Function at 0x140002c2c
Capabilities:
Accept command line arguments

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x8d8]
sub rsp, 0x9a0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov rax, qword [0x1400d7280]
xor rax, rsp
mov qword [rbp + 0x870], rax
mov qword [rbp - 0x78], r8
mov qword [rbp - 0x50], rcx
xor ebx, ebx
mov dword [rbp + 0x31c], ebx
mov r14d, ebx
mov qword [rbp + 0x370], rbx
mov r13d, ebx
mov byte [rbp - 0x7d], bl
mov byte [rbp - 0x79], bl
mov ecx, 0x270f
mov word [rbp + 0x318], cx
mov byte [rbp - 0x7f], bl
mov byte [rbp - 0x7b], bl
mov byte [rbp + 0x310], bl
mov byte [rbp - 0x7e], bl
mov r12b, bl
mov byte [rbp - 0x7a], bl
mov byte [rbp - 0x7c], bl
mov r15b, bl
mov qword [rbp + 0x478], rbx
mov qword [rbp + 0x488], rbx
mov qword [rbp + 0x490], 7
mov dword [rbp + 0x314], ebx
lea rdx, [rbp + 0x314]
mov rcx, r8
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov rsi, rax
mov edi, ebx
cmp dword [rbp + 0x314], ebx
jle 0x140002e38
mov rbx, rax
lea r13d, [r14 + 1]
mov r15d, 0x270f
lea rdx, str._remotedebug
mov rcx, qword [rbx]
call fcn.14009c928
test eax, eax
jne 0x140002d18
mov byte [rbp - 0x7d], r13b
jmp 0x140002e16
lea rdx, str._wait
mov rcx, qword [rbx]
call fcn.14009c928
test eax, eax
jne 0x140002d34
mov byte [rbp - 0x79], r13b
jmp 0x140002e16
lea rdx, str._remoteport
mov rcx, qword [rbx]
call fcn.14009c928
test eax, eax
jne 0x140002d7e
lea eax, [rdi + 1]
cmp dword [rbp + 0x314], eax
jle 0x140002d71
mov rcx, qword [rbx + 8]
call fcn.14007c8b0
mov dword [rbp + 0x318], eax
dec eax
xor r14d, r14d
cmp eax, 0xfffe
jbe 0x140002e16
mov word [rbp + 0x318], r15w
jmp 0x140002e16
lea rdx, str._permachineupdate
mov rcx, qword [rbx]
call fcn.14009c928
test eax, eax
jne 0x140002d97
mov byte [rbp - 0x7a], r13b
jmp 0x140002e16
lea rdx, str._configure_business
mov rcx, qword [rbx]
call fcn.14009c928
test eax, eax
jne 0x140002db0
mov byte [rbp - 0x7f], r13b
jmp 0x140002e16
mov r8b, r13b
lea rdx, str._url:
mov rcx, qword [rbx]
call fcn.14000c3f0
test al, al
je 0x140002dfd
lea r8, [0x1400c1e54]
mov rdx, qword [rbx]
lea rcx, [rbp + 0x210]
call fcn.14000bde8
mov rdx, rax
lea rcx, [rbp + 0x478]
call fcn.140004f30
lea rcx, [rbp + 0x210]
call fcn.140005f80
mov byte [rbp - 0x7c], r13b
jmp 0x140002e16
lea rdx, [0x1400c1e58]
mov rcx, qword [rbx]
call fcn.14009c928
movzx r12d, r12b
test eax, eax
cmove r12d, r13d
add edi, r13d
add rbx, 8
cmp edi, dword [rbp + 0x314]
jl 0x140002cfc
mov r14, qword [rbp + 0x370]
mov r15b, r14b
mov r13, r14
xor ebx, ebx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jns 0x140002e47
mov word [rbx], bx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 2
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
or edx, 0xffffffff
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x140002e7d
mov word [rbx], bx
mov edi, 1
mov ebx, edi
jmp 0x140002e9e
cmp ebx, 2
jge 0x14000303f
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edi, 1
add ebx, edi
xor eax, eax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rax
xor r8d, r8d
lea rdx, [0x1400c24ec]
lea rcx, [rbp - 0x70]
call fcn.140005dc0
mov r8b, dil
lea rdx, [rbp - 0x70]
mov rcx, 0xffffffff80000001
