Function at 0x100ae000
Capabilities:
Parse pe header

Disassembly:
push 0x228
mov eax, 0x1012d9a5
call fcn.101108dc
mov edi, ecx
mov dword [ebp - 0x100], edi
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x78], ebx
push 0x101e2a68
mov dword [ebp - 4], ebx
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.10063887
pop ecx
pop ecx
mov esi, 0x1014a0f1
lea ecx, [ebp - 0x14c]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 1
call fcn.10063887
push dword [edi + 8]
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 2
call fcn.10063887
lea eax, [ebp - 0x14c]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0xfc]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0x134]
call fcn.1001524d
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], bl
call fcn.1001524d
test esi, esi
je 0x100ae154
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xfc]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 4
call fcn.10063887
push dword [edi + 8]
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 5
call fcn.10063887
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.100e1c13
add esp, 0xc
mov ecx, dword [eax]
push str.GetUnauthenticatedProfile
push str._s_:_invoked
push eax
mov esi, dword [ecx + 0xc]
mov ecx, esi
call dword [0x1014488c]
call esi
add esp, 0xc
lea ecx, [ebp - 0x14c]
call fcn.1001524d
lea ecx, [ebp - 0x134]
call fcn.1001524d
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], bl
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
mov eax, dword [edi + 4]
pop ecx
mov dword [ebp - 0x34], ebx
mov ecx, dword [eax + 0x3c]
add eax, 0x18
mov dword [ebp - 0x98], ecx
lea ecx, [ebp - 0x2c]
push eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
call fcn.10063887
mov ebx, 0x20000
mov byte [ebp - 4], 7
call fcn.10094144
push pe_nt_image_headers32
mov eax, dword [eax + 0x9c]
and dword [ebp - 0x14], 0
mov dword [ebp - 0x68], eax
call fcn.10063887
mov esi, eax
pop ecx
mov dword [ebp - 0x6c], esi
mov byte [ebp - 4], 8
test esi, esi
je 0x100ae336
mov ebx, 0x1014a0f1
lea ecx, [ebp - 0x17c]
push ebx
call fcn.10063887
push ebx
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 9
mov dword [ebp - 0x78], 0x20001
call fcn.10063887
and dword [ebp - 0xc0], 0
lea ecx, [ebp - 0x234]
push ebx
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x78], 0x20003
call fcn.10063887
push ebx
lea ecx, [ebp - 0x21c]
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x78], 0x20007
call fcn.10063887
push ebx
lea ecx, [ebp - 0x204]
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x78], 0x2000f
call fcn.10063887
push ebx
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x78], 0x2001f
call fcn.10063887
push ebx
lea ecx, [ebp - 0x1d4]
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x78], 0x2003f
call fcn.10063887
push ebx
lea ecx, [ebp - 0xfc]
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x78], 0x2007f
call fcn.10063887
push ebx
lea ecx, [ebp - 0x134]
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x78], 0x200ff
call fcn.10063887
push ebx
lea ecx, [ebp - 0x14c]
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x78], 0x201ff
call fcn.10063887
xor ecx, ecx
mov dword [ebp - 4], 0x12
lea eax, [ebp - 0x17c]
mov ebx, 0x203ff
push eax
push ecx
push ecx
lea eax, [ebp - 0x164]
mov dword [ebp - 0x78], ebx
push eax
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x68]
push eax
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
call fcn.10099c28
pop ecx
pop ecx
push edx
push eax
lea eax, [ebp - 0x234]
mov ecx, esi
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.100e520d
jmp 0x100ae338
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0x1d
test ebx, 0x200
je 0x100ae35b
lea ecx, [ebp - 0x14c]
and ebx, 0xfffffdff
call fcn.1001524d
test ebx, 0x100
je 0x100ae374
lea ecx, [ebp - 0x134]
and ebx, 0xfffffeff
call fcn.1001524d
test bl, bl
jns 0x100ae389
lea ecx, [ebp - 0xfc]
and ebx, 0xffffff7f
call fcn.1001524d
test bl, 0x40
je 0x100ae39c
lea ecx, [ebp - 0x1d4]
and ebx, 0xffffffbf
call fcn.1001524d
test bl, 0x20
je 0x100ae3af
lea ecx, [ebp - 0x1ec]
and ebx, 0xffffffdf
call fcn.1001524d
test bl, 0x10
je 0x100ae3c2
