Function at 0x10009c2c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x7bc
mov eax, 0x1013cff2
call fcn.100fb0fb
mov edi, ecx
mov dword [ebp - 0x7c4], edi
mov dword [ebp - 0x7c0], edi
mov dword [ebp - 0x7c8], edi
lea esi, [edi + 4]
mov dword [edi], vtable.C2R::Settings_enum_C2R::ConfigurationSettingTypes::_ConfigurationSettingTypes__enum_C2R::ConfigurationVersionSettingTypes::_ConfigurationVersionSettingTypes_.0
mov dword [ebp - 0x7bc], esi
and dword [esi], 0
and dword [esi + 4], 0
call fcn.1000918b
mov dword [esi], eax
mov dword [ebp - 4], 2
lea ebx, [edi + 0xc]
mov dword [ebp - 0x7c0], ebx
and dword [ebx], 0
and dword [ebx + 4], 0
call fcn.1000918b
mov dword [ebx], eax
mov dword [ebp - 4], 6
mov dword [edi], vtable.C2R::ConfigurationSettings.0
add edi, 0x14
mov dword [ebp - 0x7b8], edi
and dword [edi], 0
and dword [edi + 4], 0
call fcn.1000918b
mov dword [edi], eax
mov byte [ebp - 4], 9
xor edi, edi
xor eax, eax
mov dword [ebp - 0x2b8], edi
mov dword [ebp - 0x2b4], edi
lea ecx, [ebp - 0x2c8]
push str.WatcherInterval
mov dword [ebp - 0x7b4], edi
mov dword [ebp - 0x2b8], edi
mov dword [ebp - 0x2b4], 7
mov word [ebp - 0x2c8], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x7b0]
call fcn.10009bb4
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2c8]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x2d0], edi
mov dword [ebp - 0x2cc], edi
lea ecx, [ebp - 0x2e0]
push str.PipelineServerName
mov dword [ebp - 0x7b4], 1
mov dword [ebp - 0x2d0], edi
mov dword [ebp - 0x2cc], 7
mov word [ebp - 0x2e0], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x794]
call fcn.10009bb4
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2e0]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x2e8], edi
mov dword [ebp - 0x2e4], edi
lea ecx, [ebp - 0x2f8]
push str.InstallationPath
mov dword [ebp - 0x7b4], 2
mov dword [ebp - 0x2e8], edi
mov dword [ebp - 0x2e4], 7
mov word [ebp - 0x2f8], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x2f8]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x778]
call fcn.10009bb4
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2f8]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x300], edi
mov dword [ebp - 0x2fc], edi
lea ecx, [ebp - 0x310]
push str.InstallationDownloadPath
mov dword [ebp - 0x7b4], 3
mov dword [ebp - 0x300], edi
mov dword [ebp - 0x2fc], 7
mov word [ebp - 0x310], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x75c]
call fcn.10009bb4
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x310]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x2a0], edi
mov dword [ebp - 0x29c], edi
lea ecx, [ebp - 0x2b0]
push str.ClientFolder
mov dword [ebp - 0x7b4], 4
mov dword [ebp - 0x2a0], edi
mov dword [ebp - 0x29c], 7
mov word [ebp - 0x2b0], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x740]
call fcn.10009bb4
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2b0]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x318], edi
mov dword [ebp - 0x314], edi
lea ecx, [ebp - 0x328]
push str.ClientCulture
mov dword [ebp - 0x7b4], 5
mov dword [ebp - 0x318], edi
mov dword [ebp - 0x314], 7
mov word [ebp - 0x328], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x724]
call fcn.10009bb4
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x328]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x330], edi
mov dword [ebp - 0x32c], edi
lea ecx, [ebp - 0x340]
push str.Platform
mov dword [ebp - 0x7b4], 6
mov dword [ebp - 0x330], edi
mov dword [ebp - 0x32c], 7
mov word [ebp - 0x340], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x708]
call fcn.10009bb4
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x340]
call fcn.10004aa2
push 7
pop eax
mov dword [ebp - 0x344], edi
lea ecx, [ebp - 0x358]
mov dword [ebp - 0x7b4], eax
mov dword [ebp - 0x344], eax
xor eax, eax
mov dword [ebp - 0x348], edi
push str.StreamingFinished
mov dword [ebp - 0x348], edi
mov word [ebp - 0x358], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x358]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x6ec]
call fcn.10009bb4
