Function at 0x412790
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push reloc.kernel32.dll_FileTimeToLocalFileTime
mov eax, dword fs:[0]
push eax
sub esp, 0xac
mov eax, dword [0x52bd60]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, edx
mov dword [ebp - 0x9c], eax
mov esi, ecx
mov dword [ebp - 0x54], esi
and dword [ebp - 0x1c], 0xfffffe00
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 4], 1
mov eax, dword [0x52b6d0]
mov ecx, 0x52b6d0
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
lea edi, [eax + 0x10]
mov dword [ebp - 0x84], edi
mov byte [ebp - 4], 2
mov eax, dword [0x52b6d0]
mov ecx, 0x52b6d0
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x74], ebx
mov byte [ebp - 4], 3
mov eax, dword [0x52b6d0]
mov ecx, 0x52b6d0
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
mov dword [ebp - 0x78], eax
add eax, 0x10
mov dword [ebp - 0x98], eax
mov byte [ebp - 4], 5
mov al, byte [esi + 8]
test al, al
je 0x41285d
cmp al, 7
je 0x41285d
push 0x42b
push str...CrossRiderGeneralJsonjson_value.cpp
push str.type___nullValue__type___objectValue
call fcn.004b708c
add esp, 0xc
cmp byte [esi + 8], 0
jne 0x41286d
mov ecx, 0x530a10
jmp 0x4128f4
mov dword [ebp - 0x70], str.hive
mov dword [ebp - 0x6c], 0
mov esi, dword [esi]
lea eax, [ebp - 0x70]
push eax
mov ecx, esi
call fcn.0044b6a0
mov ecx, dword [esi]
cmp eax, ecx
je 0x4128d7
mov esi, dword [eax + 0x10]
mov edx, str.hive
mov bl, byte [edx]
cmp bl, byte [esi]
mov byte [ebp - 0x4d], bl
mov ebx, dword [ebp - 0x74]
jne 0x4128c6
cmp byte [ebp - 0x4d], 0
je 0x4128c2
mov bl, byte [edx + 1]
cmp bl, byte [esi + 1]
mov byte [ebp - 0x4d], bl
mov ebx, dword [ebp - 0x74]
jne 0x4128c6
add edx, 2
add esi, 2
cmp byte [ebp - 0x4d], 0
jne 0x412896
xor edx, edx
jmp 0x4128cb
sbb edx, edx
or edx, 1
test edx, edx
sets dl
mov dword [ebp - 0x60], eax
test dl, dl
je 0x4128da
mov dword [ebp - 0x60], ecx
mov edx, dword [ebp - 0x54]
lea eax, [ebp - 0x60]
mov ecx, dword [edx]
mov eax, dword [eax]
mov byte [ebp - 4], 5
cmp eax, dword [ecx]
mov ecx, 0x530a10
je 0x4128f4
lea ecx, [eax + 0x18]
sub esp, 0x18
push esp
call fcn.0044a0e0
lea ecx, [ebp - 0x64]
call fcn.004319e0
add esp, 0x18
mov byte [ebp - 4], 7
mov edx, dword [eax]
lea ecx, [edi - 0x10]
lea esi, [edx - 0x10]
mov dword [ebp - 0x60], ecx
cmp esi, ecx
je 0x412970
cmp dword [ecx + 0xc], 0
lea edi, [ecx + 0xc]
jl 0x41295b
mov eax, dword [esi]
cmp eax, dword [ecx]
jne 0x41295b
mov ecx, esi
call fcn.00404770
or esi, 0xffffffff
mov dword [ebp - 0x68], eax
mov ecx, esi
lock xadd dword [edi], ecx
dec ecx
test ecx, ecx
jg 0x412950
mov edx, dword [ebp - 0x60]
push edx
mov ecx, dword [edx]
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov eax, dword [ebp - 0x68]
lea edi, [eax + 0x10]
mov dword [ebp - 0x84], edi
jmp 0x412973
push dword [edx - 0xc]
lea ecx, [ebp - 0x84]
push edx
call fcn.004046b0
mov edi, dword [ebp - 0x84]
or esi, 0xffffffff
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x64]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412993
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
lea eax, [edi - 0x10]
push ecx
mov ecx, dword [eax]
mov dword [ebp - 0x60], eax
mov eax, dword [ecx]
mov dword [ebp - 0x64], esp
call dword [eax + reloc.kernel32.dll_GetUserDefaultLangID]
cmp dword [edi - 4], 0
lea edx, [edi - 4]
mov ecx, eax
jl 0x4129c2
cmp ecx, dword [edi - 0x10]
jne 0x4129c2
lea ecx, [edi - 0x10]
mov eax, 1
lock xadd dword [edx], eax
jmp 0x412a02
mov eax, dword [ecx]
push 2
push dword [edi - 0xc]
call dword [eax]
mov edx, eax
mov dword [ebp - 0x68], edx
test edx, edx
jne 0x4129d9
call fcn.0040c710
mov eax, dword [edi - 0xc]
mov dword [edx + 4], eax
mov ecx, dword [edi - 0xc]
lea eax, [ecx*2 + 2]
push eax
lea eax, [ecx*2 + 2]
push edi
push eax
lea eax, [edx + 0x10]
push eax
call fcn.004b52be
mov ecx, dword [ebp - 0x68]