lea ecx, [ebp - 0x204]
and ebx, 0xffffffef
call fcn.1001524d
test bl, 8
je 0x100ae3d5
lea ecx, [ebp - 0x21c]
and ebx, 0xfffffff7
call fcn.1001524d
test bl, 4
je 0x100ae3e8
lea ecx, [ebp - 0x234]
and ebx, 0xfffffffb
call fcn.1001524d
test bl, 2
je 0x100ae3fb
lea ecx, [ebp - 0x164]
and ebx, 0xfffffffd
call fcn.1001524d
mov byte [ebp - 4], 0x27
test bl, 1
je 0x100ae412
lea ecx, [ebp - 0x17c]
and ebx, 0xfffffffe
call fcn.1001524d
call fcn.100e1984
mov ecx, eax
call fcn.100e197f
mov ecx, eax
call fcn.100c4368
cmp dword [eax], 4
jne 0x100ae67e
cmp dword [ebp + 0xc], 0
jne 0x100ae67e
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.10063887
pop ecx
pop ecx
mov esi, 0x1014a0f1
lea ecx, [ebp - 0x94]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x28
call fcn.10063887
push dword [edi + 8]
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x29
call fcn.10063887
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0xb8]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x27
call fcn.1001524d
test esi, esi
je 0x100ae5db
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xb8]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x2b
call fcn.10063887
push dword [edi + 8]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x2c
call fcn.10063887
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x2d
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100e1c13
movaps xmm0, xmmword [0x10157390]
lea ecx, [ebp - 0x1bc]
movups xmmword [ebp - 0x1bc], xmm0
add esp, 0xc
mov esi, eax
movaps xmm0, xmmword [0x10157360]
lea eax, [ebp - 0x11c]
movups xmmword [ebp - 0x1ac], xmm0
mov dword [ebp - 0x18c], 0x15bf2d57
movaps xmm0, xmmword [0x101573d0]
push eax
movups xmmword [ebp - 0x19c], xmm0
mov dword [ebp - 0x188], 0xc019171d
mov dword [ebp - 0x184], 0x4fd9dfdc
mov byte [ebp - 0x180], 0
call fcn.100b1c10
mov ecx, eax
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x2e
jb 0x100ae592
mov ecx, dword [ecx]
mov eax, dword [esi]
push str.GetUnauthenticatedProfile
push ecx
push esi
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x1014488c]
call esi
add esp, 0xc
lea ecx, [ebp - 0x11c]
call fcn.1001524d
lea ecx, [ebp - 0x94]
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x27
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
push 0x24
call fcn.10063887
pop ecx
mov esi, eax
pop ecx
mov dword [ebp - 0x6c], esi
xor eax, eax
mov byte [ebp - 4], 0x2f
test esi, esi
je 0x100ae642
push 9
pop ecx
mov edi, esi
rep stosd dword es:[edi], eax
push 0x1014a0f1
lea ecx, [ebp - 0x94]
call fcn.10063887
mov eax, dword [ebp - 0x14]
or ebx, 0x400
and dword [ebp - 0x14], 0
push 0xff
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x30
push 9
mov dword [ebp - 0x78], ebx
mov dword [ecx], eax
lea eax, [ebp - 0x94]
push eax
mov ecx, esi
call fcn.100a5435
mov edi, dword [ebp - 0x9c]
lea ecx, [ebp - 0x100]
and dword [ebp - 0x100], 0
or ebx, 0x800
mov dword [edi], eax
call fcn.1009acd9
test ebx, 0x400
je 0x100afbd9
lea ecx, [ebp - 0x94]
call fcn.1001524d
jmp 0x100afbd9
push 1
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0xdc], eax
mov eax, dword [edi + 4]
push ecx
sub esp, 0x18
mov ecx, esp
mov edi, dword [eax + 0x38]
and dword [ebp - 0x30], 0
push eax
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0x6c], ecx
call fcn.10063887
mov eax, dword [edi]
lea ecx, [ebp - 0xa0]
push ecx
or ebx, 0x40000
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x1014488c]
mov ecx, edi
call esi
mov esi, dword [eax]
and dword [eax], 0
mov dword [ebp - 0xbc], esi
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x32
call fcn.100a6222
mov edi, 0x1014a0f1
lea ecx, [ebp - 0x64]
push edi
call fcn.10063887
push edi
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x33
call fcn.10063887
cmp dword [ebp - 0x30], 0
mov byte [ebp - 4], 0x34
jne 0x100ae73d
mov ecx, esi
call fcn.100a7cb7
mov ecx, eax
call fcn.10034710
push eax
lea ecx, [ebp - 0x64]
call fcn.10063887
mov ecx, esi
call fcn.100a7cb7
mov ecx, eax
call fcn.10057143
mov ecx, eax
call fcn.10040365
push eax
lea ecx, [ebp - 0x4c]
call fcn.10063887
cmp dword [ebp + 0xc], 0
je 0x100ae77a
push dword [ebp + 0xc]