call fcn.140016378
mov edi, eax
lea rcx, [rbp - 0x70]
call fcn.140005f80
cmp edi, 0x800703fa
mov eax, 0x64
je 0x140002e86
xor ecx, ecx
mov edi, ecx
lea ecx, [rax + 0xc]
call fcn.140074ab4
mov rbx, rax
xor edx, edx
lea r8d, [rdx + 0x70]
mov rcx, rax
call fcn.140077300
mov rcx, rbx
call fcn.140027440
mov rbx, rax
mov ecx, 0x18
call fcn.140074ab4
mov ecx, 1
mov dword [rax + 8], ecx
mov dword [rax + 0xc], ecx
lea rcx, vtable.std::_Ref_count_class_AccountInfoManager_.0
mov qword [rax], rcx
mov qword [rax + 0x10], rbx
mov qword [rbp + 0x380], rbx
mov qword [rbp + 0x388], rax
xor ebx, ebx
mov qword [rbp + 0x438], rbx
mov qword [rbp + 0x448], rbx
lea ecx, [rbx + 7]
mov qword [rbp + 0x450], rcx
mov qword [rbp + 0x4b8], rbx
mov qword [rbp + 0x4c8], rbx
mov qword [rbp + 0x4d0], rcx
mov qword [rbp + 0x328], rbx
mov eax, ebx
mov qword [rbp + 0x338], rbx
mov qword [rbp + 0x340], rcx
cmp byte [rbp - 0x7c], bl
je 0x140003074
xor edx, edx
lea r8d, [rbx + 0x78]
lea rcx, [rbp + 0x530]
call fcn.140077300
lea rdx, [rbp + 0x478]
lea rcx, [rbp + 0x530]
call fcn.140032fcc
lea rcx, [rbp + 0x530]
call fcn.140033ca4
mov r15b, al
lea r8, [rbp + 0x380]
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x530]
call fcn.140033ef0
mov rbx, rax
lea rax, [rbp + 0x328]
cmp rax, rbx
je 0x140003021
lea rcx, [rbp + 0x328]
call fcn.140005f80
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x328], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x338], xmm1
xor ecx, ecx
mov qword [rbx + 0x10], rcx
mov qword [rbx + 0x18], 7
mov word [rbx], cx
lea rcx, [rbp + 0x1f0]
call fcn.140005f80
xor ebx, ebx
cmp qword [rbp + 0x338], rbx
jne 0x14000304a
mov edi, 0xc02500b6
jmp 0x140003061
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x140003f9e
lea rdx, [rbp + 0x328]
lea rcx, [rbp + 0x438]
call fcn.140004f30
mov byte [rbp - 0x7e], 1
lea rcx, [rbp + 0x530]
call fcn.140033648
mov rax, qword [rbp + 0x338]
test rax, rax
jne 0x140003125
test rsi, rsi
je 0x140003125
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], rbx
lea r8d, [rax + 8]
lea rdx, str._client
lea rcx, [rbp - 0x48]
call fcn.140005dc0
lea r9, [rbp + 0x438]
lea r8, [rbp - 0x48]
mov edx, dword [rbp + 0x314]
mov rcx, rsi
call fcn.1400391ac
mov byte [rbp - 0x7e], al
lea rcx, [rbp - 0x48]
call fcn.140005f80
mov qword [rbp + 0xf8], rbx
mov qword [rbp + 0x108], rbx
mov qword [rbp + 0x110], rbx
mov r8d, 0x14
lea rdx, str._configure_business:
lea rcx, [rbp + 0xf8]
call fcn.140005dc0
lea r9, [rbp + 0x4b8]
lea r8, [rbp + 0xf8]
mov edx, dword [rbp + 0x314]
mov rcx, rsi
call fcn.1400391ac
mov bl, al
lea rcx, [rbp + 0xf8]
call fcn.140005f80
jmp 0x140003128
mov bl, byte [rbp - 0x7b]
lea rcx, [rbp + 0x430]
call fcn.140039904
xor eax, eax
cmp byte [rbp - 0x7f], al
jne 0x140003143
test bl, bl
jne 0x140003143
mov bl, al
jmp 0x140003148
mov ebx, 1
call fcn.140039914
mov dl, al
mov rax, qword [rbp + 0x388]
test rax, rax
je 0x14000315f
lock inc dword [rax + 8]
movaps xmm0, xmmword [rbp + 0x380]
movdqa xmmword [rbp + 0x120], xmm0
lea rax, [rbp + 0x310]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x328]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x438]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], r12b
