Function at 0x52d099
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0x2b8
mov eax, 0x633a1b
call fcn.00429e48
mov eax, ecx
mov dword [ebp - 0x274], eax
mov ecx, dword [eax + 0x34]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x24c], edi
test ecx, ecx
je 0x52d0c8
push 0
push edi
call fcn.0052d099
lea ebx, [edi + 0x128]
mov eax, dword [ebx + 4]
sub eax, dword [ebx]
cmp eax, 8
jae 0x52d131
and dword [ebp - 0x268], 0
lea ecx, [ebp - 0x268]
and dword [ebp - 0x264], 0
call fcn.0052c4df
mov dword [ebp - 0x268], eax
and dword [ebp - 4], 0
mov eax, dword [ebx + 4]
cmp dword [ebx + 8], eax
je 0x52d113
lea eax, [ebp - 0x268]
mov ecx, ebx
push eax
call fcn.005296d8
jmp 0x52d122
lea ecx, [ebp - 0x268]
push ecx
push eax
mov ecx, ebx
call fcn.005298e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x268]
call fcn.0052be98
lea esi, [edi + 0xa8]
mov ecx, 0xac
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv ecx
test eax, eax
jne 0x52d177
lea ecx, [ebp - 0x21c]
call fcn.0052b70c
lea eax, [ebp - 0x21c]
mov dword [ebp - 4], 1
push eax
mov ecx, esi
call fcn.0052b14f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x21c]
call fcn.0052bf7e
lea esi, [edi + 0x90]
mov ecx, 0xd8
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv ecx
mov dword [ebp - 0x28c], esi
test eax, eax
jne 0x52d1c3
lea ecx, [ebp - 0x248]
call fcn.0052b9fe
lea eax, [ebp - 0x248]
mov dword [ebp - 4], 2
push eax
mov ecx, esi
call fcn.0052b1a4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x248]
call fcn.0052bfd4
lea esi, [edi + 0x9c]
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x64
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x2a8], esi
test eax, eax
jne 0x52d20d
lea ecx, [ebp - 0x9c]
call fcn.0052bbd5
lea eax, [ebp - 0x9c]
mov dword [ebp - 4], 3
push eax
mov ecx, esi
call fcn.0052b1f9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.0052c043
lea esi, [edi + 0x84]
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x60
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x260], esi
test eax, eax
jne 0x52d257
lea ecx, [ebp - 0x98]
call fcn.0052bd66
lea eax, [ebp - 0x98]
mov dword [ebp - 4], 4
push eax
mov ecx, esi
call fcn.0052b270
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98]
call fcn.0052c082
lea esi, [edi + 0xd8]
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x48
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x264], esi
test eax, eax
jne 0x52d29b
lea ecx, [ebp - 0x80]
call fcn.0052bafe
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 5
push eax
mov ecx, esi
call fcn.0052b1d0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80]
call fcn.0052c028
push 0x48
pop ecx
lea esi, [edi + 0xc0]
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv ecx
mov dword [ebp - 0x294], esi
test eax, eax
jne 0x52d2d9
lea ecx, [ebp - 0x80]
call fcn.0052bafe
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 6
push eax
mov ecx, esi
call fcn.0052b1d0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80]
call fcn.0052c028
lea esi, [edi + 0x78]
mov eax, dword [esi + 4]
sub eax, dword [esi]
mov dword [ebp - 0x270], esi
cmp eax, 0x40
jae 0x52d312
lea ecx, [ebp - 0x78]
call fcn.0052bc98
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 7
push eax
mov ecx, esi
call fcn.0052b247
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call fcn.0052c066
lea esi, [edi + 0xe4]
mov ecx, dword [esi + 4]
mov eax, ecx
sub eax, dword [esi]
push 0x18
cdq
pop edi
idiv edi
mov dword [ebp - 0x278], esi
test eax, eax
jne 0x52d369
and dword [ebp - 0x28], eax
