Function at 0x51f0f9
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0x2b8
mov eax, 0x60d992
call fcn.004e1c06
mov eax, ecx
mov dword [ebp - 0x274], eax
mov ecx, dword [eax + 0x34]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x24c], edi
test ecx, ecx
je 0x51f128
push 0
push edi
call fcn.0051f0f9
lea ebx, [edi + 0x128]
mov eax, dword [ebx + 4]
sub eax, dword [ebx]
cmp eax, 8
jae 0x51f191
and dword [ebp - 0x268], 0
lea ecx, [ebp - 0x268]
and dword [ebp - 0x264], 0
call fcn.0051e53f
mov dword [ebp - 0x268], eax
and dword [ebp - 4], 0
mov eax, dword [ebx + 4]
cmp dword [ebx + 8], eax
je 0x51f173
lea eax, [ebp - 0x268]
mov ecx, ebx
push eax
call fcn.0051b677
jmp 0x51f182
lea ecx, [ebp - 0x268]
push ecx
push eax
mov ecx, ebx
call fcn.0051b8a0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x268]
call fcn.0051defa
lea esi, [edi + 0xa8]
mov ecx, 0xac
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv ecx
test eax, eax
jne 0x51f1d7
lea ecx, [ebp - 0x21c]
call fcn.0051d76e
lea eax, [ebp - 0x21c]
mov dword [ebp - 4], 1
push eax
mov ecx, esi
call fcn.0051d186
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x21c]
call fcn.0051dfe0
lea esi, [edi + 0x90]
mov ecx, 0xd8
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv ecx
mov dword [ebp - 0x28c], esi
test eax, eax
jne 0x51f223
lea ecx, [ebp - 0x248]
call fcn.0051da60
lea eax, [ebp - 0x248]
mov dword [ebp - 4], 2
push eax
mov ecx, esi
call fcn.0051d1db
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x248]
call fcn.0051e036
lea esi, [edi + 0x9c]
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x64
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x2a8], esi
test eax, eax
jne 0x51f26d
lea ecx, [ebp - 0x9c]
call fcn.0051dc37
lea eax, [ebp - 0x9c]
mov dword [ebp - 4], 3
push eax
mov ecx, esi
call fcn.0051d230
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.0051e0a5
lea esi, [edi + 0x84]
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x60
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x260], esi
test eax, eax
jne 0x51f2b7
lea ecx, [ebp - 0x98]
call fcn.0051ddc8
lea eax, [ebp - 0x98]
mov dword [ebp - 4], 4
push eax
mov ecx, esi
call fcn.0051d2a7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98]
call fcn.0051e0e4
lea esi, [edi + 0xd8]
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x48
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x264], esi
test eax, eax
jne 0x51f2fb
lea ecx, [ebp - 0x80]
call fcn.0051db60
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 5
push eax
mov ecx, esi
call fcn.0051d207
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80]
call fcn.0051e08a
push 0x48
pop ecx
lea esi, [edi + 0xc0]
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv ecx
mov dword [ebp - 0x294], esi
test eax, eax
jne 0x51f339
lea ecx, [ebp - 0x80]
call fcn.0051db60
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 6
push eax
mov ecx, esi
call fcn.0051d207
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80]
call fcn.0051e08a
lea esi, [edi + 0x78]
mov eax, dword [esi + 4]
sub eax, dword [esi]
mov dword [ebp - 0x270], esi
cmp eax, 0x40
jae 0x51f372
lea ecx, [ebp - 0x78]
call fcn.0051dcfa
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 7
push eax
mov ecx, esi
call fcn.0051d27e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call fcn.0051e0c8
lea esi, [edi + 0xe4]
mov ecx, dword [esi + 4]
mov eax, ecx
sub eax, dword [esi]
push 0x18
cdq
pop edi
idiv edi
mov dword [ebp - 0x278], esi
test eax, eax
jne 0x51f3c9
and dword [ebp - 0x28], eax