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x358]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x360], edi
mov dword [ebp - 0x35c], edi
lea ecx, [ebp - 0x370]
push str.RSODReset
mov dword [ebp - 0x7b4], 8
mov dword [ebp - 0x360], edi
mov dword [ebp - 0x35c], 7
mov word [ebp - 0x370], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x370]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x6d0]
call fcn.10009bb4
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x370]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x378], edi
mov dword [ebp - 0x374], edi
lea ecx, [ebp - 0x388]
push str.recoverydata
mov dword [ebp - 0x7b4], 9
mov dword [ebp - 0x378], edi
mov dword [ebp - 0x374], 7
mov word [ebp - 0x388], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x6b4]
call fcn.10009bb4
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x388]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x390], edi
mov dword [ebp - 0x38c], edi
lea ecx, [ebp - 0x3a0]
push str.ProductKeys
mov dword [ebp - 0x7b4], 0xa
mov dword [ebp - 0x390], edi
mov dword [ebp - 0x38c], 7
mov word [ebp - 0x3a0], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x698]
call fcn.10009bb4
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x3a0]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x228], edi
mov dword [ebp - 0x224], edi
lea ecx, [ebp - 0x238]
push str.Activate
mov dword [ebp - 0x7b4], 0xb
mov dword [ebp - 0x228], edi
mov dword [ebp - 0x224], 7
mov word [ebp - 0x238], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x67c]
call fcn.10009bb4
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x238]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x1c8], edi
mov dword [ebp - 0x1c4], edi
lea ecx, [ebp - 0x1d8]
push str.TimerInterval
mov dword [ebp - 0x7b4], 0xc
mov dword [ebp - 0x1c8], edi
mov dword [ebp - 0x1c4], 7
mov word [ebp - 0x1d8], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x2e
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x660]
call fcn.10009bb4
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x1d8]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x1e0], edi
mov dword [ebp - 0x1dc], edi
lea ecx, [ebp - 0x1f0]
push str.InstallID
mov dword [ebp - 0x7b4], 0xd
mov dword [ebp - 0x1e0], edi
mov dword [ebp - 0x1dc], 7
mov word [ebp - 0x1f0], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x644]
call fcn.10009bb4
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1f0]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x1f8], edi
mov dword [ebp - 0x1f4], edi
lea ecx, [ebp - 0x208]
push str.Flavor
mov dword [ebp - 0x7b4], 0xe
mov dword [ebp - 0x1f8], edi
mov dword [ebp - 0x1f4], 7
mov word [ebp - 0x208], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x628]
call fcn.10009bb4
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x208]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x210], edi
mov dword [ebp - 0x20c], edi
lea ecx, [ebp - 0x220]
push str.DevInstall
mov dword [ebp - 0x7b4], 0xf
mov dword [ebp - 0x210], edi
mov dword [ebp - 0x20c], 7
mov word [ebp - 0x220], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x60c]
call fcn.10009bb4
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x220]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x288], edi
mov dword [ebp - 0x284], edi
lea ecx, [ebp - 0x298]
push str.SkipStreamFileCompression
mov dword [ebp - 0x7b4], 0x10
mov dword [ebp - 0x288], edi
mov dword [ebp - 0x284], 7
mov word [ebp - 0x298], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x5f0]
call fcn.10009bb4
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x298]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x240], edi
mov dword [ebp - 0x23c], edi
lea ecx, [ebp - 0x250]
push str.ClientVersionToReport
mov dword [ebp - 0x7b4], 0x11
mov dword [ebp - 0x240], edi
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x5d4]
call fcn.10009bb4
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x250]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x258], edi
mov dword [ebp - 0x254], edi
lea ecx, [ebp - 0x268]