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], al
lea eax, [ebp - 0x38]
mov dword [ebp - 4], 8
push eax
cmp dword [esi + 8], ecx
je 0x52d355
mov ecx, esi
call fcn.005296fb
jmp 0x52d35d
push ecx
mov ecx, esi
call fcn.00529ba4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.0050b302
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x274]
mov dword [ebp - 0x2a0], eax
lea edi, [ebx + 4]
push edi
mov dword [ebp - 0x29c], edi
call fcn.0050b22e
lea ecx, [ebp - 0x170]
mov dword [ebp - 4], 9
mov dword [esp], str.AppInfo.ExperimentIds
call fcn.004227cf
lea eax, [ebp - 0x170]
mov byte [ebp - 4], 0xa
push eax
lea esi, [ebx + 0x38]
lea eax, [ebp - 0x254]
mov dword [ebp - 0x258], esi
push eax
mov ecx, esi
call fcn.0050834e
mov eax, dword [ebp - 0x254]
lea ecx, [ebp - 0x158]
push dword [eax + 0x40]
call fcn.004227cf
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0xc
call fcn.0050b302
cmp dword [ebp - 0x148], 0
je 0x52d472
mov ebx, dword [ebp - 0x24c]
lea ecx, [ebp - 0x38]
and dword [ebp - 0x28], 0
and dword [ebp - 0x24], 0
lea eax, [ebx + 0x18]
push eax
call fcn.0050a801
cmp dword [ebp - 0x28], 0
mov byte [ebp - 4], 0xd
je 0x52d44e
mov esi, dword [ebp - 0x274]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x250]
push eax
lea ecx, [esi + 0x48]
call fcn.0050b86c
mov eax, dword [ebp - 0x250]
cmp eax, dword [esi + 0x48]
je 0x52d448
add eax, 0x28
lea ecx, [ebp - 0x158]
push eax
call fcn.0046ff0c
mov esi, dword [ebp - 0x258]
mov ecx, dword [ebx + 0xa8]
lea eax, [ebp - 0x158]
push eax
call fcn.0046ff0c
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xc
call fcn.0050b302
mov ebx, dword [ebp - 0x274]
cmp dword [ebx + 0x3c], 0
je 0x52dd4e
push str.Session.ImpressionId
lea ecx, [ebp - 0x38]
call fcn.004227cf
mov ebx, dword [esi]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x250]
mov ecx, esi
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, ebx
je 0x52d57b
lea ecx, [ebp - 0x140]
call fcn.0052be3c
mov ebx, str.Session.ImpressionId
mov byte [ebp - 4], 0xe
push ebx
lea ecx, [ebp - 0x38]
call fcn.004227cf
mov ecx, dword [ebp - 0x258]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0xf
push eax
call fcn.0050834e
mov eax, dword [ebp - 0x254]
lea ecx, [ebp - 0x60]
add eax, 0x28
push eax
call sym.OneDriveStandaloneUpdater.exe_public:_void___thiscall_Microsoft::Applications::Events::EventProperty::constructor_struct_Microsoft::Applications::Events::EventProperty__
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x11
call fcn.0050b302
mov esi, dword [ebp - 0x48]
push esi
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebp - 0x130]
call fcn.00459eea
push ebx
lea ecx, [ebp - 0xc8]
call fcn.004227cf
mov ecx, dword [ebp - 0x2a0]
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0x12
push eax
call fcn.0052ab97
mov ecx, dword [ebp - 0x254]
lea eax, [ebp - 0x140]
push eax
add ecx, 0x28
call fcn.0052c11c
lea ecx, [ebp - 0xc8]
call fcn.0050b302
lea ecx, [ebp - 0x60]
call sym.OneDriveStandaloneUpdater.exe_public_virtual:_void___thiscall_Microsoft::Applications::Events::EventProperty::destructor_void_
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0xc
call fcn.0052c0a5
push str.AppInfo.ETag
lea ecx, [ebp - 0x38]
call fcn.004227cf
mov eax, dword [ebp - 0x258]
lea ecx, [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x250]
push ecx
mov ebx, dword [eax]
mov ecx, eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, ebx
je 0x52d687
lea ecx, [ebp - 0x140]
call fcn.0052be3c
push str.AppInfo.ETag
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