lea eax, [ebp - 0xc0]
push eax
call fcn.1009c613
pop ecx
pop ecx
mov edi, dword [eax]
or ebx, 0x1000
and dword [eax], 0
mov dword [ebp - 0x70], edi
mov esi, dword [ebp - 0x104]
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 0x36
or ebx, 0x2000
jmp 0x100ae79d
xor esi, esi
or ebx, 0x4000
and dword [ebp - 0x7c], esi
mov dword [ebp - 0x104], esi
or ebx, 0x8000
mov dword [ebp - 4], 0x38
lea eax, [ebp - 0x7c]
xor edi, edi
push 0x1014a0f1
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0xa0], eax
call fcn.10063887
push 0x1014a0f1
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0x39
call fcn.10063887
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x3a
push eax
push ecx
mov ecx, dword [ebp - 0xa0]
mov eax, esp
and dword [ecx], 0
mov dword [eax], edi
lea eax, [ebp - 0xd8]
mov edi, dword [ebp - 0x98]
push eax
lea eax, [ebp - 0x94]
push eax
mov edi, dword [edi]
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [edi]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [0x1014488c]
mov ecx, dword [ebp - 0x98]
call dword [edi]
mov edi, dword [eax]
and dword [eax], 0
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x98], edi
lea ecx, [ebp - 0x6c]
call fcn.1004cf82
lea ecx, [ebp - 0x94]
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
test ebx, 0x8000
je 0x100ae867
and ebx, 0xffff7fff
cmp dword [ebp - 0x7c], 0
je 0x100ae867
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x7c]
call fcn.10063887
test ebx, 0x4000
je 0x100ae88d
and ebx, 0xffffbfff
test esi, esi
je 0x100ae88d
mov ecx, esi
call fcn.1001d4fa
push 0xa0
push esi
call fcn.10063887
pop ecx
pop ecx
test ebx, 0x2000
je 0x100ae8ac
and ebx, 0xffffdfff
cmp dword [ebp - 0x70], 0
je 0x100ae8ac
push dword [ebp - 0x70]
lea ecx, [ebp - 0x70]
call fcn.10063887
mov byte [ebp - 4], 0x41
test ebx, 0x1000
je 0x100ae8d8
and ebx, 0xffffefff
cmp dword [ebp - 0xc0], 0
je 0x100ae8d8
push dword [ebp - 0xc0]
lea ecx, [ebp - 0xc0]
call fcn.10063887
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x100af954
test edi, edi
je switch.0x100af959
mov ebx, 0xf8
push ebx
call fcn.10063887
mov esi, eax
pop ecx
mov dword [ebp - 0x74], esi
mov byte [ebp - 4], 0x4c
test esi, esi
je 0x100ae929
push ebx
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov ecx, edi
call fcn.10056619
push eax
mov ecx, esi
call fcn.1005689d
mov edi, eax
mov dword [ebp - 0xc0], eax
jmp 0x100ae931
xor edi, edi
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0x7c], edi
sub esp, 0x18
mov byte [ebp - 4], 0x4d
cmp dword [ebp - 0x68], 1
mov edx, str.NAMED_USER_EDUCATION_LAB
mov eax, str.NAMED_USER_ONLINE
mov dword [ebp - 0x74], esp
cmovne eax, edx
mov ecx, esp
push eax
call fcn.10063887
sub esp, 0x18
mov byte [ebp - 4], 0x4e
mov ecx, edi
mov esi, esp
call fcn.10057143
mov ecx, eax
call fcn.100404b6
push eax
mov ecx, esi
call fcn.10063887
mov byte [ebp - 4], 0x4d
call fcn.100e9452
add esp, 0x30
test al, al
jne 0x100aebc0
mov ebx, 0xd8
push 0x101e2a68
mov dword [ebp - 0x70], ebx
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.10063887
pop ecx
pop ecx
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xb8]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x4f
call fcn.10063887
mov edi, dword [ebp - 0x100]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x50
push dword [edi + 8]
call fcn.10063887
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x51
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x94]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x4d
call fcn.1001524d
test esi, esi
je 0x100aeaef
mov ebx, 0x1014a0f1
lea ecx, [ebp - 0xb8]
push ebx
call fcn.10063887
push ebx
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x52
call fcn.10063887
push dword [edi + 8]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x53
call fcn.10063887
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x54
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100e1c13
mov edi, eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.10070d1d
add esp, 0x14
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x55
jb 0x100aea9f
mov eax, dword [eax]
mov esi, dword [edi]
push str.GetUnauthenticatedProfile
