Function at 0x52d2b9
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0x2b8
mov eax, 0x61b1e2
call fcn.004f0658
mov eax, ecx
mov dword [ebp - 0x274], eax
mov ecx, dword [eax + 0x34]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x24c], edi
test ecx, ecx
je 0x52d2e8
push 0
push edi
call fcn.0052d2b9
lea ebx, [edi + 0x128]
mov eax, dword [ebx + 4]
sub eax, dword [ebx]
cmp eax, 8
jae 0x52d351
and dword [ebp - 0x268], 0
lea ecx, [ebp - 0x268]
and dword [ebp - 0x264], 0
call fcn.0052c6ff
mov dword [ebp - 0x268], eax
and dword [ebp - 4], 0
mov eax, dword [ebx + 4]
cmp dword [ebx + 8], eax
je 0x52d333
lea eax, [ebp - 0x268]
mov ecx, ebx
push eax
call fcn.00529837
jmp 0x52d342
lea ecx, [ebp - 0x268]
push ecx
push eax
mov ecx, ebx
call fcn.00529a60
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x268]
call fcn.0052c0ba
lea esi, [edi + 0xa8]
mov ecx, 0xac
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv ecx
test eax, eax
jne 0x52d397
lea ecx, [ebp - 0x21c]
call fcn.0052b92e
lea eax, [ebp - 0x21c]
mov dword [ebp - 4], 1
push eax
mov ecx, esi
call fcn.0052b346
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x21c]
call fcn.0052c1a0
lea esi, [edi + 0x90]
mov ecx, 0xd8
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv ecx
mov dword [ebp - 0x28c], esi
test eax, eax
jne 0x52d3e3
lea ecx, [ebp - 0x248]
call fcn.0052bc20
lea eax, [ebp - 0x248]
mov dword [ebp - 4], 2
push eax
mov ecx, esi
call fcn.0052b39b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x248]
call fcn.0052c1f6
lea esi, [edi + 0x9c]
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x64
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x2a8], esi
test eax, eax
jne 0x52d42d
lea ecx, [ebp - 0x9c]
call fcn.0052bdf7
lea eax, [ebp - 0x9c]
mov dword [ebp - 4], 3
push eax
mov ecx, esi
call fcn.0052b3f0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.0052c265
lea esi, [edi + 0x84]
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x60
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x260], esi
test eax, eax
jne 0x52d477
lea ecx, [ebp - 0x98]
call fcn.0052bf88
lea eax, [ebp - 0x98]
mov dword [ebp - 4], 4
push eax
mov ecx, esi
call fcn.0052b467
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98]
call fcn.0052c2a4
lea esi, [edi + 0xd8]
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x48
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x264], esi
test eax, eax
jne 0x52d4bb
lea ecx, [ebp - 0x80]
call fcn.0052bd20
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 5
push eax
mov ecx, esi
call fcn.0052b3c7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80]
call fcn.0052c24a
push 0x48
pop ecx
lea esi, [edi + 0xc0]
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv ecx
mov dword [ebp - 0x294], esi
test eax, eax
jne 0x52d4f9
lea ecx, [ebp - 0x80]
call fcn.0052bd20
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 6
push eax
mov ecx, esi
call fcn.0052b3c7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80]
call fcn.0052c24a
lea esi, [edi + 0x78]
mov eax, dword [esi + 4]
sub eax, dword [esi]
mov dword [ebp - 0x270], esi
cmp eax, 0x40
jae 0x52d532
lea ecx, [ebp - 0x78]
call fcn.0052beba
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 7
push eax
mov ecx, esi
call fcn.0052b43e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call fcn.0052c288
lea esi, [edi + 0xe4]
mov ecx, dword [esi + 4]
mov eax, ecx
sub eax, dword [esi]
push 0x18
cdq
pop edi
idiv edi
mov dword [ebp - 0x278], esi
test eax, eax
jne 0x52d589
and dword [ebp - 0x28], eax
