Function at 0x1006ebc0
Capabilities:
Get session user name
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1354
call fcn.1014d620
mov eax, dword [0x101a5034]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x1016fe04
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x114c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x11b4], eax
cmp dword [ebp - 0x114c], 0
je 0x1006ec0d
cmp dword [ebp - 0x11b4], 0xb7
jne 0x1006ec35
push str.MONITER_MUTEX_x32
push str.already_exist___s_
push 1
push 0xa9
push 0x1016fe90
push 0x1016fe74
call fcn.10142a80
add esp, 0x18
jmp 0x1006fb63
call dword [sym.imp.USER32.dll_SetProcessDPIAware]
push 3
call dword [sym.imp.libcurl.dll_curl_global_init]
add esp, 4
push 0x1016fee8
lea ecx, [ebp - 0x1080]
call fcn.1000ccc0
xor eax, eax
mov word [ebp - 0x1004], ax
push 0x7fe
push 0
lea ecx, [ebp - 0x1002]
push ecx
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x103c], 0x400
lea edx, [ebp - 0x103c]
push edx
lea eax, [ebp - 0x1004]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11d8], esp
push 0x1016fedc
call fcn.10002c60
lea ecx, [ebp - 0x1128]
push ecx
call fcn.100fa130
add esp, 0x1c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11e4], esp
push str.dataDB
call fcn.10002c60
lea edx, [ebp - 0x1110]
push edx
call fcn.100fa130
add esp, 0x1c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11ec], esp
push str.Log
call fcn.10002c60
lea eax, [ebp - 0x10e0]
push eax
call fcn.100fa130
add esp, 0x1c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11f4], esp
push 0x1016ff4c
call fcn.10002c60
lea ecx, [ebp - 0x10c8]
push ecx
call fcn.100fa130
add esp, 0x1c
call fcn.1003a560
mov dword [ebp - 0x1180], eax
mov edx, dword [ebp - 0x1180]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1180]
mov edx, dword [eax]
call edx
call fcn.1006dce0
mov dword [ebp - 0x1188], eax
mov eax, dword [ebp - 0x1188]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1188]
mov eax, dword [edx]
call eax
call fcn.10040b80
mov dword [ebp - 0x1190], eax
mov ecx, dword [ebp - 0x1190]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1190]
mov eax, dword [edx]
call eax
call fcn.100433f0
mov dword [ebp - 0x1198], eax
mov ecx, dword [ebp - 0x1198]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1198]
mov eax, dword [edx]
call eax
call fcn.1006dd60
mov dword [ebp - 0x1194], eax
mov ecx, dword [ebp - 0x1194]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1194]
mov eax, dword [edx]
call eax
call fcn.1006dde0
mov dword [ebp - 0x115c], eax
mov ecx, dword [ebp - 0x115c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x115c]
mov eax, dword [edx]
call eax
call fcn.1006de60
mov dword [ebp - 0x117c], eax
mov ecx, dword [ebp - 0x117c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x117c]
mov eax, dword [edx]
call eax
call fcn.1006dee0
mov dword [ebp - 0x1164], eax
mov ecx, dword [ebp - 0x1164]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1164]
mov eax, dword [edx]
call eax
call fcn.1006df60
mov dword [ebp - 0x118c], eax
mov ecx, dword [ebp - 0x118c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x118c]
mov eax, dword [edx]
call eax
call fcn.1006dfe0
mov dword [ebp - 0x116c], eax
mov ecx, dword [ebp - 0x116c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x116c]
mov eax, dword [edx]
call eax
call fcn.1003fae0
mov dword [ebp - 0x1184], eax
mov ecx, dword [ebp - 0x1184]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1184]
mov eax, dword [edx]
call eax
call fcn.1004b060
mov dword [ebp - 0x1174], eax
mov ecx, dword [ebp - 0x1174]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1174]
mov eax, dword [edx]
call eax
call fcn.1006e060
mov dword [ebp - 0x1154], eax
mov ecx, dword [ebp - 0x1154]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1154]
