Function at 0x10052e8b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xf8
mov eax, 0x100f9c8c
call fcn.100eefb3
mov edi, ecx
mov dword [ebp - 0xd4], edi
mov esi, dword [sym.imp.VCRUNTIME140.dll_strrchr]
mov ebx, str.C:_build_aria_cpp_v1clienttelemetry_srcTelemetryStatsHelper.cpp
push 0x5c
push ebx
call esi
pop ecx
pop ecx
test eax, eax
je 0x10052ec2
push 0x5c
push ebx
call esi
pop ecx
pop ecx
inc eax
jmp 0x10052ec4
mov eax, ebx
push str.SendStatsEvent
push dword [0x1014819c]
push 0x385
push eax
push str._24s:_5d____10s____32s_SendStatsEvent:_generate_stats_events...
push 0x11
push 1
call fcn.10023da0
add esp, 0x1c
lea ecx, [ebp - 0x40]
push str.act_default_source
call fcn.1001df91
and dword [ebp - 4], 0
lea eax, [ebp - 0x40]
push eax
lea eax, [edi + 0x64]
push eax
call sym.LoggingPlatform.DLL_public:_static_class_Microsoft::Applications::Telemetry::ILogger____cdecl_Microsoft::Applications::Telemetry::LogManager::GetLogger_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__
or dword [ebp - 4], 0xffffffff
mov edi, eax
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x40]
mov dword [ebp - 0xec], edi
call fcn.100202d3
test edi, edi
je 0x1005335e
push str.act_stats
lea ecx, [ebp - 0x58]
call fcn.1001df91
lea eax, [ebp - 0x58]
mov dword [ebp - 4], 1
push eax
lea ecx, [ebp - 0xd0]
call sym.LoggingPlatform.DLL_public:_void___thiscall_Microsoft::Applications::Telemetry::EventProperties::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__
push 0
push 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 3
call fcn.100202d3
push 3
lea ecx, [ebp - 0xd0]
call sym.LoggingPlatform.DLL_public:_void___thiscall_Microsoft::Applications::Telemetry::EventProperties::SetPriority_enum_Microsoft::Applications::Telemetry::EventPriority_
and dword [ebp - 0xf4], 0
lea ecx, [ebp - 0xf4]
and dword [ebp - 0xf0], 0
call fcn.1003397b
mov dword [ebp - 0xf4], eax
xor eax, eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf8], eax
push ecx
push ecx
mov ecx, esp
mov byte [ebp - 4], 5
lea eax, [ebp - 0xd9]
mov dword [ebp - 0xd8], ecx
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.10038fb0
push dword [ebp + 8]
mov ecx, dword [ebp - 0xd4]
lea eax, [ebp - 0x100]
push eax
call fcn.100572be
push 0x1010203d
lea ecx, [ebp - 0x28]
call fcn.1001df91
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.1004f260
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 8
call fcn.100202d3
push 0x2d
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.100251f5
add esp, 0xc
mov eax, dword [ebp - 0xe4]
sub eax, dword [ebp - 0xe8]
push 0x18
cdq
pop ecx
idiv ecx
mov byte [ebp - 4], 9
cmp eax, 6
jne 0x100531d3
push 0x1010b460
lea ecx, [ebp - 0x28]
call fcn.1001df91
push 0
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov ecx, esp
push dword [ebp - 0xe8]
call fcn.10005467
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xd0]
call sym.LoggingPlatform.DLL_public:_void___thiscall_Microsoft::Applications::Telemetry::EventProperties::SetProperty_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____enum_Microsoft::Applications::Telemetry::PiiKind_
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100202d3
push 0x1010b464
lea ecx, [ebp - 0x28]
call fcn.1001df91
mov eax, dword [ebp - 0xe8]
push 0
sub esp, 0x18
mov byte [ebp - 4], 0xb
add eax, 0x18
mov ecx, esp
push eax
call fcn.10005467
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xd0]
call sym.LoggingPlatform.DLL_public:_void___thiscall_Microsoft::Applications::Telemetry::EventProperties::SetProperty_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____enum_Microsoft::Applications::Telemetry::PiiKind_
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100202d3
push 0x1010b468
lea ecx, [ebp - 0x28]
call fcn.1001df91
mov eax, dword [ebp - 0xe8]
push 0
sub esp, 0x18
mov byte [ebp - 4], 0xc
add eax, 0x30
mov ecx, esp
push eax
call fcn.10005467
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xd0]
call sym.LoggingPlatform.DLL_public:_void___thiscall_Microsoft::Applications::Telemetry::EventProperties::SetProperty_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____enum_Microsoft::Applications::Telemetry::PiiKind_
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100202d3
push 0x1010b46c
lea ecx, [ebp - 0x28]
call fcn.1001df91
mov eax, dword [ebp - 0xe8]
push 0
sub esp, 0x18