mov r9b, byte [rbp - 0x7e]
mov r8b, bl
lea rcx, [rbp + 0x120]
call fcn.140019bd0
lea r8, [rbp + 0x328]
cmp qword [rbp + 0x340], 8
cmovae r8, qword [rbp + 0x328]
mov rdx, qword [rbp + 0x338]
xor r12d, r12d
cmp rdx, 8
jne 0x140003201
lea rcx, str.Personal
test rdx, rdx
je 0x1400031f8
sub r8, rcx
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140003201
mov eax, 1
add rcx, 2
sub rdx, rax
jne 0x1400031e0
mov byte [rbp - 0x7f], r12b
jmp 0x140003317
mov ebx, 1
mov byte [rbp - 0x7f], bl
lea rcx, [rbp + 0x5b0]
call fcn.140027370
mov rcx, qword [rbp + 0x380]
mov rax, qword [rcx]
lea r8, [rbp + 0x5b0]
lea rdx, [rbp + 0x328]
mov rax, qword [rax + 0x18]
call qword [str.p_r_n_]
test al, al
je 0x140003244
mov r15b, byte [rbp + 0x631]
jmp 0x140003296
cmp byte [rbp + 0x310], r12b
jne 0x140003256
call fcn.14001fa20
test al, al
je 0x140003296
mov qword [rbp + 0x498], r12
mov qword [rbp + 0x4a8], r12
mov qword [rbp + 0x4b0], 7
lea rcx, [rbp + 0x498]
call fcn.140039a78
test al, al
je 0x14000328a
call fcn.1400399ec
cmp eax, ebx
sete r15b
lea rcx, [rbp + 0x498]
call fcn.140005f80
test r15b, r15b
jne 0x1400032ed
mov qword [rbp + 0xd8], r12
mov qword [rbp + 0xe8], r12
mov qword [rbp + 0xf0], r12
mov r8d, 7
lea rdx, str._OnPrem
lea rcx, [rbp + 0xd8]
call fcn.140005dc0
movsxd rdx, dword [rbp + 0x314]
lea r8, [rbp + 0xd8]
mov rcx, rsi
call fcn.140039320
test al, al
jne 0x1400032f3
mov r15b, r12b
mov eax, 1
jmp 0x1400032fb
mov ebx, dword [rbp + 0x31c]
mov eax, 1
mov r15b, al
test al, bl
je 0x14000330b
lea rcx, [rbp + 0xd8]
call fcn.140005f80
lea rcx, [rbp + 0x5b0]
call fcn.140004004
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, 0xc02500e3
cmp byte [rbp - 0x7a], r12b
je 0x1400033e2
lea rcx, [rbp + 0x290]
call fcn.14004ff3c
mov qword [rbp + 0x2f8], r12
lea rbx, [0x1400c24ec]
mov rdx, rbx
lea rcx, [rbp + 0x2d8]
call fcn.1400051a8
mov rdx, rbx
lea rcx, [rbp + 0x298]
call fcn.1400051a8
mov rdx, rbx
lea rcx, [rbp + 0x2b8]
call fcn.1400051a8
mov qword [rbp + 0x290], 0xffffffff80000002
xor edx, edx
lea r8d, [rdx + 0x48]
lea rcx, [rbp + 0x4e0]
call fcn.140077300
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x4e0]
call fcn.140052374
lea rcx, [rbp + 0x4e0]
call fcn.140053240
lea rcx, [rbp + 0x4e0]
call fcn.140052564
lea rcx, [rbp + 0x2d8]
call fcn.140005f80
lea rcx, [rbp + 0x2b8]
call fcn.140005f80
lea rcx, [rbp + 0x298]
jmp 0x140003e90
mov rbx, qword [rbp - 0x78]
test edi, edi
js 0x140003e9e
mov rcx, rbx
call fcn.140004854
mov edi, eax
test eax, eax
js 0x140003e99
xor r13d, r13d
mov qword [rbp + 0x3d0], r13
mov qword [rbp + 0x3e0], r13
lea r12d, [r13 + 7]
mov qword [rbp + 0x3e8], r12
mov qword [rbp + 0x3f0], r13
mov qword [rbp + 0x400], r13
mov qword [rbp + 0x408], r12
mov qword [rbp + 0x390], r13
mov qword [rbp + 0x3a0], r13
mov qword [rbp + 0x3a8], r12
mov qword [rbp + 0x3b0], r13
mov qword [rbp + 0x3c0], r13
mov qword [rbp + 0x3c8], r12
mov qword [rbp + 0x348], r13
mov qword [rbp + 0x358], r13
mov qword [rbp + 0x360], r12
mov qword [rbp + 0x410], r13
mov qword [rbp + 0x420], r13
mov qword [rbp + 0x428], r13
lea r8d, [r13 + 0x12]