mov eax, dword [edx]
call eax
call fcn.1004ccd0
mov dword [ebp - 0x1158], eax
mov ecx, dword [ebp - 0x1158]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1158]
mov eax, dword [edx]
call eax
call fcn.1006e170
mov dword [ebp - 0x1160], eax
mov ecx, dword [ebp - 0x1160]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1160]
mov eax, dword [edx]
call eax
call fcn.10020870
mov dword [ebp - 0x1168], eax
mov ecx, dword [ebp - 0x1168]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1168]
mov eax, dword [edx]
call eax
call fcn.10046c40
mov dword [ebp - 0x1170], eax
mov ecx, dword [ebp - 0x1170]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1170]
mov eax, dword [edx]
call eax
call fcn.10047630
mov dword [ebp - 0x1178], eax
mov ecx, dword [ebp - 0x1178]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1178]
mov eax, dword [edx]
call eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11fc], esp
lea edx, [ebp - 0x10e0]
push edx
call fcn.10003060
call fcn.100fa4d0
add esp, 0x18
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1204], esp
lea eax, [ebp - 0x1128]
push eax
call fcn.10003060
call fcn.100fa4d0
add esp, 0x18
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x120c], esp
lea edx, [ebp - 0x1110]
push edx
call fcn.10003060
call fcn.100fa4d0
add esp, 0x18
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1214], esp
lea eax, [ebp - 0x10c8]
push eax
call fcn.10003060
call fcn.100fa4d0
add esp, 0x18
call fcn.100255e0
mov ecx, eax
call fcn.10024b80
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x121c], esp
push str.configure.dat
call fcn.10002c60
call fcn.10033810
mov ecx, eax
call fcn.1011d620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1224], esp
push ecx
call fcn.100fa750
add esp, 4
lea ecx, [ebp - 0x1020]
call fcn.1007baa0
add esp, 0x18
lea edx, [ebp - 0x1098]
push edx
call fcn.100fa6d0
add esp, 4
push 0
call fcn.1001b930
add esp, 4
push eax
lea eax, [ebp - 0x10b0]
push eax
call fcn.10036550
add esp, 8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1254], esp
lea edx, [ebp - 0x1020]
push edx
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x125c], esp
push str.EdgeRecord
call fcn.1000ccc0
call fcn.1006e4a0
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1264], esp
lea eax, [ebp - 0x1020]
push eax
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x126c], esp
push str.ChromeRecord
call fcn.1000ccc0
call fcn.1006e4a0
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1274], esp
lea edx, [ebp - 0x1020]
push edx
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x127c], esp
push str.IERecord
call fcn.1000ccc0
call fcn.1006e4a0
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1284], esp
lea eax, [ebp - 0x1020]
push eax
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x128c], esp
push str.OperaRecord
call fcn.1000ccc0
call fcn.1006e4a0
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1294], esp
lea edx, [ebp - 0x1020]
push edx
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1230], esp
push str.FirefoxRecord
call fcn.1000ccc0
call fcn.1006e4a0
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11c8], esp
lea eax, [ebp - 0x10b0]
push eax
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1240], esp
push str.UserOperate
call fcn.1000ccc0
call fcn.1006e4a0
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11d0], esp
lea edx, [ebp - 0x1020]
push edx
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1280], esp
push str.IEDownload
call fcn.1000ccc0
call fcn.1006e4a0
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11c0], esp
lea eax, [ebp - 0x1020]
push eax
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1248], esp
push str.EdgeDownload
call fcn.1000ccc0
call fcn.1006e4a0
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11e0], esp
