Function at 0x100d24c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x158
mov eax, dword [0x10143964]
xor eax, esp
mov dword [esp + 0x154], eax
mov eax, dword [esp + 0x15c]
mov ecx, 0x1014b8f0
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x178]
mov dword [esp + 0x28], eax
xor eax, eax
push ebx
mov ebx, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x4c], eax
mov eax, 1
push ebp
mov dword [esp + 0x28], eax
mov dword [esp + 0x4c], eax
xor eax, eax
push esi
mov dword [esp + 0x28], eax
mov dword [esp + 0x38], eax
mov eax, 1
push edi
mov dword [esp + 0x40], ebx
lock xadd dword [ecx], eax
mov eax, dword [0x1014ba78]
mov ecx, dword [esp + 0x194]
mov edi, dword [esp + 0x190]
test eax, 0x200000
je 0x100d2572
push dword [ebx + 0x348]
push dword [ebx + 0x2f0]
push ecx
push edi
push 0x75
call fcn.1004d380
mov eax, dword [0x1014ba78]
add esp, 0x14
mov ecx, dword [ebx + 0x348]
mov dword [esp + 0x5c], ecx
test eax, 0x2000000
je 0x100d259f
push 0x119f
push 0x30000000
push 0
push dword [ebx + 0x3a0]
push 0x78
call fcn.1004d380
add esp, 0x14
mov eax, dword [esp + 0x17c]
lea esi, [ebx + 0x30]
mov ebp, dword [esp + 0x184]
mov dword [ebx + 0x3a0], 0
test dword [0x1014ba78], 0x4000
mov dword [esp + 0x24], eax
je 0x100d25df
push 0x2a
push ebp
push eax
push 0
push edi
push dword [esi + 0x2c0]
call fcn.1004d380
add esp, 0x18
test bp, bp
je 0x100d2638
test byte [0x1014ba78], 0x40
je 0x100d2638
xor eax, eax
xor edi, edi
cmp ax, bp
jae 0x100d2638
mov ebx, dword [esp + 0x44]
nop word [eax + eax]
lea eax, [esp + 0x18]
push eax
movzx eax, di
push 4
lea eax, [ebx + eax*4]
push eax
push dword [esp + 0x5c]
call fcn.100a7c60
add esp, 0x10
test eax, eax
je 0x100d2634
push 0x38
push 0
push 0
push dword [eax]
call fcn.1004d380
inc edi
add esp, 0x10
cmp di, bp
jb 0x100d2600
mov ebx, dword [esp + 0x40]
mov edi, dword [esi + 0x1b4]
test edi, edi
je 0x100d2653
mov eax, dword [esi + 0x1b8]
mov eax, dword [eax + 4]
mov ebp, dword [eax]
mov ecx, dword [ebp]
inc ecx
jmp 0x100d265b
mov ecx, dword [esi + 0x2c4]
xor ebp, ebp
mov eax, dword [esp + 0x190]
mov dword [esp + 0x14], ecx
cmp eax, ecx
jae 0x100d2680
mov edx, dword [esp + 0x190]
mov eax, ecx
sub eax, edx
cmp eax, 0x80000000
ja 0x100d26a1
mov eax, edx
cmp eax, ecx
jbe 0x100d2692
sub eax, ecx
cmp eax, 0x80000000
jb 0x100d269a
mov eax, dword [esp + 0x190]
cmp eax, ecx
jne 0x100d273d
mov edx, dword [esp + 0x190]
mov eax, dword [0x1014bb1c]
test eax, eax
je 0x100d26bb
push ecx
push edx
push str.NEW_cum_ack:_x_send_s:_x_is_smaller_or_equal_n
call eax
mov eax, dword [0x1014bb1c]
add esp, 0xc
test ebp, ebp
je 0x100d26d1
test eax, eax
je 0x100d26d1
push ebp
push dword [ebp]
push str.Got_send_s_from_tsn:_x__1_of_tp1:__p_n
call eax
add esp, 0xc
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x38]
push edi
push dword [esp + 0x194]
push str.Cum_ack__8.8x_greater_or_equal_than_TSN__8.8x
mov dword [eax], 1
lea eax, [esp + 0x70]
push 0x100
push eax
call fcn.1004b510
movzx ecx, byte [esp + 0x78]
xor edx, edx
test eax, eax
lea eax, [esp + 0x78]
push eax
cmovs ecx, edx
push 0xd
mov byte [esp + 0x80], cl
call fcn.100a62b0
mov ecx, dword [ebx + 4]
push 0
push 0
push eax
mov dword [ecx + 0x2c4], 0x3000001d
push ebx
push dword [ebx + 4]
call fcn.100a4f10
add esp, 0x30
jmp 0x100d3e05
mov ecx, dword [esi + 0x2c0]
cmp ecx, eax
jae 0x100d275d
sub eax, ecx
cmp eax, 0x80000000
ja 0x100d3e05
mov eax, dword [esp + 0x190]
cmp ecx, eax
jbe 0x100d276d
sub ecx, eax
cmp ecx, 0x80000000
jb 0x100d3e05
test edi, edi
jne 0x100d2837
cmp dword [esi + 0x1bc], edi
jne 0x100d2837
cmp dword [esi + 0x344], edi
jne 0x100d2837
test dword [0x1014ba78], 0x100000
mov edi, dword [esp + 0x194]
je 0x100d27b5
push edi
push 0
push 0
push dword [esi + 0x318]
push 0x26
call fcn.1004d380
add esp, 0x14
cmp dword [esi + 0x354], 0
mov dword [esi + 0x318], edi
je 0x100d27ce
mov dword [esi + 0x354], 0
mov eax, dword [ebx + 4]
xor edx, edx
mov ecx, edi
cmp edi, dword [eax + 0x150]
mov edi, dword [esi + 0x194]
cmovb ecx, edx
mov dword [esi + 0x318], ecx
test edi, edi
je 0x100d281e
nop
push 0x3000001e