add esp, 0x10
lea eax, [ecx + 0x10]
mov ecx, dword [ebp - 0x64]
mov dword [ecx], eax
call fcn.0040f760
add esp, 4
mov dword [ebp - 0x64], eax
test eax, eax
jne 0x412c05
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x84]
push eax
mov edx, str.enumRegKeys_hive_error_
lea ecx, [ebp - 0x54]
call fcn.00426d80
add esp, 4
push str.enumRegKeys
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 8
call fcn.004036e0
mov byte [ebp - 4], 9
mov eax, dword [0x52b6d0]
mov ecx, 0x52b6d0
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
lea esi, [eax + 0x10]
mov dword [ebp - 0x80], esi
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0x80]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xa
call fcn.00431c80
add esp, 4
mov edi, eax
push str.GlobalLog
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], reloc.kernel32.dll_ConvertDefaultLocale
call fcn.004036e0
push 2
push edi
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x64]
push eax
mov ecx, 0x530768
mov byte [ebp - 4], reloc.kernel32.dll_AssignProcessToJobObject
call fcn.004018b0
mov byte [ebp - 4], reloc.kernel32.dll_ConvertDefaultLocale
mov edx, dword [ebp - 0x64]
add edx, 0xfffffff0
or edi, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412ac4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412ae4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
add esi, 0xfffffff0
mov byte [ebp - 4], 9
lea eax, [esi + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412b01
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412b21
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
lea edx, [ebp - 0x54]
lea ecx, [ebp - 0xb4]
call fcn.00431ab0
push eax
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], reloc.kernel32.dll_CreateFileMappingW
call fcn.00449d70
push ecx
push str.error
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], reloc.kernel32.dll_ReleaseActCtx
call fcn.0044aa00
lea ecx, [ebp - 0x94]
push ecx
mov ecx, eax
call fcn.0044a020
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], reloc.kernel32.dll_CreateFileMappingW
call fcn.00449f60
cmp dword [ebp - 0xa0], 0x10
jb 0x412b85
push dword [ebp - 0xb4]
call fcn.004b458c
add esp, 4
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412ba5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x78]
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412bc2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
add ebx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [ebx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412bdf
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x60]
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4135bc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
jmp 0x4135bc
mov eax, dword [ebp - 0x54]
mov al, byte [eax + 8]
test al, al
je 0x412c2a
cmp al, 7
je 0x412c2a
push 0x42b
push str...CrossRiderGeneralJsonjson_value.cpp
push str.type___nullValue__type___objectValue
call fcn.004b708c
add esp, 0xc
mov eax, dword [ebp - 0x54]
cmp byte [eax + 8], 0
jne 0x412c3d
mov ecx, 0x530a10
jmp 0x412cc7
mov dword [ebp - 0x70], 0x512e34
mov dword [ebp - 0x6c], 0
mov esi, dword [eax]
lea eax, [ebp - 0x70]
push eax
mov ecx, esi
call fcn.0044b6a0
mov ecx, dword [esi]
cmp eax, ecx
je 0x412ca7
mov esi, dword [eax + 0x10]
mov edx, reloc.kernel32.dll_HeapCreate
mov bl, byte [edx]
cmp bl, byte [esi]
mov byte [ebp - 0x4d], bl
mov ebx, dword [ebp - 0x74]
jne 0x412c96
cmp byte [ebp - 0x4d], 0
je 0x412c92
mov bl, byte [edx + 1]
cmp bl, byte [esi + 1]
mov byte [ebp - 0x4d], bl
mov ebx, dword [ebp - 0x74]
jne 0x412c96
add edx, 2
add esi, 2
cmp byte [ebp - 0x4d], 0
jne 0x412c66
xor edx, edx
jmp 0x412c9b
sbb edx, edx
or edx, 1
test edx, edx
sets dl
mov dword [ebp - 0x5c], eax
test dl, dl
je 0x412caa
mov dword [ebp - 0x5c], ecx
mov edx, dword [ebp - 0x54]
lea eax, [ebp - 0x5c]
mov ecx, dword [edx]