push str.ClientXnoneVersion
mov dword [ebp - 0x7b4], 0x12
mov dword [ebp - 0x258], edi
mov dword [ebp - 0x254], 7
mov word [ebp - 0x268], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x40
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x5b8]
call fcn.10009bb4
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x268]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x270], edi
mov dword [ebp - 0x26c], edi
lea ecx, [ebp - 0x280]
push str.ClientXnoneHash
mov dword [ebp - 0x7b4], 0x13
mov dword [ebp - 0x270], edi
mov dword [ebp - 0x26c], 7
mov word [ebp - 0x280], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x43
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x59c]
call fcn.10009bb4
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x280]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x138], edi
mov dword [ebp - 0x134], edi
lea ecx, [ebp - 0x148]
push str.UpdateDeadlineCountdown
mov dword [ebp - 0x7b4], 0x14
mov dword [ebp - 0x138], edi
mov dword [ebp - 0x134], 7
mov word [ebp - 0x148], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x46
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x580]
call fcn.10009bb4
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x148]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xa4], edi
lea ecx, [ebp - 0xb8]
push str.ScenarioCulture
mov dword [ebp - 0x7b4], 0x15
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xa4], 7
mov word [ebp - 0xb8], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x564]
call fcn.10009bb4
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xb8]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x108], edi
mov dword [ebp - 0x104], edi
lea ecx, [ebp - 0x118]
push str.PreviousClientPath
mov dword [ebp - 0x7b4], 0x16
mov dword [ebp - 0x108], edi
mov dword [ebp - 0x104], 7
mov word [ebp - 0x118], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x548]
call fcn.10009bb4
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x118]
call fcn.10004aa2
mov dword [ebp - 0x7b4], 0x17
xor eax, eax
mov dword [ebp - 0xf0], edi
mov dword [ebp - 0xec], edi
lea ecx, [ebp - 0x100]
push str.PreviousServiceName
mov dword [ebp - 0xf0], edi
mov dword [ebp - 0xec], 7
mov word [ebp - 0x100], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x4f
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x52c]
call fcn.10009bb4
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x100]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0xd4], edi
lea ecx, [ebp - 0xe8]
push str.PreviousServiceRestoreBlocked
mov dword [ebp - 0x7b4], 0x18
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0xd4], 7
mov word [ebp - 0xe8], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x52
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x510]
call fcn.10009bb4
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0xe8]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0xbc], edi
lea ecx, [ebp - 0xd0]
push str.BackgroundTransportMethodDefault
mov dword [ebp - 0x7b4], 0x19
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0xbc], 7
mov word [ebp - 0xd0], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x55
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x4f4]
call fcn.10009bb4
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0xd0]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x150], edi
mov dword [ebp - 0x14c], edi
lea ecx, [ebp - 0x160]
push str.OfficeMgmtCOM
mov dword [ebp - 0x7b4], 0x1a
mov dword [ebp - 0x150], edi
mov dword [ebp - 0x14c], 7
mov word [ebp - 0x160], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x58
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x4d8]
call fcn.10009bb4
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x160]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x168], edi
mov dword [ebp - 0x164], edi
lea ecx, [ebp - 0x178]
push str.AllowCdnFallback
mov dword [ebp - 0x7b4], 0x1b
mov dword [ebp - 0x168], edi
mov dword [ebp - 0x164], 7
mov word [ebp - 0x178], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x4bc]
call fcn.10009bb4
