Function at 0x1003c5a4
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a34e4
mov eax, dword fs:[0]
push eax
mov eax, 0x138c
call fcn.100040f8
mov eax, dword [0x100b7bfc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x1380]
xor ebx, ebx
mov dword [ebp - 0x1390], eax
xor eax, eax
mov dword [ebp - 0x1394], ebx
mov edi, ebx
mov dword [ebp - 0x138c], 0x400
mov byte [ebp - 0x1388], bl
mov dword [ebp - 0x1384], ebx
mov dword [ebp - 0x1380], ebx
mov word [ebp - 0x137c], ax
mov dword [ebp - 4], ebx
test esi, esi
je 0x1003c66b
mov edi, dword [esi]
lea eax, [ebp - 0x1394]
push eax
mov ecx, esi
call fcn.1003022c
lea eax, [ebp - 0x1398]
mov ecx, esi
push eax
call fcn.10036d08
mov eax, dword [eax]
mov dword [ebp - 0x1394], eax
push eax
lea ecx, [ebp - 0x1390]
mov byte [ebp - 4], 1
call fcn.1003afbd
lea ecx, [ebp - 0x1394]
mov byte [ebp - 4], 2
call fcn.10006c2b
push ebx
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.10039ecc
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x1003c9bc
push 0x2d53
lea ecx, [ebp - 0x770]
call fcn.10029ccd
lea eax, [ebp - 0x650]
mov dword [ebp - 0x65c], 0x100
mov dword [ebp - 0x660], eax
xor eax, eax
mov byte [ebp - 0x658], bl
mov dword [ebp - 0x654], ebx
mov dword [ebp - 0x650], ebx
mov word [ebp - 0x64c], ax
mov byte [ebp - 4], 4
cmp dword [ebp + 0x18], eax
je 0x1003c6d2
lea eax, [ebp - 0x660]
push eax
push dword [ebp + 0x18]
push esi
call fcn.1004279f
jmp 0x1003c74a
push esi
lea ecx, [ebp - 0x660]
call fcn.100307b0
test al, al
jne 0x1003c74a
sub esi, 0x2d6c
je 0x1003c722
sub esi, 1
je 0x1003c70b
sub esi, 1
jne 0x1003c74a
push str.OneDrive_for_Business
lea ecx, [ebp - 0x660]
call fcn.1003afbd
mov esi, str._needs_to_close_because_of_a_hardware_or_configuration_problem.
jmp 0x1003c737
push str.OneDrive_for_Business
lea ecx, [ebp - 0x660]
call fcn.1003afbd
mov esi, str._needs_to_close_because_there_isnt_enough_memory_available._Please_close_some_programs_and_restart.
jmp 0x1003c737
push str.OneDrive_for_Business
lea ecx, [ebp - 0x660]
call fcn.1003afbd
mov esi, str._needs_to_close_because_it_cant_read_required_files.
push esi
call fcn.1000936b
push eax
push esi
lea ecx, [ebp - 0x660]
call fcn.1002c96d
push dword [ebp - 0x660]
lea ecx, [ebp - 0xb80]
call fcn.1000f24d
lea eax, [ebp - 0x440]
mov byte [ebp - 0x448], bl
mov dword [ebp - 0x450], eax
mov ecx, 0x80
xor eax, eax
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x444], ebx
mov dword [ebp - 0x440], ebx
mov word [ebp - 0x43c], ax
lea eax, [ebp - 0x330]
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x340], eax
xor eax, eax
mov byte [ebp - 0x338], bl
mov dword [ebp - 0x334], ebx
mov dword [ebp - 0x330], ebx
mov word [ebp - 0x32c], ax
push 0x2d6b
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 7
call fcn.100307b0
test al, al
jne 0x1003c7e2
push str.Error_Description:__s
lea ecx, [ebp - 0x340]
call fcn.1003afbd
push dword [ebp - 0x1390]
lea eax, [ebp - 0x450]
push dword [ebp - 0x340]
push eax
call fcn.10031001
add esp, 0xc
mov esi, str._r_n_r_n
push esi
call fcn.1000936b
push eax
push esi
lea ecx, [ebp - 0xb80]
call fcn.1002c96d
push dword [ebp - 0x450]
lea ecx, [ebp - 0xb80]
call fcn.1002c94f
lea eax, [ebp - 0x220]
mov byte [ebp - 0x228], bl
mov dword [ebp - 0x230], eax
mov esi, 0x80
xor eax, eax
mov dword [ebp - 0x22c], esi
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov word [ebp - 0x21c], ax
push edi
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 8
push str.HRESULT:_0x_08x
push eax
call fcn.10031001
add esp, 0xc
mov ebx, 0x100c59e0
push ebx
call fcn.1000936b
push eax
push ebx
lea ecx, [ebp - 0xb80]
call fcn.1002c96d
push dword [ebp - 0x230]
lea ecx, [ebp - 0xb80]
call fcn.1002c94f
lea eax, [ebp - 0x110]
mov dword [ebp - 0x11c], esi
xor ecx, ecx
mov dword [ebp - 0x120], eax
xor eax, eax
mov byte [ebp - 0x118], cl
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x110], ecx
mov word [ebp - 0x10c], ax
sub esp, 0x110
mov byte [ebp - 4], 9
lea eax, [ebp - 0x120]
lea esi, [ebp - 0x120]
push 0x44
pop ecx
mov edi, esp
push str.AssertTag:_0x_08x
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.10031001
add esp, 0x118
push ebx
call fcn.1000936b
push eax
push ebx
lea ecx, [ebp - 0xb80]
call fcn.1002c96d
push dword [ebp - 0x120]
lea ecx, [ebp - 0xb80]
call fcn.1002c94f
push dword [ebp - 0x120]
push dword [ebp - 0x230]
push dword [ebp - 0x450]
push dword [ebp - 0x660]
push str._s___s___s___s_n
call fcn.1003dfa2
add esp, 0x14
push 0x186a02
push dword [ebp - 0xb80]
push dword [ebp - 0x770]
call fcn.100427bb
lea eax, [ebp - 0x120]
push eax
mov ecx, eax
call fcn.100073a8
lea eax, [ebp - 0x230]
push eax
mov ecx, eax
call fcn.100073a8
lea eax, [ebp - 0x340]
push eax
mov ecx, eax
call fcn.100073a8
lea eax, [ebp - 0x450]
push eax
mov ecx, eax
call fcn.100073a8
lea eax, [ebp - 0xb80]
push eax
mov ecx, eax
call fcn.100073a8
lea eax, [ebp - 0x660]
push eax
mov ecx, eax
call fcn.100073a8
lea eax, [ebp - 0x770]
mov byte [ebp - 4], 0
push eax
mov ecx, eax
call fcn.100073a8
cmp byte [ebp + 0x10], 0
je 0x1003c9c7
call fcn.10042901
push dword [ebp + 0x14]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
lea eax, [ebp - 0x1390]
push eax
mov ecx, eax
call fcn.100073a8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10001550
mov esp, ebp
pop ebp
ret 0x14