Function at 0x101055ad
Capabilities:
Contain obfuscated stackstrings
Create process on windows

Disassembly:
push 0x300
mov eax, 0x1013c480
call fcn.101108dc
mov esi, ecx
mov dword [ebp - 0x1f8], esi
mov ecx, dword [ebp + 8]
xor ebx, ebx
inc ebx
mov dword [ebp - 0x248], ecx
mov al, bl
mov edx, 0x101e85d8
xchg byte [edx], al
lea eax, [ebp - 0x12]
mov byte [ebp - 0x12], 0
push eax
push ecx
lea eax, [ebp - 0x1fc]
push eax
call fcn.100d1f7d
add esp, 0xc
mov edi, dword [eax]
and dword [eax], 0
mov dword [ebp - 0x250], edi
mov dword [ebp - 0x254], edi
and dword [ebp - 4], 0
cmp dword [ebp - 0x1fc], 0
je 0x10105620
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0x1fc]
call fcn.1003a3c0
push dword [ebp - 0x248]
mov ecx, 0x101e8678
call fcn.1003a3c0
push 7
push str.abort::
mov ecx, 0x101e8690
call fcn.1003a3c0
xor ecx, ecx
mov byte [0x101e86c0], cl
mov byte [0x101e85d9], cl
mov eax, dword [esi]
cmp byte [eax], cl
jne 0x101056fd
push ecx
push ecx
push ecx
push ebx
sub esp, 0x18
mov ecx, esp
push str.GlobalD14718B7_BC31_4F09_9E3C_75F345967967
call fcn.1003a3c0
call fcn.100f7c42
add esp, 0x28
test al, al
je 0x101056fd
mov ecx, esi
call fcn.101086a1
push str.abort::__resource_error__retry_requestfalse
lea ecx, [ebp - 0x5c]
call fcn.1003a3c0
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], bl
push eax
mov ecx, edi
call fcn.10034710
push eax
mov ecx, edi
call fcn.100403fa
push eax
mov ecx, edi
call fcn.10014f0c
push eax
mov ecx, edi
call fcn.10040402
push eax
lea ecx, [ebp - 0x30c]
call fcn.100e55e5
mov ecx, dword [esi]
push eax
mov byte [ebp - 4], 2
call fcn.10021009
lea ecx, [ebp - 0x30c]
call fcn.1001d4fa
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0
call fcn.1001524d
xor al, al
mov ecx, 0x101e85d8
xchg byte [ecx], al
mov ecx, 0x101e8740
call fcn.1001ff5b
jmp 0x1010643f
mov ecx, dword [esi]
lea eax, [ebp - 0xbc]
push eax
call fcn.10025348
cmp dword [ebp - 0xa8], 0x10
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 3
cmovae eax, dword [ebp - 0xbc]
mov dword [ebp - 0x1fc], eax
call fcn.100e1984
mov ecx, eax
call fcn.10016ada
mov ecx, eax
call fcn.10062c3a
xor ebx, ebx
lea ecx, [ebp - 0x5c]
push eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
call fcn.1003a3c0
mov byte [ebp - 4], 4
call fcn.100e1984
mov ecx, eax
call fcn.10016ada
mov ecx, eax
call fcn.100404df
push eax
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], ebx
call fcn.1003a3c0
mov byte [ebp - 4], 5
call fcn.100e1984
mov ecx, eax
call fcn.10016ada
mov ecx, eax
call fcn.10040365
push eax
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
call fcn.1003a3c0
mov byte [ebp - 4], 6
call dword [sym.imp.kernel32.dll_GetCurrentProcessId]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.1003a3c0
cmp dword [ebp - 0x60], 0x10
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 7
cmovae eax, dword [ebp - 0x74]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
add esp, 0xc
mov dword [ebp - 0x200], eax
push 0x101e2a68
cmp byte [0x101e85db], bl
je 0x101058b9
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.1003a3c0
pop ecx
pop ecx
mov ebx, 0x1014a0f1
lea ecx, [ebp - 0x218]
push ebx
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 8
call fcn.1003a3c0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x1f4]
mov edi, 0x101e86c4
push eax
push edi
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x1f4]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 7
call fcn.1001524d
test esi, esi
je 0x10105995
push ebx
lea ecx, [ebp - 0x1f4]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0xa
call fcn.1003a3c0
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x218]
push eax
push edi
call fcn.100e1c13
add esp, 0xc
mov esi, dword [eax]
push dword [ebp - 0x1fc]
push str.RunWFProcess
mov ecx, dword [esi + 0x14]
push str._s:_Creating_WF_process._Path___s
push eax
call dword [0x1014488c]
call dword [esi + 0x14]
add esp, 0x10
jmp 0x1010597b
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.1003a3c0
pop ecx
pop ecx
mov ebx, 0x1014a0f1
lea ecx, [ebp - 0x1f4]
push ebx
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0xc
call fcn.1003a3c0
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x218]
mov edi, 0x101e86c4
push eax
push edi
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x218]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 7
call fcn.1001524d
test esi, esi
je 0x10105995
push ebx
lea ecx, [ebp - 0x1f4]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0xe
call fcn.1003a3c0
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x218]
push eax
push edi
call fcn.100e1c13
