Function at 0x413820
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push reloc.kernel32.dll_FileTimeToLocalFileTime
mov eax, dword fs:[0]
push eax
sub esp, 0x304
mov eax, dword [0x52bd60]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, edx
mov dword [ebp - 0x2e0], eax
mov esi, ecx
mov dword [ebp - 0x29c], esi
and dword [ebp - 0x228], 0xfffffe00
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 4], 1
mov eax, dword [0x52b6d0]
mov ecx, 0x52b6d0
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
lea edi, [eax + 0x10]
mov dword [ebp - 0x2c4], edi
mov byte [ebp - 4], 2
mov eax, dword [0x52b6d0]
mov ecx, 0x52b6d0
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x2ac], ebx
mov byte [ebp - 4], 3
mov eax, dword [0x52b6d0]
mov ecx, 0x52b6d0
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
mov dword [ebp - 0x2c0], eax
add eax, 0x10
mov dword [ebp - 0x2dc], eax
mov byte [ebp - 4], 5
mov al, byte [esi + 8]
test al, al
je 0x413902
cmp al, 7
je 0x413902
push 0x42b
push str...CrossRiderGeneralJsonjson_value.cpp
push str.type___nullValue__type___objectValue
call fcn.004b708c
add esp, 0xc
cmp byte [esi + 8], 0
jne 0x413912
mov ecx, 0x530a10
jmp 0x4139c0
mov dword [ebp - 0x2bc], str.hive
mov dword [ebp - 0x2b8], 0
mov esi, dword [esi]
lea eax, [ebp - 0x2bc]
push eax
mov ecx, esi
call fcn.0044b6a0
mov ecx, dword [esi]
cmp eax, ecx
je 0x41399a
mov esi, dword [eax + 0x10]
mov edx, str.hive
mov bl, byte [edx]
cmp bl, byte [esi]
mov byte [ebp - 0x291], bl
mov ebx, dword [ebp - 0x2ac]
jne 0x413986
cmp byte [ebp - 0x291], 0
je 0x413982
mov bl, byte [edx + 1]
cmp bl, byte [esi + 1]
mov byte [ebp - 0x291], bl
mov ebx, dword [ebp - 0x2ac]
jne 0x413986
add edx, 2
add esi, 2
cmp byte [ebp - 0x291], 0
jne 0x413944
xor edx, edx
jmp 0x41398b
sbb edx, edx
or edx, 1
test edx, edx
sets dl
mov dword [ebp - 0x2a0], eax
test dl, dl
je 0x4139a0
mov dword [ebp - 0x2a0], ecx
mov edx, dword [ebp - 0x29c]
lea eax, [ebp - 0x2a0]
mov ecx, dword [edx]
mov eax, dword [eax]
mov byte [ebp - 4], 5
cmp eax, dword [ecx]
mov ecx, 0x530a10
je 0x4139c0
lea ecx, [eax + 0x18]
sub esp, 0x18
push esp
call fcn.0044a0e0
lea ecx, [ebp - 0x2a4]
call fcn.004319e0
add esp, 0x18
mov byte [ebp - 4], 7
mov edx, dword [eax]
lea ecx, [edi - 0x10]
lea esi, [edx - 0x10]
mov dword [ebp - 0x2a0], ecx
cmp esi, ecx
je 0x413a4b
cmp dword [ecx + 0xc], 0
lea edi, [ecx + 0xc]
jl 0x413a36
mov eax, dword [esi]
cmp eax, dword [ecx]
jne 0x413a36
mov ecx, esi
call fcn.00404770
or esi, 0xffffffff
mov dword [ebp - 0x2a8], eax
mov ecx, esi
lock xadd dword [edi], ecx
dec ecx
test ecx, ecx
jg 0x413a2b
mov edx, dword [ebp - 0x2a0]
push edx
mov ecx, dword [edx]
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov eax, dword [ebp - 0x2a8]
lea edi, [eax + 0x10]
mov dword [ebp - 0x2c4], edi
jmp 0x413a4e
push dword [edx - 0xc]
lea ecx, [ebp - 0x2c4]
push edx
call fcn.004046b0
mov edi, dword [ebp - 0x2c4]
or esi, 0xffffffff
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x2a4]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x413a71
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
lea eax, [edi - 0x10]
push ecx
mov ecx, dword [eax]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ecx]
mov dword [ebp - 0x2a4], esp
call dword [eax + reloc.kernel32.dll_GetUserDefaultLangID]
cmp dword [edi - 4], 0
lea edx, [edi - 4]
mov ecx, eax
jl 0x413aa6
cmp ecx, dword [edi - 0x10]
jne 0x413aa6
lea ecx, [edi - 0x10]
mov eax, 1
lock xadd dword [edx], eax
jmp 0x413aec
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov edx, eax
mov dword [ebp - 0x2a8], edx