mov eax, dword [eax]
mov byte [ebp - 4], 5
or esi, 0xffffffff
cmp eax, dword [ecx]
mov ecx, 0x530a10
je 0x412cc7
lea ecx, [eax + 0x18]
sub esp, 0x18
push esp
call fcn.0044a0e0
lea ecx, [ebp - 0x68]
call fcn.004319e0
add esp, 0x18
mov byte [ebp - 4], reloc.kernel32.dll_GetUserDefaultLangID
mov edx, dword [eax]
lea ecx, [ebx - 0x10]
lea eax, [edx - 0x10]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x80], ecx
cmp eax, ecx
je 0x412d3b
cmp dword [ecx + 0xc], 0
lea ebx, [ecx + 0xc]
jl 0x412d2c
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x412d2c
mov ecx, dword [ebp - 0x5c]
call fcn.00404770
mov dword [ebp - 0x5c], eax
mov ecx, esi
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x412d24
mov edx, dword [ebp - 0x80]
push edx
mov ecx, dword [edx]
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov eax, dword [ebp - 0x5c]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x74], ebx
jmp 0x412d3b
push dword [edx - 0xc]
lea ecx, [ebp - 0x74]
push edx
call fcn.004046b0
mov ebx, dword [ebp - 0x74]
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412d5b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov esi, dword [ebp - 0x54]
mov al, byte [esi + 8]
test al, al
je 0x412d80
cmp al, 7
je 0x412d80
push 0x42b
push str...CrossRiderGeneralJsonjson_value.cpp
push str.type___nullValue__type___objectValue
call fcn.004b708c
add esp, 0xc
mov al, byte [esi + 8]
mov byte [ebp - 0x55], al
test al, al
je 0x412ee5
mov dword [ebp - 0x70], 0x512e40
mov dword [ebp - 0x6c], 0
mov esi, dword [esi]
lea eax, [ebp - 0x70]
push eax
mov ecx, esi
call fcn.0044b6a0
mov ecx, dword [esi]
cmp eax, ecx
je 0x412df8
mov esi, dword [eax + 0x10]
mov edx, reloc.kernel32.dll_GetProcessAffinityMask
mov bl, byte [edx]
cmp bl, byte [esi]
mov byte [ebp - 0x4d], bl
mov ebx, dword [ebp - 0x74]
jne 0x412de7
cmp byte [ebp - 0x4d], 0
je 0x412de3
mov bl, byte [edx + 1]
cmp bl, byte [esi + 1]
mov byte [ebp - 0x4d], bl
mov ebx, dword [ebp - 0x74]
jne 0x412de7
add edx, 2
add esi, 2
cmp byte [ebp - 0x4d], 0
jne 0x412db7
xor edx, edx
jmp 0x412dec
sbb edx, edx
or edx, 1
test edx, edx
sets dl
mov dword [ebp - 0x5c], eax
test dl, dl
je 0x412dfb
mov dword [ebp - 0x5c], ecx
mov esi, dword [ebp - 0x54]
lea eax, [ebp - 0x5c]
mov ecx, dword [esi]
mov eax, dword [eax]
mov byte [ebp - 4], 5
cmp eax, dword [ecx]
je 0x412ee5
add eax, 0x18
cmp eax, 0x530a10
je 0x412ee5
cmp byte [ebp - 0x55], 7
je 0x412e3c
push 0x42b
push str...CrossRiderGeneralJsonjson_value.cpp
push str.type___nullValue__type___objectValue
call fcn.004b708c
add esp, 0xc
cmp byte [esi + 8], 0
jne 0x412e51
mov ecx, 0x530a10
call fcn.0044a210
jmp 0x412ee7
mov dword [ebp - 0x70], 0x512e40
mov dword [ebp - 0x6c], 0
mov esi, dword [esi]
lea eax, [ebp - 0x70]
push eax
mov ecx, esi
call fcn.0044b6a0
mov ecx, dword [esi]
cmp eax, ecx
je 0x412ec1
mov esi, dword [eax + 0x10]
mov edx, reloc.kernel32.dll_GetProcessAffinityMask
lea ebx, [ebx]
mov bl, byte [edx]
cmp bl, byte [esi]
mov byte [ebp - 0x55], bl
mov ebx, dword [ebp - 0x74]
jne 0x412eb0
cmp byte [ebp - 0x55], 0
je 0x412eac
mov bl, byte [edx + 1]
cmp bl, byte [esi + 1]
mov byte [ebp - 0x55], bl
mov ebx, dword [ebp - 0x74]
jne 0x412eb0
add edx, 2
add esi, 2
cmp byte [ebp - 0x55], 0
jne 0x412e80
xor edx, edx
jmp 0x412eb5
sbb edx, edx
or edx, 1
test edx, edx
sets dl
mov dword [ebp - 0x5c], eax
test dl, dl
je 0x412ec4
mov dword [ebp - 0x5c], ecx
mov edx, dword [ebp - 0x54]
lea eax, [ebp - 0x5c]
mov ecx, dword [edx]
mov eax, dword [eax]
mov byte [ebp - 4], 5
cmp eax, dword [ecx]
mov ecx, 0x530a10
je 0x412ede
lea ecx, [eax + 0x18]
call fcn.0044a210
jmp 0x412ee7
xor eax, eax
mov ecx, 0x20019
cmp eax, 0x20
jne 0x412ef8
mov ecx, 0x20219
jmp 0x412f03
mov edx, 0x20119
cmp eax, 0x40
cmove ecx, edx
lea eax, [ebp - 0x48]
push eax
push ecx
push 0
push ebx