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], al
lea eax, [ebp - 0x38]
mov dword [ebp - 4], 8
push eax
cmp dword [esi + 8], ecx
je 0x51f3b5
mov ecx, esi
call fcn.0051b69a
jmp 0x51f3bd
push ecx
mov ecx, esi
call fcn.0051bb70
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.004fd0c2
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x274]
mov dword [ebp - 0x2a0], eax
lea edi, [ebx + 4]
push edi
mov dword [ebp - 0x29c], edi
call fcn.004fcfee
lea ecx, [ebp - 0x170]
mov dword [ebp - 4], 9
mov dword [esp], str.AppInfo.ExperimentIds
call fcn.004166a5
lea eax, [ebp - 0x170]
mov byte [ebp - 4], 0xa
push eax
lea esi, [ebx + 0x38]
lea eax, [ebp - 0x254]
mov dword [ebp - 0x258], esi
push eax
mov ecx, esi
call fcn.004fa10e
mov eax, dword [ebp - 0x254]
lea ecx, [ebp - 0x158]
push dword [eax + 0x40]
call fcn.004166a5
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0xc
call fcn.004fd0c2
cmp dword [ebp - 0x148], 0
je 0x51f4d2
mov ebx, dword [ebp - 0x24c]
lea ecx, [ebp - 0x38]
and dword [ebp - 0x28], 0
and dword [ebp - 0x24], 0
lea eax, [ebx + 0x18]
push eax
call fcn.004fc5c1
cmp dword [ebp - 0x28], 0
mov byte [ebp - 4], 0xd
je 0x51f4ae
mov esi, dword [ebp - 0x274]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x250]
push eax
lea ecx, [esi + 0x48]
call fcn.004fd62c
mov eax, dword [ebp - 0x250]
cmp eax, dword [esi + 0x48]
je 0x51f4a8
add eax, 0x28
lea ecx, [ebp - 0x158]
push eax
call fcn.004750c5
mov esi, dword [ebp - 0x258]
mov ecx, dword [ebx + 0xa8]
lea eax, [ebp - 0x158]
push eax
call fcn.004750c5
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xc
call fcn.004fd0c2
mov ebx, dword [ebp - 0x274]
cmp dword [ebx + 0x3c], 0
je 0x51fdae
push str.Session.ImpressionId
lea ecx, [ebp - 0x38]
call fcn.004166a5
mov ebx, dword [esi]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x250]
mov ecx, esi
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, ebx
je 0x51f5db
lea ecx, [ebp - 0x140]
call fcn.0051de9e
mov ebx, str.Session.ImpressionId
mov byte [ebp - 4], 0xe
push ebx
lea ecx, [ebp - 0x38]
call fcn.004166a5
mov ecx, dword [ebp - 0x258]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0xf
push eax
call fcn.004fa10e
mov eax, dword [ebp - 0x254]
lea ecx, [ebp - 0x60]
add eax, 0x28
push eax
call sym.OneDriveUpdaterService.exe_public:_void___thiscall_Microsoft::Applications::Events::EventProperty::constructor_struct_Microsoft::Applications::Events::EventProperty__
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x11
call fcn.004fd0c2
mov esi, dword [ebp - 0x48]
push esi
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebp - 0x130]
call fcn.00414210
push ebx
lea ecx, [ebp - 0xc8]
call fcn.004166a5
mov ecx, dword [ebp - 0x2a0]
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0x12
push eax
call fcn.0051cbce
mov ecx, dword [ebp - 0x254]
lea eax, [ebp - 0x140]
push eax
add ecx, 0x28
call fcn.0051e17e
lea ecx, [ebp - 0xc8]
call fcn.004fd0c2
lea ecx, [ebp - 0x60]
call sym.OneDriveUpdaterService.exe_public_virtual:_void___thiscall_Microsoft::Applications::Events::EventProperty::destructor_void_
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0xc
call fcn.0051e107
push str.AppInfo.ETag
lea ecx, [ebp - 0x38]
call fcn.004166a5
mov eax, dword [ebp - 0x258]
lea ecx, [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x250]
push ecx
mov ebx, dword [eax]
mov ecx, eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, ebx
je 0x51f6e7
lea ecx, [ebp - 0x140]
call fcn.0051de9e
push str.AppInfo.ETag
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