test edx, edx
jne 0x413ac0
call fcn.0040c710
mov eax, dword [edi - 0xc]
mov dword [edx + 4], eax
mov ecx, dword [edi - 0xc]
lea eax, [ecx*2 + 2]
push eax
lea eax, [ecx*2 + 2]
push edi
push eax
lea eax, [edx + 0x10]
push eax
call fcn.004b52be
mov ecx, dword [ebp - 0x2a8]
add esp, 0x10
lea eax, [ecx + 0x10]
mov ecx, dword [ebp - 0x2a4]
mov dword [ecx], eax
call fcn.0040f760
add esp, 4
mov dword [ebp - 0x2a4], eax
test eax, eax
jne 0x413d2b
mov dword [ebp - 0x29c], eax
lea eax, [ebp - 0x2c4]
push eax
mov edx, str.enumRegValues_hive_error_
lea ecx, [ebp - 0x29c]
call fcn.00426d80
add esp, 4
push str.enumRegV_1ue_
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 8
call fcn.004036e0
mov byte [ebp - 4], 9
mov eax, dword [0x52b6d0]
mov ecx, 0x52b6d0
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
lea esi, [eax + 0x10]
mov dword [ebp - 0x2b0], esi
lea eax, [ebp - 0x29c]
push eax
lea edx, [ebp - 0x2b0]
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 0xa
call fcn.00431c80
add esp, 4
mov edi, eax
push str.GlobalLog
lea ecx, [ebp - 0x2a4]
mov byte [ebp - 4], reloc.kernel32.dll_ConvertDefaultLocale
call fcn.004036e0
push 2
push edi
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x2a4]
push eax
mov ecx, 0x530768
mov byte [ebp - 4], reloc.kernel32.dll_AssignProcessToJobObject
call fcn.004018b0
mov byte [ebp - 4], reloc.kernel32.dll_ConvertDefaultLocale
mov edx, dword [ebp - 0x2a4]
add edx, 0xfffffff0
or edi, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x413bd5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x298]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x413bf8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
add esi, 0xfffffff0
mov byte [ebp - 4], 9
lea eax, [esi + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x413c15
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x2a8]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x413c38
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
lea edx, [ebp - 0x29c]
lea ecx, [ebp - 0x2f8]
call fcn.00431ab0
push eax
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], reloc.kernel32.dll_CreateFileMappingW
call fcn.00449d70
push ecx
push str.error
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], reloc.kernel32.dll_ReleaseActCtx
call fcn.0044aa00
lea ecx, [ebp - 0x2d8]
push ecx
mov ecx, eax
call fcn.0044a020
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], reloc.kernel32.dll_CreateFileMappingW
call fcn.00449f60
cmp dword [ebp - 0x2e4], 0x10
jb 0x413ca2
push dword [ebp - 0x2f8]
call fcn.004b458c
add esp, 4
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x29c]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x413cc5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x2c0]
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x413ce5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
add ebx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [ebx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x413d02
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2a0]
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x414a17
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
jmp 0x414a17
mov eax, dword [ebp - 0x29c]
mov al, byte [eax + 8]
test al, al
je 0x413d53
cmp al, 7
je 0x413d53
push 0x42b
push str...CrossRiderGeneralJsonjson_value.cpp
push str.type___nullValue__type___objectValue
call fcn.004b708c
add esp, 0xc
mov eax, dword [ebp - 0x29c]
cmp byte [eax + 8], 0
jne 0x413d69
mov ecx, 0x530a10
jmp 0x413e1f
mov dword [ebp - 0x2bc], 0x512e34
mov dword [ebp - 0x2b8], 0
mov esi, dword [eax]