add esp, 0xc
mov ecx, dword [eax]
push str.RunWFProcess
push str._s:_Creating_WF_process
push eax
mov esi, dword [ecx + 0x14]
mov ecx, esi
call dword [0x1014488c]
call esi
add esp, 0xc
lea ecx, [ebp - 0x218]
call fcn.1001524d
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 7
call fcn.1001524d
mov esi, 0x101e2a68
push esi
call sub.MSVCP140.dll__Mtx_unlock
push 0x44
pop edi
push edi
lea eax, [ebp - 0x118]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov dword [ebp - 0x118], edi
xor eax, eax
lea edi, [ebp - 0x1ec]
add esp, 0x10
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x118]
push eax
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
push dword [ebp - 0x200]
push dword [ebp - 0x1fc]
call dword [sym.imp.kernel32.dll_CreateProcessA]
test eax, eax
jne 0x10105bf5
push esi
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.1003a3c0
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x230]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x10
call fcn.1003a3c0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x218]
mov edi, 0x101e86c4
push eax
push edi
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x218]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 7
call fcn.1001524d
test esi, esi
je 0x10105adc
push ebx
lea ecx, [ebp - 0x218]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x12
call fcn.1003a3c0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x230]
push eax
push edi
call fcn.100e1c13
mov esi, eax
add esp, 0xc
mov edi, dword [esi]
call dword [sym.imp.kernel32.dll_GetLastError]
mov ecx, dword [edi + 0x14]
push eax
push str.RunWFProcess
push str._s:_Failed_to_create_WF_process._Win_Error_Code___lu
push esi
call dword [0x1014488c]
call dword [edi + 0x14]
add esp, 0x10
lea ecx, [ebp - 0x230]
call fcn.1001524d
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 7
call fcn.1001524d
mov edi, 0x101e86c4
mov esi, 0x101e2a68
push esi
call sub.MSVCP140.dll__Mtx_unlock
push esi
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.1003a3c0
add esp, 0xc
lea ecx, [ebp - 0x218]
push ebx
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x14
call fcn.1003a3c0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x230]
push eax
push edi
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x230]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 7
call fcn.1001524d
test esi, esi
je 0x10105bb7
push ebx
lea ecx, [ebp - 0x218]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x16
call fcn.1003a3c0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x230]
push eax
push edi
call fcn.100e1c13
add esp, 0xc
mov ecx, dword [eax]
push str.RunWFProcess_Error:_Failed_to_create_CEF_workflow_process.
push ebx
push eax
mov esi, dword [ecx + 0x24]
mov ecx, esi
call dword [0x1014488c]
call esi
add esp, 0xc
lea ecx, [ebp - 0x230]
call fcn.1001524d
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 7
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
pop ecx
xor eax, eax
push eax
push 1
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
lea eax, [ebp - 0xbc]
push eax
call fcn.1003a3c0
push 0x25a
push 7
call fcn.1007bfb9
add esp, 0x28
push 2
pop ebx
jmp 0x101063e1
push 0
push 0
sub esp, 0x18
mov ecx, esp
push ebx
call fcn.1003a3c0
push 0
push 7
call fcn.1007bfb9
add esp, 0x28
push dword [ebp - 0x1ec]
call dword [sym.imp.kernel32.dll_CloseHandle]
push dword [ebp - 0x1e8]
call dword [sym.imp.kernel32.dll_CloseHandle]
and dword [ebp - 0x34], 0
xor eax, eax
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x230]
push str.NGLWFPipe_
push eax
call fcn.1003a3c0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x19
push ecx
push eax
call fcn.100e9b60
add esp, 0x14
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x230]
call fcn.1001524d
push 0x170
mov byte [ebp - 0x11], 1
call fcn.1003a3c0
mov edi, eax
pop ecx
mov dword [ebp - 0x200], edi
mov byte [ebp - 4], 0x1a
test edi, edi
je 0x10105cb4
push 0x170
push 0
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x11]
mov ecx, edi
push eax
lea eax, [ebp - 0x44]
push eax
push 1
call fcn.101022a1
jmp 0x10105cb6
xor eax, eax
mov edi, dword [ebp - 0x1f8]
push eax
mov byte [ebp - 4], 0x18
lea ecx, [edi + 0x48]
mov dword [ebp - 0x200], ecx
call fcn.1003a3c0
cmp byte [ebp - 0x11], 0
jne 0x10105dde
push esi
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.1003a3c0
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x218]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x1b
call fcn.1003a3c0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x230]
mov edi, 0x101e86c4
push eax
push edi