push str._s_:_Runtime_mode_mismatch
push eax
mov ecx, dword [esi + 0x24]
push edi
call dword [0x1014488c]
call dword [esi + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x11c]
call fcn.1001524d
lea ecx, [ebp - 0x94]
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x4d
call fcn.1001524d
mov ebx, dword [ebp - 0x70]
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
lea ecx, [ebp - 0x94]
mov dword [esp], 0x1014a0f1
call fcn.10063887
push dword [ebp - 0x68]
and dword [ebp - 0x7c], 0
push 9
push ecx
mov ecx, dword [ebp - 0xc0]
mov eax, esp
mov byte [ebp - 4], 0x56
mov dword [eax], ecx
lea eax, [ebp - 0x94]
push eax
push ebx
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0xdc]
call fcn.100a855b
xor ebx, ebx
mov edi, dword [ebp - 0x9c]
mov ecx, eax
mov eax, dword [ecx]
mov dword [ecx], ebx
lea ecx, [ebp - 0x6c]
mov dword [edi], eax
call fcn.1009acd9
lea ecx, [ebp - 0x94]
call fcn.1001524d
lea ecx, [ebp - 0x98]
call fcn.1004cf82
lea ecx, [ebp - 0x4c]
call fcn.1001524d
lea ecx, [ebp - 0x64]
call fcn.1001524d
lea ecx, [ebp - 0xbc]
call fcn.100a6222
mov esi, dword [ebp - 0x14]
test esi, esi
je 0x100aeb9e
mov ecx, esi
call fcn.1001d2df
push pe_nt_image_headers32
push esi
call fcn.10063887
pop ecx
pop ecx
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x100aebb2
inc eax
push eax
push dword [ebp - 0x2c]
call fcn.10063887
pop ecx
pop ecx
cmp dword [ebp + 0xc], ebx
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
jmp 0x100afc14
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74], esp
mov dword [ebp - 0x6c], ecx
mov ebx, dword [ebp - 0x100]
push dword [ebx + 4]
call fcn.10063887
sub esp, 0x18
mov byte [ebp - 4], 0x57
mov ecx, edi
mov esi, esp
call fcn.10057143
mov ecx, eax
call fcn.10034710
push eax
mov ecx, esi
call fcn.10063887
mov byte [ebp - 4], 0x4d
call fcn.100e9452
add esp, 0x30
test al, al
jne 0x100aedb4
push 0x101e2a68
mov dword [ebp - 0x70], 0xd9
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.10063887
pop ecx
pop ecx
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xb8]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x58
call fcn.10063887
push dword [ebx + 8]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x59
call fcn.10063887
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x5a
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x94]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x4d
call fcn.1001524d
test esi, esi
je 0x100aed67
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xb8]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x5b
call fcn.10063887
push dword [ebx + 8]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x5c
call fcn.10063887
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x5d
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100e1c13
mov ebx, eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.10070d1d
add esp, 0x14
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x5e
jb 0x100aed1a
mov eax, dword [eax]
mov esi, dword [ebx]
push str.GetUnauthenticatedProfile
push str._s_:_App_ID_mismatch
push eax
mov ecx, dword [esi + 0x24]
push ebx
call dword [0x1014488c]
call dword [esi + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x11c]
call fcn.1001524d
lea ecx, [ebp - 0x94]
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x4d
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
lea ecx, [ebp - 0x94]
mov dword [esp], 0x1014a0f1
call fcn.10063887
mov byte [ebp - 4], 0x5f
push dword [ebp - 0x68]
push 9
push ecx
mov eax, esp
mov dword [eax], edi
lea eax, [ebp - 0x94]
push eax
push dword [ebp - 0x70]
lea eax, [ebp - 0x6c]
xor ebx, ebx
push eax
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x7c], ebx
call fcn.100a855b
jmp 0x100aeb3c
call fcn.100e1984
mov ecx, eax
call fcn.100e0be8
sub esp, 0x18
mov dword [ebp - 0x74], esp
test al, al
je 0x100af005
lea eax, [ebp - 0xdd]
mov byte [ebp - 0xdd], 0
mov esi, esp
push eax
call fcn.100e1984
mov ecx, eax
call fcn.100e2a17
push eax
mov ecx, esi
call fcn.10063887
sub esp, 0x18
mov byte [ebp - 4], 0x60
mov ecx, edi
mov esi, esp
call fcn.10057143
mov ecx, eax
call fcn.100404ba
push eax