lea rdx, str.FileSyncClient.dll
lea rcx, [rbp + 0x410]
call fcn.140005dc0
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400de258], eax
jle 0x140003511
lea rcx, [0x1400de258]
call fcn.140074c78
cmp dword [0x1400de258], 0xffffffff
jne 0x140003511
mov qword [0x1400de260], r13
mov qword [0x1400de270], r13
mov qword [0x1400de278], r13
lea r8d, [r13 + 0x16]
lea rdx, str.FileSyncRNWin32Lib.dll
lea rcx, [0x1400de260]
call fcn.140005dc0
lea rcx, [0x1400a4360]
call fcn.140074a68
lea rcx, [0x1400de258]
call fcn.140074c18
lea rcx, [rbp + 0x348]
call fcn.140019664
movabs rsi, 0x7ffffffffffffffe
test eax, eax
jns 0x14000357c
lea rdx, str.ucrtbase.dll
lea rcx, [rbp + 0x3d0]
call fcn.1400051a8
lea rdx, [rbp + 0x410]
lea rcx, [rbp + 0x3f0]
call fcn.140004f30
lea rdx, str.LoggingPlatform.dll
lea rcx, [rbp + 0x390]
call fcn.1400051a8
lea rdx, [0x1400de260]
lea rcx, [rbp + 0x3b0]
call fcn.140004f30
jmp 0x1400038d9
lea rcx, [rbp + 0x348]
cmp qword [rbp + 0x360], 8
cmovae rcx, qword [rbp + 0x348]
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov rax, rsi
mov rcx, qword [rbp + 0x358]
sub rax, rcx
mov r14d, 1
cmp rax, r14
jb 0x140003fe6
lea r9, [rbp + 0x348]
cmp qword [rbp + 0x360], 8
cmovae r9, qword [rbp + 0x348]
mov qword [rsp + 0x30], r14
lea rax, [0x1400c24e8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0x348]
mov dl, byte [rbp - 0x80]
lea rcx, [rbp + 0x1d0]
call fcn.1400058d8
lea r8, str.ucrtbase.dll
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x230]
call fcn.140005398
mov rbx, rax
lea rax, [rbp + 0x3d0]
cmp rax, rbx
je 0x14000364e
lea rcx, [rbp + 0x3d0]
call fcn.140005f80
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x3d0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x3e0], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], r12
mov word [rbx], r13w
lea rcx, [rbp + 0x230]
call fcn.140005f80
lea rcx, [rbp + 0x1d0]
call fcn.140005f80
mov rax, rsi
mov rcx, qword [rbp + 0x358]
sub rax, rcx
cmp rax, r14
jb 0x140003fec
lea r9, [rbp + 0x348]
cmp qword [rbp + 0x360], 8
cmovae r9, qword [rbp + 0x348]
mov qword [rsp + 0x30], r14
lea rbx, [0x1400c24e8]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0x348]
mov dl, byte [rbp - 0x80]
lea rcx, [rbp + 0x1b0]
call fcn.1400058d8
lea rdx, [rbp + 0x410]
cmp qword [rbp + 0x428], 8
cmovae rdx, qword [rbp + 0x410]
mov r8, qword [rbp + 0x420]
lea rcx, [rbp + 0x1b0]
call fcn.1400052b0
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0xb8], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc8], xmm6
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], r12
mov word [rax], r13w
lea rcx, [rbp + 0x3f0]
call fcn.140005f80
movups xmmword [rbp + 0x3f0], xmm7
movups xmmword [rbp + 0x400], xmm6
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xd0], r12
mov word [rbp + 0xb8], r13w
lea rcx, [rbp + 0xb8]
call fcn.140005f80
lea rcx, [rbp + 0x1b0]
call fcn.140005f80
mov rax, rsi
mov rcx, qword [rbp + 0x358]
sub rax, rcx
cmp rax, r14
jb 0x140003ff2
lea r9, [rbp + 0x348]
cmp qword [rbp + 0x360], 8
cmovae r9, qword [rbp + 0x348]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0x348]
mov dl, byte [rbp - 0x80]
lea rcx, [rbp + 0x190]