lea edx, [ebp - 0x1020]
push edx
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1270], esp
push str.ChromeDownload
call fcn.1000ccc0
call fcn.1006e4a0
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11e8], esp
lea eax, [ebp - 0x1020]
push eax
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1250], esp
push str.OperaDownload
call fcn.1000ccc0
call fcn.1006e4a0
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11f0], esp
lea edx, [ebp - 0x1020]
push edx
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1290], esp
push str.FirefoxDownload
call fcn.1000ccc0
call fcn.1006e4a0
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11f8], esp
lea eax, [ebp - 0x1098]
push eax
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1258], esp
push str.ImRecord
call fcn.1000ccc0
call fcn.1006e4a0
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1200], esp
lea edx, [ebp - 0x1098]
push edx
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1278], esp
push str.EmailRecord
call fcn.1000ccc0
call fcn.1006e4a0
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1208], esp
push 0x10170044
call fcn.1000ccc0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1260], esp
push str.UserLog
call fcn.1000ccc0
call fcn.1006e4a0
add esp, 0x30
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1210], esp
lea eax, [ebp - 0x1020]
push eax
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x122c], esp
push str.CHandleChromeRecordEvent
call fcn.1000ccc0
call fcn.10033810
mov ecx, eax
call fcn.1011d740
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1218], esp
lea edx, [ebp - 0x1020]
push edx
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1234], esp
push str.CHandleEdgeRecordEvent
call fcn.1000ccc0
call fcn.10033810
mov ecx, eax
call fcn.1011d740
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1220], esp
lea eax, [ebp - 0x1020]
push eax
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x123c], esp
push str.CHandleOperaRecordEvent
call fcn.1000ccc0
call fcn.10033810
mov ecx, eax
call fcn.1011d740
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1228], esp
lea edx, [ebp - 0x1020]
push edx
call fcn.1000c9d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1244], esp
push str.CHandleFirefoxRecordEvent
call fcn.1000ccc0
call fcn.10033810
mov ecx, eax
call fcn.1011d740
mov dword [ebp - 0x11ac], 0x10026560
lea eax, [ebp - 0x11ac]
push eax
lea ecx, [ebp - 0x12ac]
call fcn.1006fe60
lea ecx, [ebp - 0x12ac]
push ecx
call fcn.10025ac0
mov ecx, eax
call fcn.1010ca20
lea ecx, [ebp - 0x12ac]
call fcn.10022180
mov dword [ebp - 0x119c], 0x10026530
lea edx, [ebp - 0x119c]
push edx
lea ecx, [ebp - 0x12f4]
call fcn.1006fed0
lea eax, [ebp - 0x12f4]
push eax
call fcn.10025ac0
mov ecx, eax
call fcn.1010ca50
lea ecx, [ebp - 0x12f4]
call fcn.10022180
mov dword [ebp - 0x11bc], 0x100435b0
lea ecx, [ebp - 0x11bc]
push ecx
lea ecx, [ebp - 0x1324]
call fcn.1006ff40
lea edx, [ebp - 0x1324]
push edx
call fcn.10025ac0
mov ecx, eax
call fcn.1010ca70
lea ecx, [ebp - 0x1324]
call fcn.10022180
push 0x27db
call fcn.10025ac0
mov ecx, eax
call fcn.10118850
call fcn.10021ad0
call fcn.10021b60
call fcn.1006e2f0
call fcn.10073a50
call fcn.1007afb0
mov ecx, eax
call fcn.1007b5b0
call fcn.10057560
mov ecx, eax
call fcn.100577f0
push 0
push 0x10058240
call fcn.1007afb0
mov ecx, eax
call fcn.10072c00
call fcn.10072b80
mov dword [ebp - 0x1150], eax
mov eax, dword [ebp - 0x1150]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1150]
mov eax, dword [edx]
call eax
call fcn.10078110
mov ecx, eax
call fcn.10078190
call fcn.10020910
mov ecx, eax
call fcn.10020990
call fcn.1005aa00
mov ecx, eax
call fcn.1005b120
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x124c], esp
push 0x101700b8
call fcn.1000ccc0