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], al
lea eax, [ebp - 0x38]
mov dword [ebp - 4], 8
push eax
cmp dword [esi + 8], ecx
je 0x52d575
mov ecx, esi
call fcn.0052985a
jmp 0x52d57d
push ecx
mov ecx, esi
call fcn.00529d30
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.0050b5ef
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x274]
mov dword [ebp - 0x2a0], eax
lea edi, [ebx + 4]
push edi
mov dword [ebp - 0x29c], edi
call fcn.0050b51b
lea ecx, [ebp - 0x170]
mov dword [ebp - 4], 9
mov dword [esp], str.AppInfo.ExperimentIds
call fcn.004182e0
lea eax, [ebp - 0x170]
mov byte [ebp - 4], 0xa
push eax
lea esi, [ebx + 0x38]
lea eax, [ebp - 0x254]
mov dword [ebp - 0x258], esi
push eax
mov ecx, esi
call fcn.0050868e
mov eax, dword [ebp - 0x254]
lea ecx, [ebp - 0x158]
push dword [eax + 0x40]
call fcn.004182e0
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0xc
call fcn.0050b5ef
cmp dword [ebp - 0x148], 0
je 0x52d692
mov ebx, dword [ebp - 0x24c]
lea ecx, [ebp - 0x38]
and dword [ebp - 0x28], 0
and dword [ebp - 0x24], 0
lea eax, [ebx + 0x18]
push eax
call fcn.0050ab41
cmp dword [ebp - 0x28], 0
mov byte [ebp - 4], 0xd
je 0x52d66e
mov esi, dword [ebp - 0x274]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x250]
push eax
lea ecx, [esi + 0x48]
call fcn.0050bb59
mov eax, dword [ebp - 0x250]
cmp eax, dword [esi + 0x48]
je 0x52d668
add eax, 0x28
lea ecx, [ebp - 0x158]
push eax
call fcn.00477501
mov esi, dword [ebp - 0x258]
mov ecx, dword [ebx + 0xa8]
lea eax, [ebp - 0x158]
push eax
call fcn.00477501
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xc
call fcn.0050b5ef
mov ebx, dword [ebp - 0x274]
cmp dword [ebx + 0x3c], 0
je 0x52df6e
push str.Session.ImpressionId
lea ecx, [ebp - 0x38]
call fcn.004182e0
mov ebx, dword [esi]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x250]
mov ecx, esi
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, ebx
je 0x52d79b
lea ecx, [ebp - 0x140]
call fcn.0052c05e
mov ebx, str.Session.ImpressionId
mov byte [ebp - 4], 0xe
push ebx
lea ecx, [ebp - 0x38]
call fcn.004182e0
mov ecx, dword [ebp - 0x258]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0xf
push eax
call fcn.0050868e
mov eax, dword [ebp - 0x254]
lea ecx, [ebp - 0x60]
add eax, 0x28
push eax
call sym.OneDriveUpdaterService.exe_public:_void___thiscall_Microsoft::Applications::Events::EventProperty::constructor_struct_Microsoft::Applications::Events::EventProperty__
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x11
call fcn.0050b5ef
mov esi, dword [ebp - 0x48]
push esi
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebp - 0x130]
call fcn.00418271
push ebx
lea ecx, [ebp - 0xc8]
call fcn.004182e0
mov ecx, dword [ebp - 0x2a0]
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0x12
push eax
call fcn.0052ad8e
mov ecx, dword [ebp - 0x254]
lea eax, [ebp - 0x140]
push eax
add ecx, 0x28
call fcn.0052c33e
lea ecx, [ebp - 0xc8]
call fcn.0050b5ef
lea ecx, [ebp - 0x60]
call sym.OneDriveUpdaterService.exe_public_virtual:_void___thiscall_Microsoft::Applications::Events::EventProperty::destructor_void_
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0xc
call fcn.0052c2c7
push str.AppInfo.ETag
lea ecx, [ebp - 0x38]
call fcn.004182e0
mov eax, dword [ebp - 0x258]
lea ecx, [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x250]
push ecx
mov ebx, dword [eax]
mov ecx, eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, ebx
je 0x52d8a7
lea ecx, [ebp - 0x140]
call fcn.0052c05e
push str.AppInfo.ETag
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