call fcn.1400058d8
lea r8, str.LoggingPlatform.dll
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x250]
call fcn.140005398
mov rbx, rax
lea rax, [rbp + 0x390]
cmp rax, rbx
je 0x1400037fa
lea rcx, [rbp + 0x390]
call fcn.140005f80
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x390], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x3a0], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], r12
mov word [rbx], r13w
lea rcx, [rbp + 0x250]
call fcn.140005f80
lea rcx, [rbp + 0x190]
call fcn.140005f80
mov rax, rsi
mov rcx, qword [rbp + 0x358]
sub rax, rcx
cmp rax, r14
jb 0x140003ff8
lea r9, [rbp + 0x348]
cmp qword [rbp + 0x360], 8
cmovae r9, qword [rbp + 0x348]
mov qword [rsp + 0x30], r14
lea rax, [0x1400c24e8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0x348]
mov dl, byte [rbp - 0x80]
lea rcx, [rbp + 0x170]
call fcn.1400058d8
lea r8, [0x1400de260]
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x270]
call fcn.140005404
mov rbx, rax
lea rax, [rbp + 0x3b0]
cmp rax, rbx
je 0x1400038c1
lea rcx, [rbp + 0x3b0]
call fcn.140005f80
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x3b0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x3c0], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], r12
mov word [rbx], r13w
lea rcx, [rbp + 0x270]
call fcn.140005f80
lea rcx, [rbp + 0x170]
call fcn.140005f80
lea rcx, [rbp + 0x3d0]
cmp qword [rbp + 0x3e8], 8
cmovae rcx, qword [rbp + 0x3d0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
lea rcx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 8
cmovae rcx, qword [rbp + 0x3b0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
lea rcx, [rbp + 0x390]
cmp qword [rbp + 0x3a8], 8
cmovae rcx, qword [rbp + 0x390]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r14, rax
test rax, rax
je 0x140003d7d
call fcn.14001e944
test al, al
jne 0x140003d7d
lea rdx, str.InitLogging
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
mov dword [rbp + 0x31c], r13d
mov dword [rbp + 0x368], r13d
mov dword [rbp + 0x320], r13d
test rax, rax
je 0x140003d7d
mov qword [rbp + 0x98], r13
mov qword [rbp + 0xa8], r13
mov qword [rbp + 0xb0], r13
mov r8d, 0x1d
lea rdx, str.CrashesBeforeSendingTelemetry
lea rcx, [rbp + 0x98]
call fcn.140005dc0
mov rcx, rsi
mov rdx, qword [rbp + 0x338]
sub rcx, rdx
cmp rcx, 0x24
jb 0x140003ffe
lea rax, [rbp + 0x328]
cmp qword [rbp + 0x340], 8
cmovae rax, qword [rbp + 0x328]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x24
lea r9, str.SoftwareMicrosoftOneDriveAccounts
lea r8, [rbp + 0x328]
mov dl, byte [rbp - 0x80]
lea rcx, [rbp + 0x150]
call fcn.1400058d8
lea rax, [rbp + 0x31c]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rbp + 0x98]
lea rdx, [rbp + 0x150]
mov rcx, 0xffffffff80000001
call fcn.14001c01c
lea rcx, [rbp + 0x150]
call fcn.140005f80
lea rcx, [rbp + 0x98]
call fcn.140005f80
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x68], r13
mov qword [rbp + 0x70], r13
mov r8d, 0x1f
lea rdx, str.CrashLoopDelayMsToSendTelemetry
lea rcx, [rbp + 0x58]
call fcn.140005dc0
mov qword [rbp + 0x78], r13
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], r13
mov ebx, 0x1b
mov r8d, ebx
