Function at 0x100b3100
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x101360e5
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x103b2018]
xor eax, esp
push eax
lea eax, [esp + 0x38]
mov dword fs:[0], eax
mov ebx, ecx
lea eax, [ebx + 0x55c]
push eax
mov dword [esp + 0x18], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [ebp + 8]
mov dword [esp + 0x40], 0
mov esi, dword [edi + 0x3c]
mov eax, dword [edi + 0x38]
inc esi
cmp esi, 3
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], eax
jle 0x100b31e8
mov eax, dword [edi + 0x34]
mov ecx, dword [edi + 0x30]
mov edx, dword [ebx + 0x638]
push eax
push ecx
push 0x10382cb4
push edx
call sub.NirvanaUtils.dll_public:_long_int___cdecl_GLog::WriteLogFormat_wchar_t_const__
mov eax, dword [edi + 0x30]
mov edi, dword [edi + 0x34]
add esp, 0x10
test edi, edi
ja 0x100b318c
test eax, eax
jbe 0x100b319f
push edi
push eax
lea eax, [ebx + 0x6a8]
call fcn.10014b90
mov dword [eax], 2
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x10382cdc
call dword [0x10137604]
lea ecx, [ebx + 0x694]
call fcn.100b1610
mov ecx, ebx
call sym.NirvanaBiz.dll_protected:_void___thiscall_CSWordModel::DecreaseSyncPlansThread_void_
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, 0x80004005
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp eax, 3
jne 0x100b3277
mov ecx, dword [edi + 0x34]
mov edx, dword [edi + 0x30]
mov eax, dword [ebx + 0x638]
push ecx
push edx
push 0x10382cf4
push eax
call sub.NirvanaUtils.dll_public:_long_int___cdecl_GLog::WriteLogFormat_wchar_t_const__
mov eax, dword [edi + 0x30]
mov edi, dword [edi + 0x34]
add esp, 0x10
test edi, edi
ja 0x100b321b
test eax, eax
jbe 0x100b322e
push edi
push eax
lea eax, [ebx + 0x6a8]
call fcn.10014b90
mov dword [eax], 2
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x10382930
call dword [0x10137604]
lea ecx, [ebx + 0x694]
call fcn.100b1610
mov ecx, ebx
call sym.NirvanaBiz.dll_protected:_void___thiscall_CSWordModel::DecreaseSyncPlansThread_void_
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, 0x80004005
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp eax, 4
je 0x100b357b
cmp eax, 5
je 0x100b357b
lea eax, [edi + 0x1c]
push eax
call sub.NirvanaUtils.dll_bool___cdecl_IsRequestForbidden_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____
add esp, 4
test al, al
je 0x100b3306
push str._H:_M:_S
push ecx
lea esi, [esp + 0x2c]
call fcn.1000d160
add esp, 4
push eax
lea ecx, [esp + 0x20]
call fcn.10005710
mov byte [esp + 0x40], 2
mov edx, dword [eax]
mov esi, dword [esp + 0x1c]
mov eax, dword [edi + 0x34]
mov ecx, dword [edi + 0x30]
push edx
mov edx, dword [ebx + 0x638]
push esi
push eax
push ecx
push str.Sync_plan__I64d_retry__d_full_word_req_forb__s
push edx
call sub.NirvanaUtils.dll_public:_long_int___cdecl_GLog::WriteLogFormat_wchar_t_const__
add esp, 0x18
lea ecx, [esp + 0x18]
mov byte [esp + 0x40], 0
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov eax, esi
imul eax, eax, 0x7d0
add eax, 0x3a98
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x100b35fa
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x100b346e
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], eax
push ecx
lea eax, [edi + 0x1c]
push eax
mov ecx, ebx
call sym.NirvanaBiz.dll_public:_long_int___thiscall_CSWordModel::SaveWords_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______int__
test eax, eax
je 0x100b3399
mov edx, dword [edi + 0x34]
mov eax, dword [edi + 0x30]
mov ecx, dword [ebx + 0x638]
push edx
push eax
push 0x1038299c
push ecx
call sub.NirvanaUtils.dll_public:_long_int___cdecl_GLog::WriteLogFormat_wchar_t_const__
mov eax, dword [edi + 0x34]
mov ecx, dword [edi + 0x30]
add esp, 0x10
test eax, eax
ja 0x100b3354
test ecx, ecx
jbe 0x100b3364
push 0
push eax
push ecx
lea edx, [ebx + 0x6a8]
push edx
call fcn.100149b0
mov eax, dword [edi + 0x34]
mov ecx, dword [edi + 0x30]
push esi
push eax
push ecx
mov ecx, ebx
call sym.NirvanaBiz.dll_protected:_void___thiscall_CSWordModel::SendGetPlanFullWordRequest_unsigned_long_long_unsigned___int64___int_