push edi
push ebx
push dword [ebx + 4]
push 1
call fcn.100ade50
mov dword [edi + 0x164], 0
add esp, 0x14
mov dword [edi + 0x154], 0
mov edi, dword [edi]
test edi, edi
jne 0x100d27f0
mov dword [esi + 0x364], 0
mov dword [esi + 0x368], 0
jmp 0x100d3e05
mov ebp, dword [esi + 0x194]
test ebp, ebp
je 0x100d28e4
mov ecx, dword [ebp + 0xa0]
cmp eax, ecx
jae 0x100d2868
mov eax, ecx
sub eax, dword [esp + 0x190]
cmp eax, 0x80000000
ja 0x100d2873
mov eax, dword [esp + 0x190]
cmp eax, ecx
jbe 0x100d2880
sub eax, ecx
cmp eax, 0x80000000
jae 0x100d2880
mov eax, dword [esp + 0x190]
mov dword [ebp + 0xa0], eax
mov eax, dword [ebp + 0x158]
mov dword [ebp + 0x15c], eax
mov dword [ebp + 0x168], 0
mov dword [ebp + 0x16c], 0
mov byte [ebp + 0x1bc], 0
mov byte [ebp + 0x1b3], 0
mov eax, dword [ebx + 0x274]
test eax, eax
je 0x100d28bf
push ebp
push ebx
call eax
add esp, 8
mov eax, dword [esp + 0x190]
mov byte [ebp + 0x1b6], 0
mov dword [ebp + 0x174], eax
mov ebp, dword [ebp]
test ebp, ebp
jne 0x100d2845
mov edi, dword [esi + 0x1b4]
test edi, edi
je 0x100d2915
nop dword [eax + eax]
mov edx, dword [edi]
cmp eax, edx
jae 0x100d2abc
mov eax, edx
sub eax, dword [esp + 0x190]
cmp eax, 0x80000000
ja 0x100d2ad3
mov eax, dword [esp + 0x190]
mov ecx, dword [esp + 0x24]
mov ebp, eax
mov dword [esp + 0x1c], eax
mov dword [esi + 0x2bc], eax
mov ax, word [esp + 0x180]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x30], ebp
test cx, cx
jne 0x100d2943
test ax, ax
je 0x100d2d87
mov eax, dword [esi + 0x1b4]
xor edi, edi
movzx edx, cx
xor ebp, ebp
mov dword [esp + 0x48], eax
xor ecx, ecx
movzx eax, word [esp + 0x180]
add eax, edx
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x10], edi
mov dword [esp + 0x18], eax
je 0x100d2d08
nop word [eax + eax]
cmp ebp, edx
jne 0x100d2996
mov eax, dword [esi + 0x1b4]
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], eax
lea eax, [esp + 0x60]
push eax
push 4
push dword [esp + 0x178]
push dword [esp + 0x5c]
call fcn.100a7c60
add dword [esp + 0x180], 4
mov edi, eax
add esp, 0x10
test edi, edi
je 0x100d2cf2
movzx ecx, word [edi]
push ecx
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
mov dword [esp + 0x20], eax
movzx eax, word [edi + 2]
push eax
call dword [sym.imp.WS2_32.dll_ntohs]
movzx edi, ax
mov eax, dword [esp + 0x20]
cmp ax, di
ja 0x100d2a90
cmp ax, word [esp + 0x4c]
ja 0x100d29ff
mov eax, dword [esi + 0x1b4]
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0x190]
mov ecx, edi
mov eax, dword [esp + 0x1c]
add edx, ecx
cmp edx, eax
jae 0x100d2a28
sub eax, ecx
sub eax, dword [esp + 0x190]
cmp eax, 0x80000000
ja 0x100d2a3b
mov eax, dword [esp + 0x1c]
cmp edx, eax
jbe 0x100d2a3f
sub ecx, eax
add ecx, dword [esp + 0x190]
cmp ecx, 0x80000000
jae 0x100d2a3f
mov dword [esp + 0x1c], edx
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0x50]
push eax
xor eax, eax
cmp ebp, dword [esp + 0x50]
setge al
push eax
mov eax, dword [esp + 0x34]
push edi
push eax
push dword [esp + 0x1ac]
lea eax, [esp + 0x68]
push eax
push ebx
call fcn.100d60b0
mov ecx, dword [esp + 0x38]
add esp, 0x28
test eax, eax
mov eax, 1
cmovne ecx, eax
mov dword [esp + 0x10], ecx
mov ecx, edi
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0x40]
inc ebp
cmp ebp, dword [esp + 0x18]
jl 0x100d2980
mov eax, dword [esp + 0x3c]
mov ebp, dword [esp + 0x30]
mov ecx, dword [esp + 0x44]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x20], ebp
jmp 0x100d2d0c
jbe 0x100d2acd
sub eax, edx
cmp eax, 0x80000000
jae 0x100d290e
jmp 0x100d2ad3
jne 0x100d2915
mov eax, dword [edi + 0x50]
test eax, eax
je 0x100d2cdb
mov dword [esp + 0x34], 1
cmp eax, 0x271a
jge 0x100d2c91
mov ebp, dword [edi + 0x44]
movzx ecx, word [ebp + 0x1a8]
test ecx, 0x200
je 0x100d2b1c
cmp word [edi + 0x54], 2
jae 0x100d2b1c
and ecx, 0xfdff
mov word [ebp + 0x1a8], cx
mov eax, dword [edi + 0x50]
mov edx, dword [edi]
cmp eax, 4
jge 0x100d2bb5
test byte [0x1014ba78], 0x20
je 0x100d2b48
mov ecx, dword [edi + 0x44]
movzx eax, word [edi + 0x5a]
push edx
push ecx
push eax
push dword [ecx + 0x154]
push 0x6b
call fcn.1004d380
