Function at 0x101e35c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x80
mov esi, dword [ebp + 0xc]
mov eax, dword [0x103c2010]
xor eax, ebp
mov dword [esp + 0x78], eax
call fcn.101e2f60
mov ebx, eax
push esi
call fcn.101e3280
add esp, 4
test ebx, ebx
je 0x101e37c9
mov edi, eax
mov esi, edx
mov ecx, dword [ebx + 0x10]
push edx
push eax
push 0
call fcn.10261f30
test al, al
je 0x101e37c9
mov dword [esp + 0x10], esi
mov edx, dword [ebp + 0x1c]
movzx eax, byte [ebp + 8]
mov word [esp + 0x4e], 0xffff
movsx ecx, al
add ecx, 0xffffffbe
cmp ecx, 0x32
ja case.0x101e362f.71
mov esi, str.Begin
jmp dword [ecx*4 + 0x10362804]
mov esi, str.Phase_Counter
jmp case.0x101e362f.66
mov esi, str.Phase_Delete_Object
jmp case.0x101e362f.66
mov esi, 0x10362441
jmp case.0x101e362f.66
mov esi, str.Async_End
jmp case.0x101e362f.66
mov byte [esp + 0x4e], al
mov byte [esp + 0x4f], 0
lea esi, [esp + 0x4e]
jmp case.0x101e362f.66
mov esi, str.Instant
jmp case.0x101e362f.66
mov esi, str.Phase_Metadata
jmp case.0x101e362f.66
mov esi, str.Phase_Create_Object
jmp case.0x101e362f.66
mov esi, str.Phase_Snapshot_Object
jmp case.0x101e362f.66
mov esi, str.Phase_Sample
jmp case.0x101e362f.66
mov esi, str.Async_Begin
jmp case.0x101e362f.66
mov esi, str.Async_Step_Into
jmp case.0x101e362f.66
mov esi, str.Complete
jmp case.0x101e362f.66
mov esi, str.Nestable_Async_Begin
jmp case.0x101e362f.66
mov esi, str.Nestable_Async_End
jmp case.0x101e362f.66
mov esi, str.Phase_Flow_End
jmp case.0x101e362f.66
mov esi, str.Nestable_Async_Instant
jmp case.0x101e362f.66
mov esi, str.Async_Step_Past
jmp case.0x101e362f.66
mov esi, str.Phase_Flow_Begin
jmp case.0x101e362f.66
mov esi, str.Phase_Flow_Step
mov dword [esp + 0xc], esi
xorps xmm0, xmm0
movaps xmmword [esp + 0x60], xmm0
movaps xmmword [esp + 0x50], xmm0
mov dword [esp + 0x70], 0
test edx, edx
je 0x101e3771
movzx eax, byte [edx]
test eax, eax
je 0x101e3771
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], edi
lea esi, [edx + 0x10]
xor ebx, ebx
lea edi, [esp + 0x50]
mov dword [esp + 0x14], eax
jmp 0x101e371f
inc ebx
add edi, 0xc
add esi, 8
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x101e373f
movzx eax, byte [edx + ebx + 1]
mov ecx, eax
and cl, 0xfe
cmp cl, 8
je 0x101e3710
movzx eax, al
mov ecx, esi
push edi
push eax
call fcn.101e99a0
mov edx, dword [ebp + 0x1c]
jmp 0x101e3710
test eax, eax
mov edi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x18]
je 0x101e3771
cmp eax, 1
je 0x101e3810
cmp eax, 2
jne 0x101e3820
cmp byte [esp + 0x67], 0
jns 0x101e3827
mov eax, dword [esp + 0x5c]
jmp 0x101e382b
mov esi, dword [ebx + 0x10]
lea ebx, [esp + 0x44]
mov ecx, ebx
push dword [esp + 0xc]
push str.Phase
call fcn.10099b40
mov dword [esp + 0x30], 0xb000000
mov dword [esp + 0x34], 0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], edi
lea eax, [esp + 0x30]
mov ecx, esi
push ebx
push eax
push dword [ebp + 0x10]
call fcn.101e3000
cmp byte [esp + 0x73], 0
js 0x101e37dc
cmp byte [esp + 0x67], 0
js 0x101e37ef
cmp byte [esp + 0x5b], 0
js 0x101e3802
mov ecx, dword [esp + 0x78]
xor ecx, ebp
call fcn.102f4c53
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push dword [esp + 0x68]
call fcn.102f3c66
add esp, 4
cmp byte [esp + 0x67], 0
jns 0x101e37c2
push dword [esp + 0x5c]
call fcn.102f3c66
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x101e37c9
push dword [esp + 0x50]
call fcn.102f3c66
add esp, 4
jmp 0x101e37c9
mov esi, dword [ebx + 0x10]
cmp byte [esp + 0x5b], 0
jns 0x101e384c
mov eax, dword [esp + 0x50]
jmp 0x101e3850
call sym.EmbeddedBrowserWebView.dll_public_virtual:_void___thiscall_telemetry_client::IDataFieldVisitor::destructor_void_
jmp 0x101e37b4
lea eax, [esp + 0x5c]
mov ecx, dword [ebx + 0x10]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0x44]
push eax
push dword [edx + 8]
call fcn.10099b40
cmp byte [esp + 0x5b], 0
jns 0x101e38a7
mov eax, dword [esp + 0x50]
jmp 0x101e38ab
lea eax, [esp + 0x50]
lea ecx, [esp + 0x44]
push eax
push dword [edx + 4]
call fcn.10099b40
lea ebx, [esp + 0x28]
mov ecx, ebx
push dword [esp + 0xc]
push str.Phase
call fcn.10099b40
mov dword [esp + 0x30], 0xb000000
mov dword [esp + 0x34], 0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], edi
lea eax, [esp + 0x30]
mov ecx, esi
lea edx, [esp + 0x44]
push edx
push ebx
push eax
push dword [ebp + 0x10]
call fcn.101e3910
jmp 0x101e37b4
lea eax, [esp + 0x50]
lea esi, [esp + 0x28]
mov ecx, esi
push eax
mov eax, dword [ebp + 0x1c]
push dword [eax + 4]
call fcn.10099b40
lea ebx, [esp + 0x20]
mov ecx, ebx
push dword [esp + 0xc]
push str.Phase
call fcn.10099b40
mov dword [esp + 0x30], 0xb000000
mov dword [esp + 0x34], 0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], edi
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x44]
push edx
push esi
push ebx
push eax
push dword [ebp + 0x10]
call fcn.101e3a80
jmp 0x101e37b4