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, 1
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [edi + 0x34]
mov ecx, dword [edi + 0x30]
test eax, eax
ja 0x100b33a7
test ecx, ecx
jbe 0x100b33b7
push 1
push eax
push ecx
lea eax, [ebx + 0x6a8]
push eax
call fcn.100149b0
push str._H:_M:_S
push ecx
lea esi, [esp + 0x34]
call fcn.1000d160
add esp, 4
push eax
lea ecx, [esp + 0x2c]
call fcn.10005710
mov byte [esp + 0x40], 3
mov ecx, dword [eax]
mov edx, dword [edi + 0x34]
mov eax, dword [edi + 0x30]
push ecx
mov ecx, dword [ebx + 0x638]
push edx
push eax
push 0x10382de0
push ecx
call sub.NirvanaUtils.dll_public:_long_int___cdecl_GLog::WriteLogFormat_wchar_t_const__
add esp, 0x14
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x18]
call dword [0x1013762c]
mov byte [esp + 0x40], 4
mov edx, dword [edi + 0x34]
mov eax, dword [edi + 0x30]
push edx
push eax
lea ecx, [esp + 0x20]
push 0x10382e10
push ecx
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Format]
add esp, 0xc
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
call dword [0x1013761c]
lea esi, [ebx + 0x694]
mov ecx, esi
call fcn.100b1610
mov eax, dword [esp + 0x1c]
push eax
call fcn.100b15f0
mov ecx, ebx
call sym.NirvanaBiz.dll_protected:_void___thiscall_CSWordModel::DecreaseSyncPlansThread_void_
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov ecx, dword [esp + 0x14]
push ecx
jmp 0x100b360f
cmp eax, 1
jne 0x100b3556
push str._H:_M:_S
push ecx
lea esi, [esp + 0x34]
call fcn.1000d160
add esp, 4
push eax
lea ecx, [esp + 0x2c]
call fcn.10005710
mov byte [esp + 0x40], 5
mov edx, dword [eax]
mov eax, dword [edi + 0x34]
mov ecx, dword [edi + 0x30]
push edx
mov edx, dword [ebx + 0x638]
push eax
push ecx
push 0x10382e34
push edx
call sub.NirvanaUtils.dll_public:_long_int___cdecl_GLog::WriteLogFormat_wchar_t_const__
add esp, 0x14
lea ecx, [esp + 0x24]
mov byte [esp + 0x40], 0
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov eax, dword [edi + 0x34]
mov ecx, dword [edi + 0x30]
xor esi, esi
cmp eax, esi
ja 0x100b34d6
cmp ecx, esi
jbe 0x100b34e6
push 2
push eax
push ecx
lea eax, [ebx + 0x6a8]
push eax
call fcn.100149b0
push 0x10
call sub.mfc90u.dll_new
add esp, 4
cmp eax, esi
je 0x100b34fe
mov dword [eax], esi
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
mov esi, eax
mov dword [esi], ebx
mov ecx, dword [edi + 0x30]
mov dword [esi + 8], ecx
mov edx, dword [edi + 0x34]
push 1
mov eax, edx
push eax
push ecx
add ebx, 0x6a8
push ebx
mov dword [esi + 0xc], edx
call fcn.100149b0
push 0
push 0
push 0
push 0
push esi
push sym.NirvanaBiz.dll_public:_static_unsigned_int___cdecl_CSWordModel::ThreadSyncSinglePlanUnit_void__
call sub.mfc90u.dll_AfxBeginThread_1
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, 1
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, 1
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0
call dword [sym.imp.MSVCR90.dll__time64]
add esp, 4
push str._H:_M:_S
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], edx
call fcn.10005710
mov byte [esp + 0x40], 1
mov edx, dword [eax]
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x34]
push edx
mov edx, dword [edi + 0x30]
push eax
mov eax, dword [ebx + 0x638]
push esi
push ecx
push edx
push str.SyncPlanFullWords__I64d__dth_retry_html:_s__s
push eax
call sub.NirvanaUtils.dll_public:_long_int___cdecl_GLog::WriteLogFormat_wchar_t_const__
add esp, 0x1c
lea ecx, [esp + 0x24]
mov byte [esp + 0x40], 0
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov eax, dword [edi + 0x34]
mov ecx, dword [edi + 0x30]
test eax, eax
ja 0x100b35e7
test ecx, ecx
jbe 0x100b35fa
push eax
push ecx
lea eax, [ebx + 0x6a8]
call fcn.10014b90
mov dword [eax], 0
mov ecx, dword [edi + 0x34]
mov edx, dword [edi + 0x30]
push esi
push ecx
push edx
mov ecx, ebx
call sym.NirvanaBiz.dll_protected:_void___thiscall_CSWordModel::SendGetPlanFullWordRequest_unsigned_long_long_unsigned___int64___int_
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4