call fcn.004166a5
mov ebx, dword [ebp - 0x258]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0x14
push eax
mov ecx, ebx
call fcn.004fa10e
mov eax, dword [ebp - 0x254]
lea ecx, [ebp - 0x60]
add eax, 0x28
push eax
call sym.OneDriveUpdaterService.exe_public:_void___thiscall_Microsoft::Applications::Events::EventProperty::constructor_struct_Microsoft::Applications::Events::EventProperty__
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x16
call fcn.004fd0c2
mov esi, dword [ebp - 0x48]
push esi
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebp - 0x130]
call fcn.00414210
push str.AppInfo.ETag
lea ecx, [ebp - 0xc8]
call fcn.004166a5
mov ecx, dword [ebp - 0x2a0]
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0x17
push eax
call fcn.0051cbce
mov ecx, dword [ebp - 0x254]
lea eax, [ebp - 0x140]
push eax
add ecx, 0x28
call fcn.0051e17e
lea ecx, [ebp - 0xc8]
call fcn.004fd0c2
lea ecx, [ebp - 0x60]
call sym.OneDriveUpdaterService.exe_public_virtual:_void___thiscall_Microsoft::Applications::Events::EventProperty::destructor_void_
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0xc
call fcn.0051e107
jmp 0x51f6ed
mov ebx, dword [ebp - 0x258]
push str.AppInfo.Id
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
call fcn.004fd0c2
mov eax, dword [ebp - 0x250]
cmp eax, dword [ebx]
setne byte [ebp - 0x269]
je 0x51f74b
mov ebx, dword [ebp - 0x24c]
mov esi, dword [eax + 0x40]
push esi
mov ebx, dword [ebx + 0xa8]
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebx + 0x4c]
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.AppInfo.Env
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51f79e
mov eax, dword [ebp - 0x24c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax + 0xa8]
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebx + 0x30]
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.AppInfo.Name
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51f7f6
mov eax, dword [ebp - 0x24c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax + 0xa8]
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebx + 0x94]
call fcn.00414210
mov ebx, dword [ebp - 0x258]
jmp 0x51f81a
cmp byte [ebp - 0x269], 0
je 0x51f81a
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0xa8]
lea eax, [ecx + 0x4c]
add ecx, 0x94
push eax
call fcn.004750c5
push str.AppInfo.Version
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51f86d
mov eax, dword [ebp - 0x24c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax + 0xa8]
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebx + 0x64]
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.AppInfo.Language
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51f8c0
mov eax, dword [ebp - 0x24c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax + 0xa8]
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebx + 0x7c]
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.Id
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51f9ab
push 0x64489c
lea ecx, [ebp - 0x38]
call fcn.004166a5
mov esi, dword [esi + 0x40]
push 0x18
pop eax
mov byte [ebp - 4], al
test esi, esi
je 0x51f989
push esi
call fcn.005f3750
mov dword [ebp - 0x250], eax
pop ecx
cmp eax, 2
jb 0x51f962
cmp byte [esi + 1], 0x3a
jne 0x51f962
mov cl, byte [esi]
cmp cl, 0x63
je 0x51f943
cmp cl, 0x75
je 0x51f943
cmp cl, 0x61
je 0x51f943
cmp cl, 0x73
je 0x51f943
cmp cl, 0x78
je 0x51f943
cmp cl, 0x69
jne 0x51f962
push 0x653c2c
call fcn.005f3750
pop ecx
push eax
push 0x653c2c
lea ecx, [ebp - 0x38]
call fcn.00414210