lea eax, [ebp - 0x2bc]
push eax
mov ecx, esi
call fcn.0044b6a0
mov ecx, dword [esi]
cmp eax, ecx
je 0x413df6
mov esi, dword [eax + 0x10]
mov edx, reloc.kernel32.dll_HeapCreate
jmp 0x413da0
mov bl, byte [edx]
cmp bl, byte [esi]
mov byte [ebp - 0x291], bl
mov ebx, dword [ebp - 0x2ac]
jne 0x413de2
cmp byte [ebp - 0x291], 0
je 0x413dde
mov bl, byte [edx + 1]
cmp bl, byte [esi + 1]
mov byte [ebp - 0x291], bl
mov ebx, dword [ebp - 0x2ac]
jne 0x413de2
add edx, 2
add esi, 2
cmp byte [ebp - 0x291], 0
jne 0x413da0
xor edx, edx
jmp 0x413de7
sbb edx, edx
or edx, 1
test edx, edx
sets dl
mov dword [ebp - 0x298], eax
test dl, dl
je 0x413dfc
mov dword [ebp - 0x298], ecx
mov edx, dword [ebp - 0x29c]
lea eax, [ebp - 0x298]
mov ecx, dword [edx]
mov eax, dword [eax]
mov byte [ebp - 4], 5
or esi, 0xffffffff
cmp eax, dword [ecx]
mov ecx, 0x530a10
je 0x413e1f
lea ecx, [eax + 0x18]
sub esp, 0x18
push esp
call fcn.0044a0e0
lea ecx, [ebp - 0x2a8]
call fcn.004319e0
add esp, 0x18
mov byte [ebp - 4], reloc.kernel32.dll_GetUserDefaultLangID
mov edx, dword [eax]
lea ecx, [ebx - 0x10]
lea eax, [edx - 0x10]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x2b0], ecx
cmp eax, ecx
je 0x413eb1
cmp dword [ecx + 0xc], 0
lea ebx, [ecx + 0xc]
jl 0x413e9c
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x413e9c
mov ecx, dword [ebp - 0x298]
call fcn.00404770
mov dword [ebp - 0x298], eax
mov ecx, esi
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x413e91
mov edx, dword [ebp - 0x2b0]
push edx
mov ecx, dword [edx]
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov eax, dword [ebp - 0x298]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x2ac], ebx
jmp 0x413eb1
push dword [edx - 0xc]
lea ecx, [ebp - 0x2ac]
push edx
call fcn.004046b0
mov ebx, dword [ebp - 0x2ac]
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x2a8]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x413ed4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov esi, dword [ebp - 0x29c]
mov al, byte [esi + 8]
test al, al
je 0x413efc
cmp al, 7
je 0x413efc
push 0x42b
push str...CrossRiderGeneralJsonjson_value.cpp
push str.type___nullValue__type___objectValue
call fcn.004b708c
add esp, 0xc
mov al, byte [esi + 8]
mov byte [ebp - 0x292], al
test al, al
je 0x4140b9
mov dword [ebp - 0x2bc], 0x512e40
mov dword [ebp - 0x2b8], 0
mov esi, dword [esi]
lea eax, [ebp - 0x2bc]
push eax
mov ecx, esi
mov dword [ebp - 0x2b0], esi
call fcn.0044b6a0
mov ecx, dword [esi]
cmp eax, ecx
je 0x413f9b
mov esi, dword [eax + 0x10]
mov edx, reloc.kernel32.dll_GetProcessAffinityMask
mov bl, byte [edx]
cmp bl, byte [esi]
mov byte [ebp - 0x291], bl
mov ebx, dword [ebp - 0x2ac]
jne 0x413f87
cmp byte [ebp - 0x291], 0
je 0x413f83
mov bl, byte [edx + 1]
cmp bl, byte [esi + 1]
mov byte [ebp - 0x291], bl
mov ebx, dword [ebp - 0x2ac]
jne 0x413f87
add edx, 2
add esi, 2
cmp byte [ebp - 0x291], 0
jne 0x413f45
xor edx, edx
jmp 0x413f8c
sbb edx, edx
or edx, 1
test edx, edx
sets dl
mov dword [ebp - 0x298], eax
test dl, dl
je 0x413fa1
mov dword [ebp - 0x298], ecx
mov ecx, dword [ebp - 0x2b0]
lea eax, [ebp - 0x298]
mov eax, dword [eax]
mov byte [ebp - 4], 5
cmp eax, dword [ecx]
je 0x4140b9
add eax, 0x18
cmp eax, 0x530a10
je 0x4140b9
cmp byte [ebp - 0x292], 7
je 0x413fe9
push 0x42b
push str...CrossRiderGeneralJsonjson_value.cpp
push str.type___nullValue__type___objectValue
call fcn.004b708c
add esp, 0xc
mov eax, dword [ebp - 0x29c]
cmp byte [eax + 8], 0
jne 0x414004
mov ecx, 0x530a10
call fcn.0044a210
jmp 0x4140bb
mov dword [ebp - 0x2bc], 0x512e40
mov dword [ebp - 0x2b8], 0
mov esi, dword [eax]
lea eax, [ebp - 0x2bc]