call fcn.004227cf
mov ebx, dword [ebp - 0x258]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0x14
push eax
mov ecx, ebx
call fcn.0050834e
mov eax, dword [ebp - 0x254]
lea ecx, [ebp - 0x60]
add eax, 0x28
push eax
call sym.OneDriveStandaloneUpdater.exe_public:_void___thiscall_Microsoft::Applications::Events::EventProperty::constructor_struct_Microsoft::Applications::Events::EventProperty__
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x16
call fcn.0050b302
mov esi, dword [ebp - 0x48]
push esi
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebp - 0x130]
call fcn.00459eea
push str.AppInfo.ETag
lea ecx, [ebp - 0xc8]
call fcn.004227cf
mov ecx, dword [ebp - 0x2a0]
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0x17
push eax
call fcn.0052ab97
mov ecx, dword [ebp - 0x254]
lea eax, [ebp - 0x140]
push eax
add ecx, 0x28
call fcn.0052c11c
lea ecx, [ebp - 0xc8]
call fcn.0050b302
lea ecx, [ebp - 0x60]
call sym.OneDriveStandaloneUpdater.exe_public_virtual:_void___thiscall_Microsoft::Applications::Events::EventProperty::destructor_void_
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0xc
call fcn.0052c0a5
jmp 0x52d68d
mov ebx, dword [ebp - 0x258]
push str.AppInfo.Id
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
call fcn.0050b302
mov eax, dword [ebp - 0x250]
cmp eax, dword [ebx]
setne byte [ebp - 0x269]
je 0x52d6eb
mov ebx, dword [ebp - 0x24c]
mov esi, dword [eax + 0x40]
push esi
mov ebx, dword [ebx + 0xa8]
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebx + 0x4c]
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push str.AppInfo.Env
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52d73e
mov eax, dword [ebp - 0x24c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax + 0xa8]
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebx + 0x30]
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push str.AppInfo.Name
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52d796
mov eax, dword [ebp - 0x24c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax + 0xa8]
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebx + 0x94]
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
jmp 0x52d7ba
cmp byte [ebp - 0x269], 0
je 0x52d7ba
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0xa8]
lea eax, [ecx + 0x4c]
add ecx, 0x94
push eax
call fcn.0046ff0c
push str.AppInfo.Version
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52d80d
mov eax, dword [ebp - 0x24c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax + 0xa8]
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebx + 0x64]
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push 0x64abdc
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52d860
mov eax, dword [ebp - 0x24c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax + 0xa8]
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebx + 0x7c]
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.Id
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52d94b
push 0x67915c
lea ecx, [ebp - 0x38]
call fcn.004227cf
mov esi, dword [esi + 0x40]
push 0x18
pop eax
mov byte [ebp - 4], al
test esi, esi
je 0x52d929
push esi
call fcn.00610e70
mov dword [ebp - 0x250], eax
pop ecx
cmp eax, 2
jb 0x52d902
cmp byte [esi + 1], 0x3a
jne 0x52d902
mov cl, byte [esi]
cmp cl, 0x63
je 0x52d8e3
cmp cl, 0x75
je 0x52d8e3
cmp cl, 0x61
je 0x52d8e3
cmp cl, 0x73
je 0x52d8e3
cmp cl, 0x78
je 0x52d8e3
cmp cl, 0x69
jne 0x52d902
push 0x68d398
call fcn.00610e70
pop ecx
push eax
push 0x68d398
lea ecx, [ebp - 0x38]
call fcn.00459eea
mov eax, dword [ebp - 0x250]