mov eax, dword [ebp - 0x250]
cmp byte [esi], 0x7b
jne 0x51f978
cmp byte [eax + esi - 1], 0x7d
jne 0x51f978
add eax, 0xfffffffe
push eax
lea eax, [esi + 1]
push eax
jmp 0x51f981
push esi
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebp - 0x38]
call fcn.00416384
mov ecx, dword [ebp - 0x28c]
lea eax, [ebp - 0x38]
push eax
push 0x18
pop eax
mov ecx, dword [ecx]
add ecx, eax
call fcn.004750c5
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xc
call fcn.004fd0c2
push str.DeviceInfo.OrgId
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51f9fa
mov eax, dword [ebp - 0x28c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebx + 0x78]
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.Make
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51fa49
mov ebx, dword [ebp - 0x270]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [ebx]
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebx + 0x10]
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.Model
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51fa98
mov eax, dword [ebp - 0x270]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebx + 0x28]
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.Class
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51fae7
mov eax, dword [ebp - 0x28c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebx + 0x60]
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.M365aInfo.EnrolledTenantId
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51fb35
mov ebx, dword [ebp - 0x278]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [ebx]
call fcn.005f3750
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.OsName
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51fb84
mov ebx, dword [ebp - 0x2a8]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [ebx]
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebx + 0x34]
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.OsBuild
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51fbd3
mov eax, dword [ebp - 0x2a8]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebx + 0x4c]
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.UserInfo.Id
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51fc26
mov ebx, dword [ebp - 0x260]
mov esi, dword [esi + 0x40]
push 0x18
pop eax
mov ebx, dword [ebx]
push esi
add ebx, eax
call fcn.005f3750
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.UserInfo.Language
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51fc75
mov eax, dword [ebp - 0x260]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebx + 0x48]
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.UserInfo.TimeZone
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51fcc4
mov ebx, dword [ebp - 0x264]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [ebx]
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebx + 0x30]
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.NetworkCost
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51fd17
mov ebx, dword [ebp - 0x294]
mov esi, dword [esi + 0x40]
push 0x18
pop eax
mov ebx, dword [ebx]
push esi
add ebx, eax
call fcn.005f3750
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.NetworkProvider
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51fd65
mov eax, dword [ebp - 0x294]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.005f3750
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00414210
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.NetworkType
lea ecx, [ebp - 0x38]