push eax
mov ecx, esi
call fcn.0044b6a0
mov ecx, dword [esi]
cmp eax, ecx
je 0x41408c
mov esi, dword [eax + 0x10]
mov edx, reloc.kernel32.dll_GetProcessAffinityMask
mov bl, byte [edx]
cmp bl, byte [esi]
mov byte [ebp - 0x292], bl
mov ebx, dword [ebp - 0x2ac]
jne 0x414078
cmp byte [ebp - 0x292], 0
je 0x414074
mov bl, byte [edx + 1]
cmp bl, byte [esi + 1]
mov byte [ebp - 0x292], bl
mov ebx, dword [ebp - 0x2ac]
jne 0x414078
add edx, 2
add esi, 2
cmp byte [ebp - 0x292], 0
jne 0x414036
xor edx, edx
jmp 0x41407d
sbb edx, edx
or edx, 1
test edx, edx
sets dl
mov dword [ebp - 0x298], eax
test dl, dl
je 0x414092
mov dword [ebp - 0x298], ecx
mov edx, dword [ebp - 0x29c]
lea eax, [ebp - 0x298]
mov ecx, dword [edx]
mov eax, dword [eax]
mov byte [ebp - 4], 5
cmp eax, dword [ecx]
mov ecx, 0x530a10
je 0x4140b2
lea ecx, [eax + 0x18]
call fcn.0044a210
jmp 0x4140bb
xor eax, eax
mov ecx, 0x20019
cmp eax, 0x20
jne 0x4140cc
mov ecx, 0x20219
jmp 0x4140d7
mov edx, 0x20119
cmp eax, 0x40
cmove ecx, edx
lea eax, [ebp - 0x290]
push eax
push ecx
push 0
push ebx
push dword [ebp - 0x2a4]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x41434b
mov edx, eax
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x29c], 0
call fcn.00431d20
push eax
mov edx, str.enumRegValues_RegOpenKeyEx_
lea ecx, [ebp - 0x29c]
mov byte [ebp - 4], reloc.kernel32.dll_OpenSemaphoreW
call fcn.00426d80
add esp, 4
mov byte [ebp - 4], reloc.kernel32.dll_GetConsoleOutputCP
mov edx, dword [ebp - 0x298]
add edx, 0xfffffff0
or edi, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41414b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
push str.enumRegValue_
lea ecx, [ebp - 0x2a4]
call fcn.004036e0
mov byte [ebp - 4], reloc.kernel32.dll_OpenEventW
mov eax, dword [0x52b6d0]
mov ecx, 0x52b6d0
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
lea esi, [eax + 0x10]
mov dword [ebp - 0x2b0], esi
lea eax, [ebp - 0x29c]
push eax
lea edx, [ebp - 0x2b0]
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], reloc.kernel32.dll_SetCurrentDirectoryA
call fcn.00431c80
add esp, 4
mov dword [ebp - 0x2b4], eax
push str.GlobalLog
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], reloc.kernel32.dll_IsProcessInJob
call fcn.004036e0
push 2
push dword [ebp - 0x2b4]
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x2a8]
push eax
mov ecx, 0x530768
mov byte [ebp - 4], reloc.kernel32.dll_CreateDirectoryW
call fcn.004018b0
mov byte [ebp - 4], reloc.kernel32.dll_IsProcessInJob
mov edx, dword [ebp - 0x2a8]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4141f5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], reloc.kernel32.dll_SetCurrentDirectoryA
mov edx, dword [ebp - 0x2b8]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x414218
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
add esi, 0xfffffff0
mov byte [ebp - 4], reloc.kernel32.dll_OpenEventW
lea eax, [esi + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x414235
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], reloc.kernel32.dll_GetConsoleOutputCP
mov edx, dword [ebp - 0x2a4]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x414258
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
lea edx, [ebp - 0x29c]
lea ecx, [ebp - 0x2f8]
call fcn.00431ab0
push eax
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], reloc.kernel32.dll_GetSystemPowerStatus
call fcn.00449d70
push ecx
push str.error
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], reloc.kernel32.dll_QueryDosDeviceW
call fcn.0044aa00
lea ecx, [ebp - 0x2d8]
push ecx
mov ecx, eax
call fcn.0044a020