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::SetHost_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1288], esp
push str.monivisor_datas
call fcn.1000ccc0
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::SetBucketName_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1238], esp
push str.https:__oss_us_west_1.aliyuncs.com
call fcn.1000ccc0
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::SetEndpoint_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
mov byte [ebp - 0x404], 0
push 0x3ff
push 0
lea ecx, [ebp - 0x403]
push ecx
call sub.MSVCR120.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1080]
call fcn.1000c9b0
push eax
push 0x400
lea edx, [ebp - 0x404]
push edx
push 0
push 0x10170110
push 0x1017011c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov byte [ebp - 0x804], 0
push 0x3ff
push 0
lea eax, [ebp - 0x803]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1080]
call fcn.1000c9b0
push eax
push 0x400
lea ecx, [ebp - 0x804]
push ecx
push 0
push str.token
push 0x1017012c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x804]
push edx
lea eax, [ebp - 0x404]
push eax
push str.deviceId:__s__token:__s
push 1
push 0x12a
push 0x1017014c
push 0x10170174
call fcn.101426f0
add esp, 0x1c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1268], esp
lea edx, [ebp - 0x404]
push edx
call fcn.1000ccc0
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::SetDeviceId_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11c4], esp
lea eax, [ebp - 0x804]
push eax
call fcn.1000ccc0
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::SetToken_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
mov dword [ebp - 0x1008], 0
lea ecx, [ebp - 0x1008]
push ecx
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_bool___thiscall_CNetManager::GetUserConfig_int__]
mov edx, dword [ebp - 0x1008]
push edx
call fcn.10033810
mov ecx, eax
call fcn.1011ed10
call fcn.1006e7c0
mov byte [ebp - 0x1145], al
movzx eax, byte [ebp - 0x1145]
test eax, eax
jne 0x1006f6e9
push str.GetAutoRecordConfig_Error
push 3
push 0x137
push 0x101701a0
push 0x101701c8
call fcn.101426f0
add esp, 0x14
xorpd xmm0, xmm0
movlpd qword [ebp - 0x1038], xmm0
xor ecx, ecx
mov dword [ebp - 0x1030], ecx
mov dword [ebp - 0x102c], ecx
mov dword [ebp - 0x1028], ecx
mov dword [ebp - 0x1024], ecx
lea edx, [ebp - 0x1038]
push edx
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_bool___thiscall_CNetManager::GetStorageDetail_struct_StorageContext__]
mov byte [ebp - 0x1145], al
movzx eax, byte [ebp - 0x1145]
test eax, eax
jne 0x1006f753
push str.GetStorageDetail_Error
push 3
push 0x13e
push 0x101701f0
push 0x10170218
call fcn.101426f0
add esp, 0x14
mov ecx, dword [ebp - 0x1034]
push ecx
mov edx, dword [ebp - 0x1038]
push edx
push str.UserTotalStorageSize___lld
push 1
push pe_nt_image_headers32
push 0x10170244
push 0x1017026c
call fcn.101426f0
add esp, 0x1c
mov eax, dword [ebp - 0x102c]
push eax
mov ecx, dword [ebp - 0x1030]
push ecx
push str.UserUsedSize___lld
push 1
push 0x141
push 0x10170290
push 0x101702b8
call fcn.101426f0
add esp, 0x1c
mov edx, dword [ebp - 0x1034]
push edx
mov eax, dword [ebp - 0x1038]
push eax
call fcn.10026730
mov ecx, eax
call fcn.10072b30
mov ecx, dword [ebp - 0x102c]
push ecx
mov edx, dword [ebp - 0x1030]
push edx
call fcn.10026730
mov ecx, eax
call fcn.10072ae0
call fcn.1006e1f0
mov dword [ebp - 0x11b0], eax
lea eax, [ebp - 0x11b0]
push eax
push 0x10030fe8
lea ecx, [ebp - 0x1044]
push ecx
call fcn.10028960
add esp, 0xc
call fcn.1006e1f0
mov dword [ebp - 0x11a8], eax
lea edx, [ebp - 0x11a8]
push edx
push fcn.1004bac0
lea eax, [ebp - 0x104c]
push eax
call fcn.10028960
add esp, 0xc
call fcn.1006e270
mov dword [ebp - 0x11b8], eax
lea ecx, [ebp - 0x11b8]
push ecx
push 0x10030fe8