call fcn.004166a5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004fd62c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.004fd0c2
cmp esi, dword [ebx]
je 0x51fdae
mov eax, dword [ebp - 0x294]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.005f3750
pop ecx
push eax
push esi
lea ecx, [ebx + 0x30]
call fcn.00414210
mov esi, dword [ebp - 0x274]
cmp dword [esi + 0x54], 0
jbe 0x51fe8a
and dword [ebp - 0x288], 0
xor ebx, ebx
and dword [ebp - 0x280], ebx
mov dword [ebp - 0x284], ebx
mov esi, dword [esi + 0x50]
mov byte [ebp - 4], 0x19
mov eax, dword [esi]
mov dword [ebp - 0x260], eax
cmp eax, esi
je 0x51fe43
mov edi, dword [ebp - 0x280]
add eax, 0x14
push eax
cmp edi, ebx
je 0x51fe10
and dword [ebx + 0x10], 0
mov ecx, ebx
and dword [ebx + 0x14], 0
call fcn.004fc5c1
push 0x18
pop eax
add ebx, eax
mov dword [ebp - 0x284], ebx
jmp 0x51fe28
push ebx
lea ecx, [ebp - 0x288]
call fcn.0051bb70
mov ebx, dword [ebp - 0x284]
mov edi, dword [ebp - 0x280]
lea ecx, [ebp - 0x260]
call fcn.004fb0bb
mov eax, dword [ebp - 0x260]
cmp eax, esi
jne 0x51fdec
mov edi, dword [ebp - 0x29c]
lea ecx, [ebp - 0x78]
call fcn.0051dcfa
lea eax, [ebp - 0x288]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x74]
call fcn.0051d2f9
mov ecx, dword [ebp - 0x270]
lea eax, [ebp - 0x78]
push eax
call fcn.0051d27e
lea ecx, [ebp - 0x78]
call fcn.0051e0c8
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0xc
call fcn.00503910
mov esi, dword [ebp - 0x274]
cmp byte [ebp + 0xc], 0
jne 0x5202e9
mov esi, dword [esi + 0x40]
mov eax, dword [esi]
mov dword [ebp - 0x260], eax
cmp eax, esi
je 0x5202e9
lea ebx, [eax + 0x10]
mov eax, dword [ebx + 0x24]
mov dword [ebp - 0x270], ebx
test eax, eax
je 0x51ff7a
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x264], eax
call fcn.0051de9e
and dword [ebp - 0x28], 0
xorps xmm0, xmm0
and dword [ebp - 0x24], 0
movups xmmword [ebp - 0x38], xmm0
lea eax, [ebp - 0x264]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x38]
call fcn.0051d259
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0051d1b2
mov eax, dword [ebx + 0x18]
lea ecx, [ebp - 0x50]
push ecx
mov edi, dword [eax + 4]
mov ecx, edi
call dword [0x6147a0]
lea ecx, [ebx + 0x18]
call edi
push eax
lea ecx, [ebp - 0x130]
call fcn.0041296c
lea ecx, [ebp - 0x50]
call fcn.004fd0c2
push ebx
lea eax, [ebp - 0x27c]
push eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0x128]
call fcn.0051ca8c
mov ecx, dword [ebp - 0x27c]
lea eax, [ebp - 0x140]
push eax
add ecx, 0x28
call fcn.0051e17e
lea ecx, [ebp - 0x2c]
call fcn.0050ac98
lea ecx, [ebp - 0x38]
call fcn.0050ac98
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0xc
call fcn.0051e107
jmp 0x5202ca
xor ecx, ecx
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x2c0], ecx
mov dword [ebp - 0x2bc], ecx
xor eax, eax
mov byte [ebp - 4], 0x1d
lea edi, [ebp - 0x20]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebx + 0x20]
sub eax, ecx
je 0x520243
sub eax, 1
je 0x5201f7
sub eax, 1
je 0x5201ad
sub eax, 1
je 0x520161
sub eax, 1
je 0x5200fe
sub eax, 1
je 0x520047
lea ecx, [ebp - 0x1e8]
call fcn.0051de9e
mov eax, dword [ebx + 0x18]
lea ecx, [ebp - 0x50]
push ecx
mov byte [ebp - 4], 0x24
mov edi, dword [eax + 4]
mov ecx, edi
call dword [0x6147a0]
lea ecx, [ebx + 0x18]
call edi
push eax
lea ecx, [ebp - 0x1d8]
call fcn.0041296c
lea ecx, [ebp - 0x50]
call fcn.004fd0c2
push dword [ebp - 0x270]
lea eax, [ebp - 0x254]
push eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0x128]
call fcn.0051ca8c
mov ecx, dword [ebp - 0x254]
lea eax, [ebp - 0x1e8]
push eax
add ecx, 0x28
call fcn.0051e17e