push dword [ebp - 0x64]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x413135
mov edx, eax
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x54], 0
call fcn.00431d20
push eax
mov edx, str.enumRegKeys_RegOpenKeyEx_
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], reloc.kernel32.dll_OpenSemaphoreW
call fcn.00426d80
add esp, 4
mov byte [ebp - 4], reloc.kernel32.dll_GetConsoleOutputCP
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
or edi, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412f65
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
push str.enumRegKey_
lea ecx, [ebp - 0x64]
call fcn.004036e0
mov byte [ebp - 4], reloc.kernel32.dll_OpenEventW
mov eax, dword [0x52b6d0]
mov ecx, 0x52b6d0
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
lea esi, [eax + 0x10]
mov dword [ebp - 0x80], esi
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0x80]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], reloc.kernel32.dll_SetCurrentDirectoryA
call fcn.00431c80
add esp, 4
mov dword [ebp - 0xb8], eax
push str.GlobalLog
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], reloc.kernel32.dll_IsProcessInJob
call fcn.004036e0
push 2
push dword [ebp - 0xb8]
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x68]
push eax
mov ecx, 0x530768
mov byte [ebp - 4], reloc.kernel32.dll_CreateDirectoryW
call fcn.004018b0
mov byte [ebp - 4], reloc.kernel32.dll_IsProcessInJob
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x412ff4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], reloc.kernel32.dll_SetCurrentDirectoryA
mov edx, dword [ebp - 0x6c]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x413014
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
add esi, 0xfffffff0
mov byte [ebp - 4], reloc.kernel32.dll_OpenEventW
lea eax, [esi + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x413031
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], reloc.kernel32.dll_GetConsoleOutputCP
mov edx, dword [ebp - 0x64]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x413051
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
lea edx, [ebp - 0x54]
lea ecx, [ebp - 0xb4]
call fcn.00431ab0
push eax
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], reloc.kernel32.dll_GetSystemPowerStatus
call fcn.00449d70
push ecx
push str.error
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], reloc.kernel32.dll_QueryDosDeviceW
call fcn.0044aa00
lea ecx, [ebp - 0x94]
push ecx
mov ecx, eax
call fcn.0044a020
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], reloc.kernel32.dll_GetSystemPowerStatus
call fcn.00449f60
cmp dword [ebp - 0xa0], 0x10
jb 0x4130b5
push dword [ebp - 0xb4]
call fcn.004b458c
add esp, 4
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4130d5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x78]
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4130f2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
add ebx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [ebx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41310f
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x60]
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4135bc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
jmp 0x4135bc
mov eax, dword [0x52b6d0]
mov ecx, 0x52b6d0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x4c], 0x104
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
lea esi, [eax + 0x10]
mov dword [ebp - 0x54], esi
mov byte [ebp - 4], reloc.kernel32.dll_WritePrivateProfileSectionA
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x60], eax
mov edx, dword [ebp - 0x4c]
test edx, edx
jns 0x413174
push 0x80070057
call fcn.0040c6f0
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, edx
or eax, ecx
jge 0x413191
push edx
lea ecx, [ebp - 0x54]
call fcn.0040c760
mov esi, dword [ebp - 0x54]