mov ecx, esi
call fcn.10063887
mov byte [ebp - 4], 0x4d
call fcn.100e9452
add esp, 0x30
test al, al
jne 0x100af22b
push 0x101e2a68
mov dword [ebp - 0x70], 0xd4
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.10063887
pop ecx
pop ecx
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xb8]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x61
call fcn.10063887
push dword [ebx + 8]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x62
call fcn.10063887
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x63
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x94]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x4d
call fcn.1001524d
test esi, esi
je 0x100aef85
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xb8]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x64
call fcn.10063887
push dword [ebx + 8]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x65
call fcn.10063887
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x66
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100e1c13
mov esi, eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x6c], esi
push eax
call fcn.10070d1d
add esp, 0x14
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x67
jb 0x100aef36
mov eax, dword [eax]
mov esi, dword [esi]
push str.GetUnauthenticatedProfile
push str._s_:_Principal_mismatch_for_VDI
push eax
push dword [ebp - 0x6c]
mov ecx, dword [esi + 0x24]
call dword [0x1014488c]
call dword [esi + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x11c]
call fcn.1001524d
lea ecx, [ebp - 0x94]
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x4d
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
and dword [ebp - 0xec], 0
and dword [ebp - 0xe8], 0
pop ecx
push dword [ebx + 4]
lea ecx, [ebp - 0xfc]
call fcn.10063887
mov ebx, dword [ebp - 0xe4]
lea ecx, [ebp - 0xfc]
push ecx
mov byte [ebp - 4], 0x68
mov eax, dword [ebx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x1014488c]
mov ecx, ebx
call esi
mov eax, dword [ebp - 0xe8]
mov byte [ebp - 4], 0x4d
cmp eax, 0x10
jb 0x100aefec
inc eax
push eax
push dword [ebp - 0xfc]
call fcn.10063887
pop ecx
pop ecx
push 0x1014a0f1
lea ecx, [ebp - 0x94]
call fcn.10063887
mov byte [ebp - 4], 0x69
jmp 0x100aed87
mov ecx, esp
lea eax, [ebp - 0x2c]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.10063887
sub esp, 0x18
mov byte [ebp - 4], 0x6a
mov ecx, edi
mov esi, esp
call fcn.10057143
mov ecx, eax
call fcn.100403fa
push eax
mov ecx, esi
call fcn.10063887
mov byte [ebp - 4], 0x4d
call fcn.100e9452
add esp, 0x30
test al, al
jne 0x100af22b
push 0x101e2a68
mov dword [ebp - 0x70], 0xd4
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.10063887
pop ecx
pop ecx
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xb8]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x6b
call fcn.10063887
push dword [ebx + 8]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x6c
call fcn.10063887
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x6d
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x94]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x4d
call fcn.1001524d
test esi, esi
je 0x100af1ab
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xb8]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x6e
call fcn.10063887
push dword [ebx + 8]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x6f
call fcn.10063887
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x70
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100e1c13
mov esi, eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x6c], esi
push eax
call fcn.10070d1d
add esp, 0x14
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x71
jb 0x100af15c
mov eax, dword [eax]
mov esi, dword [esi]
push str.GetUnauthenticatedProfile
push str._s_:_Principal_mismatch_for_Non_VDI
push eax
push dword [ebp - 0x6c]
mov ecx, dword [esi + 0x24]
call dword [0x1014488c]
call dword [esi + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x11c]
call fcn.1001524d
lea ecx, [ebp - 0x94]
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x4d
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
and dword [ebp - 0xec], 0