lea rdx, str.SoftwareMicrosoftOneDrive
lea rcx, [rbp + 0x78]
call fcn.140005dc0
lea rax, [rbp + 0x368]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rbp + 0x58]
lea rdx, [rbp + 0x78]
mov rcx, 0xffffffff80000001
call fcn.14001c01c
lea rcx, [rbp + 0x78]
call fcn.140005f80
lea rcx, [rbp + 0x58]
call fcn.140005f80
mov eax, dword [rbp + 0x368]
test eax, eax
lea ecx, [rbx + 0x49]
cmove eax, ecx
mov dword [rbp + 0x368], eax
mov qword [rbp + 0x18], r13
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], r13
lea r8d, [rbx + 0x15]
lea rdx, str.CrashCountLimitToDelayInitializationForTelemetry
lea rcx, [rbp + 0x18]
call fcn.140005dc0
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x50], r13
mov r8d, ebx
lea rdx, str.SoftwareMicrosoftOneDrive
lea rcx, [rbp + 0x38]
call fcn.140005dc0
lea rax, [rbp + 0x320]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x38]
mov rcx, 0xffffffff80000001
call fcn.14001c01c
lea rcx, [rbp + 0x38]
call fcn.140005f80
lea rcx, [rbp + 0x18]
call fcn.140005f80
mov eax, dword [rbp + 0x320]
lea ecx, [rbx - 0x16]
test eax, eax
cmove eax, ecx
mov dword [rbp + 0x320], eax
lea rcx, [rbp + 0x328]
call 0x140004d30
mov ebx, r13d
mov cl, byte [rbp - 0x7f]
call fcn.14001e534
test al, al
je 0x140003c19
test r15b, r15b
je 0x140003bfc
mov qword [rbp + 0x458], r13
mov qword [rbp + 0x468], r13
mov qword [rbp + 0x470], 7
lea rdx, [rbp + 0x458]
lea rcx, [rbp + 0x328]
call fcn.14001cef4
test eax, eax
js 0x140003bee
cmp qword [rbp + 0x468], r13
je 0x140003bee
lea rcx, [rbp + 0x328]
call fcn.1400188f8
test al, al
je 0x140003bee
cmp byte [rbp + 0x310], r13b
je 0x140003be1
mov ebx, 3
jmp 0x140003bee
call fcn.140023040
neg al
sbb ebx, ebx
neg ebx
inc ebx
lea rcx, [rbp + 0x458]
call fcn.140005f80
jmp 0x140003c19
cmp byte [rbp + 0x310], r13b
je 0x140003c0c
mov ebx, 3
jmp 0x140003c19
call fcn.140023040
neg al
sbb ebx, ebx
neg ebx
inc ebx
mov dword [rbp + 0x370], 3
mov qword [rbp - 8], r13
mov qword [rbp + 8], r13
mov qword [rbp + 0x10], r13
mov r8d, 0x14
lea rdx, str.OfficePrivacySetting
lea rcx, [rbp - 8]
call fcn.140005dc0
mov rcx, qword [rbp + 0x338]
sub rsi, rcx
cmp rsi, 0x25
jb 0x140003fe0
lea rax, [rbp + 0x328]
cmp qword [rbp + 0x340], 8
cmovae rax, qword [rbp + 0x328]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x25
lea r9, str.SoftwareMicrosoftOneDriveAccounts_
lea r8, [rbp + 0x328]
mov dl, byte [rbp - 0x80]
lea rcx, [rbp + 0x130]
call fcn.1400058d8
lea rax, [rbp + 0x370]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rbp - 8]
lea rdx, [rbp + 0x130]
mov rcx, 0xffffffff80000001
call fcn.14001c01c
lea rcx, [rbp + 0x130]
call fcn.140005f80
lea rcx, [rbp - 8]
call fcn.140005f80
lea rcx, [rbp + 0x328]
cmp qword [rbp + 0x340], 8
cmovae rcx, qword [rbp + 0x328]
mov esi, 1
mov byte [rsp + 0x68], sil
mov eax, dword [rbp + 0x370]
mov dword [rsp + 0x60], eax
mov qword [rsp + 0x58], rcx
mov dword [rsp + 0x50], ebx
mov byte [rsp + 0x48], sil
mov byte [rsp + 0x40], sil
mov al, byte [rbp - 0x79]
mov byte [rsp + 0x38], al
mov eax, dword [rbp + 0x318]
mov word [rsp + 0x30], ax
mov al, byte [rbp - 0x7d]
mov byte [rsp + 0x28], al
mov dword [rsp + 0x20], 0x1e
lea r9d, [rsi + 0x63]
lea r8d, [rsi + 0x64]