lea edx, [ebp - 0x105c]
push edx
call fcn.10028960
add esp, 0xc
call fcn.1006e1f0
mov dword [ebp - 0x11a0], eax
lea eax, [ebp - 0x11a0]
push eax
push 0x1004ba80
lea ecx, [ebp - 0x1054]
push ecx
call fcn.10028960
add esp, 0xc
call fcn.100250f0
mov dword [ebp - 0x11a4], eax
mov edx, dword [sym.imp.MSVCP120.dll_class_std::_Ph_1__std::placeholders::_1]
push edx
lea eax, [ebp - 0x11a4]
push eax
push 0x10030fec
lea ecx, [ebp - 0x1068]
push ecx
call fcn.1006ffb0
add esp, 0x10
lea edx, [ebp - 0x1044]
push edx
lea ecx, [ebp - 0x1354]
call fcn.1006fff0
lea eax, [ebp - 0x1354]
push eax
call fcn.1001dc30
mov ecx, eax
call fcn.10102c10
lea ecx, [ebp - 0x1354]
call fcn.10022180
lea ecx, [ebp - 0x104c]
push ecx
lea ecx, [ebp - 0x12dc]
call fcn.10070060
lea edx, [ebp - 0x12dc]
push edx
call fcn.1001dc30
mov ecx, eax
call fcn.10102c40
lea ecx, [ebp - 0x12dc]
call fcn.10022180
lea eax, [ebp - 0x105c]
push eax
lea ecx, [ebp - 0x133c]
call fcn.100700d0
lea ecx, [ebp - 0x133c]
push ecx
call fcn.1001dc30
mov ecx, eax
call fcn.10102c70
lea ecx, [ebp - 0x133c]
call fcn.10022180
lea edx, [ebp - 0x1054]
push edx
lea ecx, [ebp - 0x130c]
call fcn.1006fff0
lea eax, [ebp - 0x130c]
push eax
call fcn.1001dc30
mov ecx, eax
call fcn.10102ca0
lea ecx, [ebp - 0x130c]
call fcn.10022180
lea ecx, [ebp - 0x1068]
push ecx
lea ecx, [ebp - 0x12c4]
call fcn.10070140
lea edx, [ebp - 0x12c4]
push edx
call fcn.1001dc30
mov ecx, eax
call fcn.10102be0
lea ecx, [ebp - 0x12c4]
call fcn.10022180
lea eax, [ebp - 0x404]
push eax
push str.__userIdpc__s
lea ecx, [ebp - 0x10f8]
push ecx
call fcn.1007b6f0
add esp, 0xc
push 0x2527
call fcn.1001dc30
mov ecx, eax
call fcn.10102bc0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11cc], esp
push str.ws.ifonelab.net
call fcn.1000ccc0
call fcn.1001dc30
mov ecx, eax
call fcn.10102810
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11d4], esp
lea edx, [ebp - 0x10f8]
push edx
call fcn.1000c9d0
call fcn.1001dc30
mov ecx, eax
call fcn.10102b60
call fcn.1001dc30
mov ecx, eax
call fcn.10102320
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::Run_void_]
call fcn.10025070
mov ecx, eax
call fcn.10027880
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::RefreshUserToken_void_]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x11dc], esp
lea eax, [ebp - 0x404]
push eax
call fcn.1000ccc0
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::StartHeartbeat_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
push str.Dll_init_success_
push 1
push 0x166
push str..._srcMoniterHelperMonitorMain.cpp
push 0x10170324
call fcn.101426f0
add esp, 0x14
call fcn.1006e390
push 0
push 0
push 0
lea ecx, [ebp - 0x1144]
push ecx
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x1006facd
lea edx, [ebp - 0x1144]
push edx
push 0
mov eax, dword [ebp - 0x1144]
push eax
call dword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x1006facb
lea ecx, [ebp - 0x1144]
push ecx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea edx, [ebp - 0x1144]
push edx
call dword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x1006fa80
call dword [sym.imp.libcurl.dll_curl_global_cleanup]
cmp dword [ebp - 0x114c], 0
je 0x1006fb00
mov eax, dword [ebp - 0x114c]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 0x114c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x114c], 0
lea ecx, [ebp - 0x10f8]
call fcn.1000cd00
lea ecx, [ebp - 0x10b0]
call fcn.1000cd00
lea ecx, [ebp - 0x1098]
call fcn.1000cd00
lea ecx, [ebp - 0x1020]
call fcn.1000cd00
lea ecx, [ebp - 0x10c8]
call fcn.10002d10
lea ecx, [ebp - 0x10e0]
call fcn.10002d10
lea ecx, [ebp - 0x1110]
call fcn.10002d10
lea ecx, [ebp - 0x1128]
call fcn.10002d10
lea ecx, [ebp - 0x1080]
call fcn.1000cd00
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1014c66b
mov esp, ebp
pop ebp
ret