180075fe6
cmp ecx, 2
jne 0x180075fed
mov dword [rbx + 8], 9
jmp 0x180075fed
mov dword [rcx + 8], 7
jmp 0x180075fed
cmp dword [rcx + 0x114], 4
jne 0x180075fed
mov eax, dword [rcx + 0x118]
test eax, eax
je 0x180075e41
cmp eax, 0xa
je 0x180075e29
cmp eax, 0x5a
jne 0x180075fed
mov dword [rcx + 8], 6
jmp 0x180075fed
xor ecx, ecx
cmp word [rbx + 0x124], 0x41
sete cl
add ecx, 4
mov dword [rbx + 8], ecx
jmp 0x180075fed
movzx eax, word [rcx + 0x124]
cmp ax, 0x42
je 0x180075e60
cmp ax, 0x43
je 0x180075e60
mov dword [rcx + 8], 2
jmp 0x180075fed
mov dword [rcx + 8], 3
jmp 0x180075fed
mov dword [rcx + 8], 1
jmp 0x180075fed
lea rax, [rsp + 0x38]
lea rdx, str.SYSTEMCurrentControlSetControlProductOptions
mov r9d, 1
xor r8d, r8d
mov rcx, 0xffffffff80000002
mov dword [rsp + 0x30], 0x50
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x180075fed
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x30]
lea rdx, str.ProductType
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x180075fed
cmp dword [rsp + 0x30], 0x50
ja 0x180075fed
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rdx, [rsp + 0x40]
lea rcx, str.WINNT
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x180075f26
cmp dword [rbx + 0x114], 4
ja 0x180075f26
mov dword [rbx + 8], 8
mov dword [rbx + 0xc], 1
lea rdx, [rsp + 0x40]
lea rcx, str.LANMANNT
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x180075f86
mov eax, dword [rbx + 0x114]
cmp eax, 5
jne 0x180075f73
cmp dword [rbx + 0x118], 2
jne 0x180075f57
mov dword [rbx + 8], SafeArrayLock
cmp eax, 5
jne 0x180075f73
cmp dword [rbx + 0x118], 0
jne 0x180075f73
mov dword [rbx + 8], 0xa
mov dword [rbx + 0xc], 2
cmp eax, 4
ja 0x180075f86
mov dword [rbx + 8], 8
mov dword [rbx + 0xc], 2
lea rdx, [rsp + 0x40]
lea rcx, str.SERVERNT
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x180075fed
mov eax, dword [rbx + 0x114]
cmp eax, 5
jne 0x180075fda
cmp dword [rbx + 0x118], 2
jne 0x180075fbe
mov dword [rbx + 8], SafeArrayLock
mov dword [rbx + 0xc], SafeArrayLock
cmp eax, 5
jne 0x180075fda
cmp dword [rbx + 0x118], 0
jne 0x180075fda
mov dword [rbx + 8], 0xa
mov dword [rbx + 0xc], 3
cmp eax, 4
ja 0x180075fed
mov dword [rbx + 0xc], SafeArrayLock
mov dword [rbx + 8], 8
mov rcx, qword [rsp + 0xe0]
xor rcx, rsp
call fcn.1800bd980
add rsp, 0xf0
pop rbx
ret