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x178]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x120], edi
mov dword [ebp - 0x11c], edi
lea ecx, [ebp - 0x130]
push str.PackageLockerPath
mov dword [ebp - 0x7b4], 0x1c
mov dword [ebp - 0x120], edi
mov dword [ebp - 0x11c], 7
mov word [ebp - 0x130], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x5e
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x4a0]
call fcn.10009bb4
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x130]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x180], edi
mov dword [ebp - 0x17c], edi
lea ecx, [ebp - 0x190]
push str.OfficeHelperAddon
mov dword [ebp - 0x7b4], 0x1d
mov dword [ebp - 0x180], edi
mov dword [ebp - 0x17c], 7
mov word [ebp - 0x190], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x61
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x484]
call fcn.10009bb4
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x190]
call fcn.10004aa2
mov dword [ebp - 0x7b4], 0x1e
mov dword [ebp - 0x198], edi
xor eax, eax
mov dword [ebp - 0x194], edi
push str.OneDriveClientAddon
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 0x198], edi
mov dword [ebp - 0x194], 7
mov word [ebp - 0x1a8], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x64
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x468]
call fcn.10009bb4
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0x1a8]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], edi
lea ecx, [ebp - 0x40]
push str.OutlookShareAddon
mov dword [ebp - 0x7b4], 0x1f
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x67
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x44c]
call fcn.10009bb4
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x40]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], edi
lea ecx, [ebp - 0x58]
push str.TeamsAddon
mov dword [ebp - 0x7b4], 0x20
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x6a
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x430]
call fcn.10009bb4
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x58]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
lea ecx, [ebp - 0x28]
push str.BingAddon
mov dword [ebp - 0x7b4], 0x21
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x6d
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x414]
call fcn.10009bb4
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x28]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], edi
lea ecx, [ebp - 0x70]
push str.BlockVersion
mov dword [ebp - 0x7b4], 0x22
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.10009bb4
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x70]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x74], edi
lea ecx, [ebp - 0x88]
push str.UpdateDeadlineAllowedPostpones
mov dword [ebp - 0x7b4], 0x23
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x73
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x3dc]
call fcn.10009bb4
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x88]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x8c], edi
lea ecx, [ebp - 0xa0]
push str.OfficeWDAGInUse
mov dword [ebp - 0x7b4], 0x24
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xa0], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x76
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x3c0]
call fcn.10009bb4
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0xa0]
call fcn.10004aa2
mov byte [ebp - 4], 0x79
mov esi, dword [esi]
push dword [esi + 4]
mov ecx, dword [ebp - 0x7bc]
call fcn.100096d3
mov ecx, dword [ebp - 0x7bc]
mov eax, dword [ecx]
mov dword [eax + 4], esi
mov eax, dword [ecx]
mov dword [eax], esi
mov eax, dword [ecx]
mov dword [eax + 8], esi
mov dword [ecx + 4], edi
lea edi, [ebp - 0x7b0]
mov esi, dword [ecx]
push edi
call fcn.1000978e
mov ecx, dword [ebp - 0x7bc]
push eax
add eax, 0x10
push eax
push esi
lea eax, [ebp - 0x7b4]
push eax
call fcn.10009a3e
mov ecx, dword [ebp - 0x7bc]
lea eax, [ebp - 0x3a4]
add edi, 0x1c
cmp edi, eax
jne 0x1000abe7
mov byte [ebp - 4], 9
lea eax, [ebp - 0x7b0]
push 0x10009bed