lea ecx, [ebp - 0x1e8]
jmp 0x5202b6
lea eax, [ebx + 0x30]
push eax
lea ecx, [ebp - 0xc0]
call sym.OneDriveUpdaterService.exe_public:_void___thiscall_Microsoft::Applications::Events::GUID_t::constructor_struct_Microsoft::Applications::Events::GUID_t_const__
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0xc0]
call sym.OneDriveUpdaterService.exe_public:_void___thiscall_Microsoft::Applications::Events::GUID_t::to_bytes_unsigned_char____16__const
push dword [ebp - 0x264]
xor eax, eax
lea ecx, [ebp - 0x2b8]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00504ff3
lea eax, [ebp - 0x2b8]
push eax
lea ecx, [ebp - 0x2c4]
call fcn.0048d423
lea ecx, [ebp - 0x2b8]
call fcn.00455376
lea ecx, [ebp - 0x140]
call fcn.0051de9e
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x140], 8
call fcn.0051d2d0
push ebx
lea eax, [ebp - 0x2ac]
push eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0x128]
call fcn.0051ca8c
mov ecx, dword [ebp - 0x2ac]
jmp 0x5202a1
lea ecx, [ebp - 0xb0]
call fcn.0051de9e
movzx eax, byte [ebx + 0x30]
cdq
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x2a4]
push ebx
push eax
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 0x22
mov dword [ebp - 0xb0], 6
mov dword [ebp - 0x84], edx
mov ecx, dword [eax + 0x128]
call fcn.0051ca8c
mov ecx, dword [ebp - 0x2a4]
lea eax, [ebp - 0xb0]
add ecx, 0x28
push eax
call fcn.0051e17e
lea ecx, [ebp - 0xb0]
jmp 0x5202b6
lea ecx, [ebp - 0xb0]
call fcn.0051de9e
mov eax, dword [ebx + 0x30]
mov dword [ebp - 0x88], eax
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x298]
push ebx
push eax
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 0x21
mov dword [ebp - 0xb0], 7
mov ecx, dword [eax + 0x128]
call fcn.0051ca8c
mov ecx, dword [ebp - 0x298]
jmp 0x520147
lea ecx, [ebp - 0x140]
call fcn.0051de9e
movsd xmm0, qword [ebx + 0x30]
lea eax, [ebp - 0x290]
push ebx
push eax
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x140], 4
movsd qword [ebp - 0x110], xmm0
mov ecx, dword [eax + 0x128]
call fcn.0051ca8c
mov ecx, dword [ebp - 0x290]
jmp 0x5202a1
lea ecx, [ebp - 0xb0]
call fcn.0051de9e
mov eax, dword [ebx + 0x30]
and dword [ebp - 0xb0], 0
mov dword [ebp - 0x88], eax
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x25c]
push ebx
push eax
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 0x1f
mov ecx, dword [eax + 0x128]
call fcn.0051ca8c
mov ecx, dword [ebp - 0x25c]
jmp 0x520147
lea ecx, [ebp - 0x140]
call fcn.0051de9e
mov eax, dword [ebx + 0x18]
lea ecx, [ebp - 0x50]
push ecx
mov byte [ebp - 4], 0x1e
mov edi, dword [eax + 4]
mov ecx, edi
call dword [0x6147a0]
lea ecx, [ebx + 0x18]
call edi
push eax
lea ecx, [ebp - 0x130]
call fcn.0041296c
lea ecx, [ebp - 0x50]
call fcn.004fd0c2
push dword [ebp - 0x270]
lea eax, [ebp - 0x284]
push eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0x128]
call fcn.0051ca8c
mov ecx, dword [ebp - 0x284]
lea eax, [ebp - 0x140]
add ecx, 0x28
push eax
call fcn.0051e17e
lea ecx, [ebp - 0x140]
call fcn.0051e107
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0xc
call fcn.00455376
lea ecx, [ebp - 0x260]
call fcn.004fb0bb
mov eax, dword [ebp - 0x260]
cmp eax, esi
jne 0x51fea7
mov edi, dword [ebp - 0x29c]
cmp dword [0x68e42c], 4
jl 0x520314
mov eax, dword [ebp - 0x274]
push eax
push dword [ebp - 0x24c]
push str.Record_p_decorated_with_SemanticContext_p
call fcn.005043a3
push eax
push 4
call fcn.00501a6e
add esp, 0x14
lea ecx, [ebp - 0x158]
call fcn.004fd0c2
push edi
mov dword [ebp - 4], 0x25
call fcn.004fd00d
pop ecx
call fcn.004e1bb5
ret 8