add esp, 0x14
mov esi, dword [edi + 0x44]
xor ebp, ebp
movzx edx, word [edi + 0x5a]
mov eax, dword [esi + 0x154]
mov ecx, eax
sub ecx, edx
cmp eax, edx
cmovb ecx, ebp
mov dword [esi + 0x154], ecx
movzx ecx, word [edi + 0x5a]
mov byte [edi + 0x66], 0
mov eax, dword [ebx + 0x394]
cmp eax, ecx
jb 0x100d2b93
sub eax, ecx
mov dword [ebx + 0x394], eax
mov eax, dword [ebx + 0x398]
test eax, eax
je 0x100d2b9f
dec eax
mov dword [ebx + 0x398], eax
jmp 0x100d2b9f
mov dword [ebx + 0x394], ebp
mov dword [ebx + 0x398], ebp
mov eax, dword [ebx + 0x26c]
test eax, eax
je 0x100d2bb2
push edi
push dword [edi + 0x44]
call eax
add esp, 8
lea esi, [ebx + 0x30]
mov ecx, dword [edi + 0x44]
movzx eax, word [edi + 0x58]
add dword [ecx + 0x168], eax
mov eax, dword [edi]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x3c], eax
mov eax, dword [edi + 0x44]
mov byte [eax + 0x1b6], 1
cmp word [edi + 0x54], 2
jae 0x100d2c31
mov ecx, dword [edi + 0x44]
movzx eax, word [edi + 0x58]
add dword [ecx + 0x16c], eax
cmp byte [edi + 0x62], 0
je 0x100d2c31
mov ebp, dword [esp + 0x30]
test ebp, ebp
je 0x100d2c1a
push 1
lea eax, [edi + 0x34]
push eax
push dword [edi + 0x44]
push esi
push ebx
call fcn.100a58a0
xor ecx, ecx
add esp, 0x14
test eax, eax
cmovne ebp, ecx
mov dword [esp + 0x30], ebp
mov dword [esp + 0x54], ebp
mov eax, dword [edi + 0x44]
cmp byte [eax + 0x1c1], 0
jne 0x100d2c2d
mov byte [eax + 0x1c1], 1
mov byte [edi + 0x62], 0
mov eax, dword [edi + 0x44]
mov byte [eax + 0x1bc], 1
mov eax, dword [edi + 0x44]
mov byte [eax + 0x1ba], 1
mov eax, dword [edi + 0x44]
mov byte [eax + 0x1bb], 1
test dword [0x1014ba78], 0x4000
je 0x100d2c78
push 0x2b
push 0
push 0
push dword [edi]
push dword [esp + 0x1a0]
push dword [esi + 0x2c0]
call fcn.1004d380
add esp, 0x18
test byte [0x1014ba78], 4
je 0x100d2c91
push 0x40
push dword [edi]
push dword [edi + 0x44]
push ebx
call fcn.1004d380
add esp, 0x10
cmp dword [edi + 0x50], 4
jne 0x100d2cb4
mov eax, dword [esi + 0x354]
test eax, eax
je 0x100d2caa
dec eax
mov dword [esi + 0x354], eax
jmp 0x100d2cb4
mov dword [esi + 0x354], 0
cmp byte [edi + 0x2b], 0
je 0x100d2ccb
mov ecx, dword [edi + 0x44]
movzx eax, word [edi + 0x5a]
sub dword [ecx + 0x158], eax
mov byte [edi + 0x2b], 0
cmp dword [edi + 0x50], 0x9c4a
je 0x100d2cdb
mov dword [edi + 0x50], 0x271a
mov edi, dword [edi + 0x48]
mov eax, dword [esp + 0x190]
test edi, edi
jne 0x100d28f0
jmp 0x100d2915
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x20], eax
jmp 0x100d2d2f
mov ebp, dword [esp + 0x20]
test byte [0x1014ba78], 0x40
je 0x100d2d2f
test ecx, ecx
je 0x100d2d2f
push 0x11
push dword [esp + 0x194]
push ebp
push dword [esp + 0x28]
call fcn.1004d380
add esp, 0x10
mov edx, dword [esp + 0x1c]
xor eax, eax
test edi, edi
mov edi, dword [esp + 0x14]
setne al
movzx ecx, ax
cmp edx, edi
jae 0x100d2d52
mov eax, edi
sub eax, edx
cmp eax, 0x80000000
ja 0x100d2d69
cmp edx, edi
jbe 0x100d2d5f
mov eax, edx
sub eax, edi
cmp eax, 0x80000000
jb 0x100d2d69
mov eax, ecx
mov dword [esp + 0x10], eax
cmp edx, edi
jne 0x100d2d87
mov eax, dword [0x1014bb1c]
test eax, eax
je 0x100d26d5
push edi
push edx
push str.Hopeless_peer__biggest_tsn_acked:_x_largest_seq:_x_n
call eax
add esp, 0xc
jmp 0x100d26d5
cmp byte [esi + 0x4ad], 0
jbe 0x100d2dc5
mov edi, dword [esi + 0x194]
test edi, edi
je 0x100d2df0
nop word [eax + eax]
cmp byte [edi + 0x1bc], 0
je 0x100d2dbd
push 0x3000001f
push edi
push ebx
push dword [ebx + 4]
push 1
call fcn.100ade50
add esp, 0x14
mov edi, dword [edi]
test edi, edi
jne 0x100d2da0
jmp 0x100d2df0
cmp dword [esp + 0x34], 0
je 0x100d2df0
mov edi, dword [esi + 0x194]
test edi, edi
je 0x100d2df0
push 0x30000020
push edi
push ebx
push dword [ebx + 4]
push 1
call fcn.100ade50
mov edi, dword [edi]
add esp, 0x14
test edi, edi
jne 0x100d2dd6
mov eax, dword [esp + 0x190]
or edx, 0xffffffff
mov edi, dword [esi + 0x1b4]
mov dword [esi + 0x2c0], eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov dword [esp + 0x14], eax
test edi, edi
je 0x100d30e6
jmp 0x100d2e23
or edx, 0xffffffff
mov eax, dword [edi + 0x48]