cmp byte [esi], 0x7b
jne 0x52d918
cmp byte [eax + esi - 1], 0x7d
jne 0x52d918
add eax, 0xfffffffe
push eax
lea eax, [esi + 1]
push eax
jmp 0x52d921
push esi
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebp - 0x38]
call fcn.004224ae
mov ecx, dword [ebp - 0x28c]
lea eax, [ebp - 0x38]
push eax
push 0x18
pop eax
mov ecx, dword [ecx]
add ecx, eax
call fcn.0046ff0c
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xc
call fcn.0050b302
push str.DeviceInfo.OrgId
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52d99a
mov eax, dword [ebp - 0x28c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebx + 0x78]
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.Make
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52d9e9
mov ebx, dword [ebp - 0x270]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [ebx]
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebx + 0x10]
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.Model
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52da38
mov eax, dword [ebp - 0x270]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebx + 0x28]
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.Class
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52da87
mov eax, dword [ebp - 0x28c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebx + 0x60]
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push str.M365aInfo.EnrolledTenantId
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52dad5
mov ebx, dword [ebp - 0x278]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [ebx]
call fcn.00610e70
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.OsName
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52db24
mov ebx, dword [ebp - 0x2a8]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [ebx]
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebx + 0x34]
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.OsBuild
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52db73
mov eax, dword [ebp - 0x2a8]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebx + 0x4c]
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push str.UserInfo.Id
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52dbc6
mov ebx, dword [ebp - 0x260]
mov esi, dword [esi + 0x40]
push 0x18
pop eax
mov ebx, dword [ebx]
push esi
add ebx, eax
call fcn.00610e70
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push str.UserInfo.Language
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52dc15
mov eax, dword [ebp - 0x260]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebx + 0x48]
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push str.UserInfo.TimeZone
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52dc64
mov ebx, dword [ebp - 0x264]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [ebx]
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebx + 0x30]
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.NetworkCost
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52dcb7
mov ebx, dword [ebp - 0x294]
mov esi, dword [esi + 0x40]
push 0x18
pop eax
mov ebx, dword [ebx]
push esi
add ebx, eax
call fcn.00610e70
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.NetworkProvider
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52dd05
mov eax, dword [ebp - 0x294]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.00610e70
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00459eea
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.NetworkType
lea ecx, [ebp - 0x38]
call fcn.004227cf