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], reloc.kernel32.dll_GetSystemPowerStatus
call fcn.00449f60
cmp dword [ebp - 0x2e4], 0x10
jb 0x4142c2
push dword [ebp - 0x2f8]
call fcn.004b458c
add esp, 4
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x29c]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4142e5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x2c0]
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x414305
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
add ebx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [ebx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x414322
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2a0]
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x414a17
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
jmp 0x414a17
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x21c], ax
lea eax, [ebp - 0x21a]
push eax
call fcn.004b9070
add esp, 0xc
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x234]
push eax
push 0
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x21c]
push eax
push dword [ebp - 0x290]
mov dword [ebp - 0x238], 0x104
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x288], 0x3fff
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
jne 0x4143ec
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x288], eax
mov eax, dword [0x52b6d0]
mov ecx, 0x52b6d0
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x28c], 0
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
lea esi, [eax + 0x10]
mov dword [ebp - 0x29c], esi
mov byte [ebp - 4], reloc.kernel32.dll_WritePrivateProfileSectionA
mov eax, dword [ebp - 0x2e8]
mov edx, dword [ebp - 0x288]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x2b0], edx
mov dword [ebp - 0x2b8], reloc.kernel32.dll_SetConsoleCursorPosition
mov dword [ebp - 0x2a8], eax
test edx, edx
jns 0x414456
push 0x80070057
call fcn.0040c6f0
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, edx
or eax, ecx
jge 0x414479
push edx
lea ecx, [ebp - 0x29c]
call fcn.0040c760
mov esi, dword [ebp - 0x29c]
push 0
push 0
lea eax, [ebp - 0x28c]
push eax
push 0
lea eax, [ebp - 0x288]
push eax
push esi
push dword [ebp - 0x2a4]
push dword [ebp - 0x290]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov dword [ebp - 0x298], eax
cmp eax, 0x103
je 0x414750
mov ecx, dword [0x530408]
mov eax, ecx
imul eax, ecx
cdq
idiv dword [ebp - 0x2b8]
mov dword [ebp - 0x2b4], ecx
cmp edx, 0xa
jne 0x41450f
mov eax, 0x51eb851f
imul ecx
mov eax, dword [ebp - 0x2b4]
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x64
sub eax, ecx
xor ecx, ecx
add eax, 0x7b
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004b3d60
add esp, 4
push eax
call fcn.004b4e1b
add esp, 4
push dword [esi - 8]
push esi
call fcn.004b59ae
add esp, 8
test eax, eax
js 0x41444c
cmp eax, dword [esi - 8]
jg 0x41444c
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
cmp dword [ebp - 0x298], ecx
jne 0x4146bb
and dword [ebp - 0x244], 0xfffffe00
mov dword [ebp - 0x240], ecx
lea edx, [ebp - 0x29c]
lea ecx, [ebp - 0x310]
mov byte [ebp - 4], reloc.kernel32.dll_CopyFileA
call fcn.00431ab0
mov edx, eax
mov dword [ebp - 0x2b4], edx
mov byte [ebp - 4], reloc.kernel32.dll_ReadProcessMemory
mov eax, dword [ebp - 0x2a0]
and eax, 0xffffff04
or eax, 0x104
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x2e8], eax
mov eax, dword [0x530ce4]
mov dword [ebp - 0x2e4], 0
test al, 1
jne 0x4145c6
or eax, 1
push 0x4e04e0
mov dword [0x530ce4], eax
mov dword [0x530c68], 0x518430
call fcn.004b4d59
mov edx, dword [ebp - 0x2b4]
add esp, 4
cmp dword [edx + 0x14], 0x10