and dword [ebp - 0xe8], 0
pop ecx
push dword [ebx + 4]
lea ecx, [ebp - 0xfc]
call fcn.10063887
mov ebx, dword [ebp - 0xe4]
lea ecx, [ebp - 0xfc]
push ecx
mov byte [ebp - 4], 0x72
mov eax, dword [ebx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x1014488c]
mov ecx, ebx
call esi
mov eax, dword [ebp - 0xe8]
mov byte [ebp - 4], 0x4d
cmp eax, 0x10
jb 0x100af212
inc eax
push eax
push dword [ebp - 0xfc]
call fcn.10063887
pop ecx
pop ecx
push 0x1014a0f1
lea ecx, [ebp - 0x94]
call fcn.10063887
mov byte [ebp - 4], 0x73
jmp 0x100aed87
sub esp, 0x18
mov ecx, edi
mov esi, esp
mov dword [ebp - 0x74], esp
call fcn.10057143
mov ecx, eax
call fcn.100404df
push eax
mov ecx, esi
call fcn.10063887
mov byte [ebp - 4], 0x74
call fcn.100e1984
mov ecx, eax
call fcn.100e2d32
mov ecx, eax
mov byte [ebp - 4], 0x4d
call fcn.100c7d29
test al, al
jne 0x100af44c
push dword [ebx + 4]
and dword [ebp - 0xec], 0
lea ecx, [ebp - 0xfc]
and dword [ebp - 0xe8], 0
call fcn.10063887
mov eax, dword [ebp - 0xe4]
lea ecx, [ebp - 0xfc]
push ecx
mov byte [ebp - 4], 0x75
mov eax, dword [eax]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x1014488c]
mov ecx, dword [ebp - 0xe4]
call esi
mov eax, dword [ebp - 0xe8]
mov byte [ebp - 4], 0x4d
cmp eax, 0x10
jb 0x100af2cc
inc eax
push eax
push dword [ebp - 0xfc]
call fcn.10063887
pop ecx
pop ecx
push 0x101e2a68
mov dword [ebp - 0x70], 0xf9
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.10063887
pop ecx
pop ecx
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xb8]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x76
call fcn.10063887
push dword [ebx + 8]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x77
call fcn.10063887
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x78
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x94]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x4d
call fcn.1001524d
test esi, esi
je 0x100af427
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xb8]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x79
call fcn.10063887
push dword [ebx + 8]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x7a
call fcn.10063887
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x7b
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100e1c13
mov ebx, eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.10070d1d
add esp, 0x14
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x7c
jb 0x100af3da
mov eax, dword [eax]
mov esi, dword [ebx]
push str.GetUnauthenticatedProfile
push str._s_:_SessionId_mismatch
push eax
mov ecx, dword [esi + 0x24]
push ebx
call dword [0x1014488c]
call dword [esi + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x11c]
call fcn.1001524d
lea ecx, [ebp - 0x94]
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x4d
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
lea ecx, [ebp - 0x94]
mov dword [esp], 0x1014a0f1
call fcn.10063887
mov byte [ebp - 4], 0x7d
jmp 0x100aed87
push ecx
push ecx
mov ecx, dword [ebp - 0xa0]
mov esi, esp
mov dword [ebp - 0x74], esp
call fcn.10056619
push eax
push esi
call fcn.1009c5d0
pop ecx
pop ecx
mov byte [ebp - 4], 0x7e
call fcn.100e1984
mov ecx, eax
call fcn.100e197f
mov ecx, eax
mov byte [ebp - 4], 0x4d
call fcn.100c7022
mov ecx, edi
call fcn.10057143
mov ecx, eax
call fcn.1004038f
test edx, edx
jl 0x100af88b
jg 0x100af4a2
test eax, eax
je 0x100af88b
push 0x1014a0f1
lea ecx, [ebp - 0x94]
call fcn.10063887
push dword [ebx + 4]
and dword [ebp - 0xec], 0
lea ecx, [ebp - 0xfc]
and dword [ebp - 0xe8], 0
mov byte [ebp - 4], 0x7f
call fcn.10063887
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xa0]
push 0
push 1
mov esi, dword [eax]
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0x80
push eax
call fcn.10034710
mov ecx, dword [ebp - 0xa0]
push eax
call fcn.10056619
mov ecx, eax
call fcn.10057143
mov ecx, eax
call fcn.100403d6
mov ecx, dword [esi + 0x10]
push edx
push eax
call dword [0x1014488c]
mov ecx, dword [ebp - 0xe4]
call dword [esi + 0x10]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0xe8]
cmp eax, 0x10
jb 0x100af546
inc eax
push eax
push dword [ebp - 0xfc]
call fcn.10063887
pop ecx
pop ecx