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.0050b86c
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b302
cmp esi, dword [ebx]
je 0x52dd4e
mov eax, dword [ebp - 0x294]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.00610e70
pop ecx
push eax
push esi
lea ecx, [ebx + 0x30]
call fcn.00459eea
mov esi, dword [ebp - 0x274]
cmp dword [esi + 0x54], 0
jbe 0x52de2a
and dword [ebp - 0x288], 0
xor ebx, ebx
and dword [ebp - 0x280], ebx
mov dword [ebp - 0x284], ebx
mov esi, dword [esi + 0x50]
mov byte [ebp - 4], 0x19
mov eax, dword [esi]
mov dword [ebp - 0x260], eax
cmp eax, esi
je 0x52dde3
mov edi, dword [ebp - 0x280]
add eax, 0x14
push eax
cmp edi, ebx
je 0x52ddb0
and dword [ebx + 0x10], 0
mov ecx, ebx
and dword [ebx + 0x14], 0
call fcn.0050a801
push 0x18
pop eax
add ebx, eax
mov dword [ebp - 0x284], ebx
jmp 0x52ddc8
push ebx
lea ecx, [ebp - 0x288]
call fcn.00529ba4
mov ebx, dword [ebp - 0x284]
mov edi, dword [ebp - 0x280]
lea ecx, [ebp - 0x260]
call fcn.005092fb
mov eax, dword [ebp - 0x260]
cmp eax, esi
jne 0x52dd8c
mov edi, dword [ebp - 0x29c]
lea ecx, [ebp - 0x78]
call fcn.0052bc98
lea eax, [ebp - 0x288]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x74]
call fcn.0052b2c2
mov ecx, dword [ebp - 0x270]
lea eax, [ebp - 0x78]
push eax
call fcn.0052b247
lea ecx, [ebp - 0x78]
call fcn.0052c066
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0xc
call fcn.00511b00
mov esi, dword [ebp - 0x274]
cmp byte [ebp + 0xc], 0
jne 0x52e289
mov esi, dword [esi + 0x40]
mov eax, dword [esi]
mov dword [ebp - 0x260], eax
cmp eax, esi
je 0x52e289
lea ebx, [eax + 0x10]
mov eax, dword [ebx + 0x24]
mov dword [ebp - 0x270], ebx
test eax, eax
je 0x52df1a
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x264], eax
call fcn.0052be3c
and dword [ebp - 0x28], 0
xorps xmm0, xmm0
and dword [ebp - 0x24], 0
movups xmmword [ebp - 0x38], xmm0
lea eax, [ebp - 0x264]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x38]
call fcn.0052b222
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0052b17b
mov eax, dword [ebx + 0x18]
lea ecx, [ebp - 0x50]
push ecx
mov edi, dword [eax + 4]
mov ecx, edi
call dword [0x63a7a0]
lea ecx, [ebx + 0x18]
call edi
push eax
lea ecx, [ebp - 0x130]
call fcn.00458bad
lea ecx, [ebp - 0x50]
call fcn.0050b302
push ebx
lea eax, [ebp - 0x27c]
push eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0x128]
call fcn.0052aa55
mov ecx, dword [ebp - 0x27c]
lea eax, [ebp - 0x140]
push eax
add ecx, 0x28
call fcn.0052c11c
lea ecx, [ebp - 0x2c]
call fcn.00518e48
lea ecx, [ebp - 0x38]
call fcn.00518e48
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0xc
call fcn.0052c0a5
jmp 0x52e26a
xor ecx, ecx
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x2c0], ecx
mov dword [ebp - 0x2bc], ecx
xor eax, eax
mov byte [ebp - 4], 0x1d
lea edi, [ebp - 0x20]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebx + 0x20]
sub eax, ecx
je 0x52e1e3
sub eax, 1
je 0x52e197
sub eax, 1
je 0x52e14d
sub eax, 1
je 0x52e101
sub eax, 1
je 0x52e09e
sub eax, 1
je 0x52dfe7
lea ecx, [ebp - 0x1e8]
call fcn.0052be3c
mov eax, dword [ebx + 0x18]
lea ecx, [ebp - 0x50]
push ecx
mov byte [ebp - 4], 0x24
mov edi, dword [eax + 4]
mov ecx, edi
call dword [0x63a7a0]
lea ecx, [ebx + 0x18]
call edi
push eax
lea ecx, [ebp - 0x1d8]
call fcn.00458bad
lea ecx, [ebp - 0x50]
call fcn.0050b302
push dword [ebp - 0x270]
lea eax, [ebp - 0x254]
push eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0x128]
call fcn.0052aa55
mov ecx, dword [ebp - 0x254]
lea eax, [ebp - 0x1e8]
push eax
add ecx, 0x28