lea ebp, [edi + 0x48]
mov ecx, dword [edi]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x190]
cmp ecx, eax
jae 0x100d2e50
sub eax, ecx
cmp eax, 0x80000000
ja 0x100d30e6
mov eax, dword [esp + 0x190]
cmp ecx, eax
jbe 0x100d2e60
sub ecx, eax
cmp ecx, 0x80000000
jb 0x100d30e6
cmp dword [edi + 0x50], 0x9c4a
je 0x100d2e84
movzx eax, word [edi + 8]
lea ecx, [eax + eax*2]
shl ecx, 4
add ecx, dword [esi + 0x1ec]
mov eax, dword [ecx + 0x18]
test eax, eax
je 0x100d2e84
dec eax
mov dword [ecx + 0x18], eax
movzx eax, word [edi + 8]
lea ecx, [eax + eax*2]
mov eax, dword [esi + 0x1ec]
add ecx, ecx
cmp dword [eax + ecx*8 + 0x18], 0
jne 0x100d2eae
cmp byte [eax + ecx*8 + 0x2f], 3
jne 0x100d2eae
cmp dword [eax + ecx*8], 0
jne 0x100d2eae
mov byte [esi + 0x48a], 1
mov ecx, dword [ebp]
mov eax, dword [edi + 0x4c]
test ecx, ecx
je 0x100d2ebd
mov dword [ecx + 0x4c], eax
jmp 0x100d2ec3
mov dword [esi + 0x1b8], eax
mov ecx, dword [edi + 0x4c]
mov eax, dword [ebp]
mov dword [ecx], eax
mov ax, word [edi + 0x56]
and ax, 0xf
je 0x100d2eec
cmp ax, 0xf
je 0x100d2eec
mov eax, dword [esi + 0x33c]
test eax, eax
je 0x100d2eec
dec eax
mov dword [esi + 0x33c], eax
dec dword [esi + 0x34c]
cmp dword [edi + 0x3c], 0
je 0x100d2f7f
mov ecx, edx
lea eax, [esi + 0x43c]
lock xadd dword [eax], ecx
movzx eax, word [edi + 0x5a]
lea ecx, [esi + 0x328]
cmp dword [ecx], eax
jb 0x100d2f1e
neg eax
lock xadd dword [ecx], eax
jmp 0x100d2f24
mov dword [ecx], 0
mov ecx, dword [ebx]
test ecx, ecx
je 0x100d2f55
mov eax, dword [ebx + 4]
test dword [eax + 0xd0], 0x400002
je 0x100d2f55
movzx eax, word [edi + 0x5a]
add ecx, 0xdc
cmp dword [ecx], eax
jb 0x100d2f4f
neg eax
lock xadd dword [ecx], eax
jmp 0x100d2f55
mov dword [ecx], 0
push dword [edi + 0x3c]
call fcn.10092e80
add esp, 4
mov dword [edi + 0x3c], 0
cmp byte [esi + 0x48c], 0
je 0x100d2f7f
mov al, byte [edi + 0x56]
and al, 0xf
cmp al, 2
jne 0x100d2f7f
dec dword [esi + 0x350]
test dword [0x1014ba78], 0x4000
je 0x100d2fa8
push 0x47
push 0
push 0
push dword [edi]
push dword [esp + 0x1a0]
push dword [esi + 0x2c0]
call fcn.1004d380
add esp, 0x18
cmp byte [edi + 0x60], 0
je 0x100d2fc2
movzx eax, word [edi + 0x5e]
push 0
push eax
push ebx
call fcn.100c3380
add esp, 0xc
mov byte [edi + 0x60], 0
mov eax, dword [edi + 0x44]
test eax, eax
je 0x100d3073
or ecx, 0xffffffff
add eax, 0x150
lock xadd dword [eax], ecx
cmp ecx, 1
jne 0x100d306c
mov eax, dword [edi + 0x44]
mov ecx, dword [eax + 0x70]
test ecx, ecx
je 0x100d3019
mov eax, dword [ecx + 0xc]
lea edx, [eax - 1]
mov dword [ecx + 0xc], edx
cmp eax, 1
jg 0x100d3002
push ecx
call dword [esp + 0x18]
add esp, 4
mov eax, dword [edi + 0x44]
mov dword [eax + 0x70], 0
mov eax, dword [edi + 0x44]
mov dword [eax + 0x70], 0
mov eax, dword [edi + 0x44]
cmp byte [eax + 0x1b7], 0
je 0x100d3040
push dword [eax + 0x90]
call fcn.100b3b00
mov eax, dword [edi + 0x44]
add esp, 4
mov dword [eax + 0x90], 0
mov eax, dword [edi + 0x44]
mov byte [eax + 0x1b7], 0
mov ecx, 0xfffe
mov eax, dword [edi + 0x44]
and word [eax + 0x1a8], cx
push dword [edi + 0x44]
call dword [esp + 0x18]
add esp, 4
or eax, 0xffffffff
mov ecx, 0x1014b634
lock xadd dword [ecx], eax
mov dword [edi + 0x44], 0
movzx eax, word [ebx + 0x49e]
cmp eax, dword [0x1014ba08]
ja 0x100d30c0
mov eax, dword [0x1014b650]
cmp eax, dword [0x1014ba04]
ja 0x100d30c0
mov dword [ebp], 0
mov ecx, 0x1014b650
mov eax, dword [ebx + 0x1d0]
mov dword [edi + 0x4c], eax
mov eax, dword [ebx + 0x1d0]
mov dword [eax], edi
mov eax, 1
inc word [ebx + 0x49e]
mov dword [ebx + 0x1d0], ebp
jmp 0x100d30d0
push edi
call dword [esp + 0x18]
add esp, 4
mov ecx, 0x1014b638
or eax, 0xffffffff
lock xadd dword [ecx], eax
mov eax, dword [esp + 0x18]
mov edi, eax
inc dword [esp + 0x10]
test eax, eax
jne 0x100d2e20
cmp dword [esi + 0x1b4], 0
jne 0x100d3117
mov ecx, dword [esi + 0x364]
test ecx, ecx
je 0x100d3117
mov eax, dword [0x1014bb1c]
test eax, eax
je 0x100d310d
push ecx
push str.Warning_flight_size_incorrect_should_be_0_is__d_n
call eax
add esp, 8
mov dword [esi + 0x364], 0
mov eax, dword [ebx + 4]
mov dword [esp + 0x18], eax