and dword [ebp - 0xec], 0
lea ecx, [ebp - 0x94]
mov dword [ebp - 0xe8], 0xf
mov byte [ebp - 0xfc], 0
mov byte [ebp - 4], 0x4d
call fcn.1001524d
cmp dword [ebp - 0x30], 0
je 0x100af8e7
push dword [ebp - 0x30]
call fcn.10063887
mov dword [ebp - 0x104], eax
mov dword [esp], 0x101e2a68
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.10063887
pop ecx
pop ecx
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xb8]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x81
call fcn.10063887
push dword [ebx + 8]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x82
call fcn.10063887
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x83
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x94]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x4d
call fcn.1001524d
test esi, esi
je 0x100af6e0
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xb8]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x84
call fcn.10063887
push dword [ebx + 8]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x85
call fcn.10063887
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x86
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100e1c13
mov esi, eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x6c], esi
push eax
call fcn.100b1b3c
add esp, 0x14
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x87
jb 0x100af691
mov eax, dword [eax]
mov esi, dword [esi]
push str.GetUnauthenticatedProfile
push str._s_:_Failed_to_save_ASNP
push eax
push dword [ebp - 0x6c]
mov ecx, dword [esi + 0x24]
call dword [0x1014488c]
call dword [esi + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x11c]
call fcn.1001524d
lea ecx, [ebp - 0x94]
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x4d
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
sub esp, 0x14
mov ecx, edi
mov esi, esp
mov dword [ebp - 0x74], esp
call fcn.10015997
push eax
mov ecx, esi
call fcn.10063887
sub esp, 0x18
mov byte [ebp - 4], 0x88
mov ecx, esp
push str.UNLICENSED
call fcn.10063887
mov byte [ebp - 4], 0x4d
call fcn.100e9452
add esp, 0x30
test al, al
jne 0x100af754
push 0x1014a0f1
lea ecx, [ebp - 0x94]
call fcn.10063887
push dword [ebp - 0x68]
mov byte [ebp - 4], 0x89
push 9
push ecx
mov eax, esp
mov dword [eax], edi
lea eax, [ebp - 0x94]
push eax
push dword [ebp - 0x104]
jmp 0x100aed9b
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.10063887
pop ecx
pop ecx
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xb8]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x8a
call fcn.10063887
push dword [ebx + 8]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x8b
call fcn.10063887
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x8c
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x94]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x4d
call fcn.1001524d
test esi, esi
je 0x100af87f
mov esi, 0x1014a0f1
lea ecx, [ebp - 0xb8]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x8d
call fcn.10063887
push dword [ebx + 8]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x8e
call fcn.10063887
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x8f
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100e1c13
add esp, 0xc
mov ecx, dword [eax]
push str.GetUnauthenticatedProfile
push str._s_:_Ignoring_ASNP_write_error_for_unlicensed_app
push eax
mov esi, dword [ecx + 0x14]
mov ecx, esi
call dword [0x1014488c]
call esi
add esp, 0xc
lea ecx, [ebp - 0x94]
call fcn.1001524d
lea ecx, [ebp - 0xd8]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x4d
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
jmp 0x100af8e6
push dword [ebx + 4]
and dword [ebp - 0xec], 0
lea ecx, [ebp - 0xfc]
and dword [ebp - 0xe8], 0
call fcn.10063887
mov ebx, dword [ebp - 0xe4]
lea ecx, [ebp - 0xfc]
push ecx
mov byte [ebp - 4], 0x90
mov eax, dword [ebx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x1014488c]
mov ecx, ebx
call esi
mov eax, dword [ebp - 0xe8]
mov byte [ebp - 4], 0x4d
cmp eax, 0x10
jb 0x100af8e7
inc eax
push eax
push dword [ebp - 0xfc]
call fcn.10063887
pop ecx
pop ecx
mov ecx, edi
call fcn.10057151
push dword [ebp - 0x68]
mov ecx, dword [ebp - 0xa0]
mov esi, eax
call fcn.10056619