call fcn.0052c11c
lea ecx, [ebp - 0x1e8]
jmp 0x52e256
lea eax, [ebx + 0x30]
push eax
lea ecx, [ebp - 0xc0]
call sym.OneDriveStandaloneUpdater.exe_public:_void___thiscall_Microsoft::Applications::Events::GUID_t::constructor_struct_Microsoft::Applications::Events::GUID_t_const__
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0xc0]
call sym.OneDriveStandaloneUpdater.exe_public:_void___thiscall_Microsoft::Applications::Events::GUID_t::to_bytes_unsigned_char____16__const
push dword [ebp - 0x264]
xor eax, eax
lea ecx, [ebp - 0x2b8]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.005131cd
lea eax, [ebp - 0x2b8]
push eax
lea ecx, [ebp - 0x2c4]
call fcn.004881d3
lea ecx, [ebp - 0x2b8]
call fcn.004195f2
lea ecx, [ebp - 0x140]
call fcn.0052be3c
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x140], 8
call fcn.0052b299
push ebx
lea eax, [ebp - 0x2ac]
push eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0x128]
call fcn.0052aa55
mov ecx, dword [ebp - 0x2ac]
jmp 0x52e241
lea ecx, [ebp - 0xb0]
call fcn.0052be3c
movzx eax, byte [ebx + 0x30]
cdq
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x2a4]
push ebx
push eax
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 0x22
mov dword [ebp - 0xb0], 6
mov dword [ebp - 0x84], edx
mov ecx, dword [eax + 0x128]
call fcn.0052aa55
mov ecx, dword [ebp - 0x2a4]
lea eax, [ebp - 0xb0]
add ecx, 0x28
push eax
call fcn.0052c11c
lea ecx, [ebp - 0xb0]
jmp 0x52e256
lea ecx, [ebp - 0xb0]
call fcn.0052be3c
mov eax, dword [ebx + 0x30]
mov dword [ebp - 0x88], eax
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x298]
push ebx
push eax
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 0x21
mov dword [ebp - 0xb0], 7
mov ecx, dword [eax + 0x128]
call fcn.0052aa55
mov ecx, dword [ebp - 0x298]
jmp 0x52e0e7
lea ecx, [ebp - 0x140]
call fcn.0052be3c
movsd xmm0, qword [ebx + 0x30]
lea eax, [ebp - 0x290]
push ebx
push eax
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x140], 4
movsd qword [ebp - 0x110], xmm0
mov ecx, dword [eax + 0x128]
call fcn.0052aa55
mov ecx, dword [ebp - 0x290]
jmp 0x52e241
lea ecx, [ebp - 0xb0]
call fcn.0052be3c
mov eax, dword [ebx + 0x30]
and dword [ebp - 0xb0], 0
mov dword [ebp - 0x88], eax
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x25c]
push ebx
push eax
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 0x1f
mov ecx, dword [eax + 0x128]
call fcn.0052aa55
mov ecx, dword [ebp - 0x25c]
jmp 0x52e0e7
lea ecx, [ebp - 0x140]
call fcn.0052be3c
mov eax, dword [ebx + 0x18]
lea ecx, [ebp - 0x50]
push ecx
mov byte [ebp - 4], 0x1e
mov edi, dword [eax + 4]
mov ecx, edi
call dword [0x63a7a0]
lea ecx, [ebx + 0x18]
call edi
push eax
lea ecx, [ebp - 0x130]
call fcn.00458bad
lea ecx, [ebp - 0x50]
call fcn.0050b302
push dword [ebp - 0x270]
lea eax, [ebp - 0x284]
push eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0x128]
call fcn.0052aa55
mov ecx, dword [ebp - 0x284]
lea eax, [ebp - 0x140]
add ecx, 0x28
push eax
call fcn.0052c11c
lea ecx, [ebp - 0x140]
call fcn.0052c0a5
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0xc
call fcn.004195f2
lea ecx, [ebp - 0x260]
call fcn.005092fb
mov eax, dword [ebp - 0x260]
cmp eax, esi
jne 0x52de47
mov edi, dword [ebp - 0x29c]
cmp dword [0x6cf42c], 4
jl 0x52e2b4
mov eax, dword [ebp - 0x274]
push eax
push dword [ebp - 0x24c]
push str.Record_p_decorated_with_SemanticContext_p
call fcn.00512593
push eax
push 4
call fcn.0050fc6e
add esp, 0x14
lea ecx, [ebp - 0x158]
call fcn.0050b302
push edi
mov dword [ebp - 4], 0x25
call fcn.0050b24d
pop ecx
call fcn.00429df7
ret 8