Function at 0x1003add5
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xc8
mov eax, 0x100d16b6
call fcn.100c74ca
mov esi, ecx
mov ebx, dword [ebp + 8]
lea edi, [ebp - 0x74]
and dword [ebp - 4], 0
xor eax, eax
push 6
pop ecx
rep stosd dword es:[edi], eax
push eax
lea ecx, [ebp - 0x74]
call fcn.10054044
cmp dword [esi + 0x230], 0
mov byte [ebp - 4], 1
je 0x1003ae40
sub esp, 0x18
lea eax, [esi + 0x220]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.npdId
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 2
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.100299ab
cmp dword [esi + 0x10], 0
je 0x1003ae73
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd4], esp
push esi
call fcn.100299ab
push str.regId
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 3
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.100299ab
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x8c]
rep stosd dword es:[edi], eax
push eax
lea ecx, [ebp - 0x8c]
call fcn.10054044
sub esp, 0x18
mov byte [ebp - 4], 4
lea eax, [esi + 0x18]
mov dword [ebp - 0xd4], esp
mov ecx, esp
push eax
call fcn.100299ab
push str.imsClientId
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 5
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x30]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.imsScope
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 6
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x48]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.imsDeviceId
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 7
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x60]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.imsDeviceIdForVdi
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 8
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.100299ab
sub esp, 0x18
lea eax, [ebp - 0x8c]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.10053da9
push str.authDetails
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 9
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.100299ab
cmp dword [esi + 0x200], 0
je 0x1003b107
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x5c]
rep stosd dword es:[edi], eax
push eax
lea ecx, [ebp - 0x5c]
call fcn.10054044
mov ecx, dword [esi + 0x200]
mov byte [ebp - 4], 0xa
call fcn.100336ef
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.type
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xb
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.100299ab
mov ecx, dword [esi + 0x200]
call fcn.10008de4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.version
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xc
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.100299ab
mov ecx, dword [esi + 0x200]
call fcn.10021680
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push 0x100ed398
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xd
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.100299ab
mov ecx, dword [esi + 0x200]
call fcn.1002bfdf
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.instanceId
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xe
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.100299ab
mov ecx, dword [esi + 0x200]
call fcn.1002bfe3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x5c]
push str.response
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.100299ab
sub esp, 0x18
lea eax, [ebp - 0x5c]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.10053da9
push str.workflowResult
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x10
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.100299ab
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 4
call fcn.100543b8
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x44]
rep stosd dword es:[edi], eax
push eax
lea ecx, [ebp - 0x44]
call fcn.10054044
sub esp, 0x18
mov byte [ebp - 4], 0x11
lea eax, [esi + 0xd8]
mov dword [ebp - 0xd4], esp
mov ecx, esp
push eax
call fcn.100299ab
push str.deviceId
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x12
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0xf0]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.deviceName
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x13
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x198]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.osName
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x14
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x1c8]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.osUserId
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x15
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x1b0]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.osVersion
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x16
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x204]
mov dword [ebp - 0xd4], esp
mov ecx, esp
push eax
call fcn.100299ab
push str.embeddedBrowserVersion
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x17
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.100299ab
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd4], esp
push dword [esi + 0x1e4]
push dword [esi + 0x1e0]
call fcn.100299ab
push str.currentTimestamp
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x18
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.100299ab
movzx eax, byte [esi + 0x21c]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.isOsUserAccountInDomain
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x19
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.100299ab
movzx eax, byte [esi + 0x21d]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.enableVdiMarkerExists
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x1a
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.100299ab
movzx eax, byte [esi + 0x21e]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.isVirtualEnvironment
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x1b
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x1e8]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.currentDate
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x1c
call fcn.100299ab
mov byte [ebp - 4], 0x11
mov ecx, eax
call fcn.100299ab
sub esp, 0x18
lea eax, [ebp - 0x44]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.10053da9
push str.deviceDetails
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x1d
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.100299ab
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
push eax
lea ecx, [ebp - 0x2c]
call fcn.10054044
sub esp, 0x18
mov byte [ebp - 4], 0x1e
lea eax, [esi + 0x78]
mov dword [ebp - 0xd4], esp
mov ecx, esp
push eax
call fcn.100299ab
push str.nglAppId
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1f
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x90]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.nglAppVersion
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x20
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x108]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.nglLibRuntimeMode
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x21
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x120]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.nglLibVersion
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x22
call fcn.100299ab
mov byte [ebp - 4], 0x1e
mov ecx, eax
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x138]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.locale
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x23
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x150]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.appNameForLocale
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x24
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x168]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.appVersionForLocale
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x25
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x180]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.nglAppLaunchState
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x26
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0xc0]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.currentAsnpId
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x27
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0xa8]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x2c]
push str.nglAppProfileScope
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.100299ab
sub esp, 0x18
lea eax, [esi + 0x238]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.100299ab
push str.eTag
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x29
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.100299ab
sub esp, 0x18
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.10053da9
push str.appDetails
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x2a
call fcn.100299ab
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.100299ab
push 8
pop ecx
xor eax, eax
lea edi, [ebp - 0xac]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0xac]
call fcn.10053d6e
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.100599cd
add esp, 0xc
mov ecx, ebx
push eax
call fcn.100299ab
lea ecx, [ebp - 0x5c]
call fcn.100090b6
lea ecx, [ebp - 0xac]
call fcn.1005439f
lea ecx, [ebp - 0x2c]
call fcn.100543b8
lea ecx, [ebp - 0x44]
call fcn.100543b8
lea ecx, [ebp - 0x8c]
call fcn.100543b8
lea ecx, [ebp - 0x74]
call fcn.100543b8
mov al, 1
jmp 0x1003b684
call fcn.100c7417
ret 4