call fcn.004182e0
mov ebx, dword [ebp - 0x258]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0x14
push eax
mov ecx, ebx
call fcn.0050868e
mov eax, dword [ebp - 0x254]
lea ecx, [ebp - 0x60]
add eax, 0x28
push eax
call sym.OneDriveUpdaterService.exe_public:_void___thiscall_Microsoft::Applications::Events::EventProperty::constructor_struct_Microsoft::Applications::Events::EventProperty__
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x16
call fcn.0050b5ef
mov esi, dword [ebp - 0x48]
push esi
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebp - 0x130]
call fcn.00418271
push str.AppInfo.ETag
lea ecx, [ebp - 0xc8]
call fcn.004182e0
mov ecx, dword [ebp - 0x2a0]
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0x17
push eax
call fcn.0052ad8e
mov ecx, dword [ebp - 0x254]
lea eax, [ebp - 0x140]
push eax
add ecx, 0x28
call fcn.0052c33e
lea ecx, [ebp - 0xc8]
call fcn.0050b5ef
lea ecx, [ebp - 0x60]
call sym.OneDriveUpdaterService.exe_public_virtual:_void___thiscall_Microsoft::Applications::Events::EventProperty::destructor_void_
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0xc
call fcn.0052c2c7
jmp 0x52d8ad
mov ebx, dword [ebp - 0x258]
push str.AppInfo.Id
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
call fcn.0050b5ef
mov eax, dword [ebp - 0x250]
cmp eax, dword [ebx]
setne byte [ebp - 0x269]
je 0x52d90b
mov ebx, dword [ebp - 0x24c]
mov esi, dword [eax + 0x40]
push esi
mov ebx, dword [ebx + 0xa8]
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebx + 0x4c]
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.AppInfo.Env
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52d95e
mov eax, dword [ebp - 0x24c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax + 0xa8]
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebx + 0x30]
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.AppInfo.Name
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52d9b6
mov eax, dword [ebp - 0x24c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax + 0xa8]
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebx + 0x94]
call fcn.00418271
mov ebx, dword [ebp - 0x258]
jmp 0x52d9da
cmp byte [ebp - 0x269], 0
je 0x52d9da
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0xa8]
lea eax, [ecx + 0x4c]
add ecx, 0x94
push eax
call fcn.00477501
push str.AppInfo.Version
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52da2d
mov eax, dword [ebp - 0x24c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax + 0xa8]
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebx + 0x64]
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.AppInfo.Language
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52da80
mov eax, dword [ebp - 0x24c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax + 0xa8]
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebx + 0x7c]
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.Id
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52db6b
push 0x65166c
lea ecx, [ebp - 0x38]
call fcn.004182e0
mov esi, dword [esi + 0x40]
push 0x18
pop eax
mov byte [ebp - 4], al
test esi, esi
je 0x52db49
push esi
call fcn.00601a40
mov dword [ebp - 0x250], eax
pop ecx
cmp eax, 2
jb 0x52db22
cmp byte [esi + 1], 0x3a
jne 0x52db22
mov cl, byte [esi]
cmp cl, 0x63
je 0x52db03
cmp cl, 0x75
je 0x52db03
cmp cl, 0x61
je 0x52db03
cmp cl, 0x73
je 0x52db03
cmp cl, 0x78
je 0x52db03
cmp cl, 0x69
jne 0x52db22
push 0x6609c8
call fcn.00601a40
pop ecx
push eax
push 0x6609c8
lea ecx, [ebp - 0x38]
call fcn.00418271
mov eax, dword [ebp - 0x250]