cmp dword [eax + 0x2dc], 0
je 0x100d31bd
mov ecx, dword [ebx]
test ecx, ecx
je 0x100d3272
mov ebp, dword [ebx + 0x46c]
shl ebp, 4
sub ebp, dword [ebx + 0x360]
sub ebp, dword [ebx + 0x358]
add ebp, dword [ecx + 0xe0]
cmp dword [eax + 0x2e4], 0
je 0x100d3272
mov eax, dword [eax + 0x2e0]
test eax, eax
je 0x100d3173
cmp ebp, eax
jae 0x100d3173
test eax, eax
jne 0x100d3272
lea edi, [ebx + 0x468]
mov eax, 1
lock xadd dword [edi], eax
lea esi, [ebx + 0x584]
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x18]
push dword [eax + 0x2d8]
mov eax, dword [eax + 0x2e4]
push ebp
push dword [ebx]
call eax
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
or eax, 0xffffffff
lock xadd dword [edi], eax
lea esi, [ebx + 0x30]
jmp 0x100d3272
mov ebp, dword [esp + 0x10]
test bp, bp
je 0x100d3257
mov eax, dword [ebx]
test eax, eax
je 0x100d3257
add eax, 0xac
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
test dword [0x1014ba78], 0x40000
je 0x100d31fb
push 0x4a
movzx eax, bp
push eax
push ebx
call fcn.1004d380
add esp, 0xc
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
test dword [eax + 0xd0], 0x800000
je 0x100d3228
lea eax, [ecx + 0xac]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebx + 4]
or dword [eax + 0xd0], 0x1000000
jmp 0x100d3272
mov eax, 0x1bc
test word [ecx + 0xf8], ax
je 0x100d3248
lea eax, [ecx + 0xa8]
push eax
push ecx
call fcn.100854c0
add esp, 8
jmp 0x100d3272
lea eax, [ecx + 0xac]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x100d3272
test dword [0x1014ba78], 0x40000
je 0x100d3272
push 0x4c
movzx eax, bp
push eax
push ebx
call fcn.1004d380
add esp, 0xc
cmp byte [esi + 0x49e], 0
je 0x100d32b8
cmp dword [esp + 0x34], 0
je 0x100d32b8
mov ecx, dword [esi + 0x2c0]
mov edx, dword [esi + 0x2e4]
cmp ecx, edx
jae 0x100d329f
mov eax, edx
sub eax, ecx
cmp eax, 0x80000000
ja 0x100d32b0
cmp ecx, edx
jbe 0x100d32ac
mov eax, ecx
sub eax, edx
cmp eax, 0x80000000
jb 0x100d32b0
cmp ecx, edx
jne 0x100d32b8
mov dword [esp + 0x28], 1
cmp word [esp + 0x24], 0
je 0x100d33ed
mov edi, dword [esi + 0x1b4]
test edi, edi
je 0x100d33db
mov ebp, dword [esp + 0x190]
nop dword [eax]
mov edx, dword [edi]
cmp edx, ebp
jae 0x100d32f6
mov eax, ebp
sub eax, edx
cmp eax, 0x80000000
ja 0x100d330b
jmp 0x100d33ca
jbe 0x100d33ca
mov eax, edx
sub eax, ebp
cmp eax, 0x80000000
jae 0x100d33ca
mov ecx, dword [esp + 0x1c]
cmp edx, ecx
jae 0x100d3324
mov eax, ecx
sub eax, edx
cmp eax, 0x80000000
ja 0x100d33db
jmp 0x100d3335
jbe 0x100d3335
mov eax, edx
sub eax, ecx
cmp eax, 0x80000000
jb 0x100d33db
mov eax, dword [edi + 0x50]
cmp eax, 0x271a
jne 0x100d33bc
mov dword [edi + 0x50], 1
mov byte [edi + 0x2b], 1
test byte [0x1014ba78], 0x20
je 0x100d336d
mov ecx, dword [edi + 0x44]
movzx eax, word [edi + 0x5a]
push edx
push ecx
push eax
push dword [ecx + 0x154]
push 0x72
call fcn.1004d380
add esp, 0x14
mov ecx, dword [edi + 0x44]
movzx eax, word [edi + 0x5a]
add dword [ecx + 0x154], eax
inc dword [ebx + 0x398]
movzx eax, word [edi + 0x5a]
add dword [ebx + 0x394], eax
mov ecx, dword [edi + 0x44]
movzx eax, word [edi + 0x5a]
add dword [ecx + 0x158], eax
test dword [0x1014ba78], 0x4000
je 0x100d33ca
push 0x2c
push 0
push 0
push dword [edi]
push ebp
push dword [esi + 0x2c0]
call fcn.1004d380
add esp, 0x18
jmp 0x100d33ca
cmp eax, 0x4e2a
jne 0x100d33ca
mov dword [edi + 0x50], 0x271a
cmp dword [edi + 0x50], 0
je 0x100d33db
mov edi, dword [edi + 0x48]
test edi, edi
jne 0x100d32e0
xor ebp, ebp
mov byte [esi + 0x4a6], 1
mov dword [esp + 0x10], ebp
jmp 0x100d348e
xor ebp, ebp
cmp byte [esi + 0x4a6], 0
mov dword [esp + 0x10], ebp
je 0x100d348e
mov edi, dword [esi + 0x1b4]
test edi, edi
je 0x100d347a
nop word [eax + eax]
cmp dword [edi + 0x50], 0x271a
jne 0x100d3473
mov dword [edi + 0x50], 1
test byte [0x1014ba78], 0x20
je 0x100d3444
push dword [edi]
mov ecx, dword [edi + 0x44]
movzx eax, word [edi + 0x5a]
push ecx
push eax
push dword [ecx + 0x154]
push 0x72
call fcn.1004d380
add esp, 0x14
mov ecx, dword [edi + 0x44]
movzx eax, word [edi + 0x5a]
add dword [ecx + 0x154], eax
inc dword [ebx + 0x398]