push 0x25
push 0x1c
push eax
call fcn.100fa92b
push 7
xor ebx, ebx
lea ecx, [ebp - 0x1c0]
pop esi
xor eax, eax
mov dword [ebp - 0x1b0], ebx
mov dword [ebp - 0x1ac], ebx
push str.OSPPReady
mov dword [ebp - 0x1b0], ebx
mov dword [ebp - 0x1ac], esi
mov word [ebp - 0x1c0], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x7a
lea eax, [ebp - 0x1c0]
push eax
lea ecx, [ebp - 0x464]
mov dword [ebp - 0x468], ebx
mov dword [ebp - 0x454], ebx
mov dword [ebp - 0x450], ebx
call fcn.1005d1ee
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x1c0]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], ebx
lea ecx, [ebp - 0xa0]
push str.MediaType
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], esi
mov word [ebp - 0xa0], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x7e
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x448]
mov dword [ebp - 0x44c], 1
mov dword [ebp - 0x438], ebx
mov dword [ebp - 0x434], ebx
call fcn.1005d1ee
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0xa0]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
lea ecx, [ebp - 0x88]
push str.ExcludedApps
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], esi
mov word [ebp - 0x88], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x82
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x430], 2
mov dword [ebp - 0x41c], ebx
mov dword [ebp - 0x418], ebx
call fcn.1005d1ee
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x88]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
lea ecx, [ebp - 0x70]
push str.EmailAddress
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], esi
mov word [ebp - 0x70], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x86
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x414], 3
mov dword [ebp - 0x400], ebx
mov dword [ebp - 0x3fc], ebx
call fcn.1005d1ee
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0x70]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
lea ecx, [ebp - 0x28]
push 0x1015dfb0
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], esi
mov word [ebp - 0x28], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x8a
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x3f4]
mov dword [ebp - 0x3f8], 4
mov dword [ebp - 0x3e4], ebx
mov dword [ebp - 0x3e0], ebx
call fcn.1005d1ee
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x28]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x58]
push str.OneNoteInUse
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], esi
mov word [ebp - 0x58], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x8e
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x3d8]
mov dword [ebp - 0x3dc], 5
mov dword [ebp - 0x3c8], ebx
mov dword [ebp - 0x3c4], ebx
call fcn.1005d1ee
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0x58]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], esi
mov word [ebp - 0x40], ax
push str.DeviceBasedLicensing
call fcn.1005d1ee
mov byte [ebp - 4], 0x92
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3bc]
mov dword [ebp - 0x3c0], 6
mov dword [ebp - 0x3ac], ebx
mov dword [ebp - 0x3a8], ebx
call fcn.1005d1ee
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0x40]
call fcn.10004aa2
mov byte [ebp - 4], 0x96
mov edi, dword [ebp - 0x7b8]
mov ecx, edi
mov esi, dword [edi]
push dword [esi + 4]
call fcn.100096d3
mov eax, dword [edi]
mov dword [eax + 4], esi
mov eax, dword [edi]
mov dword [eax], esi
mov eax, dword [edi]
mov dword [eax + 8], esi
mov dword [edi + 4], ebx
lea ebx, [ebp - 0x468]
mov esi, dword [edi]
mov ecx, edi
push ebx
call fcn.1000978e
push eax
add eax, 0x10
mov ecx, edi
push eax
push esi
lea eax, [ebp - 0x7b8]
push eax
call fcn.10009a3e
add ebx, 0x1c
lea eax, [ebp - 0x3a4]
cmp ebx, eax
jne 0x1000aee9
mov byte [ebp - 4], 9
lea eax, [ebp - 0x468]
push 0x10009bed
push 7
pop ebx
push ebx
push 0x1c
push eax
call fcn.100fa92b
xor edi, edi
mov dword [ebp - 0x7b8], 1
xor eax, eax
mov dword [ebp - 0x198], edi
mov dword [ebp - 0x194], edi
lea ecx, [ebp - 0x1a8]
push str.UpdateUrl
mov dword [ebp - 0x198], edi
mov dword [ebp - 0x194], ebx