lea rdx, str.SyncEngine
lea rcx, str.OneDrive_Trace_Session
mov rax, r12
call qword [str.p_r_n_]
mov eax, dword [rbp + 0x31c]
test eax, eax
je 0x140003d82
xor edx, edx
div dword [rbp + 0x320]
test edx, edx
jne 0x140003d82
mov ecx, dword [rbp + 0x368]
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140003d82
mov esi, 1
lea rcx, [rbp + 0x3f0]
cmp qword [rbp + 0x408], 8
cmovae rcx, qword [rbp + 0x3f0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r13, rax
xor r12d, r12d
test rax, rax
je 0x140003e1c
call fcn.140004584
test al, al
jne 0x140003dd8
call fcn.1400047ac
test al, al
jne 0x140003dd8
call fcn.140004664
mov rdx, qword [rbp - 0x78]
mov cl, sil
call fcn.1400041b0
test eax, eax
js 0x140003dd8
mov edi, 0xc02500e4
jmp 0x140003e2d
lea rdx, str.RunClient
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140003e2d
lea rdx, [rbp + 0x328]
cmp qword [rbp + 0x340], 8
cmovae rdx, qword [rbp + 0x328]
mov r9b, byte [rbp + 0x310]
mov r8b, r15b
mov rcx, qword [rbp - 0x50]
call qword [str.p_r_n_]
mov edi, eax
jmp 0x140003e2d
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7e
mov eax, 0xc02500e3
cmove edi, eax
test r14, r14
je 0x140003e4d
lea rdx, str.UninitLogging
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140003e4d
call qword [str.p_r_n_]
lea rcx, [rbp + 0x410]
call fcn.140005f80
lea rcx, [rbp + 0x348]
call fcn.140005f80
lea rcx, [rbp + 0x3b0]
call fcn.140005f80
lea rcx, [rbp + 0x390]
call fcn.140005f80
lea rcx, [rbp + 0x3f0]
call fcn.140005f80
lea rcx, [rbp + 0x3d0]
call fcn.140005f80
mov rbx, qword [rbp - 0x78]
mov eax, 0xc02500e3
cmp edi, 0xbc3
jne 0x140003eea
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], r12
mov r8d, 0xb
lea rdx, str._background
lea rcx, [rbp - 0x28]
call fcn.140005dc0
lea r8, [rbp + 0x318]
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x328]
call fcn.140023080
lea rcx, [rbp - 0x28]
call fcn.140005f80
jmp 0x140003f06
cmp edi, eax
jne 0x140003f06
call fcn.140004584
test al, al
jne 0x140003f06
call fcn.140004664
mov rdx, rbx
xor ecx, ecx
call fcn.1400041b0
lea rax, vtable.ScriptedDeployment.0
mov qword [rbp + 0x430], rax
lea rcx, [rbp + 0x328]
call fcn.140005f80
lea rcx, [rbp + 0x4b8]
call fcn.140005f80
lea rcx, [rbp + 0x438]
call fcn.140005f80
mov rbx, qword [rbp + 0x388]
test rbx, rbx
je 0x140003f7c
or esi, 0xffffffff
mov eax, esi
lock xadd dword [rbx + 8], eax
add eax, esi
jne 0x140003f7c
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [str.p_r_n_]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
add eax, esi
jne 0x140003f7c
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [str.p_r_n_]
call qword [sym.imp.ole32.dll_CoUninitialize]
test r13, r13
je 0x140003f90
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test r14, r14
je 0x140003f9e
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rcx, [rbp + 0x478]
call fcn.140005f80
mov eax, edi
mov rcx, qword [rbp + 0x870]
xor rcx, rsp
call fcn.140074810
lea r11, [rsp + 0x9a0]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140005ff8
int3
call fcn.140005ff8
int3
call fcn.140005ff8
int3
call fcn.140005ff8
int3
call fcn.140005ff8
int3
call fcn.140005ff8
int3