movzx eax, word [edi + 0x5a]
add dword [ebx + 0x394], eax
mov ecx, dword [edi + 0x44]
movzx eax, word [edi + 0x5a]
mov byte [edi + 0x2b], 1
add dword [ecx + 0x158], eax
inc ebp
mov edi, dword [edi + 0x48]
test edi, edi
jne 0x100d3410
xor ecx, ecx
mov byte [esi + 0x4a6], 0
test ebp, ebp
setne cl
mov dword [esp + 0x10], ecx
mov ebp, ecx
cmp word [esp + 0x180], 0
seta al
cmp dword [esp + 0x198], 0
mov byte [esi + 0x4a7], al
jne 0x100d368b
mov edi, dword [esi + 0x194]
test edi, edi
je 0x100d3672
or ebp, 0xffffffff
nop
cmp dword [edi + 0x16c], 0
jbe 0x100d3664
xor eax, eax
mov word [edi + 0x1ae], ax
movzx eax, word [edi + 0x1a8]
test al, 1
jne 0x100d34fb
push 0
push edi
push 0
or eax, 1
push ebx
push 4
mov word [edi + 0x1a8], ax
call fcn.100ae250
add esp, 0x14
cmp edi, dword [ebx + 0x224]
jne 0x100d35d4
mov eax, dword [ebx + 0x228]
test eax, eax
je 0x100d35d4
mov ecx, ebp
add eax, 0x150
lock xadd dword [eax], ecx
cmp ecx, 1
jne 0x100d35ca
mov eax, dword [ebx + 0x228]
mov ecx, dword [eax + 0x70]
test ecx, ecx
je 0x100d356c
mov eax, dword [ecx + 0xc]
lea edx, [eax - 1]
mov dword [ecx + 0xc], edx
cmp eax, 1
jg 0x100d354c
push ecx
call dword [esp + 0x18]
add esp, 4
mov eax, dword [ebx + 0x228]
mov dword [eax + 0x70], 0
mov eax, dword [ebx + 0x228]
mov dword [eax + 0x70], 0
mov eax, dword [ebx + 0x228]
cmp byte [eax + 0x1b7], 0
je 0x100d3599
push dword [eax + 0x90]
call fcn.100b3b00
mov eax, dword [ebx + 0x228]
add esp, 4
mov dword [eax + 0x90], 0
mov eax, dword [ebx + 0x228]
mov byte [eax + 0x1b7], 0
mov ecx, 0xfffe
mov eax, dword [ebx + 0x228]
and word [eax + 0x1a8], cx
push dword [ebx + 0x228]
call dword [esp + 0x18]
add esp, 4
mov eax, ebp
mov ecx, 0x1014b634
lock xadd dword [ecx], eax
mov dword [ebx + 0x228], 0
movzx eax, word [edi + 0x1a8]
test eax, 0x800
je 0x100d3622
push 0x30000021
push edi
and eax, 0xf7ff
push ebx
mov word [edi + 0x1a8], ax
push dword [ebx + 4]
push 5
call fcn.100ade50
push edi
push ebx
push dword [ebx + 4]
push 5
call fcn.100ad900
mov eax, dword [esi + 0x220]
push edi
push ebx
call eax
add esp, 0x2c
mov dword [edi + 0x168], 0
mov ecx, dword [edi + 0xac]
mov eax, dword [edi + 0xb0]
sar ecx, 3
add eax, ecx
mov dword [edi + 0xc0], eax
mov edx, dword [ebx + 0x430]
cmp eax, edx
jae 0x100d364b
mov dword [edi + 0xc0], edx
jmp 0x100d364d
mov edx, eax
mov eax, dword [ebx + 0x434]
cmp edx, eax
mov ecx, dword [edi + 0xc0]
cmova ecx, eax
mov dword [edi + 0xc0], ecx
mov edi, dword [edi]
test edi, edi
jne 0x100d34c0
mov ebp, dword [esp + 0x10]
push dword [esp + 0x28]
mov eax, dword [esi + 0x21c]
push ebp
mov ebp, dword [esp + 0x3c]
push ebp
push esi
push ebx
call eax
add esp, 0x14
jmp 0x100d368f
mov ebp, dword [esp + 0x34]
cmp dword [esi + 0x1b4], 0
jne 0x100d36e4
mov edi, dword [esi + 0x194]
test edi, edi
je 0x100d36d0
push 0x30000022
push edi
push ebx
push dword [ebx + 4]
push 1
call fcn.100ade50
mov dword [edi + 0x154], 0
add esp, 0x14
mov dword [edi + 0x164], 0
mov edi, dword [edi]
test edi, edi
jne 0x100d36a2
mov dword [esi + 0x364], 0
mov dword [esi + 0x368], 0
cmp dword [esi + 0x1bc], 0
jne 0x100d389e
cmp dword [esi + 0x1b4], 0
jne 0x100d389e
test dword [0x1014ba78], 0x100000
je 0x100d3726
mov edi, dword [esp + 0x194]
push edi
push 0
push 0
push dword [esi + 0x318]
push 0x26
call fcn.1004d380
add esp, 0x14
mov edx, dword [esp + 0x194]
xor edi, edi
mov dword [esi + 0x318], edx
mov ecx, edx
mov eax, dword [ebx + 4]
cmp edx, dword [eax + 0x150]
cmovb ecx, edi
cmp dword [esi + 0x344], 1
mov dword [esi + 0x318], ecx
jne 0x100d377d
mov eax, dword [esi]
test al, al
js 0x100d375e
and al, 0x7f
cmp al, 0x20
jne 0x100d377d
mov eax, dword [esi + 0x280]
push esi
push ebx
call eax
add esp, 8
test al, al
je 0x100d377d
push 0x400
push ebx
call fcn.100a52a0
add esp, 8
mov eax, dword [esi]
mov ecx, eax
mov edx, eax
and ecx, 0x7f
and edx, 0x80
jne 0x100d3797
cmp ecx, 0x20
jne 0x100d389e
mov edi, dword [esi + 0x344]
cmp edi, 1
jne 0x100d37de
test eax, 0x400
je 0x100d37de
mov eax, dword [esp + 0x38]
push 0x101008a0
push 0xc
mov dword [eax], edi
call fcn.100a62b0