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x4c]
push eax
push esi
push dword [ebp - 0x64]
push dword [ebp - 0x48]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x6c], eax
cmp eax, 0x103
je 0x41333d
push dword [esi - 8]
push esi
call fcn.004b59ae
add esp, 8
test eax, eax
js 0x41316a
cmp eax, dword [esi - 8]
jg 0x41316a
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
cmp dword [ebp - 0x6c], ecx
jne 0x4132a1
lea edx, [ebp - 0x54]
lea ecx, [ebp - 0xb4]
call fcn.00431ab0
mov edx, eax
mov dword [ebp - 0x6c], edx
mov byte [ebp - 4], reloc.kernel32.dll_lstrcpynW
mov eax, dword [ebp - 0x60]
and eax, 0xffffff04
or eax, 0x104
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x8c], eax
mov eax, dword [0x530ce4]
mov dword [ebp - 0x88], 0
test al, 1
jne 0x413241
or eax, 1
push 0x4e04e0
mov dword [0x530ce4], eax
mov dword [0x530c68], 0x518430
call fcn.004b4d59
mov edx, dword [ebp - 0x6c]
add esp, 4
cmp dword [edx + 0x14], 0x10
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x6c], eax
jb 0x41324f
mov edx, dword [edx]
mov ecx, dword [0x52d374]
push dword [ebp - 0x6c]
mov eax, dword [ecx]
push edx
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], reloc.kernel32.dll_CopyFileA
call fcn.0044ace0
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], reloc.kernel32.dll_lstrcpynW
call fcn.00449f60
mov byte [ebp - 4], reloc.kernel32.dll_WritePrivateProfileSectionA
cmp dword [ebp - 0xa0], 0x10
jb 0x4132a1
push dword [ebp - 0xb4]
call fcn.004b458c
add esp, 4
cmp dword [esi - 0xc], 0
mov eax, dword [esi - 0x10]
lea edx, [esi - 0x10]
mov dword [ebp - 0x6c], eax
je 0x4132f9
cmp dword [edx + 0xc], 0
lea ecx, [edx + 0xc]
jge 0x4132d7
cmp dword [esi - 8], 0
jge 0x4132c9
push 0x80070057
call fcn.0040c6f0
xor eax, eax
mov dword [esi - 0xc], 0
mov word [esi], ax
jmp 0x4132f9
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x4132eb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
lea esi, [eax + 0x10]
mov dword [ebp - 0x54], esi
mov ecx, dword [0x530408]
mov eax, ecx
imul eax, ecx
imul eax, ecx
cdq
mov ecx, reloc.kernel32.dll_CreateFileMappingW
idiv ecx
inc dword [ebp - 0x64]
mov dword [ebp - 0x4c], 0x104
cmp edx, 2
jne 0x413163
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, reloc.kernel32.dll_ReleaseSRWLockExclusive
div ecx
inc edx
mov dword [0x530408], edx
jmp 0x413163
mov eax, dword [ebp - 0x1c]
test al, al
je 0x413350
cmp al, 6
je 0x413350
cmp al, 7
jne 0x41343b
movsx eax, al
cmp eax, 7
ja case.default.0x413358
jmp dword [eax*4 + 0x4137f4]
mov eax, dword [ebp - 0x24]
cmp dword [eax + 4], 0
je case.0x413358.0
mov eax, dword [eax]
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], eax
call fcn.0042c570
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x14]
inc eax
jmp 0x41339f
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 4]
jmp 0x41339f
push 0x388
push str...CrossRiderGeneralJsonjson_value.cpp
push reloc.kernel32.dll_ActivateActCtx
call fcn.004b708c
add esp, 0xc
xor eax, eax
test eax, eax
sete al
test al, al
je 0x41343b
mov eax, dword [ebp - 0x8c]
and eax, 0xffffff04
or eax, 0x104
mov dword [ebp - 0x8c], eax
mov eax, dword [0x530ce4]
mov dword [ebp - 0x88], 0
test al, 1
jne 0x4133f4
or eax, 1
push 0x4e04e0
mov dword [0x530ce4], eax
mov dword [0x530c68], 0x518430
call fcn.004b4d59
add esp, 4
mov ecx, dword [0x52d374]
push 0xffffffffffffffff
mov eax, dword [ecx]
push str.empty
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
mov dword [ebp - 0x94], eax
push ecx
push str.error
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], reloc.kernel32.dll_ReadProcessMemory
call fcn.0044aa00
lea ecx, [ebp - 0x94]
push ecx
mov ecx, eax
call fcn.0044a020
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], reloc.kernel32.dll_WritePrivateProfileSectionA
call fcn.00449f60
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 5