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x230]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x18
call fcn.1001524d
test esi, esi
je 0x10105dad
push ebx
lea ecx, [ebp - 0x218]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x1d
call fcn.1003a3c0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x230]
push eax
push edi
call fcn.100e1c13
add esp, 0xc
mov ecx, dword [eax]
push str.RunWFProcess_Error:_Failed_to_init_CEF_CommBridge
push ebx
push eax
mov esi, dword [ecx + 0x24]
mov ecx, esi
call dword [0x1014488c]
call esi
add esp, 0xc
lea ecx, [ebp - 0x230]
call fcn.1001524d
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x18
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
pop ecx
push 0
push 1
sub esp, 0x18
mov ecx, esp
push ebx
call fcn.1003a3c0
push 0x25b
push 7
call fcn.1007bfb9
add esp, 0x28
push 2
pop ebx
jmp 0x101063b6
push 0
push 0
sub esp, 0x18
mov ecx, esp
push ebx
call fcn.1003a3c0
push 0
push 7
call fcn.1007bfb9
mov eax, dword [ebp + 0xc]
add esp, 0x28
test eax, eax
je 0x10105efa
push esi
mov dword [edi + 0x50], eax
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.1003a3c0
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x218]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x1f
call fcn.1003a3c0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x20
push eax
lea eax, [ebp - 0x230]
mov edi, 0x101e86c4
push eax
push edi
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x230]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x18
call fcn.1001524d
test esi, esi
je 0x101060c5
push ebx
lea ecx, [ebp - 0x218]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x21
call fcn.1003a3c0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x230]
push eax
push edi
call fcn.100e1c13
mov esi, eax
mov eax, dword [ebp - 0x1f8]
push dword [eax + 0x50]
lea eax, [ebp - 0x1f4]
push eax
call fcn.100e513b
add esp, 0x14
mov ecx, eax
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x23
jb 0x10105ed1
mov ecx, dword [ecx]
push ecx
push str.Using_pointer_of_the_parent_window_passed__s
mov eax, dword [esi]
push esi
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x1014488c]
call esi
add esp, 0xc
lea ecx, [ebp - 0x1f4]
call fcn.1001524d
jmp 0x101060ab
call dword [sym.imp.USER32.dll_GetActiveWindow]
test eax, eax
je 0x10105fef
push 3
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call dword [sym.imp.USER32.dll_GetAncestor]
push esi
mov dword [edi + 0x50], eax
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.1003a3c0
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x218]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x24
call fcn.1003a3c0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x25
push eax
lea eax, [ebp - 0x230]
mov edi, 0x101e86c4
push eax
push edi
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x230]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x18
call fcn.1001524d
test esi, esi
je 0x101060c5
push ebx
lea ecx, [ebp - 0x218]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x26
call fcn.1003a3c0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x27
push eax
lea eax, [ebp - 0x230]
push eax
push edi
call fcn.100e1c13
mov esi, eax
mov eax, dword [ebp - 0x1f8]
push dword [eax + 0x50]
lea eax, [ebp - 0x1f4]
push eax
call fcn.100e513b
add esp, 0x14
mov ecx, eax
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x28
jb 0x10105fe4
mov ecx, dword [ecx]
push ecx
push str.Using_root_owner_as_window_handle__s
jmp 0x10105ed7
and dword [edi + 0x50], 0
push esi
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.1003a3c0
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x218]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x29
call fcn.1003a3c0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x230]
mov edi, 0x101e86c4
push eax
push edi
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x230]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x18
call fcn.1001524d
test esi, esi
je 0x101060c5
push ebx
lea ecx, [ebp - 0x218]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x2b
call fcn.1003a3c0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x2c
push eax
lea eax, [ebp - 0x230]
push eax
push edi
call fcn.100e1c13
add esp, 0xc
mov ecx, dword [eax]
push str.No_Window_handle__no_root_owner_passed_to_handle_workflow
push eax
mov esi, dword [ecx + 0xc]
mov ecx, esi
call dword [0x1014488c]
call esi
pop ecx
pop ecx
lea ecx, [ebp - 0x230]
call fcn.1001524d
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x18
call fcn.1001524d
mov esi, 0x101e2a68
push esi
call sub.MSVCP140.dll__Mtx_unlock
push 0xc4