mov ecx, dword [ebx + 4]
push 0
push 0
push eax
mov dword [ecx + 0x2c4], 0x30000023
push ebx
push dword [ebx + 4]
call fcn.100a4f10
add esp, 0x1c
jmp 0x100d3e05
test edx, edx
je 0x100d3848
test edi, edi
jne 0x100d3848
and eax, 0x7f
cmp eax, 8
je 0x100d37f3
cmp eax, 0x20
jne 0x100d37ff
mov ecx, 0x1014b71c
or eax, 0xffffffff
lock xadd dword [ecx], eax
push 0x10
push ebx
call fcn.100aa2b0
push ebx
call fcn.100ac4d0
mov edi, dword [esi + 0x1f8]
add esp, 0xc
test edi, edi
jne 0x100d3820
mov edi, dword [esi + 0x1f4]
push edi
push ebx
call fcn.100a2b40
push edi
push ebx
push dword [ebx + 4]
push 4
call fcn.100ad900
push 0
push ebx
push dword [ebx + 4]
push 0xb
call fcn.100ad900
add esp, 0x28
jmp 0x100d3e05
cmp ecx, 0x20
jne 0x100d389e
cmp dword [esi + 0x344], 0
jne 0x100d389e
mov ecx, 0x1014b71c
or eax, 0xffffffff
lock xadd dword [ecx], eax
push 0x40
push ebx
call fcn.100aa2b0
push ebx
call fcn.100ac4d0
mov edi, dword [esi + 0x1f8]
add esp, 0xc
test edi, edi
jne 0x100d3883
mov edi, dword [esi + 0x1f4]
push edi
push ebx
call fcn.100a2de0
push edi
push ebx
push dword [ebx + 4]
push 9
call fcn.100ad900
add esp, 0x18
jmp 0x100d3e05
mov eax, dword [esi + 0x194]
test eax, eax
je 0x100d38c0
nop dword [eax + eax]
mov dword [eax + 0x168], 0
mov eax, dword [eax]
test eax, eax
jne 0x100d38b0
cmp byte [esi + 0x4ad], 0
mov eax, dword [esp + 0x2c]
jbe 0x100d38e6
cmp dword [0x1014ba50], 0
je 0x100d38e6
cmp byte [esp + 0x18c], 0
cmovge eax, dword [esp + 0x190]
cmp word [esp + 0x24], 0
ja 0x100d38f9
cmp word [esp + 0x180], 0
jbe 0x100d390d
push ebp
push eax
push dword [esp + 0x28]
push dword [esp + 0x28]
push esi
push ebx
call fcn.100d77f0
add esp, 0x18
mov eax, dword [esi + 0x224]
push esi
push ebx
call eax
add esp, 8
cmp dword [esp + 0x28], 0
je 0x100d3928
mov byte [esi + 0x49e], 0
cmp byte [esi + 0x49f], 0
je 0x100d3966
mov ecx, dword [esi + 0x2c0]
mov edx, dword [esi + 0x2e8]
cmp ecx, edx
jae 0x100d394e
mov eax, edx
sub eax, ecx
cmp eax, 0x80000000
ja 0x100d395f
cmp ecx, edx
jbe 0x100d395b
mov eax, ecx
sub eax, edx
cmp eax, 0x80000000
jb 0x100d395f
cmp ecx, edx
jne 0x100d3966
mov byte [esi + 0x49f], 0
mov eax, dword [esi + 0x194]
test eax, eax
je 0x100d3986
cmp byte [eax + 0x1b3], 0
je 0x100d3980
mov byte [eax + 0x1b2], 0
mov eax, dword [eax]
test eax, eax
jne 0x100d3970
test dword [0x1014ba78], 0x100000
je 0x100d39be
mov eax, dword [esi + 0x368]
imul eax, dword [0x1014b9e0]
mov edi, dword [esp + 0x194]
push edi
push eax
push dword [esi + 0x364]
push dword [esi + 0x318]
push 0x26
call fcn.1004d380
add esp, 0x14
mov edx, dword [esi + 0x368]
imul edx, dword [0x1014b9e0]
mov edi, dword [esi + 0x364]
mov ecx, dword [esp + 0x194]
lea eax, [edx + edi]
cmp ecx, eax
jbe 0x100d39e5
sub ecx, edx
sub ecx, edi
jmp 0x100d39e7
xor ecx, ecx
mov dword [esi + 0x318], ecx
mov eax, dword [ebx + 4]
cmp ecx, dword [eax + 0x150]
jae 0x100d3a06
mov dword [esi + 0x318], 0
xor ecx, ecx
jmp 0x100d3a0c
mov ecx, dword [ebx + 0x348]
mov dword [esp + 0x24], ecx
xor eax, eax
mov dword [esp + 0x38], eax
nop word [eax + eax]
mov ebp, dword [esi + 0x194]
xor edi, edi
mov dword [esp + 0x28], edi
test ebp, ebp
je 0x100d3bf3
cmp ecx, dword [esp + 0x5c]
jbe 0x100d3b40
cmp byte [ebp + 0x1bd], 0
je 0x100d3b40
mov esi, dword [esi + 0x1b4]
mov dword [esp + 0x58], 1
test esi, esi
je 0x100d3b3d
cmp byte [esi + 0x66], 0
jne 0x100d3a73
mov esi, dword [esi + 0x48]
test esi, esi
jne 0x100d3a61
jmp 0x100d3b3d
cmp dword [esi + 0x50], 0x271a
mov byte [esi + 0x66], 0
jge 0x100d3b79
cmp dword [esi + 0x3c], 0
je 0x100d3b79
mov eax, dword [ebx + 0x26c]
test eax, eax
je 0x100d3aa1
push esi
push dword [esi + 0x44]
call eax
add esp, 8
mov edi, dword [esi + 0x44]
movzx edx, word [esi + 0x5a]
mov dword [esp + 0x18], 0
mov eax, dword [edi + 0x154]
mov ecx, eax
sub ecx, edx
cmp eax, edx
cmovb ecx, dword [esp + 0x18]
mov dword [edi + 0x154], ecx
movzx ecx, word [esi + 0x5a]
mov byte [esi + 0x66], 0
mov eax, dword [ebx + 0x394]
cmp eax, ecx
jb 0x100d3af4
sub eax, ecx
mov dword [ebx + 0x394], eax
mov eax, dword [ebx + 0x398]
test eax, eax
je 0x100d3b08