mov word [ebp - 0x1a8], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x97
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x5a0]
call fcn.10009bb4
mov byte [ebp - 4], 0x99
lea ecx, [ebp - 0x1a8]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x1b0], edi
mov dword [ebp - 0x1ac], edi
lea ecx, [ebp - 0x1c0]
push str.ProductReleaseIds
mov dword [ebp - 0x7b8], 2
mov dword [ebp - 0x1b0], edi
mov dword [ebp - 0x1ac], ebx
mov word [ebp - 0x1c0], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x9a
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x584]
call fcn.10009bb4
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0x1c0]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x8c], edi
lea ecx, [ebp - 0xa0]
push str.CDNBaseUrl
mov dword [ebp - 0x7b8], edi
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x8c], ebx
mov word [ebp - 0xa0], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0x9d
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x568]
call fcn.10009bb4
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0xa0]
call fcn.10004aa2
mov dword [ebp - 0x7b8], 3
mov dword [ebp - 0x78], edi
xor eax, eax
mov dword [ebp - 0x74], edi
push str.SharedComputerLicensing
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x74], ebx
mov word [ebp - 0x88], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xa0
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x54c]
call fcn.10009bb4
mov byte [ebp - 4], 0xa2
lea ecx, [ebp - 0x88]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], edi
lea ecx, [ebp - 0x70]
push str.UpdatesEnabled
mov dword [ebp - 0x7b8], 4
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], ebx
mov word [ebp - 0x70], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xa3
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x530]
call fcn.10009bb4
mov byte [ebp - 4], 0xa5
lea ecx, [ebp - 0x70]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
lea ecx, [ebp - 0x28]
push str.UpdatesFromAdminSource
mov dword [ebp - 0x7b8], 5
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], ebx
mov word [ebp - 0x28], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xa6
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x514]
call fcn.10009bb4
mov byte [ebp - 4], 0xa8
lea ecx, [ebp - 0x28]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], edi
lea ecx, [ebp - 0x58]
push str.UpdateToVersion
mov dword [ebp - 0x7b8], 6
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], ebx
mov word [ebp - 0x58], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xa9
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x4f8]
call fcn.10009bb4
mov byte [ebp - 4], 0xab
lea ecx, [ebp - 0x58]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], edi
lea ecx, [ebp - 0x40]
push str.UpdateDeadline
mov dword [ebp - 0x7b8], ebx
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], ebx
mov word [ebp - 0x40], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xac
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x4dc]
call fcn.10009bb4
mov byte [ebp - 4], 0xae
lea ecx, [ebp - 0x40]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x180], edi
mov dword [ebp - 0x17c], edi
lea ecx, [ebp - 0x190]
push str.VersionToReport
mov dword [ebp - 0x7b8], 8
mov dword [ebp - 0x180], edi
mov dword [ebp - 0x17c], ebx
mov word [ebp - 0x190], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xaf
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x4c0]
call fcn.10009bb4
mov byte [ebp - 4], 0xb1
lea ecx, [ebp - 0x190]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x120], edi
mov dword [ebp - 0x11c], edi
lea ecx, [ebp - 0x130]
push str.HosterIdentity
mov dword [ebp - 0x7b8], 9
mov dword [ebp - 0x120], edi
mov dword [ebp - 0x11c], ebx
mov word [ebp - 0x130], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xb2
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x4a4]
call fcn.10009bb4
mov byte [ebp - 4], 0xb4
lea ecx, [ebp - 0x130]
call fcn.10004aa2
mov dword [ebp - 0x7b8], 0xa
mov dword [ebp - 0x168], edi
mov dword [ebp - 0x164], edi
xor eax, eax