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x2b4], eax
jb 0x4145d7
mov edx, dword [edx]
mov ecx, dword [0x52d374]
push dword [ebp - 0x2b4]
mov eax, dword [ecx]
push edx
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
mov dword [ebp - 0x2f0], eax
push ecx
push str.name
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], reloc.kernel32.dll_GetStringTypeA
call fcn.0044aa00
lea ecx, [ebp - 0x2f0]
push ecx
mov ecx, eax
call fcn.0044a020
lea ecx, [ebp - 0x2f0]
mov byte [ebp - 4], reloc.kernel32.dll_ReadProcessMemory
call fcn.00449f60
cmp dword [ebp - 0x2fc], 0x10
jb 0x414638
push dword [ebp - 0x310]
call fcn.004b458c
add esp, 4
mov eax, dword [ebp - 0x2a8]
and eax, 0xffffff01
or eax, 1
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2d8], eax
push ecx
push str.type
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], reloc.kernel32.dll_CreateProcessA
call fcn.0044aa00
lea ecx, [ebp - 0x2d8]
push ecx
mov ecx, eax
call fcn.0044a020
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], reloc.kernel32.dll_CopyFileA
call fcn.00449f60
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x230]
call fcn.0044ace0
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], reloc.kernel32.dll_WritePrivateProfileSectionA
call fcn.00449f60
mov edx, dword [ebp - 0x2b0]
inc dword [ebp - 0x2a4]
lea ecx, [esi - 0x10]
mov dword [ebp - 0x288], edx
cmp dword [ecx + 4], 0
mov eax, dword [ecx]
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0x298], eax
je 0x414448
cmp dword [ecx + 0xc], 0
lea edx, [ecx + 0xc]
jge 0x414718
cmp dword [esi - 8], 0
jge 0x414701
push 0x80070057
call fcn.0040c6f0
mov dword [esi - 0xc], 0
xor eax, eax
mov word [esi], ax
mov edx, dword [ebp - 0x288]
jmp 0x414448
or eax, 0xffffffff
lock xadd dword [edx], eax
dec eax
test eax, eax
jg 0x414731
mov ecx, dword [ecx]
push dword [ebp - 0x2b4]
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov ecx, dword [ebp - 0x298]
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
mov edx, dword [ebp - 0x288]
lea esi, [eax + 0x10]
mov dword [ebp - 0x29c], esi
jmp 0x414448
mov eax, dword [ebp - 0x228]
test al, al
je 0x414766
cmp al, 6
je 0x414766
cmp al, 7
jne 0x414863
movsx eax, al
cmp eax, 7
ja case.default.0x41476e
jmp dword [eax*4 + 0x414c48]
mov eax, dword [ebp - 0x230]
cmp dword [eax + 4], 0
je case.0x41476e.0
mov eax, dword [eax]
lea ecx, [ebp - 0x2a0]
mov dword [ebp - 0x2a0], eax
call fcn.0042c570
mov eax, dword [ebp - 0x2a0]
mov eax, dword [eax + 0x14]
inc eax
jmp 0x4147c4
mov eax, dword [ebp - 0x230]
mov eax, dword [eax + 4]
jmp 0x4147c4
push 0x388
push str...CrossRiderGeneralJsonjson_value.cpp
push reloc.kernel32.dll_ActivateActCtx
call fcn.004b708c
add esp, 0xc
xor eax, eax
test eax, eax
sete al
test al, al
je 0x414863
mov eax, dword [ebp - 0x2d0]
and eax, 0xffffff04
or eax, 0x104
mov dword [ebp - 0x2d0], eax
mov eax, dword [0x530ce4]
mov dword [ebp - 0x2cc], 0
test al, 1
jne 0x414819
or eax, 1
push 0x4e04e0
mov dword [0x530ce4], eax
mov dword [0x530c68], 0x518430
call fcn.004b4d59
add esp, 4
mov ecx, dword [0x52d374]
push 0xffffffffffffffff
mov eax, dword [ecx]
push str.empty
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
mov dword [ebp - 0x2d8], eax
push ecx
push str.error
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], reloc.kernel32.dll_WaitForSingleObjectEx
call fcn.0044aa00
lea ecx, [ebp - 0x2d8]
push ecx
mov ecx, eax
call fcn.0044a020
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], reloc.kernel32.dll_WritePrivateProfileSectionA
call fcn.00449f60
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 5