lea eax, [ebp - 0x1dc]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0x1f8]
add esp, 0x10
push dword [ecx + 0x50]
mov ecx, dword [ecx]
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x1fc], esp
push eax
call fcn.10024a6a
mov eax, dword [ebp - 0x1f8]
sub esp, 0x18
add eax, 0x30
mov dword [ebp - 0x258], esp
mov ecx, esp
mov byte [ebp - 4], 0x2d
push eax
call fcn.1003a3c0
sub esp, 0x18
mov byte [ebp - 4], 0x2e
mov ecx, esp
mov dword [ebp - 0x25c], esp
lea eax, [ebp - 0x8c]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.1003a3c0
sub esp, 0x18
mov byte [ebp - 4], 0x2f
mov ecx, esp
mov dword [ebp - 0x260], esp
lea eax, [ebp - 0xa4]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.1003a3c0
sub esp, 0x18
mov byte [ebp - 4], 0x30
mov ecx, esp
mov dword [ebp - 0x264], esp
lea eax, [ebp - 0x5c]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.1003a3c0
sub esp, 0x18
mov byte [ebp - 4], 0x31
mov eax, esp
mov dword [ebp - 0x268], esp
push eax
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [eax]
call fcn.1003a3c0
sub esp, 0x18
mov byte [ebp - 4], 0x32
mov eax, esp
mov dword [ebp - 0x26c], esp
push eax
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [eax]
call fcn.1003a3c0
sub esp, 0x18
mov byte [ebp - 4], 0x33
mov ecx, esp
push dword [ebp - 0x248]
call fcn.1003a3c0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x1dc]
call fcn.1010216d
and dword [ebp - 0x1c], 0
xor eax, eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0x1dc]
call fcn.10102e15
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x36
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.100e9b60
pop ecx
pop ecx
xor eax, eax
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.1003a3c0
mov ecx, dword [ebp - 0x200]
mov ecx, dword [ecx]
call fcn.10102cb0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x240]
mov dword [ebp - method.std::_Func_impl_no_alloc_class__lambda_a8120932e24cd92499b00607ea1f678a___void___.virtual_0], vtable.std::_Func_impl_no_alloc_class__lambda_a8120932e24cd92499b00607ea1f678a___void___.0
mov dword [ebp - 0x21c], eax
sub esp, 0x18
mov byte [ebp - 4], 0x37
mov ecx, esp
push ebx
call fcn.1003a3c0
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x241]
call fcn.1002f996
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0x36
call fcn.10035663
push esi
call sub.MSVCP140.dll__Mtx_lock
push eax
call fcn.1003a3c0
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x218]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x38
call fcn.1003a3c0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x230]
push eax
push edi
call fcn.100e1c13
add esp, 0xc
lea ecx, [ebp - 0x230]
mov esi, eax
call fcn.1001524d
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x36
call fcn.1001524d
test esi, esi
je 0x10106369
push ebx
lea ecx, [ebp - 0x218]
call fcn.1003a3c0
push ebx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x3a
call fcn.1003a3c0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x3b
push eax
lea eax, [ebp - 0x230]
push eax
push edi
call fcn.100e1c13
add esp, 0xc
mov ecx, dword [eax]
push str.RunWFProcess
push str._s:_Used_CEF_to_process_this_workflow
push eax
mov esi, dword [ecx + 0x14]
mov ecx, esi
call dword [0x1014488c]
call esi
add esp, 0xc
lea ecx, [ebp - 0x230]
call fcn.1001524d
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x36
call fcn.1001524d
push 0x101e2a68
call sub.MSVCP140.dll__Mtx_unlock
pop ecx
lea ecx, [ebp - 0xd4]
xor ebx, ebx
call fcn.1001524d
mov eax, dword [ebp - 0x18]
cmp eax, 8
jb 0x1010639b
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x2c]
call fcn.1003a3c0
pop ecx
pop ecx
and dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0x1dc]
xor eax, eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.1010391e
mov eax, dword [ebp - 0x30]
cmp eax, 8
jb 0x101063d0
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x44]
call fcn.1003a3c0
pop ecx
pop ecx
and dword [ebp - 0x34], 0
xor eax, eax
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
lea ecx, [ebp - 0x74]
call fcn.1001524d
mov eax, dword [ebp - 0x78]
cmp eax, 0x10
jb 0x10106400
inc eax
push eax
push dword [ebp - 0x8c]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x90]
cmp eax, 0x10
jb 0x1010641a
inc eax
push eax
push dword [ebp - 0xa4]
call fcn.1003a3c0
pop ecx
pop ecx
mov eax, dword [ebp - 0x48]
cmp eax, 0x10
jb 0x1010642e
inc eax
push eax
push dword [ebp - 0x5c]
call fcn.1003a3c0
pop ecx
pop ecx
lea ecx, [ebp - 0xbc]
call fcn.1001524d
mov edi, dword [ebp - 0x250]
test edi, edi
je 0x1010644f
push edi
lea ecx, [ebp - 0x254]
call fcn.1003a3c0
mov eax, ebx
call fcn.10110886
ret 8