dec eax
mov dword [ebx + 0x398], eax
jmp 0x100d3b08
mov dword [ebx + 0x394], 0
mov dword [ebx + 0x398], 0
mov dword [esi + 0x50], 4
inc dword [ebx + 0x384]
test byte [0x1014ba78], 0x20
je 0x100d3b39
push dword [esi]
mov ecx, dword [esi + 0x44]
movzx eax, word [esi + 0x5a]
push ecx
push eax
push dword [ecx + 0x154]
push 0x71
call fcn.1004d380
add esp, 0x14
mov edi, dword [esp + 0x28]
lea esi, [ebx + 0x30]
cmp dword [ebp + 0x154], 0
mov eax, dword [ebp + 0xd8]
je 0x100d3b9f
inc edi
mov dword [esp + 0x28], edi
test al, 4
jne 0x100d3b67
push ebp
push ebx
push dword [ebx + 4]
push 1
call fcn.100ad900
add esp, 0x10
cmp byte [ebp + 0x1bd], 0
je 0x100d3bd8
mov byte [ebp + 0x1bd], 0
jmp 0x100d3bd8
mov eax, dword [esi + 0x44]
test eax, eax
je 0x100d3b88
mov ecx, dword [eax + 0x154]
jmp 0x100d3b8a
xor ecx, ecx
push dword [esi]
push eax
movzx eax, word [esi + 0x5a]
push eax
push ecx
push 0x7a
call fcn.1004d380
add esp, 0x14
jmp 0x100d3b3d
and eax, 4
cmp byte [ebp + 0x1bd], 0
je 0x100d3bc0
test eax, eax
jne 0x100d3bd8
push ebp
push ebx
push dword [ebx + 4]
push 1
call fcn.100ad900
add esp, 0x10
jmp 0x100d3bd8
test eax, eax
je 0x100d3bd8
push 0x30000024
push ebp
push ebx
push dword [ebx + 4]
push 1
call fcn.100ade50
add esp, 0x14
mov ebp, dword [ebp]
mov ecx, dword [esp + 0x24]
test ebp, ebp
jne 0x100d3a34
test edi, edi
jne 0x100d3cba
mov eax, dword [esp + 0x38]
cmp dword [esi + 0x1b4], 0
je 0x100d3cba
cmp dword [esi + 0x354], 0
jne 0x100d3cba
cmp dword [esp + 0x58], 0
jne 0x100d3cba
test eax, eax
jne 0x100d3cba
push esi
call fcn.100d16c0
add esp, 4
test eax, eax
je 0x100d3cac
mov eax, dword [esi + 0x194]
test eax, eax
je 0x100d3c50
nop word [eax + eax]
mov dword [eax + 0x154], 0
mov eax, dword [eax]
test eax, eax
jne 0x100d3c40
mov edx, dword [esi + 0x1b4]
mov dword [esi + 0x364], 0
mov dword [esi + 0x368], 0
mov dword [esi + 0x354], 0
test edx, edx
je 0x100d3cac
cmp dword [edx + 0x50], 4
jge 0x100d3c9d
mov ecx, dword [edx + 0x44]
movzx eax, word [edx + 0x5a]
add dword [ecx + 0x154], eax
inc dword [ebx + 0x398]
movzx eax, word [edx + 0x5a]
add dword [ebx + 0x394], eax
jmp 0x100d3ca5
jne 0x100d3ca5
inc dword [esi + 0x354]
mov edx, dword [edx + 0x48]
test edx, edx
jne 0x100d3c78
mov ecx, dword [esp + 0x24]
mov eax, 1
jmp 0x100d3a12
mov ecx, dword [esi + 0x2cc]
mov edx, dword [esp + 0x190]
cmp edx, ecx
jae 0x100d3cd6
mov eax, ecx
sub eax, edx
cmp eax, 0x80000000
ja 0x100d3ce7
mov ebp, ecx
cmp edx, ecx
jbe 0x100d3cef
mov eax, edx
sub eax, ecx
cmp eax, 0x80000000
jae 0x100d3cef
mov dword [esi + 0x2cc], edx
mov ebp, edx
cmp byte [esi + 0x48c], 0
je 0x100d3dd5
cmp dword [esi + 0x33c], 0
jbe 0x100d3dd5
push esi
push ebx
call fcn.100d7f30
mov edx, dword [esi + 0x2cc]
mov edi, eax
mov eax, dword [esp + 0x198]
add esp, 8
cmp edx, eax
jae 0x100d3d34
mov ecx, eax
sub ecx, edx
cmp ecx, 0x80000000
ja 0x100d3d4d
cmp edx, eax
jbe 0x100d3d98
mov eax, edx
sub eax, dword [esp + 0x190]
cmp eax, 0x80000000
jae 0x100d3d98
mov eax, dword [esp + 0x190]
test dword [0x1014ba78], 0x10000000
je 0x100d3d71
push ebp
push edx
push eax
push 0xee
push 0x7b
call fcn.1004d380
mov edx, dword [ebx + 0x2fc]
add esp, 0x14
cmp edx, ebp
jae 0x100d3d82
mov eax, ebp
sub eax, edx
cmp eax, 0x80000000
ja 0x100d3d8e
cmp edx, ebp
jbe 0x100d3db0
sub edx, ebp
cmp edx, 0x80000000
jae 0x100d3db0
push esi
push ebx
call fcn.100a4950
add esp, 8
test edi, edi
je 0x100d3dd5
nop dword [eax]
mov eax, dword [edi + 0x44]
test eax, eax
jne 0x100d3dc6
mov edi, dword [edi + 0x48]
test edi, edi
jne 0x100d3da0
jmp 0x100d3dd5
test edi, edi
je 0x100d3dd5
cmp byte [edi + 0x2c], 3
jb 0x100d3da0
push esi
push ebx
call fcn.100a4950
add esp, 8
jmp 0x100d3da0
push eax
push ebx
push dword [ebx + 4]
push 1
call fcn.100ad900
add esp, 0x10
test dword [0x1014ba78], 0x8000
je 0x100d3e05
push dword [ebx + 0x358]
mov edi, dword [esp + 0x198]
push dword [ebx + 0x394]
push dword [ebx + 0x348]
push edi
push 0x57
call fcn.1004d380
add esp, 0x14
mov ecx, dword [esp + 0x164]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.100f06e3
add esp, 0x158
ret