cmp byte [esi], 0x7b
jne 0x52db38
cmp byte [eax + esi - 1], 0x7d
jne 0x52db38
add eax, 0xfffffffe
push eax
lea eax, [esi + 1]
push eax
jmp 0x52db41
push esi
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebp - 0x38]
call fcn.00417f8c
mov ecx, dword [ebp - 0x28c]
lea eax, [ebp - 0x38]
push eax
push 0x18
pop eax
mov ecx, dword [ecx]
add ecx, eax
call fcn.00477501
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xc
call fcn.0050b5ef
push str.DeviceInfo.OrgId
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52dbba
mov eax, dword [ebp - 0x28c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebx + 0x78]
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.Make
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52dc09
mov ebx, dword [ebp - 0x270]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [ebx]
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebx + 0x10]
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.Model
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52dc58
mov eax, dword [ebp - 0x270]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebx + 0x28]
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.Class
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52dca7
mov eax, dword [ebp - 0x28c]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebx + 0x60]
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.M365aInfo.EnrolledTenantId
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52dcf5
mov ebx, dword [ebp - 0x278]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [ebx]
call fcn.00601a40
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.OsName
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52dd44
mov ebx, dword [ebp - 0x2a8]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [ebx]
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebx + 0x34]
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.OsBuild
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52dd93
mov eax, dword [ebp - 0x2a8]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebx + 0x4c]
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.UserInfo.Id
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52dde6
mov ebx, dword [ebp - 0x260]
mov esi, dword [esi + 0x40]
push 0x18
pop eax
mov ebx, dword [ebx]
push esi
add ebx, eax
call fcn.00601a40
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.UserInfo.Language
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52de35
mov eax, dword [ebp - 0x260]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebx + 0x48]
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.UserInfo.TimeZone
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52de84
mov ebx, dword [ebp - 0x264]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [ebx]
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebx + 0x30]
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.NetworkCost
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52ded7
mov ebx, dword [ebp - 0x294]
mov esi, dword [esi + 0x40]
push 0x18
pop eax
mov ebx, dword [ebx]
push esi
add ebx, eax
call fcn.00601a40
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.NetworkProvider
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52df25
mov eax, dword [ebp - 0x294]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.00601a40
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00418271
mov ebx, dword [ebp - 0x258]
push str.DeviceInfo.NetworkType
lea ecx, [ebp - 0x38]
call fcn.004182e0
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.0050bb59