mov ecx, eax
call fcn.10014f0c
and dword [ebp - 0x7c], 0
push dword [eax]
push ecx
mov eax, esp
mov dword [ebp - 0x74], esp
mov dword [eax], edi
mov ecx, dword [ebp - 0xa0]
mov byte [ebp - 4], 0x91
call fcn.100403fa
push eax
push esi
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x4d
push eax
lea ecx, [ebp - 0xdc]
call fcn.100a855b
mov edi, dword [ebp - 0x9c]
mov ecx, eax
xor ebx, ebx
mov eax, dword [ecx]
mov dword [ecx], ebx
lea ecx, [ebp - 0x6c]
mov dword [edi], eax
call fcn.1009acd9
jmp 0x100aeb5d
cmp eax, 0xd
ja case.0x100af959.8
jmp dword [eax*4 + 0x100afc34]
mov dword [ebp - 0x70], 0xc9
jmp 0x100af9c7
mov dword [ebp - 0x70], 0xcb
jmp 0x100af9c7
mov dword [ebp - 0x70], 0x6e
jmp 0x100af9c7
mov dword [ebp - 0x70], 0x68
jmp 0x100af9c7
mov dword [ebp - 0x70], 0x67
jmp 0x100af9c7
mov dword [ebp - 0x70], 0xca
jmp 0x100af9c7
mov dword [ebp - 0x70], 0x66
jmp 0x100af9c7
mov dword [ebp - 0x70], 0x6a
jmp 0x100af9c7
and dword [ebp - 0x70], 0
jmp 0x100af9c7
mov dword [ebp - 0x70], 0xf7
jmp 0x100af9c7
mov dword [ebp - 0x70], 0x6d
jmp 0x100af9c7
mov dword [ebp - 0x70], 0xcc
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.10063887
pop ecx
pop ecx
mov esi, 0x1014a0f1
lea ecx, [ebp - 0x164]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x42
call fcn.10063887
mov edi, dword [ebp - 0x100]
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x43
push dword [edi + 8]
call fcn.10063887
lea eax, [ebp - 0x164]
mov byte [ebp - 4], 0x44
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0xb8]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0x17c]
call fcn.1001524d
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x41
call fcn.1001524d
test esi, esi
je 0x100afb21
mov esi, 0x1014a0f1
lea ecx, [ebp - 0x164]
push esi
call fcn.10063887
push esi
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x45
call fcn.10063887
push dword [edi + 8]
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x46
call fcn.10063887
lea eax, [ebp - 0x164]
mov byte [ebp - 4], 0x47
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.100e1c13
mov edi, eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.100b19f2
add esp, 0x14
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x48
jb 0x100afad4
mov eax, dword [eax]
mov esi, dword [edi]
push str.GetUnauthenticatedProfile
push str._s_:_Failed_to_retrieve_ASNP
push eax
mov ecx, dword [esi + 0x24]
push edi
call dword [0x1014488c]
call dword [esi + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x11c]
call fcn.1001524d
lea ecx, [ebp - 0xb8]
call fcn.1001524d
lea ecx, [ebp - 0x17c]
call fcn.1001524d
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x41
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
push 0x24
call fcn.10063887
pop ecx
mov esi, eax
pop ecx
mov dword [ebp - 0x74], esi
xor eax, eax
mov byte [ebp - 4], 0x49
test esi, esi
je 0x100afb86
push 9
pop ecx
mov edi, esi
rep stosd dword es:[edi], eax
push 0x1014a0f1
lea ecx, [ebp - 0xb8]
call fcn.10063887
push dword [ebp - 0x70]
mov eax, dword [ebp - 0x14]
or ebx, 0x10000
and dword [ebp - 0x14], 0
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x4a
push 9
mov dword [ebp - 0x78], ebx
mov dword [ecx], eax
lea eax, [ebp - 0xb8]
push eax
mov ecx, esi
call fcn.100a5435
mov edi, dword [ebp - 0x9c]
lea ecx, [ebp - 0x6c]
and dword [ebp - 0x6c], 0
or ebx, 0x800
mov dword [edi], eax
call fcn.1009acd9
test ebx, 0x10000
je 0x100afbb3
lea ecx, [ebp - 0xb8]
call fcn.1001524d
lea ecx, [ebp - 0x98]
call fcn.1004cf82
lea ecx, [ebp - 0x4c]
call fcn.1001524d
lea ecx, [ebp - 0x64]
call fcn.1001524d
lea ecx, [ebp - 0xbc]
call fcn.100a6222
mov esi, dword [ebp - 0x14]
test esi, esi
je 0x100afbf4
mov ecx, esi
call fcn.1001d2df
push pe_nt_image_headers32
push esi
call fcn.10063887
pop ecx
pop ecx
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x100afc08
inc eax
push eax
push dword [ebp - 0x2c]
call fcn.10063887
pop ecx
pop ecx
and dword [ebp - 0x1c], 0
cmp dword [ebp + 0xc], 0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x18], 0xf
je 0x100afc28
push dword [ebp + 0xc]
lea ecx, [ebp + 0xc]
call fcn.10063887
mov eax, edi
call fcn.10110886
ret 0xc