mov dword [ebp - 0x168], edi
push str.SCLCacheOverride
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x164], ebx
mov word [ebp - 0x178], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xb5
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x488]
call fcn.10009bb4
mov byte [ebp - 4], 0xb7
lea ecx, [ebp - 0x178]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x150], edi
mov dword [ebp - 0x14c], edi
lea ecx, [ebp - 0x160]
push str.SCLCacheOverrideDirectory
mov dword [ebp - 0x7b8], 0xb
mov dword [ebp - 0x150], edi
mov dword [ebp - 0x14c], ebx
mov word [ebp - 0x160], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xb8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x46c]
call fcn.10009bb4
mov byte [ebp - 4], 0xba
lea ecx, [ebp - 0x160]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0xbc], edi
lea ecx, [ebp - 0xd0]
push str.UpdateChannel
mov dword [ebp - 0x7b8], 0xc
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0xbc], ebx
mov word [ebp - 0xd0], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xbb
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x450]
call fcn.10009bb4
mov byte [ebp - 4], 0xbd
lea ecx, [ebp - 0xd0]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0xd4], edi
lea ecx, [ebp - 0xe8]
push str.UpdateChannelChanged
mov dword [ebp - 0x7b8], 0xd
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0xd4], ebx
mov word [ebp - 0xe8], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xbe
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x434]
call fcn.10009bb4
mov byte [ebp - 4], 0xc0
lea ecx, [ebp - 0xe8]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0xf0], edi
mov dword [ebp - 0xec], edi
lea ecx, [ebp - 0x100]
push 0x1015e210
mov dword [ebp - 0x7b8], 0xe
mov dword [ebp - 0xf0], edi
mov dword [ebp - 0xec], ebx
mov word [ebp - 0x100], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xc1
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x418]
call fcn.10009bb4
mov byte [ebp - 4], 0xc3
lea ecx, [ebp - 0x100]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0x108], edi
mov dword [ebp - 0x104], edi
lea ecx, [ebp - 0x118]
push str.AudienceData
mov dword [ebp - 0x7b8], 0xf
mov dword [ebp - 0x108], edi
mov dword [ebp - 0x104], ebx
mov word [ebp - 0x118], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xc4
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x3fc]
call fcn.10009bb4
mov byte [ebp - 4], 0xc6
lea ecx, [ebp - 0x118]
call fcn.10004aa2
xor eax, eax
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xa4], edi
lea ecx, [ebp - 0xb8]
push str.UpdateUrlSetByInsider
mov dword [ebp - 0x7b8], 0x10
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xa4], ebx
mov word [ebp - 0xb8], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xc7
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x3e0]
call fcn.10009bb4
mov byte [ebp - 4], 0xc9
lea ecx, [ebp - 0xb8]
call fcn.10004aa2
mov dword [ebp - 0x138], edi
mov dword [ebp - 0x7b8], 0x11
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x138], edi
xor eax, eax
mov dword [ebp - 0x134], ebx
push str.UnmanagedUpdateUrl
lea ecx, [ebp - 0x148]
mov word [ebp - 0x148], ax
call fcn.1005d1ee
mov byte [ebp - 4], 0xca
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x3c4]
call fcn.10009bb4
mov byte [ebp - 4], 0xcc
lea ecx, [ebp - 0x148]
call fcn.10004aa2
mov byte [ebp - 4], 0xcd
mov ebx, dword [ebp - 0x7c0]
mov ecx, ebx
mov esi, dword [ebx]
push dword [esi + 4]
call fcn.100096d3
mov eax, dword [ebx]
mov dword [eax + 4], esi
mov eax, dword [ebx]
mov dword [eax], esi
mov eax, dword [ebx]
mov dword [eax + 8], esi
mov dword [ebx + 4], edi
lea edi, [ebp - 0x5a0]
mov esi, dword [ebx]
mov ecx, ebx
push edi
call fcn.1000978e
push eax
add eax, 0x10
mov ecx, ebx
push eax
push esi
lea eax, [ebp - 0x7c0]
push eax
call fcn.10009a3e
add edi, 0x1c
lea eax, [ebp - 0x3a8]
cmp edi, eax
jne 0x1000b628
mov byte [ebp - 4], 9
lea eax, [ebp - 0x5a0]
push 0x10009bed
push 0x12
push 0x1c
push eax
call fcn.100fa92b
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x7c4]
call fcn.100fb0ad
ret