lea ecx, [ebp - 0x38]
mov esi, dword [eax]
call fcn.0050b5ef
cmp esi, dword [ebx]
je 0x52df6e
mov eax, dword [ebp - 0x294]
mov esi, dword [esi + 0x40]
push esi
mov ebx, dword [eax]
call fcn.00601a40
pop ecx
push eax
push esi
lea ecx, [ebx + 0x30]
call fcn.00418271
mov esi, dword [ebp - 0x274]
cmp dword [esi + 0x54], 0
jbe 0x52e04a
and dword [ebp - 0x288], 0
xor ebx, ebx
and dword [ebp - 0x280], ebx
mov dword [ebp - 0x284], ebx
mov esi, dword [esi + 0x50]
mov byte [ebp - 4], 0x19
mov eax, dword [esi]
mov dword [ebp - 0x260], eax
cmp eax, esi
je 0x52e003
mov edi, dword [ebp - 0x280]
add eax, 0x14
push eax
cmp edi, ebx
je 0x52dfd0
and dword [ebx + 0x10], 0
mov ecx, ebx
and dword [ebx + 0x14], 0
call fcn.0050ab41
push 0x18
pop eax
add ebx, eax
mov dword [ebp - 0x284], ebx
jmp 0x52dfe8
push ebx
lea ecx, [ebp - 0x288]
call fcn.00529d30
mov ebx, dword [ebp - 0x284]
mov edi, dword [ebp - 0x280]
lea ecx, [ebp - 0x260]
call fcn.0050963b
mov eax, dword [ebp - 0x260]
cmp eax, esi
jne 0x52dfac
mov edi, dword [ebp - 0x29c]
lea ecx, [ebp - 0x78]
call fcn.0052beba
lea eax, [ebp - 0x288]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x74]
call fcn.0052b4b9
mov ecx, dword [ebp - 0x270]
lea eax, [ebp - 0x78]
push eax
call fcn.0052b43e
lea ecx, [ebp - 0x78]
call fcn.0052c288
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0xc
call fcn.00511de0
mov esi, dword [ebp - 0x274]
cmp byte [ebp + 0xc], 0
jne 0x52e4a9
mov esi, dword [esi + 0x40]
mov eax, dword [esi]
mov dword [ebp - 0x260], eax
cmp eax, esi
je 0x52e4a9
lea ebx, [eax + 0x10]
mov eax, dword [ebx + 0x24]
mov dword [ebp - 0x270], ebx
test eax, eax
je 0x52e13a
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x264], eax
call fcn.0052c05e
and dword [ebp - 0x28], 0
xorps xmm0, xmm0
and dword [ebp - 0x24], 0
movups xmmword [ebp - 0x38], xmm0
lea eax, [ebp - 0x264]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x38]
call fcn.0052b419
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0052b372
mov eax, dword [ebx + 0x18]
lea ecx, [ebp - 0x50]
push ecx
mov edi, dword [eax + 4]
mov ecx, edi
call dword [0x62275c]
lea ecx, [ebx + 0x18]
call edi
push eax
lea ecx, [ebp - 0x130]
call fcn.0041462c
lea ecx, [ebp - 0x50]
call fcn.0050b5ef
push ebx
lea eax, [ebp - 0x27c]
push eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0x128]
call fcn.0052ac4c
mov ecx, dword [ebp - 0x27c]
lea eax, [ebp - 0x140]
push eax
add ecx, 0x28
call fcn.0052c33e
lea ecx, [ebp - 0x2c]
call fcn.00518fe8
lea ecx, [ebp - 0x38]
call fcn.00518fe8
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0xc
call fcn.0052c2c7
jmp 0x52e48a
xor ecx, ecx
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x2c0], ecx
mov dword [ebp - 0x2bc], ecx
xor eax, eax
mov byte [ebp - 4], 0x1d
lea edi, [ebp - 0x20]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebx + 0x20]
sub eax, ecx
je 0x52e403
sub eax, 1
je 0x52e3b7
sub eax, 1
je 0x52e36d
sub eax, 1
je 0x52e321
sub eax, 1
je 0x52e2be
sub eax, 1
je 0x52e207
lea ecx, [ebp - 0x1e8]
call fcn.0052c05e
mov eax, dword [ebx + 0x18]
lea ecx, [ebp - 0x50]
push ecx
mov byte [ebp - 4], 0x24
mov edi, dword [eax + 4]
mov ecx, edi
call dword [0x62275c]
lea ecx, [ebx + 0x18]
call edi
push eax
lea ecx, [ebp - 0x1d8]
call fcn.0041462c
lea ecx, [ebp - 0x50]
call fcn.0050b5ef
push dword [ebp - 0x270]
lea eax, [ebp - 0x254]
push eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0x128]
call fcn.0052ac4c
mov ecx, dword [ebp - 0x254]
lea eax, [ebp - 0x1e8]
push eax
add ecx, 0x28
call fcn.0052c33e