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41345b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov dword [ebp - 4], 3
mov edx, dword [ebp - 0x78]
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41347b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
add ebx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [ebx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x413498
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 1
or edi, 0xffffffff
jmp 0x412be6
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x4135d1
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0x5149b4
mov dword [ebp - 0x2c], reloc.kernel32.dll_UnmapViewOfFile
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], reloc.kernel32.dll_FormatMessageA
mov eax, dword [0x52b6d0]
mov ecx, 0x52b6d0
call dword [eax + reloc.kernel32.dll_AssignProcessToJobObject]
lea esi, [eax + 0x10]
mov dword [ebp - 0x78], esi
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], reloc.kernel32.dll_CreateFileA
call fcn.0044cc00
mov edx, eax
mov byte [ebp - 4], reloc.kernel32.dll_SetFileAttributesW
cmp dword [edx + 0x14], 0x10
jb 0x41362a
mov edx, dword [edx]
sub esp, 0x18
mov ebx, esp
mov dword [ebx + 0x14], reloc.kernel32.dll_UnmapViewOfFile
mov dword [ebx + 0x10], 0
mov byte [ebx], 0
cmp byte [edx], 0
jne 0x413649
xor ecx, ecx
jmp 0x41365b
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x7c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413651
sub ecx, dword [ebp - 0x7c]
push ecx
push edx
mov ecx, ebx
call fcn.004012e0
lea ecx, [ebp - 0x98]
call fcn.004319e0
add esp, 0x18
mov byte [ebp - 4], reloc.kernel32.dll_AddVectoredExceptionHandler
mov edx, dword [eax]
lea ebx, [esi - 0x10]
lea ecx, [edx - 0x10]
cmp ecx, ebx
je 0x4136c6
cmp dword [ebx + 0xc], 0
lea esi, [ebx + 0xc]
jl 0x4136b7
mov eax, dword [ecx]
cmp eax, dword [ebx]
jne 0x4136b7
call fcn.00404770
mov dword [ebp - 0x7c], eax
mov ecx, edi
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x4136af
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + reloc.kernel32.dll_IsBadStringPtrA]
mov eax, dword [ebp - 0x7c]
lea esi, [eax + 0x10]
mov dword [ebp - 0x78], esi
jmp 0x4136c6
push dword [edx - 0xc]
lea ecx, [ebp - 0x78]
push edx
call fcn.004046b0
mov esi, dword [ebp - 0x78]
mov byte [ebp - 4], reloc.kernel32.dll_SetFileAttributesW
mov edx, dword [ebp - 0x98]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4136e9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
mov byte [ebp - 4], reloc.kernel32.dll_CreateFileA
cmp dword [ebp - 0xa0], 0x10
jb 0x413704
push dword [ebp - 0xb4]
call fcn.004b458c
add esp, 4
mov ebx, dword [0x530408]
mov eax, ebx
imul eax, ebx
cdq
mov ecx, 7
idiv ecx
cmp edx, 3
jne 0x413757
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x64
sub ebx, ecx
xor ecx, ecx
lea eax, [ebx + 0x2f4]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004b3d60
push eax
call fcn.004b4e1b
add esp, 8
mov ebx, dword [ebp - 0x9c]
mov eax, 8
mov word [ebx], ax
push dword [esi - 0xc]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
test eax, eax
jne 0x413778
call fcn.0040c710
add esi, 0xfffffff0
mov dword [ebx + 8], eax
mov byte [ebp - 4], reloc.kernel32.dll_FormatMessageA
lea eax, [esi + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x413796
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + reloc.kernel32.dll_IsBadStringPtrA]
cmp dword [ebp - 0x2c], 0x10
mov dword [ebp - 0x44], 0x5149b4
jb 0x4137ae
push dword [ebp - 0x40]
call fcn.004b458c
add esp, 4
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x2c], reloc.kernel32.dll_UnmapViewOfFile
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
mov dword [ebp - 0x44], 0x5185e8
mov dword [ebp - 4], 0xffffffff
call fcn.00449f60
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004b4591
mov esp, ebp
pop ebp
ret