mov byte [ebp - 4], 0xd
add eax, 0x48
mov ecx, esp
push eax
call fcn.10005467
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xd0]
call sym.LoggingPlatform.DLL_public:_void___thiscall_Microsoft::Applications::Telemetry::EventProperties::SetProperty_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____enum_Microsoft::Applications::Telemetry::PiiKind_
push 0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x28]
push 1
call fcn.100202d3
push 0x1010b470
lea ecx, [ebp - 0x28]
call fcn.1001df91
mov eax, dword [ebp - 0xe8]
push 0
sub esp, 0x18
mov byte [ebp - 4], 0xe
add eax, 0x60
mov ecx, esp
push eax
call fcn.10005467
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xd0]
call sym.LoggingPlatform.DLL_public:_void___thiscall_Microsoft::Applications::Telemetry::EventProperties::SetProperty_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____enum_Microsoft::Applications::Telemetry::PiiKind_
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100202d3
push 0x1010b474
lea ecx, [ebp - 0x28]
call fcn.1001df91
mov eax, dword [ebp - 0xe8]
push 0
sub esp, 0x18
mov byte [ebp - 4], 0xf
add eax, 0x78
mov ecx, esp
push eax
call fcn.10005467
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xd0]
call sym.LoggingPlatform.DLL_public:_void___thiscall_Microsoft::Applications::Telemetry::EventProperties::SetProperty_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____enum_Microsoft::Applications::Telemetry::PiiKind_
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.100202d3
mov eax, dword [ebp - 0xfc]
mov ecx, 0xa0
sub eax, dword [ebp - 0x100]
cdq
idiv ecx
test eax, eax
je 0x100532dd
push 0
lea ecx, [ebp - 0x100]
call fcn.100575a3
mov edi, dword [eax + 0x58]
mov eax, dword [edi]
mov dword [ebp - 0xd4], eax
cmp eax, edi
je 0x100532d7
add eax, 0x10
mov dword [ebp - 0xd8], eax
lea ebx, [eax + 0x18]
cmp dword [ebx + 0x14], 0x10
jb 0x10053225
mov esi, dword [ebx]
jmp 0x10053227
mov esi, ebx
cmp dword [ebx + 0x14], 0x10
jb 0x10053231
mov ecx, dword [ebx]
jmp 0x10053233
mov ecx, ebx
mov eax, dword [ebx + 0x10]
add eax, ecx
cmp esi, eax
je 0x1005324e
movsx eax, byte [esi]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isdigit]
pop ecx
test eax, eax
je 0x1005324e
inc esi
jmp 0x10053227
xor edx, edx
cmp dword [ebx + 0x10], edx
je 0x10053296
cmp dword [ebx + 0x14], 0x10
jb 0x1005325f
mov ecx, dword [ebx]
jmp 0x10053261
mov ecx, ebx
mov eax, dword [ebx + 0x10]
add eax, ecx
cmp esi, eax
jne 0x10053296
cmp dword [ebx + 0x14], 0x10
jb 0x10053272
mov ebx, dword [ebx]
push 0xa
push edx
push ebx
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoll]
add esp, 0xc
lea ecx, [ebp - 0xd0]
push 0
push edx
push eax
push dword [ebp - 0xd8]
call sym.LoggingPlatform.DLL_public:_void___thiscall_Microsoft::Applications::Telemetry::EventProperties::SetProperty_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___long_long___int64___enum_Microsoft::Applications::Telemetry::PiiKind_
jmp 0x100532b3
push edx
sub esp, 0x18
mov ecx, esp
push ebx
call fcn.10005467
push dword [ebp - 0xd8]
lea ecx, [ebp - 0xd0]
call sym.LoggingPlatform.DLL_public:_void___thiscall_Microsoft::Applications::Telemetry::EventProperties::SetProperty_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____enum_Microsoft::Applications::Telemetry::PiiKind_
lea ecx, [ebp - 0xd4]
call fcn.1001ed15
mov eax, dword [ebp - 0xd4]
cmp eax, edi
jne 0x1005320f
mov esi, dword [sym.imp.VCRUNTIME140.dll_strrchr]
mov ebx, str.C:_build_aria_cpp_v1clienttelemetry_srcTelemetryStatsHelper.cpp
mov edi, dword [ebp - 0xec]
lea ecx, [ebp - 0xe8]
call fcn.1002584c
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.100202d3
lea ecx, [ebp - 0x100]
call fcn.1004e251
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 3
call fcn.1003360b
push 0x5c
push ebx
call esi
pop ecx
pop ecx
test eax, eax
je 0x10053323
push 0x5c
push ebx
call esi
pop ecx
pop ecx
lea ebx, [eax + 1]
push str.SendStatsEvent
push dword [0x1014819c]
push 0x3be
push ebx
push str._24s:_5d____10s____32s_SendStatsEvent:_send_stats_events...
push 0x11
push 1
call fcn.10023da0
mov eax, dword [edi]
lea ecx, [ebp - 0xd0]
add esp, 0x1c
push ecx
mov ecx, edi
call dword [eax + 0x44]
lea ecx, [ebp - 0xd0]
call sym.LoggingPlatform.DLL_public_virtual:_void___thiscall_Microsoft::Applications::Telemetry::EventProperties::destructor_void_
call fcn.100eef5d
ret 4