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x414883
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov dword [ebp - 4], 3
mov edx, dword [ebp - 0x2c0]
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4148a6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
add ebx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [ebx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4148c3
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 1
or edi, 0xffffffff
jmp 0x413d0c
mov eax, dword [ebp - 0x290]
test eax, eax
je 0x414a32
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x26c], 0x5149b4
mov dword [ebp - 0x254], reloc.kernel32.dll_UnmapViewOfFile
mov dword [ebp - 0x258], 0
mov byte [ebp - 0x268], 0
mov byte [ebp - 0x250], 0
mov byte [ebp - 4], reloc.kernel32.dll_AddVectoredExceptionHandler
mov eax, dword [0x52b6d0]
mov ecx, 0x52b6d0
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c0], esi
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x310]
push eax
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], reloc.kernel32.dll_LocalReAlloc
call fcn.0044cc00
mov edx, eax
mov byte [ebp - 4], reloc.kernel32.dll_CreateSemaphoreW
cmp dword [edx + 0x14], 0x10
jb 0x414aa3
mov edx, dword [edx]
sub esp, 0x18
mov ebx, esp
mov dword [ebx + 0x14], reloc.kernel32.dll_UnmapViewOfFile
mov dword [ebx + 0x10], 0
mov byte [ebx], 0
cmp byte [edx], 0
jne 0x414ac2
xor ecx, ecx
jmp 0x414add
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x2c8], eax
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414ad0
sub ecx, dword [ebp - 0x2c8]
push ecx
push edx
mov ecx, ebx
call fcn.004012e0
lea ecx, [ebp - 0x2dc]
call fcn.004319e0
add esp, 0x18
mov byte [ebp - 4], reloc.kernel32.dll_GetShortPathNameA
mov edx, dword [eax]
lea ebx, [esi - 0x10]
lea ecx, [edx - 0x10]
cmp ecx, ebx
je 0x414b57
cmp dword [ebx + 0xc], 0
lea esi, [ebx + 0xc]
jl 0x414b42
mov eax, dword [ecx]
cmp eax, dword [ebx]
jne 0x414b42
call fcn.00404770
mov dword [ebp - 0x2c8], eax
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x414b37
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + reloc.kernel32.dll_IsBadStringPtrA]
mov eax, dword [ebp - 0x2c8]
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c0], esi
jmp 0x414b57
push dword [edx - 0xc]
lea ecx, [ebp - 0x2c0]
push edx
call fcn.004046b0
mov esi, dword [ebp - 0x2c0]
mov byte [ebp - 4], reloc.kernel32.dll_CreateSemaphoreW
mov edx, dword [ebp - 0x2dc]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x414b7a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], reloc.kernel32.dll_LocalReAlloc
cmp dword [ebp - 0x2fc], 0x10
jb 0x414b95
push dword [ebp - 0x310]
call fcn.004b458c
add esp, 4
mov ebx, dword [ebp - 0x2e0]
mov eax, 8
mov word [ebx], ax
push dword [esi - 0xc]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
test eax, eax
jne 0x414bb6
call fcn.0040c710
add esi, 0xfffffff0
mov dword [ebx + 8], eax
mov byte [ebp - 4], reloc.kernel32.dll_AddVectoredExceptionHandler
lea eax, [esi + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x414bd4
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
cmp dword [ebp - 0x254], 0x10
mov dword [ebp - 0x26c], 0x5149b4
jb 0x414bf5
push dword [ebp - 0x268]
call fcn.004b458c
add esp, 4
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x254], reloc.kernel32.dll_UnmapViewOfFile
mov dword [ebp - 0x258], 0
mov byte [ebp - 0x268], 0
mov dword [ebp - 0x26c], 0x5185e8
mov dword [ebp - 4], 0xffffffff
call fcn.00449f60
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004b4591
mov esp, ebp
pop ebp
ret