lea ecx, [ebp - 0x1e8]
jmp 0x52e476
lea eax, [ebx + 0x30]
push eax
lea ecx, [ebp - 0xc0]
call sym.OneDriveUpdaterService.exe_public:_void___thiscall_Microsoft::Applications::Events::GUID_t::constructor_struct_Microsoft::Applications::Events::GUID_t_const__
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0xc0]
call sym.OneDriveUpdaterService.exe_public:_void___thiscall_Microsoft::Applications::Events::GUID_t::to_bytes_unsigned_char____16__const
push dword [ebp - 0x264]
xor eax, eax
lea ecx, [ebp - 0x2b8]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00490cc3
lea eax, [ebp - 0x2b8]
push eax
lea ecx, [ebp - 0x2c4]
call fcn.00492b53
lea ecx, [ebp - 0x2b8]
call fcn.00457876
lea ecx, [ebp - 0x140]
call fcn.0052c05e
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x140], 8
call fcn.0052b490
push ebx
lea eax, [ebp - 0x2ac]
push eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0x128]
call fcn.0052ac4c
mov ecx, dword [ebp - 0x2ac]
jmp 0x52e461
lea ecx, [ebp - 0xb0]
call fcn.0052c05e
movzx eax, byte [ebx + 0x30]
cdq
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x2a4]
push ebx
push eax
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 0x22
mov dword [ebp - 0xb0], 6
mov dword [ebp - 0x84], edx
mov ecx, dword [eax + 0x128]
call fcn.0052ac4c
mov ecx, dword [ebp - 0x2a4]
lea eax, [ebp - 0xb0]
add ecx, 0x28
push eax
call fcn.0052c33e
lea ecx, [ebp - 0xb0]
jmp 0x52e476
lea ecx, [ebp - 0xb0]
call fcn.0052c05e
mov eax, dword [ebx + 0x30]
mov dword [ebp - 0x88], eax
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x298]
push ebx
push eax
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 0x21
mov dword [ebp - 0xb0], 7
mov ecx, dword [eax + 0x128]
call fcn.0052ac4c
mov ecx, dword [ebp - 0x298]
jmp 0x52e307
lea ecx, [ebp - 0x140]
call fcn.0052c05e
movsd xmm0, qword [ebx + 0x30]
lea eax, [ebp - 0x290]
push ebx
push eax
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x140], 4
movsd qword [ebp - 0x110], xmm0
mov ecx, dword [eax + 0x128]
call fcn.0052ac4c
mov ecx, dword [ebp - 0x290]
jmp 0x52e461
lea ecx, [ebp - 0xb0]
call fcn.0052c05e
mov eax, dword [ebx + 0x30]
and dword [ebp - 0xb0], 0
mov dword [ebp - 0x88], eax
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x25c]
push ebx
push eax
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 0x1f
mov ecx, dword [eax + 0x128]
call fcn.0052ac4c
mov ecx, dword [ebp - 0x25c]
jmp 0x52e307
lea ecx, [ebp - 0x140]
call fcn.0052c05e
mov eax, dword [ebx + 0x18]
lea ecx, [ebp - 0x50]
push ecx
mov byte [ebp - 4], 0x1e
mov edi, dword [eax + 4]
mov ecx, edi
call dword [0x62275c]
lea ecx, [ebx + 0x18]
call edi
push eax
lea ecx, [ebp - 0x130]
call fcn.0041462c
lea ecx, [ebp - 0x50]
call fcn.0050b5ef
push dword [ebp - 0x270]
lea eax, [ebp - 0x284]
push eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 0x128]
call fcn.0052ac4c
mov ecx, dword [ebp - 0x284]
lea eax, [ebp - 0x140]
add ecx, 0x28
push eax
call fcn.0052c33e
lea ecx, [ebp - 0x140]
call fcn.0052c2c7
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0xc
call fcn.00457876
lea ecx, [ebp - 0x260]
call fcn.0050963b
mov eax, dword [ebp - 0x260]
cmp eax, esi
jne 0x52e067
mov edi, dword [ebp - 0x29c]
cmp dword [0x69b64c], 4
jl 0x52e4d4
mov eax, dword [ebp - 0x274]
push eax
push dword [ebp - 0x24c]
push str.Record_p_decorated_with_SemanticContext_p
call fcn.005127bc
push eax
push 4
call fcn.0050ff9e
add esp, 0x14
lea ecx, [ebp - 0x158]
call fcn.0050b5ef
push edi
mov dword [ebp - 4], 0x25
call fcn.0050b53a
pop ecx
call fcn.004f0607
ret 8